last executing test programs:

21m12.574392853s ago: executing program 32 (id=653):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000001400)={0x9, 0xc, 0xffffffdf, 0x10001, &(0x7f00000013c0)=[{}]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000001c0)='g', 0x50401, &(0x7f00000000c0)={@align=0xaee9, {0x9, 0x3, 0x401, 0x1f62}}, 0x100, &(0x7f0000000100), &(0x7f0000000140)=0x6})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x4, 0x9, "93f60600"})
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES64=r2], 0xbfb3)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000280)={0x0, 0xffeffffd, 0x3, 0x0, 0xff, '\x00\x00\x00\x00\x00\x00\f\x00'})
r4 = syz_open_pts(r3, 0x101000)
r5 = dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17)

20m31.221891811s ago: executing program 33 (id=730):
keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x3}) (fail_nth: 6)

19m41.615258471s ago: executing program 34 (id=933):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_macvtap\x00', &(0x7f00000004c0)=@ethtool_modinfo={0x42, 0x6, 0x5}})
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003e8149340da040d391eaf010203010902240001e4025006090463000210a5e10e090501000800810ab0fa040904ff030804070bebe2358351a121e6189236ed1300eba29d77efa40adbcfe6bff0a99d6d8dc5ed87340e920ade22f382e1664e962b84102da26841adcdfc5b7c881ca6450c6a89e54ed5b19c45d5c27cac9b0458370059b69a77c8e932f37ebddfcac14e1edd5981115e762047aa082bcdc11f8429ad61477dd5d03b71ecc1a29c7131"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
fdatasync(0xffffffffffffffff)
syz_usb_disconnect(r1)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c)
linkat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000039c0))
sendmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002500)}, {&(0x7f0000002580)="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", 0x720}, {&(0x7f0000003580)="63637f1ec537fa8e83ffae93ee0f8bd50b04884ed09ed1d37204e73a4cc9cb66469cce66b3e3adcf8dff226f5fe3d9ff07533720b7", 0x35}, {0x0}, {0x0}], 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128}}, {{&(0x7f00000056c0)=@x25, 0x80, 0x0}}], 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000001", @ANYRES16=r2, @ANYBLOB="00012abd7000fedbdf25100000000800060008000000080009000efdf536080006006900000008000700040000000800090000010000"], 0x3c}}, 0x4000000)

15m15.424546591s ago: executing program 35 (id=1944):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000180), 0xffffffff, 0x82100)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x42881, 0x0)
read(r1, &(0x7f0000000380)=""/31, 0x1f)
r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f00000002c0)=[{r2, 0x4610}, {r0, 0x1}, {r0, 0x5150}], 0x3, &(0x7f00000003c0)={r3, r4+10000000}, &(0x7f0000000400)={[0x3d7f5172]}, 0x8)
r5 = socket$kcm(0xa, 0x3, 0x3a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100", 0x2c}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x40840)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x4)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
flock(0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f0000001100010000000000000000000100000a4c64b249d23b61c385e8e6f9b7a4c9775d15572e94a312262fd79b2ab3c76b9ca6e9443caf6ab4decd2239a40dfbe9923daff750fec58c2f3e7ef846f75a407d097f6327dfeaca977348a587a19e1893d2bcad6c80919c2872336031bc300f5b66221a43235423ddcad3e10000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
syz_open_dev$dvb_dvr(&(0x7f0000000180), 0xffffffff, 0x82100) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x42881, 0x0) (async)
read(r1, &(0x7f0000000380)=""/31, 0x1f) (async)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async)
clock_gettime(0x0, &(0x7f0000000300)) (async)
ppoll(&(0x7f00000002c0)=[{r2, 0x4610}, {r0, 0x1}, {r0, 0x5150}], 0x3, &(0x7f00000003c0)={r3, r4+10000000}, &(0x7f0000000400)={[0x3d7f5172]}, 0x8) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100", 0x2c}], 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x40840) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) (async)
ioctl$FBIOBLANK(r7, 0x4611, 0x4) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
flock(0xffffffffffffffff, 0x2) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f0000001100010000000000000000000100000a4c64b249d23b61c385e8e6f9b7a4c9775d15572e94a312262fd79b2ab3c76b9ca6e9443caf6ab4decd2239a40dfbe9923daff750fec58c2f3e7ef846f75a407d097f6327dfeaca977348a587a19e1893d2bcad6c80919c2872336031bc300f5b66221a43235423ddcad3e10000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async)

15m12.363110191s ago: executing program 36 (id=1903):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write(r0, &(0x7f0000000500)="4d2e95a079d76acb4f95f7", 0xb)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0xfffffffffffffffe)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x880)
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xf, 0x5, "aa2e5a6782"}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0})

12m20.36128909s ago: executing program 37 (id=2554):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000804000000feafd1"], 0x0, 0x0, 0x0, 0x0})

9m27.617943932s ago: executing program 6 (id=3030):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
close(r0)

9m27.215604685s ago: executing program 6 (id=3034):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000001e40)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000d40)="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", 0x800}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="6f85ac9e228bec", 0x7}], 0x3, &(0x7f0000001e00)="dea04aeda46bda655f60a03bdc26be5a16", 0x11, 0x4040}, 0x40)

9m27.215389228s ago: executing program 6 (id=3035):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x8, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @random="b0000700", @empty, @empty, @empty]})

9m26.774160999s ago: executing program 6 (id=3041):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x2})

9m26.615468464s ago: executing program 6 (id=3042):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

9m26.526885473s ago: executing program 6 (id=3044):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

9m26.435464824s ago: executing program 7 (id=3046):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r3)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x71, 0x100005, 0xe8e8, 0xf}]})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0)

9m25.911401669s ago: executing program 7 (id=3047):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x320, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x80000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xed2836d35470158f, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x40000)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4011)
setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x4008030)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001)
readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, 0x0)

9m24.607434578s ago: executing program 7 (id=3048):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

9m24.358218231s ago: executing program 7 (id=3049):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0x100, 0x641})

9m21.167736344s ago: executing program 7 (id=3050):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)

9m21.034423273s ago: executing program 7 (id=3051):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8042)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {0x401, 0x40, 0xe39, 0x200}, 0x32, [0xe, 0x8, 0x6, 0x1, 0x1, 0x200, 0xf121, 0x3, 0x8, 0x5, 0x5, 0xf8, 0xfffffffe, 0x4, 0x1, 0x6, 0x969, 0x7, 0x5, 0xd33, 0x80, 0x39c7, 0xfffffffc, 0x72, 0x8, 0xfffffff7, 0xe66, 0xfffffffe, 0x8, 0x638b, 0x1, 0x7fffffff, 0x1, 0x4, 0x100, 0x2, 0x4, 0x5867, 0x8, 0x101, 0x5fba0a9c, 0x9, 0x8, 0xfff, 0x9, 0xfff, 0x4, 0x0, 0x0, 0x6, 0x2, 0x7f, 0x1, 0x7, 0xb, 0x8, 0x1, 0xe8b, 0x3, 0x80000001, 0x422, 0x3, 0x1, 0x5], [0x8, 0x3, 0x6, 0x9, 0xfffffffd, 0xfc, 0x7, 0x9, 0x5, 0x0, 0x1, 0x7, 0x1, 0xe, 0x6, 0xffffff80, 0x401, 0x4, 0x8, 0x10, 0xed0, 0x81, 0x7ff, 0x3, 0xfffffffd, 0x3, 0x8, 0xf0000000, 0x0, 0x1ff, 0x83, 0x0, 0x2e3, 0xe1b9, 0x3, 0x1, 0x3, 0x5, 0xc, 0x5, 0x80000000, 0x5, 0x0, 0x3, 0x5a8, 0xb696, 0x0, 0x5, 0x1, 0x6, 0x8, 0x3, 0x9, 0x8, 0x3, 0x5, 0x85cc, 0x8, 0x1, 0x5, 0x13a4, 0x7fffffff, 0x8, 0x7ff], [0xffffffff, 0x9, 0x2, 0x7, 0x97, 0x7fffffff, 0x0, 0x0, 0x5, 0xa6b6, 0x81, 0x3, 0x9, 0x7b, 0x8, 0x4, 0x3, 0x5, 0x6, 0x2, 0x7, 0x5, 0x0, 0x2, 0x9, 0x2, 0x8001, 0x4, 0x5, 0x6, 0x2, 0x80, 0x8, 0x70000, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8000, 0x1ff, 0x1c740, 0x3c7, 0x3, 0xce6, 0x80000000, 0x8, 0x8, 0x80000000, 0x3, 0x7, 0xb, 0x3, 0x2, 0x5, 0x4, 0x1, 0x80000000, 0xd, 0x800, 0x7, 0x3, 0x7fe0000, 0x9], [0xffffffff, 0x0, 0x7fffffff, 0x7, 0x1, 0x2, 0x0, 0x6, 0x3, 0x6, 0x101, 0x8, 0x9145, 0xfffffffa, 0x1, 0x2, 0x60, 0x3800, 0x7f, 0x0, 0x2c, 0x6, 0x3, 0x4, 0x10001, 0x0, 0x6, 0x1, 0x5, 0x5, 0x5, 0x1, 0x5, 0x58, 0x8, 0x6, 0x8, 0x3, 0x2, 0xc, 0x7fff, 0x1, 0x5, 0x6, 0xfffffffa, 0x9, 0x3, 0x80, 0x6, 0x7fff, 0xce, 0x4, 0xfff, 0x10, 0x8000, 0x4bc, 0x5, 0x4, 0xaba7, 0x7fff, 0x0, 0x9, 0xfffffff9, 0x9]}, 0x45c)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000bc0)={0x40, 0x2c, 0x5, "d4ef56cba2"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000c00)=ANY=[@ANYBLOB="00160b000000ca5c6099c0d31fb525920634ac9e2648bb6272ce3d2e770a4476bfe0679ec4c5133eab52b8fe40ced7dd31d0348df1958b3f2988ec7f7c0bf18117eb25330448e54cf19363a41e2fa122ed798f5942dd4c3b99cec78c92fc44937cc318d24f26810a08b2e445536e89bb9f54a34b59677a51fb1eebda1800e7ddb3caa5bc0cd5bd5e8cf663c8795043ec208e4613d6bec43a765f2f395dcc726f26be65fead9d357dcb22470384ec95013b64de6b9674c4969ac17af6f38f145c1689273e0a88317e9f511d9b329de8012d0c941fd2df66244dd137893b7f81c9e7b9bcfe7739"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)

9m10.842301458s ago: executing program 38 (id=3040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

9m10.751054882s ago: executing program 39 (id=3045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})

9m10.649387857s ago: executing program 40 (id=3044):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

9m5.490269424s ago: executing program 41 (id=3051):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8042)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {0x401, 0x40, 0xe39, 0x200}, 0x32, [0xe, 0x8, 0x6, 0x1, 0x1, 0x200, 0xf121, 0x3, 0x8, 0x5, 0x5, 0xf8, 0xfffffffe, 0x4, 0x1, 0x6, 0x969, 0x7, 0x5, 0xd33, 0x80, 0x39c7, 0xfffffffc, 0x72, 0x8, 0xfffffff7, 0xe66, 0xfffffffe, 0x8, 0x638b, 0x1, 0x7fffffff, 0x1, 0x4, 0x100, 0x2, 0x4, 0x5867, 0x8, 0x101, 0x5fba0a9c, 0x9, 0x8, 0xfff, 0x9, 0xfff, 0x4, 0x0, 0x0, 0x6, 0x2, 0x7f, 0x1, 0x7, 0xb, 0x8, 0x1, 0xe8b, 0x3, 0x80000001, 0x422, 0x3, 0x1, 0x5], [0x8, 0x3, 0x6, 0x9, 0xfffffffd, 0xfc, 0x7, 0x9, 0x5, 0x0, 0x1, 0x7, 0x1, 0xe, 0x6, 0xffffff80, 0x401, 0x4, 0x8, 0x10, 0xed0, 0x81, 0x7ff, 0x3, 0xfffffffd, 0x3, 0x8, 0xf0000000, 0x0, 0x1ff, 0x83, 0x0, 0x2e3, 0xe1b9, 0x3, 0x1, 0x3, 0x5, 0xc, 0x5, 0x80000000, 0x5, 0x0, 0x3, 0x5a8, 0xb696, 0x0, 0x5, 0x1, 0x6, 0x8, 0x3, 0x9, 0x8, 0x3, 0x5, 0x85cc, 0x8, 0x1, 0x5, 0x13a4, 0x7fffffff, 0x8, 0x7ff], [0xffffffff, 0x9, 0x2, 0x7, 0x97, 0x7fffffff, 0x0, 0x0, 0x5, 0xa6b6, 0x81, 0x3, 0x9, 0x7b, 0x8, 0x4, 0x3, 0x5, 0x6, 0x2, 0x7, 0x5, 0x0, 0x2, 0x9, 0x2, 0x8001, 0x4, 0x5, 0x6, 0x2, 0x80, 0x8, 0x70000, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8000, 0x1ff, 0x1c740, 0x3c7, 0x3, 0xce6, 0x80000000, 0x8, 0x8, 0x80000000, 0x3, 0x7, 0xb, 0x3, 0x2, 0x5, 0x4, 0x1, 0x80000000, 0xd, 0x800, 0x7, 0x3, 0x7fe0000, 0x9], [0xffffffff, 0x0, 0x7fffffff, 0x7, 0x1, 0x2, 0x0, 0x6, 0x3, 0x6, 0x101, 0x8, 0x9145, 0xfffffffa, 0x1, 0x2, 0x60, 0x3800, 0x7f, 0x0, 0x2c, 0x6, 0x3, 0x4, 0x10001, 0x0, 0x6, 0x1, 0x5, 0x5, 0x5, 0x1, 0x5, 0x58, 0x8, 0x6, 0x8, 0x3, 0x2, 0xc, 0x7fff, 0x1, 0x5, 0x6, 0xfffffffa, 0x9, 0x3, 0x80, 0x6, 0x7fff, 0xce, 0x4, 0xfff, 0x10, 0x8000, 0x4bc, 0x5, 0x4, 0xaba7, 0x7fff, 0x0, 0x9, 0xfffffff9, 0x9]}, 0x45c)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000bc0)={0x40, 0x2c, 0x5, "d4ef56cba2"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000c00)=ANY=[@ANYBLOB="00160b000000ca5c6099c0d31fb525920634ac9e2648bb6272ce3d2e770a4476bfe0679ec4c5133eab52b8fe40ced7dd31d0348df1958b3f2988ec7f7c0bf18117eb25330448e54cf19363a41e2fa122ed798f5942dd4c3b99cec78c92fc44937cc318d24f26810a08b2e445536e89bb9f54a34b59677a51fb1eebda1800e7ddb3caa5bc0cd5bd5e8cf663c8795043ec208e4613d6bec43a765f2f395dcc726f26be65fead9d357dcb22470384ec95013b64de6b9674c4969ac17af6f38f145c1689273e0a88317e9f511d9b329de8012d0c941fd2df66244dd137893b7f81c9e7b9bcfe7739"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)

6m25.39982725s ago: executing program 5 (id=3410):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

6m22.839011053s ago: executing program 5 (id=3430):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x50, 0x0, &(0x7f0000001b80)=0x600)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r4})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x4d, {0x4d, 0x6, "db09b2a6f5020973c5e82b485e141ebdb15a19107080eec85fc3a11e556b59351beba078a3ea809b3c30e02c7be407365ae8af8bdb208d6e822a904837fc9e1b096bb0f4cb2ab37594dd6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

6m19.579546295s ago: executing program 5 (id=3446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860)

6m19.48160038s ago: executing program 5 (id=3448):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x3c, 0x40)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x1ff, 0x3, 0x4, 0x4, 0xac, 0x57, 0x10, 0x8, 0xf6, 0x4, 0xfffffff5, 0x4, 0x0, 0x7f, 0x200, [0x6, 0x4]}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, <r3=>0x0})
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2c, 0xe, 0x10, 0x2, 0x9, 0xa9, 0x0, 0x2, 0x1})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, r3, r4, 0x188204, 0xfffffffffffffff7, 0x5, 0x1e8fb})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f0001000000000000", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x445, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x401, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
inotify_init1(0x0)
r6 = inotify_init1(0x80800)
inotify_add_watch(r6, &(0x7f0000000040)='./file1\x00', 0x80000b08)
rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000000c0)=0x11)
ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0x50)

6m18.959585661s ago: executing program 5 (id=3449):
r0 = syz_clone(0x80014c91, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000002)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0)=r0, 0x12)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0)
writev(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)='H', 0x1}], 0x2)
sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfffff558, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)=r0)
ptrace$setregset(0x4205, r0, 0x6, &(0x7f00000001c0)={0x0})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)

6m18.872733173s ago: executing program 5 (id=3450):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xd)

6m2.907935964s ago: executing program 42 (id=3450):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xd)

2m50.629235467s ago: executing program 3 (id=4639):
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x400)
write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r6=>r0, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x20000000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x1c1, 0x80, 0x80, 0x1}]}, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffc, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8003)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000540))
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x204, 0x400, 0x81, 0x1ee, 0x5})
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'syztnl0\x00', <r8=>0x0, 0x80, 0x700, 0x9, 0x647, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x15, 0x3, [{0x5, 0x4, "cd90"}, {0x7, 0xb, "a2a8bb21917206897f"}]}, @noop, @generic={0x86, 0x11, "490e9bd16fd21237ec598369556dbf"}]}}}}})
r9 = getuid()
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x4e23, 0x7, 0x4e20, 0x2, 0x2, 0x20, 0xa0, 0x0, r8, r9}, {0x9, 0x8, 0x5, 0x5, 0xeb7e, 0x4, 0x2778, 0x7fff}, {0x509d, 0xffffffffffff5fe0, 0x506, 0x2}, 0x2, 0x6e6bb1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x4, 0x2, 0x8, 0x1000, 0x4, 0x8}}, 0xe8)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f00000007c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r10, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x69}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc805}, 0x20000000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x80)
write$P9_RLOPEN(r0, &(0x7f0000000b00)={0x18, 0xd, 0x2, {{0x20, 0x0, 0x3}, 0x1}}, 0x18)
ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000c40)={<r13=>r0, &(0x7f0000000b40)='\xff\xff\xff\xff\xff\xff', 0x101000, &(0x7f0000000b80)={@align=0xffffffffffffff50, {0x3, 0x2, 0x432, 0x4}}, 0xa70a, &(0x7f0000000bc0), &(0x7f0000000c00)=0x7})
getsockopt$EBT_SO_GET_INIT_INFO(r13, 0x0, 0x82, &(0x7f0000000c80)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x3, 0x4, 0x3, 0xfd0a]}, &(0x7f0000000d00)=0x78)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000d40)={0x200, 0x10000, 0x3, {0x6, @vbi={0xfff, 0x7fff, 0x0, 0x3147504d, [0x3, 0x3ad], [0x9, 0x80000000], 0x1}}, 0x4475ba21})

2m50.516295228s ago: executing program 3 (id=4640):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x8001, 0x6000, 0x8, 0xffffffffffffffff, 0x6a6672d838002309})
sysfs$2(0x9, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='7;', 0x2, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d80500002d00070100000000ffdbdf25017c", @ANYRES32, @ANYBLOB, @ANYRES32], 0x5d8}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x10000000)

2m50.080405317s ago: executing program 3 (id=4644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESHEX=0x0], 0x0)
r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x50, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x3d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7d, 0x2, 0xab}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x81, 0x9}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x3, 0x6, 0x5, 0x10, 0x6}, 0x150, &(0x7f00000001c0)={0x5, 0xf, 0x150, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x52, 0x1007935fba7f7d38, 0x10, [0x6000, 0x30, 0x7ec0, 0x0, 0x3f, 0xc000]}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x2, 0xf000, 0x177a, [0xff000f, 0xc0cf, 0xde, 0x0, 0x7f9f70]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x2}, @generic={0xe4, 0x10, 0xb, "abb7e9156d7321ca67d61f86f2befba89d0080a2ba974afdafa78033f03a23b4419f096383039219246d54e4e97fee67f720d738165d9fb1bb2f6bc9c49ab04dc68ecfd95b2f5b514f70b849ae56cceb0ed45fc7ae4957e02caa879bafe6ce5598212b50f544e7140bdd713df67fd0eeee47b2fb297813cb0f0663696e05f82cf4b2ee2133dbfa9e474f4966e820667c60e5d335ca14763522525cd7f238262dabb0d3a1a7843f584ae02675825158c11891b0fba4d6cd3a48a54a81657b336d249a781dc09cee851c20e11c43bd2639821d2757e39110c8f32a61945bbeaa6b53"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x8, 0x0, 0x1, [0x18000, 0x0, 0x3f0f, 0x3fc0]}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x425}}, {0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "65f2b74f8200b813183a58941cd397d5f4639c8206e89a92b8d91b1bac5f5727a3788fe56f6119131e3a0b6e051eb4b9bca606a6676e4ba8f8115217132965c4bf4f25890ff7ea7cb3a959a77176e6f4aed7a950f8c7f1802bce5e3d5a0a144d49ae4b4840f0b83b44b9963984d21cf1c8739962d454b6b3e3d72bab45f79351cc8edc988e5ac3c811992eefd9f24236ff1b14209be7003e316c5361f53c6013d0cff6d68e45254e439f574b4262534031caba73d870ec4adfcad895aba912d420e537fe3a622ef5e88f2ff9842f5578"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000500)={0x20, 0x22, 0xfc, {0xfc, 0xe, "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"}}, &(0x7f0000000640)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}, &(0x7f0000000a80)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0xa, 'r'}, @global=@item_4={0x3, 0x1, 0x2, "b0cc7205"}, @main=@item_4={0x3, 0x0, 0x9, "fb303444"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe54, 0xa, 0x1, {0x22, 0xeb2}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x0, 0xf, 0xd8, "7e4c08bea0f578a81a79156cee708c58a8a03719f28873314e0a906c9dac37c9d6a0667d640725e10e305df7ec7e54365f6c753757ea2cdef8b4f2c38781a4f0ee1e96e8fafc624a4ad9f9ddd73ee8c6d9288197a9a32d3e5ff4cb04755ec0b3254a1fe7b76552ae12a780548196d291d036f13eb9f54bdd09c9e863f4ba256bff07903cc17f34ba16dbbf16dc7b26765fe99db0d3e6aca9f1659ce859b6ef47ae7188afe9e3e101dbb19072fb9fe2bfc26fc381815bc56207f8c85367f1227069697898081476c7830f854457233afed5fab68b042ddbaf"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0x20, 0x1, 0x2e, "8baf5d21637da06a06679b8fec64d1997b9c06888baa2f93061c57288f18d59dc5610fa6814044a9e06e9250ffdb"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0xd}})
syz_usb_connect$midi(0x3, 0x31, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000c14019a34d49082d5358b2508003d0002000000080006"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008080)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000040)=0x10001, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x1000, 0x0, {0x6}}, 0x14}}, 0x4040000)

2m48.646049649s ago: executing program 3 (id=4655):
r0 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955fd6)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x9, 0x1030002, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x40}}, 0x50)
read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
getdents64(r0, &(0x7f0000002480)=""/238, 0xee)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r5, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000002580)={0xfc, "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"})

2m48.381054847s ago: executing program 3 (id=4657):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
syz_open_procfs(0x0, 0x0)

2m48.189771828s ago: executing program 3 (id=4660):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f04197ad3e7e52688be7f", 0x66}, {&(0x7f0000000e80)="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", 0x11e}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae", 0x9e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b593118702364", 0x47}, {&(0x7f00000006c0)="b341fb6dec9d6baff227ce715d28bba280448ea83b64e4ec946efaa25c427594c9a4f3fb33d0290cb6ba0de93d437c1798bb5011adf07e62a87371fb3e0e058dad986005c8762d0b6b0be62bd69a21979a54201e81d64a61a481e0e8264d01c8a80d2fa08c4c07845f4cd9", 0x6b}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x3)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000280))
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xd4})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf250200000008000100", @ANYRES32, @ANYBLOB="193fc99e799c31bb0ac5aa6e454574ea1f3a7ad68009c30f8eae6252254bc9b5cfbcd48166f538a7bdcde0050000000000000097f7e1488b90e0a504d0cc18c4759e980fd863e88c6551338d5052b8ab79b1f6c3ab8fa2d2d19512"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030)

2m39.867318857s ago: executing program 0 (id=4698):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0x4, 0x2, 0x400, 0xe, 0x20800005, 0x7, 0x6, 0x8, 0xfd, 0x800, 0x1, 0x1, 0xfffffffc, 0x10000b, 0xfd, 0x5, 0x4007a, 0x7fff, 0x3, 0x89, 0x12, 0x8800007f, 0x0, 0x2005, 0xe66, 0x400001, 0x888, 0xa6b3, 0x0, 0x5]})
syz_usb_connect(0x3, 0xa13, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0})

2m38.598849474s ago: executing program 0 (id=4702):
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f", 0x7)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x24, &(0x7f0000005a80)=ANY=[@ANYBLOB="1201000003d1750899044110bae8010203010902120001b74feb0909049fed00e81c4704"], 0x0)
ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f00000000c0)=0x18)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003a91e7508bf0a70050000000000000000000001000a400609040f07004934287b"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1555555555555639})

2m35.530127496s ago: executing program 0 (id=4711):
r0 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955fd6)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x9, 0x1030002, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x40}}, 0x50)
read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
getdents64(r0, &(0x7f0000002480)=""/238, 0xee)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000002580)={0xfc, "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"})

2m34.636954814s ago: executing program 0 (id=4718):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x11, 0x36, {0x36, 0x0, "923ccedbc0f938120400000036173d04ca9d16b3b36c6ca6c7bc62edb7cfb0a24c6d9a0dd8faae43729f78ebc66cc22fd7151ecc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x20, 0xc, 0xb5, {0xb5, 0x22, "6c26fc59644bec9d13dfd54ab4b4338546405479a6236e6d4584e4856352343682c2abdbbb1058124cd3b38baf871ffd1313e94801e7483a64d3bf9fed31841eea875f4ce5776c6db83389d1bc90c0fc43c7c16b33bdff59b53a5f4bd7c2d3bd8ea605b322ceb9b4927e00c4f3e075650a6d1f8356e6270953e1e779364c3d8b86b0c39aed68b7756ef2736356bd6ec9364db50c5373ec518c1f0cf996685fa413f055c013111d1918aae527b0379eece926ba"}}, &(0x7f0000000200)={0x0, 0x3, 0x49, @string={0x49, 0x3, "2fec14975ecaca70f4e8bc5099561af263c42c993031b07f3f109bb845d0edefa6956a66632980ee659e96a354ce0d4cc9eec0fc6d429b2cec2936dc81b05b01391d683e98e1b8"}}, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "3553e523"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x277}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x3, 0x6f, "5136a753fc24e23a1517238f33fbe1b226964c0a4585de4366ed1b70c772b48ba63f03db6061bf0dbe7d2c5e8f6ff78d53830c4ad864ec50a2f1fdd74e00be0bd8dd43ec17eb349d9bf6e15bbb156de2ba0bc30c0925b7f1982e7f307f7f39efcc77e8e4abeb7bc8a53cfcda50fd50"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000480)={0x20, 0x1, 0x72, "aadcc9b41c85faa96bfcc7b2dacaa213778263854a9ae96fe3ab271c6c6a67c803de9c9dfb1e25d821f307a8ea9313e5cf433c1883482b8733ec7f5452c6f1be19860badd68b2a83a2a066bc7f0657e2952ce44670a617b5434b5075bd018f9ce2b1bbe4be91406c5559cdb472ac462a707c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x6a}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x34325852, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}})
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000140))
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2, 0x24, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m32.746554784s ago: executing program 0 (id=4722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_proto_private(r1, 0x89e0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

2m32.739856536s ago: executing program 43 (id=4660):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f04197ad3e7e52688be7f", 0x66}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd338", 0x11e}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae", 0x9e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b593118702364", 0x47}, {&(0x7f00000006c0)="b341fb6dec9d6baff227ce715d28bba280448ea83b64e4ec946efaa25c427594c9a4f3fb33d0290cb6ba0de93d437c1798bb5011adf07e62a87371fb3e0e058dad986005c8762d0b6b0be62bd69a21979a54201e81d64a61a481e0e8264d01c8a80d2fa08c4c07845f4cd9", 0x6b}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x3)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000280))
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xd4})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf250200000008000100", @ANYRES32, @ANYBLOB="193fc99e799c31bb0ac5aa6e454574ea1f3a7ad68009c30f8eae6252254bc9b5cfbcd48166f538a7bdcde0050000000000000097f7e1488b90e0a504d0cc18c4759e980fd863e88c6551338d5052b8ab79b1f6c3ab8fa2d2d19512"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030)

2m32.54983106s ago: executing program 0 (id=4724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)={0x24, r2, 0x29, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x346}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20004010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030)

2m17.153430962s ago: executing program 44 (id=4724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)={0x24, r2, 0x29, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x346}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20004010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030)

1m15.33603801s ago: executing program 1 (id=5003):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4080)
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
getpid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0))
write$qrtrtun(r0, &(0x7f0000000280)="17d3b59e2b2037ea6b5caa49bef70c5fec63edbceb519b88e971f96f109166cc45ad83efe42fdb5e76ef7a6eeb9dc0fbd6f97a27badac54e0f3d81228d0952dd3e5471264c41e1a630a7c2d8fa4c305590dad0e71ac9e83c48e97b267cc26e65938390127ffdff91dc2a8ecf84e449b496bd7d60daee9c58490bf6fd5d82a2184ee454548a68ce04f3e5564613261453d6f06baa8c48fa5989e04aa3265f06453cb930afaeabaab1faf09e632ebd7df35547a46c6a0d398ec38a9f8e4328fea6b8c20ca39cb9c38d180074bcc789803c179722370c38278c0f6acb39e04b2d3806fd526664f9d3952a05800b55e0732b7d090bf2051a", 0xf6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x21, 0x28, {0x28, 0x8, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000000206010100000000000000000700000008ff078005000100060000000500050002000000050005000a000000050001000700000011000300686173683a69702c706f727400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004040)

1m12.073244941s ago: executing program 1 (id=5011):
unshare(0x8040480)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x6c76875dd9e89261, 0x101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000210)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
io_setup(0x6, &(0x7f0000003b80)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, r0, 0x0, 0x0, 0x800, 0x0, 0x0, r0}, 0x0])

1m11.092911439s ago: executing program 1 (id=5015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3800ffa62300010324bd7002fadbdf2501"], 0x38}}, 0xc004)

1m10.955244961s ago: executing program 1 (id=5016):
r0 = socket(0x2, 0x80805, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r2], 0x18}, 0x4000000)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00')
read$char_usb(r5, 0x0, 0x40)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x9, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x79}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

1m10.895817944s ago: executing program 1 (id=5018):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000001a00)={'8255\x00', [0x2000, 0x20, 0x4, 0x1, 0x25, 0x200, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x5, 0x1, 0x52ce292d, 0x400001, 0x9, 0x5, 0x0, 0x7f, 0x3, 0x40000007, 0x200089, 0x4, 0x3ff, 0x20001e5b, 0x3, 0xe66, 0x2, 0x6, 0x4009, 0x0, 0xffffffff]})
writev(r2, &(0x7f00000012c0)=[{&(0x7f00000001c0)="10d5e54901ae66a346cc22f00ea7fcb7036b7af068623253f794e9a97b87ed33ff35511f2bcea6987d3450cb6557aa0232ee340e7befaf8ffc904cb92cf4fa4fafd347c3ab54a3b324", 0x49}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="f205a3322821b815d7ef08737710aea8ef54335a4e7d2053787f234e05ab6bbb748ff8a3f4cdb09465f5cd49f957827d570360baad1b76e71212ee4ef72b1a07c383b9888f12", 0x46}], 0x3)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x0, 0x34a30b42, 0x5, 0x1000, 0xffffffffffffffff, 0x1002, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x2372, 0xabda, 0xfffffffffffffefe, 0x401, 0x20], 0x25000, 0x216156})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x2, 0x1000001})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff7, 0x6, 0xe1d9, 0x4, 0x3})
read(r5, &(0x7f0000000000)=""/111, 0x6f)
ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000080)={0xfb, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)

1m9.904957377s ago: executing program 1 (id=5023):
unshare(0x8040480)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x6c76875dd9e89261, 0x101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000210)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
io_setup(0x6, &(0x7f0000003b80)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0, 0x0, 0x1, 0x0, 0x3, r0}])

1m9.720195654s ago: executing program 45 (id=5023):
unshare(0x8040480)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x6c76875dd9e89261, 0x101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000210)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
io_setup(0x6, &(0x7f0000003b80)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0, 0x0, 0x1, 0x0, 0x3, r0}])

32.244022844s ago: executing program 2 (id=5204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
sched_setscheduler(0x0, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

31.346040697s ago: executing program 2 (id=5206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) (fail_nth: 8)

31.221083657s ago: executing program 2 (id=5207):
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955fd6)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x9, 0x1030002, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x40}}, 0x50)
read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r4, r0, 0x0)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000002580)={0xfc, "a1196ef751a4ad11b60922c3a88f9a5db45c57c3e4c3503ea24a821cee0388190603cc72ff334d81f38f1b9c966dadbc3254748da77a448ea76a7f155254cdb2986acd6e17971c85c9aceb5ded0bced0602a29596127332b9c79ef3d994765da442e033610cd161d1d8327a688b9e12d292ffd1397c62517eb7de5a64efcc219ec9239ba71ae3b2123e6dc9a3bcacabe2d1d846d1618096394c6725b54441c5022f9378281b53511f091a8f23894f7389db94f6aea379f6874dcfcf3ecdec72be456560d1dc2fda496b299be2c3267ebc0d7d272e6cd290eb04e98f171f6103900e10a7de434d4a62370305343a91ba88beabf5a69ffebc51bcf89405fc39d62089a188bf5479fac121e484b293b4d4073ed37e0602b319d1587e1e0e6bb86be7bdd55aabaa5440eec694ed8a415a768b897d54af8f6d061fb51b2b264ecc35785ee41ca81d23de17e3caad16fc9c0fa444afaf9c9f050bec6d520f1295154611d0fb10898ffe63d8a9e75729c9f169893c8dade1d527b64760512ecfc1de2b5c24d60760b62e9804ae5d3400a72df3746313ceaffa7f28c7ee1d712007845b9670cad4aa02617aa65ca3e07ac85843f7a1676c93d56fcb3e8e18f6cd8204de7880c0c275224424af3ac5c650c32bbfb3098cb6d12d04081065742c4a177f5527304412dca92a5eaaa418d0901126bbe90549a4c9d2a303d7e0cfdc349552f0c"})

31.165127423s ago: executing program 2 (id=5208):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r3=>0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b20009058501"], 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000005)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00210027bd70000000000007000700"], 0x24}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup(r5)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1)

29.883840805s ago: executing program 2 (id=5215):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x3}, 0xff}, 0x18)
r2 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1)
r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x87, 0x7, 0xc3, 0x7}, {0x6, 0x6, 0x2, 0x5}]})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0x6, 0x34325852, 0x1, 0x5, 0x5, 0x9, 0x6, 0x0, 0x6, 0x1, 0x6}})

26.803667612s ago: executing program 2 (id=5224):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000002c0)={'bond0\x00', @link_local}) (fail_nth: 4)

11.1949731s ago: executing program 4 (id=5288):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x3f00000000000000)
r5 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x7, 0xe000, 0x0, 0xffffffffffffffff, 0x4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

10.274244496s ago: executing program 4 (id=5291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c2000003f0007012bbd700000200000017c0080040001802d00ff80965882be437b4ff6b8ced855a80643d43d70cc05db1dbbd5511d000000000000000200"/72], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'bond0\x00', @link_local})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r9 = socket(0x15, 0x5, 0x0)
r10 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
r11 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_freezer_state(r11, &(0x7f0000000280)='FROZEN\x00', 0x7)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)

7.187689601s ago: executing program 9 (id=5302):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)

5.927603253s ago: executing program 8 (id=5305):
r0 = socket$inet(0x2, 0x3, 0x6)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)

5.908226783s ago: executing program 8 (id=5306):
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (async)
statfs(&(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB=' \vH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)

5.692165069s ago: executing program 8 (id=5307):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x141a00)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0xffffffff, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x2000002, 0x1012, 0x8, 0x7, 0x8, 0xa0d19114a943caaf, 0x1}})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, 0x0, 0x408c0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000040)
r3 = openat(0xffffffffffffffff, 0x0, 0x480841, 0x88)
syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x41, 0x2030000c, 0x0, 0xc, 0x0, 0x101, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fff3202c2c"], 0xf6)

5.579437605s ago: executing program 4 (id=5308):
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
clock_adjtime(0x0, &(0x7f0000000900)={0x280, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x5, 0xa9, 0x3, 0x7, 0x9, 0x8, 0x7, 0x8, 0x80000000, 0xffffffffffbffffe, 0x1000000005, 0x23, 0x7, 0x6, 0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000})
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x3, 0x0, [{0x40000000, 0x4, 0x0, 0x8, 0x7, 0x7, 0x5}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}]})
r4 = socket$inet6(0xa, 0x2, 0x0)
syz_usb_connect$uac2(0x3, 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000004035120b8240000102030109027a00030100f003080b000201092006090400000001012000092401020006"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="912169028b6debe9ab3ee0e9eeaac400a15db7d84fb1d4bc8e9725f2", 0x1c}, {&(0x7f0000000340)="789773edc202415e94", 0x9}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}}], 0x1, 0x80)
syz_io_uring_setup(0x31c5, &(0x7f0000000640)={0x0, 0xd3b3, 0x2, 0x0, 0x3}, &(0x7f0000000040), &(0x7f00000003c0), 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e20, @multicast1}}, 0x4d)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x83, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfdfffdff}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x3, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x5e14, @mcast1, 0x5}}}, 0x108)
getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f00000010c0)='/dev/comedi3\x00', 0x2102, 0x0)
close_range(r7, r7, 0x2)
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4})

5.063108503s ago: executing program 9 (id=5309):
r0 = socket(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$unix(r0, 0x0, &(0x7f0000000140)) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x18, 0x1, 0x0, 0x25ffdbfb, {0xa, 0xd601, 0x9}, [@typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4)

4.809086745s ago: executing program 9 (id=5310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x5c, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0], 0x0)

3.975357513s ago: executing program 8 (id=5311):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x8001, 0x6000, 0x8, 0xffffffffffffffff, 0x6a6672d838002309})
sysfs$2(0x9, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='7;6r', 0x4, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x10000000)

3.462365088s ago: executing program 8 (id=5312):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x8, 0x7a, 0x6, 0x4, 0x6})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000019080)={0x1, &(0x7f00000000c0)=[{0x5}]})
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x84, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x0, 0x1}, 0x8, 0xdf8, 0x1000000, 0x0, 0x1, 0x0, 0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c004}, 0x4004004)
r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c002038000480"], 0x4c}}, 0x0)
lseek(r5, 0x6, 0x1)
write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'net_prio'}, {0x2b, 'cpuset'}]}, 0x12)

3.383523945s ago: executing program 9 (id=5313):
r0 = socket$inet(0x2, 0x3, 0x6)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)

3.237809948s ago: executing program 9 (id=5314):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x0, 0xf, 0x1d, 0x4b, &(0x7f0000000480)="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"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005c000180100001"], 0x70}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)

3.151603969s ago: executing program 8 (id=5315):
keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)
request_key(&(0x7f0000001040)='user\x00', &(0x7f0000001080)={'syz', 0x3}, &(0x7f00000010c0)='&\'-{\x00', 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000001f80))
sendmmsg$inet(r1, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x42040, 0x111)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b62510862b3350eb45459bced7f0038fd8228dc7a0ca679e863ad4d0387f9db0505d37205"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x68, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xff, 0x0, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x19, 0x6}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x0, 0x0, 0x10, 0x3}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x4, [{0x7a, &(0x7f0000000880)=@string={0x7a, 0x3, "97823e13c3f06b1877e3a1f2e80223379b37b0fbe7501a6a1f26f7450974753ad0354cc6c0bf2c1ea6d904b930f2ea463849dcca24a313b297e79001cf5827503e2c8edf858639fc009be43351206365ebcfc8d2a90cba7ca1aaf5b21312163f955033e120bd9f1724a58c0ac2a6fc985d1004e7cd1d4019"}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "11094e7a909f01a2553ccf1ea5a93176cb090d3fe2c93c865e57ca8c66efbea166463099c7d416109a87e121188590dd8aaa1271b49cf6433e9571d25dc4720663e05e67619dc37b32e1e86be50e162fbcf4f600e1bffdf90c48a8577f7312797a1c62522576732835decbb5bfc60d9f857fe7e39be9be054452feb1bd6eab483e9da59de14c4cccfa6cd514d16e6ce96311e296436fcbe5a3e85f2ce716367413c15cc22901fddf83db308d608358afe0ea9e92b02c1b76cf3a0cc03965e1b81e32cd43bf00c85d2f8707f7ce894d1c0c45abf8b2e964cad943d46aaf1e72d07c89432f5447b359bd79d5d923b4bdbfce00"/256}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x809}}]})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="2003100000009185c7174c970f8ad3b452ebf775e69c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.671904764s ago: executing program 4 (id=5316):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)

785.487134ms ago: executing program 4 (id=5317):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000140081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

447.289684ms ago: executing program 4 (id=5318):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002000100000004002d"], 0x30}], 0x1}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x600, 0x80600})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10, 0x0)
recvfrom$inet(r5, &(0x7f0000000300)=""/211, 0xd3, 0x2020, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf252b00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900010100006e800000040046000400cc00040044000400bf001e00940040001501000000010000000000020004000000000801030000710000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

0s ago: executing program 9 (id=5319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x8001, 0x6000, 0x8, 0xffffffffffffffff, 0x6a6672d838002309})
sysfs$2(0x9, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='7;6r', 0x4, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x10000000)

kernel console output (not intermixed with test programs):

_usercopy, interval 1, probability 0, space 0, times 0
[ 1447.344615][T24481] CPU: 0 UID: 0 PID: 24481 Comm: syz.4.5071 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1447.344629][T24481] Tainted: [L]=SOFTLOCKUP
[ 1447.344633][T24481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1447.344639][T24481] Call Trace:
[ 1447.344643][T24481]  <TASK>
[ 1447.344648][T24481]  dump_stack_lvl+0xe8/0x150
[ 1447.344665][T24481]  should_fail_ex+0x467/0x600
[ 1447.344679][T24481]  _copy_from_user+0x2d/0xb0
[ 1447.344694][T24481]  drm_ioctl+0x61c/0xba0
[ 1447.344709][T24481]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[ 1447.344721][T24481]  ? __pfx_drm_ioctl+0x10/0x10
[ 1447.344736][T24481]  ? __fget_files+0x3a8/0x420
[ 1447.344746][T24481]  ? __fget_files+0x2a/0x420
[ 1447.344757][T24481]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1447.344779][T24481]  ? __pfx_drm_ioctl+0x10/0x10
[ 1447.344796][T24481]  __se_sys_ioctl+0xff/0x170
[ 1447.344822][T24481]  do_syscall_64+0x17b/0x530
[ 1447.344832][T24481]  ? irqentry_exit+0x10f/0x8f0
[ 1447.344846][T24481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1447.344856][T24481]  ? clear_bhb_loop+0x40/0x90
[ 1447.344868][T24481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1447.344877][T24481] RIP: 0033:0x7fbf53cade59
[ 1447.344887][T24481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1447.344896][T24481] RSP: 002b:00007fbf51f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1447.344907][T24481] RAX: ffffffffffffffda RBX: 00007fbf53f35fa0 RCX: 00007fbf53cade59
[ 1447.344915][T24481] RDX: 0000200000000440 RSI: 00000000c06864a2 RDI: 0000000000000003
[ 1447.344921][T24481] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1447.344927][T24481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1447.344933][T24481] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1447.344948][T24481]  </TASK>
[ 1447.367233][ T9412] hsr_slave_1: left promiscuous mode
[ 1447.368794][ T9412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1447.368827][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1447.411083][ T9412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1447.411117][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1447.625206][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.630525][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.635379][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.653866][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.659719][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.661430][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.666858][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.668406][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.671362][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.674442][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.741900][ T9412] veth1_macvtap: left promiscuous mode
[ 1447.741966][ T9412] veth0_macvtap: left promiscuous mode
[ 1447.742142][ T9412] veth1_vlan: left promiscuous mode
[ 1447.742190][ T9412] veth0_vlan: left promiscuous mode
[ 1447.882043][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.884196][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.922996][T24492] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5076'.
[ 1447.957250][  T199] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1448.184818][  T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.184847][  T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1448.184880][  T199] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1448.184900][  T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.192492][  T199] usb 5-1: config 0 descriptor??
[ 1448.488399][T24500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1448.491274][T24500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.514422][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5079'.
[ 1448.824821][  T199] usbhid 5-1:0.0: can't add hid device: -71
[ 1448.824940][  T199] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1448.860111][  T199] usb 5-1: USB disconnect, device number 8
[ 1448.907255][T18247] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1448.987999][ T9412] team0 (unregistering): Port device team_slave_1 removed
[ 1449.047756][ T9412] team0 (unregistering): Port device team_slave_0 removed
[ 1449.063253][T18247] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1449.063279][T18247] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1449.063296][T18247] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1449.063342][T18247] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1449.063365][T18247] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1449.086347][T18247] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1449.086375][T18247] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1449.086393][T18247] usb 9-1: Product: syz
[ 1449.086405][T18247] usb 9-1: Manufacturer: syz
[ 1449.164605][T18247] cdc_wdm 9-1:1.0: skipping garbage
[ 1449.164624][T18247] cdc_wdm 9-1:1.0: skipping garbage
[ 1449.180402][T18247] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1449.180421][T18247] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1449.267304][   T38] audit: type=1326 audit(1783998653.203:836): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.267977][   T38] audit: type=1326 audit(1783998653.213:837): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.280256][   T38] audit: type=1326 audit(1783998653.223:838): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.280302][   T38] audit: type=1326 audit(1783998653.223:839): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.280960][   T38] audit: type=1326 audit(1783998653.223:840): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.281002][   T38] audit: type=1326 audit(1783998653.223:841): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.281039][   T38] audit: type=1326 audit(1783998653.223:842): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.281430][   T38] audit: type=1326 audit(1783998653.223:843): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.281470][   T38] audit: type=1326 audit(1783998653.223:844): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.281950][   T38] audit: type=1326 audit(1783998653.223:845): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24506 comm="syz.2.5082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f472123de59 code=0x7ffc0000
[ 1449.595708][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'.
[ 1449.595729][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'.
[ 1449.866130][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5084'.
[ 1450.463151][T24528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1450.464964][T24528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1450.517851][T24528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1450.518788][T24528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1450.806313][T24534] FAULT_INJECTION: forcing a failure.
[ 1450.806313][T24534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1450.806344][T24534] CPU: 1 UID: 0 PID: 24534 Comm: syz.4.5087 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1450.806364][T24534] Tainted: [L]=SOFTLOCKUP
[ 1450.806370][T24534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1450.806379][T24534] Call Trace:
[ 1450.806385][T24534]  <TASK>
[ 1450.806391][T24534]  dump_stack_lvl+0xe8/0x150
[ 1450.806412][T24534]  should_fail_ex+0x467/0x600
[ 1450.806434][T24534]  _copy_from_user+0x2d/0xb0
[ 1450.806456][T24534]  kstrtouint_from_user+0xd6/0x180
[ 1450.806476][T24534]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1450.806491][T24534]  ? __lock_acquire+0x6df/0x2e40
[ 1450.806507][T24534]  ? trace_raw_output_btrfs_sync_log_enter+0x280/0x370
[ 1450.806527][T24534]  ? lock_acquire+0x115/0x350
[ 1450.806544][T24534]  proc_fail_nth_write+0x8e/0x210
[ 1450.806561][T24534]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1450.806585][T24534]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1450.806600][T24534]  vfs_write+0x29f/0xbb0
[ 1450.806626][T24534]  ? __pfx_vfs_write+0x10/0x10
[ 1450.806646][T24534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1450.806670][T24534]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1450.806689][T24534]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1450.806708][T24534]  ? mutex_lock_nested+0x152/0x1d0
[ 1450.806723][T24534]  ? fdget_pos+0x252/0x320
[ 1450.806745][T24534]  ksys_write+0x156/0x270
[ 1450.806764][T24534]  ? __pfx_ksys_write+0x10/0x10
[ 1450.806788][T24534]  do_syscall_64+0x17b/0x530
[ 1450.806801][T24534]  ? irqentry_exit+0x10f/0x8f0
[ 1450.806831][T24534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1450.806846][T24534]  ? clear_bhb_loop+0x40/0x90
[ 1450.806864][T24534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1450.806879][T24534] RIP: 0033:0x7fbf53c6e68e
[ 1450.806896][T24534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1450.806910][T24534] RSP: 002b:00007fbf51f05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1450.806929][T24534] RAX: ffffffffffffffda RBX: 00007fbf51f066c0 RCX: 00007fbf53c6e68e
[ 1450.806942][T24534] RDX: 0000000000000001 RSI: 00007fbf51f060a0 RDI: 0000000000000006
[ 1450.806953][T24534] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1450.806964][T24534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1450.806974][T24534] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1450.806999][T24534]  </TASK>
[ 1451.211279][T24541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.211843][T24541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1451.461769][  T199] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1451.617656][  T199] usb 5-1: Using ep0 maxpacket: 32
[ 1451.657701][  T199] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1451.658924][  T199] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1451.658956][  T199] usb 5-1: can't read configurations, error -71
[ 1452.389922][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1452.532442][    T9] usb 9-1: USB disconnect, device number 69
[ 1452.652065][T24547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5092'.
[ 1452.733028][  T199] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[ 1452.911170][  T199] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1452.911199][  T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.911217][  T199] usb 5-1: Product: syz
[ 1452.911228][  T199] usb 5-1: Manufacturer: syz
[ 1452.911235][  T199] usb 5-1: SerialNumber: syz
[ 1452.914359][  T199] usb 5-1: config 0 descriptor??
[ 1453.061727][T24549] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1453.119240][  T199] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1453.277877][T24553] FAULT_INJECTION: forcing a failure.
[ 1453.277877][T24553] name failslab, interval 1, probability 0, space 0, times 0
[ 1453.277906][T24553] CPU: 1 UID: 0 PID: 24553 Comm: syz.8.5095 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1453.277927][T24553] Tainted: [L]=SOFTLOCKUP
[ 1453.277933][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1453.277941][T24553] Call Trace:
[ 1453.277948][T24553]  <TASK>
[ 1453.277956][T24553]  dump_stack_lvl+0xe8/0x150
[ 1453.277979][T24553]  should_fail_ex+0x467/0x600
[ 1453.278006][T24553]  should_failslab+0xa8/0x100
[ 1453.278025][T24553]  __kmalloc_noprof+0xfb/0x790
[ 1453.278059][T24553]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1453.278082][T24553]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1453.278110][T24553]  tomoyo_realpath_from_path+0xef/0x640
[ 1453.278141][T24553]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1453.278162][T24553]  tomoyo_path_number_perm+0x246/0x5f0
[ 1453.278185][T24553]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1453.278206][T24553]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1453.278233][T24553]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1453.278252][T24553]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1453.278281][T24553]  ? __fget_files+0x2a/0x420
[ 1453.278298][T24553]  ? __fget_files+0x3a8/0x420
[ 1453.278311][T24553]  ? __fget_files+0x2a/0x420
[ 1453.278333][T24553]  security_file_ioctl+0xb9/0x260
[ 1453.278356][T24553]  __se_sys_ioctl+0x47/0x170
[ 1453.278374][T24553]  do_syscall_64+0x17b/0x530
[ 1453.278387][T24553]  ? irqentry_exit+0x10f/0x8f0
[ 1453.278408][T24553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.278422][T24553]  ? clear_bhb_loop+0x40/0x90
[ 1453.278439][T24553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.278454][T24553] RIP: 0033:0x7f2c7e8fde59
[ 1453.278471][T24553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1453.278484][T24553] RSP: 002b:00007f2c7cb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1453.278503][T24553] RAX: ffffffffffffffda RBX: 00007f2c7eb85fa0 RCX: 00007f2c7e8fde59
[ 1453.278516][T24553] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003
[ 1453.278526][T24553] RBP: 00007f2c7cb56090 R08: 0000000000000000 R09: 0000000000000000
[ 1453.278536][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1453.278546][T24553] R13: 00007f2c7eb86038 R14: 00007f2c7eb85fa0 R15: 00007ffc862daef8
[ 1453.278571][T24553]  </TASK>
[ 1453.279142][T24553] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1453.282704][T24553] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1453.590597][T24555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5096'.
[ 1453.885900][T24566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.920805][T24566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.979708][  T199] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1453.997782][  T199] usb 5-1: USB disconnect, device number 10
[ 1454.374090][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5100'.
[ 1454.718924][T24586] FAULT_INJECTION: forcing a failure.
[ 1454.718924][T24586] name failslab, interval 1, probability 0, space 0, times 0
[ 1454.718958][T24586] CPU: 0 UID: 0 PID: 24586 Comm: syz.4.5104 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1454.718982][T24586] Tainted: [L]=SOFTLOCKUP
[ 1454.718988][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1454.718999][T24586] Call Trace:
[ 1454.719005][T24586]  <TASK>
[ 1454.719013][T24586]  dump_stack_lvl+0xe8/0x150
[ 1454.719040][T24586]  should_fail_ex+0x467/0x600
[ 1454.719066][T24586]  should_failslab+0xa8/0x100
[ 1454.719085][T24586]  __kmalloc_noprof+0xfb/0x790
[ 1454.719109][T24586]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1454.719133][T24586]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1454.719164][T24586]  tomoyo_realpath_from_path+0xef/0x640
[ 1454.719197][T24586]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1454.719217][T24586]  tomoyo_path_number_perm+0x246/0x5f0
[ 1454.719241][T24586]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1454.719263][T24586]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1454.719299][T24586]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1454.719324][T24586]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1454.719360][T24586]  ? __fget_files+0x2a/0x420
[ 1454.719381][T24586]  ? __fget_files+0x3a8/0x420
[ 1454.719396][T24586]  ? __fget_files+0x2a/0x420
[ 1454.719417][T24586]  security_file_ioctl+0xb9/0x260
[ 1454.719439][T24586]  __se_sys_ioctl+0x47/0x170
[ 1454.719462][T24586]  do_syscall_64+0x17b/0x530
[ 1454.719478][T24586]  ? irqentry_exit+0x10f/0x8f0
[ 1454.719500][T24586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.719517][T24586]  ? clear_bhb_loop+0x40/0x90
[ 1454.719537][T24586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.719555][T24586] RIP: 0033:0x7fbf53cade59
[ 1454.719570][T24586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1454.719583][T24586] RSP: 002b:00007fbf51f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1454.719601][T24586] RAX: ffffffffffffffda RBX: 00007fbf53f35fa0 RCX: 00007fbf53cade59
[ 1454.719613][T24586] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003
[ 1454.719625][T24586] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1454.719636][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1454.719647][T24586] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1454.719676][T24586]  </TASK>
[ 1454.719683][T24586] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1454.928152][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1455.033630][T24595] netlink: 'syz.4.5106': attribute type 40 has an invalid length.
[ 1455.542444][  T825] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1455.773685][  T825] usb 5-1: Using ep0 maxpacket: 32
[ 1455.788066][  T825] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1455.791464][  T825] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1455.791488][  T825] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1455.791506][  T825] usb 5-1: config 14 has no interface number 0
[ 1455.791520][  T825] usb 5-1: config 14 has no interface number 1
[ 1455.791587][  T825] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1455.791608][  T825] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1455.791631][  T825] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1455.791653][  T825] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1455.791676][  T825] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1455.791700][  T825] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1455.791722][  T825] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1455.791742][  T825] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1455.791764][  T825] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1455.791781][  T825] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1455.936669][  T825] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1455.936697][  T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.936715][  T825] usb 5-1: Product: syz
[ 1455.936727][  T825] usb 5-1: Manufacturer: syz
[ 1455.936741][  T825] usb 5-1: SerialNumber: syz
[ 1456.249436][ T5254] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1456.262910][ T9412] IPVS: stop unused estimator thread 0...
[ 1456.395229][  T825] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1456.541958][T24628] Set syz1 is full, maxelem 65536 reached
[ 1456.640161][  T825] legousbtower 5-1:14.228: get version request failed: -71
[ 1456.640360][  T825] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1456.687732][  T825] usb 5-1: USB disconnect, device number 11
[ 1456.953801][T24637] block nbd8: NBD_DISCONNECT
[ 1456.953828][T24637] block nbd8: Send disconnect failed -32
[ 1456.953926][T24634] block nbd8: Disconnected due to user request.
[ 1456.953940][T24634] block nbd8: shutting down sockets
[ 1457.160864][T24643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.177698][T24643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.230264][T24643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.242132][T24643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.383298][T24652] fuse: Unknown parameter 'grou00000000000000000000'
[ 1457.537972][T24654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.559432][T24654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.622554][T24656] netlink: 'syz.8.5118': attribute type 29 has an invalid length.
[ 1457.698242][T24658] fuse: Bad value for 'fd'
[ 1457.747804][T24659] netlink: 'syz.8.5118': attribute type 29 has an invalid length.
[ 1458.950292][T24331] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1459.152691][T24331] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1459.161115][T24331] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1459.207282][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1459.228626][T24707] fuse: Unknown parameter 'grou00000000000000000000'
[ 1459.229969][T24331] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1459.232942][T24331] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1459.298288][T24331] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1459.357244][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1459.359778][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1459.362058][   T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1459.362080][   T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1459.362098][   T10] usb 5-1: config 14 has no interface number 0
[ 1459.362112][   T10] usb 5-1: config 14 has no interface number 1
[ 1459.362191][   T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1459.362211][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1459.362234][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1459.362256][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1459.362278][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1459.362302][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1459.362323][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1459.362342][   T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1459.362364][   T10] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1459.362380][   T10] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1459.370925][   T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1459.370950][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.370967][   T10] usb 5-1: Product: syz
[ 1459.370979][   T10] usb 5-1: Manufacturer: syz
[ 1459.370992][   T10] usb 5-1: SerialNumber: syz
[ 1459.445846][T24331] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1459.494761][T24711] fuse: Bad value for 'fd'
[ 1459.663141][T24331] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1459.902252][   T10] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1460.103017][   T10] legousbtower 5-1:14.228: get version request failed: -71
[ 1460.103195][   T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1460.124624][   T10] usb 5-1: USB disconnect, device number 12
[ 1460.135272][T24331] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1460.335087][T24731] FAULT_INJECTION: forcing a failure.
[ 1460.335087][T24731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1460.335120][T24731] CPU: 1 UID: 0 PID: 24731 Comm: syz.8.5131 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1460.335144][T24731] Tainted: [L]=SOFTLOCKUP
[ 1460.335151][T24731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1460.335160][T24731] Call Trace:
[ 1460.335167][T24731]  <TASK>
[ 1460.335174][T24731]  dump_stack_lvl+0xe8/0x150
[ 1460.335199][T24731]  should_fail_ex+0x467/0x600
[ 1460.335225][T24731]  _copy_from_user+0x2d/0xb0
[ 1460.335249][T24731]  ___sys_sendmsg+0x1c6/0x360
[ 1460.335276][T24731]  ? __lock_acquire+0x6df/0x2e40
[ 1460.335298][T24731]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1460.335357][T24731]  ? __fget_files+0x2a/0x420
[ 1460.335374][T24731]  ? __fget_files+0x3a8/0x420
[ 1460.335400][T24731]  __x64_sys_sendmsg+0x1b7/0x290
[ 1460.335423][T24731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1460.335463][T24731]  do_syscall_64+0x17b/0x530
[ 1460.335480][T24731]  ? irqentry_exit+0x10f/0x8f0
[ 1460.335501][T24731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.335518][T24731]  ? clear_bhb_loop+0x40/0x90
[ 1460.335538][T24731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.335556][T24731] RIP: 0033:0x7f2c7e8fde59
[ 1460.335571][T24731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1460.335585][T24731] RSP: 002b:00007f2c7cb56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1460.335604][T24731] RAX: ffffffffffffffda RBX: 00007f2c7eb85fa0 RCX: 00007f2c7e8fde59
[ 1460.335618][T24731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1460.335629][T24731] RBP: 00007f2c7cb56090 R08: 0000000000000000 R09: 0000000000000000
[ 1460.335640][T24731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1460.335651][T24731] R13: 00007f2c7eb86038 R14: 00007f2c7eb85fa0 R15: 00007ffc862daef8
[ 1460.335677][T24731]  </TASK>
[ 1460.346779][T24729] Set syz1 is full, maxelem 65536 reached
[ 1460.470691][T24331] 8021q: adding VLAN 0 to HW filter on device team0
[ 1460.533620][T18550] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1460.535818][T18550] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1460.590159][T18550] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1460.590304][T18550] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1460.780262][T24742] fuse: Bad value for 'fd'
[ 1460.859721][T24746] fuse: Unknown parameter 'grou00000000000000000000'
[ 1461.056168][T24755] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1461.070085][T24753] nvme_fabrics: unknown parameter or missing value 'geneve024' in ctrl creation request
[ 1461.727202][T18247] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1461.893336][T18247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1461.893362][T18247] usb 5-1: config 0 has no interfaces?
[ 1461.893389][T18247] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1461.893407][T18247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.943485][T18247] usb 5-1: config 0 descriptor??
[ 1461.981384][T24331] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1462.153318][T24761] FAULT_INJECTION: forcing a failure.
[ 1462.153318][T24761] name failslab, interval 1, probability 0, space 0, times 0
[ 1462.153347][T24761] CPU: 1 UID: 0 PID: 24761 Comm: syz.4.5138 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1462.153366][T24761] Tainted: [L]=SOFTLOCKUP
[ 1462.153371][T24761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1462.153379][T24761] Call Trace:
[ 1462.153385][T24761]  <TASK>
[ 1462.153391][T24761]  dump_stack_lvl+0xe8/0x150
[ 1462.153415][T24761]  should_fail_ex+0x467/0x600
[ 1462.153435][T24761]  should_failslab+0xa8/0x100
[ 1462.153450][T24761]  kmem_cache_alloc_node_noprof+0xac/0x660
[ 1462.153469][T24761]  ? __alloc_skb+0x1d7/0x7a0
[ 1462.153485][T24761]  ? __alloc_skb+0x1d7/0x7a0
[ 1462.153504][T24761]  __alloc_skb+0x1d7/0x7a0
[ 1462.153522][T24761]  netlink_sendmsg+0x5d4/0xb40
[ 1462.153547][T24761]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1462.153566][T24761]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1462.153594][T24761]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1462.153612][T24761]  ? arch_stack_walk+0xfb/0x150
[ 1462.153627][T24761]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1462.153643][T24761]  sock_sendmsg_nosec+0x13a/0x180
[ 1462.153660][T24761]  ____sys_sendmsg+0x565/0x870
[ 1462.153685][T24761]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1462.153711][T24761]  ? import_iovec+0x73/0xa0
[ 1462.153735][T24761]  ___sys_sendmsg+0x2a5/0x360
[ 1462.153755][T24761]  ? __lock_acquire+0x6df/0x2e40
[ 1462.153775][T24761]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1462.153815][T24761]  ? __fget_files+0x2a/0x420
[ 1462.153829][T24761]  ? __fget_files+0x3a8/0x420
[ 1462.153857][T24761]  __x64_sys_sendmsg+0x1b7/0x290
[ 1462.153876][T24761]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1462.153907][T24761]  do_syscall_64+0x17b/0x530
[ 1462.153920][T24761]  ? irqentry_exit+0x10f/0x8f0
[ 1462.153937][T24761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.153952][T24761]  ? clear_bhb_loop+0x40/0x90
[ 1462.153968][T24761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.153981][T24761] RIP: 0033:0x7fbf53cade59
[ 1462.153995][T24761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1462.154006][T24761] RSP: 002b:00007fbf51f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1462.154022][T24761] RAX: ffffffffffffffda RBX: 00007fbf53f35fa0 RCX: 00007fbf53cade59
[ 1462.154031][T24761] RDX: 0000000000008482 RSI: 0000200000000280 RDI: 0000000000000003
[ 1462.154040][T24761] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1462.154049][T24761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1462.154056][T24761] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1462.154079][T24761]  </TASK>
[ 1462.288142][  T199] usb 5-1: USB disconnect, device number 13
[ 1462.671726][  T199] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1462.828245][  T199] usb 9-1: Using ep0 maxpacket: 8
[ 1462.832890][  T199] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.832942][  T199] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1462.832963][  T199] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.854222][T24331] veth0_vlan: entered promiscuous mode
[ 1462.882891][  T199] usb 9-1: config 0 descriptor??
[ 1462.883347][T24800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1462.910037][T24800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1462.931224][T24331] veth1_vlan: entered promiscuous mode
[ 1462.940747][  T199] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1462.999172][T24803] FAULT_INJECTION: forcing a failure.
[ 1462.999172][T24803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1462.999205][T24803] CPU: 1 UID: 0 PID: 24803 Comm: syz.4.5143 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1462.999229][T24803] Tainted: [L]=SOFTLOCKUP
[ 1462.999236][T24803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1462.999246][T24803] Call Trace:
[ 1462.999253][T24803]  <TASK>
[ 1462.999261][T24803]  dump_stack_lvl+0xe8/0x150
[ 1462.999286][T24803]  should_fail_ex+0x467/0x600
[ 1462.999312][T24803]  _copy_to_user+0x31/0xb0
[ 1462.999337][T24803]  simple_read_from_buffer+0xe1/0x170
[ 1462.999361][T24803]  proc_fail_nth_read+0x1be/0x230
[ 1462.999381][T24803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1462.999402][T24803]  ? rw_verify_area+0x250/0x4d0
[ 1462.999422][T24803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1462.999440][T24803]  vfs_read+0x219/0xa90
[ 1462.999466][T24803]  ? __pfx_vfs_read+0x10/0x10
[ 1462.999495][T24803]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1462.999525][T24803]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1462.999550][T24803]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1462.999581][T24803]  ? mutex_lock_nested+0x152/0x1d0
[ 1462.999600][T24803]  ? fdget_pos+0x252/0x320
[ 1462.999626][T24803]  ksys_read+0x156/0x270
[ 1462.999648][T24803]  ? __pfx_ksys_read+0x10/0x10
[ 1462.999675][T24803]  do_syscall_64+0x17b/0x530
[ 1462.999690][T24803]  ? irqentry_exit+0x10f/0x8f0
[ 1462.999712][T24803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.999729][T24803]  ? clear_bhb_loop+0x40/0x90
[ 1462.999750][T24803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.999767][T24803] RIP: 0033:0x7fbf53c6e68e
[ 1462.999785][T24803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1462.999798][T24803] RSP: 002b:00007fbf51f05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1462.999817][T24803] RAX: ffffffffffffffda RBX: 00007fbf51f066c0 RCX: 00007fbf53c6e68e
[ 1462.999830][T24803] RDX: 000000000000000f RSI: 00007fbf51f060a0 RDI: 0000000000000005
[ 1462.999838][T24803] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1462.999849][T24803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1462.999859][T24803] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1462.999888][T24803]  </TASK>
[ 1463.328392][T24331] veth0_macvtap: entered promiscuous mode
[ 1463.402459][T24331] veth1_macvtap: entered promiscuous mode
[ 1463.425283][T24809] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1463.642647][  T199] gspca_vc032x: reg_w err -110
[ 1463.642752][  T199] vc032x 9-1:0.0: probe with driver vc032x failed with error -110
[ 1463.724169][T24331] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1463.879523][T24331] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1463.921493][T24822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1463.922080][T24822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1463.989053][T19307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.004361][T18247] usb 9-1: USB disconnect, device number 70
[ 1464.018914][T18544] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.020428][T18544] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.123260][T18544] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1465.464583][T24846] netlink: 'syz.8.5150': attribute type 17 has an invalid length.
[ 1465.464603][T24846] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5150'.
[ 1465.726879][T24846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1466.302828][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1466.302847][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1466.386736][T24857] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1466.488563][  T199] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1466.512220][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1466.512237][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1466.617243][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1466.640621][  T199] usb 9-1: Using ep0 maxpacket: 32
[ 1466.642744][  T199] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1466.642770][  T199] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1466.642806][  T199] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1466.642828][  T199] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.702040][  T199] usb 9-1: config 0 descriptor??
[ 1466.768851][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1466.772093][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1466.773601][    T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1466.773622][    T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1466.773640][    T9] usb 5-1: config 14 has no interface number 0
[ 1466.773653][    T9] usb 5-1: config 14 has no interface number 1
[ 1466.773783][    T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1466.773804][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1466.773825][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1466.773895][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1466.773918][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1466.773940][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1466.773960][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1466.773978][    T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1466.773997][    T9] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1466.774063][    T9] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1466.792679][    T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1466.792717][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.792735][    T9] usb 5-1: Product: syz
[ 1466.792747][    T9] usb 5-1: Manufacturer: syz
[ 1466.792813][    T9] usb 5-1: SerialNumber: syz
[ 1467.214931][  T199] hid_parser_main: 22 callbacks suppressed
[ 1467.215007][  T199] ft260 0003:0403:6030.004A: unknown main item tag 0x0
[ 1467.215036][  T199] ft260 0003:0403:6030.004A: unknown main item tag 0x0
[ 1467.369792][  T199] ft260 0003:0403:6030.004A: chip code: 0000 0000
[ 1467.480896][    T9] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1467.721542][    T9] legousbtower 5-1:14.228: get version request failed: -71
[ 1467.721824][    T9] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1467.722939][  T199] ft260 0003:0403:6030.004A: failed to retrieve system status
[ 1467.761028][T24854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.786630][  T199] ft260 0003:0403:6030.004A: probe with driver ft260 failed with error -32
[ 1467.853090][T24854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.923865][    T9] usb 5-1: USB disconnect, device number 14
[ 1467.965228][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5158'.
[ 1467.965252][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5158'.
[ 1468.049955][T18247] usb 9-1: USB disconnect, device number 71
[ 1468.600784][T24906] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1468.936183][T24917] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64
[ 1468.995787][T24922] netlink: 'syz.4.5165': attribute type 17 has an invalid length.
[ 1468.995806][T24922] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5165'.
[ 1468.995837][T24922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1469.114689][T24928] netlink: 'syz.4.5165': attribute type 10 has an invalid length.
[ 1469.147758][    T9] usb 9-1: new full-speed USB device number 72 using dummy_hcd
[ 1469.177475][T24928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1469.189861][T24928] team0: Port device bond0 added
[ 1469.301355][    T9] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1469.301383][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1469.301400][    T9] usb 9-1: Product: syz
[ 1469.301413][    T9] usb 9-1: Manufacturer: syz
[ 1469.301425][    T9] usb 9-1: SerialNumber: syz
[ 1469.349828][    T9] usb 9-1: config 0 descriptor??
[ 1469.392163][T24920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.395812][T24920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.396955][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1469.435826][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1469.450781][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[ 1469.497397][T24935] binder: 24934:24935 ioctl c0189372 200000000140 returned -22
[ 1469.592859][ T5770] usb 9-1: USB disconnect, device number 72
[ 1469.762116][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'.
[ 1469.929007][ T4920] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1470.083456][ T4920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1470.083481][ T4920] usb 5-1: config 0 has no interfaces?
[ 1470.083511][ T4920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1470.083531][ T4920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.093474][ T4920] usb 5-1: config 0 descriptor??
[ 1470.107249][ T5695] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1470.192962][T24955] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1470.299196][ T5695] usb 10-1: Using ep0 maxpacket: 32
[ 1470.301757][ T5695] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1470.303676][ T5695] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[ 1470.303699][ T5695] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[ 1470.303719][ T5695] usb 10-1: config 14 has no interface number 0
[ 1470.303735][ T5695] usb 10-1: config 14 has no interface number 1
[ 1470.303792][ T5695] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1470.303815][ T5695] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1470.303839][ T5695] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1470.303884][ T5695] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1470.303910][ T5695] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1470.303936][ T5695] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1470.303961][ T5695] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1470.303982][ T5695] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1470.304008][ T5695] usb 10-1: config 14 interface 57 has no altsetting 0
[ 1470.304025][ T5695] usb 10-1: config 14 interface 228 has no altsetting 0
[ 1470.465172][ T5695] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1470.465199][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.465215][ T5695] usb 10-1: Product: syz
[ 1470.465228][ T5695] usb 10-1: Manufacturer: syz
[ 1470.465241][ T5695] usb 10-1: SerialNumber: syz
[ 1470.528291][  T199] usb 5-1: USB disconnect, device number 15
[ 1470.964168][ T5695] legousbtower 10-1:14.57: interrupt endpoints not found
[ 1471.180854][ T5695] legousbtower 10-1:14.228: get version request failed: -71
[ 1471.181034][ T5695] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71
[ 1471.224287][ T5695] usb 10-1: USB disconnect, device number 14
[ 1471.521745][ T5760] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[ 1471.592834][T24997] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1471.681709][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1471.681739][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1471.681771][ T5760] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1471.681791][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1471.734128][ T5760] usb 5-1: config 0 descriptor??
[ 1471.854755][T25000] Set syz1 is full, maxelem 65536 reached
[ 1472.222730][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222763][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222788][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222812][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222836][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222860][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.222884][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: unknown main item tag 0x0
[ 1472.322889][ T5760] aquacomputer_d5next 0003:0C70:F0B6.004B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0
[ 1472.359971][T24989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1472.364175][T24989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1472.625551][ T5760] usb 5-1: USB disconnect, device number 16
[ 1472.772479][T25032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1472.773024][T25032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1472.878427][T25039] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1472.997635][ T5695] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1473.082861][T25049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.083481][T25049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.147204][ T5695] usb 10-1: Using ep0 maxpacket: 16
[ 1473.149941][ T5695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 1473.149970][ T5695] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1473.149990][ T5695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024
[ 1473.150014][ T5695] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1473.150034][ T5695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64187, setting to 1024
[ 1473.150056][ T5695] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1473.152239][ T5695] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1473.152264][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.152281][ T5695] usb 10-1: Product: syz
[ 1473.152293][ T5695] usb 10-1: Manufacturer: syz
[ 1473.152305][ T5695] usb 10-1: SerialNumber: syz
[ 1473.166958][ T5695] usb 10-1: config 0 descriptor??
[ 1473.172140][T25034] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1473.173040][T25034] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1473.333573][ T5695] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected
[ 1473.333681][    C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71)
[ 1473.333756][    C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71)
[ 1473.378935][ T5695] usb 10-1: USB disconnect, device number 15
[ 1473.423022][ T5695] mcba_usb 10-1:0.0 can0: device disconnected
[ 1473.836695][T25066] FAULT_INJECTION: forcing a failure.
[ 1473.836695][T25066] name failslab, interval 1, probability 0, space 0, times 0
[ 1473.836729][T25066] CPU: 1 UID: 0 PID: 25066 Comm: syz.2.5197 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1473.836753][T25066] Tainted: [L]=SOFTLOCKUP
[ 1473.836759][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1473.836770][T25066] Call Trace:
[ 1473.836777][T25066]  <TASK>
[ 1473.836785][T25066]  dump_stack_lvl+0xe8/0x150
[ 1473.836811][T25066]  should_fail_ex+0x467/0x600
[ 1473.836838][T25066]  should_failslab+0xa8/0x100
[ 1473.836857][T25066]  __kmalloc_cache_noprof+0xa1/0x670
[ 1473.836882][T25066]  ? rds_cong_from_addr+0x50/0x360
[ 1473.836906][T25066]  ? rds_cong_from_addr+0x50/0x360
[ 1473.836935][T25066]  rds_cong_from_addr+0x50/0x360
[ 1473.836960][T25066]  rds_cong_get_maps+0x53/0xb0
[ 1473.836985][T25066]  __rds_conn_create+0x97c/0x2260
[ 1473.837001][T25066]  ? __rds_conn_create+0x2d4/0x2260
[ 1473.837029][T25066]  ? __pfx___rds_conn_create+0x10/0x10
[ 1473.837044][T25066]  ? rcu_is_watching+0x15/0xb0
[ 1473.837063][T25066]  ? trace_kmalloc+0x2a/0xf0
[ 1473.837088][T25066]  ? __rt_spin_lock_init+0x3e/0x50
[ 1473.837121][T25066]  rds_conn_create_outgoing+0x43/0x60
[ 1473.837142][T25066]  rds_sendmsg+0xfca/0x20e0
[ 1473.837176][T25066]  ? __pfx_rds_sendmsg+0x10/0x10
[ 1473.837199][T25066]  ? lock_acquire+0x115/0x350
[ 1473.837222][T25066]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1473.837255][T25066]  ? __pfx_rds_sendmsg+0x10/0x10
[ 1473.837274][T25066]  sock_sendmsg_nosec+0x13a/0x180
[ 1473.837296][T25066]  __sys_sendto+0x41e/0x5d0
[ 1473.837322][T25066]  ? __pfx___sys_sendto+0x10/0x10
[ 1473.837368][T25066]  ? __pfx_ksys_write+0x10/0x10
[ 1473.837391][T25066]  __x64_sys_sendto+0xde/0x100
[ 1473.837415][T25066]  do_syscall_64+0x17b/0x530
[ 1473.837431][T25066]  ? irqentry_exit+0x10f/0x8f0
[ 1473.837454][T25066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.837471][T25066]  ? clear_bhb_loop+0x40/0x90
[ 1473.837493][T25066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.837510][T25066] RIP: 0033:0x7f472123de59
[ 1473.837527][T25066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1473.837541][T25066] RSP: 002b:00007f471f496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1473.837560][T25066] RAX: ffffffffffffffda RBX: 00007f47214c5fa0 RCX: 00007f472123de59
[ 1473.837573][T25066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1473.837584][T25066] RBP: 00007f471f496090 R08: 00002000000001c0 R09: 000000000000001c
[ 1473.837596][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1473.837606][T25066] R13: 00007f47214c6038 R14: 00007f47214c5fa0 R15: 00007ffe4aa21818
[ 1473.837634][T25066]  </TASK>
[ 1473.904461][T25068] fuse: Bad value for 'user_id'
[ 1473.905663][T25068] fuse: Bad value for 'user_id'
[ 1474.618316][ T4920] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1474.767142][ T4920] usb 9-1: Using ep0 maxpacket: 32
[ 1474.770004][ T4920] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1474.771253][ T4920] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[ 1474.771276][ T4920] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[ 1474.771295][ T4920] usb 9-1: config 14 has no interface number 0
[ 1474.771497][ T4920] usb 9-1: config 14 has no interface number 1
[ 1474.771555][ T4920] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1474.771576][ T4920] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1474.771602][ T4920] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1474.771626][ T4920] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1474.771651][ T4920] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1474.771678][ T4920] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1474.771703][ T4920] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1474.771724][ T4920] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1474.771750][ T4920] usb 9-1: config 14 interface 57 has no altsetting 0
[ 1474.771767][ T4920] usb 9-1: config 14 interface 228 has no altsetting 0
[ 1474.844233][ T4920] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1474.844260][ T4920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.844278][ T4920] usb 9-1: Product: syz
[ 1474.844291][ T4920] usb 9-1: Manufacturer: syz
[ 1474.844304][ T4920] usb 9-1: SerialNumber: syz
[ 1474.915380][T25087] FAULT_INJECTION: forcing a failure.
[ 1474.915380][T25087] name failslab, interval 1, probability 0, space 0, times 0
[ 1474.915411][T25087] CPU: 0 UID: 0 PID: 25087 Comm: syz.4.5196 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1474.915434][T25087] Tainted: [L]=SOFTLOCKUP
[ 1474.915440][T25087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1474.915450][T25087] Call Trace:
[ 1474.915457][T25087]  <TASK>
[ 1474.915465][T25087]  dump_stack_lvl+0xe8/0x150
[ 1474.915490][T25087]  should_fail_ex+0x467/0x600
[ 1474.915516][T25087]  should_failslab+0xa8/0x100
[ 1474.915533][T25087]  ? security_inode_alloc+0x39/0x2d0
[ 1474.915557][T25087]  kmem_cache_alloc_noprof+0x9e/0x680
[ 1474.915589][T25087]  ? security_inode_alloc+0x39/0x2d0
[ 1474.915618][T25087]  security_inode_alloc+0x39/0x2d0
[ 1474.915643][T25087]  inode_init_always_gfp+0x983/0xd40
[ 1474.915674][T25087]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1474.915697][T25087]  alloc_inode+0x82/0x1b0
[ 1474.915723][T25087]  new_inode+0x1f/0x170
[ 1474.915743][T25087]  __debugfs_create_file+0xb8/0x400
[ 1474.915769][T25087]  debugfs_create_file_full+0x3f/0x60
[ 1474.915797][T25087]  ref_tracker_dir_debugfs+0x19d/0x370
[ 1474.915819][T25087]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1474.915863][T25087]  ? __kvmalloc_node_noprof+0x5cc/0x880
[ 1474.915899][T25087]  alloc_netdev_mqs+0x2bf/0x1300
[ 1474.915924][T25087]  ? __pfx_l2tp_eth_dev_setup+0x10/0x10
[ 1474.915948][T25087]  l2tp_eth_create+0x1c5/0xbe0
[ 1474.915972][T25087]  ? l2tp_tunnel_get+0x398/0x430
[ 1474.915996][T25087]  ? __pfx_l2tp_eth_create+0x10/0x10
[ 1474.916025][T25087]  l2tp_nl_cmd_session_create+0x71a/0xbe0
[ 1474.916054][T25087]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[ 1474.916079][T25087]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1474.916097][T25087]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1474.916124][T25087]  genl_family_rcv_msg_doit+0x233/0x340
[ 1474.916149][T25087]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1474.916178][T25087]  ? bpf_lsm_capable+0x9/0x20
[ 1474.916196][T25087]  ? security_capable+0x74/0x280
[ 1474.916223][T25087]  genl_rcv_msg+0x614/0x7a0
[ 1474.916248][T25087]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1474.916264][T25087]  ? ref_tracker_free+0x668/0x820
[ 1474.916285][T25087]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[ 1474.916305][T25087]  ? ____sys_sendmsg+0x565/0x870
[ 1474.916326][T25087]  ? ___sys_sendmsg+0x2a5/0x360
[ 1474.916346][T25087]  ? __x64_sys_sendmsg+0x1b7/0x290
[ 1474.916366][T25087]  ? do_syscall_64+0x17b/0x530
[ 1474.916382][T25087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1474.916409][T25087]  netlink_rcv_skb+0x226/0x4a0
[ 1474.916432][T25087]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1474.916453][T25087]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1474.916488][T25087]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1474.916510][T25087]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1474.916537][T25087]  genl_rcv+0x28/0x40
[ 1474.916553][T25087]  netlink_unicast+0x7f5/0x990
[ 1474.916591][T25087]  netlink_sendmsg+0x813/0xb40
[ 1474.916623][T25087]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1474.916649][T25087]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1474.916676][T25087]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1474.916700][T25087]  ? arch_stack_walk+0xfb/0x150
[ 1474.916720][T25087]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1474.916741][T25087]  sock_sendmsg_nosec+0x13a/0x180
[ 1474.916762][T25087]  ____sys_sendmsg+0x565/0x870
[ 1474.916793][T25087]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1474.916824][T25087]  ? import_iovec+0x73/0xa0
[ 1474.916851][T25087]  ___sys_sendmsg+0x2a5/0x360
[ 1474.916873][T25087]  ? __lock_acquire+0x6df/0x2e40
[ 1474.916894][T25087]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1474.916951][T25087]  ? __fget_files+0x2a/0x420
[ 1474.916968][T25087]  ? __fget_files+0x3a8/0x420
[ 1474.916995][T25087]  __x64_sys_sendmsg+0x1b7/0x290
[ 1474.917021][T25087]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1474.917060][T25087]  do_syscall_64+0x17b/0x530
[ 1474.917076][T25087]  ? irqentry_exit+0x10f/0x8f0
[ 1474.917098][T25087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1474.917115][T25087]  ? clear_bhb_loop+0x40/0x90
[ 1474.917135][T25087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1474.917152][T25087] RIP: 0033:0x7fbf53cade59
[ 1474.917168][T25087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1474.917182][T25087] RSP: 002b:00007fbf51f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1474.917201][T25087] RAX: ffffffffffffffda RBX: 00007fbf53f35fa0 RCX: 00007fbf53cade59
[ 1474.917214][T25087] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[ 1474.917225][T25087] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1474.917236][T25087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1474.917246][T25087] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1474.917275][T25087]  </TASK>
[ 1474.918823][T25087] debugfs: out of free dentries, can not create file 'netdev@ffff888049f607d0'
[ 1475.233792][T25092] netlink: 'syz.4.5205': attribute type 29 has an invalid length.
[ 1475.547437][    T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1475.562511][T25097] FAULT_INJECTION: forcing a failure.
[ 1475.562511][T25097] name failslab, interval 1, probability 0, space 0, times 0
[ 1475.562543][T25097] CPU: 0 UID: 0 PID: 25097 Comm: syz.2.5206 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1475.562567][T25097] Tainted: [L]=SOFTLOCKUP
[ 1475.562573][T25097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1475.562583][T25097] Call Trace:
[ 1475.562591][T25097]  <TASK>
[ 1475.562599][T25097]  dump_stack_lvl+0xe8/0x150
[ 1475.562626][T25097]  should_fail_ex+0x467/0x600
[ 1475.562652][T25097]  should_failslab+0xa8/0x100
[ 1475.562670][T25097]  ? skb_clone+0x212/0x3a0
[ 1475.562693][T25097]  kmem_cache_alloc_noprof+0x9e/0x680
[ 1475.562718][T25097]  ? skb_clone+0x212/0x3a0
[ 1475.562746][T25097]  skb_clone+0x212/0x3a0
[ 1475.562771][T25097]  __netlink_deliver_tap+0x410/0x880
[ 1475.562804][T25097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1475.562842][T25097]  netlink_deliver_tap+0x19c/0x1b0
[ 1475.562867][T25097]  netlink_dump+0x95b/0xee0
[ 1475.562900][T25097]  ? __pfx_netlink_dump+0x10/0x10
[ 1475.562934][T25097]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1475.562966][T25097]  __netlink_dump_start+0x589/0x7b0
[ 1475.562996][T25097]  ip_set_dump+0x15b/0x1f0
[ 1475.563018][T25097]  ? __pfx_ip_set_dump+0x10/0x10
[ 1475.563038][T25097]  ? __pfx_ip_set_dump_start+0x10/0x10
[ 1475.563059][T25097]  ? __pfx_ip_set_dump_do+0x10/0x10
[ 1475.563079][T25097]  ? __pfx_ip_set_dump_done+0x10/0x10
[ 1475.563103][T25097]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1475.563127][T25097]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1475.563159][T25097]  nfnetlink_rcv_msg+0xcd6/0x12c0
[ 1475.563182][T25097]  ? nfnetlink_rcv_msg+0x22e/0x12c0
[ 1475.563219][T25097]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1475.563264][T25097]  ? __lock_acquire+0x6df/0x2e40
[ 1475.563288][T25097]  ? __lock_acquire+0x6df/0x2e40
[ 1475.563303][T25097]  ? sock_sendmsg_nosec+0x13a/0x180
[ 1475.563328][T25097]  netlink_rcv_skb+0x226/0x4a0
[ 1475.563351][T25097]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1475.563381][T25097]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1475.563415][T25097]  ? bpf_lsm_capable+0x9/0x20
[ 1475.563431][T25097]  ? security_capable+0x74/0x280
[ 1475.563459][T25097]  nfnetlink_rcv+0x2b9/0x28d0
[ 1475.563482][T25097]  ? sock_sendmsg_nosec+0x13a/0x180
[ 1475.563502][T25097]  ? __pfx_snprintf+0x10/0x10
[ 1475.563525][T25097]  ? unwind_get_return_address+0x4d/0x90
[ 1475.563542][T25097]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1475.563574][T25097]  ? trim_netdev_trace+0x791/0x820
[ 1475.563594][T25097]  ? __pfx_trim_netdev_trace+0x10/0x10
[ 1475.563609][T25097]  ? stack_trace_save+0xa9/0x100
[ 1475.563635][T25097]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1475.563658][T25097]  ? save_netdev_trace_buffer+0x18f/0x5e0
[ 1475.563679][T25097]  ? save_netdev_trace_buffer+0x4c3/0x5e0
[ 1475.563701][T25097]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[ 1475.563718][T25097]  ? ref_tracker_free+0x668/0x820
[ 1475.563737][T25097]  ? __netlink_deliver_tap+0x600/0x880
[ 1475.563759][T25097]  ? netlink_deliver_tap+0x19c/0x1b0
[ 1475.563780][T25097]  ? netlink_unicast+0x7b8/0x990
[ 1475.563799][T25097]  ? netlink_sendmsg+0x813/0xb40
[ 1475.563820][T25097]  ? sock_sendmsg_nosec+0x13a/0x180
[ 1475.563835][T25097]  ? ____sys_sendmsg+0x565/0x870
[ 1475.563855][T25097]  ? ___sys_sendmsg+0x2a5/0x360
[ 1475.563875][T25097]  ? __x64_sys_sendmsg+0x1b7/0x290
[ 1475.563896][T25097]  ? do_syscall_64+0x17b/0x530
[ 1475.563911][T25097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.563936][T25097]  ? __skb_clone+0x449/0x6c0
[ 1475.563965][T25097]  ? skb_clone+0x246/0x3a0
[ 1475.563990][T25097]  ? __netlink_deliver_tap+0x838/0x880
[ 1475.564012][T25097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1475.564041][T25097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1475.564063][T25097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1475.564091][T25097]  netlink_unicast+0x7f5/0x990
[ 1475.564123][T25097]  netlink_sendmsg+0x813/0xb40
[ 1475.564155][T25097]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1475.564180][T25097]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1475.564207][T25097]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1475.564230][T25097]  ? arch_stack_walk+0xfb/0x150
[ 1475.564249][T25097]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1475.564272][T25097]  sock_sendmsg_nosec+0x13a/0x180
[ 1475.564293][T25097]  ____sys_sendmsg+0x565/0x870
[ 1475.564324][T25097]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1475.564361][T25097]  ? import_iovec+0x73/0xa0
[ 1475.564388][T25097]  ___sys_sendmsg+0x2a5/0x360
[ 1475.564410][T25097]  ? __lock_acquire+0x6df/0x2e40
[ 1475.564431][T25097]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1475.564486][T25097]  ? __fget_files+0x2a/0x420
[ 1475.564503][T25097]  ? __fget_files+0x3a8/0x420
[ 1475.564530][T25097]  __x64_sys_sendmsg+0x1b7/0x290
[ 1475.564556][T25097]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1475.564598][T25097]  do_syscall_64+0x17b/0x530
[ 1475.564613][T25097]  ? irqentry_exit+0x10f/0x8f0
[ 1475.564636][T25097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.564653][T25097]  ? clear_bhb_loop+0x40/0x90
[ 1475.564674][T25097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.564691][T25097] RIP: 0033:0x7f472123de59
[ 1475.564709][T25097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1475.564723][T25097] RSP: 002b:00007f471f496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1475.564742][T25097] RAX: ffffffffffffffda RBX: 00007f47214c5fa0 RCX: 00007f472123de59
[ 1475.564755][T25097] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[ 1475.564767][T25097] RBP: 00007f471f496090 R08: 0000000000000000 R09: 0000000000000000
[ 1475.564778][T25097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1475.564789][T25097] R13: 00007f47214c6038 R14: 00007f47214c5fa0 R15: 00007ffe4aa21818
[ 1475.564818][T25097]  </TASK>
[ 1475.677235][    T9] usb 5-1: device descriptor read/64, error -71
[ 1475.751225][T25104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.754145][T25104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.775735][T25104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5208'.
[ 1475.930004][    T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 1476.077343][    T9] usb 5-1: device descriptor read/64, error -71
[ 1476.187826][    T9] usb usb5-port1: attempt power cycle
[ 1476.222161][ T4920] legousbtower 9-1:14.57: interrupt endpoints not found
[ 1476.278215][ T4920] legousbtower 9-1:14.228: get version request failed: -71
[ 1476.278398][ T4920] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71
[ 1476.306269][ T4920] usb 9-1: USB disconnect, device number 73
[ 1476.384990][T25108] fuse: Bad value for 'user_id'
[ 1476.385001][T25108] fuse: Bad value for 'user_id'
[ 1476.527292][    T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[ 1476.547879][    T9] usb 5-1: device descriptor read/8, error -71
[ 1476.787344][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[ 1476.811415][    T9] usb 5-1: device descriptor read/8, error -71
[ 1476.922271][    T9] usb usb5-port1: unable to enumerate USB device
[ 1477.059036][   T38] kauditd_printk_skb: 149 callbacks suppressed
[ 1477.059053][   T38] audit: type=1326 audit(1783998681.003:995): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25129 comm="syz.2.5215" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x0
[ 1477.059415][   T38] audit: type=1326 audit(1783998681.003:996): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25129 comm="syz.2.5215" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f472123de59 code=0x0
[ 1477.099269][ T4920] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1477.227368][ T4920] usb 9-1: device descriptor read/64, error -71
[ 1477.497632][ T4920] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1477.627253][ T4920] usb 9-1: device descriptor read/64, error -71
[ 1477.749645][ T4920] usb usb9-port1: attempt power cycle
[ 1477.793924][T25142] fuse: Bad value for 'user_id'
[ 1477.793936][T25142] fuse: Bad value for 'user_id'
[ 1478.097797][ T4920] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1478.130670][ T4920] usb 9-1: device descriptor read/8, error -71
[ 1478.137472][T18231] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1478.290573][T18231] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[ 1478.290656][T18231] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1478.290673][T18231] usb 10-1: config 0 has no interface number 0
[ 1478.292802][T18231] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1478.292826][T18231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.292844][T18231] usb 10-1: Product: syz
[ 1478.292855][T18231] usb 10-1: Manufacturer: syz
[ 1478.292862][T18231] usb 10-1: SerialNumber: syz
[ 1478.296460][T18231] usb 10-1: config 0 descriptor??
[ 1478.417202][ T4920] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1478.437745][ T4920] usb 9-1: device descriptor read/8, error -71
[ 1478.547562][ T4920] usb usb9-port1: unable to enumerate USB device
[ 1478.569374][T18231] uvcvideo 10-1:0.64: Found UVC 0.00 device syz (046d:0823)
[ 1478.569396][T18231] uvcvideo 10-1:0.64: No valid video chain found.
[ 1478.647504][ T5770] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1478.818739][ T5770] usb 5-1: Using ep0 maxpacket: 32
[ 1478.820970][ T5770] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1478.822205][ T5770] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1478.822227][ T5770] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1478.822244][ T5770] usb 5-1: config 14 has no interface number 0
[ 1478.822259][ T5770] usb 5-1: config 14 has no interface number 1
[ 1478.822323][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1478.822335][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1478.822347][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1478.822359][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1478.822372][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1478.822385][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1478.822397][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1478.822408][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1478.822420][ T5770] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1478.822428][ T5770] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1478.824555][ T5770] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1478.824579][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.824596][ T5770] usb 5-1: Product: syz
[ 1478.824609][ T5770] usb 5-1: Manufacturer: syz
[ 1478.824619][ T5770] usb 5-1: SerialNumber: syz
[ 1479.404936][ T5770] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1479.650904][ T5770] legousbtower 5-1:14.228: get version request failed: -71
[ 1479.651188][ T5770] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1479.681236][ T5770] usb 5-1: USB disconnect, device number 21
[ 1480.003933][T25166] FAULT_INJECTION: forcing a failure.
[ 1480.003933][T25166] name failslab, interval 1, probability 0, space 0, times 0
[ 1480.003955][T25166] CPU: 0 UID: 0 PID: 25166 Comm: syz.2.5224 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1480.003969][T25166] Tainted: [L]=SOFTLOCKUP
[ 1480.003972][T25166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1480.003979][T25166] Call Trace:
[ 1480.003983][T25166]  <TASK>
[ 1480.003988][T25166]  dump_stack_lvl+0xe8/0x150
[ 1480.004004][T25166]  should_fail_ex+0x467/0x600
[ 1480.004019][T25166]  should_failslab+0xa8/0x100
[ 1480.004030][T25166]  __kmalloc_cache_noprof+0xa1/0x670
[ 1480.004044][T25166]  ? __request_module+0x2d0/0x630
[ 1480.004054][T25166]  ? __request_module+0x2d0/0x630
[ 1480.004067][T25166]  __request_module+0x2d0/0x630
[ 1480.004080][T25166]  ? __pfx___request_module+0x10/0x10
[ 1480.004096][T25166]  ? safesetid_security_capable+0xa9/0x1a0
[ 1480.004109][T25166]  ? security_capable+0x74/0x280
[ 1480.004124][T25166]  ? dev_load+0x21/0x1f0
[ 1480.004142][T25166]  dev_load+0x190/0x1f0
[ 1480.004161][T25166]  dev_ioctl+0x59f/0x1150
[ 1480.004183][T25166]  sock_do_ioctl+0x23e/0x320
[ 1480.004204][T25166]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1480.004222][T25166]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1480.004251][T25166]  sock_ioctl+0x57d/0x7f0
[ 1480.004262][T25166]  ? __pfx_sock_ioctl+0x10/0x10
[ 1480.004273][T25166]  ? __fget_files+0x3a8/0x420
[ 1480.004283][T25166]  ? __fget_files+0x2a/0x420
[ 1480.004294][T25166]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1480.004309][T25166]  ? __pfx_sock_ioctl+0x10/0x10
[ 1480.004318][T25166]  __se_sys_ioctl+0xff/0x170
[ 1480.004332][T25166]  do_syscall_64+0x17b/0x530
[ 1480.004341][T25166]  ? irqentry_exit+0x10f/0x8f0
[ 1480.004354][T25166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.004364][T25166]  ? clear_bhb_loop+0x40/0x90
[ 1480.004376][T25166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.004386][T25166] RIP: 0033:0x7f472123de59
[ 1480.004396][T25166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1480.004404][T25166] RSP: 002b:00007f471f496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1480.004416][T25166] RAX: ffffffffffffffda RBX: 00007f47214c5fa0 RCX: 00007f472123de59
[ 1480.004423][T25166] RDX: 00002000000002c0 RSI: 0000000000008947 RDI: 0000000000000003
[ 1480.004432][T25166] RBP: 00007f471f496090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.004438][T25166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1480.004444][T25166] R13: 00007f47214c6038 R14: 00007f47214c5fa0 R15: 00007ffe4aa21818
[ 1480.004458][T25166]  </TASK>
[ 1480.727271][T25095] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1480.730075][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1480.777773][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1480.782122][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1480.875666][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1480.900288][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1481.198190][T25095] usb 5-1: Using ep0 maxpacket: 16
[ 1481.219959][T25095] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1481.226540][T25095] usb 5-1: config 2 has an invalid interface number: 57 but max is 0
[ 1481.226563][T25095] usb 5-1: config 2 has no interface number 0
[ 1481.226591][T25095] usb 5-1: config 2 interface 57 has no altsetting 0
[ 1481.298916][T25095] usb 5-1: string descriptor 0 read error: -22
[ 1481.299067][T25095] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[ 1481.299088][T25095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.517304][ T5594] Bluetooth: hci0: command 0x0406 tx timeout
[ 1481.670603][    T9] usb 10-1: USB disconnect, device number 16
[ 1481.835014][T25095] video4linux radio48: keene_cmd_main failed (-71)
[ 1481.835040][T25095] radio-keene 5-1:2.57: V4L2 device registered as radio48
[ 1481.852265][T25095] usb 5-1: USB disconnect, device number 22
[ 1481.992867][T25182] fuse: Bad value for 'fd'
[ 1481.993114][T25184] FAULT_INJECTION: forcing a failure.
[ 1481.993114][T25184] name failslab, interval 1, probability 0, space 0, times 0
[ 1481.993144][T25184] CPU: 1 UID: 0 PID: 25184 Comm: syz.8.5229 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1481.993167][T25184] Tainted: [L]=SOFTLOCKUP
[ 1481.993172][T25184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1481.993183][T25184] Call Trace:
[ 1481.993189][T25184]  <TASK>
[ 1481.993198][T25184]  dump_stack_lvl+0xe8/0x150
[ 1481.993225][T25184]  should_fail_ex+0x467/0x600
[ 1481.993251][T25184]  should_failslab+0xa8/0x100
[ 1481.993271][T25184]  __kmalloc_cache_noprof+0xa1/0x670
[ 1481.993306][T25184]  ? con_insert_unipair+0x140/0x210
[ 1481.993325][T25184]  ? con_insert_unipair+0x140/0x210
[ 1481.993351][T25184]  con_insert_unipair+0x140/0x210
[ 1481.993373][T25184]  con_set_unimap+0x2eb/0x660
[ 1481.993403][T25184]  vt_ioctl+0x1299/0x20d0
[ 1481.993430][T25184]  ? __pfx_vt_ioctl+0x10/0x10
[ 1481.993464][T25184]  ? __fget_files+0x2a/0x420
[ 1481.993484][T25184]  ? tty_jobctrl_ioctl+0x358/0xb50
[ 1481.993506][T25184]  ? __fget_files+0x2a/0x420
[ 1481.993527][T25184]  tty_ioctl+0x926/0xde0
[ 1481.993552][T25184]  ? __pfx_tty_ioctl+0x10/0x10
[ 1481.993577][T25184]  __se_sys_ioctl+0xff/0x170
[ 1481.993602][T25184]  do_syscall_64+0x17b/0x530
[ 1481.993620][T25184]  ? irqentry_exit+0x10f/0x8f0
[ 1481.993643][T25184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.993662][T25184]  ? clear_bhb_loop+0x40/0x90
[ 1481.993683][T25184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.993700][T25184] RIP: 0033:0x7f2c7e8fde59
[ 1481.993717][T25184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1481.993732][T25184] RSP: 002b:00007f2c7cb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1481.993751][T25184] RAX: ffffffffffffffda RBX: 00007f2c7eb85fa0 RCX: 00007f2c7e8fde59
[ 1481.993764][T25184] RDX: 0000200000019080 RSI: 0000000000004b67 RDI: 0000000000000003
[ 1481.993776][T25184] RBP: 00007f2c7cb56090 R08: 0000000000000000 R09: 0000000000000000
[ 1481.993788][T25184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1481.993798][T25184] R13: 00007f2c7eb86038 R14: 00007f2c7eb85fa0 R15: 00007ffc862daef8
[ 1481.993827][T25184]  </TASK>
[ 1482.777185][T25095] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1482.887427][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1482.907432][T25095] usb 9-1: device descriptor read/64, error -71
[ 1483.037277][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1483.040083][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1483.042675][    T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1483.042698][    T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1483.042716][    T9] usb 5-1: config 14 has no interface number 0
[ 1483.042730][    T9] usb 5-1: config 14 has no interface number 1
[ 1483.042807][    T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1483.042827][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1483.042848][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1483.042870][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1483.042892][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1483.042916][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1483.042938][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1483.042956][    T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1483.042979][    T9] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1483.042994][    T9] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1483.099916][    T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1483.099941][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.099959][    T9] usb 5-1: Product: syz
[ 1483.099971][    T9] usb 5-1: Manufacturer: syz
[ 1483.099983][    T9] usb 5-1: SerialNumber: syz
[ 1483.252309][T25095] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1483.253263][T23331] Bluetooth: hci6: command tx timeout
[ 1483.437382][T25095] usb 9-1: device descriptor read/64, error -71
[ 1483.547841][T25095] usb usb9-port1: attempt power cycle
[ 1483.688703][T25173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.688993][T25173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.689212][T25173] bridge_slave_0: entered allmulticast mode
[ 1483.691550][T25173] bridge_slave_0: entered promiscuous mode
[ 1483.697403][T25173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.697856][T25173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.698186][T25173] bridge_slave_1: entered allmulticast mode
[ 1483.702517][T25173] bridge_slave_1: entered promiscuous mode
[ 1483.794802][    T9] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1483.813134][T25173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1483.843283][T25173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1483.897174][T25095] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1483.927567][T25095] usb 9-1: device descriptor read/8, error -71
[ 1484.025763][    T9] legousbtower 5-1:14.228: get version request failed: -71
[ 1484.025957][    T9] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1484.081477][    T9] usb 5-1: USB disconnect, device number 23
[ 1484.082733][T25173] team0: Port device team_slave_0 added
[ 1484.187297][T25095] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 1484.209248][T25095] usb 9-1: device descriptor read/8, error -71
[ 1484.319076][T25095] usb usb9-port1: unable to enumerate USB device
[ 1484.485867][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.630759][T25225] netlink: 236 bytes leftover after parsing attributes in process `syz.9.5235'.
[ 1484.630777][T25225] netlink: 236 bytes leftover after parsing attributes in process `syz.9.5235'.
[ 1484.704749][ T9412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.818517][T25230] fuse: Bad value for 'fd'
[ 1484.838825][  T199] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1484.896563][T25173] team0: Port device team_slave_1 added
[ 1484.959551][T25173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.959566][T25173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1484.959589][T25173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1485.030148][  T199] usb 5-1: Using ep0 maxpacket: 32
[ 1485.052832][  T199] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7
[ 1485.055108][  T199] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[ 1485.055133][  T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.055151][  T199] usb 5-1: Product: 殔픭ｺ䣱彥ｵ೥꿠词ಶ㤗┰づ䈊㣜㩩쟾༣챜⌎녦ਜ਼姌슀歆赐鬐櫝ꁋ⨥
[ 1485.055169][  T199] usb 5-1: Manufacturer: 癌㶙ꔪ﯋ំ쒻棯Ⰹ洦⦫軺䗧釾丅ู㞆ඓⳛ罒뻜ꆌ₩쇅扑飼왼)乔ஏ휛㺴℟듩䘀쟰䘃ݍ⡁笣蒐轁ᡲ耯덤嵫ㅰ뗩吠웻⠬鳉
[ 1485.055188][  T199] usb 5-1: SerialNumber: 뽣⿗ꉉ줸乡䥬㐙톘Ⲅ䴔쑰볠ዖ쩎֞쭖焋鳋⓯ᬛ௰梪߰缝뙆䦘諑冘澳狐恪籘簊돴뭔⍓ᝮ䷷샭笶ǒ쮃쎙䶅ꋺ㧵샙䳔튧
[ 1485.140566][T25173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1485.140582][T25173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1485.140605][T25173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1485.282611][T23331] Bluetooth: hci6: command tx timeout
[ 1485.446868][  T199] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1485.447414][  T199] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1485.448217][  T199] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1485.492279][  T199] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1485.492696][  T199] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1485.493205][  T199] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[ 1485.520576][T25247] FAULT_INJECTION: forcing a failure.
[ 1485.520576][T25247] name failslab, interval 1, probability 0, space 0, times 0
[ 1485.520606][T25247] CPU: 1 UID: 0 PID: 25247 Comm: syz.8.5240 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1485.520629][T25247] Tainted: [L]=SOFTLOCKUP
[ 1485.520635][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1485.520644][T25247] Call Trace:
[ 1485.520651][T25247]  <TASK>
[ 1485.520659][T25247]  dump_stack_lvl+0xe8/0x150
[ 1485.520686][T25247]  should_fail_ex+0x467/0x600
[ 1485.520710][T25247]  ? shmem_alloc_inode+0x28/0x40
[ 1485.520734][T25247]  should_failslab+0xa8/0x100
[ 1485.520754][T25247]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[ 1485.520779][T25247]  ? shmem_alloc_inode+0x28/0x40
[ 1485.520803][T25247]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1485.520828][T25247]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1485.520851][T25247]  shmem_alloc_inode+0x28/0x40
[ 1485.520881][T25247]  alloc_inode+0x6a/0x1b0
[ 1485.520908][T25247]  new_inode+0x1f/0x170
[ 1485.520929][T25247]  shmem_get_inode+0x3b1/0xf80
[ 1485.520961][T25247]  ? __pfx_shmem_get_inode+0x10/0x10
[ 1485.520987][T25247]  ? __d_add+0x5e2/0x960
[ 1485.521006][T25247]  ? bpf_lsm_inode_permission+0x9/0x20
[ 1485.521033][T25247]  shmem_mknod+0x17d/0x340
[ 1485.521054][T25247]  path_openat+0x1347/0x3850
[ 1485.521103][T25247]  do_file_open+0x23e/0x4a0
[ 1485.521122][T25247]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1485.521150][T25247]  ? __pfx_do_file_open+0x10/0x10
[ 1485.521188][T25247]  ? alloc_fd+0x654/0x6d0
[ 1485.521212][T25247]  do_sys_openat2+0x115/0x200
[ 1485.521239][T25247]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1485.521267][T25247]  ? ksys_write+0x248/0x270
[ 1485.521288][T25247]  ? __pfx_ksys_write+0x10/0x10
[ 1485.521309][T25247]  __x64_sys_openat+0x138/0x170
[ 1485.521338][T25247]  do_syscall_64+0x17b/0x530
[ 1485.521353][T25247]  ? irqentry_exit+0x10f/0x8f0
[ 1485.521376][T25247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.521393][T25247]  ? clear_bhb_loop+0x40/0x90
[ 1485.521413][T25247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.521430][T25247] RIP: 0033:0x7f2c7e8fde59
[ 1485.521446][T25247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1485.521459][T25247] RSP: 002b:00007f2c7cb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1485.521478][T25247] RAX: ffffffffffffffda RBX: 00007f2c7eb85fa0 RCX: 00007f2c7e8fde59
[ 1485.521489][T25247] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c
[ 1485.521501][T25247] RBP: 00007f2c7cb56090 R08: 0000000000000000 R09: 0000000000000000
[ 1485.521510][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1485.521520][T25247] R13: 00007f2c7eb86038 R14: 00007f2c7eb85fa0 R15: 00007ffc862daef8
[ 1485.521547][T25247]  </TASK>
[ 1485.526838][  T199] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1485.664782][  T199] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1485.895088][  T199] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[ 1485.907302][  T199] usb 5-1: USB disconnect, device number 24
[ 1486.000739][T25257] netlink: 236 bytes leftover after parsing attributes in process `syz.9.5242'.
[ 1486.000764][T25257] netlink: 236 bytes leftover after parsing attributes in process `syz.9.5242'.
[ 1486.118515][T25261] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5244'.
[ 1486.121610][T22387] udevd[22387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1486.290865][    T9] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1486.457149][    T9] usb 9-1: Using ep0 maxpacket: 32
[ 1486.460116][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1486.462101][    T9] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[ 1486.462123][    T9] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[ 1486.462140][    T9] usb 9-1: config 14 has no interface number 0
[ 1486.462154][    T9] usb 9-1: config 14 has no interface number 1
[ 1486.462223][    T9] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1486.462243][    T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1486.462265][    T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1486.462296][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1486.462319][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1486.462343][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1486.462366][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1486.462384][    T9] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1486.462408][    T9] usb 9-1: config 14 interface 57 has no altsetting 0
[ 1486.462423][    T9] usb 9-1: config 14 interface 228 has no altsetting 0
[ 1486.465980][    T9] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1486.466005][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1486.466022][    T9] usb 9-1: Product: syz
[ 1486.466035][    T9] usb 9-1: Manufacturer: syz
[ 1486.466047][    T9] usb 9-1: SerialNumber: syz
[ 1486.685405][T25270] fuse: Bad value for 'fd'
[ 1486.706549][ T9412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.852034][T25173] hsr_slave_0: entered promiscuous mode
[ 1486.855036][T25173] hsr_slave_1: entered promiscuous mode
[ 1486.872296][T25173] debugfs: 'hsr0' already exists in 'hsr'
[ 1486.872376][T25173] Cannot create hsr debugfs directory
[ 1487.134918][    T9] legousbtower 9-1:14.57: interrupt endpoints not found
[ 1487.362975][T23331] Bluetooth: hci6: command tx timeout
[ 1487.391783][    T9] legousbtower 9-1:14.228: get version request failed: -71
[ 1487.391955][    T9] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71
[ 1487.441877][    T9] usb 9-1: USB disconnect, device number 82
[ 1487.561822][ T9412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.066523][T25305] fuse: Bad value for 'fd'
[ 1488.400022][ T9412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.448385][ T5681] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1488.613161][ T5681] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1488.613187][ T5681] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.613204][ T5681] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1488.613222][ T5681] usb 10-1: config 1 has no interface number 0
[ 1488.613250][ T5681] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1488.613284][ T5681] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1488.615489][ T5681] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1488.615515][ T5681] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.615533][ T5681] usb 10-1: Product: syz
[ 1488.615546][ T5681] usb 10-1: Manufacturer: syz
[ 1488.615559][ T5681] usb 10-1: SerialNumber: syz
[ 1488.733115][T25316] FAULT_INJECTION: forcing a failure.
[ 1488.733115][T25316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1488.733147][T25316] CPU: 1 UID: 0 PID: 25316 Comm: syz.4.5256 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1488.733171][T25316] Tainted: [L]=SOFTLOCKUP
[ 1488.733178][T25316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1488.733187][T25316] Call Trace:
[ 1488.733197][T25316]  <TASK>
[ 1488.733205][T25316]  dump_stack_lvl+0xe8/0x150
[ 1488.733231][T25316]  should_fail_ex+0x467/0x600
[ 1488.733258][T25316]  _copy_from_user+0x2d/0xb0
[ 1488.733283][T25316]  video_usercopy+0x359/0x1430
[ 1488.733313][T25316]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1488.733338][T25316]  ? __pfx_video_usercopy+0x10/0x10
[ 1488.733362][T25316]  ? __fget_files+0x3a8/0x420
[ 1488.733374][T25316]  v4l2_ioctl+0x190/0x1e0
[ 1488.733387][T25316]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1488.733400][T25316]  __se_sys_ioctl+0xff/0x170
[ 1488.733414][T25316]  do_syscall_64+0x17b/0x530
[ 1488.733423][T25316]  ? irqentry_exit+0x10f/0x8f0
[ 1488.733437][T25316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.733447][T25316]  ? clear_bhb_loop+0x40/0x90
[ 1488.733459][T25316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.733469][T25316] RIP: 0033:0x7fbf53cade59
[ 1488.733479][T25316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.733487][T25316] RSP: 002b:00007fbf51f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1488.733498][T25316] RAX: ffffffffffffffda RBX: 00007fbf53f35fa0 RCX: 00007fbf53cade59
[ 1488.733506][T25316] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003
[ 1488.733512][T25316] RBP: 00007fbf51f06090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.733518][T25316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1488.733524][T25316] R13: 00007fbf53f36038 R14: 00007fbf53f35fa0 R15: 00007fff5ea112f8
[ 1488.733539][T25316]  </TASK>
[ 1489.079059][T25303] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.5252' resets device
[ 1489.118842][T25303] tmpfs: Unknown parameter 'no'
[ 1489.126699][T25095] usb 10-1: USB disconnect, device number 17
[ 1489.395651][T25326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5260'.
[ 1489.437262][T23331] Bluetooth: hci6: command tx timeout
[ 1489.750097][ T5770] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1489.808696][T25335] fuse: Bad value for 'fd'
[ 1489.901106][ T5770] usb 5-1: Using ep0 maxpacket: 32
[ 1489.910958][ T5770] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1489.912722][ T5770] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1489.912744][ T5770] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1489.912761][ T5770] usb 5-1: config 14 has no interface number 0
[ 1489.912776][ T5770] usb 5-1: config 14 has no interface number 1
[ 1489.912837][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1489.912857][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1489.912878][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1489.912898][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1489.912920][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1489.912951][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1489.912972][ T5770] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1489.912990][ T5770] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1489.913013][ T5770] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1489.913028][ T5770] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1489.920318][ T5770] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1489.920343][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.920360][ T5770] usb 5-1: Product: syz
[ 1489.920372][ T5770] usb 5-1: Manufacturer: syz
[ 1489.920384][ T5770] usb 5-1: SerialNumber: syz
[ 1490.156743][T25338] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5263'.
[ 1490.398772][ T5770] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1490.516068][T25349] netlink: 'syz.9.5265': attribute type 28 has an invalid length.
[ 1490.630443][ T5770] legousbtower 5-1:14.228: get version request failed: -71
[ 1490.630612][ T5770] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1490.671905][ T5770] usb 5-1: USB disconnect, device number 25
[ 1490.778022][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1490.928443][ T9412] bridge_slave_1: left allmulticast mode
[ 1490.928468][ T9412] bridge_slave_1: left promiscuous mode
[ 1490.928646][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1491.098677][ T9412] bridge_slave_0: left allmulticast mode
[ 1491.098710][ T9412] bridge_slave_0: left promiscuous mode
[ 1491.098979][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1491.246654][T25364] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5270'.
[ 1491.447366][T25370] fuse: Bad value for 'fd'
[ 1491.857405][    T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1492.021802][    T9] usb 10-1: config 0 has an invalid interface number: 117 but max is 0
[ 1492.021827][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1492.021844][    T9] usb 10-1: config 0 has no interface number 0
[ 1492.021888][    T9] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1492.021919][    T9] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1492.021938][    T9] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1492.024208][    T9] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1492.024233][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.024250][    T9] usb 10-1: Product: syz
[ 1492.024262][    T9] usb 10-1: Manufacturer: syz
[ 1492.024275][    T9] usb 10-1: SerialNumber: syz
[ 1492.199009][    T9] usb 10-1: config 0 descriptor??
[ 1492.199299][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1492.367217][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1492.369841][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1492.370933][   T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1492.370954][   T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1492.370964][   T10] usb 5-1: config 14 has no interface number 0
[ 1492.370972][   T10] usb 5-1: config 14 has no interface number 1
[ 1492.371060][   T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1492.371073][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1492.371085][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1492.371097][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1492.371110][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1492.371123][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1492.371135][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1492.371145][   T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1492.371161][   T10] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1492.371207][   T10] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1492.373384][   T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1492.373398][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.373408][   T10] usb 5-1: Product: syz
[ 1492.373415][   T10] usb 5-1: Manufacturer: syz
[ 1492.373422][   T10] usb 5-1: SerialNumber: syz
[ 1492.557545][    T9] usbtouchscreen 10-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1492.566043][    T9] usb 10-1: USB disconnect, device number 18
[ 1492.587695][T18247] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 1492.805324][ T9412] tipc: Left network mode
[ 1492.905971][T18247] usb 9-1: config index 0 descriptor too short (expected 65183, got 72)
[ 1492.912738][T18247] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1492.912764][T18247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.912782][T18247] usb 9-1: Product: syz
[ 1492.912795][T18247] usb 9-1: Manufacturer: syz
[ 1492.912808][T18247] usb 9-1: SerialNumber: syz
[ 1492.983626][ T5770] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1493.011608][   T10] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1493.283400][T25381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.284425][T25381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.305854][T25381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.306726][T25381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.335824][   T10] legousbtower 5-1:14.228: get version request failed: -71
[ 1493.335996][   T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1493.353797][   T10] usb 5-1: USB disconnect, device number 26
[ 1493.407809][T25381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.411574][T25381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.433495][T25381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.470727][T25381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.622438][T18231] usb 9-1: USB disconnect, device number 83
[ 1493.917233][T18247] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1493.970479][T25397] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1494.109663][ T5770] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1494.127792][T18247] usb 10-1: Using ep0 maxpacket: 32
[ 1494.133606][T18247] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1494.133630][T18247] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1494.133648][T18247] usb 10-1: config 0 has no interface number 0
[ 1494.133674][T18247] usb 10-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1494.137336][T18247] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1494.137366][T18247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.137383][T18247] usb 10-1: Product: syz
[ 1494.137396][T18247] usb 10-1: Manufacturer: syz
[ 1494.137409][T18247] usb 10-1: SerialNumber: syz
[ 1494.190036][ T5770] ath9k_htc: Failed to initialize the device
[ 1494.190600][T18231] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1494.238099][T18247] usb 10-1: config 0 descriptor??
[ 1494.426213][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1494.506971][T25403] fuse: Invalid rootmode
[ 1494.507265][T18231] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1494.638342][T18231] usb 9-1: device descriptor read/64, error -71
[ 1494.712009][T18247] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1494.712288][T18247] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22
[ 1494.846270][T18247] usb 10-1: USB disconnect, device number 19
[ 1495.017272][T18231] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[ 1495.072494][T25415] netlink: 392 bytes leftover after parsing attributes in process `syz.9.5284'.
[ 1495.147184][T18231] usb 9-1: device descriptor read/64, error -71
[ 1495.257693][T18231] usb usb9-port1: attempt power cycle
[ 1495.311987][T25427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input171
[ 1495.552702][T18231] usb usb9-port1: Cannot enable. Maybe the USB cable is bad?
[ 1495.724902][T18231] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[ 1495.755666][T18231] usb 9-1: Using ep0 maxpacket: 32
[ 1495.765841][T18231] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1495.767478][T18231] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[ 1495.767500][T18231] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[ 1495.767517][T18231] usb 9-1: config 14 has no interface number 0
[ 1495.767531][T18231] usb 9-1: config 14 has no interface number 1
[ 1495.767594][T18231] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1495.767614][T18231] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1495.767636][T18231] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1495.767658][T18231] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1495.767681][T18231] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1495.767704][T18231] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1495.767724][T18231] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1495.767743][T18231] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1495.767766][T18231] usb 9-1: config 14 interface 57 has no altsetting 0
[ 1495.767781][T18231] usb 9-1: config 14 interface 228 has no altsetting 0
[ 1495.923100][T18231] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1495.923128][T18231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.923146][T18231] usb 9-1: Product: syz
[ 1495.923160][T18231] usb 9-1: Manufacturer: syz
[ 1495.923173][T18231] usb 9-1: SerialNumber: syz
[ 1496.125701][T25442] fuse: Invalid rootmode
[ 1496.510730][T18231] legousbtower 9-1:14.57: interrupt endpoints not found
[ 1496.959405][T18231] legousbtower 9-1:14.228: get version request failed: -71
[ 1496.959580][T18231] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71
[ 1496.979397][T18231] usb 9-1: USB disconnect, device number 87
[ 1497.382274][ T9412] hsr_slave_0: left promiscuous mode
[ 1497.432478][ T9412] hsr_slave_1: left promiscuous mode
[ 1497.434187][ T9412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1497.434213][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1497.472059][ T9412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1497.472084][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1497.589319][ T9412] veth1_macvtap: left promiscuous mode
[ 1497.589426][ T9412] veth0_macvtap: left promiscuous mode
[ 1497.589712][ T9412] veth1_vlan: left promiscuous mode
[ 1497.589904][ T9412] veth0_vlan: left promiscuous mode
[ 1497.827279][   T10] usb 9-1: new high-speed USB device number 88 using dummy_hcd
[ 1497.852671][T25486] fuse: Invalid rootmode
[ 1497.977318][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1497.986039][   T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1497.986064][   T10] usb 9-1: config 0 has no interface number 0
[ 1498.009003][   T10] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1498.009037][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.009054][   T10] usb 9-1: Product: syz
[ 1498.009066][   T10] usb 9-1: Manufacturer: syz
[ 1498.009080][   T10] usb 9-1: SerialNumber: syz
[ 1498.047368][   T10] usb 9-1: config 0 descriptor??
[ 1498.065189][   T10] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1498.065206][   T10] usb 9-1: selecting invalid altsetting 1
[ 1498.065214][   T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1498.101333][   T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1498.101683][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1498.101731][   T10] usb 9-1: media controller created
[ 1498.151206][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1498.249798][T25475] FAULT_INJECTION: forcing a failure.
[ 1498.249798][T25475] name failslab, interval 1, probability 0, space 0, times 0
[ 1498.249827][T25475] CPU: 1 UID: 0 PID: 25475 Comm: syz.8.5295 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1498.249845][T25475] Tainted: [L]=SOFTLOCKUP
[ 1498.249850][T25475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1498.249859][T25475] Call Trace:
[ 1498.249864][T25475]  <TASK>
[ 1498.249870][T25475]  dump_stack_lvl+0xe8/0x150
[ 1498.249893][T25475]  should_fail_ex+0x467/0x600
[ 1498.249914][T25475]  should_failslab+0xa8/0x100
[ 1498.249930][T25475]  __kmalloc_noprof+0xfb/0x790
[ 1498.249948][T25475]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1498.249967][T25475]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1498.249990][T25475]  tomoyo_realpath_from_path+0xef/0x640
[ 1498.250015][T25475]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1498.250031][T25475]  tomoyo_path_number_perm+0x246/0x5f0
[ 1498.250049][T25475]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1498.250066][T25475]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1498.250094][T25475]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1498.250114][T25475]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1498.250145][T25475]  ? __fget_files+0x2a/0x420
[ 1498.250163][T25475]  ? __fget_files+0x3a8/0x420
[ 1498.250175][T25475]  ? __fget_files+0x2a/0x420
[ 1498.250191][T25475]  security_file_ioctl+0xb9/0x260
[ 1498.250209][T25475]  __se_sys_ioctl+0x47/0x170
[ 1498.250228][T25475]  do_syscall_64+0x17b/0x530
[ 1498.250240][T25475]  ? irqentry_exit+0x10f/0x8f0
[ 1498.250258][T25475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.250272][T25475]  ? clear_bhb_loop+0x40/0x90
[ 1498.250288][T25475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.250301][T25475] RIP: 0033:0x7f2c7e8fde59
[ 1498.250315][T25475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1498.250326][T25475] RSP: 002b:00007f2c7cb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1498.250341][T25475] RAX: ffffffffffffffda RBX: 00007f2c7eb85fa0 RCX: 00007f2c7e8fde59
[ 1498.250351][T25475] RDX: 0000200000000400 RSI: 0000000000000707 RDI: 0000000000000004
[ 1498.250360][T25475] RBP: 00007f2c7cb56090 R08: 0000000000000000 R09: 0000000000000000
[ 1498.250369][T25475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1498.250377][T25475] R13: 00007f2c7eb86038 R14: 00007f2c7eb85fa0 R15: 00007ffc862daef8
[ 1498.250399][T25475]  </TASK>
[ 1498.253483][T25475] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1498.275549][   T10] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1498.275602][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1498.276046][   T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1498.287347][    T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1498.370182][   T10] usb 9-1: USB disconnect, device number 88
[ 1498.457209][    T9] usb 10-1: Using ep0 maxpacket: 32
[ 1498.527007][    T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1498.527401][    T9] usb 10-1: config 0 has no interface number 0
[ 1498.529972][    T9] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1498.529996][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.530014][    T9] usb 10-1: Product: syz
[ 1498.530026][    T9] usb 10-1: Manufacturer: syz
[ 1498.530039][    T9] usb 10-1: SerialNumber: syz
[ 1498.535200][    T9] usb 10-1: config 0 descriptor??
[ 1498.552838][    T9] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1498.552859][    T9] usb 10-1: selecting invalid altsetting 1
[ 1498.552873][    T9] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1498.566787][    T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1498.571618][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1498.571668][    T9] usb 10-1: media controller created
[ 1498.603439][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1498.783869][    T9] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1498.783924][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1498.784376][    T9] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1498.931392][    T9] usb 10-1: USB disconnect, device number 20
[ 1499.488117][T18231] usb 9-1: new high-speed USB device number 89 using dummy_hcd
[ 1499.637198][T18231] usb 9-1: Using ep0 maxpacket: 32
[ 1499.644507][T18231] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1499.644531][T18231] usb 9-1: config 0 has no interface number 0
[ 1499.660992][T18231] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1499.661018][T18231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.661036][T18231] usb 9-1: Product: syz
[ 1499.661049][T18231] usb 9-1: Manufacturer: syz
[ 1499.661062][T18231] usb 9-1: SerialNumber: syz
[ 1499.682991][T18231] usb 9-1: config 0 descriptor??
[ 1499.695196][T18231] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1499.695221][T18231] usb 9-1: selecting invalid altsetting 1
[ 1499.695236][T18231] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1499.717986][T18231] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1499.724860][T18231] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1499.724911][T18231] usb 9-1: media controller created
[ 1499.765528][T18231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1499.779535][ T9412] team0 (unregistering): Port device team_slave_1 removed
[ 1499.887872][ T9412] team0 (unregistering): Port device team_slave_0 removed
[ 1499.903903][T18231] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1499.903977][T18231] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1499.905028][T18231] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1499.997463][T18247] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1500.035766][T18231] usb 9-1: USB disconnect, device number 89
[ 1500.149180][T18247] usb 10-1: Using ep0 maxpacket: 32
[ 1500.162561][T18247] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1500.164582][T18247] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[ 1500.164604][T18247] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[ 1500.164623][T18247] usb 10-1: config 14 has no interface number 0
[ 1500.164638][T18247] usb 10-1: config 14 has no interface number 1
[ 1500.164717][T18247] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1500.164738][T18247] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1500.164761][T18247] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1500.164784][T18247] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1500.164807][T18247] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1500.164832][T18247] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1500.164854][T18247] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1500.164874][T18247] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1500.164897][T18247] usb 10-1: config 14 interface 57 has no altsetting 0
[ 1500.164913][T18247] usb 10-1: config 14 interface 228 has no altsetting 0
[ 1500.169650][T18247] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1500.169674][T18247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.169691][T18247] usb 10-1: Product: syz
[ 1500.169702][T18247] usb 10-1: Manufacturer: syz
[ 1500.169714][T18247] usb 10-1: SerialNumber: syz
[ 1500.802977][T18247] legousbtower 10-1:14.57: interrupt endpoints not found
[ 1500.888857][T25542] fuse: Bad value for 'rootmode'
[ 1501.011280][T18247] legousbtower 10-1:14.228: get version request failed: -71
[ 1501.011476][T18247] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71
[ 1501.044800][T18247] usb 10-1: USB disconnect, device number 21
[ 1501.541674][T18231] usb 9-1: new high-speed USB device number 90 using dummy_hcd
[ 1501.756276][T18231] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1501.756303][T18231] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1501.756320][T18231] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.756338][T18231] usb 9-1: config 220 has no interface number 2
[ 1501.756405][T18231] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1501.756430][T18231] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1501.756447][T18231] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1501.756462][T18231] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1501.765930][T18231] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1501.765957][T18231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.765975][T18231] usb 9-1: Product: syz
[ 1501.765988][T18231] usb 9-1: Manufacturer: syz
[ 1501.766001][T18231] usb 9-1: SerialNumber: syz
[ 1502.206224][ T5694] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1502.234320][T18231] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1502.234352][T18231] uvcvideo 9-1:220.0: No valid video chain found.
[ 1502.234421][T18231] usb 9-1: selecting invalid altsetting 0
[ 1502.302380][T18231] usb 9-1: selecting invalid altsetting 0
[ 1502.302402][T18231] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1502.306514][T18231] usb 9-1: USB disconnect, device number 90
[ 1502.407973][ T5694] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1502.409754][ T5694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1502.409775][ T5694] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1502.414126][ T5694] usb 5-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40
[ 1502.414152][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1502.414169][ T5694] usb 5-1: Product: syz
[ 1502.414182][ T5694] usb 5-1: Manufacturer: syz
[ 1502.414193][ T5694] usb 5-1: SerialNumber: syz
[ 1502.489066][ T5694] usb 5-1: 0:1 : does not exist
[ 1502.489113][ T5694] usb 5-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1502.489145][ T5694] usb 5-1: Error initialising Clarett+ Mixer Driver: -22
[ 1502.574200][ T5694] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1502.651915][T22387] udevd[22387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1503.069730][T25173] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1503.182553][T25173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1503.205053][T25173] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1503.234998][T25173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1503.236108][T25173] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1503.270572][T25173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1503.271438][T25173] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1503.296771][ T9412] IPVS: stop unused estimator thread 0...
[ 1503.314620][T25173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1503.550390][T25574] fuse: Bad value for 'rootmode'
[ 1503.726133][T25580] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5314'.
[ 1503.745091][ T5694] usb 5-1: USB disconnect, device number 27
[ 1504.024055][T25173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1504.102763][T25173] 8021q: adding VLAN 0 to HW filter on device team0
[ 1504.170748][T18543] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1504.170984][T18543] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1504.214712][T18543] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1504.214841][T18543] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1504.267956][ T5694] usb 9-1: new full-speed USB device number 91 using dummy_hcd
[ 1504.418400][T18231] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1504.429887][ T5694] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[ 1504.429912][ T5694] usb 9-1: config 0 has no interface number 0
[ 1504.429952][ T5694] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1504.432663][ T5694] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1504.432689][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1504.432705][ T5694] usb 9-1: Manufacturer: syz
[ 1504.432719][ T5694] usb 9-1: SerialNumber: syz
[ 1504.510438][ T5694] usb 9-1: config 0 descriptor??
[ 1504.617171][T18231] usb 5-1: Using ep0 maxpacket: 32
[ 1504.620122][T18231] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1504.622921][T18231] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1504.622943][T18231] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1504.622962][T18231] usb 5-1: config 14 has no interface number 0
[ 1504.622984][T18231] usb 5-1: config 14 has no interface number 1
[ 1504.623055][T18231] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1504.623074][T18231] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1504.623095][T18231] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1504.623122][T18231] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1504.623145][T18231] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1504.623169][T18231] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1504.623191][T18231] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1504.623208][T18231] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1504.623230][T18231] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1504.623245][T18231] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1504.625628][T18231] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1504.625651][T18231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.625667][T18231] usb 5-1: Product: syz
[ 1504.625679][T18231] usb 5-1: Manufacturer: syz
[ 1504.625691][T18231] usb 5-1: SerialNumber: syz
[ 1505.084546][T25173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1505.191760][T25173] veth0_vlan: entered promiscuous mode
[ 1505.220880][T25173] veth1_vlan: entered promiscuous mode
[ 1505.240709][T18231] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1505.291649][T25173] veth0_macvtap: entered promiscuous mode
[ 1505.312722][T25173] veth1_macvtap: entered promiscuous mode
[ 1505.383978][T25173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1505.441649][T25173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1505.464027][T18231] legousbtower 5-1:14.228: get version request failed: -71
[ 1505.464293][T18231] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[ 1505.504633][T18231] usb 5-1: USB disconnect, device number 28
[ 1505.571997][T18543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1505.574458][T18543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1505.574663][T18543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1505.574829][T18543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1506.521682][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'.
[ 1506.523350][ T9412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1506.523367][ T9412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1506.747215][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'.
[ 1506.747241][T25599] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1506.884010][   T39] INFO: task syz.0.4724:23009 blocked for more than 143 seconds.
[ 1506.884035][   T39]       Tainted: G             L      syzkaller #0
[ 1506.884043][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1506.884051][   T39] task:syz.0.4724      state:D stack:26624 [ 1506.884051][   T39] task:syz.0.4724      state:D stack:26624 pid:23009 tgid:23008 ppid:16481  task_flags:0x400140 flags:0x00080002
[ 1506.884101][   T39] Call Trace:
[ 1506.884107][   T39]  <TASK>
[ 1506.884119][   T39]  __schedule+0x1709/0x5530
[ 1506.884163][   T39]  ? irqentry_exit+0x218/0x8f0
[ 1506.884184][   T39]  ? trace_irq_disable+0x3b/0x140
[ 1506.884202][   T39]  ? __pfx___schedule+0x10/0x10
[ 1506.884234][   T39]  rt_mutex_schedule+0x76/0xf0
[ 1506.884249][   T39]  rt_mutex_slowlock_block+0x55c/0x680
[ 1506.884274][   T39]  ? rt_mutex_slowlock_block+0x33a/0x680
[ 1506.884307][   T39]  rt_mutex_slowlock+0x2d4/0x780
[ 1506.884327][   T39]  ? rt_mutex_slowlock+0x1f2/0x780
[ 1506.884346][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1506.884380][   T39]  ? nfsd_nl_threads_set_doit+0x2b9/0xc30
[ 1506.884407][   T39]  ? nfsd_nl_threads_set_doit+0x2b9/0xc30
[ 1506.884424][   T39]  mutex_lock_nested+0x168/0x1d0
[ 1506.884444][   T39]  nfsd_nl_threads_set_doit+0x2b9/0xc30
[ 1506.884477][   T39]  genl_family_rcv_msg_doit+0x233/0x340
[ 1506.884500][   T39]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1506.884525][   T39]  ? bpf_lsm_capable+0x9/0x20
[ 1506.884539][   T39]  ? security_capable+0x74/0x280
[ 1506.884562][   T39]  genl_rcv_msg+0x614/0x7a0
[ 1506.884583][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1506.884596][   T39]  ? ref_tracker_free+0x668/0x820
[ 1506.884613][   T39]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 1506.884632][   T39]  ? ____sys_sendmsg+0x565/0x870
[ 1506.884650][   T39]  ? ___sys_sendmsg+0x2a5/0x360
[ 1506.884667][   T39]  ? __x64_sys_sendmsg+0x1b7/0x290
[ 1506.884684][   T39]  ? do_syscall_64+0x17b/0x530
[ 1506.884696][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.884719][   T39]  netlink_rcv_skb+0x226/0x4a0
[ 1506.884742][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1506.884759][   T39]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1506.884790][   T39]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1506.884810][   T39]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1506.884831][   T39]  genl_rcv+0x28/0x40
[ 1506.884846][   T39]  netlink_unicast+0x7f5/0x990
[ 1506.884876][   T39]  netlink_sendmsg+0x813/0xb40
[ 1506.884908][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1506.884928][   T39]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1506.884954][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1506.884971][   T39]  sock_sendmsg_nosec+0x13a/0x180
[ 1506.884989][   T39]  ____sys_sendmsg+0x565/0x870
[ 1506.885014][   T39]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1506.885038][   T39]  ? import_iovec+0x73/0xa0
[ 1506.885060][   T39]  ___sys_sendmsg+0x2a5/0x360
[ 1506.885077][   T39]  ? __lock_acquire+0x6df/0x2e40
[ 1506.885100][   T39]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1506.885120][   T39]  ? futex_wake+0x51e/0x600
[ 1506.885161][   T39]  ? __fget_files+0x2a/0x420
[ 1506.885175][   T39]  ? __fget_files+0x3a8/0x420
[ 1506.885197][   T39]  __x64_sys_sendmsg+0x1b7/0x290
[ 1506.885218][   T39]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1506.885251][   T39]  do_syscall_64+0x17b/0x530
[ 1506.885265][   T39]  ? irqentry_exit+0x10f/0x8f0
[ 1506.885284][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.885299][   T39]  ? clear_bhb_loop+0x40/0x90
[ 1506.885317][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.885332][   T39] RIP: 0033:0x7fe9b532de59
[ 1506.885347][   T39] RSP: 002b:00007fe9b3586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1506.885365][   T39] RAX: ffffffffffffffda RBX: 00007fe9b55b5fa0 RCX: 00007fe9b532de59
[ 1506.885377][   T39] RDX: 0000000004040030 RSI: 0000200000000100 RDI: 0000000000000003
[ 1506.885388][   T39] RBP: 00007fe9b53c3e6f R08: 0000000000000000 R09: 0000000000000000
[ 1506.885398][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1506.885408][   T39] R13: 00007fe9b55b6038 R14: 00007fe9b55b5fa0 R15: 00007ffec6ec06c8
[ 1506.885434][   T39]  </TASK>
[ 1506.885493][   T39] 
[ 1506.885493][   T39] Showing all locks held in the system:
[ 1506.885501][   T39] locks held by kworker/0:0/9: 7, last CPU#0:
[ 1506.885512][   T39]  #0: ffff8880380d5938 ((wq_completion)wg-crypt-wg2#9){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.885550][   T39]  #1: ffffc900000e7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.885590][   T39]  #2: ffffffff8e259560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.885622][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.885653][   T39]  #4: ffff88806c929420 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x179/0xd90
[ 1506.885691][   T39]  #5: ffff88801de8e8c0 (&p->pi_lock){-...}-{2:2}, at: _task_rq_lock+0x5b/0x440
[ 1506.885724][   T39]  #6: ffff8880b863b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 1506.885756][   T39] locks held by kworker/0:1/10: 1, last CPU#0:
[ 1506.885767][   T39]  #0: ffff8880380d5938 ((wq_completion)wg-crypt-wg2#9){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.885804][   T39] locks held by khungtaskd/39: 1, last CPU#1:
[ 1506.885814][   T39]  #0: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1506.885853][   T39] locks held by kworker/0:2/199: 11, last CPU#0:
[ 1506.885863][   T39]  #0: ffff88806d3b8138 ((wq_completion)wg-crypt-wg1#9){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.885897][   T39]  #1: ffffc9000426fc60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.885930][   T39]  #2: ffffffff8e259560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.885963][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.885997][   T39]  #4: ffff888039be0248 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200
[ 1506.886054][   T39]  #5: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0
[ 1506.886189][   T39]  #6: ffffffff8e259560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.886220][   T39]  #7: ffffffff8e3c3b20 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0
[ 1506.886252][   T39]  #8: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[ 1506.886285][   T39]  #9: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x1100
[ 1506.886332][   T39]  #10: ffffffff8e259560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.886383][   T39] locks held by getty/5348: 2, on CPU#0:
[ 1506.886393][   T39]  #0: ffff8880295ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1506.886427][   T39]  #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 1506.886463][   T39] locks held by kworker/1:8/5770: 7, last CPU#1:
[ 1506.886481][   T39]  #0: ffff88806d3b8138 ((wq_completion)wg-crypt-wg1#9){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.886514][   T39]  #1: ffffc90005fefc60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.886545][   T39]  #2: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.886575][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50
[ 1506.886608][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: ip_local_deliver_finish+0x2ae/0x6f0
[ 1506.886644][   T39]  #5: ffffffff8e259560 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1506.886676][   T39]  #6: ffffffff8e3c3b20 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_receive+0x106a/0x23c0
[ 1506.886713][   T39] locks held by kworker/u8:58/7554: 1, last CPU#1:
[ 1506.886724][   T39]  #0: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x7fd/0x1480
[ 1506.886758][   T39] locks held by kworker/u8:66/9412: 6, last CPU#0:
[ 1506.886769][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.886804][   T39]  #1: ffffc900044afc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.886837][   T39]  #2: ffff88803eb50310 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.886875][   T39]  #3: ffff88805cefc920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 1506.886908][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.886940][   T39]  #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[ 1506.886981][   T39] locks held by kworker/u8:1/17653: 6, on CPU#0:
[ 1506.886991][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890575][   T39]  #1: ffffc900048bfc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890609][   T39]  #2: ffff88805fafc310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.890650][   T39]  #3: ffff88805c857120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 1506.890684][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.890717][   T39]  #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[ 1506.890754][   T39] locks held by kworker/0:5/18231: 4, last CPU#0:
[ 1506.890766][   T39]  #0: ffff88813fe66538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890798][   T39]  #1: ffffc9000d8ffc60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890829][   T39]  #2: ffffffff8ef03718 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470
[ 1506.890867][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.890906][   T39] locks held by kworker/u8:10/18543: 6, last CPU#0:
[ 1506.890917][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890951][   T39]  #1: ffffc9000e007c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.890985][   T39]  #2: ffff88805877c310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.891023][   T39]  #3: ffff88805ce40520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 1506.891056][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.891088][   T39]  #5: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.891120][   T39] locks held by kworker/u8:11/18544: 6, on CPU#0:
[ 1506.891130][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891161][   T39]  #1: ffffc9000dff7c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891193][   T39]  #2: ffff888038124310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.891232][   T39]  #3: ffff88805c839520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 1506.891266][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.891299][   T39]  #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[ 1506.891361][   T39] locks held by kworker/u8:14/18548: 3, on CPU#1:
[ 1506.891372][   T39]  #0: ffff8880330b7938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891404][   T39]  #1: ffffc90010d1fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891436][   T39]  #2: ffffffff8f7c46f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0
[ 1506.891483][   T39] locks held by kworker/u8:18/18550: 4, last CPU#0:
[ 1506.891495][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891638][   T39]  #1: ffffc9000e80fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891674][   T39]  #2: ffff88803affc310 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.891713][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.891750][   T39] locks held by kworker/u8:45/18969: 5, last CPU#0:
[ 1506.891760][   T39]  #0: ffff88806cbb5138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891799][   T39]  #1: ffffc90006c0fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.891834][   T39]  #2: ffff88806c6c17b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 1506.891878][   T39]  #3: ffff888026e31948 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 1506.891921][   T39]  #4: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[ 1506.891961][   T39] locks held by kworker/u8:46/19307: 6, on CPU#0:
[ 1506.891972][   T39]  #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.892008][   T39]  #1: ffffc9000da5fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.892043][   T39]  #2: ffff888036b86310 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 1506.892090][   T39]  #3: ffff888029e4fd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 1506.892134][   T39]  #4: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.892172][   T39]  #5: ffff8880b8636cd0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[ 1506.892213][   T39] locks held by syz.3.4660/22824: 2, on CPU#0:
[ 1506.892225][   T39]  #0: ffffffff8f8358a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1506.892263][   T39]  #1: ffffffff8e6eec78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30
[ 1506.892306][   T39] locks held by syz.0.4724/23009: 2, on CPU#0:
[ 1506.892318][   T39]  #0: ffffffff8f8358a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1506.892359][   T39]  #1: ffffffff8e6eec78 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30
[ 1506.892449][   T39] locks held by syz-executor/24331: 1, last CPU#0:
[ 1506.892461][   T39]  #0: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[ 1506.892510][   T39] locks held by kworker/1:0/25095: 3, last CPU#1:
[ 1506.892523][   T39]  #0: ffff88813fe67938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.892558][   T39]  #1: ffffc9000654fc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1506.892593][   T39]  #2: ffff8880407aa280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0
[ 1506.892635][   T39] locks held by syz-executor/25173: 6, last CPU#0:
[ 1506.892647][   T39]  #0: ffffffff8f8358a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1506.892775][   T39]  #1: ffffffff8f8356b8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1506.892813][   T39]  #2: ffffffff8f7c46f8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_register+0x1faf/0x2ff0
[ 1506.892853][   T39]  #3: ffff88804b2b08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_register+0x1fb9/0x2ff0
[ 1506.892895][   T39]  #4: ffff888022294148 (subsys mutex#55){+.+.}-{4:4}, at: device_add+0x8fa/0xb80
[ 1506.892939][   T39]  #5: ffff8880222941d0 (&k->k_lock){+.+.}-{3:3}, at: klist_add_tail+0x11c/0x210
[ 1506.892981][   T39] locks held by syz.8.5315/25581: 5, last CPU#0:
[ 1506.892995][   T39]  #0: ffff888031fb5530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[ 1506.910373][   T39]  #1: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 1506.910419][   T39]  #2: ffff8880361aac58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[ 1506.910466][   T39]  #3: ffffffff8e3c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1506.910508][   T39]  #4: ffff8880b863b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 1506.910552][   T39] 
[ 1506.910557][   T39] =============================================
[ 1506.910557][   T39] 
[ 1506.910581][   T39] NMI backtrace for cpu 0
[ 1506.910597][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1506.910620][   T39] Tainted: [L]=SOFTLOCKUP
[ 1506.910626][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1506.910637][   T39] Call Trace:
[ 1506.910644][   T39]  <TASK>
[ 1506.910652][   T39]  dump_stack_lvl+0xe8/0x150
[ 1506.910674][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[ 1506.910695][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1506.910720][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1506.910744][   T39]  sys_info+0x135/0x170
[ 1506.910762][   T39]  watchdog+0xfd7/0x1030
[ 1506.910792][   T39]  ? watchdog+0x1c7/0x1030
[ 1506.910822][   T39]  kthread+0x388/0x470
[ 1506.910844][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1506.910866][   T39]  ? __pfx_kthread+0x10/0x10
[ 1506.910887][   T39]  ret_from_fork+0x514/0xb70
[ 1506.910912][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1506.910934][   T39]  ? __switch_to+0xc89/0x1420
[ 1506.910956][   T39]  ? __pfx_kthread+0x10/0x10
[ 1506.910984][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1506.911020][   T39]  </TASK>
[ 1506.911027][   T39] Sending NMI from CPU 0 to CPUs 1:
[ 1506.911058][    C1] NMI backtrace for cpu 1
[ 1506.911077][    C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1506.911098][    C1] Tainted: [L]=SOFTLOCKUP
[ 1506.911103][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1506.911111][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 1506.911130][    C1] Code: e8 ce 89 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f d2 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[ 1506.911142][    C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202
[ 1506.911155][    C1] RAX: 1ffffffff3412a00 RBX: 00000000000003fd RCX: 0000000000000000
[ 1506.911166][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[ 1506.911175][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1506.911185][    C1] R10: dffffc0000000000 R11: ffffffff85602a30 R12: dffffc0000000000
[ 1506.911196][    C1] R13: 0000000000000000 R14: ffffffff9a095560 R15: 0000000000000000
[ 1506.911205][    C1] FS:  0000000000000000(0000) GS:ffff888125af5000(0000) knlGS:0000000000000000
[ 1506.911217][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1506.911228][    C1] CR2: 00007fbf51ee5d58 CR3: 000000004bd86000 CR4: 00000000003526f0
[ 1506.911241][    C1] Call Trace:
[ 1506.911247][    C1]  <TASK>
[ 1506.911254][    C1]  wait_for_lsr+0x190/0x300
[ 1506.911271][    C1]  serial8250_console_write+0x113a/0x1b40
[ 1506.911292][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1506.911311][    C1]  ? console_flush_one_record+0x49d/0xb90
[ 1506.911334][    C1]  console_flush_one_record+0x667/0xb90
[ 1506.911356][    C1]  ? console_flush_one_record+0xfa/0xb90
[ 1506.911377][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[ 1506.911398][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1506.911421][    C1]  legacy_kthread_func+0x1b6/0x250
[ 1506.911447][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1506.911473][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1506.911493][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1506.911510][    C1]  ? __kthread_parkme+0x196/0x1f0
[ 1506.911528][    C1]  kthread+0x388/0x470
[ 1506.911546][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1506.911565][    C1]  ? __pfx_kthread+0x10/0x10
[ 1506.911583][    C1]  ret_from_fork+0x514/0xb70
[ 1506.911602][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1506.911620][    C1]  ? __switch_to+0xc89/0x1420
[ 1506.911636][    C1]  ? __pfx_kthread+0x10/0x10
[ 1506.911655][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1506.911680][    C1]  </TASK>
[ 1506.922798][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[ 1506.922819][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1506.922843][   T39] Tainted: [L]=SOFTLOCKUP
[ 1506.922850][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1506.922864][   T39] Call Trace:
[ 1506.922871][   T39]  <TASK>
[ 1506.922878][   T39]  vpanic+0x5d9/0xad0
[ 1506.922905][   T39]  ? __pfx_vpanic+0x10/0x10
[ 1506.922921][   T39]  ? irqentry_exit+0x218/0x8f0
[ 1506.922945][   T39]  ? __pfx___schedule+0x10/0x10
[ 1506.922978][   T39]  panic+0xc5/0xd0
[ 1506.922995][   T39]  ? __pfx_panic+0x10/0x10
[ 1506.923010][   T39]  ? preempt_schedule_common+0x82/0xd0
[ 1506.923033][   T39]  ? preempt_schedule_thunk+0x16/0x40
[ 1506.923052][   T39]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1506.923076][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1506.923101][   T39]  watchdog+0x1030/0x1030
[ 1506.923133][   T39]  ? watchdog+0x1c7/0x1030
[ 1506.923161][   T39]  kthread+0x388/0x470
[ 1506.923184][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1506.923206][   T39]  ? __pfx_kthread+0x10/0x10
[ 1506.923229][   T39]  ret_from_fork+0x514/0xb70
[ 1506.923261][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1506.923283][   T39]  ? __switch_to+0xc89/0x1420
[ 1506.923305][   T39]  ? __pfx_kthread+0x10/0x10
[ 1506.923328][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1506.923363][   T39]  </TASK>
[ 1506.923654][   T39] Kernel Offset: disabled