last executing test programs:

16m47.164091s ago: executing program 2 (id=515):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0a390305c9"], 0x6)
bind$x25(r2, 0x0, 0x0)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)

16m46.283437849s ago: executing program 2 (id=519):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))
r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32], 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@caif=@rfm={0x25, 0xc, "e0d69fa53cea00de793f89048441ceae"}, 0x80)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
r2 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x54, 0xa, 0x3, "3205c546e8b41e04f4bf40070700", 0x38303553})
syz_usb_ep_read(r2, 0x9, 0xc3, &(0x7f0000000000)=""/195)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0)
getpid()
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000410007012dbd7000fedbdf25017c000004002d80080001800400208004"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x700}, 0x0)
r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(r10, 0x2000000)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r10, 0x3b8c, &(0x7f0000000240)={0x30, 0x0, 0x1, 0x0, 0x9, 0xa0, 0x597, &(0x7f00000001c0)=""/71})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)

16m44.252102348s ago: executing program 2 (id=526):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

16m43.789475572s ago: executing program 2 (id=529):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

16m43.182549974s ago: executing program 2 (id=533):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x162}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004040)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000b80)=""/4082, 0xff2}, {&(0x7f0000001b80)=""/226, 0xe2}, {&(0x7f0000001c80)=""/40, 0x28}, {&(0x7f0000001cc0)=""/227, 0xe3}, {&(0x7f0000001dc0)=""/176, 0xffffffffffffff5e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/155, 0x9b}], 0x8, &(0x7f0000003fc0)=""/80, 0x50}, 0x0, 0x121, 0x1, {0x1}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xa32, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f00000004c0))
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

16m27.92185286s ago: executing program 32 (id=530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
close(0x3)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

16m27.80592528s ago: executing program 33 (id=533):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x162}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004040)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000b80)=""/4082, 0xff2}, {&(0x7f0000001b80)=""/226, 0xe2}, {&(0x7f0000001c80)=""/40, 0x28}, {&(0x7f0000001cc0)=""/227, 0xe3}, {&(0x7f0000001dc0)=""/176, 0xffffffffffffff5e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/155, 0x9b}], 0x8, &(0x7f0000003fc0)=""/80, 0x50}, 0x0, 0x121, 0x1, {0x1}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xa32, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f00000004c0))
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

16m27.730754213s ago: executing program 34 (id=531):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bind(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
r0 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="1201010200001b406d04f60840000102030109026e0003017fc008080b000f010130230904000000010130000a0401100a00090000000904010000010230000904010101010230000905010960002503020a25250504000005fdff0904020000010230000904020101010230000905820900047406c00a2525fcffff7f02e10be9f123ba9f4b7ea6f5ccd280a6eb0704f4bed16e0c28d84e58e23b111567441333e2eae4fcdd85daac4264ed014ab5e2148648f5a3c646ec13eef6021b11ae6707b431ba9df647e71ae30c7118cd1b56c4580168f25361fb14b0e7bf71fc44f35922b310a7b34a15aaa36e29c77fc8542fd4dfc95944903491b4c28937168434b386c5d3c7ae34b062a8c7e6394154a2617d41242cbfae128affed2fb8f8dd43e94f203a5ee88590de782e697aa2bb8bd07213215b68d151aba93816ce3c4f69d79f"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000003c0)={0x54, 0xa, 0x3, "3205c546e8b41e04f4bf40070700", 0x38303553})
syz_usb_ep_read(r0, 0x9, 0xc3, &(0x7f0000000000)=""/195)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
getpid()
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x700}, 0x0)

16m26.413713599s ago: executing program 35 (id=534):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))
r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32], 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@caif=@rfm={0x25, 0xc, "e0d69fa53cea00de793f89048441ceae"}, 0x80)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000000)=ANY=[])
r2 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x54, 0xa, 0x3, "3205c546e8b41e04f4bf40070700", 0x38303553})
syz_usb_ep_read(r2, 0x9, 0xc3, &(0x7f0000000000)=""/195)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0)
getpid()
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000410007012dbd7000fedbdf25017c000004002d80080001800400208004"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x700}, 0x0)
r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(r10, 0x2000000)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r10, 0x3b8c, &(0x7f0000000240)={0x30, 0x0, 0x1, 0x0, 0x9, 0xa0, 0x597, &(0x7f00000001c0)=""/71})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)

6m44.082198549s ago: executing program 4 (id=3872):
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

6m43.764168911s ago: executing program 4 (id=3875):
unshare(0x74040900)

6m43.656548251s ago: executing program 4 (id=3878):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
recvmsg(r1, &(0x7f0000004900)={0x0, 0x0, 0x0}, 0x40012103)

6m42.698113062s ago: executing program 4 (id=3881):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000001880)=""/4121, 0x1019}, {&(0x7f0000001480)=""/188, 0xbc}, {&(0x7f00000009c0)=""/78, 0x4e}, {&(0x7f0000001600)=""/142, 0x8e}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000001340)=""/24, 0x18}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/57, 0x39}], 0xb}, 0x0)

6m42.584437694s ago: executing program 4 (id=3882):
r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mlockall(0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0xffffffd3)

6m42.334852071s ago: executing program 4 (id=3883):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6m28.178397642s ago: executing program 36 (id=3876):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="5e030800d3ffa601d77045"], 0xffdd)

6m27.982772035s ago: executing program 37 (id=3879):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x4)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670"], 0xffdd)

6m27.888741985s ago: executing program 38 (id=3880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'batadv0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x280)

6m25.943729626s ago: executing program 39 (id=3883):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m36.211075683s ago: executing program 0 (id=3890):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7)

4m32.3266111s ago: executing program 0 (id=3891):
r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mlockall(0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0xffffffd3)

4m32.202745389s ago: executing program 8 (id=3892):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/power/reserved_size', 0x48a82, 0x1)
write$FUSE_DIRENT(r0, &(0x7f0000000ac0)=ANY=[], 0x98)

4m31.449848776s ago: executing program 8 (id=3893):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x321280, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643dbaaed1303665667893fba9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)

4m31.106660768s ago: executing program 0 (id=3894):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r0, 0x8919, &(0x7f0000000040)="76657468303a3000000000000000000002")
r1 = socket$nl_route(0x10, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x4, 0x8, {}, {0x1, 0x8, 0x6, 0x6, 0x7f, 0x9, 'eyZw'}, 0x3, 0x1, {0x0}, 0x8b})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x2}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd25, 0x25dfdbf9, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040884)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
unshare(0x22020600)
write$nci(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="610506"], 0x15)

4m29.855007022s ago: executing program 8 (id=3895):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x5, 0x2, 0x2, 0x7, "0000de000000800000002000", '\x00', "0200", '\x00', ["d0c88863c5ae1caee40000b6", "f28e88ffffffff0005000002", "004000000000000000008008", "5f06e3ff130000b3f0000300"]})
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x1, 0x6}]}, 0x10)
sendto$inet(r3, &(0x7f0000000140)="87", 0x1, 0x4000010, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0000002600010022bd7008f9ffffff410000000800030047"], 0x7c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x4, 0x1, 0x20323159, 0x2, 0x1, [{0xc, 0x6}, {0x8, 0x81}, {0x0, 0x2a68}, {0x0, 0x9}, {0x400, 0x8}, {0x4, 0xfff}, {0xfffffffe, 0x3}, {0x1000, 0x6}], 0x1, 0x2, 0x7, 0x1, 0x3}})

4m29.849810876s ago: executing program 0 (id=3896):
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x60, 0xc7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x7, 0x9, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x4, 0x38, {0x7, 0x25, 0x1, 0x8, 0x7, 0x2}}}}}}}}]}}, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x6a4481, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_usb_connect(0x0, 0x4d1, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0xa, 0x54, 0x21, 0x10, 0x5c6, 0x9003, 0x5f41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bf, 0x1, 0xff, 0x80, 0xa0, 0x2, "", [{{0x9, 0x4, 0x4, 0x6, 0x10, 0xcb, 0x80, 0x16, 0x10, [@hid_hid={0x9, 0x21, 0x7fff, 0xa, 0x1, {0x22, 0x83b}}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0xb1, 0x9, 0x8}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xb, 0x9, 0x8, [@generic={0x10, 0x0, "fd6f965aea6ab663ff2270e2ba30"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0xf, 0xa, 0x81}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x9, 0x9, 0x9, [@generic={0x92, 0x21, "db41e6c909b84f46bf7f8037645a7e67b931f5a0932d2a937bec4989919133d0f61731433f28e39d7136f6e57eb04caa6372f371d17a05e6ef35c953161b5987313d35c8e49ef1741b61d7ef3f8bc26355c0117a69482406bb8b8408cb7a7973d4a89f939dce30771b20e2700991162cfb69974178db2aa03bc0db67e4d138b9dabc0137a6cdca69c6543bc886679470"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xa}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x1, 0x9, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xdd1e}, @generic={0xa9, 0xe, "09ba4a8aa4902554016430f656457ae70789373ba16b7ed41162faaf2bf5356288ede076cf36c1b5b35a874321cfe74d3e0451ab9e80e30a63f798511e7a5917ae6e8d15be1e7628b4d313a1810160d0682903a9a5730780fd133084b05e0b5083ac6010f5111a91b6edcdeed3b7ecb998d28235a2b949a1715ad09d4eeee7ca59437510181d4b9768757bf00b35d648cdcc50569cb20806831203fcdd68922e6db55172394692"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x5, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x63, 0x8}, @generic={0x7d, 0x9, "0a745676aee4521313fe4098eb378ff20468b144f31531c719c056fcfdce52ae8cca5f17c4619f860478466ef2ea7bb75612f184878d8138bead5cdba12e10e417efd44d49bd7c5cb87071145b69ee6b6b4d65658ff458d36ba7112e096389d90f0cebc296146ad45a25e077e31fcd3230a529bff2b242a5f9e455"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x420, 0x10, 0x0, 0xf9}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x0, 0x2, 0x2d}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xff}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x6, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xe4}]}}, {{0x9, 0x5, 0x7, 0xe3fa22357d4e5c73, 0x40, 0x96, 0x64, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfc, 0x3}, @generic={0x1d, 0x31, "9977a6d96540ba6331ad4a44b7b84d32565c6082935b51ea3c81a1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x5, 0x5, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0xad}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x6, 0x47, 0xfc}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0xff, 0xe, 0x4, [@generic={0xba, 0x23, "a38e0882c948f764b592a59805eabe07324812102c1d368aaf2df5c2e7738067c42a8a7ce33186ae735c5ad993fe20cc7932954655f7f6e775aa783d3a998bdb4ca29f31137c2565f702885785feaeb570d627ee3e11e4ce30610f11b473b30462076e62bc112bdc4b4cf4cb00782da58182835c163c14f8bbc774ea9dde98660fc3c189cd0a45d4a76e502bd46cd853780e3764bf413f2fd6d0962b946ba3323d16d0d46db8e508c129a020848bbfd8c02d3f3ad7dca054"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x0, 0x9, 0x8, [@generic={0x4d, 0x9, "4f16d3899f0f4186f7af958fb4f7e0c33e4d0a9106910a9f2b998dc2fc83bb88fbf929aea868e1d5e6ff50125d20296ca6843ce3a1a2a28426be805559a7a27fe0b1ba216a9d63afee951e"}, @generic={0xf7, 0x21, "4cafa20a8baea89722b2aef4c373f8493f05b34abb891d26ae0baa801262fafc7a09fb922f8e380f283f42bda6c9487ac782bf419cb001a02c45c114c7d5a03589eac0d8cc467db5e4f121a2655b6d73a6270244f8d61c0495920b8cbb0747295a488938dd08dd58701de8067ec88947363a64bc7a4bee30b5308e8c9ea624ad85271118c7b6e0b141e10f46ab5797a2e2cdd2419d38a0cd709eb0e2a3b6ba3b250f0d5d37e56150117ee091556982f943253c3a113e92dd2e1d284fe7e52473dc61cb5894db0a83404bb1e7644c24c135c1f3fc0832b17c2871c12b1dcb974969fff13bce48b9b13964b1bd1416de31288edfc555"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x0, 0x2, 0x2, 0x5e, 0xff, 0x97}, 0x1a, &(0x7f0000000a80)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0xa, 0x4, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0x5, 0x8db3}]}, 0x4, [{0x3f, &(0x7f0000000ac0)=@string={0x3f, 0x3, "a1750c53416a8d9493e34106f5decb1fb1271c1ac127a07ef717333c3c4b9842d21e365c1a0d017c82579e1e525306a99575def3f4a9fda9833149352f"}}, {0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "6a43e6a2170d010e7823938e9e1d44c2f626a17fe84f77bde9d4252b803c0c0e7ef678e5ef47c8706c70e34c9d8e0a926bb8abd724c55a34c27739454408d03b540ff5db20"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2c01}}]})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

4m29.219081095s ago: executing program 8 (id=3897):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x4, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x8}]}, &(0x7f0000000300)=0x10)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0xff, 0x2, 0x0, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m28.750933888s ago: executing program 9 (id=3885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x3)

4m28.348640579s ago: executing program 0 (id=3898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5c, 0xa, 0x20, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800", 0x47524247})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

4m28.245564253s ago: executing program 2 (id=3887):
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x240)

4m27.82299129s ago: executing program 9 (id=3899):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

4m27.811896294s ago: executing program 8 (id=3900):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/power/reserved_size', 0x48a82, 0x1)
read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020)

4m27.405060211s ago: executing program 8 (id=3901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
close(0x3)

4m26.750550876s ago: executing program 9 (id=3902):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7)

4m26.7499574s ago: executing program 0 (id=3903):
capset(&(0x7f0000000000)={0x35ee04c3b1980516}, &(0x7f0000000340)={0x0, 0x9, 0x60000, 0x7d, 0xffffffff, 0x1404})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0xc1, 0x19, 0x3357, 0x1, "4643ca36a5a20fc65f1e414ef0c967a21c1adb963fcd5be1b5ba79f9b83c5ab5"})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x300, 0x2000000}, 0x8)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x10, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500de5aa0bd000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9ab9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008f3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000000000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180)="310002", 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd}, 0x4040000)
socket$qrtr(0x2a, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x13, r0, 0x543b8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003)
getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000308050000000000014fb70977000003050003008480080001560000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x12, 0xffffffffffffffff, 0x57c7e000)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)

4m12.455250079s ago: executing program 40 (id=3887):
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x240)

4m11.020966663s ago: executing program 41 (id=3901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
close(0x3)

4m10.914747707s ago: executing program 42 (id=3902):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7)

4m10.741618659s ago: executing program 43 (id=3903):
capset(&(0x7f0000000000)={0x35ee04c3b1980516}, &(0x7f0000000340)={0x0, 0x9, 0x60000, 0x7d, 0xffffffff, 0x1404})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0xc1, 0x19, 0x3357, 0x1, "4643ca36a5a20fc65f1e414ef0c967a21c1adb963fcd5be1b5ba79f9b83c5ab5"})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x300, 0x2000000}, 0x8)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x10, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500de5aa0bd000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9ab9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008f3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000000000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180)="310002", 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd}, 0x4040000)
socket$qrtr(0x2a, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x13, r0, 0x543b8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003)
getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000308050000000000014fb70977000003050003008480080001560000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x12, 0xffffffffffffffff, 0x57c7e000)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)

1m28.202600415s ago: executing program 1 (id=4131):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000020805000000e1000000010000030040ebb744f6eebdbe"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r2 = syz_open_pts(r1, 0x200)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff)
mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000)
socket$kcm(0x10, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="600000001800050601000000000000000a430000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800200000000500070002000000", 0x60)
r5 = open(&(0x7f0000000040)='./file4\x00', 0x0, 0x44)
flock(r5, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'})

1m26.898663027s ago: executing program 1 (id=4135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000663000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xd5d65000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f34066681fb945bfe585ab6933a6f6514a0eebad4e35370000000000000000000000000000000a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a3200000000140000001101010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000300000009000100730000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002000000000000000000"], 0x9c}}, 0x4000)

1m26.845137498s ago: executing program 1 (id=4136):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000100}]})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000000000000000000000000000000032000000ff"], 0x1a4}}, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
msgget$private(0x0, 0x3c1) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001b140100fcffffff0000000008004a0001000000080003000000000108004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r10, @ANYBLOB='\b\x00k'], 0x24}}, 0x44)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r12 = dup(r11) (async, rerun: 64)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x1, 'bridge0\x00', {}, 0x1}) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)

1m25.972766351s ago: executing program 1 (id=4140):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

1m25.831877461s ago: executing program 1 (id=4141):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
read(r4, &(0x7f0000000040)=""/252, 0xfc)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="c7a0857593b14409c61fc52042f37bff536466ec3c94eefa29b702651c4b929b1868b1b8536b451990817fddc076e1bf7f7d9b61991040e1738be76900bb88983ca546fb3b4a7d9c605e6c58d44b34febfdfaffdb8ca5caa2c6284762f81c7361e45b4ab05a8032aba28e9adfbda905bb0f3caa0bd07a6419e69351331e9d869ed2bbd984fe0e62b192083ccd41d3661a83752645fdbf143504008f89792ea62ae523110bb3a1ffe376339965dfae2c6dc6dd06fe49803fbab63791cde78493b6db9c19d64c6640e6dee570986a5bfa6ba893db87b", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES32=r4], 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x22, 0x72, {0x72, 0x31, "753428dbdc645fe79fdf08150e82c94cbea2d36018a73640137860c8e450bcc7e007f10bce836dec2612278ea4c652273b92e293855789af6ff253fd46bbc4fcb228635724e0f8780d31c0a7022d1bab760943cf14c57f5d8af97084a25d661a3d914955a56ae1ecf250555aefa542a9"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x20, 0x18, 0xa9, "36283bc8d81cd4345be31a14b40b165673ca5dff207c16892b014a32e933c18cecbf32d5b49e5080f9541e36cf1e155ed01f431c559527956cf40b57c3f5787b6d6e4d103e1f871c975248ef42d5a9965615b56cad5ffa87effcf997c0d6e083282e7bc78c811f988894653cc57bfcc09631db58bbad64253f12c1bc351e3744d975c11cb134e45cdbd103a7c43ff9fec47713fe3ceda66d36b3a3d973cc8c0c783dc3c1be5aca98c2"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x64}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "f7a95fedb8ce55824f95079ebd5ca21943fca4cd4765d664c1df0b70993b120ecf0336a3687ea90db9919cb90b571d"}})

1m24.506525012s ago: executing program 1 (id=4149):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x6, 0x24, &(0x7f0000000540)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x4041)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x7, 0x7, &(0x7f0000000080)={0x13, "86b09bfa81067d575af7d50d76f410f3de1026b42cab76673ea8a663100b039db3"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

1m23.74574308s ago: executing program 44 (id=4149):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x6, 0x24, &(0x7f0000000540)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x4041)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x7, 0x7, &(0x7f0000000080)={0x13, "86b09bfa81067d575af7d50d76f410f3de1026b42cab76673ea8a663100b039db3"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

23.039285028s ago: executing program 5 (id=4351):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x321280, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)

22.626543558s ago: executing program 5 (id=4353):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

21.298527513s ago: executing program 5 (id=4359):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa) (fail_nth: 3)

20.578144843s ago: executing program 5 (id=4360):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000400)={@void, @void, @ipv6=@icmpv6={0x3, 0x6, "31fddf", 0x20, 0x3a, 0x0, @mcast2, @remote, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [{0x2, 0x1, "6b42f6d09495"}]}}}}, 0x48)
read(r0, &(0x7f0000000100)=""/4096, 0x1000)
read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa0, 0x0, &(0x7f0000000400)=[@acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0xfffffffffffffffe, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x40}, @register_looper, @dead_binder_done], 0xd9, 0x0, &(0x7f00000004c0)="b66b7002460d5315696478067ae0c342dd1e229c6315dadce0317e77b71dcb02f36a39ca2c22911748503cd611c173430c4b1985761aff9f6c2d09456aaeec5a772bf5c92a0cfe23a901ab8f1594682b7654b9576767e82b5039fb3260a4e641228b8c43ea1f84abc0f29d0fc8f751581a4c5aac8c507da9e59c7507fee57cbd6135c220b8064ace827d565d043fdba6eb37c4d10d4eb568b7338f039ca4ab25f88683f52f3da08b8dfeccc1febb654d3a2e2d2332a17eec57a4b276a35344a140893f03deb6d2b05979374ad0facd5334c6bce5cf4dc08b46"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000200)={0x0, 0xa4ee, 0x1000, 0x2, 0x229}, &(0x7f0000001ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd95, 0x1, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab10, 0x2, 0x2, 0xa0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2094, 0x80, 0x3, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd22c, 0x2, 0x3, 0x12c}}], 0x4, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r4, &(0x7f0000000240)=""/28, 0xffd2)
memfd_secret(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))

17.243553899s ago: executing program 5 (id=4366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (fail_nth: 3)

16.13665596s ago: executing program 5 (id=4371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23062dbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000140"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x80)

15.282832783s ago: executing program 45 (id=4371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23062dbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000140"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x80)

6.636177909s ago: executing program 3 (id=4396):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000040))
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cb, 0xfffffffffffffffe)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

4.632473925s ago: executing program 6 (id=4399):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x321280, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643dbaaed1303665667893fba9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)

3.523560283s ago: executing program 7 (id=4401):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)

3.330859405s ago: executing program 6 (id=4402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x4008af25, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b0001006e756d67656e00001c0002800800024000000004080001400000000908000340000000010900010073797a300000000038000000020a05000000000000000000170000060900010073797a30000000000c00044000000000000000020900010073797a310000000004030000050a0103000000000000000005000005ff000c00558e808ddc630a32d1921a3776bccf8cf8a0865ab17572f524aa9faa4ba6d28e7e776ee3d2e02e217ea2137405b3c930b9cfedbf0a1b33ee610bc0064819e5f7931a7cc79f0aa5f128dda77cce1bc95903e132e01ab53b0ae904fdc5edc93e7992f4956f3eee5ca4f26c9e2cc87cb2d9ec55962769ecad412791aff4644a0e4d157d59057e969dd0345a9893b5eab3978069310dfec47c59845ca2a318c70ff3b35dfe5f665c413978ff21f2231d5acc9b476ba7dd993dde3454f3c80bd2d8e4964b6d43f6706a9d8687dd4f76f4926f2ce5d9f5e1ad18cb645d39aa654a3aa5bbfe555f326740114f3b4cadff728565a2f73b90a4c14bd3dde3b1000900010073797a3100000000400008800c00014000000000000000080c00014000000000000000060c000140ffffffffffffffff0c00014000000000000000030c00014000000000000000030c000240000000000000000108000a40000000040900010073797a300000000008000a40000000011c0008800c00024000000000000000080c000240000000000000000408000b4000000003740004"], 0x46c}}, 0x0)

2.974903354s ago: executing program 3 (id=4403):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffe, 0x80, 0x2}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0xfffe, 0x4}}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x1058, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600030000000c0003"], 0x68}}, 0x20000000)

2.661598842s ago: executing program 7 (id=4404):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x63, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ff80000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)

2.51674744s ago: executing program 3 (id=4405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r1 = signalfd4(r0, &(0x7f0000000080)={[0xf28]}, 0x8, 0x80800)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))

2.51658071s ago: executing program 6 (id=4406):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})

2.418090775s ago: executing program 7 (id=4407):
set_mempolicy(0x1, &(0x7f0000000000)=0x7e, 0x11)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.115134585s ago: executing program 6 (id=4408):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44)
sendmmsg(r1, &(0x7f0000005780), 0x0, 0x20000040)
lsm_set_self_attr(0x68, 0x0, 0x20, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG_ZC={0x30, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x4000, @random="20ab0f436746", 'veth1_to_bridge\x00'}}, 0x80, 0x0}, 0x7, 0x800})
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
add_key$fscrypt_v1(&(0x7f0000004080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.896990473s ago: executing program 6 (id=4409):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x321280, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643dbaaed1303665667893fba9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000080))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)

1.406572584s ago: executing program 3 (id=4410):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (fail_nth: 3)

1.230095852s ago: executing program 3 (id=4411):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x4000, 0x2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bede00212ba0d8105040a60e000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40", 0x94}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FIONCLEX(r2, 0x5450)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x100, r4, 0x600, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caf6bea632c235b97a3c73a60259e66cdb51607238d4f1a9"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1761f9ff11e559f849dce8ced91dfb2cf40697da81f60c3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9c661021fcc1a91516e09aeceb836be2a14ad9ed26f40a7"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0)

995.552126ms ago: executing program 7 (id=4412):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0xfc}}}}, 0x9)

682.674ms ago: executing program 6 (id=4413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00), 0x0)
close(r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/config.gz\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')

682.434455ms ago: executing program 7 (id=4414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}, {0x80000000}}, [@offload={0xc, 0x1c, {r1, 0x4}}]}, 0xc4}}, 0x0)

321.778179ms ago: executing program 7 (id=4415):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='pagemap\x00')
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x20000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r3, r4, 0x0, 0x0, 0xfbfffffffffffffd})
read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020)
openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x22800, 0x0)
r5 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r9, &(0x7f0000000340), 0x8)
syz_usb_connect$midi(0x3, 0x3a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x0, 0x1a0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x5, 0x1, [{0xe, 0x8}], 0x5}], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3, 0x7, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x2, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf000, 0x6, [0x0, 0xcf, 0xc0]}]}})

0s ago: executing program 3 (id=4416):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44)
sendmmsg(r1, &(0x7f0000005780), 0x0, 0x20000040)
lsm_set_self_attr(0x68, 0x0, 0x20, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG_ZC={0x30, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x4000, @random="20ab0f436746", 'veth1_to_bridge\x00'}}, 0x80, 0x0}, 0x7, 0x800})
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
add_key$fscrypt_v1(&(0x7f0000004080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

kernel console output (not intermixed with test programs):

170][T20239] usb 6-1: Manufacturer: syz
[ 1178.089186][T20239] usb 6-1: SerialNumber: syz
[ 1178.160651][T20239] usb 6-1: config 0 descriptor??
[ 1178.179185][T20239] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1178.377912][T21273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.378567][T21273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.491826][T21273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.492492][T21273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.548709][T20239] usb 6-1: qt2_attach - failed to power on unit: -71
[ 1178.548890][T20239] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[ 1178.600800][T20239] usb 6-1: USB disconnect, device number 60
[ 1178.613472][T20241] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1178.765133][T20241] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1178.765168][T20241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.765191][T20241] usb 2-1: Product: syz
[ 1178.765207][T20241] usb 2-1: Manufacturer: syz
[ 1178.765224][T20241] usb 2-1: SerialNumber: syz
[ 1179.071074][T20241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1179.071136][T20241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[ 1179.071160][T20241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1179.115826][T20241] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[ 1179.224817][T21299] fuseblk: Bad value for 'user_id'
[ 1179.224833][T21299] fuseblk: Bad value for 'user_id'
[ 1179.248481][T21306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4038'.
[ 1179.820702][T21330] FAULT_INJECTION: forcing a failure.
[ 1179.820702][T21330] name failslab, interval 1, probability 0, space 0, times 0
[ 1179.820745][T21330] CPU: 0 UID: 0 PID: 21330 Comm: syz.7.4041 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1179.820777][T21330] Tainted: [L]=SOFTLOCKUP
[ 1179.820786][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1179.820801][T21330] Call Trace:
[ 1179.820810][T21330]  <TASK>
[ 1179.820821][T21330]  dump_stack_lvl+0xe8/0x150
[ 1179.820856][T21330]  should_fail_ex+0x467/0x600
[ 1179.820891][T21330]  should_failslab+0xa8/0x100
[ 1179.820916][T21330]  __kmalloc_cache_noprof+0xa1/0x670
[ 1179.820962][T21330]  ? io_ring_ctx_alloc+0x54/0xba0
[ 1179.821027][T21330]  ? io_ring_ctx_alloc+0x54/0xba0
[ 1179.821059][T21330]  io_ring_ctx_alloc+0x54/0xba0
[ 1179.821083][T21330]  ? io_prepare_config+0x8c8/0xc70
[ 1179.821123][T21330]  io_uring_create+0x50/0x990
[ 1179.821153][T21330]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1179.821188][T21330]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1179.821221][T21330]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1179.821272][T21330]  ? __pfx_ksys_write+0x10/0x10
[ 1179.821310][T21330]  do_syscall_64+0x17b/0x530
[ 1179.821334][T21330]  ? irqentry_exit+0x10f/0x8f0
[ 1179.821356][T21330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.821379][T21330]  ? clear_bhb_loop+0x40/0x90
[ 1179.821407][T21330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.821430][T21330] RIP: 0033:0x7fd75ddae0d9
[ 1179.821451][T21330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1179.821471][T21330] RSP: 002b:00007fd75c005ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1179.821495][T21330] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fd75ddae0d9
[ 1179.821513][T21330] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[ 1179.821528][T21330] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[ 1179.821544][T21330] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[ 1179.821560][T21330] R13: 0000200000000b10 R14: 00007fd75c005fd8 R15: 0000000000000000
[ 1179.821594][T21330]  </TASK>
[ 1180.769665][ T5781] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1180.929656][ T5781] usb 8-1: Using ep0 maxpacket: 32
[ 1180.931779][ T5781] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1180.931823][ T5781] usb 8-1: config 0 has no interface number 0
[ 1180.931874][ T5781] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1180.934589][ T5781] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1180.934621][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.934647][ T5781] usb 8-1: Product: syz
[ 1180.934658][ T5781] usb 8-1: Manufacturer: syz
[ 1180.934670][ T5781] usb 8-1: SerialNumber: syz
[ 1181.000625][ T5781] usb 8-1: config 0 descriptor??
[ 1181.032650][ T5781] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1181.235854][T21351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1181.236859][T21351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1181.300993][ T5781] usb 8-1: qt2_attach - failed to power on unit: -71
[ 1181.301192][ T5781] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71
[ 1181.327338][ T5781] usb 8-1: USB disconnect, device number 57
[ 1181.468796][T20239] usb 2-1: USB disconnect, device number 58
[ 1181.594228][T21365] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1181.750087][T21363] fuseblk: Bad value for 'user_id'
[ 1181.750122][T21363] fuseblk: Bad value for 'user_id'
[ 1182.086170][T21378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1182.275502][T21375] fuseblk: Bad value for 'user_id'
[ 1182.275526][T21375] fuseblk: Bad value for 'user_id'
[ 1182.803584][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.129586][ T5675] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1183.268075][T21414] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1183.325381][ T5675] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1183.325413][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.325439][ T5675] usb 6-1: Product: syz
[ 1183.325450][ T5675] usb 6-1: Manufacturer: syz
[ 1183.325461][ T5675] usb 6-1: SerialNumber: syz
[ 1183.660759][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1183.660819][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[ 1183.660892][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1183.725658][ T5675] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[ 1183.769873][ T5744] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1183.919600][ T5744] usb 2-1: Using ep0 maxpacket: 32
[ 1183.921938][ T5744] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1183.921968][ T5744] usb 2-1: config 0 has no interface number 0
[ 1183.922018][ T5744] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1183.925630][ T5744] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1183.925665][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.925688][ T5744] usb 2-1: Product: syz
[ 1183.925704][ T5744] usb 2-1: Manufacturer: syz
[ 1183.925720][ T5744] usb 2-1: SerialNumber: syz
[ 1184.005819][ T5744] usb 2-1: config 0 descriptor??
[ 1184.032338][ T5744] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1184.142858][T21426] fuseblk: Bad value for 'user_id'
[ 1184.142879][T21426] fuseblk: Bad value for 'user_id'
[ 1184.225352][T21418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1184.226005][T21418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1184.293708][ T5744] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1184.293885][ T5744] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[ 1184.330787][ T5744] usb 2-1: USB disconnect, device number 59
[ 1184.989304][ T5255] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1185.188377][T21463] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1185.292875][T21466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1185.979092][T19244] usb 6-1: USB disconnect, device number 61
[ 1185.983123][T21485] fuseblk: Bad value for 'user_id'
[ 1185.983144][T21485] fuseblk: Bad value for 'user_id'
[ 1186.459504][T19244] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1186.610980][T19244] usb 6-1: Using ep0 maxpacket: 32
[ 1186.614756][T19244] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1186.614787][T19244] usb 6-1: config 0 has no interface number 0
[ 1186.614836][T19244] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1186.664022][T19244] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1186.664055][T19244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.664075][T19244] usb 6-1: Product: syz
[ 1186.664090][T19244] usb 6-1: Manufacturer: syz
[ 1186.664103][T19244] usb 6-1: SerialNumber: syz
[ 1186.713687][T19244] usb 6-1: config 0 descriptor??
[ 1186.729609][T19244] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1186.785535][T21508] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1186.938646][T21492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.949183][T21492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1187.031467][T19244] usb 6-1: qt2_attach - failed to power on unit: -71
[ 1187.031657][T19244] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[ 1187.069663][T19244] usb 6-1: USB disconnect, device number 62
[ 1187.469939][ T5781] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1187.625461][ T5781] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1187.625496][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.625519][ T5781] usb 4-1: Product: syz
[ 1187.625535][ T5781] usb 4-1: Manufacturer: syz
[ 1187.625551][ T5781] usb 4-1: SerialNumber: syz
[ 1188.031213][T21537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1188.122812][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1188.122873][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1188.125056][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1188.125115][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1188.128802][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1188.234923][ T5781] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1188.372895][T21542] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1188.646206][T21551] fuseblk: Bad value for 'user_id'
[ 1188.646229][T21551] fuseblk: Bad value for 'user_id'
[ 1189.309580][ T5781] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1189.459867][ T5781] usb 8-1: Using ep0 maxpacket: 32
[ 1189.466348][ T5781] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1189.466381][ T5781] usb 8-1: config 0 has no interface number 0
[ 1189.466437][ T5781] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1189.506196][ T5781] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1189.506231][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.506253][ T5781] usb 8-1: Product: syz
[ 1189.506270][ T5781] usb 8-1: Manufacturer: syz
[ 1189.506286][ T5781] usb 8-1: SerialNumber: syz
[ 1189.558647][ T5781] usb 8-1: config 0 descriptor??
[ 1189.586343][ T5781] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1189.762732][T21590] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1189.783950][T21565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.784623][T21565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.807172][T21565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.807810][T21565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1190.007017][ T5781] usb 8-1: qt2_attach - failed to power on unit: -71
[ 1190.007177][ T5781] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71
[ 1190.045362][ T5781] usb 8-1: USB disconnect, device number 58
[ 1190.236506][    T9] usb 4-1: USB disconnect, device number 57
[ 1190.630683][T21602] fuseblk: Bad value for 'user_id'
[ 1190.630706][T21602] fuseblk: Bad value for 'user_id'
[ 1190.726406][T21605] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1190.895338][T21616] FAULT_INJECTION: forcing a failure.
[ 1190.895338][T21616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1190.895380][T21616] CPU: 1 UID: 0 PID: 21616 Comm: syz.7.4099 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1190.895412][T21616] Tainted: [L]=SOFTLOCKUP
[ 1190.895420][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1190.895434][T21616] Call Trace:
[ 1190.895443][T21616]  <TASK>
[ 1190.895454][T21616]  dump_stack_lvl+0xe8/0x150
[ 1190.895490][T21616]  should_fail_ex+0x467/0x600
[ 1190.895532][T21616]  _copy_from_user+0x2d/0xb0
[ 1190.895556][T21616]  ___sys_recvmsg+0x173/0x5a0
[ 1190.895593][T21616]  ? lock_acquire+0x115/0x350
[ 1190.895634][T21616]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1190.895684][T21616]  ? lock_acquire+0x115/0x350
[ 1190.895741][T21616]  ? __fget_files+0x3a8/0x420
[ 1190.895776][T21616]  do_recvmmsg+0x320/0x7f0
[ 1190.895822][T21616]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1190.895882][T21616]  ? get_timespec64+0x119/0x1b0
[ 1190.895915][T21616]  ? __pfx_get_timespec64+0x10/0x10
[ 1190.895950][T21616]  __x64_sys_recvmmsg+0x1b7/0x250
[ 1190.895990][T21616]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1190.896036][T21616]  do_syscall_64+0x17b/0x530
[ 1190.896060][T21616]  ? irqentry_exit+0x10f/0x8f0
[ 1190.896082][T21616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.896108][T21616]  ? clear_bhb_loop+0x40/0x90
[ 1190.896136][T21616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.896159][T21616] RIP: 0033:0x7fd75ddae0d9
[ 1190.896181][T21616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.896202][T21616] RSP: 002b:00007fd75bfe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1190.896227][T21616] RAX: ffffffffffffffda RBX: 00007fd75e036090 RCX: 00007fd75ddae0d9
[ 1190.896245][T21616] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1190.896262][T21616] RBP: 00007fd75bfe5090 R08: 0000200000003700 R09: 0000000000000000
[ 1190.896279][T21616] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[ 1190.896294][T21616] R13: 00007fd75e036128 R14: 00007fd75e036090 R15: 00007ffc0fb425f8
[ 1190.896330][T21616]  </TASK>
[ 1191.638707][T21622] fuseblk: Bad value for 'user_id'
[ 1191.638730][T21622] fuseblk: Bad value for 'user_id'
[ 1192.099541][T20285] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 1192.255571][T20285] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1192.255607][T20285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.255630][T20285] usb 8-1: Product: syz
[ 1192.255646][T20285] usb 8-1: Manufacturer: syz
[ 1192.255662][T20285] usb 8-1: SerialNumber: syz
[ 1192.797132][T20285] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1192.797201][T20285] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1192.797963][T20285] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1192.798019][T20285] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1192.798987][T20285] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1192.873904][T20285] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1192.981827][T19244] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1193.130398][T19244] usb 2-1: Using ep0 maxpacket: 32
[ 1193.132456][T19244] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1193.132486][T19244] usb 2-1: config 0 has no interface number 0
[ 1193.132537][T19244] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1193.136516][T19244] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1193.136549][T19244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.136573][T19244] usb 2-1: Product: syz
[ 1193.136589][T19244] usb 2-1: Manufacturer: syz
[ 1193.136606][T19244] usb 2-1: SerialNumber: syz
[ 1193.216778][T19244] usb 2-1: config 0 descriptor??
[ 1193.232807][T19244] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1193.445784][T21661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.446345][T21661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.538730][T21661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.544311][T21661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.570495][T19244] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1193.570668][T19244] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[ 1193.598815][T19244] usb 2-1: USB disconnect, device number 60
[ 1193.801660][T21677] fuseblk: Bad value for 'user_id'
[ 1193.801683][T21677] fuseblk: Bad value for 'user_id'
[ 1194.380795][T21700] FAULT_INJECTION: forcing a failure.
[ 1194.380795][T21700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1194.380837][T21700] CPU: 0 UID: 0 PID: 21700 Comm: syz.1.4114 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1194.380869][T21700] Tainted: [L]=SOFTLOCKUP
[ 1194.380877][T21700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1194.380892][T21700] Call Trace:
[ 1194.380901][T21700]  <TASK>
[ 1194.380911][T21700]  dump_stack_lvl+0xe8/0x150
[ 1194.380943][T21700]  should_fail_ex+0x467/0x600
[ 1194.380979][T21700]  _copy_from_iter+0x1d3/0x1660
[ 1194.381018][T21700]  ? __lock_acquire+0x6df/0x2e40
[ 1194.381044][T21700]  ? __pfx__copy_from_iter+0x10/0x10
[ 1194.381081][T21700]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1194.381123][T21700]  tun_get_user+0x259/0x4380
[ 1194.381147][T21700]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1194.381181][T21700]  ? reacquire_held_locks+0x117/0x1a0
[ 1194.381207][T21700]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1194.381246][T21700]  ? __pfx_tun_get_user+0x10/0x10
[ 1194.381268][T21700]  ? rt_spin_unlock+0x157/0x200
[ 1194.381304][T21700]  ? rt_spin_unlock+0x163/0x200
[ 1194.381337][T21700]  ? save_netdev_trace_buffer+0x4ae/0x5e0
[ 1194.381370][T21700]  ? ref_tracker_alloc+0x353/0x4c0
[ 1194.381403][T21700]  ? tun_get+0x157/0x2f0
[ 1194.381423][T21700]  ? tun_chr_write_iter+0x63/0x210
[ 1194.381445][T21700]  ? vfs_write+0x61e/0xbb0
[ 1194.381470][T21700]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1194.381506][T21700]  ? tun_get+0x1c/0x2f0
[ 1194.381536][T21700]  ? tun_get+0x1c/0x2f0
[ 1194.381568][T21700]  ? tun_get+0x1c/0x2f0
[ 1194.381597][T21700]  tun_chr_write_iter+0x119/0x210
[ 1194.381624][T21700]  vfs_write+0x61e/0xbb0
[ 1194.381660][T21700]  ? __pfx_vfs_write+0x10/0x10
[ 1194.381697][T21700]  ? __fget_files+0x2a/0x420
[ 1194.381730][T21700]  ksys_write+0x156/0x270
[ 1194.381759][T21700]  ? __pfx_ksys_write+0x10/0x10
[ 1194.381795][T21700]  do_syscall_64+0x17b/0x530
[ 1194.381818][T21700]  ? irqentry_exit+0x10f/0x8f0
[ 1194.381841][T21700]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.381864][T21700]  ? clear_bhb_loop+0x40/0x90
[ 1194.381894][T21700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.381917][T21700] RIP: 0033:0x7fb384e5e0d9
[ 1194.381938][T21700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1194.381958][T21700] RSP: 002b:00007fb3830b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1194.381983][T21700] RAX: ffffffffffffffda RBX: 00007fb3850e5fa0 RCX: 00007fb384e5e0d9
[ 1194.382001][T21700] RDX: 0000000000000236 RSI: 0000200000001540 RDI: 0000000000000003
[ 1194.382017][T21700] RBP: 00007fb3830b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1194.382033][T21700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1194.382047][T21700] R13: 00007fb3850e6038 R14: 00007fb3850e5fa0 R15: 00007ffce5fe0278
[ 1194.382081][T21700]  </TASK>
[ 1195.031632][ T5801] usb 8-1: USB disconnect, device number 59
[ 1195.217621][T21714] fuseblk: Bad value for 'user_id'
[ 1195.217644][T21714] fuseblk: Bad value for 'user_id'
[ 1195.679699][    T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1195.832970][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1195.900699][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1195.900732][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.900755][    T9] usb 2-1: Product: syz
[ 1195.900771][    T9] usb 2-1: Manufacturer: syz
[ 1195.900788][    T9] usb 2-1: SerialNumber: syz
[ 1195.951342][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1195.951372][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[ 1196.164975][T21746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1196.165569][T21746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1196.187195][T20239] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1196.339632][T20239] usb 6-1: Using ep0 maxpacket: 32
[ 1196.343036][T20239] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1196.343066][T20239] usb 6-1: config 0 has no interface number 0
[ 1196.343115][T20239] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1196.380628][T20239] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1196.380662][T20239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.380684][T20239] usb 6-1: Product: syz
[ 1196.380700][T20239] usb 6-1: Manufacturer: syz
[ 1196.380717][T20239] usb 6-1: SerialNumber: syz
[ 1196.383368][  T826] r8152-cfgselector 2-1: USB disconnect, device number 61
[ 1196.444747][T20239] usb 6-1: config 0 descriptor??
[ 1196.469583][T20239] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1196.727484][T21740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1196.728675][T21740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1196.736489][T21740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1196.737625][T21740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1196.805909][T20239] usb 6-1: qt2_attach - failed to power on unit: -71
[ 1196.806091][T20239] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[ 1196.834723][T20239] usb 6-1: USB disconnect, device number 63
[ 1196.874978][T20543] udevd[20543]: setting mode of /dev/bus/usb/006/063 to 020664 failed: No such file or directory
[ 1196.875133][T20543] udevd[20543]: setting owner of /dev/bus/usb/006/063 to uid=0, gid=0 failed: No such file or directory
[ 1197.220961][T21763] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1197.545048][T21769] fuseblk: Bad value for 'user_id'
[ 1197.545071][T21769] fuseblk: Bad value for 'user_id'
[ 1197.629942][  T826] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1197.789565][ T5779] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1197.799596][  T826] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1197.799628][  T826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.799650][  T826] usb 4-1: Product: syz
[ 1197.799676][  T826] usb 4-1: Manufacturer: syz
[ 1197.799693][  T826] usb 4-1: SerialNumber: syz
[ 1197.976975][ T5779] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.977005][ T5779] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1198.015687][ T5779] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1198.015711][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1198.015727][ T5779] usb 6-1: SerialNumber: syz
[ 1198.156624][T21788] fuseblk: Bad value for 'user_id'
[ 1198.156647][T21788] fuseblk: Bad value for 'user_id'
[ 1198.417210][  T826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1198.417341][  T826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1198.439630][  T826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1198.439694][  T826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1198.440851][  T826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1198.489294][ T5779] usb 6-1: 0:2 : does not exist
[ 1198.509229][  T826] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1198.880082][ T5779] usb 6-1: USB disconnect, device number 64
[ 1199.139074][T20543] udevd[20543]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1200.537164][ T5689] usb 4-1: USB disconnect, device number 58
[ 1200.916333][T21848] fuseblk: Bad value for 'user_id'
[ 1200.916356][T21848] fuseblk: Bad value for 'user_id'
[ 1200.974652][T21846] fuseblk: Bad value for 'user_id'
[ 1200.974674][T21846] fuseblk: Bad value for 'user_id'
[ 1201.270872][T20042] do_umount: task=syz-executor[20042] propagate_mount_busy()!=0
[ 1201.674377][T21872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.640701][ T5779] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 1202.796943][ T5779] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1202.796977][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.796999][ T5779] usb 8-1: Product: syz
[ 1202.797015][ T5779] usb 8-1: Manufacturer: syz
[ 1202.797031][ T5779] usb 8-1: SerialNumber: syz
[ 1203.328231][ T5779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1203.328296][ T5779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1203.339304][ T5779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1203.376215][ T5779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1203.377175][ T5779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1203.404312][ T5779] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1203.873469][T21917] fuseblk: Bad value for 'user_id'
[ 1203.873492][T21917] fuseblk: Bad value for 'user_id'
[ 1203.954873][ T4908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1204.003784][ T4908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1204.028983][ T4908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1204.077007][ T4908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1204.101833][ T4908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1204.955029][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.013987][T21939] FAULT_INJECTION: forcing a failure.
[ 1205.013987][T21939] name failslab, interval 1, probability 0, space 0, times 0
[ 1205.014022][T21939] CPU: 1 UID: 0 PID: 21939 Comm: syz.5.4155 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1205.014048][T21939] Tainted: [L]=SOFTLOCKUP
[ 1205.014055][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1205.014066][T21939] Call Trace:
[ 1205.014073][T21939]  <TASK>
[ 1205.014081][T21939]  dump_stack_lvl+0xe8/0x150
[ 1205.014112][T21939]  should_fail_ex+0x467/0x600
[ 1205.014141][T21939]  should_failslab+0xa8/0x100
[ 1205.014161][T21939]  __kmalloc_noprof+0xfb/0x790
[ 1205.014188][T21939]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1205.014215][T21939]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1205.014248][T21939]  tomoyo_realpath_from_path+0xef/0x640
[ 1205.014283][T21939]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1205.014306][T21939]  tomoyo_path_number_perm+0x246/0x5f0
[ 1205.014331][T21939]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1205.014355][T21939]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1205.014403][T21939]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1205.014423][T21939]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1205.014455][T21939]  ? __fget_files+0x2a/0x420
[ 1205.014478][T21939]  ? __fget_files+0x3a8/0x420
[ 1205.014495][T21939]  ? __fget_files+0x2a/0x420
[ 1205.014517][T21939]  security_file_ioctl+0xb9/0x260
[ 1205.014540][T21939]  __se_sys_ioctl+0x47/0x170
[ 1205.014567][T21939]  do_syscall_64+0x17b/0x530
[ 1205.014585][T21939]  ? irqentry_exit+0x10f/0x8f0
[ 1205.014602][T21939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.014621][T21939]  ? clear_bhb_loop+0x40/0x90
[ 1205.014644][T21939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.014662][T21939] RIP: 0033:0x7f59c2eae0d9
[ 1205.014680][T21939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1205.014697][T21939] RSP: 002b:00007f59c1106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1205.014717][T21939] RAX: ffffffffffffffda RBX: 00007f59c3135fa0 RCX: 00007f59c2eae0d9
[ 1205.014731][T21939] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004
[ 1205.014742][T21939] RBP: 00007f59c1106090 R08: 0000000000000000 R09: 0000000000000000
[ 1205.014754][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1205.014764][T21939] R13: 00007f59c3136038 R14: 00007f59c3135fa0 R15: 00007ffd83a2ecf8
[ 1205.014792][T21939]  </TASK>
[ 1205.014800][T21939] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1205.461947][ T5675] usb 8-1: USB disconnect, device number 60
[ 1205.463151][T21920] bond0: (slave erspan0): Opening slave failed
[ 1205.524378][T21939] bond0: (slave erspan0): Opening slave failed
[ 1205.762396][T21948] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7)
[ 1205.762426][T21948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1205.978608][T21958] bond0: (slave erspan0): Opening slave failed
[ 1206.129728][T21947] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[ 1206.129780][T21947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1206.130174][T21947] vhci_hcd vhci_hcd.0: Device attached
[ 1206.138558][T21948] vhci_hcd vhci_hcd.0: Device attached
[ 1206.204205][T21950] vhci_hcd: connection closed
[ 1206.220832][T21949] vhci_hcd: connection closed
[ 1206.290930][T17547] vhci_hcd vhci_hcd.7: stop threads
[ 1206.295929][T17547] vhci_hcd vhci_hcd.7: release socket
[ 1206.296129][T17547] vhci_hcd vhci_hcd.7: disconnect device
[ 1206.320436][T17547] vhci_hcd vhci_hcd.7: stop threads
[ 1206.320462][T17547] vhci_hcd vhci_hcd.7: release socket
[ 1206.320506][T17547] vhci_hcd vhci_hcd.7: disconnect device
[ 1206.482679][T18877] Bluetooth: hci1: command tx timeout
[ 1206.793590][T21973] fuseblk: Bad value for 'user_id'
[ 1206.793613][T21973] fuseblk: Bad value for 'user_id'
[ 1206.880840][T21979] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1207.064646][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.519811][    T9] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1207.554670][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1207.761677][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1207.761701][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.761717][    T9] usb 8-1: Product: syz
[ 1207.761728][    T9] usb 8-1: Manufacturer: syz
[ 1207.761739][    T9] usb 8-1: SerialNumber: syz
[ 1208.249665][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1208.249732][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1208.250738][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1208.250795][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1208.317523][    T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1208.419992][    T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1208.566614][T18877] Bluetooth: hci1: command tx timeout
[ 1208.629813][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.275452][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1210.092523][ T5255] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1210.385284][T20239] usb 8-1: USB disconnect, device number 61
[ 1210.448495][T22036] fuseblk: Bad value for 'user_id'
[ 1210.448510][T22036] fuseblk: Bad value for 'user_id'
[ 1210.640702][T18877] Bluetooth: hci1: command tx timeout
[ 1211.108756][T22058] FAULT_INJECTION: forcing a failure.
[ 1211.108756][T22058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1211.108797][T22058] CPU: 0 UID: 0 PID: 22058 Comm: syz.5.4174 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1211.108829][T22058] Tainted: [L]=SOFTLOCKUP
[ 1211.108838][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1211.108853][T22058] Call Trace:
[ 1211.108862][T22058]  <TASK>
[ 1211.108873][T22058]  dump_stack_lvl+0xe8/0x150
[ 1211.108914][T22058]  should_fail_ex+0x467/0x600
[ 1211.108951][T22058]  _copy_to_user+0x31/0xb0
[ 1211.108976][T22058]  simple_read_from_buffer+0xe1/0x170
[ 1211.109007][T22058]  proc_fail_nth_read+0x1be/0x230
[ 1211.109035][T22058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1211.109063][T22058]  ? rw_verify_area+0x250/0x4d0
[ 1211.109089][T22058]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1211.109115][T22058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1211.109139][T22058]  vfs_read+0x219/0xa90
[ 1211.109174][T22058]  ? __pfx_vfs_read+0x10/0x10
[ 1211.109203][T22058]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1211.109226][T22058]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1211.109248][T22058]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1211.109271][T22058]  ? mutex_lock_nested+0x152/0x1d0
[ 1211.109331][T22058]  ? fdget_pos+0x252/0x320
[ 1211.109363][T22058]  ksys_read+0x156/0x270
[ 1211.109393][T22058]  ? __pfx_ksys_read+0x10/0x10
[ 1211.109417][T22058]  ? __pfx_ppp_ioctl+0x10/0x10
[ 1211.109462][T22058]  do_syscall_64+0x17b/0x530
[ 1211.109486][T22058]  ? irqentry_exit+0x10f/0x8f0
[ 1211.109507][T22058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.109532][T22058]  ? clear_bhb_loop+0x40/0x90
[ 1211.109561][T22058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.109584][T22058] RIP: 0033:0x7f59c2e6e90e
[ 1211.109606][T22058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1211.109627][T22058] RSP: 002b:00007f59c1105fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1211.109651][T22058] RAX: ffffffffffffffda RBX: 00007f59c11066c0 RCX: 00007f59c2e6e90e
[ 1211.109669][T22058] RDX: 000000000000000f RSI: 00007f59c11060a0 RDI: 0000000000000006
[ 1211.109684][T22058] RBP: 00007f59c1106090 R08: 0000000000000000 R09: 0000000000000000
[ 1211.109698][T22058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1211.109712][T22058] R13: 00007f59c3136038 R14: 00007f59c3135fa0 R15: 00007ffd83a2ecf8
[ 1211.109748][T22058]  </TASK>
[ 1211.492982][T22062] FAULT_INJECTION: forcing a failure.
[ 1211.492982][T22062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1211.493020][T22062] CPU: 0 UID: 0 PID: 22062 Comm: syz.5.4175 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1211.493043][T22062] Tainted: [L]=SOFTLOCKUP
[ 1211.493050][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1211.493060][T22062] Call Trace:
[ 1211.493066][T22062]  <TASK>
[ 1211.493073][T22062]  dump_stack_lvl+0xe8/0x150
[ 1211.493100][T22062]  should_fail_ex+0x467/0x600
[ 1211.493126][T22062]  _copy_from_user+0x2d/0xb0
[ 1211.493142][T22062]  memdup_user+0x5e/0xd0
[ 1211.493162][T22062]  strndup_user+0x68/0xd0
[ 1211.493185][T22062]  keyctl_keyring_search+0x13d/0x390
[ 1211.493208][T22062]  ? __pfx_keyctl_keyring_search+0x10/0x10
[ 1211.493235][T22062]  __se_sys_keyctl+0x638/0x9d0
[ 1211.493261][T22062]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1211.493280][T22062]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1211.493297][T22062]  ? rt_mutex_slowunlock+0x219/0x460
[ 1211.493319][T22062]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1211.493337][T22062]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1211.493366][T22062]  ? fput+0xa0/0xd0
[ 1211.493392][T22062]  ? ksys_write+0x248/0x270
[ 1211.493415][T22062]  ? __pfx_ksys_write+0x10/0x10
[ 1211.493438][T22062]  ? __x64_sys_keyctl+0x20/0xc0
[ 1211.493459][T22062]  do_syscall_64+0x17b/0x530
[ 1211.493476][T22062]  ? irqentry_exit+0x10f/0x8f0
[ 1211.493491][T22062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.493508][T22062]  ? clear_bhb_loop+0x40/0x90
[ 1211.493528][T22062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.493545][T22062] RIP: 0033:0x7f59c2eae0d9
[ 1211.493559][T22062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.493574][T22062] RSP: 002b:00007f59c1106028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1211.493591][T22062] RAX: ffffffffffffffda RBX: 00007f59c3135fa0 RCX: 00007f59c2eae0d9
[ 1211.493604][T22062] RDX: 0000200000000400 RSI: 000000001b82c1e0 RDI: 000000000000000a
[ 1211.493615][T22062] RBP: 00007f59c1106090 R08: ffffffffffffffff R09: 0000000000000000
[ 1211.493627][T22062] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[ 1211.493637][T22062] R13: 00007f59c3136038 R14: 00007f59c3135fa0 R15: 00007ffd83a2ecf8
[ 1211.493661][T22062]  </TASK>
[ 1211.880578][T22045] FAULT_INJECTION: forcing a failure.
[ 1211.880578][T22045] name failslab, interval 1, probability 0, space 0, times 0
[ 1211.880607][T22045] CPU: 1 UID: 0 PID: 22045 Comm: syz.7.4173 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1211.880631][T22045] Tainted: [L]=SOFTLOCKUP
[ 1211.880636][T22045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1211.880647][T22045] Call Trace:
[ 1211.880653][T22045]  <TASK>
[ 1211.880660][T22045]  dump_stack_lvl+0xe8/0x150
[ 1211.880685][T22045]  should_fail_ex+0x467/0x600
[ 1211.880709][T22045]  ? __d_alloc+0x37/0x6f0
[ 1211.880729][T22045]  should_failslab+0xa8/0x100
[ 1211.880746][T22045]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[ 1211.880770][T22045]  ? __d_lookup+0x66/0x790
[ 1211.880793][T22045]  ? __d_alloc+0x37/0x6f0
[ 1211.880816][T22045]  __d_alloc+0x37/0x6f0
[ 1211.880838][T22045]  d_alloc+0x4b/0x190
[ 1211.880855][T22045]  ? lookup_one_qstr_excl+0xc4/0x360
[ 1211.880876][T22045]  lookup_one_qstr_excl+0xd8/0x360
[ 1211.880899][T22045]  start_dirop+0x5c/0x90
[ 1211.880917][T22045]  simple_start_creating+0xcc/0x110
[ 1211.880937][T22045]  ? __pfx_simple_start_creating+0x10/0x10
[ 1211.880960][T22045]  ? mntput+0x65/0xc0
[ 1211.880986][T22045]  debugfs_start_creating+0xdb/0x1a0
[ 1211.881062][T22045]  __debugfs_create_file+0x6f/0x400
[ 1211.881087][T22045]  debugfs_create_file_full+0x3f/0x60
[ 1211.881113][T22045]  ref_tracker_dir_debugfs+0x19d/0x370
[ 1211.881137][T22045]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1211.881178][T22045]  ? __kvmalloc_node_noprof+0x5cc/0x880
[ 1211.881214][T22045]  alloc_netdev_mqs+0x2bf/0x1300
[ 1211.881231][T22045]  ? __pfx_reg_vif_setup+0x10/0x10
[ 1211.881253][T22045]  vif_add+0x5b7/0x16c0
[ 1211.881280][T22045]  ? rt_mutex_slowlock+0x1f2/0x780
[ 1211.881304][T22045]  ? __pfx_vif_add+0x10/0x10
[ 1211.881322][T22045]  ? lock_acquire+0x115/0x350
[ 1211.881370][T22045]  ip_mroute_setsockopt+0xf8a/0x10d0
[ 1211.881393][T22045]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[ 1211.881412][T22045]  ? trace_irq_disable+0x3b/0x140
[ 1211.881439][T22045]  ? do_ip_setsockopt+0x10d/0x2e30
[ 1211.881468][T22045]  do_ip_setsockopt+0xeba/0x2e30
[ 1211.881497][T22045]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1211.881521][T22045]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1211.881542][T22045]  ? lock_acquire+0x115/0x350
[ 1211.881575][T22045]  ? __fget_files+0x2a/0x420
[ 1211.881594][T22045]  ip_setsockopt+0x66/0x110
[ 1211.881624][T22045]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1211.881650][T22045]  do_sock_setsockopt+0x17c/0x1b0
[ 1211.881678][T22045]  __x64_sys_setsockopt+0x143/0x1b0
[ 1211.881706][T22045]  do_syscall_64+0x17b/0x530
[ 1211.881723][T22045]  ? irqentry_exit+0x10f/0x8f0
[ 1211.881738][T22045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.881755][T22045]  ? clear_bhb_loop+0x40/0x90
[ 1211.881777][T22045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.881795][T22045] RIP: 0033:0x7fd75ddae0d9
[ 1211.881811][T22045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.881824][T22045] RSP: 002b:00007fd75bfe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1211.881842][T22045] RAX: ffffffffffffffda RBX: 00007fd75e036090 RCX: 00007fd75ddae0d9
[ 1211.881855][T22045] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003
[ 1211.881866][T22045] RBP: 00007fd75bfe5090 R08: 0000000000000010 R09: 0000000000000000
[ 1211.881877][T22045] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1211.881888][T22045] R13: 00007fd75e036128 R14: 00007fd75e036090 R15: 00007ffc0fb425f8
[ 1211.881913][T22045]  </TASK>
[ 1212.077758][ T5779] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1212.366973][ T5779] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1212.384889][ T5779] usb 6-1: config index 0 descriptor too short (expected 44184, got 147)
[ 1212.384924][ T5779] usb 6-1: config 64 has too many interfaces: 42, using maximum allowed: 32
[ 1212.384948][ T5779] usb 6-1: config 64 has an invalid descriptor of length 149, skipping remainder of the config
[ 1212.384971][ T5779] usb 6-1: config 64 has 0 interfaces, different from the descriptor's value: 42
[ 1212.392456][ T5779] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1212.392565][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.392603][ T5779] usb 6-1: Product: syz
[ 1212.392645][ T5779] usb 6-1: Manufacturer: syz
[ 1212.392689][ T5779] usb 6-1: SerialNumber: syz
[ 1212.626486][ T5255] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1212.699597][ T5779] usb 6-1: USB disconnect, device number 65
[ 1212.719574][T18877] Bluetooth: hci1: command tx timeout
[ 1212.918760][T22079] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1213.534405][ T5675] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1213.698509][ T5675] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1213.698541][ T5675] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.698562][ T5675] usb 8-1: Product: syz
[ 1213.698577][ T5675] usb 8-1: Manufacturer: syz
[ 1213.698592][ T5675] usb 8-1: SerialNumber: syz
[ 1213.776170][T22098] fuseblk: Bad value for 'user_id'
[ 1213.776192][T22098] fuseblk: Bad value for 'user_id'
[ 1214.187172][ T5675] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1214.187237][ T5675] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1214.187916][ T5675] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1214.187955][ T5675] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1214.188716][ T5675] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1214.244764][ T5675] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1214.643514][   T12] bridge_slave_1: left allmulticast mode
[ 1214.643553][   T12] bridge_slave_1: left promiscuous mode
[ 1214.643861][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.803384][   T12] bridge_slave_0: left allmulticast mode
[ 1214.803421][   T12] bridge_slave_0: left promiscuous mode
[ 1214.803687][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.980243][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.061945][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.085172][   T12] bond0 (unregistering): Released all slaves
[ 1216.240477][T22121] pimreg: entered allmulticast mode
[ 1216.247016][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1216.283776][T21921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1216.284253][T21921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.284566][T21921] bridge_slave_0: entered allmulticast mode
[ 1216.288423][T21921] bridge_slave_0: entered promiscuous mode
[ 1216.440451][ T5689] usb 8-1: USB disconnect, device number 62
[ 1216.653591][T22138] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1216.894235][T21921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.894627][T21921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.894964][T21921] bridge_slave_1: entered allmulticast mode
[ 1216.923122][T21921] bridge_slave_1: entered promiscuous mode
[ 1216.977652][T22142] FAULT_INJECTION: forcing a failure.
[ 1216.977652][T22142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1216.977692][T22142] CPU: 1 UID: 0 PID: 22142 Comm: syz.7.4188 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1216.977724][T22142] Tainted: [L]=SOFTLOCKUP
[ 1216.977733][T22142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1216.977755][T22142] Call Trace:
[ 1216.977765][T22142]  <TASK>
[ 1216.977775][T22142]  dump_stack_lvl+0xe8/0x150
[ 1216.977811][T22142]  should_fail_ex+0x467/0x600
[ 1216.977848][T22142]  _copy_from_user+0x2d/0xb0
[ 1216.977871][T22142]  media_device_ioctl+0x208/0x4a0
[ 1216.978008][T22142]  ? __pfx_media_device_ioctl+0x10/0x10
[ 1216.978060][T22142]  ? __fget_files+0x3a8/0x420
[ 1216.978083][T22142]  ? __fget_files+0x2a/0x420
[ 1216.978108][T22142]  ? media_ioctl+0x101/0x120
[ 1216.978134][T22142]  ? __pfx_media_ioctl+0x10/0x10
[ 1216.978160][T22142]  __se_sys_ioctl+0xff/0x170
[ 1216.978192][T22142]  do_syscall_64+0x17b/0x530
[ 1216.978218][T22142]  ? irqentry_exit+0x10f/0x8f0
[ 1216.978239][T22142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1216.978262][T22142]  ? clear_bhb_loop+0x40/0x90
[ 1216.978291][T22142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1216.978314][T22142] RIP: 0033:0x7fd75ddae0d9
[ 1216.978336][T22142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1216.978357][T22142] RSP: 002b:00007fd75c006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1216.978381][T22142] RAX: ffffffffffffffda RBX: 00007fd75e035fa0 RCX: 00007fd75ddae0d9
[ 1216.978399][T22142] RDX: 0000200000000940 RSI: 00000000c0347c03 RDI: 0000000000000003
[ 1216.978415][T22142] RBP: 00007fd75c006090 R08: 0000000000000000 R09: 0000000000000000
[ 1216.978430][T22142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1216.978444][T22142] R13: 00007fd75e036038 R14: 00007fd75e035fa0 R15: 00007ffc0fb425f8
[ 1216.978480][T22142]  </TASK>
[ 1217.254078][T22146] FAULT_INJECTION: forcing a failure.
[ 1217.254078][T22146] name failslab, interval 1, probability 0, space 0, times 0
[ 1217.254118][T22146] CPU: 1 UID: 0 PID: 22146 Comm: syz.5.4190 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1217.254148][T22146] Tainted: [L]=SOFTLOCKUP
[ 1217.254157][T22146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1217.254171][T22146] Call Trace:
[ 1217.254180][T22146]  <TASK>
[ 1217.254191][T22146]  dump_stack_lvl+0xe8/0x150
[ 1217.254225][T22146]  should_fail_ex+0x467/0x600
[ 1217.254260][T22146]  should_failslab+0xa8/0x100
[ 1217.254285][T22146]  __kmalloc_cache_noprof+0xa1/0x670
[ 1217.254329][T22146]  ? io_ring_ctx_alloc+0x54/0xba0
[ 1217.254353][T22146]  ? io_ring_ctx_alloc+0x54/0xba0
[ 1217.254384][T22146]  io_ring_ctx_alloc+0x54/0xba0
[ 1217.254410][T22146]  ? io_prepare_config+0x8c8/0xc70
[ 1217.254451][T22146]  io_uring_create+0x50/0x990
[ 1217.254480][T22146]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1217.254517][T22146]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1217.254550][T22146]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1217.254601][T22146]  ? __pfx_ksys_write+0x10/0x10
[ 1217.254639][T22146]  do_syscall_64+0x17b/0x530
[ 1217.254663][T22146]  ? irqentry_exit+0x10f/0x8f0
[ 1217.254685][T22146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1217.254710][T22146]  ? clear_bhb_loop+0x40/0x90
[ 1217.254738][T22146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1217.254762][T22146] RIP: 0033:0x7f59c2eae0d9
[ 1217.254783][T22146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1217.254803][T22146] RSP: 002b:00007f59c1105ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1217.254831][T22146] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f59c2eae0d9
[ 1217.254848][T22146] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[ 1217.254864][T22146] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[ 1217.254879][T22146] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[ 1217.254895][T22146] R13: 0000200000000b10 R14: 00007f59c1105fd8 R15: 0000000000000000
[ 1217.254930][T22146]  </TASK>
[ 1217.683315][T22153] fuseblk: Bad value for 'user_id'
[ 1217.683330][T22153] fuseblk: Bad value for 'user_id'
[ 1217.847680][T22160] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1217.849904][ T5689] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1217.982374][ T5689] usb 6-1: device descriptor read/64, error -71
[ 1218.131577][T21921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1218.152822][T21921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1218.221614][T21921] team0: Port device team_slave_0 added
[ 1218.235930][ T5689] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1218.251850][T21921] team0: Port device team_slave_1 added
[ 1218.379652][ T5689] usb 6-1: device descriptor read/64, error -71
[ 1218.490083][ T5689] usb usb6-port1: attempt power cycle
[ 1218.839603][ T5689] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1218.860565][ T5689] usb 6-1: device descriptor read/8, error -71
[ 1218.876015][T21921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1218.876035][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1218.876067][T21921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1219.009039][T21921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1219.009062][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1219.009095][T21921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1219.105808][ T5689] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1219.203441][ T5689] usb 6-1: device descriptor read/8, error -71
[ 1219.312107][ T5689] usb usb6-port1: unable to enumerate USB device
[ 1219.606492][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1219.789689][   T12] hsr_slave_0: left promiscuous mode
[ 1219.829516][   T12] hsr_slave_1: left promiscuous mode
[ 1219.831183][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.831212][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.870984][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.871010][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.899645][ T5689] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[ 1219.961232][   T12] veth1_macvtap: left promiscuous mode
[ 1219.961353][   T12] veth0_macvtap: left promiscuous mode
[ 1219.967428][   T12] veth1_vlan: left promiscuous mode
[ 1219.967586][   T12] veth0_vlan: left promiscuous mode
[ 1220.099583][ T5689] usb 8-1: Using ep0 maxpacket: 8
[ 1220.102125][ T5689] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1220.102177][ T5689] usb 8-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 1220.102195][ T5689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.107525][ T5689] usb 8-1: config 0 descriptor??
[ 1220.280446][T22196] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1220.574953][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.574984][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.575003][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.575023][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.575043][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.575062][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.575081][ T5689] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0
[ 1220.799711][ T4908] Bluetooth: hci0: command 0x0406 tx timeout
[ 1220.862913][T22203] fuseblk: Bad value for 'user_id'
[ 1220.862937][T22203] fuseblk: Bad value for 'user_id'
[ 1221.016204][ T5689] playstation 0003:054C:0BA0.001D: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.7-1/input0
[ 1221.232142][ T5689] playstation 0003:054C:0BA0.001D: Invalid reportID received, expected 18 got 175
[ 1221.232174][ T5689] playstation 0003:054C:0BA0.001D: Failed to retrieve DualShock4 pairing info: -22
[ 1221.232309][ T5689] playstation 0003:054C:0BA0.001D: Failed to get MAC address from DualShock4
[ 1221.232328][ T5689] playstation 0003:054C:0BA0.001D: Failed to create dualshock4.
[ 1221.410172][ T5689] playstation 0003:054C:0BA0.001D: probe with driver playstation failed with error -22
[ 1221.489249][ T5689] usb 8-1: USB disconnect, device number 63
[ 1222.314401][T22228] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1222.589234][T18877] Bluetooth: hci0: unexpected event for opcode 0x080d
[ 1222.780170][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1222.872303][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1222.951802][T22242] FAULT_INJECTION: forcing a failure.
[ 1222.951802][T22242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1222.951831][T22242] CPU: 0 UID: 0 PID: 22242 Comm: syz.7.4213 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1222.951854][T22242] Tainted: [L]=SOFTLOCKUP
[ 1222.951860][T22242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1222.951871][T22242] Call Trace:
[ 1222.951877][T22242]  <TASK>
[ 1222.951884][T22242]  dump_stack_lvl+0xe8/0x150
[ 1222.951911][T22242]  should_fail_ex+0x467/0x600
[ 1222.951939][T22242]  _copy_from_user+0x2d/0xb0
[ 1222.951996][T22242]  sync_file_ioctl+0x24a/0x1170
[ 1222.952160][T22242]  ? __pfx_sync_file_ioctl+0x10/0x10
[ 1222.952181][T22242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1222.952198][T22242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1222.952226][T22242]  ? __fget_files+0x2a/0x420
[ 1222.952247][T22242]  ? __fget_files+0x2a/0x420
[ 1222.952266][T22242]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1222.952293][T22242]  ? __pfx_sync_file_ioctl+0x10/0x10
[ 1222.952312][T22242]  __se_sys_ioctl+0xff/0x170
[ 1222.952335][T22242]  do_syscall_64+0x17b/0x530
[ 1222.952351][T22242]  ? irqentry_exit+0x10f/0x8f0
[ 1222.952366][T22242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1222.952383][T22242]  ? clear_bhb_loop+0x40/0x90
[ 1222.952403][T22242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1222.952420][T22242] RIP: 0033:0x7fd75ddae0d9
[ 1222.952435][T22242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1222.952449][T22242] RSP: 002b:00007fd75c006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1222.952467][T22242] RAX: ffffffffffffffda RBX: 00007fd75e035fa0 RCX: 00007fd75ddae0d9
[ 1222.952479][T22242] RDX: 00002000000001c0 RSI: 00000000c0303e03 RDI: 0000000000000007
[ 1222.952490][T22242] RBP: 00007fd75c006090 R08: 0000000000000000 R09: 0000000000000000
[ 1222.952501][T22242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1222.952511][T22242] R13: 00007fd75e036038 R14: 00007fd75e035fa0 R15: 00007ffc0fb425f8
[ 1222.952535][T22242]  </TASK>
[ 1223.478397][T22245] fuseblk: Bad value for 'user_id'
[ 1223.478420][T22245] fuseblk: Bad value for 'user_id'
[ 1224.775845][T21921] hsr_slave_0: entered promiscuous mode
[ 1224.825224][T21921] hsr_slave_1: entered promiscuous mode
[ 1224.828839][T22259] FAULT_INJECTION: forcing a failure.
[ 1224.828839][T22259] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.828876][T22259] CPU: 0 UID: 0 PID: 22259 Comm: syz.3.4217 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1224.828915][T22259] Tainted: [L]=SOFTLOCKUP
[ 1224.828924][T22259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1224.828936][T22259] Call Trace:
[ 1224.828943][T22259]  <TASK>
[ 1224.828951][T22259]  dump_stack_lvl+0xe8/0x150
[ 1224.828980][T22259]  should_fail_ex+0x467/0x600
[ 1224.829012][T22259]  should_failslab+0xa8/0x100
[ 1224.829032][T22259]  __kvmalloc_node_noprof+0x176/0x880
[ 1224.829062][T22259]  ? __kmalloc_cache_noprof+0x3cd/0x670
[ 1224.829089][T22259]  ? io_ring_ctx_alloc+0x1bd/0xba0
[ 1224.829111][T22259]  ? io_ring_ctx_alloc+0x1bd/0xba0
[ 1224.829134][T22259]  io_ring_ctx_alloc+0x1bd/0xba0
[ 1224.829153][T22259]  ? io_prepare_config+0x8c8/0xc70
[ 1224.829186][T22259]  io_uring_create+0x50/0x990
[ 1224.829208][T22259]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1224.829236][T22259]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1224.829262][T22259]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1224.829303][T22259]  ? __pfx_ksys_write+0x10/0x10
[ 1224.829333][T22259]  do_syscall_64+0x17b/0x530
[ 1224.829351][T22259]  ? irqentry_exit+0x10f/0x8f0
[ 1224.829368][T22259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.829387][T22259]  ? clear_bhb_loop+0x40/0x90
[ 1224.829409][T22259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.829427][T22259] RIP: 0033:0x7f7e5f05e0d9
[ 1224.829445][T22259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1224.829462][T22259] RSP: 002b:00007f7e5d2b5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1224.829482][T22259] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f7e5f05e0d9
[ 1224.829496][T22259] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[ 1224.829508][T22259] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[ 1224.829519][T22259] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[ 1224.829531][T22259] R13: 0000200000000b10 R14: 00007f7e5d2b5fd8 R15: 0000000000000000
[ 1224.829557][T22259]  </TASK>
[ 1225.645147][ T5800] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1225.843618][ T5800] usb 6-1: Using ep0 maxpacket: 16
[ 1225.869196][ T5800] usb 6-1: config 255 has too many interfaces: 241, using maximum allowed: 32
[ 1225.869231][ T5800] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 241
[ 1225.869272][ T5800] usb 6-1: too many endpoints for config 255 interface 0 altsetting 16: 250, using maximum allowed: 30
[ 1225.880901][ T5800] usb 6-1: config 255 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250
[ 1225.880940][ T5800] usb 6-1: config 255 interface 0 has no altsetting 0
[ 1225.880995][ T5800] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1225.881022][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.160157][T18877] Bluetooth: hci7: command 0x0406 tx timeout
[ 1226.161576][ T4908] Bluetooth: hci3: command 0x0406 tx timeout
[ 1226.644792][T18877] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1226.670553][T18877] Bluetooth: hci0: Injecting HCI hardware error event
[ 1226.677147][T18877] Bluetooth: hci0: hardware error 0x00
[ 1227.232792][ T5800] usbhid 6-1:255.0: can't add hid device: -71
[ 1227.232976][ T5800] usbhid 6-1:255.0: probe with driver usbhid failed with error -71
[ 1227.321724][ T5800] usb 6-1: USB disconnect, device number 70
[ 1227.592508][T22293] fuseblk: Bad value for 'user_id'
[ 1227.592531][T22293] fuseblk: Bad value for 'user_id'
[ 1227.688892][   T12] IPVS: stop unused estimator thread 0...
[ 1227.971496][ T5255] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1228.064815][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4226'.
[ 1228.231118][T20239] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1228.379878][T20239] usb 8-1: Using ep0 maxpacket: 16
[ 1228.412423][T20239] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1228.412457][T20239] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1228.443406][T20239] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1228.443441][T20239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1228.443464][T20239] usb 8-1: SerialNumber: syz
[ 1228.541477][T20239] usb 8-1: 0:2 : does not exist
[ 1228.819826][ T5689] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[ 1228.989564][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1228.990753][ T5689] usb 4-1: not running at top speed; connect to a high speed hub
[ 1228.994527][ T5689] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4
[ 1229.025926][ T5689] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[ 1229.026023][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.026048][ T5689] usb 4-1: Product: syz
[ 1229.026065][ T5689] usb 4-1: Manufacturer: syz
[ 1229.026091][ T5689] usb 4-1: SerialNumber: syz
[ 1229.603280][T18877] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1230.947853][T22345] fuseblk: Bad value for 'user_id'
[ 1230.947873][T22345] fuseblk: Bad value for 'user_id'
[ 1231.293603][ T5255] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1231.492008][T20239] usb 8-1: 5:0: failed to get current value for ch 1 (-22)
[ 1231.644391][T20239] usb 8-1: 5:0: failed to get current value for ch 2 (-22)
[ 1231.671277][T20239] usb 8-1: 5:0: failed to get current value for ch 3 (-22)
[ 1231.698708][T20239] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1231.714376][T20239] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1231.836029][T22355] FAULT_INJECTION: forcing a failure.
[ 1231.836029][T22355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1231.836089][T22355] CPU: 1 UID: 0 PID: 22355 Comm: syz.3.4235 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1231.836121][T22355] Tainted: [L]=SOFTLOCKUP
[ 1231.836130][T22355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1231.836145][T22355] Call Trace:
[ 1231.836154][T22355]  <TASK>
[ 1231.836164][T22355]  dump_stack_lvl+0xe8/0x150
[ 1231.836199][T22355]  should_fail_ex+0x467/0x600
[ 1231.836234][T22355]  _copy_from_user+0x2d/0xb0
[ 1231.836256][T22355]  sock_do_ioctl+0x195/0x320
[ 1231.836289][T22355]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1231.836318][T22355]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1231.836361][T22355]  sock_ioctl+0x57d/0x7f0
[ 1231.836388][T22355]  ? __pfx_sock_ioctl+0x10/0x10
[ 1231.836416][T22355]  ? __fget_files+0x3a8/0x420
[ 1231.836438][T22355]  ? __fget_files+0x2a/0x420
[ 1231.836466][T22355]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1231.836501][T22355]  ? __pfx_sock_ioctl+0x10/0x10
[ 1231.836525][T22355]  __se_sys_ioctl+0xff/0x170
[ 1231.836559][T22355]  do_syscall_64+0x17b/0x530
[ 1231.836582][T22355]  ? irqentry_exit+0x10f/0x8f0
[ 1231.836604][T22355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.836628][T22355]  ? clear_bhb_loop+0x40/0x90
[ 1231.836656][T22355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.836678][T22355] RIP: 0033:0x7f7e5f05e0d9
[ 1231.836700][T22355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1231.836720][T22355] RSP: 002b:00007f7e5d295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1231.836743][T22355] RAX: ffffffffffffffda RBX: 00007f7e5f2e6090 RCX: 00007f7e5f05e0d9
[ 1231.836761][T22355] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003
[ 1231.836777][T22355] RBP: 00007f7e5d295090 R08: 0000000000000000 R09: 0000000000000000
[ 1231.836792][T22355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1231.836805][T22355] R13: 00007f7e5f2e6128 R14: 00007f7e5f2e6090 R15: 00007ffd32197ed8
[ 1231.836840][T22355]  </TASK>
[ 1232.176887][T20239] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1232.219992][T19178] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1232.274822][ T5689] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1232.275212][ T5689] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1232.277383][ T5689] usb 4-1: unable to issue vendor read request (ret = -71)
[ 1232.277953][ T5689] usb 4-1: unable to issue vendor read request (ret = -71)
[ 1232.278430][T20239] usb 8-1: USB disconnect, device number 64
[ 1232.278641][ T5689] usb 4-1: unable to issue vendor read request (ret = -71)
[ 1232.279189][ T5689] usb 4-1: unable to issue vendor read request (ret = -71)
[ 1232.420442][T19178] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1232.420483][T19178] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1232.420520][T19178] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[ 1232.420546][T19178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.428509][T19178] usb 6-1: config 0 descriptor??
[ 1232.447847][T22356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1232.615189][ T5689] usb 4-1: USB disconnect, device number 59
[ 1232.984617][T19178] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.001E/input/input37
[ 1233.590011][T19178] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.001E/input/input38
[ 1233.870350][ T5800] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1233.984448][T19178] kye 0003:0458:500F.001E: input,hiddev0,hidraw0: USB HID v80.00 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0
[ 1234.031791][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.035708][ T5800] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 1234.035744][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.035767][ T5800] usb 4-1: Product: syz
[ 1234.035783][ T5800] usb 4-1: Manufacturer: syz
[ 1234.035799][ T5800] usb 4-1: SerialNumber: syz
[ 1234.093242][ T5800] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 1234.176054][T19178] usb 6-1: USB disconnect, device number 71
[ 1234.528583][T22359] netlink: 'syz.3.4237': attribute type 83 has an invalid length.
[ 1234.531177][ T5800] gspca_mr97310a: reg write [19] error -71
[ 1234.531276][ T5800] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71
[ 1234.600239][ T5800] usb 4-1: USB disconnect, device number 60
[ 1235.338770][T22375] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1235.338793][T22375] use the actual size instead.
[ 1235.609515][T19178] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[ 1235.642125][T22378] fuseblk: Bad value for 'user_id'
[ 1235.642148][T22378] fuseblk: Bad value for 'user_id'
[ 1235.729083][T22382] could not open pipe file descriptor
[ 1235.770184][T19178] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1235.770222][T19178] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1235.772888][T19178] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1235.772922][T19178] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1235.772947][T19178] usb 6-1: Product: syz
[ 1235.772963][T19178] usb 6-1: Manufacturer: syz
[ 1235.844840][T19178] hub 6-1:4.0: USB hub found
[ 1236.086101][T19178] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1236.359168][T19178] usb 6-1: USB disconnect, device number 72
[ 1237.141928][T22413] FAULT_INJECTION: forcing a failure.
[ 1237.141928][T22413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1237.141970][T22413] CPU: 1 UID: 0 PID: 22413 Comm: syz.3.4249 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1237.142001][T22413] Tainted: [L]=SOFTLOCKUP
[ 1237.142010][T22413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1237.142023][T22413] Call Trace:
[ 1237.142033][T22413]  <TASK>
[ 1237.142043][T22413]  dump_stack_lvl+0xe8/0x150
[ 1237.142079][T22413]  should_fail_ex+0x467/0x600
[ 1237.142114][T22413]  _copy_from_iter+0x1d3/0x1660
[ 1237.142154][T22413]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1237.142190][T22413]  ? __pfx__copy_from_iter+0x10/0x10
[ 1237.142222][T22413]  ? __alloc_skb+0x276/0x7a0
[ 1237.142252][T22413]  ? __alloc_skb+0x276/0x7a0
[ 1237.142286][T22413]  ? netlink_sendmsg+0x650/0xb40
[ 1237.142332][T22413]  ? skb_put+0x112/0x210
[ 1237.142366][T22413]  netlink_sendmsg+0x6c0/0xb40
[ 1237.142412][T22413]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.142450][T22413]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1237.142490][T22413]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1237.142525][T22413]  ? arch_stack_walk+0xfb/0x150
[ 1237.142562][T22413]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1237.142596][T22413]  sock_sendmsg_nosec+0x13a/0x180
[ 1237.142624][T22413]  ____sys_sendmsg+0x565/0x870
[ 1237.142672][T22413]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1237.142715][T22413]  ? import_iovec+0x73/0xa0
[ 1237.142753][T22413]  ___sys_sendmsg+0x2a5/0x360
[ 1237.142786][T22413]  ? __lock_acquire+0x6df/0x2e40
[ 1237.142812][T22413]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1237.142884][T22413]  ? __fget_files+0x2a/0x420
[ 1237.142907][T22413]  ? __fget_files+0x3a8/0x420
[ 1237.142940][T22413]  __x64_sys_sendmsg+0x1b7/0x290
[ 1237.142977][T22413]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1237.143032][T22413]  do_syscall_64+0x17b/0x530
[ 1237.143057][T22413]  ? irqentry_exit+0x10f/0x8f0
[ 1237.143079][T22413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.143103][T22413]  ? clear_bhb_loop+0x40/0x90
[ 1237.143131][T22413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.143153][T22413] RIP: 0033:0x7f7e5f05e0d9
[ 1237.143175][T22413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1237.143195][T22413] RSP: 002b:00007f7e5d2b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1237.143219][T22413] RAX: ffffffffffffffda RBX: 00007f7e5f2e5fa0 RCX: 00007f7e5f05e0d9
[ 1237.143236][T22413] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1237.143251][T22413] RBP: 00007f7e5d2b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1237.143265][T22413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1237.143279][T22413] R13: 00007f7e5f2e6038 R14: 00007f7e5f2e5fa0 R15: 00007ffd32197ed8
[ 1237.143320][T22413]  </TASK>
[ 1238.290431][T22440] FAULT_INJECTION: forcing a failure.
[ 1238.290431][T22440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1238.290468][T22440] CPU: 0 UID: 0 PID: 22440 Comm: syz.5.4252 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1238.290496][T22440] Tainted: [L]=SOFTLOCKUP
[ 1238.290504][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1238.290516][T22440] Call Trace:
[ 1238.290524][T22440]  <TASK>
[ 1238.290532][T22440]  dump_stack_lvl+0xe8/0x150
[ 1238.290565][T22440]  should_fail_ex+0x467/0x600
[ 1238.290595][T22440]  _copy_from_user+0x2d/0xb0
[ 1238.290615][T22440]  drm_ioctl+0x61c/0xba0
[ 1238.290779][T22440]  ? __pfx_drm_gem_open_ioctl+0x10/0x10
[ 1238.290800][T22440]  ? __pfx_drm_ioctl+0x10/0x10
[ 1238.290843][T22440]  ? __fget_files+0x3a8/0x420
[ 1238.290864][T22440]  ? __fget_files+0x2a/0x420
[ 1238.290887][T22440]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1238.290919][T22440]  ? __pfx_drm_ioctl+0x10/0x10
[ 1238.290941][T22440]  __se_sys_ioctl+0xff/0x170
[ 1238.290970][T22440]  do_syscall_64+0x17b/0x530
[ 1238.290991][T22440]  ? irqentry_exit+0x10f/0x8f0
[ 1238.291010][T22440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.291030][T22440]  ? clear_bhb_loop+0x40/0x90
[ 1238.291055][T22440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.291074][T22440] RIP: 0033:0x7f59c2eae0d9
[ 1238.291093][T22440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1238.291111][T22440] RSP: 002b:00007f59c10e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1238.291131][T22440] RAX: ffffffffffffffda RBX: 00007f59c3136090 RCX: 00007f59c2eae0d9
[ 1238.291146][T22440] RDX: 0000200000000140 RSI: 00000000c010640b RDI: 0000000000000005
[ 1238.291159][T22440] RBP: 00007f59c10e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1238.291172][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1238.291184][T22440] R13: 00007f59c3136128 R14: 00007f59c3136090 R15: 00007ffd83a2ecf8
[ 1238.291214][T22440]  </TASK>
[ 1239.208300][T22450] fuseblk: Bad value for 'user_id'
[ 1239.208323][T22450] fuseblk: Bad value for 'user_id'
[ 1239.548988][T21921] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1239.593199][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1240.088007][T21921] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1240.255833][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1240.305731][T21921] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1240.358389][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1240.367843][T21921] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1240.422382][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1240.552381][T22492] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4262'.
[ 1240.792943][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4263'.
[ 1241.121598][T22500] sg_write: data in/out 92379488/136 bytes for SCSI command 0x0-- guessing data in;
[ 1241.121598][T22500]    program syz.5.4264 not setting count and/or reply_len properly
[ 1241.200490][T22503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4264'.
[ 1241.479049][T21921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1241.648930][T21921] 8021q: adding VLAN 0 to HW filter on device team0
[ 1241.809921][T17521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.810633][T17521] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1241.909719][T13338] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.909905][T13338] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1242.055742][T22525] FAULT_INJECTION: forcing a failure.
[ 1242.055742][T22525] name failslab, interval 1, probability 0, space 0, times 0
[ 1242.055784][T22525] CPU: 1 UID: 0 PID: 22525 Comm: syz.3.4268 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1242.055814][T22525] Tainted: [L]=SOFTLOCKUP
[ 1242.055822][T22525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1242.055836][T22525] Call Trace:
[ 1242.055845][T22525]  <TASK>
[ 1242.055855][T22525]  dump_stack_lvl+0xe8/0x150
[ 1242.055892][T22525]  should_fail_ex+0x467/0x600
[ 1242.055926][T22525]  ? __d_alloc+0x37/0x6f0
[ 1242.055953][T22525]  should_failslab+0xa8/0x100
[ 1242.055978][T22525]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[ 1242.056012][T22525]  ? __d_lookup+0x66/0x790
[ 1242.056039][T22525]  ? __d_alloc+0x37/0x6f0
[ 1242.056071][T22525]  __d_alloc+0x37/0x6f0
[ 1242.056104][T22525]  d_alloc+0x4b/0x190
[ 1242.056127][T22525]  ? lookup_one_qstr_excl+0xc4/0x360
[ 1242.056157][T22525]  lookup_one_qstr_excl+0xd8/0x360
[ 1242.056189][T22525]  filename_create+0x20e/0x370
[ 1242.056226][T22525]  ? __pfx_filename_create+0x10/0x10
[ 1242.056266][T22525]  filename_mkdirat+0xd2/0x520
[ 1242.056303][T22525]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1242.056336][T22525]  ? strncpy_from_user+0x150/0x2c0
[ 1242.056368][T22525]  ? do_getname+0x151/0x250
[ 1242.056414][T22525]  __se_sys_mkdirat+0x35/0x150
[ 1242.056449][T22525]  do_syscall_64+0x17b/0x530
[ 1242.056474][T22525]  ? irqentry_exit+0x10f/0x8f0
[ 1242.056495][T22525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.056520][T22525]  ? clear_bhb_loop+0x40/0x90
[ 1242.056550][T22525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.056574][T22525] RIP: 0033:0x7f7e5f05e0d9
[ 1242.056595][T22525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1242.056615][T22525] RSP: 002b:00007f7e5d295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1242.056640][T22525] RAX: ffffffffffffffda RBX: 00007f7e5f2e6090 RCX: 00007f7e5f05e0d9
[ 1242.056656][T22525] RDX: 00000000000001ff RSI: 0000200000000380 RDI: 0000000000000003
[ 1242.056671][T22525] RBP: 00007f7e5d295090 R08: 0000000000000000 R09: 0000000000000000
[ 1242.056685][T22525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1242.056699][T22525] R13: 00007f7e5f2e6128 R14: 00007f7e5f2e6090 R15: 00007ffd32197ed8
[ 1242.056735][T22525]  </TASK>
[ 1242.390682][T22524] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1242.741902][T22531] FAULT_INJECTION: forcing a failure.
[ 1242.741902][T22531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1242.741943][T22531] CPU: 0 UID: 0 PID: 22531 Comm: syz.3.4269 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1242.741975][T22531] Tainted: [L]=SOFTLOCKUP
[ 1242.741984][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1242.741999][T22531] Call Trace:
[ 1242.742008][T22531]  <TASK>
[ 1242.742018][T22531]  dump_stack_lvl+0xe8/0x150
[ 1242.742054][T22531]  should_fail_ex+0x467/0x600
[ 1242.742091][T22531]  _copy_from_user+0x2d/0xb0
[ 1242.742114][T22531]  drm_ioctl+0x61c/0xba0
[ 1242.742149][T22531]  ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10
[ 1242.742272][T22531]  ? __pfx_drm_ioctl+0x10/0x10
[ 1242.742311][T22531]  ? __fget_files+0x3a8/0x420
[ 1242.742335][T22531]  ? __fget_files+0x2a/0x420
[ 1242.742362][T22531]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1242.742398][T22531]  ? __pfx_drm_ioctl+0x10/0x10
[ 1242.742424][T22531]  __se_sys_ioctl+0xff/0x170
[ 1242.742457][T22531]  do_syscall_64+0x17b/0x530
[ 1242.742481][T22531]  ? irqentry_exit+0x10f/0x8f0
[ 1242.742503][T22531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.742527][T22531]  ? clear_bhb_loop+0x40/0x90
[ 1242.742555][T22531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.742577][T22531] RIP: 0033:0x7f7e5f05e0d9
[ 1242.742598][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1242.742622][T22531] RSP: 002b:00007f7e5d2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1242.742646][T22531] RAX: ffffffffffffffda RBX: 00007f7e5f2e5fa0 RCX: 00007f7e5f05e0d9
[ 1242.742663][T22531] RDX: 00002000000001c0 RSI: 00000000c00c642d RDI: 0000000000000005
[ 1242.742679][T22531] RBP: 00007f7e5d2b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1242.742693][T22531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1242.742708][T22531] R13: 00007f7e5f2e6038 R14: 00007f7e5f2e5fa0 R15: 00007ffd32197ed8
[ 1242.742742][T22531]  </TASK>
[ 1243.148902][T22536] FAULT_INJECTION: forcing a failure.
[ 1243.148902][T22536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1243.148944][T22536] CPU: 1 UID: 0 PID: 22536 Comm: syz.7.4271 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1243.148976][T22536] Tainted: [L]=SOFTLOCKUP
[ 1243.148986][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1243.149000][T22536] Call Trace:
[ 1243.149009][T22536]  <TASK>
[ 1243.149020][T22536]  dump_stack_lvl+0xe8/0x150
[ 1243.149054][T22536]  should_fail_ex+0x467/0x600
[ 1243.149087][T22536]  _copy_from_user+0x2d/0xb0
[ 1243.149108][T22536]  drm_ioctl+0x61c/0xba0
[ 1243.149143][T22536]  ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10
[ 1243.149175][T22536]  ? __pfx_drm_ioctl+0x10/0x10
[ 1243.149215][T22536]  ? __fget_files+0x3a8/0x420
[ 1243.149239][T22536]  ? __fget_files+0x2a/0x420
[ 1243.149263][T22536]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1243.149297][T22536]  ? __pfx_drm_ioctl+0x10/0x10
[ 1243.149325][T22536]  __se_sys_ioctl+0xff/0x170
[ 1243.149357][T22536]  do_syscall_64+0x17b/0x530
[ 1243.149381][T22536]  ? irqentry_exit+0x10f/0x8f0
[ 1243.149401][T22536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.149424][T22536]  ? clear_bhb_loop+0x40/0x90
[ 1243.149450][T22536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.149473][T22536] RIP: 0033:0x7fd75ddae0d9
[ 1243.149493][T22536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1243.149511][T22536] RSP: 002b:00007fd75c006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1243.149535][T22536] RAX: ffffffffffffffda RBX: 00007fd75e035fa0 RCX: 00007fd75ddae0d9
[ 1243.149553][T22536] RDX: 0000200000000040 RSI: 00000000c00c642d RDI: 0000000000000005
[ 1243.149567][T22536] RBP: 00007fd75c006090 R08: 0000000000000000 R09: 0000000000000000
[ 1243.149581][T22536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1243.149595][T22536] R13: 00007fd75e036038 R14: 00007fd75e035fa0 R15: 00007ffc0fb425f8
[ 1243.149626][T22536]  </TASK>
[ 1244.249183][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.871798][T21921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1245.589702][T22609] nvme_fabrics: unknown parameter or missing value 'tr?ddr' in ctrl creation request
[ 1245.779492][T22609] nvme_fabrics: missing parameter 'transport=%s'
[ 1245.779514][T22609] nvme_fabrics: missing parameter 'nqn=%s'
[ 1246.298898][T21921] veth0_vlan: entered promiscuous mode
[ 1246.342727][T22621] FAULT_INJECTION: forcing a failure.
[ 1246.342727][T22621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1246.342772][T22621] CPU: 1 UID: 0 PID: 22621 Comm: syz.7.4282 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1246.342803][T22621] Tainted: [L]=SOFTLOCKUP
[ 1246.342812][T22621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1246.342826][T22621] Call Trace:
[ 1246.342836][T22621]  <TASK>
[ 1246.342845][T22621]  dump_stack_lvl+0xe8/0x150
[ 1246.342881][T22621]  should_fail_ex+0x467/0x600
[ 1246.342928][T22621]  _copy_from_user+0x2d/0xb0
[ 1246.342955][T22621]  __ia32_sys_rt_sigreturn+0x362/0x8c0
[ 1246.342989][T22621]  ? rt_spin_unlock+0x163/0x200
[ 1246.343024][T22621]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[ 1246.343079][T22621]  ? rcu_is_watching+0x15/0xb0
[ 1246.343119][T22621]  do_syscall_64+0x17b/0x530
[ 1246.343143][T22621]  ? irqentry_exit+0x10f/0x8f0
[ 1246.343165][T22621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1246.343188][T22621]  ? clear_bhb_loop+0x40/0x90
[ 1246.343216][T22621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1246.343238][T22621] RIP: 0033:0x7fd75dd4f459
[ 1246.343259][T22621] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
[ 1246.343280][T22621] RSP: 002b:00007fd75c005a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[ 1246.343302][T22621] RAX: ffffffffffffffda RBX: 00007fd75e035fa0 RCX: 00007fd75dd4f459
[ 1246.343319][T22621] RDX: 00007fd75c005a80 RSI: 00007fd75c005bb0 RDI: 0000000000000011
[ 1246.343334][T22621] RBP: 00007fd75c006090 R08: 0000000000000000 R09: 0000000000000000
[ 1246.343347][T22621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1246.343360][T22621] R13: 00007fd75e036038 R14: 00007fd75e035fa0 R15: 00007ffc0fb425f8
[ 1246.343392][T22621]  </TASK>
[ 1246.449482][ T5801] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1246.619942][T21921] veth1_vlan: entered promiscuous mode
[ 1246.742033][ T5801] usb 6-1: Using ep0 maxpacket: 16
[ 1246.753176][ T5801] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1246.753222][ T5801] usb 6-1: can't read configurations, error -61
[ 1246.844370][T22634] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1246.879588][ T5801] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1246.918104][T21921] veth0_macvtap: entered promiscuous mode
[ 1246.966079][T21921] veth1_macvtap: entered promiscuous mode
[ 1247.089546][ T5801] usb 6-1: Using ep0 maxpacket: 16
[ 1247.092685][ T5801] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1247.092726][ T5801] usb 6-1: can't read configurations, error -61
[ 1247.093157][ T5801] usb usb6-port1: attempt power cycle
[ 1247.298493][T21921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1247.345315][T21921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1247.395480][T13345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.395691][T13345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.395861][T13345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.396017][T13345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1247.511096][ T5689] usb 8-1: new full-speed USB device number 65 using dummy_hcd
[ 1247.520074][ T5801] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1247.565053][ T5801] usb 6-1: Using ep0 maxpacket: 16
[ 1247.599445][ T5801] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1247.599486][ T5801] usb 6-1: can't read configurations, error -61
[ 1247.668843][ T5689] usb 8-1: device descriptor read/64, error -71
[ 1247.739495][ T5801] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1247.771603][ T5801] usb 6-1: Using ep0 maxpacket: 16
[ 1247.802170][ T5801] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1247.802214][ T5801] usb 6-1: can't read configurations, error -61
[ 1247.802634][ T5801] usb usb6-port1: unable to enumerate USB device
[ 1247.999015][ T5689] usb 8-1: new full-speed USB device number 66 using dummy_hcd
[ 1248.159503][ T5689] usb 8-1: device descriptor read/64, error -71
[ 1248.278494][ T5689] usb usb8-port1: attempt power cycle
[ 1248.911681][ T5689] usb 8-1: new full-speed USB device number 67 using dummy_hcd
[ 1248.939615][ T5689] usb 8-1: device descriptor read/8, error -71
[ 1249.189525][ T5689] usb 8-1: new full-speed USB device number 68 using dummy_hcd
[ 1249.210983][ T5689] usb 8-1: device descriptor read/8, error -71
[ 1249.320701][ T5689] usb usb8-port1: unable to enumerate USB device
[ 1249.657551][T22650] kthread_run failed with err -4
[ 1250.271625][T22673] FAULT_INJECTION: forcing a failure.
[ 1250.271625][T22673] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.271680][T22673] CPU: 1 UID: 0 PID: 22673 Comm: syz.3.4290 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1250.271711][T22673] Tainted: [L]=SOFTLOCKUP
[ 1250.271720][T22673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1250.271734][T22673] Call Trace:
[ 1250.271744][T22673]  <TASK>
[ 1250.271753][T22673]  dump_stack_lvl+0xe8/0x150
[ 1250.271788][T22673]  should_fail_ex+0x467/0x600
[ 1250.271823][T22673]  should_failslab+0xa8/0x100
[ 1250.271848][T22673]  __kmalloc_noprof+0xfb/0x790
[ 1250.271889][T22673]  ? sctp_send_reset_streams+0x370/0xd70
[ 1250.271918][T22673]  ? sctp_send_reset_streams+0x370/0xd70
[ 1250.271953][T22673]  sctp_send_reset_streams+0x370/0xd70
[ 1250.271993][T22673]  sctp_setsockopt+0x9db/0x12c0
[ 1250.272027][T22673]  ? sock_common_setsockopt+0x36/0xc0
[ 1250.272054][T22673]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1250.272084][T22673]  do_sock_setsockopt+0x17c/0x1b0
[ 1250.272122][T22673]  __x64_sys_setsockopt+0x143/0x1b0
[ 1250.272165][T22673]  do_syscall_64+0x17b/0x530
[ 1250.272188][T22673]  ? irqentry_exit+0x10f/0x8f0
[ 1250.272210][T22673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.272233][T22673]  ? clear_bhb_loop+0x40/0x90
[ 1250.272262][T22673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1250.272286][T22673] RIP: 0033:0x7f7e5f05e0d9
[ 1250.272307][T22673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1250.272327][T22673] RSP: 002b:00007f7e5d2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1250.272351][T22673] RAX: ffffffffffffffda RBX: 00007f7e5f2e5fa0 RCX: 00007f7e5f05e0d9
[ 1250.272369][T22673] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004
[ 1250.272383][T22673] RBP: 00007f7e5d2b6090 R08: 000000000001000f R09: 0000000000000000
[ 1250.272399][T22673] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001
[ 1250.272413][T22673] R13: 00007f7e5f2e6038 R14: 00007f7e5f2e5fa0 R15: 00007ffd32197ed8
[ 1250.272446][T22673]  </TASK>
[ 1250.646309][T20052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1250.646331][T20052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1250.809507][T20239] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1250.885135][T13345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1250.885161][T13345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1250.932924][T22687] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1251.035839][T20239] usb 4-1: config 0 has no interfaces?
[ 1251.035884][T20239] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1251.035911][T20239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.063661][T20239] usb 4-1: config 0 descriptor??
[ 1251.440732][ T5801] usb 4-1: USB disconnect, device number 61
[ 1251.920776][T20239] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1252.077875][T20239] usb 6-1: config 0 has no interfaces?
[ 1252.077917][T20239] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1252.077946][T20239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.130876][T20239] usb 6-1: config 0 descriptor??
[ 1252.260787][T22711] fuseblk: Bad value for 'user_id'
[ 1252.260803][T22711] fuseblk: Bad value for 'user_id'
[ 1252.348637][T22695] FAULT_INJECTION: forcing a failure.
[ 1252.348637][T22695] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.348677][T22695] CPU: 0 UID: 0 PID: 22695 Comm: syz.5.4296 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1252.348708][T22695] Tainted: [L]=SOFTLOCKUP
[ 1252.348716][T22695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1252.348730][T22695] Call Trace:
[ 1252.348739][T22695]  <TASK>
[ 1252.348749][T22695]  dump_stack_lvl+0xe8/0x150
[ 1252.348784][T22695]  should_fail_ex+0x467/0x600
[ 1252.348818][T22695]  should_failslab+0xa8/0x100
[ 1252.348841][T22695]  __kmalloc_noprof+0xfb/0x790
[ 1252.348873][T22695]  ? tomoyo_encode+0x2ad/0x570
[ 1252.348909][T22695]  ? tomoyo_encode+0x2ad/0x570
[ 1252.348958][T22695]  tomoyo_encode+0x2ad/0x570
[ 1252.348996][T22695]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1252.349041][T22695]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1252.349070][T22695]  tomoyo_path_number_perm+0x246/0x5f0
[ 1252.349102][T22695]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1252.349133][T22695]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1252.349178][T22695]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1252.349202][T22695]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1252.349244][T22695]  ? __fget_files+0x2a/0x420
[ 1252.349272][T22695]  ? __fget_files+0x3a8/0x420
[ 1252.349295][T22695]  ? __fget_files+0x2a/0x420
[ 1252.349322][T22695]  security_file_ioctl+0xb9/0x260
[ 1252.349350][T22695]  __se_sys_ioctl+0x47/0x170
[ 1252.349394][T22695]  do_syscall_64+0x17b/0x530
[ 1252.349417][T22695]  ? irqentry_exit+0x10f/0x8f0
[ 1252.349438][T22695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.349462][T22695]  ? clear_bhb_loop+0x40/0x90
[ 1252.349491][T22695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.349530][T22695] RIP: 0033:0x7f59c2eadd6b
[ 1252.349552][T22695] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1252.349572][T22695] RSP: 002b:00007f59c1103f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1252.349597][T22695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f59c2eadd6b
[ 1252.349614][T22695] RDX: 00007f59c1104fe0 RSI: 0000000080085502 RDI: 0000000000000003
[ 1252.349629][T22695] RBP: 00007f59c1106090 R08: 0000000000000000 R09: 0000000000000000
[ 1252.349644][T22695] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1252.349658][T22695] R13: 0000000000000000 R14: 00007f59c3135fa0 R15: 00007ffd83a2ecf8
[ 1252.349694][T22695]  </TASK>
[ 1252.356119][T22695] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1252.898128][T20241] usb 6-1: USB disconnect, device number 77
[ 1252.984738][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4300'.
[ 1253.086714][T22727] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1253.411487][T22734] fuseblk: Bad value for 'fd'
[ 1253.465951][T22729] syzkaller1: entered promiscuous mode
[ 1253.466074][T22729] syzkaller1: entered allmulticast mode
[ 1253.984915][T20239] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1254.120758][T22755] Bluetooth: MGMT ver 1.23
[ 1254.127198][T20239] usb 7-1: device descriptor read/64, error -71
[ 1254.369557][T20239] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1254.502340][T20239] usb 7-1: device descriptor read/64, error -71
[ 1254.563662][T22773] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1254.609900][T20239] usb usb7-port1: attempt power cycle
[ 1254.949969][T20239] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1254.969521][ T5689] usb 6-1: new full-speed USB device number 78 using dummy_hcd
[ 1254.993563][T20239] usb 7-1: device descriptor read/8, error -71
[ 1255.110729][ T5689] usb 6-1: device descriptor read/64, error -71
[ 1255.269516][T20239] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1255.270400][T22786] kvm: emulating exchange as write
[ 1255.297487][T20239] usb 7-1: device descriptor read/8, error -71
[ 1255.349585][ T5689] usb 6-1: new full-speed USB device number 79 using dummy_hcd
[ 1255.402162][T20239] usb usb7-port1: unable to enumerate USB device
[ 1255.484748][ T5689] usb 6-1: device descriptor read/64, error -71
[ 1255.600775][ T5689] usb usb6-port1: attempt power cycle
[ 1255.786762][T22802] Invalid ELF header magic: != ELF
[ 1255.973293][T22809] FAULT_INJECTION: forcing a failure.
[ 1255.973293][T22809] name failslab, interval 1, probability 0, space 0, times 0
[ 1255.973335][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.7.4317 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1255.973365][T22809] Tainted: [L]=SOFTLOCKUP
[ 1255.973374][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1255.973388][T22809] Call Trace:
[ 1255.973398][T22809]  <TASK>
[ 1255.973407][T22809]  dump_stack_lvl+0xe8/0x150
[ 1255.973444][T22809]  should_fail_ex+0x467/0x600
[ 1255.973480][T22809]  should_failslab+0xa8/0x100
[ 1255.973502][T22809]  ? anon_vma_clone+0x3d4/0xa10
[ 1255.973534][T22809]  kmem_cache_alloc_noprof+0x9e/0x680
[ 1255.973566][T22809]  ? anon_vma_clone+0x3d4/0xa10
[ 1255.973605][T22809]  anon_vma_clone+0x3d4/0xa10
[ 1255.973648][T22809]  __split_vma+0x53d/0xbd0
[ 1255.973683][T22809]  ? lock_acquire+0x115/0x350
[ 1255.973722][T22809]  ? __pfx___split_vma+0x10/0x10
[ 1255.973768][T22809]  vms_gather_munmap_vmas+0x322/0x1370
[ 1255.973792][T22809]  ? is_bpf_text_address+0x26/0x2b0
[ 1255.973821][T22809]  ? kernel_text_address+0xa5/0xe0
[ 1255.973854][T22809]  ? __kernel_text_address+0xd/0x30
[ 1255.973884][T22809]  ? unwind_get_return_address+0x4d/0x90
[ 1255.973921][T22809]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1255.973961][T22809]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1255.973991][T22809]  ? __lock_acquire+0x6df/0x2e40
[ 1255.974023][T22809]  do_vmi_align_munmap+0x2c7/0x4d0
[ 1255.974045][T22809]  ? kstrtoull+0x137/0x1d0
[ 1255.974089][T22809]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 1255.974141][T22809]  ? mas_walk+0x372/0x480
[ 1255.974185][T22809]  ? mas_find+0x64e/0xca0
[ 1255.974209][T22809]  do_vmi_munmap+0x252/0x2d0
[ 1255.974238][T22809]  __vm_munmap+0x241/0x3e0
[ 1255.974266][T22809]  ? __pfx___vm_munmap+0x10/0x10
[ 1255.974304][T22809]  ? __pfx_ksys_write+0x10/0x10
[ 1255.974338][T22809]  __x64_sys_munmap+0x60/0x70
[ 1255.974369][T22809]  do_syscall_64+0x17b/0x530
[ 1255.974392][T22809]  ? irqentry_exit+0x10f/0x8f0
[ 1255.974413][T22809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.974437][T22809]  ? clear_bhb_loop+0x40/0x90
[ 1255.974465][T22809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.974487][T22809] RIP: 0033:0x7fd75ddae0d9
[ 1255.974509][T22809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1255.974529][T22809] RSP: 002b:00007fd75bfe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[ 1255.974555][T22809] RAX: ffffffffffffffda RBX: 00007fd75e036090 RCX: 00007fd75ddae0d9
[ 1255.974572][T22809] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000001000
[ 1255.974587][T22809] RBP: 00007fd75bfe5090 R08: 0000000000000000 R09: 0000000000000000
[ 1255.974602][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1255.974615][T22809] R13: 00007fd75e036128 R14: 00007fd75e036090 R15: 00007ffc0fb425f8
[ 1255.974651][T22809]  </TASK>
[ 1256.202006][ T5689] usb 6-1: new full-speed USB device number 80 using dummy_hcd
[ 1256.245608][ T5689] usb 6-1: device descriptor read/8, error -71
[ 1256.499551][ T5689] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[ 1256.520602][ T5689] usb 6-1: device descriptor read/8, error -71
[ 1256.630059][ T5689] usb usb6-port1: unable to enumerate USB device
[ 1256.638010][T22815] fuseblk: Bad value for 'fd'
[ 1256.851997][T22823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1257.176950][ T5255] 8021q: adding VLAN 0 to HW filter on device eth24
[ 1257.799530][ T5800] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1257.994778][ T5800] usb 4-1: Using ep0 maxpacket: 16
[ 1257.997302][ T5800] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1257.997341][ T5800] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1257.997379][ T5800] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[ 1257.997406][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.050678][ T5800] usb 4-1: config 0 descriptor??
[ 1258.602380][T22868] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4329'.
[ 1258.663845][T22871] fuse: Unknown parameter '0x0000000000000003'
[ 1258.691902][ T5800] uclogic 0003:28BD:0078.001F: interface is invalid, ignoring
[ 1258.974219][T22876] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1259.284233][T22888] fuseblk: Bad value for 'fd'
[ 1260.261399][T22905] FAULT_INJECTION: forcing a failure.
[ 1260.261399][T22905] name failslab, interval 1, probability 0, space 0, times 0
[ 1260.261451][T22905] CPU: 1 UID: 0 PID: 22905 Comm: syz.6.4335 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1260.261482][T22905] Tainted: [L]=SOFTLOCKUP
[ 1260.261490][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1260.261504][T22905] Call Trace:
[ 1260.261512][T22905]  <TASK>
[ 1260.261523][T22905]  dump_stack_lvl+0xe8/0x150
[ 1260.261559][T22905]  should_fail_ex+0x467/0x600
[ 1260.261595][T22905]  should_failslab+0xa8/0x100
[ 1260.261621][T22905]  __kmalloc_noprof+0xfb/0x790
[ 1260.261653][T22905]  ? fuse_readdir+0x1b5c/0x3580
[ 1260.261684][T22905]  ? fuse_readdir+0x1b5c/0x3580
[ 1260.261721][T22905]  fuse_readdir+0x1b5c/0x3580
[ 1260.261753][T22905]  ? kernel_text_address+0xa5/0xe0
[ 1260.261787][T22905]  ? __kernel_text_address+0xd/0x30
[ 1260.261842][T22905]  ? _parse_integer_limit+0x18f/0x1e0
[ 1260.261875][T22905]  ? look_up_lock_class+0x57/0x110
[ 1260.261899][T22905]  ? register_lock_class+0x31/0x2e0
[ 1260.261940][T22905]  ? __pfx_fuse_readdir+0x10/0x10
[ 1260.261973][T22905]  ? register_lock_class+0x31/0x2e0
[ 1260.262013][T22905]  ? __lock_acquire+0x6df/0x2e40
[ 1260.262040][T22905]  ? get_pid_task+0x20/0x1f0
[ 1260.262106][T22905]  ? __pfx_down_read_killable+0x10/0x10
[ 1260.262142][T22905]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1260.262166][T22905]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1260.262188][T22905]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1260.262216][T22905]  iterate_dir+0x2f1/0x4e0
[ 1260.262252][T22905]  __se_sys_getdents64+0xf1/0x280
[ 1260.262286][T22905]  ? __pfx___se_sys_getdents64+0x10/0x10
[ 1260.262317][T22905]  ? ksys_write+0x248/0x270
[ 1260.262341][T22905]  ? __pfx_filldir64+0x10/0x10
[ 1260.262373][T22905]  ? __pfx_ksys_write+0x10/0x10
[ 1260.262409][T22905]  do_syscall_64+0x17b/0x530
[ 1260.262432][T22905]  ? irqentry_exit+0x10f/0x8f0
[ 1260.262453][T22905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1260.262477][T22905]  ? clear_bhb_loop+0x40/0x90
[ 1260.262506][T22905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1260.262529][T22905] RIP: 0033:0x7fa4bff5e0d9
[ 1260.262550][T22905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1260.262571][T22905] RSP: 002b:00007fa4be1b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1260.262595][T22905] RAX: ffffffffffffffda RBX: 00007fa4c01e5fa0 RCX: 00007fa4bff5e0d9
[ 1260.262613][T22905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1260.262627][T22905] RBP: 00007fa4be1b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1260.262642][T22905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1260.262656][T22905] R13: 00007fa4c01e6038 R14: 00007fa4c01e5fa0 R15: 00007ffe8f112798
[ 1260.262692][T22905]  </TASK>
[ 1260.757614][    T9] usb 4-1: USB disconnect, device number 62
[ 1261.171893][T22926] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1261.352881][T22933] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1261.747006][T22949] size and base must be multiples of 4 kiB
[ 1261.747026][T22949] CPU: 1 UID: 0 PID: 22949 Comm: syz.6.4345 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1261.747050][T22949] Tainted: [L]=SOFTLOCKUP
[ 1261.747056][T22949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1261.747067][T22949] Call Trace:
[ 1261.747074][T22949]  <TASK>
[ 1261.747081][T22949]  dump_stack_lvl+0xe8/0x150
[ 1261.747110][T22949]  mtrr_add+0xd5/0x100
[ 1261.747133][T22949]  mtrr_ioctl+0xca4/0x13c0
[ 1261.747159][T22949]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1261.747190][T22949]  ? __fget_files+0x2a/0x420
[ 1261.747211][T22949]  ? __fget_files+0x3a8/0x420
[ 1261.747226][T22949]  ? __fget_files+0x2a/0x420
[ 1261.747242][T22949]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1261.747264][T22949]  proc_reg_unlocked_ioctl+0x1df/0x2d0
[ 1261.747287][T22949]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1261.747308][T22949]  __se_sys_ioctl+0xff/0x170
[ 1261.747333][T22949]  do_syscall_64+0x17b/0x530
[ 1261.747351][T22949]  ? irqentry_exit+0x10f/0x8f0
[ 1261.747367][T22949]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.747385][T22949]  ? clear_bhb_loop+0x40/0x90
[ 1261.747404][T22949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.747421][T22949] RIP: 0033:0x7fa4bff5e0d9
[ 1261.747437][T22949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.747451][T22949] RSP: 002b:00007fa4be1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1261.747469][T22949] RAX: ffffffffffffffda RBX: 00007fa4c01e5fa0 RCX: 00007fa4bff5e0d9
[ 1261.747481][T22949] RDX: 0000200000000b00 RSI: 00000000400c4d01 RDI: 0000000000000003
[ 1261.747495][T22949] RBP: 00007fa4bfff5024 R08: 0000000000000000 R09: 0000000000000000
[ 1261.747506][T22949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1261.747516][T22949] R13: 00007fa4c01e6038 R14: 00007fa4c01e5fa0 R15: 00007ffe8f112798
[ 1261.747564][T22949]  </TASK>
[ 1261.985916][T22952] hsr0: entered promiscuous mode
[ 1262.631283][T22971] netlink: 'syz.5.4349': attribute type 4 has an invalid length.
[ 1262.733013][T22976] binder: BINDER_SET_CONTEXT_MGR already set
[ 1262.733032][T22976] binder: 22967:22976 ioctl 40046207 0 returned -16
[ 1262.879542][ T5801] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 1263.036176][ T5801] usb 8-1: config 160 has an invalid interface number: 200 but max is 0
[ 1263.036209][ T5801] usb 8-1: config 160 has no interface number 0
[ 1263.036261][ T5801] usb 8-1: config 160 interface 200 has no altsetting 0
[ 1263.046312][ T5801] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1263.046413][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.046478][ T5801] usb 8-1: Product: syz
[ 1263.046520][ T5801] usb 8-1: Manufacturer: syz
[ 1263.046564][ T5801] usb 8-1: SerialNumber: syz
[ 1263.363629][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1263.364706][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1263.976063][ T5801] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1263.976128][ T5801] usb 8-1: MIDIStreaming interface descriptor not found
[ 1264.516283][T23007] input: syz0 as /devices/virtual/input/input40
[ 1264.849497][ T5801] usb 8-1: USB disconnect, device number 69
[ 1264.875950][T23016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer.
[ 1265.364261][T20665] udevd[20665]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1265.794738][    T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1265.951833][    T9] usb 7-1: Using ep0 maxpacket: 16
[ 1265.954321][    T9] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 1265.954353][    T9] usb 7-1: config 0 has no interface number 0
[ 1265.983124][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1265.983159][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.983182][    T9] usb 7-1: Product: syz
[ 1265.983198][    T9] usb 7-1: Manufacturer: syz
[ 1265.983214][    T9] usb 7-1: SerialNumber: syz
[ 1265.986218][T23041] 9pnet_fd: p9_fd_create_unix (23041): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1266.097347][T23045] FAULT_INJECTION: forcing a failure.
[ 1266.097347][T23045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1266.097378][T23045] CPU: 1 UID: 0 PID: 23045 Comm: syz.5.4359 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1266.097400][T23045] Tainted: [L]=SOFTLOCKUP
[ 1266.097406][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1266.097417][T23045] Call Trace:
[ 1266.097423][T23045]  <TASK>
[ 1266.097430][T23045]  dump_stack_lvl+0xe8/0x150
[ 1266.097474][T23045]  should_fail_ex+0x467/0x600
[ 1266.097501][T23045]  _copy_to_user+0x31/0xb0
[ 1266.097518][T23045]  simple_read_from_buffer+0xe1/0x170
[ 1266.097540][T23045]  proc_fail_nth_read+0x1be/0x230
[ 1266.097561][T23045]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1266.097587][T23045]  ? rw_verify_area+0x250/0x4d0
[ 1266.097607][T23045]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1266.097624][T23045]  vfs_read+0x219/0xa90
[ 1266.097649][T23045]  ? __pfx_vfs_read+0x10/0x10
[ 1266.097670][T23045]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1266.097688][T23045]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1266.097704][T23045]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1266.097720][T23045]  ? mutex_lock_nested+0x152/0x1d0
[ 1266.097741][T23045]  ? fdget_pos+0x252/0x320
[ 1266.097764][T23045]  ksys_read+0x156/0x270
[ 1266.097785][T23045]  ? __pfx_ksys_read+0x10/0x10
[ 1266.097811][T23045]  do_syscall_64+0x17b/0x530
[ 1266.097827][T23045]  ? irqentry_exit+0x10f/0x8f0
[ 1266.097842][T23045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.097859][T23045]  ? clear_bhb_loop+0x40/0x90
[ 1266.097880][T23045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.097896][T23045] RIP: 0033:0x7f59c2e6e90e
[ 1266.097911][T23045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1266.097926][T23045] RSP: 002b:00007f59c10e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1266.097943][T23045] RAX: ffffffffffffffda RBX: 00007f59c10e56c0 RCX: 00007f59c2e6e90e
[ 1266.097955][T23045] RDX: 000000000000000f RSI: 00007f59c10e50a0 RDI: 0000000000000004
[ 1266.097966][T23045] RBP: 00007f59c10e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.097977][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.097987][T23045] R13: 00007f59c3136128 R14: 00007f59c3136090 R15: 00007ffd83a2ecf8
[ 1266.098012][T23045]  </TASK>
[ 1266.347974][    T9] usb 7-1: config 0 descriptor??
[ 1266.356300][    T9] hub 7-1:0.132: bad descriptor, ignoring hub
[ 1266.356337][    T9] hub 7-1:0.132: probe with driver hub failed with error -5
[ 1266.381857][    T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input41
[ 1267.441268][ T5675] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1267.770151][ T5675] usb 6-1: Using ep0 maxpacket: 8
[ 1267.800213][ T5675] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1267.800250][ T5675] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1267.800278][ T5675] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1267.800304][ T5675] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1267.800349][ T5675] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1267.800375][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.035247][ T5675] usb 6-1: GET_CAPABILITIES returned 0
[ 1268.035288][ T5675] usbtmc 6-1:16.0: can't read capabilities
[ 1268.359191][    T9] usb 6-1: USB disconnect, device number 82
[ 1268.986267][T23080] 9p: Bad value for 'rfdno'
[ 1269.492019][    T9] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 1269.652874][    T9] usb 8-1: Using ep0 maxpacket: 16
[ 1269.655699][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1269.660999][    T9] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1269.661054][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.661135][    T9] usb 8-1: Product: syz
[ 1269.661201][    T9] usb 8-1: Manufacturer: syz
[ 1269.661244][    T9] usb 8-1: SerialNumber: syz
[ 1269.772386][    T9] usb 8-1: config 0 descriptor??
[ 1269.782689][    T9] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1269.811213][T20045] do_umount: task=syz-executor[20045] propagate_mount_busy()!=0
[ 1269.811478][T20045] do_umount: task=syz-executor[20045] propagate_mount_busy()!=0
[ 1269.985239][ T5675] usb 8-1: USB disconnect, device number 70
[ 1270.386592][T23104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1271.164923][T23121] dlm: no local IP address has been set
[ 1271.164942][T23121] dlm: cannot start dlm midcomms -107
[ 1272.002163][T23134] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1272.505907][T23142] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4377'.
[ 1272.639119][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1272.763935][T23146] FAULT_INJECTION: forcing a failure.
[ 1272.763935][T23146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1272.763974][T23146] CPU: 0 UID: 0 PID: 23146 Comm: syz.3.4379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1272.764003][T23146] Tainted: [L]=SOFTLOCKUP
[ 1272.764010][T23146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1272.764023][T23146] Call Trace:
[ 1272.764031][T23146]  <TASK>
[ 1272.764040][T23146]  dump_stack_lvl+0xe8/0x150
[ 1272.764076][T23146]  should_fail_ex+0x467/0x600
[ 1272.764106][T23146]  _copy_to_user+0x31/0xb0
[ 1272.764126][T23146]  simple_read_from_buffer+0xe1/0x170
[ 1272.764153][T23146]  proc_fail_nth_read+0x1be/0x230
[ 1272.764178][T23146]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1272.764201][T23146]  ? rw_verify_area+0x250/0x4d0
[ 1272.764225][T23146]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1272.764244][T23146]  vfs_read+0x219/0xa90
[ 1272.764273][T23146]  ? __pfx_vfs_read+0x10/0x10
[ 1272.764300][T23146]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1272.764325][T23146]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1272.764343][T23146]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1272.764361][T23146]  ? mutex_lock_nested+0x152/0x1d0
[ 1272.764384][T23146]  ? fdget_pos+0x252/0x320
[ 1272.764410][T23146]  ksys_read+0x156/0x270
[ 1272.764437][T23146]  ? __pfx_ksys_read+0x10/0x10
[ 1272.764467][T23146]  do_syscall_64+0x17b/0x530
[ 1272.764486][T23146]  ? irqentry_exit+0x10f/0x8f0
[ 1272.764507][T23146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.764527][T23146]  ? clear_bhb_loop+0x40/0x90
[ 1272.764550][T23146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.764569][T23146] RIP: 0033:0x7f7e5f01e90e
[ 1272.764588][T23146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1272.764605][T23146] RSP: 002b:00007f7e5d2b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1272.764625][T23146] RAX: ffffffffffffffda RBX: 00007f7e5d2b66c0 RCX: 00007f7e5f01e90e
[ 1272.764639][T23146] RDX: 000000000000000f RSI: 00007f7e5d2b60a0 RDI: 0000000000000007
[ 1272.764651][T23146] RBP: 00007f7e5d2b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1272.764663][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1272.764675][T23146] R13: 00007f7e5f2e6038 R14: 00007f7e5f2e5fa0 R15: 00007ffd32197ed8
[ 1272.764706][T23146]  </TASK>
[ 1272.768989][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1272.799614][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1273.153267][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1273.167079][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1274.213868][ T5801] usb 7-1: USB disconnect, device number 64
[ 1275.367728][T23181] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1275.367754][T23181] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1275.367791][T17540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.367920][T23181] vhci_hcd vhci_hcd.0: Device attached
[ 1275.551166][ T5800] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1275.620813][T18877] Bluetooth: hci2: command tx timeout
[ 1275.625323][ T5800] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[ 1276.363803][T23182] vhci_hcd: connection reset by peer
[ 1276.372876][T17553] vhci_hcd vhci_hcd.3: stop threads
[ 1276.372958][T17553] vhci_hcd vhci_hcd.3: release socket
[ 1276.573729][T17553] vhci_hcd vhci_hcd.3: disconnect device
[ 1276.614878][    T9] usb 7-1: new low-speed USB device number 65 using dummy_hcd
[ 1276.789976][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[ 1276.878387][T17540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.933683][    T9] usb 7-1: new low-speed USB device number 66 using dummy_hcd
[ 1277.085337][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[ 1277.085714][    T9] usb usb7-port1: attempt power cycle
[ 1277.429593][    T9] usb 7-1: new low-speed USB device number 67 using dummy_hcd
[ 1277.450631][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[ 1277.662008][    T9] usb 7-1: new low-speed USB device number 68 using dummy_hcd
[ 1277.669591][T19178] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1277.697023][T18877] Bluetooth: hci2: command tx timeout
[ 1277.710484][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[ 1277.710824][    T9] usb usb7-port1: unable to enumerate USB device
[ 1277.819798][T19178] usb 4-1: Using ep0 maxpacket: 32
[ 1277.822573][T19178] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[ 1277.822601][T19178] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.822621][T19178] usb 4-1: config 0 has no interface number 0
[ 1277.822666][T19178] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1277.822694][T19178] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1277.822719][T19178] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[ 1277.822744][T19178] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1277.822773][T19178] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1277.822800][T19178] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1277.822824][T19178] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1277.822876][T19178] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1277.822909][T19178] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1277.825936][T19178] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1277.825971][T19178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.825994][T19178] usb 4-1: Product: syz
[ 1277.826010][T19178] usb 4-1: Manufacturer: syz
[ 1277.826027][T19178] usb 4-1: SerialNumber: syz
[ 1278.005978][T19178] usb 4-1: config 0 descriptor??
[ 1278.008858][T23217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1278.054835][T19178] usb 4-1: will this work? Command EP is not usually 12
[ 1278.054864][T19178] usb 4-1: will this work? Response EP is not usually 3
[ 1278.054882][T19178] usb 4-1: will this work? Image data EP is not usually 2
[ 1278.241055][T23226] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1278.281347][T19178] scsi host1: microtekX6
[ 1278.626995][T17553] usb 4-1: error -90 submitting URB
[ 1278.688378][T17553] usb 4-1: error -90 submitting URB
[ 1278.804103][   T99] usb 4-1: error -90 submitting URB
[ 1278.839535][   T99] usb 4-1: error -90 submitting URB
[ 1279.193979][T17540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1279.798584][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4393'.
[ 1279.801207][T18877] Bluetooth: hci2: command tx timeout
[ 1280.238926][    T9] usb 4-1: USB disconnect, device number 63
[ 1280.489519][ T5801] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 1280.699420][ T5801] usb 8-1: Using ep0 maxpacket: 16
[ 1280.701942][ T5801] usb 8-1: too many configurations: 32, using maximum allowed: 8
[ 1280.704135][ T5801] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1280.704175][ T5801] usb 8-1: can't read configurations, error -61
[ 1280.992579][ T5801] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 1281.112241][ T5800] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1281.237132][ T5801] usb 8-1: Using ep0 maxpacket: 16
[ 1281.242397][ T5801] usb 8-1: too many configurations: 32, using maximum allowed: 8
[ 1281.417117][ T5801] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1281.417157][ T5801] usb 8-1: can't read configurations, error -61
[ 1281.417531][ T5801] usb usb8-port1: attempt power cycle
[ 1281.754239][T17540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.804587][ T5801] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[ 1281.841524][T18877] Bluetooth: hci2: command tx timeout
[ 1281.842973][ T5801] usb 8-1: Using ep0 maxpacket: 16
[ 1281.854873][ T5801] usb 8-1: too many configurations: 32, using maximum allowed: 8
[ 1281.888788][ T5801] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1281.888833][ T5801] usb 8-1: can't read configurations, error -61
[ 1282.070861][ T5801] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[ 1282.106182][ T5801] usb 8-1: Using ep0 maxpacket: 16
[ 1282.117368][ T5801] usb 8-1: too many configurations: 32, using maximum allowed: 8
[ 1282.150969][ T5801] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1282.151010][ T5801] usb 8-1: can't read configurations, error -61
[ 1282.151408][ T5801] usb usb8-port1: unable to enumerate USB device
[ 1283.471407][    T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1283.498530][T23272] IPVS: lc: FWM 3 0x00000003 - no destination available
[ 1283.619614][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1283.621535][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1283.621562][    T9] usb 4-1: config 0 has no interface number 0
[ 1283.624847][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1283.624881][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.624904][    T9] usb 4-1: Product: syz
[ 1283.624919][    T9] usb 4-1: Manufacturer: syz
[ 1283.624936][    T9] usb 4-1: SerialNumber: syz
[ 1283.731632][    T9] usb 4-1: config 0 descriptor??
[ 1283.910069][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[ 1283.910480][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[ 1283.983377][T23279] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4402'.
[ 1284.029171][    T9] usb 4-1: USB disconnect, device number 64
[ 1284.325093][T23286] binder: BINDER_SET_CONTEXT_MGR already set
[ 1284.325112][T23286] binder: 23285:23286 ioctl 4018620d 200000000040 returned -16
[ 1284.328895][T23286] binder: 23285:23286 ioctl c0306201 200000000180 returned -22
[ 1284.333068][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4403'.
[ 1284.333377][T23286] openvswitch: netlink: EtherType 300 is less than min 600
[ 1285.007902][T19178] libceph: connect (1)[c::]:6789 error -101
[ 1285.008144][T19178] libceph: mon0 (1)[c::]:6789 connect error
[ 1285.260495][ T5689] libceph: connect (1)[c::]:6789 error -101
[ 1285.260781][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[ 1285.582474][T23298] ceph: No mds server is up or the cluster is laggy
[ 1285.654034][T23139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1285.667676][T23139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1285.693417][T23139] bridge_slave_0: entered allmulticast mode
[ 1285.716149][T23139] bridge_slave_0: entered promiscuous mode
[ 1285.746372][T23139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1285.746759][T23139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1285.747175][T23139] bridge_slave_1: entered allmulticast mode
[ 1285.770614][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1285.770831][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1285.772434][T23139] bridge_slave_1: entered promiscuous mode
[ 1286.514827][T23139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1286.531909][T23139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1287.098325][T23334] Oops: general protection fault, probably [ 1287.098325][T23334] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI
[ 1287.098353][T23334] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7]
[ 1287.098384][T23334] CPU: 0 UID: 0 PID: 23334 Comm: syz.6.4413 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1287.098417][T23334] Tainted: [L]=SOFTLOCKUP
[ 1287.098426][T23334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1287.098439][T23334] RIP: 0010:configfs_symlink+0x5fc/0x1030
[ 1287.098479][T23334] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 9e 18 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 76 18 c2 ff 4d 8b 2c 24 4c 89 ef e8
[ 1287.098500][T23334] RSP: 0018:ffffc900044dfc60 EFLAGS: 00010202
[ 1287.098521][T23334] RAX: 0000000000000016 RBX: ffff88804e20f848 RCX: dffffc0000000000
[ 1287.098538][T23334] RDX: 0000000000000006 RSI: ffffffff8d98ba58 RDI: 00000000ffffffff
[ 1287.098564][T23334] RBP: ffffc900044dfd68 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f
[ 1287.098582][T23334] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 00000000000000b0
[ 1287.098600][T23334] R13: 0000000000000000 R14: ffffffff8c23cfa8 R15: 1ffff9200089bf9c
[ 1287.098618][T23334] FS:  00007fa4be1956c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[ 1287.098639][T23334] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1287.098654][T23334] CR2: 00007f0d5c654368 CR3: 000000003da76000 CR4: 00000000003526f0
[ 1287.098678][T23334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1287.098692][T23334] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1287.098708][T23334] Call Trace:
[ 1287.098716][T23334]  <TASK>
[ 1287.098733][T23334]  ? __pfx_configfs_symlink+0x10/0x10
[ 1287.098767][T23334]  ? __sanitizer_cov_trace_pc+0x8/0x80
[ 1287.098803][T23334]  ? bpf_lsm_inode_symlink+0x9/0x20
[ 1287.098835][T23334]  vfs_symlink+0x18b/0x330
[ 1287.098867][T23334]  ? security_path_symlink+0xf3/0x310
[ 1287.098903][T23334]  filename_symlinkat+0x1cd/0x420
[ 1287.098939][T23334]  ? __pfx_filename_symlinkat+0x10/0x10
[ 1287.098973][T23334]  ? strncpy_from_user+0x150/0x2c0
[ 1287.099001][T23334]  ? do_getname+0x151/0x250
[ 1287.099036][T23334]  __se_sys_symlinkat+0x4e/0x2b0
[ 1287.099070][T23334]  do_syscall_64+0x17b/0x530
[ 1287.099093][T23334]  ? irqentry_exit+0x10f/0x8f0
[ 1287.099113][T23334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.099136][T23334]  ? clear_bhb_loop+0x40/0x90
[ 1287.099159][T23334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.099180][T23334] RIP: 0033:0x7fa4bff5e0d9
[ 1287.099198][T23334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1287.099217][T23334] RSP: 002b:00007fa4be195028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 1287.099239][T23334] RAX: ffffffffffffffda RBX: 00007fa4c01e6090 RCX: 00007fa4bff5e0d9
[ 1287.099255][T23334] RDX: 0000200000001100 RSI: ffffffffffffff9c RDI: 0000200000001000
[ 1287.099271][T23334] RBP: 00007fa4bfff5024 R08: 0000000000000000 R09: 0000000000000000
[ 1287.099284][T23334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1287.099299][T23334] R13: 00007fa4c01e6128 R14: 00007fa4c01e6090 R15: 00007ffe8f112798
[ 1287.099323][T23334]  </TASK>
[ 1287.099343][T23334] Modules linked in:
[ 1287.099417][T23334] ---[ end trace 0000000000000000 ]---
[ 1287.101057][T23337] ------------[ cut here ]------------
[ 1287.101072][T23337] mas->ld_seq != lock_sequence(map)
[ 1287.101104][T23337] WARNING: lib/maple_tree.c:1188 at mas_preallocate+0x6e0/0x850, CPU#0: syz.7.4415/23337
[ 1287.101214][T23337] Modules linked in:
[ 1287.101277][T23337] CPU: 0 UID: 0 PID: 23337 Comm: syz.7.4415 Tainted: G      D      L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1287.101369][T23337] Tainted: [D]=DIE, [L]=SOFTLOCKUP
[ 1287.101392][T23337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1287.101434][T23337] RIP: 0010:mas_preallocate+0x6e0/0x850
[ 1287.101497][T23337] Code: c3 cc cc cc cc cc e8 3f 2a 7d f6 e9 1c fc ff ff e8 35 2a 7d f6 e9 12 fc ff ff e8 2b 2a 7d f6 e9 08 fc ff ff e8 21 2a 7d f6 90 <0f> 0b 90 e9 2f fb ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c f3 f9
[ 1287.101561][T23337] RSP: 0018:ffffc900000f7480 EFLAGS: 00010287
[ 1287.101614][T23337] RAX: ffffffff8b48798f RBX: ffffc900000f7780 RCX: 0000000000080000
[ 1287.101665][T23337] RDX: ffffc9001440a000 RSI: 0000000000005d26 RDI: 0000000000005d27
[ 1287.101709][T23337] RBP: ffffc900000f75b0 R08: 0000000000000000 R09: 0000000000000000
[ 1287.101750][T23337] R10: ffffc900000f74e8 R11: fffff5200001eea7 R12: ffff88802bfafa00
[ 1287.101782][T23337] R13: ffff88803af61f30 R14: 000000000000001d R15: 00000000ffffffff
[ 1287.101826][T23337] FS:  00007fd75c0066c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[ 1287.101887][T23337] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1287.101964][T23337] CR2: 00007f0d5c654368 CR3: 0000000034802000 CR4: 00000000003526f0
[ 1287.102006][T23337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1287.102022][T23337] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1287.102036][T23337] Call Trace:
[ 1287.102045][T23337]  <TASK>
[ 1287.102059][T23337]  ? __pfx_mas_preallocate+0x10/0x10
[ 1287.102121][T23337]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1287.102218][T23337]  ? vma_set_pgoff+0x163/0x2d0
[ 1287.102267][T23337]  mmap_region+0x1419/0x2230
[ 1287.102330][T23337]  ? arch_stack_walk+0xfb/0x150
[ 1287.102445][T23337]  ? __pfx_stack_trace_save+0x10/0x10
[ 1287.102533][T23337]  ? __pfx_mmap_region+0x10/0x10
[ 1287.102605][T23337]  ? stack_depot_save_flags+0x33/0x800
[ 1287.102681][T23337]  ? lock_acquire+0x115/0x350
[ 1287.102800][T23337]  ? mas_prev_slot+0xb79/0xc00
[ 1287.102940][T23337]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1287.103003][T23337]  ? rt_mutex_slowunlock+0x219/0x460
[ 1287.103088][T23337]  ? cap_mmap_addr+0xaf/0x100
[ 1287.103161][T23337]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1287.103255][T23337]  ? security_mmap_addr+0x64/0x200
[ 1287.103351][T23337]  ? shmem_mapping+0xd/0x50
[ 1287.103437][T23337]  ? memfd_check_seals_mmap+0xcb/0x210
[ 1287.103501][T23337]  do_mmap+0xc1e/0x10b0
[ 1287.103587][T23337]  ? __pfx_do_mmap+0x10/0x10
[ 1287.103666][T23337]  ? rwbase_write_lock+0x550/0x720
[ 1287.103743][T23337]  vm_mmap_pgoff+0x275/0x4e0
[ 1287.103821][T23337]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1287.103894][T23337]  ? __fget_files+0x2a/0x420
[ 1287.103959][T23337]  ? __fget_files+0x3a8/0x420
[ 1287.104015][T23337]  ? __fget_files+0x2a/0x420
[ 1287.104066][T23337]  ksys_mmap_pgoff+0x4a6/0x720
[ 1287.104149][T23337]  ? __x64_sys_mmap+0x7f/0x140
[ 1287.104236][T23337]  do_syscall_64+0x17b/0x530
[ 1287.104300][T23337]  ? irqentry_exit+0x10f/0x8f0
[ 1287.104355][T23337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.104418][T23337]  ? clear_bhb_loop+0x40/0x90
[ 1287.104485][T23337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.104542][T23337] RIP: 0033:0x7fd75ddade42
[ 1287.104613][T23337] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[ 1287.104676][T23337] RSP: 002b:00007fd75c005fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1287.104769][T23337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd75ddade42
[ 1287.104820][T23337] RDX: 0000000000000003 RSI: 0000000000001180 RDI: 0000000000000000
[ 1287.104854][T23337] RBP: 0000000000008001 R08: 0000000000000006 R09: 0000000000000000
[ 1287.104895][T23337] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000040
[ 1287.104938][T23337] R13: 0000200000000180 R14: 0000200000000380 R15: 00007ffc0fb425f8
[ 1287.105005][T23337]  </TASK>
[ 1287.105038][T23337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1287.105670][T23337] Kernel Offset: disabled