last executing test programs:

1m32.161007062s ago: executing program 3 (id=3973):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101500)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x5, 0x1e, 0xd})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xe0, 0x1ff, 0x9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xe5, 0x8, 0xff})
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000000)=0xff13)

1m32.134700848s ago: executing program 3 (id=3974):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto(r0, &(0x7f0000000180)='A', 0x1, 0x40000c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x10022, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1, &(0x7f0000000280)=[{0x4, 0x8, 0x4}], 0x1, 0x4, 0x22, 0x4, 0x0, 0x14})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2501000014001800008000756470"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x4000)=nil)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r10=>0x0], &(0x7f0000000640), 0x0, 0x1, 0x0, 0x0, r9})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], 0x0, r10, 0x0, '\x00', 0x1, 0x20})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000001b80)={0x48, 0x9, 0x0, 0x0, 0x9})

1m31.265766422s ago: executing program 3 (id=3977):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0xfff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0)
listen(r1, 0x5f)
setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x88d, 0x4)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000002880)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x2}, 0x4, 0x0, 0x27, 0x3, 0xd, 'syz0\x00', "16cd9fd2497c711b588b767151c8e5a4770e1a10adb609c8bf33990a29f3e223", "f210842f69c745c8321281d437c94b66e8103dc19895faef1d64be0c1a1fd0bd", [{0x1000, 0xfffd, {0x1, 0xfffffc00}}, {0x6, 0x0, {0x6, 0x5}}, {0x1, 0x5c8, {0x3, 0x6}}, {0x7, 0xef0, {0x0, 0x9}}, {0x9, 0x2, {0x2}}, {0x0, 0xa, {0x0, 0x4}}, {0x4, 0x9, {0x1, 0xffffffff}}, {0x3, 0x101, {0x3, 0x6e}}, {0x200, 0x1a3e, {0x2, 0x48}}, {0x3, 0x1ff, {0x2, 0x6}}, {0x5, 0xf8ad, {0x3, 0xe3}}, {0xa, 0x1, {0x0, 0x9}}, {0xa, 0x6, {0x3, 0x3}}, {0x45c, 0x8d, {0x3, 0x9}}, {0x785, 0x4, {0x0, 0x5}}, {0x4, 0x378, {0x1, 0xffffffff}}, {0x3, 0x9, {0x1, 0xfffffffe}}, {0xf2c, 0x7, {0x1, 0x2}}, {0x6, 0xd, {0x3, 0x2}}, {0x86, 0xb69, {0x2, 0x1}}, {0x6, 0x0, {0x0, 0x100}}, {0x101, 0x8, {0x3, 0x6}}, {0x8, 0x0, {0x1, 0x5}}, {0x8, 0x2, {0x3, 0x947}}, {0x6e30, 0x40, {0x1, 0x1000}}, {0x8, 0x8, {0x2}}, {0xb7, 0xffff, {0x3, 0x62c}}, {0x9, 0x45df, {0x1, 0x6}}, {0x3, 0x1, {0x0, 0xe}}, {0x4, 0x8, {0x1, 0x9}}, {0x2, 0x7, {0x2, 0x4}}, {0xbd79, 0x6, {0x2, 0x9}}, {0x327, 0x3, {0x3, 0x970b}}, {0x7, 0x1, {0x1, 0x2}}, {0x1ff, 0x5, {0x1, 0x4}}, {0x7, 0x2, {0x0, 0x8}}, {0x8, 0x3, {0x0, 0xb}}, {0xdcd4, 0x6, {0x3, 0x7}}, {0x6, 0x6, {0x0, 0x6}}, {0x5, 0x0, {0x2, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
landlock_create_ruleset(&(0x7f0000000080)={0x228c, 0x2, 0x3}, 0x18, 0x2)

1m30.340291345s ago: executing program 3 (id=3982):
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x88901)
r1 = fsopen(&(0x7f0000000240)='squashfs\x00', 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0x7ff, 0x2)
fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x3c}}, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9901)
r6 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
move_mount(r5, 0x0, r0, 0x0, 0x264)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})

1m28.388936302s ago: executing program 3 (id=3987):
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, 0x0)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000000)
sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0xc)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r6, &(0x7f0000000280)={0xd, 0xf7a, 0x100, 0x1ff, 0x8, 0x40, 0x7c, 0x8000})
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@getpolicy={0x144, 0x15, 0x2, 0x70bd2c, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x9, 0x4e24, 0xffff, 0x2, 0x0, 0x20, 0x0, r5, r6}, 0x6e6bba, 0x2}, [@proto={0x5, 0x19, 0x6c}, @replay_thresh={0x8, 0xb, 0xff6}, @sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in=@private=0xa010100, 0x4e24, 0x0, 0x4e23, 0x2, 0xa, 0x0, 0x80, 0x2b, 0x0, r7}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, @in6=@empty, {0x99a, 0x0, 0x8, 0x2, 0xf, 0x5, 0x6, 0x5}, {0x2, 0x1, 0x7, 0x7}, {0x777e, 0x80000001, 0x7}, 0x70bd2b, 0x34ff, 0xa, 0x3, 0x6}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000000c0)={0x1ff, "56b4359c3245d1c42317afad7d48ed51000000000000000100", <r9=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x1})

1m27.236909532s ago: executing program 3 (id=3992):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000010040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf76e08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd, 0x189280)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
setresuid(0xee01, r3, r3)
fchown(r2, r3, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff) (async)
lchown(&(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)

1m12.231035593s ago: executing program 32 (id=3992):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000010040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf76e08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd, 0x189280)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
setresuid(0xee01, r3, r3)
fchown(r2, r3, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff) (async)
lchown(&(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)

19.033815785s ago: executing program 0 (id=4263):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) (async)
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$inet_int(r0, 0x6a, 0x5, 0x0, 0x0) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) (async, rerun: 64)
r2 = socket$inet(0x2, 0x1, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) (async)
sendto(r1, 0x0, 0x0, 0x4008044, 0x0, 0x0)
r3 = syz_usb_connect(0x7, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904028f978fd1213db11b3e6798dd358578edbc3b9ac3"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002400010027bd70000000000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x8008)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="832c", 0x2}], 0x1}, 0x49cf75490397e68f) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8905, 0x0) (async)
flock(r0, 0xf)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x1}, 0x0, 0x0})

18.828843515s ago: executing program 0 (id=4264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17.731037346s ago: executing program 0 (id=4275):
r0 = socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x894a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, '\x00'})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109280, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xe)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
r4 = dup(r3)
r5 = memfd_secret(0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
socketpair(0x1e, 0x6, 0x0, &(0x7f0000001800)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$loop(&(0x7f0000001840), 0xffffffffffffffff, 0x0)
r9 = getpgid(0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000001980)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0, {0x0, <r11=>0xee01}}, './file0\x00'})
setpgid(0x0, 0x0)
setpgid(0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003f00)={{{@in6=@private1, @in6}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000004000)=0xe8)
getgroups(0x4, &(0x7f0000004040)=[0x0, 0xee00, 0x0, 0x0])
sendmmsg$unix(r5, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="2a8dc711f7b8a763dfdbb15278a0de558ca8c2e5882c6f46e4a4c458ca0e008ad0fba2fd4707ea16f46852d6047725b2198ecd4cbbd61b715c75f8eabd51425bfc4770d6cb1d2387647fef0a8f895c699594d676e3227456b0f866b1b887e595c1197ed6d31750c0101c2754c341d8", 0x6f}], 0x1, &(0x7f0000000380)}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)="b2aa7e09be042e35a5f0ebc455", 0xd}, {&(0x7f0000000480)="78ed4a19d4095052c5ebf6f416135e209f7fcf4a7b5105a17cf9cc38782686c25a9fade1a327e44ea8fdcc3092b3448c03d4e8cd7cf2af8a61b78bb17c13daa752ac0883f657e05d098193a59637558a038fc3095b454ca82241e96b3e4df6b08c46273d9a1a0e72ae036feb40d4d4feb57d7cceca8ebdae9110c6e624440672e3f281adf046beaff06bb97c283299edf4e5dcdfae99db8c2550a2d1558450fc0b930bf9af9c7f51821a0520a778b7c1a5aceea60905114f68acf272", 0xbc}, {&(0x7f0000000540)="3e7d59dad51de7ba68e6250376c1abdae4a93c84443117bc838db572", 0x1c}], 0x3, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r4, r1, r1, r0, 0xffffffffffffffff, r2]}}], 0x40, 0x4400}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000680)="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", 0x800}, {0x0}, {&(0x7f0000001700)="e0dfa005b29e6401221923e23fa0e6a327a1292fcdcf3c0136a01f4ba1f69646bcd7925a98fd4ceae85ef2fed34c6a8745023675dc6ac4b6edeeb45c07b93a51f65648c2584c2d24409a25f9ce80ab5ef20793979d40075857383ce172437efcb6887cf404af48ba3b1876dfe7699f8ac70138eea2e1e56c5a7923b842208703f44e8917cca4a6ec5f541d8006a62f2586c21fbb45333e10a0b50719fbe86f801b3d52befd32bcd8cffa8cfbc2d3967ac316ec0c42", 0xb5}], 0x3, &(0x7f0000001a00)=[@rights={{0x28, 0x1, 0x1, [r1, r6, r7, r2, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x48, 0x1}}], 0x3, 0x20000000)
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000042c0)={@un=@file={0x0, './file0\x00'}, {&(0x7f00000041c0)=""/163, 0xa3}, &(0x7f0000004280), 0x18}, 0xa0)
close_range(r0, 0xffffffffffffffff, 0x0)

17.575121751s ago: executing program 0 (id=4269):
inotify_init()
r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5206, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000640)=<r3=>0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
umount2(0x0, 0x1b)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001035121082400001020301090260006b010390050904000000010100000a240100000a000201020904010000010200000904010101010200000905010002dc0a072501080e060009040200000102000009040201010102000009058209400001040807250108050000"], 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000180)=0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = timerfd_create(0x0, 0x800)
timerfd_settime(r6, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdff2, 0x80000000000000, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc})
timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f00000001c0)={0x3e, &(0x7f00000000c0)=[{0x3d, '\x00', @st={0x4, [{0x0, @svalue=0x6000000000000000}, {0x0, @uvalue=0xfffffffffffffffd}, {0x3, @uvalue=0x40}, {0x2, @svalue=0xeb}]}}]})
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x71, 0x100000}, 0x20)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000002c0)={<r9=>0x0, 0xad86, 0x0, [0x100000000, 0x0, 0x4, 0x7], [0x9, 0x4000000000, 0x9ab, 0x6, 0xe, 0x3, 0xfffffffffffffffc, 0x2f, 0x2, 0x5, 0x7, 0x0, 0xbeef, 0x7, 0x3, 0x7, 0x4, 0x3, 0x10001, 0x5, 0x2, 0x7, 0x4, 0x277, 0x0, 0x3, 0x8, 0x5, 0x8, 0x0, 0x7, 0xb, 0x9, 0x2, 0x7e, 0x7, 0x80000000, 0x6, 0x8000000000000000, 0x1ff, 0x20000000000000, 0x1, 0x2, 0x9, 0x8, 0xff, 0x4, 0x3, 0x2, 0x9, 0x2, 0x3, 0xee, 0xffffffffffffff85, 0x2, 0x3b2, 0x0, 0x7ff, 0x4, 0xff, 0x7, 0x101, 0x7, 0x401, 0x4, 0xb3, 0x5, 0x0, 0x400, 0x7, 0x5, 0x4a0, 0x9e1, 0x5, 0x66, 0x7ff, 0x3ff, 0x10, 0x9, 0x6, 0x6, 0x3, 0x3, 0x8, 0x7, 0x94, 0x0, 0x7, 0x100000000, 0x2, 0x1000, 0x7f91, 0x8, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x6, 0x8, 0x2, 0x80, 0x1, 0x4, 0x9, 0x6, 0x9, 0x5, 0x3, 0xe, 0x9, 0xffffffffffffffff, 0x8, 0x428f, 0x8000, 0x4, 0x8, 0x81, 0x8000000000000001, 0x6, 0x4764, 0x99]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={r9, 0xff, 0x7, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})

15.925646243s ago: executing program 0 (id=4279):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x10)

15.221526417s ago: executing program 0 (id=4283):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x1e00)

10.902109629s ago: executing program 4 (id=4305):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x83, {0x83, 0xf, "71dcc2803f7562bba21ef1617e67d11627228e963f7d9cfb549ee259a13cc42f7f69e2c3d261554b9f87ca886387d405366f91e2ef346c017af046891366a0d9a7fc2b3fbfd2742de2c463e5d5c805441ba2562badfd7ac65409b980ec18dc7bff71e0cda019badf22263aca063ae7795f0609519c1e6fb5ee258ed382e211102f"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x20, 0xe, 0xa3, "83068cabe4d4d4fa8af498d2d46af78cab9200cb9a6adbe963cfc780066eee971ec488cb4f4f245b3a50f28854a1f145f8551297edf4ec645a8e39cc8c35ca388557670090ba76dc140afda4f675f0f129424f8b6a917ae3069a4e0722b5674817b1ce5f717cb8d664e1e72a3f28764352d6dfb38b0e1e87343915d3b1173ec4e530483614d9f9ce91952a7196ff3afcc1ed62bd944768a41513a0e5195ea45b41ceda"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000780)={0x20, 0x81, 0x3, "5a00af"}, &(0x7f0000000100)={0x20, 0x82, 0x3, "2035d9"}, &(0x7f0000000800)={0x20, 0x83, 0x3, '=ed'}, &(0x7f0000000840)={0x20, 0x84, 0x2, "94a5"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "ee07c1"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0xa87a039edec9d809, 0x5, 0xd4, {0xd4, 0x23, "460f84e3e83d6a46984558900eba66870ec27e1a69d2ba07170e6d65b14cf5e48befded0b60ebf414a520e5fb571999f59c51693dc71c1fb566115ee80226e3e69249b052faf5c51b2de4388ee7aa9ca234c6687fe6d8c0eda42aff31a82b9f6c0e2c3a7fb1fd5219c4950a2fd2113de81111189afe71f15a9eea69d143f9dec763b9b60fac7ff8636c5ce38fb43296aadb2e0dfe0eee099b7ca136d72150db2a60edb167493828beb1f11dc82f07c6f03faaaa4367bfc05ea70d4233556146fd16163c56457f2d9d9ef40230d1a4d392855"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x20, 0xc, 0x48, "f52ba44c1b7ae08b123ae745181b1d27b14f83634d855f80d39c1c4ff62593dba47b18b5966865b507bd4b2766b91015bfca619c704feae27600c3a88c15e144612b7a01adf10c93"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0xc, 0x4, 0xba, 0x6a2, 0x401, 0x2, 0xfc01, 0x7fffffff, 0x4, 0x4, 0x3, 0x9}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000c40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000cc0)={0x20, 0x89, 0x2}})
syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x0, 0x9, 0xe1, {0xe1, 0x31, "84edeee8ecfcf3da2f2081e0e06d21d60f446bf3302d0a84b5aa0cf0bb267c83619791ed362d934029ad6db4c574b35782bb2f28883202d39b37bf8ffc62963d30792f842fbb6823d4f1a30ecc1976fe1aa95f62c9491313d1f1e77a13e219cd58d689b7f7a397cb4319cd7b110907847d791f1540a92f863d426e99cb2b0b72251cd8801a470f77b0234d7bd5bf141ad43753c5d1d85add90ee8c22ea3c050fb1f6fa7078c6cc2d4efc5a08380ba877bf6076345ff586816a2df29cae638b4f653a11e415587695933cb58221c73fe7b7ad08e2a76e07943118623ea7230a"}}, &(0x7f0000000300)={0x0, 0x3, 0x43, @string={0x43, 0x3, "24ab30dd12b80958bbb9035106e156562ee4ca5a4c455759029c7fee46aa0e4ff6d53ce17607dce4b567d97f8f0cdd17bef14f6daec25627b2b7cf1e3c5b937a2c"}}}, &(0x7f00000007c0)={0x34, &(0x7f00000003c0)={0x0, 0x1, 0xa3, "dd1fe58dcb5b3711096f179001b748c10d3e71d856d13494063be4b543185632b65a38d2cc5a4573294c5f150898100b40b2c31b630fd3326a144e83d950e871cfdcbd5cf4c147396019202a5f55e1066ab7f2b23214bec3a0439aa9e57aa477d14d5eedb3d17ba40c6a8f8d903b74713041e08401e3827d78c8783272c3e023f2bf37fb3ceda0728615bc044ed5300e1b91216b4b11325779cd499f71d01c6b01137e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0xa, {0x8, "3cb0201407e9ce06"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7f}})

8.959139794s ago: executing program 2 (id=4312):
syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e"], 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0)
write(r1, &(0x7f0000000440)="79e711e9b8bb084604043fb37a22d9bd426140e9f91eba2264a7bcac2a7e5a0c75", 0x21)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0x6, "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", 0x0, 0x1, 0x4e, 0xd, 0x7, 0x5, 0x41}}}, 0x120)

7.663272412s ago: executing program 4 (id=4313):
pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffe6b, 0xb, 0x7, 0x3, 0x8, 0x5, 0x1, 0x918}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffffffffffd, 0xf, 0x3, 0xfffffffffffffffe, 0xe, 0x401}, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x40, 0x0, 0x2729, 0x7ff, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8})
futex(&(0x7f0000000180)=0x1, 0x2, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x1)
r0 = gettid()
nanosleep(&(0x7f0000000240)={0x77359400}, &(0x7f0000000280))
clock_getres(0x7, &(0x7f00000002c0))
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000300)=""/37, 0x25, 0x2, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="fd2071d3b038bd56c971a3c36660be369034781b15b97ee717cd0598329c22285b787aaa118ee75f8b9a224e6023471fe9c7b5b4272601969d42fdd84924541a22011c36", 0x44}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="8cbfe2991548f195a3480d7b5e7cba5acd10444d55e4f6075f51e82f090044f45c1c6fe9c40ab19c6df066f8be988d3c37383051ca0e3632", 0x38}], 0x3, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}, 0x4c091)
move_pages(r0, 0x8, &(0x7f0000000680)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff0000/0xc000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x6)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x80000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2000000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}, {@posixacl}, {@cache_fscache}, {@posixacl}, {@cache_loose}], [{@measure}]}})
rt_sigprocmask(0x0, &(0x7f0000000840)={[0xffffffffffffffff]}, &(0x7f0000000880), 0x8)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r3, 0x50589000)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f00000008c0)={0xdf, 0x0, 0x1000})
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000940)=@ccm_128={{0x303}, "35d550522bc0d0ed", "0883b717ba2137f619ab9eb158dcb8ae", "cbd921f1", "e70222ee1181a8da"}, 0x28)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000980)={0x6, [[0x7, 0x4, 0xfffffffa, 0x0, 0x36b0, 0x7f0000, 0x7, 0x5], [0x7ff, 0xfffffffe, 0x4, 0xfff, 0x3ec8, 0xb, 0x2, 0xfffffff3], [0x7, 0x7, 0x8, 0x5, 0x0, 0x7, 0x400, 0x7ff]], '\x00', [{0x3, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x81, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x7ff, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x0, 0x1}, {0x35, 0x3ba5, 0x1, 0x0, 0x1}, {0x7ff, 0x8e6c, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xc1, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x1, 0x1}, {0x0, 0x100, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xca0, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x100})
sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newae={0x48, 0x1e, 0x100, 0x70bd27, 0x25dfdbfc, {{@in=@remote, 0x4d2, 0x2, 0xff}, @in6=@mcast1, 0x5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008}, 0x4040)
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000d40), &(0x7f0000000d80)=0x8)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000dc0))
rt_sigprocmask(0x2, &(0x7f0000000e00)={[0x9]}, &(0x7f0000000e40), 0x8)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r3)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xac, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040}, 0x20000804)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000010c0)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001140)={'syztnl2\x00', &(0x7f0000001100)={'gretap0\x00', <r7=>0x0, 0x7, 0x20, 0x7, 0x7, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x66, 0x0, 0xa, 0x29, 0x0, @multicast1, @remote, {[@end]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x90, r5, 0xa1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x9}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/comedi0\x00', 0x2002, 0x0)
ioctl$COMEDI_SETRSUBD(r8, 0x6410)

7.456808963s ago: executing program 2 (id=4314):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x1})

6.664772916s ago: executing program 4 (id=4316):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="200f1100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES16], 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev(r1, &(0x7f0000000a00), 0x1046, 0x1000, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getpgid(r4)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f00000003c0))
syz_clone3(&(0x7f0000002200)={0x80000400, &(0x7f0000000000), &(0x7f0000000080)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0, {0xf}, &(0x7f0000000100)=""/21, 0x15, &(0x7f0000000140)=""/134, &(0x7f00000021c0)=[r2, 0xffffffffffffffff, 0x0, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0xb}, 0x58)
r9 = syz_open_dev$video(&(0x7f0000002280), 0x108, 0x0)
ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f0000000040)={0xdb, 0x2, "401fdd01667cd50d33dc5fa31cad5d9bf18ebc2aefb85d57", {0x4}})
ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x0, 0x7, 0x0, r7})
prctl$PR_SET_PTRACER(0x59616d61, r8)

6.0450561s ago: executing program 2 (id=4317):
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
read$fb(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r3)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000018007b20e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010040730d7a5025ccca262f3db00f6b8280ffffffff000000005ce3099ad8ffd58384c627f7067d9433c31f6fd3acbde1cace81ed0b7fece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, &(0x7f0000000040)=0x1000)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x6a8, 0x0, 0x7}]})

5.883650243s ago: executing program 2 (id=4318):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
timer_create(0x2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x1, 0xd, 0x5, 0xfe, 0x0, 0xfeff, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
migrate_pages(0x0, 0x9, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x45, 0x4, 0x6, 0x7, 0x0, 0x81})

5.376910812s ago: executing program 4 (id=4321):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x83, {0x83, 0xf, "71dcc2803f7562bba21ef1617e67d11627228e963f7d9cfb549ee259a13cc42f7f69e2c3d261554b9f87ca886387d405366f91e2ef346c017af046891366a0d9a7fc2b3fbfd2742de2c463e5d5c805441ba2562badfd7ac65409b980ec18dc7bff71e0cda019badf22263aca063ae7795f0609519c1e6fb5ee258ed382e211102f"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x20, 0xe, 0xa3, "83068cabe4d4d4fa8af498d2d46af78cab9200cb9a6adbe963cfc780066eee971ec488cb4f4f245b3a50f28854a1f145f8551297edf4ec645a8e39cc8c35ca388557670090ba76dc140afda4f675f0f129424f8b6a917ae3069a4e0722b5674817b1ce5f717cb8d664e1e72a3f28764352d6dfb38b0e1e87343915d3b1173ec4e530483614d9f9ce91952a7196ff3afcc1ed62bd944768a41513a0e5195ea45b41ceda"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000780)={0x20, 0x81, 0x3, "5a00af"}, &(0x7f0000000100)={0x20, 0x82, 0x3, "2035d9"}, &(0x7f0000000800)={0x20, 0x83, 0x3, '=ed'}, &(0x7f0000000840)={0x20, 0x84, 0x2, "94a5"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "ee07c1"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0xa87a039edec9d809, 0x5, 0xd4, {0xd4, 0x23, "460f84e3e83d6a46984558900eba66870ec27e1a69d2ba07170e6d65b14cf5e48befded0b60ebf414a520e5fb571999f59c51693dc71c1fb566115ee80226e3e69249b052faf5c51b2de4388ee7aa9ca234c6687fe6d8c0eda42aff31a82b9f6c0e2c3a7fb1fd5219c4950a2fd2113de81111189afe71f15a9eea69d143f9dec763b9b60fac7ff8636c5ce38fb43296aadb2e0dfe0eee099b7ca136d72150db2a60edb167493828beb1f11dc82f07c6f03faaaa4367bfc05ea70d4233556146fd16163c56457f2d9d9ef40230d1a4d392855"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x20, 0xc, 0x48, "f52ba44c1b7ae08b123ae745181b1d27b14f83634d855f80d39c1c4ff62593dba47b18b5966865b507bd4b2766b91015bfca619c704feae27600c3a88c15e144612b7a01adf10c93"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0xc, 0x4, 0xba, 0x6a2, 0x401, 0x2, 0xfc01, 0x7fffffff, 0x4, 0x4, 0x3, 0x9}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000c40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000cc0)={0x20, 0x89, 0x2}})
syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x0, 0x9, 0xe1, {0xe1, 0x31, "84edeee8ecfcf3da2f2081e0e06d21d60f446bf3302d0a84b5aa0cf0bb267c83619791ed362d934029ad6db4c574b35782bb2f28883202d39b37bf8ffc62963d30792f842fbb6823d4f1a30ecc1976fe1aa95f62c9491313d1f1e77a13e219cd58d689b7f7a397cb4319cd7b110907847d791f1540a92f863d426e99cb2b0b72251cd8801a470f77b0234d7bd5bf141ad43753c5d1d85add90ee8c22ea3c050fb1f6fa7078c6cc2d4efc5a08380ba877bf6076345ff586816a2df29cae638b4f653a11e415587695933cb58221c73fe7b7ad08e2a76e07943118623ea7230a"}}, &(0x7f0000000300)={0x0, 0x3, 0x43, @string={0x43, 0x3, "24ab30dd12b80958bbb9035106e156562ee4ca5a4c455759029c7fee46aa0e4ff6d53ce17607dce4b567d97f8f0cdd17bef14f6daec25627b2b7cf1e3c5b937a2c"}}}, &(0x7f00000007c0)={0x34, &(0x7f00000003c0)={0x0, 0x1, 0xa3, "dd1fe58dcb5b3711096f179001b748c10d3e71d856d13494063be4b543185632b65a38d2cc5a4573294c5f150898100b40b2c31b630fd3326a144e83d950e871cfdcbd5cf4c147396019202a5f55e1066ab7f2b23214bec3a0439aa9e57aa477d14d5eedb3d17ba40c6a8f8d903b74713041e08401e3827d78c8783272c3e023f2bf37fb3ceda0728615bc044ed5300e1b91216b4b11325779cd499f71d01c6b01137e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0xa, {0x8, "3cb0201407e9ce06"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7f}})

5.315579124s ago: executing program 2 (id=4322):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0908140002"], 0x44}, 0x1, 0x1000000}, 0x4008050)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
syz_usb_connect(0xf400, 0x24, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x33, 0x0, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0x15}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, 0x0}], 0x1, 0x14, &(0x7f0000000580)=[@dstype0={0x6, 0xc}], 0x1)

5.068838087s ago: executing program 1 (id=4325):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x1})

3.935044824s ago: executing program 1 (id=4326):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$vhost_msg(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x32, 0xa, 0x0, "b75c89e785a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x7, 0x1, 0x0, 0x7}]})
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={<r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0xfff}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={r4, 0x1, r5, 0xce})

3.673644967s ago: executing program 1 (id=4327):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c269906cb2173e0f01b20800000066ba4300ec660f3809edddee260f3566b8b2008ec0660f3881b2bb58c1120f0f9a0900000090f4", 0x36}], 0x1, 0x29, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00')
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 6)

3.408622929s ago: executing program 2 (id=4328):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$x25(r0, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1)
ioctl$FIBMAP(r4, 0x5385, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
lsm_list_modules(0x0, 0x0, 0x18)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]})
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000180)=0x8000002, 0x4)
socket$kcm(0x11, 0x2, 0x0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000100)=@can, 0x80, 0x0}, 0x20048015)
syz_usb_connect(0x0, 0x20f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201010212c82b10e1092151d172010203010902fd0101010110040904", @ANYRES64=r2, @ANYRES8=r2, @ANYRES64=r3, @ANYRESOCT=r1], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x1})
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r11, 0x29, 0x2d, 0x0, 0x88)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000200)=0x1, 0x4)

2.704747769s ago: executing program 1 (id=4329):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c269906cb2173e0f01b20800000066ba4300ec660f3809edddee66b8b2008ec0660f3881b2bb58c1120f0f9a0900000090f4", 0x33}], 0x1, 0x29, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x40000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00')
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.996055166s ago: executing program 4 (id=4330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000a00)={0x2, 0x1, 0xc, 0x2, 0x1b5, 0x0})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003200)=@vmx={0x77d08f10663bb12c, 0x0, 0x2080, {0xfec00000, 0x10000, {}, 0x1, 0x1}, {"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", "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"}})

916.761745ms ago: executing program 4 (id=4331):
syz_usb_connect(0x3, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100378e87220711f0633c02a010203010902510002030180050904df00004635340f0904190605fbdc42000905801000020606040904df9b"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000102505a1a440000102030109024e00010106f0000904000303020600080824060000ef5f7905240002000d240f010a0000004c020a000208241c80000a050008241c9d0e0308000905820220000609000905030210000c07e3"], &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x50, 0x51, 0x19, 0xff, 0x1}, 0xdb, &(0x7f0000000100)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x3, "248c0bee64f718ff0b8318943a78e3558037ff5b9ed504704b0e0eec80557953b604160217e365781b0bdba76694ac9e23fda74b0ae035c1b7dce33730e049034688942fccb5b691f33d42d386ec996547f590c0378ffa11e4a7dba81663290abab725f4970142cd14f94b3e4fcb2d6edca0512ff0e55aa6b8ad957447d8f1ed749b31db0b9ad9def8ea756cb6a153efabc6d21bef3109262ccfb42bfc0684dda7a0d8178a98fffd876967ac9a048132ec14c81db96338f9e3728c3386bcc5c5694bb656ce2c2902118c254e1d67b6f9254887"}]}, 0x2, [{0x12, &(0x7f0000000200)=@string={0x12, 0x3, "0439db30a64397591f523fbdd9697232"}}, {0x82, &(0x7f0000000240)=@string={0x82, 0x3, "e4a948348f16ac02477ba622313759257457c73bdde3ff69e53f69f8112270a782545d3b32dfe2c9eb0ec208319dd2a634a3e8325ce1c2cef3ce4ba3250b3c81f5f598e4d7780629a233e93597cdfaef9555e0d41157bcbe72d82c17dc270aed48160db0c173aea19a6409af7ba75c44a71cf7b59952a925d5649de24300f7e4"}}]})

191.747953ms ago: executing program 1 (id=4332):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0xffffffed, 0x6fa, 0x300e, 0x0, 0xc, 0x7, 0x1, 0x4}})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

0s ago: executing program 1 (id=4333):
mlockall(0x6) (async)
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) (async)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
mlockall(0x0) (async)
prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
r3 = socket(0x2b, 0x1, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) (async)
syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r3, {0x4}}, './file0\x00'})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=<r6=>0xffffffffffffffff) (async)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) (async)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000180)={0x40000000, 0x3, 0x2, 0x6, 0x0, [0x1, 0x2, 0x3, 0xfffffffa]}) (async)
listen(r3, 0x0) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0x0) (async)
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0xf) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@flushpolicy={0x310, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@algo_crypt={0x50, 0x2, {{'cbc(aes)\x00'}, 0x40, "1d9ff9098b69d3e4"}}, @etimer_thresh={0x8, 0xc, 0x148}, @sec_ctx={0x2b, 0x8, {0x27, 0x8, 0x0, 0x7, 0x1f, "20caa23fbfc677ff3d967fc7b00ae0e1609024785cf3312b01eafd7ee024fd"}}, @lifetime_val={0x24, 0x9, {0x40, 0xe6, 0x9e, 0x4}}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d4, 0xff}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x3, 0x5e, 0x4, 0x1d, 0x7e63}, {{@in6=@private1, 0x4d2, 0x2b}, 0x2, @in6=@private1, 0x0, 0x2, 0x1, 0xd, 0x1, 0x3, 0xfffffaf9}, {{@in6=@local, 0x4d4, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x2, 0x1, 0x6, 0x1, 0x800, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in6=@private0, 0x3501, 0x2, 0x3, 0xc9, 0x800, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d4, 0xa1}, 0xa, @in=@private=0xa010102, 0x3501, 0x0, 0x3, 0x3, 0x3, 0x106, 0x6}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3505, 0x0, 0x2, 0x9, 0x10001, 0x8000}]}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010102}, @lifetime_val={0x24, 0x9, {0x7fffffff, 0x7, 0x1, 0x8}}, @algo_auth={0x99, 0x1, {{'sha512-generic\x00'}, 0x288, "557a0194d1cf11b520c719a15f4929e7d30f30b5ecdbfbe27b3ae261c30a3b276865cc52c0b24dd11ef180fa4d55bb0da011fbbc6207e1cd5b454738e192f15f1cc51997eedc81b6c0cc01eaad6ef61a8f"}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4000044}, 0x80) (async)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000200)={0x8001, 0x0, 0x0, 0xa})
shmat(r0, &(0x7f0000fd6000/0x4000)=nil, 0x6000)

kernel console output (not intermixed with test programs):

81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  692.108210][ T5597] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  692.145976][ T5597] usb 2-1: USB disconnect, device number 62
[  693.012556][ T5596] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  693.161460][ T5596] usb 2-1: Using ep0 maxpacket: 16
[  693.163869][ T5596] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  693.163902][ T5596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.168322][ T5596] usb 2-1: config 0 descriptor??
[  693.176706][ T5596] gspca_main: sonixj-2.14.0 probing 0471:0327
[  693.984899][ T5596] gspca_sonixj: reg_r err -71
[  693.984959][ T5596] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  694.010576][ T5596] usb 2-1: USB disconnect, device number 63
[  694.621797][T29658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3999'.
[  694.871446][  T822] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  695.033329][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.033365][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.034491][  T822] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  695.034521][  T822] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  695.034542][  T822] usb 2-1: Manufacturer: syz
[  695.038660][  T822] usb 2-1: config 0 descriptor??
[  695.444026][  T822] usbhid 2-1:0.0: can't add hid device: -71
[  695.444153][  T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  695.470495][  T822] usb 2-1: USB disconnect, device number 64
[  697.451452][ T5804] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  697.554637][T29735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'.
[  697.602045][ T5804] usb 2-1: Using ep0 maxpacket: 32
[  697.603885][ T5804] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  697.603914][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.810292][ T5804] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  697.824476][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  697.825499][ T5804] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  697.825550][ T5804] usb 2-1: media controller created
[  697.865212][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  698.012664][ T5804] az6027: usb out operation failed. (-71)
[  698.014891][ T5804] az6027: usb out operation failed. (-71)
[  698.014909][ T5804] stb0899_attach: Driver disabled by Kconfig
[  698.014920][ T5804] az6027: no front-end attached
[  698.014920][ T5804] 
[  698.016459][ T5804] az6027: usb out operation failed. (-71)
[  698.016477][ T5804] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  698.075403][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67
[  698.080849][ T5804] dvb-usb: schedule remote query interval to 400 msecs.
[  698.080874][ T5804] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  698.113682][ T5804] usb 2-1: USB disconnect, device number 65
[  698.212844][ T5804] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  700.341603][  T822] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  700.491404][  T822] usb 2-1: Using ep0 maxpacket: 32
[  700.493097][  T822] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  700.493138][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.607776][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'.
[  700.608126][T29815] syz.2.4024 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  700.702889][  T822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  700.717748][  T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  700.720684][  T822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  700.720739][  T822] usb 2-1: media controller created
[  700.771192][  T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  700.905989][  T822] az6027: usb out operation failed. (-71)
[  700.906394][  T822] az6027: usb out operation failed. (-71)
[  700.906410][  T822] stb0899_attach: Driver disabled by Kconfig
[  700.906421][  T822] az6027: no front-end attached
[  700.906421][  T822] 
[  700.906804][  T822] az6027: usb out operation failed. (-71)
[  700.906819][  T822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  700.965762][  T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68
[  701.054624][  T822] dvb-usb: schedule remote query interval to 400 msecs.
[  701.054649][  T822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  701.077893][  T822] usb 2-1: USB disconnect, device number 66
[  701.234605][  T822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  701.479127][T29840] FAULT_INJECTION: forcing a failure.
[  701.479127][T29840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  701.479155][T29840] CPU: 0 UID: 0 PID: 29840 Comm: syz.2.4025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  701.479173][T29840] Tainted: [L]=SOFTLOCKUP
[  701.479177][T29840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  701.479185][T29840] Call Trace:
[  701.479190][T29840]  <TASK>
[  701.479196][T29840]  dump_stack_lvl+0xe8/0x150
[  701.479216][T29840]  should_fail_ex+0x46b/0x600
[  701.479234][T29840]  _copy_from_user+0x2d/0xb0
[  701.479254][T29840]  snd_info_text_entry_write+0x315/0x440
[  701.479275][T29840]  ? __pfx_snd_info_text_entry_write+0x10/0x10
[  701.479289][T29840]  proc_reg_write+0x1f6/0x2f0
[  701.479308][T29840]  vfs_writev+0x4c6/0x9a0
[  701.479322][T29840]  ? __pfx_proc_reg_write+0x10/0x10
[  701.479340][T29840]  ? __pfx_vfs_writev+0x10/0x10
[  701.479361][T29840]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  701.479381][T29840]  ? mutex_lock_nested+0x152/0x1d0
[  701.479396][T29840]  ? fdget_pos+0x252/0x320
[  701.479414][T29840]  do_writev+0x15a/0x2e0
[  701.479428][T29840]  ? __pfx_do_writev+0x10/0x10
[  701.479445][T29840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.479458][T29840]  do_syscall_64+0x15f/0xf80
[  701.479470][T29840]  ? trace_irq_disable+0x3b/0x140
[  701.479491][T29840]  ? clear_bhb_loop+0x40/0x90
[  701.479506][T29840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.479518][T29840] RIP: 0033:0x7fcb5e6cce59
[  701.479531][T29840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.479543][T29840] RSP: 002b:00007fcb5c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  701.479557][T29840] RAX: ffffffffffffffda RBX: 00007fcb5e945fa0 RCX: 00007fcb5e6cce59
[  701.479565][T29840] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003
[  701.479573][T29840] RBP: 00007fcb5c926090 R08: 0000000000000000 R09: 0000000000000000
[  701.479581][T29840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.479589][T29840] R13: 00007fcb5e946038 R14: 00007fcb5e945fa0 R15: 00007ffddb8adae8
[  701.479607][T29840]  </TASK>
[  701.479782][T29839] ALSA: mixer_oss: invalid OSS volume ''
[  702.613511][T29853] FAULT_INJECTION: forcing a failure.
[  702.613511][T29853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.613537][T29853] CPU: 1 UID: 0 PID: 29853 Comm: syz.1.4029 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  702.613554][T29853] Tainted: [L]=SOFTLOCKUP
[  702.613559][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  702.613566][T29853] Call Trace:
[  702.613572][T29853]  <TASK>
[  702.613577][T29853]  dump_stack_lvl+0xe8/0x150
[  702.613596][T29853]  should_fail_ex+0x46b/0x600
[  702.613615][T29853]  _copy_from_user+0x2d/0xb0
[  702.613634][T29853]  sg_write+0x3ee/0xf00
[  702.613653][T29853]  ? __pfx_sg_write+0x10/0x10
[  702.613669][T29853]  ? __pfx_aa_file_perm+0x10/0x10
[  702.613697][T29853]  ? rw_verify_area+0x25b/0x4e0
[  702.613713][T29853]  ? __pfx_sg_write+0x10/0x10
[  702.613727][T29853]  vfs_write+0x2a3/0xba0
[  702.613747][T29853]  ? __pfx_vfs_write+0x10/0x10
[  702.613764][T29853]  ? __fget_files+0x2a/0x420
[  702.613779][T29853]  ? __fget_files+0x2a/0x420
[  702.613792][T29853]  ? __fget_files+0x3a6/0x420
[  702.613806][T29853]  ? __fget_files+0x2a/0x420
[  702.613823][T29853]  ksys_write+0x156/0x270
[  702.613840][T29853]  ? __pfx_ksys_write+0x10/0x10
[  702.613860][T29853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.613874][T29853]  do_syscall_64+0x15f/0xf80
[  702.613886][T29853]  ? trace_irq_disable+0x3b/0x140
[  702.613904][T29853]  ? clear_bhb_loop+0x40/0x90
[  702.613920][T29853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.613932][T29853] RIP: 0033:0x7fa44972ce59
[  702.613944][T29853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.613955][T29853] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  702.613969][T29853] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  702.613979][T29853] RDX: 00000000000000b4 RSI: 0000200000000a00 RDI: 0000000000000004
[  702.613987][T29853] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  702.613995][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.614002][T29853] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  702.614019][T29853]  </TASK>
[  702.724950][T29855] sg_write: data in/out 429020/138 bytes for SCSI command 0x0-- guessing data in;
[  702.724950][T29855]    program syz.1.4030 not setting count and/or reply_len properly
[  702.876501][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'.
[  703.131467][  T822] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  703.293394][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.293431][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.294523][  T822] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  703.294558][  T822] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  703.294579][  T822] usb 2-1: Manufacturer: syz
[  703.298271][  T822] usb 2-1: config 0 descriptor??
[  704.306936][  T822] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #100: -71
[  704.306975][  T822] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71
[  704.306987][  T822] uclogic 0003:256C:006D.0033: failed probing pen v1 parameters: -71
[  704.307016][  T822] uclogic 0003:256C:006D.0033: failed probing parameters: -71
[  704.307077][  T822] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71
[  704.356124][  T822] usb 2-1: USB disconnect, device number 67
[  705.401474][ T5804] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  705.583134][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  705.583174][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  705.585466][ T5804] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  705.585495][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.585507][ T5804] usb 2-1: Product: syz
[  705.585517][ T5804] usb 2-1: Manufacturer: syz
[  705.585525][ T5804] usb 2-1: SerialNumber: syz
[  705.590028][ T5804] usb 2-1: config 0 descriptor??
[  705.601588][T29905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  705.686417][ T5804] mcba_usb 2-1:0.0 can0: couldn't setup read URBs
[  705.686434][ T5804] mcba_usb 2-1:0.0 can0: couldn't start device: -90
[  705.814498][ T5804] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90
[  705.822785][T29905] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.4035'.
[  706.072960][ T5596] usb 2-1: USB disconnect, device number 68
[  706.187123][   T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  706.239507][   T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  706.241386][   T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  706.243936][   T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  706.244973][   T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  706.336662][T29936] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4038'.
[  706.336692][T29936] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  706.915179][T29923] virt_wifi0 speed is unknown, defaulting to 1000
[  706.982864][T29974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'.
[  707.231407][ T5769] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  707.295036][T29923] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.295269][T29923] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.295429][T29923] bridge_slave_0: entered allmulticast mode
[  707.297322][T29923] bridge_slave_0: entered promiscuous mode
[  707.302118][T29923] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.302474][T29923] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.303071][T29923] bridge_slave_1: entered allmulticast mode
[  707.306264][T29923] bridge_slave_1: entered promiscuous mode
[  707.368669][T29923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  707.377595][T29923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.396437][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.396473][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.397653][ T5769] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  707.397682][ T5769] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  707.397704][ T5769] usb 2-1: Manufacturer: syz
[  707.459527][ T5769] usb 2-1: config 0 descriptor??
[  707.587916][T29923] team0: Port device team_slave_0 added
[  707.595872][T29923] team0: Port device team_slave_1 added
[  707.650635][T29923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.650654][T29923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.650679][T29923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.656098][T29923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.656113][T29923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.656140][T29923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.798184][T29923] hsr_slave_0: entered promiscuous mode
[  707.800080][T29923] hsr_slave_1: entered promiscuous mode
[  707.802164][T29923] debugfs: 'hsr0' already exists in 'hsr'
[  707.802188][T29923] Cannot create hsr debugfs directory
[  708.374299][   T61] Bluetooth: hci2: command tx timeout
[  708.486291][ T5769] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #100: -71
[  708.486363][ T5769] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71
[  708.486383][ T5769] uclogic 0003:256C:006D.0034: failed probing pen v1 parameters: -71
[  708.486434][ T5769] uclogic 0003:256C:006D.0034: failed probing parameters: -71
[  708.486541][ T5769] uclogic 0003:256C:006D.0034: probe with driver uclogic failed with error -71
[  708.547971][ T5769] usb 2-1: USB disconnect, device number 69
[  708.908200][T29923] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  708.926848][T30262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'.
[  708.945781][T29923] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  708.946732][T29923] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  709.000356][T29923] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  709.001911][T29923] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  709.060971][T29923] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  709.066199][T29923] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  709.107493][T29923] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  709.278095][T29923] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.332360][T29923] 8021q: adding VLAN 0 to HW filter on device team0
[  709.358004][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.358100][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.379435][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.379592][ T2421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.473768][ T5769] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  709.692848][ T5769] usb 2-1: Using ep0 maxpacket: 32
[  709.695254][ T5769] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  709.695284][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.923499][ T5769] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  709.963436][ T5769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  709.966955][ T5769] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  709.967011][ T5769] usb 2-1: media controller created
[  710.043383][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  710.169421][ T5769] az6027: usb out operation failed. (-71)
[  710.169838][ T5769] az6027: usb out operation failed. (-71)
[  710.169853][ T5769] stb0899_attach: Driver disabled by Kconfig
[  710.169864][ T5769] az6027: no front-end attached
[  710.169864][ T5769] 
[  710.170237][ T5769] az6027: usb out operation failed. (-71)
[  710.170251][ T5769] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  710.179911][ T5769] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69
[  710.186215][ T5769] dvb-usb: schedule remote query interval to 400 msecs.
[  710.186237][ T5769] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  710.191001][ T5769] usb 2-1: USB disconnect, device number 70
[  710.299003][T29923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  710.378631][ T5769] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  710.451463][   T61] Bluetooth: hci2: command tx timeout
[  710.739806][T29923] veth0_vlan: entered promiscuous mode
[  710.781332][T29923] veth1_vlan: entered promiscuous mode
[  710.925524][T29923] veth0_macvtap: entered promiscuous mode
[  710.963416][T30338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4056'.
[  710.996901][T29923] veth1_macvtap: entered promiscuous mode
[  711.053232][T29923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.087564][T29923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.119251][ T6361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  711.119579][ T6361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  711.119791][ T6361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  711.119829][ T6361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  711.149188][T30344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'.
[  711.475133][T30352] kvm: Disabled LAPIC found during irq injection
[  712.532538][   T61] Bluetooth: hci2: command tx timeout
[  712.664771][   T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  712.678563][ T2421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.678583][ T2421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.795126][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.795145][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.858957][   T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  712.858992][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.859013][   T10] usb 2-1: Product: syz
[  712.859028][   T10] usb 2-1: Manufacturer: syz
[  712.859042][   T10] usb 2-1: SerialNumber: syz
[  712.871890][   T10] usb 2-1: config 0 descriptor??
[  712.887796][   T10] gspca_main: sq905c-2.14.0 probing 2770:9052
[  713.277235][   T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  713.277259][   T10] sq905c 2-1:0.0: Reading version command failed
[  713.277340][   T10] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  713.294535][   T10] usb 2-1: USB disconnect, device number 71
[  714.071435][   T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  714.251486][   T10] usb 2-1: Using ep0 maxpacket: 32
[  714.254516][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  714.254545][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.449560][T30416] ALSA: mixer_oss: invalid OSS volume ''
[  714.491468][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  714.503313][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  714.509816][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  714.509872][   T10] usb 2-1: media controller created
[  714.565618][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  714.648091][T30422] FAULT_INJECTION: forcing a failure.
[  714.648091][T30422] name failslab, interval 1, probability 0, space 0, times 0
[  714.648119][T30422] CPU: 0 UID: 0 PID: 30422 Comm: syz.4.4065 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  714.648139][T30422] Tainted: [L]=SOFTLOCKUP
[  714.648144][T30422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  714.648151][T30422] Call Trace:
[  714.648156][T30422]  <TASK>
[  714.648162][T30422]  dump_stack_lvl+0xe8/0x150
[  714.648183][T30422]  should_fail_ex+0x46b/0x600
[  714.648220][T30422]  should_failslab+0xa8/0x100
[  714.648248][T30422]  __kmalloc_noprof+0xdf/0x7b0
[  714.648275][T30422]  ? tomoyo_encode+0x28b/0x550
[  714.648307][T30422]  tomoyo_encode+0x28b/0x550
[  714.648340][T30422]  tomoyo_realpath_from_path+0x58d/0x5d0
[  714.648365][T30422]  ? tomoyo_domain+0xd7/0x130
[  714.648380][T30422]  ? tomoyo_path_number_perm+0x219/0x630
[  714.648395][T30422]  tomoyo_path_number_perm+0x246/0x630
[  714.648412][T30422]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  714.648427][T30422]  ? __lock_acquire+0x6b5/0x2d10
[  714.648443][T30422]  ? do_raw_spin_lock+0x12b/0x2f0
[  714.648498][T30422]  ? __fget_files+0x2a/0x420
[  714.648534][T30422]  ? __fget_files+0x2a/0x420
[  714.648556][T30422]  ? __fget_files+0x3a6/0x420
[  714.648579][T30422]  ? __fget_files+0x2a/0x420
[  714.648598][T30422]  security_file_ioctl+0xc3/0x2a0
[  714.648615][T30422]  __se_sys_ioctl+0x47/0x170
[  714.648631][T30422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.648645][T30422]  do_syscall_64+0x15f/0xf80
[  714.648657][T30422]  ? trace_irq_disable+0x3b/0x140
[  714.648674][T30422]  ? clear_bhb_loop+0x40/0x90
[  714.648689][T30422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.648704][T30422] RIP: 0033:0x7fdb73cbce59
[  714.648718][T30422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.648729][T30422] RSP: 002b:00007fdb71f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  714.648772][T30422] RAX: ffffffffffffffda RBX: 00007fdb73f35fa0 RCX: 00007fdb73cbce59
[  714.648782][T30422] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  714.648789][T30422] RBP: 00007fdb71f16090 R08: 0000000000000000 R09: 0000000000000000
[  714.648797][T30422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.648805][T30422] R13: 00007fdb73f36038 R14: 00007fdb73f35fa0 R15: 00007ffd2beaf8e8
[  714.648827][T30422]  </TASK>
[  714.648900][T30422] ERROR: Out of memory at tomoyo_realpath_from_path.
[  714.738086][   T10] az6027: usb out operation failed. (-71)
[  714.741108][   T10] az6027: usb out operation failed. (-71)
[  714.741125][   T10] stb0899_attach: Driver disabled by Kconfig
[  714.741136][   T10] az6027: no front-end attached
[  714.741136][   T10] 
[  714.743907][   T10] az6027: usb out operation failed. (-71)
[  714.743926][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  714.767842][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70
[  714.786189][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  714.786211][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  714.808941][   T10] usb 2-1: USB disconnect, device number 72
[  715.010372][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  715.067116][T30452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'.
[  715.419254][T30468] FAULT_INJECTION: forcing a failure.
[  715.419254][T30468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.419290][T30468] CPU: 0 UID: 0 PID: 30468 Comm: syz.1.4070 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  715.419308][T30468] Tainted: [L]=SOFTLOCKUP
[  715.419312][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  715.419320][T30468] Call Trace:
[  715.419325][T30468]  <TASK>
[  715.419330][T30468]  dump_stack_lvl+0xe8/0x150
[  715.419348][T30468]  should_fail_ex+0x46b/0x600
[  715.419367][T30468]  _copy_from_user+0x2d/0xb0
[  715.419386][T30468]  video_usercopy+0x36f/0x1450
[  715.419407][T30468]  ? __pfx___video_do_ioctl+0x10/0x10
[  715.419426][T30468]  ? __pfx_video_usercopy+0x10/0x10
[  715.419447][T30468]  ? __fget_files+0x2a/0x420
[  715.419462][T30468]  ? __fget_files+0x2a/0x420
[  715.419475][T30468]  ? __fget_files+0x3a6/0x420
[  715.419491][T30468]  v4l2_ioctl+0x190/0x1e0
[  715.419507][T30468]  ? __pfx_v4l2_ioctl+0x10/0x10
[  715.419523][T30468]  __se_sys_ioctl+0xff/0x170
[  715.419540][T30468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.419552][T30468]  do_syscall_64+0x15f/0xf80
[  715.419563][T30468]  ? trace_irq_disable+0x3b/0x140
[  715.419580][T30468]  ? clear_bhb_loop+0x40/0x90
[  715.419594][T30468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.419606][T30468] RIP: 0033:0x7fa44972ce59
[  715.419619][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.419629][T30468] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  715.419643][T30468] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  715.419652][T30468] RDX: 0000200000000740 RSI: 00000000c0845657 RDI: 0000000000000003
[  715.419664][T30468] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  715.419673][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.419680][T30468] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  715.419697][T30468]  </TASK>
[  715.753009][T30475] netlink: 790 bytes leftover after parsing attributes in process `syz.2.4072'.
[  715.791452][T30371] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  715.895448][T30484] netlink: 'syz.4.4074': attribute type 5 has an invalid length.
[  715.895464][T30484] netlink: 'syz.4.4074': attribute type 9 has an invalid length.
[  715.960005][T30482] ALSA: mixer_oss: invalid OSS volume ';'
[  715.969914][T30371] usb 2-1: Using ep0 maxpacket: 32
[  715.973526][T30371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  715.994466][T30371] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  715.994499][T30371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.994521][T30371] usb 2-1: Product: syz
[  715.994538][T30371] usb 2-1: Manufacturer: syz
[  715.994554][T30371] usb 2-1: SerialNumber: syz
[  716.037856][T30371] usb 2-1: config 0 descriptor??
[  716.051655][T30371] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  716.244598][T30371] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  716.244739][T30371] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8
[  716.446864][ T5796] usb 2-1: USB disconnect, device number 73
[  716.453279][T30371] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  716.612077][T30371] usb 5-1: Using ep0 maxpacket: 16
[  716.613981][T30371] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  716.614010][T30371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.618744][T30371] usb 5-1: config 0 descriptor??
[  716.639427][T30371] gspca_main: sonixj-2.14.0 probing 0471:0327
[  717.282852][  T822] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  717.417073][   T61] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  717.417319][   T61] Bluetooth: hci2: Injecting HCI hardware error event
[  717.428280][ T5619] Bluetooth: hci2: hardware error 0x00
[  717.447079][T30371] gspca_sonixj: reg_r err -71
[  717.447170][T30371] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  717.453232][T30371] usb 5-1: USB disconnect, device number 2
[  717.471365][  T822] usb 2-1: Using ep0 maxpacket: 32
[  717.475705][  T822] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  717.498361][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.721196][  T822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  717.843552][  T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  717.855921][  T822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  717.855978][  T822] usb 2-1: media controller created
[  718.017623][  T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  718.069911][  T822] az6027: usb out operation failed. (-71)
[  718.071648][  T822] az6027: usb out operation failed. (-71)
[  718.071665][  T822] stb0899_attach: Driver disabled by Kconfig
[  718.071675][  T822] az6027: no front-end attached
[  718.071675][  T822] 
[  718.072060][  T822] az6027: usb out operation failed. (-71)
[  718.072073][  T822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  718.085220][  T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71
[  718.103599][  T822] dvb-usb: schedule remote query interval to 400 msecs.
[  718.103621][  T822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  718.111532][   T61] Bluetooth: hci2: unexpected event for opcode 0x0000
[  718.138330][  T822] usb 2-1: USB disconnect, device number 74
[  718.270617][T30562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'.
[  718.285201][  T822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  718.906037][T30581] overlayfs: workdir and upperdir must be separate subtrees
[  718.942431][T30581] fuse: Bad value for 'fd'
[  718.943617][T30581] fuse: Bad value for 'fd'
[  719.047732][T30581] kvm: Disabled LAPIC found during irq injection
[  719.068659][ T1007] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  719.068907][ T4975] Dev loop6: unable to read RDB block 1
[  719.068934][ T4975]  loop6: unable to read partition table
[  719.069145][ T4975] loop6: partition table beyond EOD, truncated
[  719.096303][ T2421] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  719.465151][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'.
[  719.974598][ T5619] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  720.051830][T30615] virt_wifi0 speed is unknown, defaulting to 1000
[  720.207192][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4092'.
[  720.486504][  T822] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  720.676324][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.676355][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.677729][  T822] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  720.677756][  T822] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  720.677768][  T822] usb 5-1: Manufacturer: syz
[  720.737058][  T822] usb 5-1: config 0 descriptor??
[  720.901419][  T821] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  721.053852][  T821] usb 2-1: unable to get BOS descriptor or descriptor too short
[  721.054449][  T821] usb 2-1: not running at top speed; connect to a high speed hub
[  721.055691][  T821] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  721.058861][  T821] usb 2-1: string descriptor 0 read error: -22
[  721.059015][  T821] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40
[  721.059042][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.148287][  T821] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  721.237290][  T821] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  721.322943][ T6031] usb 2-1: USB disconnect, device number 75
[  721.744961][  T822] uclogic 0003:256C:006D.0035: failed retrieving string descriptor #100: -71
[  721.745023][  T822] uclogic 0003:256C:006D.0035: failed retrieving pen parameters: -71
[  721.745042][  T822] uclogic 0003:256C:006D.0035: failed probing pen v1 parameters: -71
[  721.745092][  T822] uclogic 0003:256C:006D.0035: failed probing parameters: -71
[  721.745191][  T822] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71
[  721.797809][  T822] usb 5-1: USB disconnect, device number 3
[  722.622371][  T821] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  722.782443][  T821] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  722.782478][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.782491][  T821] usb 5-1: Product: syz
[  722.782500][  T821] usb 5-1: Manufacturer: syz
[  722.782509][  T821] usb 5-1: SerialNumber: syz
[  722.787791][  T821] usb 5-1: config 0 descriptor??
[  722.824184][  T821] gspca_main: sq905c-2.14.0 probing 2770:9052
[  723.037996][T30708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4097'.
[  723.241821][  T821] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  723.241843][  T821] sq905c 5-1:0.0: Reading version command failed
[  723.241923][  T821] sq905c 5-1:0.0: probe with driver sq905c failed with error -71
[  723.254943][  T821] usb 5-1: USB disconnect, device number 4
[  723.872306][T30750] netlink: 'syz.4.4103': attribute type 10 has an invalid length.
[  723.902413][T30750] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.919838][T30750] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.939128][T30750] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.939281][T30750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  723.939610][T30750] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.939772][T30750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.099411][T30750] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  724.632205][  T821] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  724.782097][  T821] usb 2-1: Using ep0 maxpacket: 32
[  724.785817][  T821] usb 2-1: unable to get BOS descriptor or descriptor too short
[  724.788640][  T821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.788665][  T821] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  724.788728][  T821] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  724.836314][  T821] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  724.836347][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.836368][  T821] usb 2-1: Product: syz
[  724.836383][  T821] usb 2-1: Manufacturer: syz
[  724.836399][  T821] usb 2-1: SerialNumber: syz
[  725.181819][  T821] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  725.182086][  T821] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  725.187428][  T821] usb 2-1: unit 37 not found!
[  725.187451][  T821] usb 2-1: unit 0 not found!
[  725.355170][  T821] usb 2-1: USB disconnect, device number 76
[  725.407419][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.720226][T30809] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4109'.
[  726.468067][T30752] syz.4.4103 (30752): drop_caches: 3
[  726.635990][T30824] netlink: 'syz.1.4113': attribute type 16 has an invalid length.
[  726.636013][T30824] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4113'.
[  726.662460][ T5614] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  726.662538][ T5614] dvb_usb_az6027 3-1:64.0: probe with driver dvb_usb_az6027 failed with error -2
[  726.681378][    T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  726.681455][    T9] dvb_usb_az6027 1-1:64.0: probe with driver dvb_usb_az6027 failed with error -110
[  726.689843][    T9] usb 1-1: USB disconnect, device number 28
[  726.771641][ T5614] usb 3-1: USB disconnect, device number 14
[  727.081421][ T5614] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  727.177660][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  727.233455][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.233491][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.233514][ T5614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  727.233540][ T5614] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  727.233554][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.360605][ T5614] usb 3-1: config 0 descriptor??
[  727.574272][    T9] usb 1-1: Using ep0 maxpacket: 32
[  727.649690][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  727.649731][    T9] usb 1-1: can't read configurations, error -71
[  727.813173][ T5614] hid_parser_main: 23 callbacks suppressed
[  727.813197][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813228][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813252][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813275][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813298][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813321][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813346][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813384][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813410][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.813434][ T5614] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[  727.938970][ T5614] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  727.960493][T30860] netlink: 'syz.1.4115': attribute type 1 has an invalid length.
[  727.960516][T30860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4115'.
[  728.178190][ T5614] usb 3-1: USB disconnect, device number 15
[  728.589099][T30869] fido_id[30869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  728.683759][T30892] netlink: 'syz.0.4118': attribute type 21 has an invalid length.
[  728.895472][T30901] efs: cannot read volume header
[  728.923547][T30908] netlink: 'syz.0.4121': attribute type 142 has an invalid length.
[  729.121334][ T5614] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  729.271427][ T5614] usb 5-1: Using ep0 maxpacket: 32
[  729.274821][ T5614] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  729.274850][ T5614] usb 5-1: config 0 has no interface number 0
[  729.274897][ T5614] usb 5-1: config 0 interface 184 has no altsetting 0
[  729.277300][ T5614] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  729.277388][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.277411][ T5614] usb 5-1: Product: syz
[  729.277428][ T5614] usb 5-1: Manufacturer: syz
[  729.277444][ T5614] usb 5-1: SerialNumber: syz
[  729.344271][ T5614] usb 5-1: config 0 descriptor??
[  729.651459][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  729.753375][T30903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.755207][T30903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.822414][    T9] usb 1-1: Using ep0 maxpacket: 32
[  729.829293][    T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  729.829325][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.958230][ T5614] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  729.958262][ T5614] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  730.049552][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  730.065684][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  730.068454][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  730.068511][    T9] usb 1-1: media controller created
[  730.106848][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.307131][    T9] az6027: usb out operation failed. (-71)
[  730.307542][    T9] az6027: usb out operation failed. (-71)
[  730.307557][    T9] stb0899_attach: Driver disabled by Kconfig
[  730.307567][    T9] az6027: no front-end attached
[  730.307567][    T9] 
[  730.307952][    T9] az6027: usb out operation failed. (-71)
[  730.307967][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  730.317136][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72
[  730.333394][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  730.333416][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  730.374702][    T9] usb 1-1: USB disconnect, device number 31
[  730.678888][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  730.774136][ T5614] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  730.774170][ T5614] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  730.774192][ T5614] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  730.774481][ T5614] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  731.134201][T30988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'.
[  731.134892][T30988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4129'.
[  731.271913][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  731.431365][    T9] usb 3-1: Using ep0 maxpacket: 16
[  731.433706][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  731.434890][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  731.434913][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  731.437727][    T9] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[  731.437757][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.437779][    T9] usb 3-1: Product: syz
[  731.437798][    T9] usb 3-1: Manufacturer: syz
[  731.437808][    T9] usb 3-1: SerialNumber: syz
[  731.491845][ T5614] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  731.666745][ T5614] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  731.666779][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.693291][ T5614] usb 2-1: config 0 descriptor??
[  731.697563][ T5614] ums-realtek 2-1:0.0: USB Mass Storage device detected
[  731.773757][    T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  731.777459][    T9] usb 3-1: USB disconnect, device number 16
[  731.887888][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  731.929854][  T822] usb 2-1: USB disconnect, device number 77
[  732.011053][T31029] FAULT_INJECTION: forcing a failure.
[  732.011053][T31029] name failslab, interval 1, probability 0, space 0, times 0
[  732.011089][T31029] CPU: 1 UID: 0 PID: 31029 Comm: syz.0.4133 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  732.011126][T31029] Tainted: [L]=SOFTLOCKUP
[  732.011134][T31029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  732.011146][T31029] Call Trace:
[  732.011155][T31029]  <TASK>
[  732.011165][T31029]  dump_stack_lvl+0xe8/0x150
[  732.011214][T31029]  should_fail_ex+0x46b/0x600
[  732.011244][T31029]  should_failslab+0xa8/0x100
[  732.011274][T31029]  __kmalloc_noprof+0xdf/0x7b0
[  732.011303][T31029]  ? tomoyo_encode+0x28b/0x550
[  732.011337][T31029]  tomoyo_encode+0x28b/0x550
[  732.011373][T31029]  tomoyo_realpath_from_path+0x58d/0x5d0
[  732.011406][T31029]  ? tomoyo_domain+0xd7/0x130
[  732.011432][T31029]  ? tomoyo_path_number_perm+0x219/0x630
[  732.011458][T31029]  tomoyo_path_number_perm+0x246/0x630
[  732.011487][T31029]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  732.011513][T31029]  ? __lock_acquire+0x6b5/0x2d10
[  732.011537][T31029]  ? do_raw_spin_lock+0x12b/0x2f0
[  732.011594][T31029]  ? __fget_files+0x2a/0x420
[  732.011621][T31029]  ? __fget_files+0x2a/0x420
[  732.011643][T31029]  ? __fget_files+0x3a6/0x420
[  732.011666][T31029]  ? __fget_files+0x2a/0x420
[  732.011694][T31029]  security_file_ioctl+0xc3/0x2a0
[  732.011723][T31029]  __se_sys_ioctl+0x47/0x170
[  732.011751][T31029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.011774][T31029]  do_syscall_64+0x15f/0xf80
[  732.011793][T31029]  ? trace_irq_disable+0x3b/0x140
[  732.011821][T31029]  ? clear_bhb_loop+0x40/0x90
[  732.011846][T31029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.011867][T31029] RIP: 0033:0x7f834872ce59
[  732.011887][T31029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.011905][T31029] RSP: 002b:00007f834697e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.011928][T31029] RAX: ffffffffffffffda RBX: 00007f83489a5fa0 RCX: 00007f834872ce59
[  732.011943][T31029] RDX: 00002000000000c0 RSI: 00000000c008ae88 RDI: 0000000000000005
[  732.011958][T31029] RBP: 00007f834697e090 R08: 0000000000000000 R09: 0000000000000000
[  732.011971][T31029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  732.011984][T31029] R13: 00007f83489a6038 R14: 00007f83489a5fa0 R15: 00007ffdfdc526a8
[  732.012016][T31029]  </TASK>
[  732.045165][   T10] usb 5-1: USB disconnect, device number 5
[  732.068632][T31029] ERROR: Out of memory at tomoyo_realpath_from_path.
[  732.661440][ T5796] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  732.811384][ T5796] usb 5-1: Using ep0 maxpacket: 32
[  732.813317][ T5796] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  732.813346][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.058384][ T5796] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  733.070043][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  733.080910][ T5796] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  733.080945][ T5796] usb 5-1: media controller created
[  733.115515][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  733.261421][ T5796] az6027: usb out operation failed. (-71)
[  733.261818][ T5796] az6027: usb out operation failed. (-71)
[  733.261832][ T5796] stb0899_attach: Driver disabled by Kconfig
[  733.261843][ T5796] az6027: no front-end attached
[  733.261843][ T5796] 
[  733.262213][ T5796] az6027: usb out operation failed. (-71)
[  733.262228][ T5796] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  733.270911][ T5796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73
[  733.367517][ T5796] dvb-usb: schedule remote query interval to 400 msecs.
[  733.367541][ T5796] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  733.400636][ T5796] usb 5-1: USB disconnect, device number 6
[  733.567800][ T5796] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  734.621331][ T5796] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  734.777728][ T5796] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2
[  734.777753][ T5796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  734.777770][ T5796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  734.779829][ T5796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  734.779859][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.779874][ T5796] usb 3-1: Product: syz
[  734.779882][ T5796] usb 3-1: Manufacturer: syz
[  734.779891][ T5796] usb 3-1: SerialNumber: syz
[  734.855773][ T5796] hub 3-1:1.0: bad descriptor, ignoring hub
[  734.855836][ T5796] hub 3-1:1.0: probe with driver hub failed with error -5
[  735.448767][T31059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  735.453914][T31117] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4142'.
[  735.560733][T31133] FAULT_INJECTION: forcing a failure.
[  735.560733][T31133] name failslab, interval 1, probability 0, space 0, times 0
[  735.560772][T31133] CPU: 1 UID: 0 PID: 31133 Comm: syz.1.4144 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  735.560800][T31133] Tainted: [L]=SOFTLOCKUP
[  735.560808][T31133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  735.560821][T31133] Call Trace:
[  735.560829][T31133]  <TASK>
[  735.560847][T31133]  dump_stack_lvl+0xe8/0x150
[  735.560878][T31133]  should_fail_ex+0x46b/0x600
[  735.560908][T31133]  should_failslab+0xa8/0x100
[  735.560940][T31133]  __kmalloc_noprof+0xdf/0x7b0
[  735.560967][T31133]  ? tomoyo_encode+0x28b/0x550
[  735.561002][T31133]  tomoyo_encode+0x28b/0x550
[  735.561038][T31133]  tomoyo_realpath_from_path+0x58d/0x5d0
[  735.561077][T31133]  ? tomoyo_path_number_perm+0x219/0x630
[  735.561104][T31133]  tomoyo_path_number_perm+0x246/0x630
[  735.561133][T31133]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  735.561158][T31133]  ? __lock_acquire+0x6b5/0x2d10
[  735.561224][T31133]  ? do_raw_spin_lock+0x12b/0x2f0
[  735.561286][T31133]  ? __fget_files+0x2a/0x420
[  735.561313][T31133]  ? __fget_files+0x2a/0x420
[  735.561335][T31133]  ? __fget_files+0x3a6/0x420
[  735.561357][T31133]  ? __fget_files+0x2a/0x420
[  735.561386][T31133]  security_file_ioctl+0xc3/0x2a0
[  735.561415][T31133]  __se_sys_ioctl+0x47/0x170
[  735.561444][T31133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.561468][T31133]  do_syscall_64+0x15f/0xf80
[  735.561488][T31133]  ? trace_irq_disable+0x3b/0x140
[  735.561515][T31133]  ? clear_bhb_loop+0x40/0x90
[  735.561539][T31133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.561561][T31133] RIP: 0033:0x7fa44972ce59
[  735.561581][T31133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.561599][T31133] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  735.561622][T31133] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  735.561637][T31133] RDX: 0000200000000200 RSI: 0000000000003b87 RDI: 0000000000000003
[  735.561651][T31133] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  735.561664][T31133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  735.561676][T31133] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  735.561709][T31133]  </TASK>
[  735.615607][T31133] ERROR: Out of memory at tomoyo_realpath_from_path.
[  736.131434][    T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  736.283563][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  736.284132][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  736.285451][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  736.285496][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[  736.288279][    T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  736.288297][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.288310][    T9] usb 5-1: Product: syz
[  736.288321][    T9] usb 5-1: Manufacturer: syz
[  736.288336][    T9] usb 5-1: SerialNumber: syz
[  736.547732][T31142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.549087][T31142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.728848][    T9] usb 5-1: USB disconnect, device number 7
[  736.847544][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  737.503118][  T821] usb 3-1: USB disconnect, device number 17
[  738.060947][T31221] Bluetooth: hci4: Frame reassembly failed (-84)
[  738.421343][  T822] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  738.576003][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  738.576038][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  738.577183][  T822] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  738.577212][  T822] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  738.577233][  T822] usb 5-1: Manufacturer: syz
[  738.628342][  T822] usb 5-1: config 0 descriptor??
[  739.054452][T31245] 9pnet_fd: Insufficient options for proto=fd
[  739.055856][T31245] sit0: entered promiscuous mode
[  739.066120][T31245] netlink: 'syz.1.4164': attribute type 1 has an invalid length.
[  739.066143][T31245] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4164'.
[  739.648548][  T822] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #100: -71
[  739.648611][  T822] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71
[  739.648630][  T822] uclogic 0003:256C:006D.0037: failed probing pen v1 parameters: -71
[  739.648699][  T822] uclogic 0003:256C:006D.0037: failed probing parameters: -71
[  739.648814][  T822] uclogic 0003:256C:006D.0037: probe with driver uclogic failed with error -71
[  739.709814][  T822] usb 5-1: USB disconnect, device number 8
[  739.869666][T31271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4168'.
[  740.131445][ T5619] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  740.131476][   T61] Bluetooth: hci4: command 0x1003 tx timeout
[  740.912206][T31308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'.
[  741.001357][    T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  741.153709][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  741.154280][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  741.156122][    T9] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  741.156156][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  741.197734][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40
[  741.197825][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.197855][    T9] usb 3-1: Product: syz
[  741.197871][    T9] usb 3-1: Manufacturer: syz
[  741.197887][    T9] usb 3-1: SerialNumber: syz
[  741.239894][T31297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  741.465188][T31297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.470500][T31297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.507846][    T9] usbhid 3-1:1.0: can't add hid device: -71
[  741.507966][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  741.529579][    T9] usb 3-1: USB disconnect, device number 18
[  742.023454][    T9] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  742.093080][  T822] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  742.188599][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  742.188635][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.188656][    T9] usb 2-1: Product: syz
[  742.188736][    T9] usb 2-1: Manufacturer: syz
[  742.188752][    T9] usb 2-1: SerialNumber: syz
[  742.225399][    T9] usb 2-1: config 0 descriptor??
[  742.243903][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.243992][  T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.245711][  T822] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  742.245740][  T822] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  742.245819][  T822] usb 5-1: Manufacturer: syz
[  742.359661][  T822] usb 5-1: config 0 descriptor??
[  742.439479][    T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  743.201359][ T5614] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  743.371403][ T5614] usb 1-1: Using ep0 maxpacket: 32
[  743.378762][ T5614] usb 1-1: unable to get BOS descriptor or descriptor too short
[  743.380316][ T5614] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  743.415609][ T5614] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  743.415643][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.415665][ T5614] usb 1-1: Product: syz
[  743.415680][ T5614] usb 1-1: Manufacturer: syz
[  743.415695][ T5614] usb 1-1: SerialNumber: syz
[  743.477755][  T822] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #100: -71
[  743.478214][  T822] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71
[  743.478236][  T822] uclogic 0003:256C:006D.0038: failed probing pen v1 parameters: -71
[  743.505082][  T822] uclogic 0003:256C:006D.0038: failed probing parameters: -71
[  743.505255][  T822] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71
[  743.542337][  T822] usb 5-1: USB disconnect, device number 9
[  743.694335][ T5614] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  743.697262][ T5614] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  743.697347][ T5614] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  743.835027][ T5614] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  743.862206][ T5614] usb 1-1: USB disconnect, device number 32
[  743.901648][T31336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.910101][T31336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.941800][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  743.965898][    T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  743.983080][    T9] usb 2-1: USB disconnect, device number 78
[  744.034869][T31425] FAULT_INJECTION: forcing a failure.
[  744.034869][T31425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.034906][T31425] CPU: 1 UID: 0 PID: 31425 Comm: syz.2.4188 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  744.034935][T31425] Tainted: [L]=SOFTLOCKUP
[  744.034943][T31425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.034956][T31425] Call Trace:
[  744.034964][T31425]  <TASK>
[  744.034973][T31425]  dump_stack_lvl+0xe8/0x150
[  744.035006][T31425]  should_fail_ex+0x46b/0x600
[  744.035037][T31425]  _copy_from_user+0x2d/0xb0
[  744.035069][T31425]  kvm_dev_ioctl_get_cpuid+0x174/0x7d0
[  744.035098][T31425]  ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10
[  744.035132][T31425]  kvm_arch_dev_ioctl+0x405/0x9e0
[  744.035157][T31425]  ? do_vfs_ioctl+0x117b/0x1540
[  744.035187][T31425]  ? __pfx_kvm_arch_dev_ioctl+0x10/0x10
[  744.035211][T31425]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  744.035270][T31425]  kvm_dev_ioctl+0x606/0x1610
[  744.035300][T31425]  ? __fget_files+0x2a/0x420
[  744.035327][T31425]  ? __fget_files+0x2a/0x420
[  744.035350][T31425]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  744.035376][T31425]  ? __fget_files+0x2a/0x420
[  744.035402][T31425]  ? bpf_lsm_file_ioctl+0x9/0x20
[  744.035425][T31425]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  744.035452][T31425]  __se_sys_ioctl+0xff/0x170
[  744.035480][T31425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.035504][T31425]  do_syscall_64+0x15f/0xf80
[  744.035524][T31425]  ? trace_irq_disable+0x3b/0x140
[  744.035553][T31425]  ? clear_bhb_loop+0x40/0x90
[  744.035578][T31425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.035599][T31425] RIP: 0033:0x7fcb5e6cce59
[  744.035619][T31425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.035639][T31425] RSP: 002b:00007fcb5c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.035661][T31425] RAX: ffffffffffffffda RBX: 00007fcb5e945fa0 RCX: 00007fcb5e6cce59
[  744.035677][T31425] RDX: 0000200000000500 RSI: 00000000c008ae09 RDI: 0000000000000004
[  744.035691][T31425] RBP: 00007fcb5c926090 R08: 0000000000000000 R09: 0000000000000000
[  744.035705][T31425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.035718][T31425] R13: 00007fcb5e946038 R14: 00007fcb5e945fa0 R15: 00007ffddb8adae8
[  744.035750][T31425]  </TASK>
[  744.411599][ T5796] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  744.521474][ T5614] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  744.565263][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short
[  744.566317][ T5796] usb 5-1: not running at top speed; connect to a high speed hub
[  744.568659][ T5796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  744.568724][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  744.568755][ T5796] usb 5-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30
[  744.568794][ T5796] usb 5-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170
[  744.568832][ T5796] usb 5-1: config 1 interface 1 has no altsetting 0
[  744.574815][ T5796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  744.574844][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  744.574866][ T5796] usb 5-1: Product: syz
[  744.574882][ T5796] usb 5-1: Manufacturer: syz
[  744.574897][ T5796] usb 5-1: SerialNumber: syz
[  744.589440][T31428] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  744.688570][ T5614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  744.688602][ T5614] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  744.688625][ T5614] usb 3-1: config 1 has no interface number 0
[  744.689043][ T5614] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  744.689076][ T5614] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  744.689103][ T5614] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  744.735470][ T5614] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  744.735503][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.735954][ T5614] usb 3-1: Product: syz
[  744.735971][ T5614] usb 3-1: Manufacturer: syz
[  744.735987][ T5614] usb 3-1: SerialNumber: syz
[  744.814008][T31435] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  745.045017][ T5614] cdc_ncm 3-1:1.1: bind() failure
[  745.166483][ T5614] usb 3-1: USB disconnect, device number 19
[  745.227844][T31470] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  745.269123][ T5796] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[  745.353499][ T5796] usb 5-1: USB disconnect, device number 10
[  745.621480][ T5596] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  745.735018][T31514] netlink: 'syz.4.4200': attribute type 21 has an invalid length.
[  745.735042][T31514] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4200'.
[  745.735138][T31514] netlink: 'syz.4.4200': attribute type 4 has an invalid length.
[  745.735147][T31514] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4200'.
[  745.762722][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  745.783805][ T5596] usb 2-1: unable to get BOS descriptor or descriptor too short
[  745.784360][ T5596] usb 2-1: not running at top speed; connect to a high speed hub
[  745.786470][ T5596] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  745.786494][ T5596] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  745.832992][ T5596] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  745.833025][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.833046][ T5596] usb 2-1: Product: syz
[  745.833060][ T5596] usb 2-1: Manufacturer: syz
[  745.833075][ T5596] usb 2-1: SerialNumber: syz
[  745.965484][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.965521][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.967146][    T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  745.967175][    T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  745.967197][    T9] usb 3-1: Manufacturer: syz
[  746.016038][    T9] usb 3-1: config 0 descriptor??
[  746.097591][ T5596] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3)
[  746.097625][ T5596] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  746.097645][ T5596] usb 2-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1
[  746.098625][ T5596] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3)
[  746.099408][ T5596] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3)
[  746.100134][ T5596] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3)
[  746.100910][ T5596] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[  746.107370][ T5596] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[  746.113828][ T5596] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3)
[  746.114882][ T5596] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3)
[  746.115811][ T5596] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[  746.241873][ T5596] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3)
[  746.386852][ T5596] usb 2-1: USB disconnect, device number 79
[  746.477402][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  746.787892][T31562] FAULT_INJECTION: forcing a failure.
[  746.787892][T31562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  746.787928][T31562] CPU: 1 UID: 0 PID: 31562 Comm: syz.4.4206 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  746.787957][T31562] Tainted: [L]=SOFTLOCKUP
[  746.787965][T31562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  746.787978][T31562] Call Trace:
[  746.787986][T31562]  <TASK>
[  746.787995][T31562]  dump_stack_lvl+0xe8/0x150
[  746.788026][T31562]  should_fail_ex+0x46b/0x600
[  746.788058][T31562]  _copy_to_user+0x31/0xb0
[  746.788090][T31562]  simple_read_from_buffer+0xe1/0x170
[  746.788120][T31562]  proc_fail_nth_read+0x1be/0x230
[  746.788148][T31562]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  746.788177][T31562]  ? rw_verify_area+0x2ac/0x4e0
[  746.788204][T31562]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  746.788231][T31562]  vfs_read+0x212/0xa80
[  746.788264][T31562]  ? __pfx_vfs_read+0x10/0x10
[  746.788295][T31562]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  746.788326][T31562]  ? lockdep_hardirqs_on+0x7a/0x110
[  746.788357][T31562]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  746.788386][T31562]  ? mutex_lock_nested+0x152/0x1d0
[  746.788410][T31562]  ? fdget_pos+0x252/0x320
[  746.788442][T31562]  ksys_read+0x156/0x270
[  746.788472][T31562]  ? __pfx_ksys_read+0x10/0x10
[  746.788506][T31562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.788528][T31562]  do_syscall_64+0x15f/0xf80
[  746.788547][T31562]  ? trace_irq_disable+0x3b/0x140
[  746.788578][T31562]  ? clear_bhb_loop+0x40/0x90
[  746.788612][T31562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.788633][T31562] RIP: 0033:0x7fdb73c7d68e
[  746.788652][T31562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  746.788669][T31562] RSP: 002b:00007fdb71f15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  746.788692][T31562] RAX: ffffffffffffffda RBX: 00007fdb71f166c0 RCX: 00007fdb73c7d68e
[  746.788708][T31562] RDX: 000000000000000f RSI: 00007fdb71f160a0 RDI: 0000000000000004
[  746.788721][T31562] RBP: 00007fdb71f16090 R08: 0000000000000000 R09: 0000000000000000
[  746.788735][T31562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.788748][T31562] R13: 00007fdb73f36038 R14: 00007fdb73f35fa0 R15: 00007ffd2beaf8e8
[  746.788780][T31562]  </TASK>
[  747.036314][    T9] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #100: -71
[  747.036377][    T9] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71
[  747.036396][    T9] uclogic 0003:256C:006D.0039: failed probing pen v1 parameters: -71
[  747.036444][    T9] uclogic 0003:256C:006D.0039: failed probing parameters: -71
[  747.036571][    T9] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71
[  747.101617][    T9] usb 3-1: USB disconnect, device number 20
[  747.107175][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  747.107269][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  747.241809][  T821] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  747.311392][ T5596] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  747.393073][  T821] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  747.393104][  T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.393124][  T821] usb 1-1: config 0 has no interface number 0
[  747.393157][  T821] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  747.393174][  T821] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 50380, setting to 64
[  747.395381][  T821] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  747.395411][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.395432][  T821] usb 1-1: Product: syz
[  747.395448][  T821] usb 1-1: Manufacturer: syz
[  747.395458][  T821] usb 1-1: SerialNumber: syz
[  747.400110][  T821] usb 1-1: config 0 descriptor??
[  747.461286][ T5596] usb 5-1: Using ep0 maxpacket: 16
[  747.489241][T31568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  747.489386][T31568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  747.497391][ T5596] usb 5-1: config 254 has an invalid interface number: 235 but max is 0
[  747.497421][ T5596] usb 5-1: config 254 has no interface number 0
[  747.497468][ T5596] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  747.497503][ T5596] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  747.497529][ T5596] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  747.497556][ T5596] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[  747.497580][ T5596] usb 5-1: config 254 interface 235 has no altsetting 0
[  747.545504][ T5596] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  747.545537][ T5596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.545559][ T5596] usb 5-1: Product: syz
[  747.545574][ T5596] usb 5-1: Manufacturer: syz
[  747.545589][ T5596] usb 5-1: SerialNumber: syz
[  747.582432][T31572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  747.787262][T31572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  747.830373][ T5596] usbtest 5-1:254.235: Linux gadget zero
[  747.830395][ T5596] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt)
[  748.043145][  T822] usb 5-1: USB disconnect, device number 11
[  748.050259][  T821] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  748.151443][  T821] usb 1-1: USB disconnect, device number 33
[  748.425704][T31638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  748.757034][T31645] Bluetooth: hci4: Frame reassembly failed (-84)
[  749.109468][T31659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'.
[  749.150939][T31653] FAULT_INJECTION: forcing a failure.
[  749.150939][T31653] name failslab, interval 1, probability 0, space 0, times 0
[  749.150965][T31653] CPU: 0 UID: 0 PID: 31653 Comm: syz.1.4218 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.150983][T31653] Tainted: [L]=SOFTLOCKUP
[  749.150988][T31653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  749.150998][T31653] Call Trace:
[  749.151003][T31653]  <TASK>
[  749.151009][T31653]  dump_stack_lvl+0xe8/0x150
[  749.151028][T31653]  should_fail_ex+0x46b/0x600
[  749.151047][T31653]  should_failslab+0xa8/0x100
[  749.151065][T31653]  __kmalloc_noprof+0xdf/0x7b0
[  749.151081][T31653]  ? tomoyo_encode+0x28b/0x550
[  749.151102][T31653]  tomoyo_encode+0x28b/0x550
[  749.151122][T31653]  tomoyo_realpath_from_path+0x58d/0x5d0
[  749.151141][T31653]  ? tomoyo_domain+0xd7/0x130
[  749.151155][T31653]  ? tomoyo_path_number_perm+0x219/0x630
[  749.151170][T31653]  tomoyo_path_number_perm+0x246/0x630
[  749.151197][T31653]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  749.151220][T31653]  ? __lock_acquire+0x6b5/0x2d10
[  749.151243][T31653]  ? do_raw_spin_lock+0x12b/0x2f0
[  749.151296][T31653]  ? __fget_files+0x2a/0x420
[  749.151323][T31653]  ? __fget_files+0x2a/0x420
[  749.151336][T31653]  ? __fget_files+0x3a6/0x420
[  749.151349][T31653]  ? __fget_files+0x2a/0x420
[  749.151364][T31653]  security_file_ioctl+0xc3/0x2a0
[  749.151381][T31653]  __se_sys_ioctl+0x47/0x170
[  749.151399][T31653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.151412][T31653]  do_syscall_64+0x15f/0xf80
[  749.151424][T31653]  ? trace_irq_disable+0x3b/0x140
[  749.151441][T31653]  ? clear_bhb_loop+0x40/0x90
[  749.151455][T31653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.151467][T31653] RIP: 0033:0x7fa44972ce59
[  749.151480][T31653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.151497][T31653] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  749.151511][T31653] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  749.151520][T31653] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000007
[  749.151528][T31653] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  749.151536][T31653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.151544][T31653] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  749.151561][T31653]  </TASK>
[  749.172002][T31653] ERROR: Out of memory at tomoyo_realpath_from_path.
[  749.371353][ T5596] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  749.593004][ T5596] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  749.593034][ T5596] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  749.593057][ T5596] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  749.593071][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.606125][ T5596] hub 3-1:4.0: USB hub found
[  749.771442][  T822] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  749.800165][ T5596] hub 3-1:4.0: 2 ports detected
[  749.800204][ T5596] usb 3-1: selecting invalid altsetting 1
[  749.800214][ T5596] hub 3-1:4.0: Using single TT (err -22)
[  749.923222][  T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  749.923259][  T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  749.924380][  T822] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  749.924409][  T822] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  749.924430][  T822] usb 1-1: Manufacturer: syz
[  749.929980][  T822] usb 1-1: config 0 descriptor??
[  750.036445][ T5596] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  750.036475][ T5596] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  750.077555][ T5596] usb 3-1: USB disconnect, device number 21
[  750.169318][T31689] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  750.169361][T31689] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  750.810255][T31701] FAULT_INJECTION: forcing a failure.
[  750.810255][T31701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  750.810288][T31701] CPU: 1 UID: 0 PID: 31701 Comm: syz.2.4225 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  750.810306][T31701] Tainted: [L]=SOFTLOCKUP
[  750.810310][T31701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  750.810318][T31701] Call Trace:
[  750.810323][T31701]  <TASK>
[  750.810331][T31701]  dump_stack_lvl+0xe8/0x150
[  750.810360][T31701]  should_fail_ex+0x46b/0x600
[  750.810391][T31701]  _copy_to_user+0x31/0xb0
[  750.810423][T31701]  simple_read_from_buffer+0xe1/0x170
[  750.810451][T31701]  proc_fail_nth_read+0x1be/0x230
[  750.810468][T31701]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  750.810484][T31701]  ? rw_verify_area+0x2ac/0x4e0
[  750.810504][T31701]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  750.810531][T31701]  vfs_read+0x212/0xa80
[  750.810567][T31701]  ? __pfx_vfs_read+0x10/0x10
[  750.810597][T31701]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  750.810622][T31701]  ? lockdep_hardirqs_on+0x7a/0x110
[  750.810640][T31701]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  750.810657][T31701]  ? mutex_lock_nested+0x152/0x1d0
[  750.810678][T31701]  ? fdget_pos+0x252/0x320
[  750.810711][T31701]  ksys_read+0x156/0x270
[  750.810740][T31701]  ? __pfx_ksys_read+0x10/0x10
[  750.810776][T31701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.810791][T31701]  do_syscall_64+0x15f/0xf80
[  750.810803][T31701]  ? trace_irq_disable+0x3b/0x140
[  750.810819][T31701]  ? clear_bhb_loop+0x40/0x90
[  750.810838][T31701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.810859][T31701] RIP: 0033:0x7fcb5e68d68e
[  750.810878][T31701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  750.810895][T31701] RSP: 002b:00007fcb5c925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  750.810917][T31701] RAX: ffffffffffffffda RBX: 00007fcb5c9266c0 RCX: 00007fcb5e68d68e
[  750.810931][T31701] RDX: 000000000000000f RSI: 00007fcb5c9260a0 RDI: 0000000000000004
[  750.810944][T31701] RBP: 00007fcb5c926090 R08: 0000000000000000 R09: 0000000000000000
[  750.810958][T31701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  750.810971][T31701] R13: 00007fcb5e946038 R14: 00007fcb5e945fa0 R15: 00007ffddb8adae8
[  750.811002][T31701]  </TASK>
[  750.851461][ T5619] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  750.851509][   T61] Bluetooth: hci4: command 0x1003 tx timeout
[  751.026340][  T822] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #100: -71
[  751.026409][  T822] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71
[  751.026428][  T822] uclogic 0003:256C:006D.003A: failed probing pen v1 parameters: -71
[  751.026481][  T822] uclogic 0003:256C:006D.003A: failed probing parameters: -71
[  751.026590][  T822] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71
[  751.165713][  T822] usb 1-1: USB disconnect, device number 34
[  751.401396][    T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  751.553793][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.559069][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  751.559110][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.559134][    T9] usb 5-1: Product: syz
[  751.559150][    T9] usb 5-1: Manufacturer: syz
[  751.559166][    T9] usb 5-1: SerialNumber: syz
[  751.616040][    T9] usb 5-1: config 0 descriptor??
[  751.629000][    T9] mcba_usb 5-1:0.0: Can't find endpoints
[  751.672183][T31732] IPv6: NLM_F_CREATE should be specified when creating new route
[  751.822915][  T822] usb 5-1: USB disconnect, device number 12
[  751.935725][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  752.083316][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.083362][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  752.085519][   T10] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  752.085547][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.085575][   T10] usb 1-1: Product: syz
[  752.085584][   T10] usb 1-1: Manufacturer: syz
[  752.085593][   T10] usb 1-1: SerialNumber: syz
[  752.090142][   T10] usb 1-1: config 0 descriptor??
[  752.098204][   T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  752.103664][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  752.104569][   T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  752.104623][   T10] usb 1-1: media controller created
[  752.120174][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  752.282684][   T10] DVB: Unable to find symbol tda10046_attach()
[  752.282696][   T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  752.282705][   T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  752.374910][   T38] audit: type=1326 audit(2000000173.100:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31761 comm="syz.2.4232" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb5e6cce59 code=0x0
[  752.640585][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  752.654397][T31768] Bluetooth: hci4: Frame reassembly failed (-84)
[  753.099713][   T10] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  753.122281][   T10] usb 1-1: USB disconnect, device number 35
[  754.011403][ T5596] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  754.141300][ T5596] usb 1-1: device descriptor read/64, error -71
[  754.381335][ T5596] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  754.511426][ T5596] usb 1-1: device descriptor read/64, error -71
[  754.615780][ T5619] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  754.635053][ T5596] usb usb1-port1: attempt power cycle
[  754.771036][T31815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4241'.
[  754.946344][T31820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4243'.
[  754.991422][ T5596] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  755.012731][ T5596] usb 1-1: device descriptor read/8, error -71
[  755.181406][  T821] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  755.251548][ T5596] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  755.274843][ T5596] usb 1-1: device descriptor read/8, error -71
[  755.335006][  T821] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  755.335043][  T821] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.335082][  T821] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  755.335106][  T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.346593][  T821] hub 2-1:4.0: USB hub found
[  755.381884][ T5596] usb usb1-port1: unable to enumerate USB device
[  755.555251][  T821] hub 2-1:4.0: 2 ports detected
[  755.555310][  T821] usb 2-1: selecting invalid altsetting 1
[  755.555326][  T821] hub 2-1:4.0: Using single TT (err -22)
[  755.571589][T31831] virt_wifi0 speed is unknown, defaulting to 1000
[  755.879161][  T821] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  755.879181][  T821] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  755.922447][  T821] usb 2-1: USB disconnect, device number 80
[  756.089318][T31875] FAULT_INJECTION: forcing a failure.
[  756.089318][T31875] name failslab, interval 1, probability 0, space 0, times 0
[  756.089344][T31875] CPU: 0 UID: 0 PID: 31875 Comm: syz.2.4246 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  756.089361][T31875] Tainted: [L]=SOFTLOCKUP
[  756.089366][T31875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  756.089373][T31875] Call Trace:
[  756.089378][T31875]  <TASK>
[  756.089384][T31875]  dump_stack_lvl+0xe8/0x150
[  756.089403][T31875]  should_fail_ex+0x46b/0x600
[  756.089422][T31875]  should_failslab+0xa8/0x100
[  756.089440][T31875]  __kmalloc_cache_noprof+0x84/0x690
[  756.089458][T31875]  ? alloc_fs_context+0x64/0xd50
[  756.089477][T31875]  alloc_fs_context+0x64/0xd50
[  756.089494][T31875]  ? get_fs_type+0x407/0x480
[  756.089511][T31875]  do_new_mount+0x187/0xd30
[  756.089524][T31875]  ? apparmor_capable+0x126/0x170
[  756.089539][T31875]  ? security_capable+0x7e/0x2c0
[  756.089555][T31875]  ? __pfx_do_new_mount+0x10/0x10
[  756.089568][T31875]  ? ns_capable+0x89/0xe0
[  756.089585][T31875]  ? path_mount+0x690/0x10e0
[  756.089598][T31875]  ? user_path_at+0xd4/0x160
[  756.089614][T31875]  ? user_path_at+0xd4/0x160
[  756.089630][T31875]  __se_sys_mount+0x31d/0x420
[  756.089647][T31875]  ? __pfx___se_sys_mount+0x10/0x10
[  756.089666][T31875]  ? __x64_sys_mount+0x20/0xc0
[  756.089680][T31875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.089693][T31875]  do_syscall_64+0x15f/0xf80
[  756.089705][T31875]  ? trace_irq_disable+0x3b/0x140
[  756.089721][T31875]  ? clear_bhb_loop+0x40/0x90
[  756.089739][T31875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.089751][T31875] RIP: 0033:0x7fcb5e6cce59
[  756.089764][T31875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.089775][T31875] RSP: 002b:00007fcb5c926028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  756.089789][T31875] RAX: ffffffffffffffda RBX: 00007fcb5e945fa0 RCX: 00007fcb5e6cce59
[  756.089798][T31875] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000
[  756.089806][T31875] RBP: 00007fcb5c926090 R08: 0000200000000100 R09: 0000000000000000
[  756.089814][T31875] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002
[  756.089822][T31875] R13: 00007fcb5e946038 R14: 00007fcb5e945fa0 R15: 00007ffddb8adae8
[  756.089838][T31875]  </TASK>
[  757.421803][T31921] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4253'.
[  757.421892][T31921] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4253'.
[  758.135634][ T5596] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  758.261340][ T5596] usb 2-1: device descriptor read/64, error -71
[  758.501395][ T5596] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  758.547184][T31931] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  758.631447][ T5596] usb 2-1: device descriptor read/64, error -71
[  758.750144][ T5596] usb usb2-port1: attempt power cycle
[  759.042231][  T821] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  759.102745][ T5596] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  759.125890][ T5596] usb 2-1: device descriptor read/8, error -71
[  759.186467][  T821] usb 5-1: device descriptor read/64, error -71
[  759.282204][ T5796] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  759.361384][ T5596] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  759.381903][ T5596] usb 2-1: device descriptor read/8, error -71
[  759.431419][  T821] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  759.434501][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.434533][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  759.435627][ T5796] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  759.435654][ T5796] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  759.435676][ T5796] usb 3-1: Manufacturer: syz
[  759.440144][ T5796] usb 3-1: config 0 descriptor??
[  759.491791][ T5596] usb usb2-port1: unable to enumerate USB device
[  759.571420][  T821] usb 5-1: device descriptor read/64, error -71
[  759.681658][  T821] usb usb5-port1: attempt power cycle
[  760.034649][  T821] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  760.052987][  T821] usb 5-1: device descriptor read/8, error -71
[  760.303036][  T821] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  760.353281][  T821] usb 5-1: device descriptor read/8, error -71
[  760.461866][  T821] usb usb5-port1: unable to enumerate USB device
[  760.516083][ T5796] uclogic 0003:256C:006D.003B: failed retrieving string descriptor #100: -71
[  760.516148][ T5796] uclogic 0003:256C:006D.003B: failed retrieving pen parameters: -71
[  760.516166][ T5796] uclogic 0003:256C:006D.003B: failed probing pen v1 parameters: -71
[  760.516216][ T5796] uclogic 0003:256C:006D.003B: failed probing parameters: -71
[  760.516335][ T5796] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71
[  760.613042][ T5796] usb 3-1: USB disconnect, device number 22
[  760.902275][ T5799] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  760.971298][  T821] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  761.051546][ T5799] usb 2-1: Using ep0 maxpacket: 16
[  761.054286][ T5799] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  761.054313][ T5799] usb 2-1: config 0 has no interface number 0
[  761.054349][ T5799] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  761.054364][ T5799] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  761.066108][ T5799] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  761.066151][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.066181][ T5799] usb 2-1: Product: syz
[  761.066197][ T5799] usb 2-1: Manufacturer: syz
[  761.066212][ T5799] usb 2-1: SerialNumber: syz
[  761.077578][ T5799] usb 2-1: config 0 descriptor??
[  761.096003][T32007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  761.096124][T32007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  761.121352][  T821] usb 1-1: Using ep0 maxpacket: 16
[  761.146787][  T821] usb 1-1: config 1 has too many interfaces: 107, using maximum allowed: 32
[  761.146816][  T821] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  761.146836][  T821] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 107
[  761.146954][  T821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 56322, setting to 64
[  761.156526][  T821] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  761.156557][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.156792][  T821] usb 1-1: Product: syz
[  761.156809][  T821] usb 1-1: Manufacturer: syz
[  761.156824][  T821] usb 1-1: SerialNumber: syz
[  761.187442][T32024] netlink: 'syz.2.4272': attribute type 21 has an invalid length.
[  761.188116][T32024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4272'.
[  761.188892][T32024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4272'.
[  761.348850][T32007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  761.348925][T32007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  761.404933][T32005] i2c i2c-0: dtv_property_process_set: SET cmd 0x6c6f7274 undefined
[  761.459916][  T821] usb 1-1: 0:2 : does not exist
[  761.525758][  T821] usb 1-1: USB disconnect, device number 40
[  761.763581][T32007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.767130][T32007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  762.589423][ T5799] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  762.589456][ T5799] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  762.589713][ T5799] asix 2-1:0.34: probe with driver asix failed with error -71
[  762.624526][ T5799] usb 2-1: USB disconnect, device number 85
[  762.751791][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  762.896180][   T10] usb 3-1: device descriptor read/64, error -71
[  763.201313][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  763.277909][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.341340][   T10] usb 3-1: device descriptor read/64, error -71
[  763.341689][T32097] netlink: 'syz.1.4284': attribute type 11 has an invalid length.
[  763.341707][T32097] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4284'.
[  763.490333][   T10] usb usb3-port1: attempt power cycle
[  763.552674][   T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  763.620507][   T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  763.628536][   T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  763.636830][   T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  763.637585][   T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  763.951408][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  763.982360][   T10] usb 3-1: device descriptor read/8, error -71
[  764.230901][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.270729][T32131] FAULT_INJECTION: forcing a failure.
[  764.270729][T32131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  764.270754][T32131] CPU: 0 UID: 0 PID: 32131 Comm: syz.1.4293 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  764.270772][T32131] Tainted: [L]=SOFTLOCKUP
[  764.270776][T32131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  764.270784][T32131] Call Trace:
[  764.270790][T32131]  <TASK>
[  764.270795][T32131]  dump_stack_lvl+0xe8/0x150
[  764.270813][T32131]  should_fail_ex+0x46b/0x600
[  764.270831][T32131]  _copy_from_user+0x2d/0xb0
[  764.270850][T32131]  do_sock_getsockopt+0x200/0x7e0
[  764.270871][T32131]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  764.270895][T32131]  ? __fget_files+0x3a6/0x420
[  764.270909][T32131]  ? __fget_files+0x2a/0x420
[  764.270933][T32131]  __x64_sys_getsockopt+0x1aa/0x250
[  764.270952][T32131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.270965][T32131]  do_syscall_64+0x15f/0xf80
[  764.270978][T32131]  ? trace_irq_disable+0x3b/0x140
[  764.270995][T32131]  ? clear_bhb_loop+0x40/0x90
[  764.271010][T32131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.271022][T32131] RIP: 0033:0x7fa44972ce59
[  764.271034][T32131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.271045][T32131] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  764.271058][T32131] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  764.271068][T32131] RDX: 0000000000000004 RSI: 000000000000006b RDI: 0000000000000003
[  764.271076][T32131] RBP: 00007fa44797e090 R08: 0000200000000440 R09: 0000000000000000
[  764.271083][T32131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  764.271091][T32131] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  764.271108][T32131]  </TASK>
[  764.281492][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  764.314602][   T10] usb 3-1: device descriptor read/8, error -71
[  764.421803][   T10] usb usb3-port1: unable to enumerate USB device
[  764.815525][   T38] audit: type=1326 audit(2000000186.539:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32148 comm="syz.4.4296" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb73cbce59 code=0x0
[  764.873772][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.994353][T32099] virt_wifi0 speed is unknown, defaulting to 1000
[  765.243109][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.892364][ T5619] Bluetooth: hci0: command tx timeout
[  766.598236][T32099] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.598477][T32099] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.598746][T32099] bridge_slave_0: entered allmulticast mode
[  766.624730][T32099] bridge_slave_0: entered promiscuous mode
[  766.630639][T32099] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.630996][T32099] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.633055][T32099] bridge_slave_1: entered allmulticast mode
[  766.653429][T32099] bridge_slave_1: entered promiscuous mode
[  767.347860][   T12] bridge_slave_1: left allmulticast mode
[  767.347893][   T12] bridge_slave_1: left promiscuous mode
[  767.348130][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.436860][   T12] bridge_slave_0: left allmulticast mode
[  767.436894][   T12] bridge_slave_0: left promiscuous mode
[  767.437165][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.481659][ T5799] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  767.611349][ T5799] usb 5-1: device descriptor read/64, error -71
[  767.853011][ T5799] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  767.971408][ T5619] Bluetooth: hci0: command tx timeout
[  767.989341][ T5799] usb 5-1: device descriptor read/64, error -71
[  768.093069][ T5799] usb usb5-port1: attempt power cycle
[  768.456625][ T5799] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  768.472719][ T5799] usb 5-1: device descriptor read/8, error -71
[  768.599218][T32364] 9p: Bad value for 'rfdno'
[  768.743693][ T5799] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  768.761941][ T5799] usb 5-1: device descriptor read/8, error -71
[  768.864868][T32368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4311'.
[  768.872315][ T5799] usb usb5-port1: unable to enumerate USB device
[  769.033233][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.091834][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.122229][ T5799] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  769.145711][   T12] bond0 (unregistering): Released all slaves
[  769.178631][T32099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.294829][ T5799] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  769.294864][ T5799] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.294905][ T5799] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  769.294928][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.329433][ T5799] hub 2-1:4.0: USB hub found
[  769.351306][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  769.377125][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[  769.393768][T32099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.521325][   T10] usb 3-1: Using ep0 maxpacket: 8
[  769.531136][   T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  769.531214][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  769.531241][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  769.531267][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  769.531289][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  769.531313][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  769.531364][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  769.531389][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.538874][ T5799] hub 2-1:4.0: 2 ports detected
[  769.538929][ T5799] usb 2-1: selecting invalid altsetting 1
[  769.538947][ T5799] hub 2-1:4.0: Using single TT (err -22)
[  769.655999][   T10] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  769.684765][T32099] team0: Port device team_slave_0 added
[  769.684856][   T12] tipc: Left network mode
[  769.690852][T32099] team0: Port device team_slave_1 added
[  769.762424][T32099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  769.762442][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  769.762467][T32099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  769.765373][T32099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  769.765387][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  769.765409][T32099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  770.046147][ T5799] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  770.046176][ T5799] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  770.047963][ T5596] usb 3-1: USB disconnect, device number 27
[  770.066182][ T5619] Bluetooth: hci0: command tx timeout
[  770.106543][T32099] hsr_slave_0: entered promiscuous mode
[  770.108665][T32099] hsr_slave_1: entered promiscuous mode
[  770.122493][ T5799] usb 2-1: USB disconnect, device number 86
[  770.134569][T32099] debugfs: 'hsr0' already exists in 'hsr'
[  770.134596][T32099] Cannot create hsr debugfs directory
[  770.678134][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2
[  771.311329][ T5796] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  771.461320][ T5796] usb 2-1: Using ep0 maxpacket: 32
[  771.463546][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short
[  771.467472][ T5796] usb 2-1: unable to read config index 0 descriptor/all
[  771.467517][ T5796] usb 2-1: can't read configurations, error -71
[  771.689034][ T5799] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  771.856306][ T5799] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  771.856341][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  771.856363][ T5799] usb 5-1: Product: syz
[  771.856378][ T5799] usb 5-1: SerialNumber: syz
[  771.870140][ T5799] usb 5-1: config 0 descriptor??
[  772.056995][T32592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  772.057015][T32592] IPv6: NLM_F_CREATE should be set when creating new route
[  772.094698][ T5799] hso 5-1:0.0: Failed to find BULK eps
[  772.131411][ T5619] Bluetooth: hci0: command tx timeout
[  772.231396][   T12] hsr_slave_0: left promiscuous mode
[  772.281339][   T12] hsr_slave_1: left promiscuous mode
[  772.282688][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  772.282715][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  772.303536][T32526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.304162][T32526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.344922][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  772.344947][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  772.403024][T32606] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[23946] was attempted by ""[32606]
[  772.554113][   T12] veth1_macvtap: left promiscuous mode
[  772.554213][   T12] veth0_macvtap: left promiscuous mode
[  772.554416][   T12] veth1_vlan: left promiscuous mode
[  772.554605][   T12] veth0_vlan: left promiscuous mode
[  772.599062][ T5796] usb 5-1: USB disconnect, device number 21
[  773.091916][ T5796] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  773.282892][ T5796] usb 5-1: device descriptor read/64, error -71
[  773.531331][ T5796] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  773.661556][ T5796] usb 5-1: device descriptor read/64, error -71
[  773.772185][ T5796] usb usb5-port1: attempt power cycle
[  773.851901][   T12] team0 (unregistering): Port device team_slave_1 removed
[  773.913329][   T12] team0 (unregistering): Port device team_slave_0 removed
[  774.122012][ T5796] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  774.149214][ T5796] usb 5-1: device descriptor read/8, error -71
[  774.235509][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3
[  774.381361][ T5796] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  774.403120][ T5796] usb 5-1: device descriptor read/8, error -71
[  774.511621][ T5796] usb usb5-port1: unable to enumerate USB device
[  774.621577][T32652] FAULT_INJECTION: forcing a failure.
[  774.621577][T32652] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  774.621615][T32652] CPU: 0 UID: 0 PID: 32652 Comm: syz.1.4327 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  774.621643][T32652] Tainted: [L]=SOFTLOCKUP
[  774.621651][T32652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  774.621663][T32652] Call Trace:
[  774.621672][T32652]  <TASK>
[  774.621681][T32652]  dump_stack_lvl+0xe8/0x150
[  774.621710][T32652]  should_fail_ex+0x46b/0x600
[  774.621740][T32652]  prepare_alloc_pages+0x22a/0x6b0
[  774.621778][T32652]  __alloc_frozen_pages_noprof+0x12f/0x380
[  774.621811][T32652]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  774.621846][T32652]  ? __pfx_policy_nodemask+0x10/0x10
[  774.621878][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.621908][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.621940][T32652]  alloc_pages_mpol+0xd1/0x380
[  774.621974][T32652]  alloc_pages_noprof+0xd2/0x2f0
[  774.622006][T32652]  get_free_pages_noprof+0xf/0x80
[  774.622036][T32652]  __kasan_populate_vmalloc+0x38/0x1d0
[  774.622061][T32652]  ? rt_spin_unlock+0x160/0x200
[  774.622089][T32652]  alloc_vmap_area+0xd47/0x1480
[  774.622127][T32652]  ? __pfx_alloc_vmap_area+0x10/0x10
[  774.622156][T32652]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  774.622185][T32652]  ? __get_vm_area_node+0x171/0x350
[  774.622209][T32652]  ? copy_process+0x89b/0x4450
[  774.622238][T32652]  __get_vm_area_node+0x226/0x350
[  774.622270][T32652]  __vmalloc_node_range_noprof+0x36a/0x1750
[  774.622299][T32652]  ? copy_process+0x89b/0x4450
[  774.622324][T32652]  ? percpu_ref_get_many+0x19/0x140
[  774.622419][T32652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  774.622450][T32652]  ? rcu_is_watching+0x15/0xb0
[  774.622472][T32652]  ? memcpy_and_pad+0x48/0x80
[  774.622500][T32652]  __vmalloc_node_noprof+0xc2/0x100
[  774.622525][T32652]  ? copy_process+0x89b/0x4450
[  774.622549][T32652]  ? copy_process+0x89b/0x4450
[  774.622579][T32652]  dup_task_struct+0x298/0x840
[  774.622605][T32652]  ? rt_spin_unlock+0x160/0x200
[  774.622633][T32652]  copy_process+0x89b/0x4450
[  774.622691][T32652]  ? __pfx_copy_process+0x10/0x10
[  774.622731][T32652]  vhost_task_create+0x1f9/0x380
[  774.622753][T32652]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  774.622782][T32652]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  774.622812][T32652]  ? __pfx_vhost_task_create+0x10/0x10
[  774.622843][T32652]  ? __pfx_vhost_task_fn+0x10/0x10
[  774.622868][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.622898][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.622928][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.622958][T32652]  ? mutex_lock_nested+0x152/0x1d0
[  774.622982][T32652]  ? kvm_mmu_post_init_vm+0x8f/0x2d0
[  774.623014][T32652]  kvm_mmu_post_init_vm+0x147/0x2d0
[  774.623045][T32652]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  774.623080][T32652]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  774.623104][T32652]  ? do_raw_spin_lock+0x12b/0x2f0
[  774.623141][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.623168][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.623201][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.623230][T32652]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  774.623263][T32652]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  774.623290][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.623319][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.623348][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.623386][T32652]  ? rt_write_unlock+0x190/0x230
[  774.623414][T32652]  kvm_vcpu_ioctl+0xa65/0xfe0
[  774.623450][T32652]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  774.623498][T32652]  ? __fget_files+0x2a/0x420
[  774.623526][T32652]  ? __fget_files+0x2a/0x420
[  774.623548][T32652]  ? __fget_files+0x3a6/0x420
[  774.623570][T32652]  ? __fget_files+0x2a/0x420
[  774.623597][T32652]  ? bpf_lsm_file_ioctl+0x9/0x20
[  774.623618][T32652]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  774.623646][T32652]  __se_sys_ioctl+0xff/0x170
[  774.623675][T32652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.623698][T32652]  do_syscall_64+0x15f/0xf80
[  774.623717][T32652]  ? trace_irq_disable+0x3b/0x140
[  774.623744][T32652]  ? clear_bhb_loop+0x40/0x90
[  774.623770][T32652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.623790][T32652] RIP: 0033:0x7fa44972ce59
[  774.623811][T32652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.623830][T32652] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  774.623853][T32652] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  774.623868][T32652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  774.623882][T32652] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  774.623895][T32652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.623908][T32652] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  774.623940][T32652]  </TASK>
[  774.632872][T32652] syz.1.4327: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  774.633170][T32652] CPU: 0 UID: 0 PID: 32652 Comm: syz.1.4327 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  774.633198][T32652] Tainted: [L]=SOFTLOCKUP
[  774.633206][T32652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  774.633218][T32652] Call Trace:
[  774.633226][T32652]  <TASK>
[  774.633235][T32652]  dump_stack_lvl+0xe8/0x150
[  774.633264][T32652]  warn_alloc+0x24c/0x270
[  774.633293][T32652]  ? kasan_quarantine_put+0xbb/0x1f0
[  774.633321][T32652]  ? __pfx_warn_alloc+0x10/0x10
[  774.633350][T32652]  ? __get_vm_area_node+0x23f/0x350
[  774.633380][T32652]  ? __get_vm_area_node+0x171/0x350
[  774.633405][T32652]  ? copy_process+0x89b/0x4450
[  774.633433][T32652]  ? __get_vm_area_node+0x23f/0x350
[  774.633465][T32652]  __vmalloc_node_range_noprof+0x38f/0x1750
[  774.633491][T32652]  ? percpu_ref_get_many+0x19/0x140
[  774.633550][T32652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  774.633580][T32652]  ? rcu_is_watching+0x15/0xb0
[  774.633604][T32652]  ? memcpy_and_pad+0x48/0x80
[  774.633631][T32652]  __vmalloc_node_noprof+0xc2/0x100
[  774.633657][T32652]  ? copy_process+0x89b/0x4450
[  774.633682][T32652]  ? copy_process+0x89b/0x4450
[  774.633711][T32652]  dup_task_struct+0x298/0x840
[  774.633737][T32652]  ? rt_spin_unlock+0x160/0x200
[  774.633765][T32652]  copy_process+0x89b/0x4450
[  774.633821][T32652]  ? __pfx_copy_process+0x10/0x10
[  774.633860][T32652]  vhost_task_create+0x1f9/0x380
[  774.633882][T32652]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  774.633911][T32652]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  774.633940][T32652]  ? __pfx_vhost_task_create+0x10/0x10
[  774.633969][T32652]  ? __pfx_vhost_task_fn+0x10/0x10
[  774.633995][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.634024][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.634054][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.634082][T32652]  ? mutex_lock_nested+0x152/0x1d0
[  774.634106][T32652]  ? kvm_mmu_post_init_vm+0x8f/0x2d0
[  774.634139][T32652]  kvm_mmu_post_init_vm+0x147/0x2d0
[  774.634171][T32652]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  774.634211][T32652]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  774.634237][T32652]  ? do_raw_spin_lock+0x12b/0x2f0
[  774.634275][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.634305][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.634334][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.634362][T32652]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  774.634400][T32652]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  774.634427][T32652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  774.634457][T32652]  ? lockdep_hardirqs_on+0x7a/0x110
[  774.634485][T32652]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  774.634514][T32652]  ? rt_write_unlock+0x190/0x230
[  774.634543][T32652]  kvm_vcpu_ioctl+0xa65/0xfe0
[  774.634577][T32652]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  774.634624][T32652]  ? __fget_files+0x2a/0x420
[  774.634651][T32652]  ? __fget_files+0x2a/0x420
[  774.634673][T32652]  ? __fget_files+0x3a6/0x420
[  774.634695][T32652]  ? __fget_files+0x2a/0x420
[  774.634721][T32652]  ? bpf_lsm_file_ioctl+0x9/0x20
[  774.634744][T32652]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  774.634772][T32652]  __se_sys_ioctl+0xff/0x170
[  774.634800][T32652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.634823][T32652]  do_syscall_64+0x15f/0xf80
[  774.634842][T32652]  ? trace_irq_disable+0x3b/0x140
[  774.634870][T32652]  ? clear_bhb_loop+0x40/0x90
[  774.634894][T32652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.634914][T32652] RIP: 0033:0x7fa44972ce59
[  774.634935][T32652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.634952][T32652] RSP: 002b:00007fa44797e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  774.634972][T32652] RAX: ffffffffffffffda RBX: 00007fa4499a5fa0 RCX: 00007fa44972ce59
[  774.634987][T32652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  774.635001][T32652] RBP: 00007fa44797e090 R08: 0000000000000000 R09: 0000000000000000
[  774.635014][T32652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.635027][T32652] R13: 00007fa4499a6038 R14: 00007fa4499a5fa0 R15: 00007ffecf32fa88
[  774.635059][T32652]  </TASK>
[  774.646905][T32652] Mem-Info:
[  774.646919][T32652] active_anon:23261 inactive_anon:0 isolated_anon:0
[  774.646919][T32652]  active_file:0 inactive_file:16100 isolated_file:0
[  774.646919][T32652]  unevictable:768 dirty:57 writeback:0
[  774.646919][T32652]  slab_reclaimable:11006 slab_unreclaimable:102206
[  774.646919][T32652]  mapped:25993 shmem:17917 pagetables:1423
[  774.646919][T32652]  sec_pagetables:0 bounce:0
[  774.646919][T32652]  kernel_misc_reclaimable:0
[  774.646919][T32652]  free:1337352 free_pcp:6379 free_cma:0
[  774.646973][T32652] Node 0 active_anon:93044kB inactive_anon:0kB active_file:0kB inactive_file:64272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103972kB dirty:228kB writeback:0kB shmem:70132kB kernel_stack:13504kB pagetables:5536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  774.647023][T32652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  774.647068][T32652] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  774.647128][T32652] lowmem_reserve[]: 0 2492 2493 2493 2493
[  774.647163][T32652] Node 0 DMA32 free:1397344kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93044kB inactive_anon:0kB active_file:0kB inactive_file:64272kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:25476kB local_pcp:16716kB free_cma:0kB
[  774.647221][T32652] lowmem_reserve[]: 0 0 0 0 0
[  774.647253][T32652] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB
[  774.647308][T32652] lowmem_reserve[]: 0 0 0 0 0
[  774.647340][T32652] Node 1 Normal free:3936704kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  774.647403][T32652] lowmem_reserve[]: 0 0 0 0 0
[  774.647435][T32652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  774.647785][T32652] Node 0 DMA32: 905*4kB (UME) 759*8kB (UME) 318*16kB (UME) 255*32kB (UE) 54*64kB (UME) 25*128kB (UME) 55*256kB (ME) 72*512kB (UM) 28*1024kB (UM) 11*2048kB (UM) 309*4096kB (UME) = 1397404kB
[  774.647937][T32652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  774.648032][T32652] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 8*16kB (UM) 8*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 959*4096kB (M) = 3936704kB
[  774.648181][T32652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  774.648198][T32652] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  774.648215][T32652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  774.648232][T32652] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  774.648248][T32652] 34013 total pagecache pages
[  774.648257][T32652] 0 pages in swap cache
[  774.648265][T32652] Free swap  = 124996kB
[  774.648274][T32652] Total swap = 124996kB
[  774.648282][T32652] 2097051 pages RAM
[  774.648290][T32652] 0 pages HighMem/MovableOnly
[  774.648298][T32652] 427025 pages reserved
[  774.648306][T32652] 0 pages cma reserved
[  774.665623][T32661] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4328'.
[  775.070738][T32663] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input75
[  775.244356][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  775.446277][    T9] usb 3-1: Using ep0 maxpacket: 16
[  775.449082][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  775.452380][    T9] usb 3-1: config 1 has an invalid interface number: 4 but max is 0
[  775.452405][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  775.452425][    T9] usb 3-1: config 1 has no interface number 0
[  775.454844][    T9] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=72.d1
[  775.454872][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.454892][    T9] usb 3-1: Product: syz
[  775.454908][    T9] usb 3-1: Manufacturer: syz
[  775.454923][    T9] usb 3-1: SerialNumber: syz
[  775.479277][T32677] lo speed is unknown, defaulting to 1000
[  775.479946][T32677] lo speed is unknown, defaulting to 1000
[  775.502662][T32679] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  775.502941][T32679] /dev/nullb0: Can't open blockdev
[  775.507941][T32677] lo speed is unknown, defaulting to 1000
[  775.573399][T32677] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  775.573442][T32677] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  775.573485][T32677] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  776.491463][T32677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  776.985693][T32677] lo speed is unknown, defaulting to 1000
[  777.265347][T32677] lo speed is unknown, defaulting to 1000
[  777.300909][T32677] lo speed is unknown, defaulting to 1000
[  777.310507][T32677] lo speed is unknown, defaulting to 1000
[  777.426944][T32677] lo speed is unknown, defaulting to 1000
[  777.430187][T32677] lo speed is unknown, defaulting to 1000
[  777.601353][ T5796] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  777.751733][ T5796] usb 5-1: Using ep0 maxpacket: 32
[  777.756660][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short
[  777.758215][ T5796] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[  777.758242][ T5796] usb 5-1: config 3 has an invalid interface number: 25 but max is 1
[  777.758263][ T5796] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[  777.758283][ T5796] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  777.758305][ T5796] usb 5-1: config 3 has no interface number 0
[  777.758323][ T5796] usb 5-1: config 3 has no interface number 1
[  777.758392][ T5796] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  777.758415][ T5796] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  777.758444][ T5796] usb 5-1: config 3 interface 223 has no altsetting 1
[  777.758463][ T5796] usb 5-1: config 3 interface 25 has no altsetting 0
[  777.862033][ T5796] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[  777.862066][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.862088][ T5796] usb 5-1: Product: syz
[  777.862103][ T5796] usb 5-1: Manufacturer: syz
[  777.862119][ T5796] usb 5-1: SerialNumber: syz
[  778.157245][T32704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.158074][T32704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.277173][ T5796] usb 5-1: USB disconnect, device number 26
[  778.335972][    C1] 
[  778.335984][    C1] ======================================================
[  778.335992][    C1] WARNING: possible circular locking dependency detected
[  778.336109][    C1] syzkaller #0 Tainted: G             L     
[  778.336126][    C1] ------------------------------------------------------
[  778.336135][    C1] syz.2.4328/32663 is trying to acquire lock:
[  778.336148][    C1] ffff8880b8724168 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x610
[  778.336265][    C1] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  778.336265][    C1] but task is already holding lock:
[  778.336273][    C1] ffff888058598270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa4/0x320
[  778.336328][    C1] 
[  778.336328][    C1] which lock already depends on the new lock.
[  778.336328][    C1] 
[  778.336336][    C1] 
[  778.336336][    C1] the existing dependency chain (in reverse order) is:
[  778.336344][    C1] 
[  778.336344][    C1] -> #1 (&dev->event_lock#2){+.+.}-{3:3}:
[  778.336427][    C1]        rt_spin_lock+0x83/0x400
[  778.336451][    C1]        input_inject_event+0xa4/0x320
[  778.336474][    C1]        led_trigger_event+0x13b/0x220
[  778.336500][    C1]        kbd_bh+0x1b4/0x2c0
[  778.336520][    C1]        tasklet_action_common+0x31c/0x610
[  778.336548][    C1]        handle_softirqs+0x1de/0x6d0
[  778.336571][    C1]        run_ktimerd+0x69/0x100
[  778.336596][    C1]        smpboot_thread_fn+0x541/0xa50
[  778.336623][    C1]        kthread+0x388/0x470
[  778.336640][    C1]        ret_from_fork+0x514/0xb70
[  778.336659][    C1]        ret_from_fork_asm+0x1a/0x30
[  778.336683][    C1] 
[  778.336683][    C1] -> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}:
[  778.336710][    C1]        __lock_acquire+0x15a5/0x2d10
[  778.336728][    C1]        lock_acquire+0x106/0x350
[  778.336745][    C1]        rt_spin_lock+0x83/0x400
[  778.336767][    C1]        tasklet_action_common+0xc5/0x610
[  778.336792][    C1]        handle_softirqs+0x1de/0x6d0
[  778.336815][    C1]        __local_bh_enable_ip+0x170/0x2b0
[  778.336840][    C1]        __alloc_skb+0x1aa/0x7d0
[  778.336864][    C1]        hidp_send_message+0xb5/0x230
[  778.336885][    C1]        hidp_input_event+0x2a4/0x380
[  778.336906][    C1]        input_event_dispose+0x80/0x6b0
[  778.336929][    C1]        input_inject_event+0x1d7/0x320
[  778.336952][    C1]        kbd_led_trigger_activate+0xbc/0x100
[  778.336974][    C1]        led_trigger_set+0x53b/0x960
[  778.337010][    C1]        led_trigger_set_default+0x266/0x2a0
[  778.337037][    C1]        led_classdev_register_ext+0x787/0x9c0
[  778.337063][    C1]        input_leds_connect+0x517/0x790
[  778.337088][    C1]        input_register_device+0xce0/0x1140
[  778.337114][    C1]        hidp_session_probe+0x1a5/0x8a0
[  778.337135][    C1]        l2cap_register_user+0xc2/0x1d0
[  778.337153][    C1]        hidp_connection_add+0x158b/0x1a20
[  778.337173][    C1]        hidp_sock_ioctl+0x403/0x650
[  778.337193][    C1]        sock_do_ioctl+0x101/0x320
[  778.337212][    C1]        sock_ioctl+0x5c9/0x7f0
[  778.337229][    C1]        __se_sys_ioctl+0xff/0x170
[  778.337255][    C1]        do_syscall_64+0x15f/0xf80
[  778.337273][    C1]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.337293][    C1] 
[  778.337293][    C1] other info that might help us debug this:
[  778.337293][    C1] 
[  778.337298][    C1]  Possible unsafe locking scenario:
[  778.337298][    C1] 
[  778.337318][    C1]        CPU0                    CPU1
[  778.337325][    C1]        ----                    ----
[  778.337364][    C1]   lock(&dev->event_lock#2);
[  778.337384][    C1]                                lock(tasklet_sync_callback.cb_lock);
[  778.337400][    C1]                                lock(&dev->event_lock#2);
[  778.337420][    C1]   lock(tasklet_sync_callback.cb_lock);
[  778.337435][    C1] 
[  778.337435][    C1]  *** DEADLOCK ***
[  778.337435][    C1] 
[  778.337441][    C1] 10 locks held by syz.2.4328/32663:
[  778.337453][    C1]  #0: ffff88805ebb3370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x35/0x1d0
[  778.337502][    C1]  #1: ffffffff8f73d960 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x8a0
[  778.337549][    C1]  #2: ffffffff8f006e58 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa56/0x1140
[  778.337602][    C1]  #3: ffff8880125ea860 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x484/0x9c0
[  778.337655][    C1]  #4: ffffffff8e9c4400 (triggers_list_lock){++++}-{4:4}, at: led_trigger_set_default+0x77/0x2a0
[  778.337706][    C1]  #5: ffff8880125ea788 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_trigger_set_default+0x87/0x2a0
[  778.337757][    C1]  #6: ffff888058598270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa4/0x320
[  778.337811][    C1]  #7: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  778.337860][    C1]  #8: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb0/0x320
[  778.337909][    C1]  #9: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  778.337957][    C1] 
[  778.337957][    C1] stack backtrace:
[  778.337971][    C1] CPU: 1 UID: 0 PID: 32663 Comm: syz.2.4328 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  778.338005][    C1] Tainted: [L]=SOFTLOCKUP
[  778.338014][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  778.338025][    C1] Call Trace:
[  778.338032][    C1]  <TASK>
[  778.338041][    C1]  dump_stack_lvl+0xe8/0x150
[  778.338065][    C1]  print_circular_bug+0x2e1/0x300
[  778.338090][    C1]  check_noncircular+0x12e/0x150
[  778.338115][    C1]  __lock_acquire+0x15a5/0x2d10
[  778.338144][    C1]  ? tasklet_action_common+0xc5/0x610
[  778.338172][    C1]  lock_acquire+0x106/0x350
[  778.338191][    C1]  ? tasklet_action_common+0xc5/0x610
[  778.338225][    C1]  rt_spin_lock+0x83/0x400
[  778.338247][    C1]  ? tasklet_action_common+0xc5/0x610
[  778.338275][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.338303][    C1]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  778.338328][    C1]  ? __pfx_rt_spin_lock+0x10/0x10
[  778.338355][    C1]  tasklet_action_common+0xc5/0x610
[  778.338384][    C1]  ? rt_spin_unlock+0x160/0x200
[  778.338410][    C1]  handle_softirqs+0x1de/0x6d0
[  778.338440][    C1]  __local_bh_enable_ip+0x170/0x2b0
[  778.338466][    C1]  ? __alloc_skb+0x186/0x7d0
[  778.338492][    C1]  __alloc_skb+0x1aa/0x7d0
[  778.338518][    C1]  hidp_send_message+0xb5/0x230
[  778.338544][    C1]  hidp_input_event+0x2a4/0x380
[  778.338568][    C1]  ? __pfx_hidp_input_event+0x10/0x10
[  778.338594][    C1]  ? input_handle_event+0xc35/0xf30
[  778.338619][    C1]  ? __pfx_hidp_input_event+0x10/0x10
[  778.338642][    C1]  input_event_dispose+0x80/0x6b0
[  778.338669][    C1]  input_inject_event+0x1d7/0x320
[  778.338694][    C1]  ? input_inject_event+0xb0/0x320
[  778.338720][    C1]  kbd_led_trigger_activate+0xbc/0x100
[  778.338745][    C1]  led_trigger_set+0x53b/0x960
[  778.338776][    C1]  ? __pfx_led_trigger_set+0x10/0x10
[  778.338808][    C1]  led_trigger_set_default+0x266/0x2a0
[  778.338839][    C1]  led_classdev_register_ext+0x787/0x9c0
[  778.338867][    C1]  ? __pfx_led_classdev_register_ext+0x10/0x10
[  778.338903][    C1]  ? input_open_device+0x2ce/0x3b0
[  778.338931][    C1]  input_leds_connect+0x517/0x790
[  778.338962][    C1]  input_register_device+0xce0/0x1140
[  778.338999][    C1]  hidp_session_probe+0x1a5/0x8a0
[  778.339024][    C1]  ? __pfx_hidp_session_probe+0x10/0x10
[  778.339048][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  778.339078][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  778.339107][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.339137][    C1]  ? l2cap_register_user+0x35/0x1d0
[  778.339158][    C1]  l2cap_register_user+0xc2/0x1d0
[  778.339177][    C1]  ? hidp_connection_add+0x1577/0x1a20
[  778.339200][    C1]  hidp_connection_add+0x158b/0x1a20
[  778.339227][    C1]  hidp_sock_ioctl+0x403/0x650
[  778.339252][    C1]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  778.339292][    C1]  ? do_vfs_ioctl+0x117b/0x1540
[  778.339324][    C1]  sock_do_ioctl+0x101/0x320
[  778.339347][    C1]  ? __pfx_sock_do_ioctl+0x10/0x10
[  778.339367][    C1]  ? do_futex+0x395/0x420
[  778.339395][    C1]  sock_ioctl+0x5c9/0x7f0
[  778.339416][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  778.339437][    C1]  ? __fget_files+0x2a/0x420
[  778.339459][    C1]  ? __fget_files+0x3a6/0x420
[  778.339482][    C1]  ? __fget_files+0x2a/0x420
[  778.339506][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  778.339528][    C1]  ? __pfx_sock_ioctl+0x10/0x10
[  778.339548][    C1]  __se_sys_ioctl+0xff/0x170
[  778.339576][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.339598][    C1]  do_syscall_64+0x15f/0xf80
[  778.339617][    C1]  ? trace_irq_disable+0x3b/0x140
[  778.339645][    C1]  ? clear_bhb_loop+0x40/0x90
[  778.339668][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.339688][    C1] RIP: 0033:0x7fcb5e6cce59
[  778.339707][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.339725][    C1] RSP: 002b:00007fcb5c905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  778.339747][    C1] RAX: ffffffffffffffda RBX: 00007fcb5e946090 RCX: 00007fcb5e6cce59
[  778.339763][    C1] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000009
[  778.339777][    C1] RBP: 00007fcb5e762d6f R08: 0000000000000000 R09: 0000000000000000
[  778.339791][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  778.339804][    C1] R13: 00007fcb5e946128 R14: 00007fcb5e946090 R15: 00007ffddb8adae8
[  778.339825][    C1]  </TASK>
[  780.283670][    T9] int51x1 3-1:1.4: probe with driver int51x1 failed with error -71
[  780.326866][    T9] usb 3-1: USB disconnect, device number 28
[  780.403498][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.842565][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.152755][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.453794][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.001882][   T12] bridge_slave_1: left allmulticast mode
[  782.001910][   T12] bridge_slave_1: left promiscuous mode
[  782.002092][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.101741][   T12] bridge_slave_0: left allmulticast mode
[  782.101762][   T12] bridge_slave_0: left promiscuous mode
[  782.101887][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.581619][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  782.691850][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.771884][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.792380][   T12] bond0 (unregistering): Released all slaves
[  782.832839][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[  783.323984][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2
[  783.684154][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3
[  783.861356][   T12] hsr_slave_0: left promiscuous mode
[  783.881343][   T12] hsr_slave_1: left promiscuous mode
[  783.881872][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  783.881887][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.922094][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.922115][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  783.981617][   T12] veth1_macvtap: left promiscuous mode
[  783.981654][   T12] veth0_macvtap: left promiscuous mode
[  783.981735][   T12] veth1_vlan: left promiscuous mode
[  783.981787][   T12] veth0_vlan: left promiscuous mode
[  784.471886][   T12] team0 (unregistering): Port device team_slave_1 removed
[  784.512016][   T12] team0 (unregistering): Port device team_slave_0 removed
[  784.860420][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4
[  785.852304][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.082965][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.283262][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.522398][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.831392][   T12] bridge_slave_1: left allmulticast mode
[  786.831411][   T12] bridge_slave_1: left promiscuous mode
[  786.831520][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.912052][   T12] bridge_slave_0: left allmulticast mode
[  786.912070][   T12] bridge_slave_0: left promiscuous mode
[  786.912197][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.091703][   T12] bridge_slave_1: left allmulticast mode
[  787.091724][   T12] bridge_slave_1: left promiscuous mode
[  787.091835][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.151676][   T12] ¾x9ÿ: left allmulticast mode
[  787.151696][   T12] ¾x9ÿ: left promiscuous mode
[  787.151821][   T12] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  787.492268][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.571893][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.631961][   T12] bond0 (unregistering): Released all slaves
[  787.931702][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.991705][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.032281][   T12] bond0 (unregistering): Released all slaves
[  788.055503][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5