last executing test programs:

2m55.658766964s ago: executing program 3 (id=1428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000010c0), 0x80c000, &(0x7f0000001300)=ANY=[@ANYBLOB='mode'])
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xf)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0xfffffffffffffffc, 0xffffffffffffffff, r3}}, 0x18)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800})
recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/115, 0x73}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRESOCT=r2], 0x3a)

2m55.303962748s ago: executing program 3 (id=1434):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1a8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x120, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

2m54.979168468s ago: executing program 3 (id=1436):
kexec_load(0x4, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c20", 0x7e, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0)
r0 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000001ffb)={'syz', 0x0}, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000098000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002e5400128028000180090001006c617374000000001800028008000140ffff00000c000240ffffffffecffffff140001800c000100636f756e7465720004000280140001800c0001006e6f747261636b000400028008000340000001"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000098000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002e5400128028000180090001006c617374000000001800028008000140ffff00000c000240ffffffffecffffff140001800c000100636f756e7465720004000280140001800c0001006e6f747261636b000400028008000340000001"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20050800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0)
write$vga_arbiter(r2, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '15', ':', '8', '.', '2'}}, 0x14) (async)
write$vga_arbiter(r2, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '15', ':', '8', '.', '2'}}, 0x14)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000080)={0x20004, <r8=>r6, 0x2})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000100)=0x2)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r9 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2m54.699580588s ago: executing program 3 (id=1441):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
socket(0x11, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)=ANY=[], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) (fail_nth: 1)

2m53.684289779s ago: executing program 3 (id=1447):
r0 = socket(0x10, 0x3, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, r0, 0x3f00000000000000)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffee2)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
io_submit(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x71, 0x0, 0x1, 0x4}, 0x8)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0xd000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xe}, {0xf000, 0x3}, {0x3000}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
poll(0x0, 0x0, 0x10)

2m53.212814537s ago: executing program 3 (id=1450):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0xfffffffe, 0x80, 0x2, 0x396}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x1d73, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10b502, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8a82, 0x0)
fallocate(r5, 0x11, 0x600, 0x1800000007c000)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240)=0x95477e3e1f60a97f, 0x4)

2m38.058524928s ago: executing program 32 (id=1450):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0xfffffffe, 0x80, 0x2, 0x396}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x1d73, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10b502, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8a82, 0x0)
fallocate(r5, 0x11, 0x600, 0x1800000007c000)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240)=0x95477e3e1f60a97f, 0x4)

2m35.319296166s ago: executing program 1 (id=1520):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 1)

2m34.786953814s ago: executing program 1 (id=1523):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x32601, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"})
r1 = socket(0x10, 0x2, 0x0)
sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a1f070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x23)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)

2m34.244797944s ago: executing program 1 (id=1525):
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xfff, {0xffff, 0x1}, {0x4a, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x5, 0xf535, 0x80}, {0xfffe, 0x805, 0x1, 0x7, 0x60d8, 0xfffe}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

2m33.463845768s ago: executing program 1 (id=1528):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x170, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x134, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

2m32.830527882s ago: executing program 1 (id=1531):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0xf, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 1)

2m32.016334813s ago: executing program 1 (id=1534):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x300000a, 0x13, r1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x46, 0x9, 0x3, 0x3, 0x7fffffffffffffff, 0x2, 0x3e, 0x4, 0x2da, 0x40, 0x201, 0x4, 0x400, 0x38, 0x2, 0x0, 0x4, 0x7}, [{0x4, 0x10000, 0x401, 0x7, 0x7, 0x3, 0x9}, {0x10000000, 0x20000b8, 0x1, 0x1, 0x8, 0x2, 0x7ff, 0x3}], "dd0f9c81ecba8c5778dbf701e7c47c426712e932fa7b2b99f1d45f4069c23d5abe702d742e569f5190d7c56151c94ff1eb7d7af29f32ef4dbdd0a07def0ef493062eab0e0c103252550ccd237fbffc21e0a48c2e323c7e74ac81e7e3a9248428fd22d02b96d3f072874944c86f8dea01f3c6c7b1c5577be1767f8a8a3c7a54dffc600395e925124c8fd6315a9dcd297ad16f5baa6c0f86382738306b460683b160cf3414d624d293c0a31d72008343b28c9ccac517ff57397035c3e63da529e7950e0265bb77716b875ed48d1279e106ec6aaa36f2c8726fec1bb00f231dc7661fcb7a37b258d8e1dcb8d00d9421d09093cdb05840c6d2362aeccda0e72d23a1e8d9f34eaca15a47da316fcfeac5c869a68474ff2af0e939b519a6d9cedd4cafde7c9a1b36b26af4ecb0f269ad1ea420db7faa6720a315a3f6eb8527de2a3375a63df03365febe2bd008dc057c0a211d278f29e93f58dbbb29bf344ea4e264afe03a19b49062dc5c9e882b1f122505789378ad53679d28412bb6dc0be062276d3f6fd497043f9719a8be48210567c006c63283db44aed6087c84c884a4eb64a92343ace189a7f9ed9ef8b3e28fbb9d9778eb6ea93ed0ddae46480ce170edff804bfaad954fdc5780b91e28ecf745f3d6e8576ec51e0f44ec8b3ca17fa867059a32c29ef63885bfb11a6f8727c10eecc9e602a7b4f7fc383fa76c044883aec42f49f6a0ecae3b1c6bd75439cb3afae65314f75ce6f77cdcdb8df920b8c3763806575ae33bd67c3745eaf0f1ece0f1bdffa3a493af11e791c94b6f522bf21d92e7e06c53bfc7e1e0fbe81add249786ef5ee84f19b7741b34a6d4f4da88d8e0da04e54acba1ff12f3cda4d600115d406351696c9192908764c4211bcb9332fb5700f4be119e28c7de910469109b7c0dd655c3dec0656ec9a0e9e2f8b0339f805a5f39b67f41ace42cc5177018cfb350fa70ba569601ed56cb79ac9a1a94871ce9d0d4f6601b2b26b487d3ca710a03401895543b6d34de94a5c60ea4201cb2bef7b92d6438e444a89a8167df1b9ddfacfcefbf450f2dcc69e05d7f44e9599712b959d96c3bcfed28677e462a1d6417b8c29a531c8a6090ccad1dee1a06c66704c0fd526c30cd1bba63fa7fb7e0b5c6c6dcf37dc9c66a99ab0a4abfcbf6de568a27afc8161480cac2f7b4e613d672f76c55453fb84d2f7798ee751db8bbc552bb28d737db9ec658cf630fd843c4c44ea14980895a4af592e84ca9e64ab0ceeeaaef42ce0488c844fa7b5074138478b1d71b33809f2631423d6ad57d8a90efc6af837d92b41226632df570f1bffd2c3dc19e81ef62a0be99879fdaabd40a2664cab36901d8ba2cb98d957c48814ac8b85467e03dafd6516c2aad580429d2727476ad4e8556c6258472c5bdebb13f7c931ab116062f64c089445620326b2698d5c6567f563226791435a931444715799fcad6adc6530b8e5117380e9501b1d93de74d673c1606fe0c5bdaa955c0314edd60a7ee562236891ccb600eb51bbffef0595d25b946f3b7ed43530db270ca0c7c02019e21eb5b5a21bc9c9e3be0a5fb6b9403c5c95683f5c0390e3dce94c2954335aaf008f8fb873a87a7a1db6d952072ca2e3699d83690c0aca992e761b399afd5c3c7c0c63f769644befc9fd35eee13233853f05baf2875b50d6bcdac6b864198d3c965cb48d60d18c684ccba04a0d18d55442b855d1bfc156969463d669aaec98ed585cd6bed28118d893b5a20738f96e66c494e4a525f42807137c58e413b145f9047358a659dded2fe746bf2ec60bfe0c8861efe171184b51076c96d14efa03f031970c7ad96fe057d28a562419f5452a978385d0fce6aac8c490336906de3ae5b0c5c32b9bc0314070d8da576f778e10fce72c0163619ba1f54c5498c68d1b6dc69a29f8ac9a69c2c7aed3fb834e48148c83f4f7312e357f0bbc54135c719b1f2dfd01debf9803661a9fe61de50a6502ba8e9aec24d177a256aa2d72fcc7c14ee028fb68d1ae75b72a8fce17e5ca68aaada973836e3eb89feb4ec03d5860198550bab2001e39e8c45476b73c356a5a7ab0d298f967756984fde17b096881e363c8edb544cc5ec58376ece05ab952a1a02e809451cc444450d29628c62b0fa6c63f7d93d1102e2c013254aebf26e3085514f4462c7264460c161142a8b740014651344dab02f105f60e581efd1dfa30a41dbd49c813a2b7b4eff736d1b9507348f594f8ac9397cc3b1b51c75aa071a3133b2d281b62c81c100b94d0a3991a88fe73e3232495a8d39ed8b7a5d1e52bf500c0e8f1cb4bf73d8e1749067df830a92489bd4cda18a4bf1ecf16c9e7e1d1480ed08e6ce2946d42a8c22db4d3f3ef895a64ddf72cb8eae26304029a1c88829a1cd34f547a4d06ef50de273085e815d45ac9536f259f2808ac4de5ae86f698ac662ac8fa1e03af2db5ad90901b7f90095b0a409b1ca1d1ff874bc73375fbd581ad014c56b14f86f7f3f992168b58158f1dac92780db608340e4e187509f85e94d5cbea602b3c6104e8dc090d12d8a41faeb1c981b6fdfecc82d7b65b4fb18c94440ea7060d7c5997aa69e4b1c9e9b6d788f0e46c1c592c8b5b7a81fe6fcb27b747ddea4a1e90bbaedfb76445db1be67ab78693c382795fe80356bab396bf9717015063d4a43ce0f9db0b6f88f4cbe92c26a7cd63db2b2c5f10186d6d10633d5b30b80f8e39c0c37d83bf027fd0c62d4f5a037c3377cd2504ebc0effa4830000000000000000"}, 0x854)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000040)='/dev/nullb0\x00', &(0x7f0000000080)='^{\\+\\)\x00', &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)='/dev/nullb0\x00', &(0x7f0000000140)='/dev/nullb0\x00', &(0x7f0000000180)='/dev/nullb0\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/nullb0\x00']}, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)

2m19.745699542s ago: executing program 2 (id=1580):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

2m19.400645489s ago: executing program 2 (id=1581):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10100, 0x0, 0x1, 0x3, 0xfc65, 0x1}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x10100, 0x2, 0x0, 0x0, 0xfc65, 0xd6a9, 0x2000000}, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x430400, 0x8)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x0, &(0x7f0000611000/0x1000)=nil)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x2400c854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9c\x7f\x00\x00\x00\x00\x00\x00\x00TmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabUl\xffn1O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2m19.055005262s ago: executing program 2 (id=1582):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = open(&(0x7f0000000040)='./file0\x00', 0x280001, 0x4c)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x8090)
r2 = socket$kcm(0x29, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000200)=0xff, 0x4)
r3 = openat$incfs(r1, &(0x7f0000000240)='.pending_reads\x00', 0x345f00, 0x88)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r4=>0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000480)={{}, r5, 0x1e, @unused=[0x7, 0xc3, 0xa31], @name="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"})
sendmsg$AUDIT_USER(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbfb, "1e6bf9b69607e890280d1e0c9a17669665bd594c275953b685b2c767185b1e6df581f619", [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044014)
pwritev2(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000001580)="d62f2c8b441e7b8b5cbbfb6218a9e395c100f676d5167d8dc9ea05a1badd22d43bc2cf67962e19fd21bb19378d0fd36e65a5f7904b9532e64a16939f7eb9", 0x3e}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="fa1e5fd1e340a90a1738fcc18933455d95f8aa7b07a91e8f4bbeab4f10a86e3dd8f8a096d868d811bb681a362f7fcbcfe6c1a28620ecaebe6c5510b181bccbc2f0b7ab44e9053526bf5c94da6954417b91f108decc637d1f14437ffdc54c966b438123ddac76db9b66e815debdb4883fcfc86e64faef80aece79e2a5b003afafb42fc3b24d23a10d9db1155514c8c9965a338d384c7d0959e02c24b7d9c143a2069de877801b42a2e1ada15f13b24a246c1da9b0191776ada0", 0xb9}, {&(0x7f0000003680)="9893e7d7070c793791cc5d1c4baed9528f0667c0061ec447243e34188e642d312297146f0076b3b6fe1752445bd02f016bc41c91e798039c0114ccb03e2c1cfedaa52ac0a852a3e191a4dc9ffa4ff9a105c8b1406f89182851aa93f1f8c6ac8174404edb8e1d6a472b49d5b68804ca64d4", 0x71}], 0x5, 0x1, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000003780)=0x4)
write$tun(r1, &(0x7f00000037c0)={@void, @val={0x3, 0x1, 0x7, 0xb5, 0x10}, @llc={@llc={0xff, 0xd4, "84", "9f206137af9bd5264827a487419bc362ff54ea129c816a681f4c1ff5881aefebe34846c965bf198bc4504c96457f5f6a12724154f6146506f4d3b1f556293e87523bf431"}}}, 0x51)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x3c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x8, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000003a00)={&(0x7f0000003940), 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x2, 0x1}, {0xb}, {0x30}, {0x48, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x51}, {0xf}, {0x2}, {0x4}, {0x12}, {0x6c}, {0x5}, {0xb, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x12, 0x1}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3f5}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000003a40)={<r6=>0x0, 0x8, 0x3})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000003e40)={{r0}, {@val={r6}, @actul_num={@void, 0x5, 0x74}}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003e80)={{r4, 0x2, 0xfffffffffffffff8, 0xffff, 0x8, 0x2d178298, 0x2, 0x5, 0x7, 0x1000, 0x1000, 0xa2a, 0x0, 0x40, 0x80000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003f80)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400, 0x41}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x81, 0xc81, 0x0, 0x4, 0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x55}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x2000c080)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000040c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004180)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000004240)={&(0x7f0000004100), 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x2c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd562, 0x62}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x80c0)
ioctl$BLKCRYPTOGENERATEKEY(r1, 0xc030128a, &(0x7f0000004300)={&(0x7f0000004280)=""/66, 0x42})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000004340), 0x14000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000004540)={&(0x7f0000004380)=[0x0, 0x0, <r11=>0x0, 0x0], &(0x7f00000043c0)=[{}, {}, {}], &(0x7f00000044c0)=[0x0], &(0x7f0000004500)=[0x0, 0x0], 0x3, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000004600)={0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x9, &(0x7f00000045c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f00000049c0)={0x202, 0x2, &(0x7f0000004640)=[r11, r12], &(0x7f0000004680)=[0x1, 0x2, 0x9, 0x1000, 0x15da, 0x0, 0xc3], &(0x7f0000004940)=[0x0], &(0x7f0000004980)=[0x8000000000000001], 0x0, 0x4})

2m18.504878817s ago: executing program 2 (id=1583):
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x8, 'nr0\x00', {'veth1_to_batadv\x00'}, 0xffff})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
write(r2, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x4)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000100)={"a6a7174a1d12ea8c83eaeae747be5dfc42261b1413dcc04506661333893f", 0x2, 0x0, 0x1, 0x4, 0xfffffff5, 0xfdb0, 0x0, 0x0, [0x7, 0xc24f, 0x0, 0x9, 0x9, 0x5, 0x7fffffff, 0x9, 0x10, 0x0, 0x2, 0x390a4000, 0x1000, 0x4, 0xdc0, 0x3d1f, 0x1815, 0x6, 0x3]})
syz_usb_connect$midi(0x0, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfc, 0x40, 0x6, "", {{{0x9, 0x4, 0x1, 0x0, 0x2, 0x1, 0x3, 0x30, 0x8e, [], [{{0x9, 0x5, 0xd, 0x2, 0x40, 0x6, 0x6, 0x6, {0x4}}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x0, 0x2, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

2m16.685148107s ago: executing program 33 (id=1534):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x300000a, 0x13, r1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x46, 0x9, 0x3, 0x3, 0x7fffffffffffffff, 0x2, 0x3e, 0x4, 0x2da, 0x40, 0x201, 0x4, 0x400, 0x38, 0x2, 0x0, 0x4, 0x7}, [{0x4, 0x10000, 0x401, 0x7, 0x7, 0x3, 0x9}, {0x10000000, 0x20000b8, 0x1, 0x1, 0x8, 0x2, 0x7ff, 0x3}], "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"}, 0x854)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000040)='/dev/nullb0\x00', &(0x7f0000000080)='^{\\+\\)\x00', &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)='/dev/nullb0\x00', &(0x7f0000000140)='/dev/nullb0\x00', &(0x7f0000000180)='/dev/nullb0\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/nullb0\x00']}, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)

2m16.630389067s ago: executing program 2 (id=1587):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10100, 0x0, 0x1, 0x3, 0xfc65, 0x1}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x10100, 0x2, 0x0, 0x0, 0xfc65, 0xd6a9, 0x2000000}, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x430400, 0x8)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x0, &(0x7f0000611000/0x1000)=nil)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x2400c854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0xc000)
r6 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9c\x7f\x00\x00\x00\x00\x00\x00\x00TmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabUl\xffn1O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x4010)
close_range(r7, 0xffffffffffffffff, 0x0)

2m16.173855178s ago: executing program 2 (id=1588):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x140, 0x0, 0x10000000000000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
write(r1, &(0x7f0000000000)="f9", 0x1)
userfaultfd(0x1)
r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x44, 0xf6}, 0x10)
r7 = fcntl$dupfd(r5, 0x0, r5)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001166e63fcee10a32d139db0000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d6163286165732900"/344], 0x1a0}}, 0x800)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000e80)='mo\x12!\xf5\xdeA\xc0}-[\xee\xb3\xe3\xac\xec\x7f\x88 \xdfV\xee\xb4e\xb6de\x00\xdc2\xc9\xca\xc7\xd3\xdbT\xdbU\x9eX`\xa5J\xa3\xdc=`/\x99\xdc\xfb\'\xbf\xe4\xe0\x15\x97\xd6\xac\x94\xadm\xc9\x93\'\x02:\xd3L\x890\x11\x8a3WG\x843\x9c\xbak\xa3\xc2\xc8\x93\xd3\xa1\xaf\x95\xc3\xcff\t\xbd\x95\xf3\v\xab\x843\xe4\xadbRB\xf6<3\xe0\x84\xfa\v\xb2\xd1\x1bI\xa3!H?Eo\x9f\xf5\xb8^\'\xd3\xbe\xf0GA\xdd\xae+\xd5\xf1z\x95\xb2\x7f\x16\xdd\x1as[\xfc\x97\xd3\x91\x9b\xc5N\x87\xdc\xfc\xea\x1c\xf0\x92\xbd\x89\xea\xba\xc7\xb1!S\xc0\xc44W[\x8d\x15.\x0e\x90\x9eE\x8e|M\xf4\xf8G\x9bH\xf58\xa8M\xb6 \x15\x9fl\x9c\xefk1\x86[\n$\xc4 \xf2\xa3k\aj=\x10\x01\xae%`\xce\x82\x8c2p\xd6\x88\\\x98\f\xc7\x06\xbe\xab\x81`d\xa5*\x1a\x93%^l\x8f\xd8t\xac\x95\xc09\x95]\xe35n\xda^\\\xedH,\xbfY\x803\xfb\x1e\x03\xb8\x8dVH\x9e\xc9\xdd\x16\x94{h\xbfk\x88rA\xfbxq\xd9\x0f\x06\'\b(as\xc0\x94\xa8\xc3\x15\xc9\xa3\xfa\xdb\x04\x18\n>\xd0\xe3?\x8c\xceB\xa7W\x9c[\r\xe8\xa2\xb7\x8d\xc7\xe9\x9f\xc9\x7f\xd8\xe4\x1e\x136\x94\xb3\xe99a-\x01<{C\x90\xb0\xc7\x9c~\aO\xb1\xaf\xa3wK\xe1b', &(0x7f0000001140)='uqv\xd6\xb8W=\xbe\\\xd4?\x16\x82\x85\x19\xc6\xc5A^}B\xfd\xbe\xb9\x13\xbc\xadn$j\xa7\x0fv\x1c\xe4\x9bB:\xc9N]Yh\xa2\x12\x19h\x88:w\xfb\x9d\xd9\xd3~U\x10\xfb1W\f\xb5\x87\xf3\xd9\xf6:.\xf4\x86\x12*|\x05rs\x82\xd1\xeaL\xe6\x880J\b\xe8Zd\xe0\xe3\xc246q\xf88R\x1e\xa4K\x84p\xe7}\xf4\x93\\\x81)#}e\xec~+W\xa6\x80\xabW\xe7\f\xa5\xc1\x8c}\xe7\xfb\x9f\xa1\xa0\xc0\b\xe1.\x05-F\xb0\xe8DJ\x0e\n\x9c1\xb7K \x0e>\xa0A\xc4\x05\xf5\xdd)NZC\xcf\x8a\xf5TEU\x81}\b\x97\x95-^\x85\xa6A\xd3o,\xb4\x97\xc4y\xc6\x19]ci\xf4\xf8\xc7\xd0\x0ed\xec\x16J\x8d\x16\x10\xcaR\xa8k:\x14\xacsu\xe1]\xe3,\x9d\x9c\xc9\x96\x8fV\xfdrN\xc7\xddS<\xac\x8f \xd1\x11\xa5\'1A\xc1\x19o\xe9HU\xa1n\x0f\xf0?\x0fnI\xfa\xcf[\x1d\xd3\xe8!\x1a\x99b[S\xaa\xa1\x05\x84\xb1\x9c\xbc\xa4n0\xeeG\x85f\x1c4R\xcf\xe3\x13\x10Dp\x0e\x9dh\xfd\xe9G\x90\xe2\xf9\xf3\x90=\b\x1a\xd5\xc6j}U=|\xa4F\x9e\r\x87\x97\xae\n\xcb\v\xd6\x1e[\xf0^\x8a\x98dh64\x9b\xfb\xd9Z\xb0E\xee\xc4m\x7f\x18>Noi\xd2\xa9-\xf1x\xef\xe5\xf9*\x9a\xea}\x952\xd2\xceHj\xb1\xb6\xd4\xa3\xac\x95\x1d\xf6\x19r`N\xe1K\xcf\xc3\x1b\xec\xdbu_\xd8\xcc\xb7]\xfd<7\x19\xc7\x7f1\xd9\xbbX\x10-\xfec\x05\x8b\xae\xbf\xe0~\x8e`xx\n@I6\xd1\xf1\'\xfb\x96\xa0\"', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2m0.983210223s ago: executing program 34 (id=1588):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x140, 0x0, 0x10000000000000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
write(r1, &(0x7f0000000000)="f9", 0x1)
userfaultfd(0x1)
r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x44, 0xf6}, 0x10)
r7 = fcntl$dupfd(r5, 0x0, r5)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001166e63fcee10a32d139db0000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d6163286165732900"/344], 0x1a0}}, 0x800)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000e80)='mo\x12!\xf5\xdeA\xc0}-[\xee\xb3\xe3\xac\xec\x7f\x88 \xdfV\xee\xb4e\xb6de\x00\xdc2\xc9\xca\xc7\xd3\xdbT\xdbU\x9eX`\xa5J\xa3\xdc=`/\x99\xdc\xfb\'\xbf\xe4\xe0\x15\x97\xd6\xac\x94\xadm\xc9\x93\'\x02:\xd3L\x890\x11\x8a3WG\x843\x9c\xbak\xa3\xc2\xc8\x93\xd3\xa1\xaf\x95\xc3\xcff\t\xbd\x95\xf3\v\xab\x843\xe4\xadbRB\xf6<3\xe0\x84\xfa\v\xb2\xd1\x1bI\xa3!H?Eo\x9f\xf5\xb8^\'\xd3\xbe\xf0GA\xdd\xae+\xd5\xf1z\x95\xb2\x7f\x16\xdd\x1as[\xfc\x97\xd3\x91\x9b\xc5N\x87\xdc\xfc\xea\x1c\xf0\x92\xbd\x89\xea\xba\xc7\xb1!S\xc0\xc44W[\x8d\x15.\x0e\x90\x9eE\x8e|M\xf4\xf8G\x9bH\xf58\xa8M\xb6 \x15\x9fl\x9c\xefk1\x86[\n$\xc4 \xf2\xa3k\aj=\x10\x01\xae%`\xce\x82\x8c2p\xd6\x88\\\x98\f\xc7\x06\xbe\xab\x81`d\xa5*\x1a\x93%^l\x8f\xd8t\xac\x95\xc09\x95]\xe35n\xda^\\\xedH,\xbfY\x803\xfb\x1e\x03\xb8\x8dVH\x9e\xc9\xdd\x16\x94{h\xbfk\x88rA\xfbxq\xd9\x0f\x06\'\b(as\xc0\x94\xa8\xc3\x15\xc9\xa3\xfa\xdb\x04\x18\n>\xd0\xe3?\x8c\xceB\xa7W\x9c[\r\xe8\xa2\xb7\x8d\xc7\xe9\x9f\xc9\x7f\xd8\xe4\x1e\x136\x94\xb3\xe99a-\x01<{C\x90\xb0\xc7\x9c~\aO\xb1\xaf\xa3wK\xe1b', &(0x7f0000001140)='uqv\xd6\xb8W=\xbe\\\xd4?\x16\x82\x85\x19\xc6\xc5A^}B\xfd\xbe\xb9\x13\xbc\xadn$j\xa7\x0fv\x1c\xe4\x9bB:\xc9N]Yh\xa2\x12\x19h\x88:w\xfb\x9d\xd9\xd3~U\x10\xfb1W\f\xb5\x87\xf3\xd9\xf6:.\xf4\x86\x12*|\x05rs\x82\xd1\xeaL\xe6\x880J\b\xe8Zd\xe0\xe3\xc246q\xf88R\x1e\xa4K\x84p\xe7}\xf4\x93\\\x81)#}e\xec~+W\xa6\x80\xabW\xe7\f\xa5\xc1\x8c}\xe7\xfb\x9f\xa1\xa0\xc0\b\xe1.\x05-F\xb0\xe8DJ\x0e\n\x9c1\xb7K \x0e>\xa0A\xc4\x05\xf5\xdd)NZC\xcf\x8a\xf5TEU\x81}\b\x97\x95-^\x85\xa6A\xd3o,\xb4\x97\xc4y\xc6\x19]ci\xf4\xf8\xc7\xd0\x0ed\xec\x16J\x8d\x16\x10\xcaR\xa8k:\x14\xacsu\xe1]\xe3,\x9d\x9c\xc9\x96\x8fV\xfdrN\xc7\xddS<\xac\x8f \xd1\x11\xa5\'1A\xc1\x19o\xe9HU\xa1n\x0f\xf0?\x0fnI\xfa\xcf[\x1d\xd3\xe8!\x1a\x99b[S\xaa\xa1\x05\x84\xb1\x9c\xbc\xa4n0\xeeG\x85f\x1c4R\xcf\xe3\x13\x10Dp\x0e\x9dh\xfd\xe9G\x90\xe2\xf9\xf3\x90=\b\x1a\xd5\xc6j}U=|\xa4F\x9e\r\x87\x97\xae\n\xcb\v\xd6\x1e[\xf0^\x8a\x98dh64\x9b\xfb\xd9Z\xb0E\xee\xc4m\x7f\x18>Noi\xd2\xa9-\xf1x\xef\xe5\xf9*\x9a\xea}\x952\xd2\xceHj\xb1\xb6\xd4\xa3\xac\x95\x1d\xf6\x19r`N\xe1K\xcf\xc3\x1b\xec\xdbu_\xd8\xcc\xb7]\xfd<7\x19\xc7\x7f1\xd9\xbbX\x10-\xfec\x05\x8b\xae\xbf\xe0~\x8e`xx\n@I6\xd1\xf1\'\xfb\x96\xa0\"', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m3.023747253s ago: executing program 0 (id=1910):
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c93012000e00050014fd0a000800970800060001"], 0x17)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xe6}, @l2cap_cid_signaling={{0xe2}, [@l2cap_create_chan_req={{0xc, 0x22, 0x5}, {0x1, 0x9, 0x8}}, @l2cap_info_rsp={{0xb, 0x6, 0xc9}, {0x1000, 0x0, "b26305c7254d65f2de0a0fa1084f6e2e261d2d142089217affbf39c7f5cc31b2bb4893de45be180c73f07ecef5baf2ef1e75d88278223cb44d81608852b1eff8e14afc865062bb3c80ed1bcf82b18bd988a4b6bb34ef80fc4d701256117647e82d29c12a45267d66fc3ce14b16cea0321b7b1ffd5c9d561e2ce95013d8d946ee8804c0aef8b236da1935da52c3a8f11f0e84bdd7d569421e67c4e75201c5853687073c72a61dd583ac7533918a9589174106552f75603ce3ffcede46fa835effc9890a3fbc"}}, @l2cap_create_chan_rsp={{0xd, 0x4f, 0x8}, {0x4, 0x76d8, 0x5, 0x8}}]}}, 0xeb)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000a40)={0x14, &(0x7f00000002c0)={0x0, 0xd, 0x11, {0x11, 0x22, "8e2698905a977252845168507a8265"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000a80)={0x20, 0x16, 0x10, "01d4df74b837c097a3acfd6ca651750a"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x6b}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x2d, 0x0, &(0x7f00000017c0))
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0xeb, {0xeb, 0x2b, "48e0063114e145f03172d1c4c6a25da486f6280edc01c6f01223d1da24693922d13b3bed6355d3cc07e9b8292d7671f452c19a60ffaa9adf697409eab34d72e08044954d779f22ee22377caa7e89fb684b9c044dfb7c827deac75bc1c1f9bb9a16c87b86136364291c6ede6e3eeee7ba90c1fa1bc621af529c3aeb7f7723c7ea48dcc81467da6bf5ed21c180b673ee2fca4f851f0ea881757cf6b086ff30b82f75852a7cead66eb17e00c22c31ff9d47f303ce78295bf89b7553d6936c3323802b77bf1ccc8c74f531cab1e0b8d3b59dd58026f620aa48e44ae803339be3ff57fc36e9bafb3413e907"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f00000003c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x2, 0x7d}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x9, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x43, 0x6, 0x5, 0x7, 0x40}, @generic={0xa4, 0x10, 0x3, "40132a0227b54785e29d5c940b0954eb737b2299b0920a507d3bc1b8f5610b94ac39ceabf707612df77ab2df6689857bec0be59787d5155c2734c4a428729a8db70c4924687c3e837dbc376109ff4c0111f9974c3730b1e630824da0ca8686fc716517ff30dcc42640922d3c7e930ad26eab44d61798d2f12db2981c74930351060b549034a42a7de7bad1098fef982818162e2f06bc1f51455203a8e6aafdfc6e"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x8, 0x2, "520b858f", "9ef9c506"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0xe, 0x2, 0x0, 0x8000, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x20, 0x0, 0x8, "3be9baccc336321f"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x20, 0x4}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "319d"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x551}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="e67b96a5c400"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "75a7"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xe}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}})

59.72883478s ago: executing program 0 (id=1924):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf182", 0x17)
execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f0000000300)='\x06\x8c\xb0\x0fTl\xeewH\xab}\x00']}, 0x100)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

58.241468263s ago: executing program 0 (id=1931):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x19c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x120, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

57.74471556s ago: executing program 0 (id=1932):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10)

57.398676944s ago: executing program 0 (id=1934):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600))
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2})

56.188204765s ago: executing program 0 (id=1941):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r1 = socket(0x2, 0x805, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0xfff}, 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x8df, &(0x7f0000000140)={0x0, 0xf80c, 0x300c, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
close_range(r2, r2, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r4, 0x0, 0x2000fb)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000300)=0x1)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000000", 0x39}, {&(0x7f0000000100)="e626d44e607d59026f46861ca2389b526383139acdc07a5bad32a2c83467e08e0ca433c1b2a39a5196fedf9a5cb54ac98443986a7c26f0e554c0e5c4d773caaf6e4914e367807d0585dcc8b43cb7ab85e75e8b552a2acf36f685bea9100cc81dd466f5eefb1561fb6122cd54091d592d75e994650f42e2cb587856136898bffa4a029a5392fe478f2c73c636a74a94e7493fbb7d1abc1169419aa1faca67f3772ba2c1119c435e6f3dd29c4ee472", 0xae}, {&(0x7f00000001c0)="d87b169f6184725a7ea0983e999389e0fa4c4b", 0x13}, {&(0x7f0000000200)="dd2bf412ed72695b0706a56b2ba1997edd6f382ced52204f3bbcd822753f246fbe042ce72a881580e5c7bb75ecb239e2ff9aceacf01f316f0d0f9ad1022edc01db6de850de2654d5a8da09d4faee5cfa51907d7a36154ce25d792023395abfaa7c7e17b162235fe0", 0x68}, {&(0x7f0000000640)="5e15802cafe402c512a8afc19a3dc4094d26d165243f06a570814b7aecf91b50cd179b89fbf53ac5b68d27f520e8d81016d749a7f5bf5c64088f078c714497ecca859cc79d6b7900709ef4aea304352968f201040000b8ea22703c2cc2a63d5ae980b72603f916c9d9bb79ff8fe4a5e150b4ebd0880e4be26a81104198417dc72ae35c44657d942ec8624a26d5b923236b3e548402fee710c6be846c31ac1694ced133ce24c526b7d3424a29285bdf00186f0e7d3b7374ecf77c4d76d227343659e54c1387241c85072ad7be7c0a8bdfa8624de952ccafe8d57a90b2765be7698a5fdd732df2", 0xe6}, {&(0x7f0000000380)="74e251658562a4932ad8d75d85db1e6f1505f28e415afb2a2feced27ff433638f613f3dbeab7096ed20cf26d9709778d07a4c45f4490e9d4311452ba1b9936b4d42b9d28d220f09f2e94f48c6b3bc0e159c5c348846cecabe397c303a2f1ff2c3cf6e71b7ee8caae7d293619346a589acc543e782848cd93e419fe92b16b9daef9e307dc30ef513e5100342c89d6df7d16722485764230367adfbb067f930a8c7a8dd95e6ca872b625f8be40c79f6182d180a4534ba2b888", 0xb8}, {&(0x7f0000000500)="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", 0x12b}], 0x7)

40.93662116s ago: executing program 35 (id=1941):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r1 = socket(0x2, 0x805, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0xfff}, 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x8df, &(0x7f0000000140)={0x0, 0xf80c, 0x300c, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
close_range(r2, r2, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r4, 0x0, 0x2000fb)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000300)=0x1)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000000", 0x39}, {&(0x7f0000000100)="e626d44e607d59026f46861ca2389b526383139acdc07a5bad32a2c83467e08e0ca433c1b2a39a5196fedf9a5cb54ac98443986a7c26f0e554c0e5c4d773caaf6e4914e367807d0585dcc8b43cb7ab85e75e8b552a2acf36f685bea9100cc81dd466f5eefb1561fb6122cd54091d592d75e994650f42e2cb587856136898bffa4a029a5392fe478f2c73c636a74a94e7493fbb7d1abc1169419aa1faca67f3772ba2c1119c435e6f3dd29c4ee472", 0xae}, {&(0x7f00000001c0)="d87b169f6184725a7ea0983e999389e0fa4c4b", 0x13}, {&(0x7f0000000200)="dd2bf412ed72695b0706a56b2ba1997edd6f382ced52204f3bbcd822753f246fbe042ce72a881580e5c7bb75ecb239e2ff9aceacf01f316f0d0f9ad1022edc01db6de850de2654d5a8da09d4faee5cfa51907d7a36154ce25d792023395abfaa7c7e17b162235fe0", 0x68}, {&(0x7f0000000640)="5e15802cafe402c512a8afc19a3dc4094d26d165243f06a570814b7aecf91b50cd179b89fbf53ac5b68d27f520e8d81016d749a7f5bf5c64088f078c714497ecca859cc79d6b7900709ef4aea304352968f201040000b8ea22703c2cc2a63d5ae980b72603f916c9d9bb79ff8fe4a5e150b4ebd0880e4be26a81104198417dc72ae35c44657d942ec8624a26d5b923236b3e548402fee710c6be846c31ac1694ced133ce24c526b7d3424a29285bdf00186f0e7d3b7374ecf77c4d76d227343659e54c1387241c85072ad7be7c0a8bdfa8624de952ccafe8d57a90b2765be7698a5fdd732df2", 0xe6}, {&(0x7f0000000380)="74e251658562a4932ad8d75d85db1e6f1505f28e415afb2a2feced27ff433638f613f3dbeab7096ed20cf26d9709778d07a4c45f4490e9d4311452ba1b9936b4d42b9d28d220f09f2e94f48c6b3bc0e159c5c348846cecabe397c303a2f1ff2c3cf6e71b7ee8caae7d293619346a589acc543e782848cd93e419fe92b16b9daef9e307dc30ef513e5100342c89d6df7d16722485764230367adfbb067f930a8c7a8dd95e6ca872b625f8be40c79f6182d180a4534ba2b888", 0xb8}, {&(0x7f0000000500)="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", 0x12b}], 0x7)

5.430251297s ago: executing program 6 (id=2160):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896) (fail_nth: 1)

5.016625276s ago: executing program 6 (id=2161):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={[&(0x7f0000000300)='\x06\x8c\xb0\x0fTl\xeewH\xab}\x00']}, 0x100)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

3.949006095s ago: executing program 6 (id=2167):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000000000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3.860405836s ago: executing program 7 (id=2168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.601343331s ago: executing program 6 (id=2170):
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x6, 0x400, 0xc, 0x4eb2, 0x5, 0x5, 0x3, 0xffffffff, 0x9, 0xffffffff, 0x1000, 0x7, 0x1, 0x1, 0xfd, 0xfffffffd, 0x2000000c, 0x6, 0x7fffffff, 0xffefffff, 0xca9f, 0x80, 0x200008, 0xfffffffb, 0xf39b, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]})
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r1, 0x22052000)
r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b8"])
r5 = syz_open_dev$evdev(0x0, 0x0, 0x200)
r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCRMFF(r5, 0x4004550d, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r0, {0x3}}, './file0\x00'})
write$char_usb(r7, &(0x7f0000000200)="5ce3c2757dd3add95eb76674a3fe77f55687ce700c68a5b1a458f5405e08a9b45aabbfcca5a910fb78aee4fcc4e86207fc5fc6", 0x33)
r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002)
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x20}, {}, @raw32={[0xfffffffd]}}], 0x1c)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
fcntl$lock(r3, 0x6, &(0x7f00000000c0)={0x3, 0x1, 0x6, 0x2})
syz_usb_disconnect(r2)
syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0)

3.440696251s ago: executing program 4 (id=2172):
fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x2b, 0x80801, 0x1)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigqueueinfo(r3, 0x4, &(0x7f0000000080)={0x20, 0x8000, 0xc})
splice(r1, 0x0, r2, 0x0, 0x82, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c0100003600010027bd7000ffdbdf25ff000000000000000000ffff640101000a01010200000000000000004f9a39ea2ad7270d5147054a129c60cd2eee564284f2a1716c39232d87731f", @ANYBLOB="6d555e06b8a96899ee12c227eeaecff00d76525e3104382f5b769a837d559d8ef73e05cd41e6f74274bff103a342dc62ea2a199bad123b68b54f9de03086aad3f2c032c8b4a83534d6f02724682de6ae023ddc16d496d2a71247b5a9773dc0bea361f59d0e6b0c51ff1e187f56bbde1bc8826f4af104eb8bf1755c049a6babdf93f619a68fb148acf21b52e3e6d01d9e2a56aeebf8fe3cc8309ee4"], 0x10c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20004004)

3.204879615s ago: executing program 7 (id=2174):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12)
r4 = socket$netlink(0x10, 0x3, 0x14)
setreuid(0xffffffffffffffff, 0xee01)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100000000d1401002dbd700000000002"], 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000580)={r7}, &(0x7f0000000700)=0x8)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000005c0)={0x0, 0xfffffffffffffc8d, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRES16=r5, @ANYRESOCT, @ANYRESHEX=r5], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000890)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
sendto$phonet(r1, &(0x7f0000000000)="2d12b12f98f11a700037fa92b849dcb7c48a5345d1dd243988dc1c364a6141cce7bdf7b1cd2fc669ea9d6e9dceda5a5293326b2c4c58f044", 0x38, 0x80, &(0x7f0000000100)={0x23, 0xe, 0x7, 0x1}, 0x10)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800)
ioctl$XFS_IOC_SCRUBV_METADATA(r9, 0xc0285840, &(0x7f0000000140)={0x6, 0x4, 0xd4, 0x0, 0x7f, 0x3, 0x0, &(0x7f00000000c0)=[{0xc, 0x1ff, 0xfff}, {0x5, 0x0, 0x7}, {0x2, 0xfe, 0x9}]})
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x401c2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={<r11=>0xffffffffffffffff})
syz_io_uring_setup(0x645f, &(0x7f0000000080)={0x0, 0xb7, 0x8, 0x2, 0x11d}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240))
sendfile(r6, r10, 0x0, 0x578410ec)
sendfile(r11, r10, 0x0, 0x100000000)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r10, 0x4068aea3, &(0x7f0000000280))
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0xfffffffd, 0x96, 0x100, 0x8000, 0x6, "7a58beca3900000000000000000000000200"})

3.125711084s ago: executing program 4 (id=2175):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={[&(0x7f0000000300)='\x06\x8c\xb0\x0fTl\xeewH\xab}\x00']}, 0x100)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

2.885853254s ago: executing program 5 (id=2177):
socket$tipc(0x1e, 0x5, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)

2.110336068s ago: executing program 5 (id=2178):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000000000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.095038402s ago: executing program 4 (id=2179):
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x8101) (fail_nth: 1)

1.880556332s ago: executing program 7 (id=2180):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x38}}], 0x1, 0x46000)

1.585334941s ago: executing program 4 (id=2181):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x100000}], 0x0, 0x1000000, 0x0})

1.568023364s ago: executing program 5 (id=2182):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.407339204s ago: executing program 7 (id=2183):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
timer_create(0x3, &(0x7f0000000480)={0x0, 0xc, 0x0, @thr={&(0x7f0000000240)="2c981f4343758ae6a7114e86dbda93c8c5dc93e120825a399dc147e1397559dcc8eac5531da8c1e9062a87c3a3bcb975f01152a0ebe01ab94b75ad850915f289c4c54c202b7a11b2cf511ce560cfbcc5ce307eaa7b5a1bbc7f9ba9b54c9079c783638b137a156824f8265ea33b322b90b40ccbb1f3b643a7a4fd6b3f3a7ee79882b11cfe92769a66dd08653bddb794e4fc47c2ddd789ae68712e856ffff2522faade3a562618523f52561f15c6b9fc4b5b5010b506f7", &(0x7f0000000340)="cac9d426747312abda20bec60802b34ae1bc58d4374f54e80a9c40095ece8089df04e4ab7d195b091b077f3a8d5b28c006c87b70568f4f7f9d7432a8f6dbed00623fafcdb1ab989147e7bc7eb016e669b4f1044e73c533fd25e9c8eef4f29bfd6301176d08f0b06777479667e22ec1aef3cbb294f3b575776aacb1aac365b6189a38776673c6f766be190622a15681ae32c2ed231e9382f59c8300f5b282ce0cbd0c025d87a3261b8f90d9c5dd1856619e792108472e55cab6d7f576a413c637277a9a4cd36b60c428a0408376eb14397dae99baf77eec5cedb7c41fc517d276bbedbcd718f7b1957f19f1"}}, &(0x7f00000004c0)=<r0=>0x0)
timer_delete(r0)

1.35203158s ago: executing program 4 (id=2184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) (fail_nth: 1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

1.18452683s ago: executing program 7 (id=2185):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ece", 0xc)
execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f0000000300)='\x06\x8c\xb0\x0fTl\xeewH\xab}\x00']}, 0x100)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

782.280419ms ago: executing program 5 (id=2186):
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c93012000e00050014fd0a00080097"], 0x17)

601.435042ms ago: executing program 4 (id=2187):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={[&(0x7f0000000300)='\x06\x8c\xb0\x0fTl\xeewH\xab}\x00']}, 0x100)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

544.893877ms ago: executing program 5 (id=2188):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x35) (fail_nth: 1)

466.848104ms ago: executing program 6 (id=2189):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

194.03219ms ago: executing program 5 (id=2190):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000000000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback}], 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7.966907ms ago: executing program 6 (id=2191):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x38}}], 0x1, 0x46000)

0s ago: executing program 7 (id=2192):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x100000}], 0x0, 0x1000000, 0x0})

kernel console output (not intermixed with test programs):

1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  407.164490][ T5804] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  407.164519][ T5804] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  407.164547][ T5804] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.164595][ T5804] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  407.164622][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.269677][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.269737][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.269783][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.269830][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.272950][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  407.371483][ T5600] usb 1-1: USB disconnect, device number 94
[  407.379478][    T9] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  407.531998][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  407.532070][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  407.532098][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  407.532124][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  407.532148][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.532195][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  407.532223][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.539077][ T5804] usb 7-1: GET_CAPABILITIES returned 0
[  407.539128][ T5804] usbtmc 7-1:16.0: can't read capabilities
[  407.644500][    T9] usbtmc 5-1:16.0: bulk endpoints not found
[  407.749983][T10946] FAULT_INJECTION: forcing a failure.
[  407.749983][T10946] name failslab, interval 1, probability 0, space 0, times 0
[  407.751534][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.6.1893 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  407.751571][T10946] Tainted: [L]=SOFTLOCKUP
[  407.751580][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  407.751596][T10946] Call Trace:
[  407.751605][T10946]  <TASK>
[  407.751617][T10946]  dump_stack_lvl+0xe8/0x150
[  407.751652][T10946]  should_fail_ex+0x46b/0x600
[  407.751693][T10946]  should_failslab+0xa8/0x100
[  407.751721][T10946]  __kmalloc_noprof+0xfe/0x7e0
[  407.751744][T10946]  ? rcu_is_watching+0x15/0xb0
[  407.751778][T10946]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  407.751805][T10946]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  407.751839][T10946]  tomoyo_realpath_from_path+0xe3/0x5d0
[  407.751877][T10946]  ? tomoyo_domain+0xd7/0x130
[  407.751910][T10946]  ? tomoyo_path_number_perm+0x219/0x630
[  407.751947][T10946]  tomoyo_path_number_perm+0x246/0x630
[  407.751987][T10946]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  407.752023][T10946]  ? __lock_acquire+0x6b5/0x2d10
[  407.752056][T10946]  ? do_raw_spin_lock+0x12b/0x2f0
[  407.752116][T10946]  ? __fget_files+0x2a/0x420
[  407.752144][T10946]  ? __fget_files+0x2a/0x420
[  407.752167][T10946]  ? __fget_files+0x3a6/0x420
[  407.752191][T10946]  ? __fget_files+0x2a/0x420
[  407.752220][T10946]  security_file_ioctl+0xc3/0x2a0
[  407.752256][T10946]  __se_sys_ioctl+0x47/0x170
[  407.752287][T10946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.752313][T10946]  do_syscall_64+0x174/0x580
[  407.752342][T10946]  ? trace_irq_disable+0x3b/0x140
[  407.752372][T10946]  ? clear_bhb_loop+0x40/0x90
[  407.752401][T10946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.752425][T10946] RIP: 0033:0x7f8d3410ce59
[  407.752447][T10946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.752469][T10946] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.752494][T10946] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  407.752513][T10946] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000004
[  407.752529][T10946] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  407.752545][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.752560][T10946] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  407.752595][T10946]  </TASK>
[  407.752605][T10946] ERROR: Out of memory at tomoyo_realpath_from_path.
[  407.752910][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.754021][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.754094][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.756978][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.785332][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.786094][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.786323][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.786890][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.787072][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.787862][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.788064][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.823168][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.841278][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.842020][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.842252][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  407.843136][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  408.267389][ T5719] usb 7-1: USB disconnect, device number 4
[  408.826583][T10959] FAULT_INJECTION: forcing a failure.
[  408.826583][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.826623][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.0.1897 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  408.826654][T10959] Tainted: [L]=SOFTLOCKUP
[  408.826663][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  408.826701][T10959] Call Trace:
[  408.826711][T10959]  <TASK>
[  408.826721][T10959]  dump_stack_lvl+0xe8/0x150
[  408.826755][T10959]  should_fail_ex+0x46b/0x600
[  408.826794][T10959]  _copy_from_user+0x2d/0xb0
[  408.826830][T10959]  userio_char_write+0xc9/0x700
[  408.826859][T10959]  ? apparmor_file_permission+0x1f4/0x300
[  408.826895][T10959]  ? __pfx_userio_char_write+0x10/0x10
[  408.826927][T10959]  ? rw_verify_area+0x25b/0x4e0
[  408.826955][T10959]  ? __pfx_userio_char_write+0x10/0x10
[  408.826987][T10959]  vfs_write+0x2a3/0xba0
[  408.827023][T10959]  ? __pfx_vfs_write+0x10/0x10
[  408.827053][T10959]  ? __fget_files+0x2a/0x420
[  408.827081][T10959]  ? __fget_files+0x2a/0x420
[  408.827104][T10959]  ? __fget_files+0x3a6/0x420
[  408.827127][T10959]  ? __fget_files+0x2a/0x420
[  408.827164][T10959]  ksys_write+0x156/0x270
[  408.827196][T10959]  ? __pfx_ksys_write+0x10/0x10
[  408.827235][T10959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.827262][T10959]  do_syscall_64+0x174/0x580
[  408.827292][T10959]  ? trace_irq_disable+0x3b/0x140
[  408.827322][T10959]  ? clear_bhb_loop+0x40/0x90
[  408.827351][T10959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.827375][T10959] RIP: 0033:0x7f62e0bcce59
[  408.827396][T10959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.827416][T10959] RSP: 002b:00007f62dedfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  408.827441][T10959] RAX: ffffffffffffffda RBX: 00007f62e0e46090 RCX: 00007f62e0bcce59
[  408.827459][T10959] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003
[  408.827474][T10959] RBP: 00007f62dedfd090 R08: 0000000000000000 R09: 0000000000000000
[  408.827489][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.827504][T10959] R13: 00007f62e0e46128 R14: 00007f62e0e46090 R15: 00007ffe756e9b68
[  408.827540][T10959]  </TASK>
[  409.359836][ T5719] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  409.546574][ T5719] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  409.557556][ T5719] usb 7-1: unable to read config index 0 descriptor/start: -61
[  409.557597][ T5719] usb 7-1: can't read configurations, error -61
[  409.693071][ T5719] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  409.860323][ T5719] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  409.884163][ T5719] usb 7-1: unable to read config index 0 descriptor/start: -61
[  409.884204][ T5719] usb 7-1: can't read configurations, error -61
[  409.887075][ T5719] usb usb7-port1: attempt power cycle
[  409.970981][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'.
[  410.112704][ T5804] usb 5-1: USB disconnect, device number 23
[  410.133211][T10969] FAULT_INJECTION: forcing a failure.
[  410.133211][T10969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.135835][T10969] CPU: 1 UID: 0 PID: 10969 Comm: syz.0.1902 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  410.135871][T10969] Tainted: [L]=SOFTLOCKUP
[  410.135880][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  410.135896][T10969] Call Trace:
[  410.135905][T10969]  <TASK>
[  410.135920][T10969]  dump_stack_lvl+0xe8/0x150
[  410.135955][T10969]  should_fail_ex+0x46b/0x600
[  410.135994][T10969]  _copy_from_user+0x2d/0xb0
[  410.136021][T10969]  ___sys_sendmsg+0x1c6/0x360
[  410.136050][T10969]  ? __lock_acquire+0x6b5/0x2d10
[  410.136085][T10969]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.136150][T10969]  ? __fget_files+0x2a/0x420
[  410.136173][T10969]  ? __fget_files+0x3a6/0x420
[  410.136208][T10969]  __x64_sys_sendmsg+0x1b7/0x290
[  410.136239][T10969]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.136287][T10969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.136313][T10969]  do_syscall_64+0x174/0x580
[  410.136344][T10969]  ? trace_irq_disable+0x3b/0x140
[  410.136374][T10969]  ? clear_bhb_loop+0x40/0x90
[  410.136403][T10969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.136426][T10969] RIP: 0033:0x7f62e0bcce59
[  410.136447][T10969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.136468][T10969] RSP: 002b:00007f62dee1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.136491][T10969] RAX: ffffffffffffffda RBX: 00007f62e0e45fa0 RCX: 00007f62e0bcce59
[  410.136508][T10969] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000004
[  410.136523][T10969] RBP: 00007f62dee1e090 R08: 0000000000000000 R09: 0000000000000000
[  410.136538][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.136552][T10969] R13: 00007f62e0e46038 R14: 00007f62e0e45fa0 R15: 00007ffe756e9b68
[  410.136586][T10969]  </TASK>
[  410.355686][ T5719] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  410.383426][ T5719] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  410.388188][ T5719] usb 7-1: unable to read config index 0 descriptor/start: -61
[  410.388236][ T5719] usb 7-1: can't read configurations, error -61
[  410.476588][T10971] FAULT_INJECTION: forcing a failure.
[  410.476588][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.476620][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.4.1903 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  410.476643][T10971] Tainted: [L]=SOFTLOCKUP
[  410.476650][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  410.476668][T10971] Call Trace:
[  410.476674][T10971]  <TASK>
[  410.476682][T10971]  dump_stack_lvl+0xe8/0x150
[  410.476706][T10971]  should_fail_ex+0x46b/0x600
[  410.476734][T10971]  _copy_from_user+0x2d/0xb0
[  410.476753][T10971]  ___sys_sendmsg+0x1c6/0x360
[  410.476774][T10971]  ? __lock_acquire+0x6b5/0x2d10
[  410.476798][T10971]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.476844][T10971]  ? __fget_files+0x2a/0x420
[  410.476860][T10971]  ? __fget_files+0x3a6/0x420
[  410.476884][T10971]  __x64_sys_sendmsg+0x1b7/0x290
[  410.476907][T10971]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.476940][T10971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.476958][T10971]  do_syscall_64+0x174/0x580
[  410.476980][T10971]  ? trace_irq_disable+0x3b/0x140
[  410.477000][T10971]  ? clear_bhb_loop+0x40/0x90
[  410.477021][T10971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.477037][T10971] RIP: 0033:0x7fcfc807ce59
[  410.477052][T10971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.477067][T10971] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.477085][T10971] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  410.477098][T10971] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  410.477109][T10971] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  410.477119][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.477129][T10971] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  410.477154][T10971]  </TASK>
[  410.566692][ T5719] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  410.685671][ T5719] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  410.717701][ T5719] usb 7-1: unable to read config index 0 descriptor/start: -61
[  410.717746][ T5719] usb 7-1: can't read configurations, error -61
[  410.718115][ T5719] usb usb7-port1: unable to enumerate USB device
[  411.086849][T10981] random: crng reseeded on system resumption
[  411.473893][T10984] IPVS: Error connecting to the multicast addr
[  411.820579][ T5719] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  411.974539][ T5719] usb 1-1: Using ep0 maxpacket: 16
[  411.995693][ T5719] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  411.995745][ T5719] usb 1-1: config 0 has no interface number 0
[  411.995795][ T5719] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  411.995825][ T5719] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  412.029480][ T5719] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  412.029514][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.029537][ T5719] usb 1-1: Product: syz
[  412.029553][ T5719] usb 1-1: Manufacturer: syz
[  412.029570][ T5719] usb 1-1: SerialNumber: syz
[  412.071814][ T5719] usb 1-1: config 0 descriptor??
[  412.073698][T10988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  412.073868][T10988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  412.299262][T10988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  412.307793][T10988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  412.515707][ T5719] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  412.566309][T11005] FAULT_INJECTION: forcing a failure.
[  412.566309][T11005] name failslab, interval 1, probability 0, space 0, times 0
[  412.566408][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.5.1915 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  412.566441][T11005] Tainted: [L]=SOFTLOCKUP
[  412.566450][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  412.566465][T11005] Call Trace:
[  412.566474][T11005]  <TASK>
[  412.566485][T11005]  dump_stack_lvl+0xe8/0x150
[  412.566525][T11005]  should_fail_ex+0x46b/0x600
[  412.566563][T11005]  should_failslab+0xa8/0x100
[  412.566609][T11005]  __kmalloc_noprof+0xfe/0x7e0
[  412.566633][T11005]  ? rcu_is_watching+0x15/0xb0
[  412.566668][T11005]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  412.566695][T11005]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  412.566731][T11005]  tomoyo_realpath_from_path+0xe3/0x5d0
[  412.566761][T11005]  ? tomoyo_domain+0xd7/0x130
[  412.566795][T11005]  ? tomoyo_path_number_perm+0x219/0x630
[  412.566832][T11005]  tomoyo_path_number_perm+0x246/0x630
[  412.566872][T11005]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  412.566906][T11005]  ? __lock_acquire+0x6b5/0x2d10
[  412.566939][T11005]  ? do_raw_spin_lock+0x12b/0x2f0
[  412.567007][T11005]  ? __fget_files+0x2a/0x420
[  412.567035][T11005]  ? __fget_files+0x2a/0x420
[  412.567057][T11005]  ? __fget_files+0x3a6/0x420
[  412.567080][T11005]  ? __fget_files+0x2a/0x420
[  412.567108][T11005]  security_file_ioctl+0xc3/0x2a0
[  412.567144][T11005]  __se_sys_ioctl+0x47/0x170
[  412.567175][T11005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.567201][T11005]  do_syscall_64+0x174/0x580
[  412.567230][T11005]  ? trace_irq_disable+0x3b/0x140
[  412.567260][T11005]  ? clear_bhb_loop+0x40/0x90
[  412.567288][T11005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.567312][T11005] RIP: 0033:0x7fa3df37ce59
[  412.567334][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.567354][T11005] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  412.567379][T11005] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  412.567397][T11005] RDX: 00002000000003c0 RSI: 0000000000003ba0 RDI: 0000000000000003
[  412.567413][T11005] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  412.567428][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.567442][T11005] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  412.567479][T11005]  </TASK>
[  412.567552][T11005] ERROR: Out of memory at tomoyo_realpath_from_path.
[  412.838116][ T5719] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 212
[  413.069914][   T60] Bluetooth: hci5: ISO packet for unknown connection handle 0
[  414.121375][ T5804] hid-generic 0005:0458:0008.000A: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  414.359520][ T5784] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  414.449516][ T5804] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  414.562731][ T5784] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  414.562764][ T5784] usb 7-1: config 0 interface 0 has no altsetting 0
[  414.592773][ T5784] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  414.592806][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  414.592828][ T5784] usb 7-1: Product: syz
[  414.592844][ T5784] usb 7-1: Manufacturer: syz
[  414.592860][ T5784] usb 7-1: SerialNumber: syz
[  414.621909][ T5784] usb 7-1: config 0 descriptor??
[  414.642568][ T5804] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  414.642604][ T5804] usb 6-1: config 0 interface 0 has no altsetting 0
[  414.655224][ T5804] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  414.655261][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  414.655285][ T5804] usb 6-1: Product: syz
[  414.655303][ T5804] usb 6-1: Manufacturer: syz
[  414.655320][ T5804] usb 6-1: SerialNumber: syz
[  414.713763][ T5804] usb 6-1: config 0 descriptor??
[  414.719180][ T5784] usb 7-1: selecting invalid altsetting 0
[  414.788275][ T6568] usb 1-1: USB disconnect, device number 95
[  414.919110][T11021] FAULT_INJECTION: forcing a failure.
[  414.919110][T11021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.919152][T11021] CPU: 0 UID: 0 PID: 11021 Comm: syz.5.1921 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  414.919184][T11021] Tainted: [L]=SOFTLOCKUP
[  414.919194][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  414.919210][T11021] Call Trace:
[  414.919221][T11021]  <TASK>
[  414.919231][T11021]  dump_stack_lvl+0xe8/0x150
[  414.919267][T11021]  should_fail_ex+0x46b/0x600
[  414.919307][T11021]  _copy_to_user+0x31/0xb0
[  414.919340][T11021]  simple_read_from_buffer+0xe1/0x170
[  414.919372][T11021]  proc_fail_nth_read+0x1be/0x230
[  414.919400][T11021]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.919427][T11021]  ? rw_verify_area+0x2ac/0x4e0
[  414.919455][T11021]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.919482][T11021]  vfs_read+0x212/0xa80
[  414.919519][T11021]  ? __pfx_vfs_read+0x10/0x10
[  414.919550][T11021]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  414.919580][T11021]  ? lockdep_hardirqs_on+0x7a/0x110
[  414.919609][T11021]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  414.919637][T11021]  ? mutex_lock_nested+0x152/0x1d0
[  414.919671][T11021]  ? fdget_pos+0x252/0x320
[  414.919705][T11021]  ksys_read+0x156/0x270
[  414.919736][T11021]  ? __pfx_ksys_read+0x10/0x10
[  414.919764][T11021]  ? rt_spin_unlock+0x160/0x200
[  414.919794][T11021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.919829][T11021]  do_syscall_64+0x174/0x580
[  414.919858][T11021]  ? trace_irq_disable+0x3b/0x140
[  414.919887][T11021]  ? clear_bhb_loop+0x40/0x90
[  414.919917][T11021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.919940][T11021] RIP: 0033:0x7fa3df33d68e
[  414.919961][T11021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.919981][T11021] RSP: 002b:00007fa3dd5cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  414.920006][T11021] RAX: ffffffffffffffda RBX: 00007fa3dd5ce6c0 RCX: 00007fa3df33d68e
[  414.920024][T11021] RDX: 000000000000000f RSI: 00007fa3dd5ce0a0 RDI: 0000000000000004
[  414.920039][T11021] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  414.920055][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.920070][T11021] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  414.920106][T11021]  </TASK>
[  415.934855][ T5804] usb 6-1: selecting invalid altsetting 0
[  415.959787][ T5784] usb 7-1: USB disconnect, device number 9
[  416.158516][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'.
[  416.387637][T11045] FAULT_INJECTION: forcing a failure.
[  416.387637][T11045] name failslab, interval 1, probability 0, space 0, times 0
[  416.387676][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.6.1930 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  416.387704][T11045] Tainted: [L]=SOFTLOCKUP
[  416.387712][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  416.387724][T11045] Call Trace:
[  416.387732][T11045]  <TASK>
[  416.387741][T11045]  dump_stack_lvl+0xe8/0x150
[  416.387782][T11045]  should_fail_ex+0x46b/0x600
[  416.387816][T11045]  should_failslab+0xa8/0x100
[  416.387841][T11045]  __kmalloc_noprof+0xfe/0x7e0
[  416.387863][T11045]  ? rcu_is_watching+0x15/0xb0
[  416.387890][T11045]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  416.387915][T11045]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  416.387941][T11045]  tomoyo_realpath_from_path+0xe3/0x5d0
[  416.387964][T11045]  ? tomoyo_domain+0xd7/0x130
[  416.387990][T11045]  ? tomoyo_path_number_perm+0x219/0x630
[  416.388021][T11045]  tomoyo_path_number_perm+0x246/0x630
[  416.388055][T11045]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  416.388085][T11045]  ? __lock_acquire+0x6b5/0x2d10
[  416.388114][T11045]  ? do_raw_spin_lock+0x12b/0x2f0
[  416.388163][T11045]  ? __fget_files+0x2a/0x420
[  416.388189][T11045]  ? __fget_files+0x2a/0x420
[  416.388205][T11045]  ? __fget_files+0x3a6/0x420
[  416.388222][T11045]  ? __fget_files+0x2a/0x420
[  416.388243][T11045]  security_file_ioctl+0xc3/0x2a0
[  416.388274][T11045]  __se_sys_ioctl+0x47/0x170
[  416.388297][T11045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.388317][T11045]  do_syscall_64+0x174/0x580
[  416.388341][T11045]  ? trace_irq_disable+0x3b/0x140
[  416.388364][T11045]  ? clear_bhb_loop+0x40/0x90
[  416.388386][T11045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.388405][T11045] RIP: 0033:0x7f8d3410ce59
[  416.388423][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.388440][T11045] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.388461][T11045] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  416.388477][T11045] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005
[  416.388490][T11045] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  416.388504][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.388514][T11045] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  416.388542][T11045]  </TASK>
[  416.442339][T11045] ERROR: Out of memory at tomoyo_realpath_from_path.
[  416.890940][ T5804] usb 6-1: USB disconnect, device number 13
[  417.410863][T11055] FAULT_INJECTION: forcing a failure.
[  417.410863][T11055] name failslab, interval 1, probability 0, space 0, times 0
[  417.410904][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.4.1935 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  417.410937][T11055] Tainted: [L]=SOFTLOCKUP
[  417.410946][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  417.410971][T11055] Call Trace:
[  417.410980][T11055]  <TASK>
[  417.410991][T11055]  dump_stack_lvl+0xe8/0x150
[  417.411026][T11055]  should_fail_ex+0x46b/0x600
[  417.411068][T11055]  should_failslab+0xa8/0x100
[  417.411099][T11055]  __kmalloc_noprof+0xfe/0x7e0
[  417.411122][T11055]  ? rcu_is_watching+0x15/0xb0
[  417.411158][T11055]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  417.411185][T11055]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  417.411219][T11055]  tomoyo_realpath_from_path+0xe3/0x5d0
[  417.411249][T11055]  ? tomoyo_domain+0xd7/0x130
[  417.411281][T11055]  ? tomoyo_path_number_perm+0x219/0x630
[  417.411317][T11055]  tomoyo_path_number_perm+0x246/0x630
[  417.411355][T11055]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  417.411391][T11055]  ? __lock_acquire+0x6b5/0x2d10
[  417.411423][T11055]  ? do_raw_spin_lock+0x12b/0x2f0
[  417.411481][T11055]  ? __fget_files+0x2a/0x420
[  417.411508][T11055]  ? __fget_files+0x2a/0x420
[  417.411531][T11055]  ? __fget_files+0x3a6/0x420
[  417.411563][T11055]  ? __fget_files+0x2a/0x420
[  417.411598][T11055]  security_file_ioctl+0xc3/0x2a0
[  417.411633][T11055]  __se_sys_ioctl+0x47/0x170
[  417.411662][T11055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.411688][T11055]  do_syscall_64+0x174/0x580
[  417.411717][T11055]  ? trace_irq_disable+0x3b/0x140
[  417.411747][T11055]  ? clear_bhb_loop+0x40/0x90
[  417.411776][T11055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.411801][T11055] RIP: 0033:0x7fcfc807ce59
[  417.411824][T11055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.411845][T11055] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  417.411870][T11055] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  417.411888][T11055] RDX: 0000200000000080 RSI: 000000004008af30 RDI: 0000000000000007
[  417.411904][T11055] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  417.411931][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.411944][T11055] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  417.411986][T11055]  </TASK>
[  417.435606][T11055] ERROR: Out of memory at tomoyo_realpath_from_path.
[  417.914752][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1936'.
[  418.578166][T11077] binder: 11076:11077 ioctl c0306201 200000000040 returned -22
[  418.756643][T11080] FAULT_INJECTION: forcing a failure.
[  418.756643][T11080] name failslab, interval 1, probability 0, space 0, times 0
[  418.756685][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.6.1944 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  418.756717][T11080] Tainted: [L]=SOFTLOCKUP
[  418.756729][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  418.756744][T11080] Call Trace:
[  418.756753][T11080]  <TASK>
[  418.756764][T11080]  dump_stack_lvl+0xe8/0x150
[  418.756799][T11080]  should_fail_ex+0x46b/0x600
[  418.756837][T11080]  should_failslab+0xa8/0x100
[  418.756865][T11080]  __kmalloc_noprof+0xfe/0x7e0
[  418.756887][T11080]  ? rcu_is_watching+0x15/0xb0
[  418.756922][T11080]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  418.756948][T11080]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  418.756982][T11080]  tomoyo_realpath_from_path+0xe3/0x5d0
[  418.757012][T11080]  ? tomoyo_domain+0xd7/0x130
[  418.757045][T11080]  ? tomoyo_path_number_perm+0x219/0x630
[  418.757082][T11080]  tomoyo_path_number_perm+0x246/0x630
[  418.757119][T11080]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  418.757154][T11080]  ? __lock_acquire+0x6b5/0x2d10
[  418.757186][T11080]  ? do_raw_spin_lock+0x12b/0x2f0
[  418.757245][T11080]  ? __fget_files+0x2a/0x420
[  418.757273][T11080]  ? __fget_files+0x2a/0x420
[  418.757296][T11080]  ? __fget_files+0x3a6/0x420
[  418.757320][T11080]  ? __fget_files+0x2a/0x420
[  418.757348][T11080]  security_file_ioctl+0xc3/0x2a0
[  418.757385][T11080]  __se_sys_ioctl+0x47/0x170
[  418.757417][T11080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.757443][T11080]  do_syscall_64+0x174/0x580
[  418.757475][T11080]  ? clear_bhb_loop+0x40/0x90
[  418.757504][T11080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.757527][T11080] RIP: 0033:0x7f8d3410ce59
[  418.757548][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.757576][T11080] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  418.757600][T11080] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  418.757618][T11080] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000003
[  418.757634][T11080] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  418.757649][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.757664][T11080] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  418.757700][T11080]  </TASK>
[  418.766937][T11080] ERROR: Out of memory at tomoyo_realpath_from_path.
[  418.767101][T11080] binder: 11079:11080 ioctl c0306201 200000000040 returned -22
[  419.362618][ T5804] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  419.562713][ T5719] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  419.595914][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short
[  419.598912][ T5804] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7
[  419.623231][ T5804] usb 5-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40
[  419.623268][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.623285][ T5804] usb 5-1: Product: syz
[  419.623296][ T5804] usb 5-1: Manufacturer: syz
[  419.623308][ T5804] usb 5-1: SerialNumber: syz
[  419.741347][ T5719] usb 7-1: Using ep0 maxpacket: 32
[  419.745262][ T5719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.750166][ T5719] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  419.750257][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.750282][ T5719] usb 7-1: Product: syz
[  419.750299][ T5719] usb 7-1: Manufacturer: syz
[  419.750316][ T5719] usb 7-1: SerialNumber: syz
[  419.868199][ T5719] usb 7-1: config 0 descriptor??
[  419.878496][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.904020][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.953191][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.957786][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.982074][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.982627][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.984300][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.985715][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.031635][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.032677][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.095255][ T5719] usb 7-1: No union descriptors
[  420.147217][ T5719] usb 7-1: unsupported MDLM descriptors
[  420.211917][ T5804] usb 5-1: 1:1 : bogus bTerminalLink 0
[  420.213750][ T5804] usb 5-1: unit 2 not found!
[  420.213772][ T5804] usb 5-1: unit 0 not found!
[  420.272624][ T6568] usb 7-1: USB disconnect, device number 10
[  420.549633][ T5804] usb 5-1: selecting invalid altsetting 1
[  420.549662][ T5804] snd-usb-caiaq 5-1:1.2: can't set alt interface.
[  420.549685][ T5804] usb 5-1: unable to init card! (ret=-5)
[  420.551935][ T5804] snd-usb-caiaq 5-1:1.2: probe with driver snd-usb-caiaq failed with error -5
[  420.575429][ T5804] usb 5-1: USB disconnect, device number 24
[  421.071970][ T5692] udevd[5692]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.116943][T11103] FAULT_INJECTION: forcing a failure.
[  421.116943][T11103] name failslab, interval 1, probability 0, space 0, times 0
[  421.141431][T11103] CPU: 1 UID: 0 PID: 11103 Comm: syz.5.1951 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  421.141470][T11103] Tainted: [L]=SOFTLOCKUP
[  421.141479][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  421.141499][T11103] Call Trace:
[  421.141513][T11103]  <TASK>
[  421.141524][T11103]  dump_stack_lvl+0xe8/0x150
[  421.141559][T11103]  should_fail_ex+0x46b/0x600
[  421.141599][T11103]  should_failslab+0xa8/0x100
[  421.141629][T11103]  __kmalloc_noprof+0xfe/0x7e0
[  421.141652][T11103]  ? rcu_is_watching+0x15/0xb0
[  421.141685][T11103]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  421.141712][T11103]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  421.141746][T11103]  tomoyo_realpath_from_path+0xe3/0x5d0
[  421.141766][T11103]  ? tomoyo_domain+0xd7/0x130
[  421.141789][T11103]  ? tomoyo_path_number_perm+0x219/0x630
[  421.141814][T11103]  tomoyo_path_number_perm+0x246/0x630
[  421.141841][T11103]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  421.141864][T11103]  ? __lock_acquire+0x6b5/0x2d10
[  421.141887][T11103]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.141931][T11103]  ? __fget_files+0x2a/0x420
[  421.141978][T11103]  ? __fget_files+0x2a/0x420
[  421.142000][T11103]  ? __fget_files+0x3a6/0x420
[  421.142016][T11103]  ? __fget_files+0x2a/0x420
[  421.142053][T11103]  security_file_ioctl+0xc3/0x2a0
[  421.142089][T11103]  __se_sys_ioctl+0x47/0x170
[  421.142121][T11103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.142146][T11103]  do_syscall_64+0x174/0x580
[  421.142175][T11103]  ? trace_irq_disable+0x3b/0x140
[  421.142205][T11103]  ? clear_bhb_loop+0x40/0x90
[  421.142235][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.142253][T11103] RIP: 0033:0x7fa3df37ce59
[  421.142269][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.142284][T11103] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.142302][T11103] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  421.142314][T11103] RDX: 0000200000000280 RSI: 00000000c0884123 RDI: 0000000000000005
[  421.142326][T11103] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  421.142337][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.142347][T11103] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  421.142372][T11103]  </TASK>
[  421.142380][T11103] ERROR: Out of memory at tomoyo_realpath_from_path.
[  421.659691][ T6568] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  421.703125][ T5600] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  421.813759][ T6568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.813797][ T6568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.813843][ T6568] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  421.813870][ T6568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.867814][ T6568] usb 5-1: config 0 descriptor??
[  421.873694][ T5600] usb 7-1: Using ep0 maxpacket: 8
[  421.894577][ T5600] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023
[  421.894613][ T5600] usb 7-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  421.894644][ T5600] usb 7-1: config 1 interface 0 has no altsetting 0
[  421.906496][ T5600] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  421.906529][ T5600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.906553][ T5600] usb 7-1: Product: ࡠ
[  421.906610][ T5600] usb 7-1: Manufacturer: ⶘—馕㹢衊쯔間䅍ὸ놪䉃์럝ሣì
[  421.906670][ T5600] usb 7-1: SerialNumber: syz
[  421.930896][ T5718] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  421.987582][T11104] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  422.073236][   T60] Bluetooth: hci4: unexpected subevent 0x10 length: 5 > 2
[  422.119674][ T5718] usb 6-1: Using ep0 maxpacket: 8
[  422.124366][ T5718] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  422.124392][ T5718] usb 6-1: config 0 has no interface number 0
[  422.124431][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  422.124716][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  422.124747][ T5718] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  422.125005][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  422.125055][ T5718] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  422.125080][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.239968][ T5718] usb 6-1: config 0 descriptor??
[  422.327001][ T5718] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  422.536986][ T5600] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  422.599887][ T5600] usb 7-1: USB disconnect, device number 11
[  424.270045][ T6568] usbhid 5-1:0.0: can't add hid device: -71
[  424.270181][ T6568] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  424.351232][ T6568] usb 5-1: USB disconnect, device number 25
[  424.848883][ T6568] usb 6-1: USB disconnect, device number 14
[  424.882106][T11122] FAULT_INJECTION: forcing a failure.
[  424.882106][T11122] name failslab, interval 1, probability 0, space 0, times 0
[  424.882144][T11122] CPU: 1 UID: 0 PID: 11122 Comm: syz.6.1958 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  424.882173][T11122] Tainted: [L]=SOFTLOCKUP
[  424.882181][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  424.882195][T11122] Call Trace:
[  424.882204][T11122]  <TASK>
[  424.882213][T11122]  dump_stack_lvl+0xe8/0x150
[  424.882244][T11122]  should_fail_ex+0x46b/0x600
[  424.882280][T11122]  should_failslab+0xa8/0x100
[  424.882307][T11122]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  424.882365][T11122]  ? ima_inode_get+0xea/0x4d0
[  424.882394][T11122]  ? ima_inode_get+0xea/0x4d0
[  424.882429][T11122]  ima_inode_get+0xea/0x4d0
[  424.882461][T11122]  process_measurement+0x470/0x1c90
[  424.882497][T11122]  ? __pfx_process_measurement+0x10/0x10
[  424.882529][T11122]  ? aa_file_perm+0x192/0x15f0
[  424.882575][T11122]  ? get_pid_task+0x20/0x1f0
[  424.882605][T11122]  ima_file_mmap+0x1b0/0x200
[  424.882631][T11122]  ? __pfx_ima_file_mmap+0x10/0x10
[  424.882665][T11122]  ? apparmor_mmap_file+0x2da/0x3e0
[  424.882694][T11122]  security_mmap_file+0x773/0xa20
[  424.882722][T11122]  vm_mmap_pgoff+0x134/0x4f0
[  424.882765][T11122]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  424.882795][T11122]  ? __fget_files+0x2a/0x420
[  424.882812][T11122]  ? __fget_files+0x3a6/0x420
[  424.882827][T11122]  ? __fget_files+0x2a/0x420
[  424.882845][T11122]  ksys_mmap_pgoff+0x4e8/0x720
[  424.882872][T11122]  ? __x64_sys_mmap+0x7f/0x140
[  424.882894][T11122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.882913][T11122]  do_syscall_64+0x174/0x580
[  424.882935][T11122]  ? trace_irq_disable+0x3b/0x140
[  424.882959][T11122]  ? clear_bhb_loop+0x40/0x90
[  424.882980][T11122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.882998][T11122] RIP: 0033:0x7f8d3410ce59
[  424.883016][T11122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.883032][T11122] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  424.883051][T11122] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  424.883064][T11122] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[  424.883077][T11122] RBP: 00007f8d32366090 R08: 0000000000000003 R09: 0000000000000000
[  424.883088][T11122] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001
[  424.883099][T11122] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  424.883127][T11122]  </TASK>
[  425.171951][ T6568] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  425.267310][T11124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.331195][T11126] binder: 11125:11126 ioctl c0306201 200000000040 returned -22
[  425.450817][T11128] binder: 11127:11128 ioctl c0306201 200000000040 returned -14
[  425.452518][T11128] FAULT_INJECTION: forcing a failure.
[  425.452518][T11128] name failslab, interval 1, probability 0, space 0, times 0
[  425.453227][T11128] CPU: 0 UID: 0 PID: 11128 Comm: syz.4.1961 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  425.453262][T11128] Tainted: [L]=SOFTLOCKUP
[  425.453272][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  425.453287][T11128] Call Trace:
[  425.453297][T11128]  <TASK>
[  425.453308][T11128]  dump_stack_lvl+0xe8/0x150
[  425.453343][T11128]  should_fail_ex+0x46b/0x600
[  425.453383][T11128]  should_failslab+0xa8/0x100
[  425.453413][T11128]  __kvmalloc_node_noprof+0x181/0x910
[  425.453441][T11128]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  425.453475][T11128]  ? seq_read_iter+0x203/0xe20
[  425.453514][T11128]  ? seq_read_iter+0x203/0xe20
[  425.453551][T11128]  ? seq_read_iter+0xb8/0xe20
[  425.453589][T11128]  seq_read_iter+0x203/0xe20
[  425.453623][T11128]  ? aa_file_perm+0x192/0x15f0
[  425.453659][T11128]  ? __asan_memset+0x22/0x50
[  425.453699][T11128]  seq_read+0x36a/0x490
[  425.453741][T11128]  ? __pfx_seq_read+0x10/0x10
[  425.453774][T11128]  ? __debugfs_file_get+0x5d5/0x710
[  425.453809][T11128]  ? __pfx___debugfs_file_get+0x10/0x10
[  425.453843][T11128]  ? apparmor_file_permission+0x1f4/0x300
[  425.453885][T11128]  full_proxy_read+0x127/0x1f0
[  425.453920][T11128]  ? __pfx_full_proxy_read+0x10/0x10
[  425.453954][T11128]  vfs_read+0x212/0xa80
[  425.453993][T11128]  ? __pfx_vfs_read+0x10/0x10
[  425.454024][T11128]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  425.454055][T11128]  ? lockdep_hardirqs_on+0x7a/0x110
[  425.454085][T11128]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  425.454116][T11128]  ? mutex_lock_nested+0x152/0x1d0
[  425.454151][T11128]  ? fdget_pos+0x252/0x320
[  425.454186][T11128]  ksys_read+0x156/0x270
[  425.454218][T11128]  ? __pfx_ksys_read+0x10/0x10
[  425.454256][T11128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.454283][T11128]  do_syscall_64+0x174/0x580
[  425.454312][T11128]  ? trace_irq_disable+0x3b/0x140
[  425.454342][T11128]  ? clear_bhb_loop+0x40/0x90
[  425.454372][T11128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.454396][T11128] RIP: 0033:0x7fcfc807ce59
[  425.454418][T11128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.454439][T11128] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  425.454464][T11128] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  425.454481][T11128] RDX: 0000000000002020 RSI: 0000200000005180 RDI: 0000000000000005
[  425.454498][T11128] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  425.454520][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.454536][T11128] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  425.454574][T11128]  </TASK>
[  426.002283][T11132] FAULT_INJECTION: forcing a failure.
[  426.002283][T11132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.002326][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.5.1963 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  426.002358][T11132] Tainted: [L]=SOFTLOCKUP
[  426.002367][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  426.002382][T11132] Call Trace:
[  426.002392][T11132]  <TASK>
[  426.002402][T11132]  dump_stack_lvl+0xe8/0x150
[  426.002436][T11132]  should_fail_ex+0x46b/0x600
[  426.002486][T11132]  _copy_from_user+0x2d/0xb0
[  426.002514][T11132]  ___sys_sendmsg+0x1c6/0x360
[  426.002544][T11132]  ? __lock_acquire+0x6b5/0x2d10
[  426.002580][T11132]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.002645][T11132]  ? __fget_files+0x2a/0x420
[  426.002670][T11132]  ? __fget_files+0x3a6/0x420
[  426.002705][T11132]  __x64_sys_sendmsg+0x1b7/0x290
[  426.002739][T11132]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  426.002793][T11132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.002820][T11132]  do_syscall_64+0x174/0x580
[  426.002850][T11132]  ? trace_irq_disable+0x3b/0x140
[  426.002877][T11132]  ? clear_bhb_loop+0x40/0x90
[  426.002907][T11132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.002930][T11132] RIP: 0033:0x7fa3df37ce59
[  426.002950][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.002969][T11132] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.002993][T11132] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  426.003011][T11132] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003
[  426.003026][T11132] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  426.003042][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.003056][T11132] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  426.003091][T11132]  </TASK>
[  426.513184][T11137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  426.910721][T11139] binder: 11136:11139 ioctl 6609 0 returned -22
[  427.504037][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'.
[  427.504066][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'.
[  427.659567][ T6568] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  427.781358][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'.
[  427.781389][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'.
[  427.831471][ T6568] usb 6-1: Using ep0 maxpacket: 16
[  427.835289][ T6568] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  427.835318][ T6568] usb 6-1: config 0 has no interface number 0
[  427.835369][ T6568] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  427.835400][ T6568] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  427.870044][ T6568] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  427.870078][ T6568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.870101][ T6568] usb 6-1: Product: syz
[  427.870117][ T6568] usb 6-1: Manufacturer: syz
[  427.870135][ T6568] usb 6-1: SerialNumber: syz
[  427.925473][ T6568] usb 6-1: config 0 descriptor??
[  427.929041][T11149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  427.929179][T11149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  428.155945][T11149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  428.156087][T11149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  428.180639][T11154] FAULT_INJECTION: forcing a failure.
[  428.180639][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.180679][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.6.1972 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  428.180711][T11154] Tainted: [L]=SOFTLOCKUP
[  428.180720][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  428.180735][T11154] Call Trace:
[  428.180744][T11154]  <TASK>
[  428.180754][T11154]  dump_stack_lvl+0xe8/0x150
[  428.180784][T11154]  should_fail_ex+0x46b/0x600
[  428.180824][T11154]  _copy_from_user+0x2d/0xb0
[  428.180852][T11154]  ___sys_sendmsg+0x1c6/0x360
[  428.180887][T11154]  ? __lock_acquire+0x6b5/0x2d10
[  428.180921][T11154]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.180993][T11154]  ? __fget_files+0x2a/0x420
[  428.181019][T11154]  ? __fget_files+0x3a6/0x420
[  428.181054][T11154]  __x64_sys_sendmsg+0x1b7/0x290
[  428.181088][T11154]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.181137][T11154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.181164][T11154]  do_syscall_64+0x174/0x580
[  428.181196][T11154]  ? trace_irq_disable+0x3b/0x140
[  428.181225][T11154]  ? clear_bhb_loop+0x40/0x90
[  428.181254][T11154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.181279][T11154] RIP: 0033:0x7f8d3410ce59
[  428.181300][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.181322][T11154] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.181347][T11154] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  428.181365][T11154] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  428.181380][T11154] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  428.181395][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.181409][T11154] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  428.181444][T11154]  </TASK>
[  428.387920][ T6568] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  428.413179][T11156] FAULT_INJECTION: forcing a failure.
[  428.413179][T11156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.413236][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.4.1973 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  428.413268][T11156] Tainted: [L]=SOFTLOCKUP
[  428.413277][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  428.413291][T11156] Call Trace:
[  428.413312][T11156]  <TASK>
[  428.413322][T11156]  dump_stack_lvl+0xe8/0x150
[  428.413357][T11156]  should_fail_ex+0x46b/0x600
[  428.413395][T11156]  _copy_to_user+0x31/0xb0
[  428.413423][T11156]  simple_read_from_buffer+0xe1/0x170
[  428.413473][T11156]  proc_fail_nth_read+0x1be/0x230
[  428.413501][T11156]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  428.413528][T11156]  ? rw_verify_area+0x2ac/0x4e0
[  428.413555][T11156]  ? __fget_files+0x2a/0x420
[  428.413576][T11156]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  428.413602][T11156]  vfs_read+0x212/0xa80
[  428.413638][T11156]  ? __pfx_vfs_read+0x10/0x10
[  428.413668][T11156]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  428.413698][T11156]  ? lockdep_hardirqs_on+0x7a/0x110
[  428.413727][T11156]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  428.413757][T11156]  ? mutex_lock_nested+0x152/0x1d0
[  428.413791][T11156]  ? fdget_pos+0x252/0x320
[  428.413825][T11156]  ksys_read+0x156/0x270
[  428.413856][T11156]  ? __pfx_ksys_read+0x10/0x10
[  428.413893][T11156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.413919][T11156]  do_syscall_64+0x174/0x580
[  428.413948][T11156]  ? trace_irq_disable+0x3b/0x140
[  428.413976][T11156]  ? clear_bhb_loop+0x40/0x90
[  428.414005][T11156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.414029][T11156] RIP: 0033:0x7fcfc803d68e
[  428.414050][T11156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  428.414070][T11156] RSP: 002b:00007fcfc62d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  428.414095][T11156] RAX: ffffffffffffffda RBX: 00007fcfc62d66c0 RCX: 00007fcfc803d68e
[  428.414113][T11156] RDX: 000000000000000f RSI: 00007fcfc62d60a0 RDI: 0000000000000004
[  428.414129][T11156] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  428.414145][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.414160][T11156] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  428.414197][T11156]  </TASK>
[  428.622477][ T6568] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 212
[  428.872152][ T6568] usb 6-1: USB disconnect, device number 15
[  429.597751][T11172] binder: 11171:11172 ioctl c00c620f 2000000002c0 returned -22
[  429.699461][ T5719] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  429.877675][ T5719] usb 5-1: Using ep0 maxpacket: 16
[  429.895959][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12799, setting to 1024
[  429.895997][ T5719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  429.928675][ T5719] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  429.928709][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.928731][ T5719] usb 5-1: Product: syz
[  429.928748][ T5719] usb 5-1: Manufacturer: syz
[  429.928765][ T5719] usb 5-1: SerialNumber: syz
[  430.010523][ T5719] usb 5-1: config 0 descriptor??
[  430.011473][T11170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  430.091467][ T5719] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected
[  430.235824][    C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  430.235916][    C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  430.253429][ T6568] usb 5-1: USB disconnect, device number 26
[  430.294787][ T6568] mcba_usb 5-1:0.0 can0: device disconnected
[  430.497935][T11185] FAULT_INJECTION: forcing a failure.
[  430.497935][T11185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.497977][T11185] CPU: 1 UID: 0 PID: 11185 Comm: syz.6.1985 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  430.498010][T11185] Tainted: [L]=SOFTLOCKUP
[  430.498019][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  430.498034][T11185] Call Trace:
[  430.498044][T11185]  <TASK>
[  430.498054][T11185]  dump_stack_lvl+0xe8/0x150
[  430.498087][T11185]  should_fail_ex+0x46b/0x600
[  430.498126][T11185]  _copy_from_user+0x2d/0xb0
[  430.498154][T11185]  ucma_write+0x166/0x2f0
[  430.498183][T11185]  ? __pfx_ucma_write+0x10/0x10
[  430.498213][T11185]  ? rw_verify_area+0x25b/0x4e0
[  430.498240][T11185]  ? __pfx_ucma_write+0x10/0x10
[  430.498268][T11185]  vfs_write+0x2a3/0xba0
[  430.498305][T11185]  ? __pfx_vfs_write+0x10/0x10
[  430.498336][T11185]  ? __fget_files+0x2a/0x420
[  430.498362][T11185]  ? __fget_files+0x2a/0x420
[  430.498385][T11185]  ? __fget_files+0x3a6/0x420
[  430.498407][T11185]  ? __fget_files+0x2a/0x420
[  430.498440][T11185]  ksys_write+0x156/0x270
[  430.498474][T11185]  ? __pfx_ksys_write+0x10/0x10
[  430.498510][T11185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.498535][T11185]  do_syscall_64+0x174/0x580
[  430.498563][T11185]  ? trace_irq_disable+0x3b/0x140
[  430.498590][T11185]  ? clear_bhb_loop+0x40/0x90
[  430.498618][T11185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.498648][T11185] RIP: 0033:0x7f8d3410ce59
[  430.498669][T11185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.498690][T11185] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  430.498716][T11185] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  430.498735][T11185] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003
[  430.498750][T11185] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  430.498767][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.498782][T11185] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  430.498816][T11185]  </TASK>
[  431.429471][    T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  431.582922][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.582991][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  431.584449][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  431.584479][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  431.584500][    T9] usb 7-1: SerialNumber: syz
[  431.676322][    T9] hub 7-1:1.0: bad descriptor, ignoring hub
[  431.697943][    T9] hub 7-1:1.0: probe with driver hub failed with error -5
[  431.699001][    T9] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  431.699023][    T9] cdc_acm 7-1:1.0: This needs exactly 3 endpoints
[  431.699066][    T9] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  431.877559][T11201] FAULT_INJECTION: forcing a failure.
[  431.877559][T11201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.877601][T11201] CPU: 1 UID: 0 PID: 11201 Comm: syz.5.1994 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  431.877633][T11201] Tainted: [L]=SOFTLOCKUP
[  431.877643][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  431.877657][T11201] Call Trace:
[  431.877667][T11201]  <TASK>
[  431.877677][T11201]  dump_stack_lvl+0xe8/0x150
[  431.877711][T11201]  should_fail_ex+0x46b/0x600
[  431.877750][T11201]  _copy_from_user+0x2d/0xb0
[  431.877777][T11201]  __x64_sys_clock_adjtime+0x11e/0x340
[  431.877800][T11201]  ? lockdep_hardirqs_on+0x7a/0x110
[  431.877832][T11201]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[  431.877854][T11201]  ? rt_mutex_slowunlock+0x1cb/0x300
[  431.877899][T11201]  ? __pfx_ksys_write+0x10/0x10
[  431.877936][T11201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.877961][T11201]  do_syscall_64+0x174/0x580
[  431.877989][T11201]  ? trace_irq_disable+0x3b/0x140
[  431.878017][T11201]  ? clear_bhb_loop+0x40/0x90
[  431.878048][T11201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.878079][T11201] RIP: 0033:0x7fa3df37ce59
[  431.878100][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.878121][T11201] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  431.878146][T11201] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  431.878164][T11201] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000000
[  431.878178][T11201] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  431.878193][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.878208][T11201] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  431.878244][T11201]  </TASK>
[  432.355565][T11210] FAULT_INJECTION: forcing a failure.
[  432.355565][T11210] name failslab, interval 1, probability 0, space 0, times 0
[  432.355607][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.4.1996 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  432.355640][T11210] Tainted: [L]=SOFTLOCKUP
[  432.355649][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  432.355665][T11210] Call Trace:
[  432.355674][T11210]  <TASK>
[  432.355686][T11210]  dump_stack_lvl+0xe8/0x150
[  432.355720][T11210]  should_fail_ex+0x46b/0x600
[  432.355761][T11210]  should_failslab+0xa8/0x100
[  432.355791][T11210]  __kmalloc_cache_noprof+0xa0/0x6d0
[  432.355818][T11210]  ? proc_pid_cmdline_read+0x66f/0x910
[  432.355853][T11210]  ? proc_pid_cmdline_read+0x66f/0x910
[  432.355901][T11210]  proc_pid_cmdline_read+0x66f/0x910
[  432.355948][T11210]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  432.355989][T11210]  ? rw_verify_area+0x2ac/0x4e0
[  432.356017][T11210]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  432.356056][T11210]  vfs_read+0x212/0xa80
[  432.356093][T11210]  ? __pfx_vfs_read+0x10/0x10
[  432.356124][T11210]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  432.356155][T11210]  ? lockdep_hardirqs_on+0x7a/0x110
[  432.356185][T11210]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  432.356214][T11210]  ? mutex_lock_nested+0x152/0x1d0
[  432.356248][T11210]  ? fdget_pos+0x252/0x320
[  432.356281][T11210]  ksys_read+0x156/0x270
[  432.356312][T11210]  ? __pfx_ksys_read+0x10/0x10
[  432.356348][T11210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.356375][T11210]  do_syscall_64+0x174/0x580
[  432.356404][T11210]  ? trace_irq_disable+0x3b/0x140
[  432.356433][T11210]  ? clear_bhb_loop+0x40/0x90
[  432.356469][T11210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.356494][T11210] RIP: 0033:0x7fcfc807ce59
[  432.356516][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.356536][T11210] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  432.356562][T11210] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  432.356580][T11210] RDX: 0000000000002020 RSI: 0000200000000680 RDI: 0000000000000003
[  432.356596][T11210] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  432.356612][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.356626][T11210] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  432.356661][T11210]  </TASK>
[  432.749846][ T5719] usb 7-1: USB disconnect, device number 12
[  433.276711][T11226] FAULT_INJECTION: forcing a failure.
[  433.276711][T11226] name failslab, interval 1, probability 0, space 0, times 0
[  433.276752][T11226] CPU: 1 UID: 0 PID: 11226 Comm: syz.5.2003 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  433.276784][T11226] Tainted: [L]=SOFTLOCKUP
[  433.276794][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  433.276809][T11226] Call Trace:
[  433.276819][T11226]  <TASK>
[  433.276829][T11226]  dump_stack_lvl+0xe8/0x150
[  433.276864][T11226]  should_fail_ex+0x46b/0x600
[  433.276903][T11226]  should_failslab+0xa8/0x100
[  433.276932][T11226]  __kmalloc_noprof+0xfe/0x7e0
[  433.276955][T11226]  ? rcu_is_watching+0x15/0xb0
[  433.276989][T11226]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  433.277015][T11226]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  433.277049][T11226]  tomoyo_realpath_from_path+0xe3/0x5d0
[  433.277079][T11226]  ? tomoyo_domain+0xd7/0x130
[  433.277112][T11226]  ? tomoyo_path_number_perm+0x219/0x630
[  433.277148][T11226]  tomoyo_path_number_perm+0x246/0x630
[  433.277188][T11226]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  433.277224][T11226]  ? __lock_acquire+0x6b5/0x2d10
[  433.277259][T11226]  ? do_raw_spin_lock+0x12b/0x2f0
[  433.277320][T11226]  ? __fget_files+0x2a/0x420
[  433.277349][T11226]  ? __fget_files+0x2a/0x420
[  433.277372][T11226]  ? __fget_files+0x3a6/0x420
[  433.277396][T11226]  ? __fget_files+0x2a/0x420
[  433.277425][T11226]  security_file_ioctl+0xc3/0x2a0
[  433.277461][T11226]  __se_sys_ioctl+0x47/0x170
[  433.277502][T11226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.277529][T11226]  do_syscall_64+0x174/0x580
[  433.277559][T11226]  ? trace_irq_disable+0x3b/0x140
[  433.277588][T11226]  ? clear_bhb_loop+0x40/0x90
[  433.277616][T11226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.277640][T11226] RIP: 0033:0x7fa3df37ce59
[  433.277666][T11226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.277686][T11226] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  433.277711][T11226] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  433.277729][T11226] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003
[  433.277745][T11226] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  433.277760][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.277774][T11226] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  433.277811][T11226]  </TASK>
[  433.289397][T11226] ERROR: Out of memory at tomoyo_realpath_from_path.
[  433.999266][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  434.112780][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  434.114676][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  434.137571][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  434.138392][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  434.139593][ T5719] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  434.173472][ T6568] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  434.299550][ T5719] usb 7-1: Using ep0 maxpacket: 16
[  434.306178][ T5719] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  434.306209][ T5719] usb 7-1: config 0 has no interface number 0
[  434.306258][ T5719] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  434.306289][ T5719] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  434.309288][ T5719] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  434.309461][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.309536][ T5719] usb 7-1: Product: syz
[  434.309553][ T5719] usb 7-1: Manufacturer: syz
[  434.309570][ T5719] usb 7-1: SerialNumber: syz
[  434.327026][ T6568] usb 6-1: Using ep0 maxpacket: 16
[  434.355234][ T6568] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  434.355316][ T6568] usb 6-1: config 0 has no interface number 0
[  434.355445][ T6568] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  434.355518][ T6568] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  434.362410][ T6568] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  434.362528][ T6568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.362592][ T6568] usb 6-1: Product: syz
[  434.362642][ T6568] usb 6-1: Manufacturer: syz
[  434.362699][ T6568] usb 6-1: SerialNumber: syz
[  434.441700][T11237] overlayfs: failed to resolve 'fowner<00000000000000000000': -2
[  434.456878][ T6568] usb 6-1: config 0 descriptor??
[  434.458222][T11232] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  434.458360][T11232] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  434.492122][ T5719] usb 7-1: config 0 descriptor??
[  434.493397][T11231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  434.493672][T11231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  434.687747][T11232] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  434.688552][T11232] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  434.716749][T11231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  434.716961][T11231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  434.906706][ T6568] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  434.920752][ T5719] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  435.113431][ T6568] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  435.113466][ T6568] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  435.113761][ T6568] asix 6-1:0.34: probe with driver asix failed with error -71
[  435.153985][ T5719] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 212
[  435.238255][ T6568] usb 6-1: USB disconnect, device number 16
[  435.398840][ T5719] usb 7-1: USB disconnect, device number 13
[  435.481512][ T5344] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  435.663141][ T5344] usb 5-1: Using ep0 maxpacket: 8
[  435.665634][ T5344] usb 5-1: unable to get BOS descriptor or descriptor too short
[  435.692345][ T5344] usb 5-1: config 6 has an invalid interface number: 91 but max is 0
[  435.692379][ T5344] usb 5-1: config 6 has no interface number 0
[  435.692416][ T5344] usb 5-1: config 6 interface 91 has no altsetting 0
[  435.724580][ T5344] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=51.25
[  435.724616][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.724640][ T5344] usb 5-1: Product: syz
[  435.724658][ T5344] usb 5-1: Manufacturer: syz
[  435.724676][ T5344] usb 5-1: SerialNumber: syz
[  436.014472][ T5344] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  436.016025][T11229] xfrm0 speed is unknown, defaulting to 1000
[  436.016347][ T5344] gspca_sn9c2028: read1 error -71
[  436.018222][ T5344] gspca_sn9c2028: read1 error -71
[  436.018631][ T5344] gspca_sn9c2028: read1 error -71
[  436.018729][ T5344] sn9c2028 5-1:6.91: probe with driver sn9c2028 failed with error -71
[  436.104293][ T5344] usb 5-1: USB disconnect, device number 27
[  436.241993][   T60] Bluetooth: hci7: command tx timeout
[  436.242433][ T5612] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  436.242617][ T5612] Bluetooth: hci5: Injecting HCI hardware error event
[  436.245800][   T60] Bluetooth: hci5: hardware error 0x00
[  437.549128][ T5612] Bluetooth: hci6: unexpected event 0x2f length: 763 > 260
[  437.891652][ T6568] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  437.897609][T11282] FAULT_INJECTION: forcing a failure.
[  437.897609][T11282] name failslab, interval 1, probability 0, space 0, times 0
[  437.897649][T11282] CPU: 1 UID: 0 PID: 11282 Comm: syz.4.2023 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  437.897689][T11282] Tainted: [L]=SOFTLOCKUP
[  437.897696][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  437.897708][T11282] Call Trace:
[  437.897715][T11282]  <TASK>
[  437.897723][T11282]  dump_stack_lvl+0xe8/0x150
[  437.897751][T11282]  should_fail_ex+0x46b/0x600
[  437.897782][T11282]  should_failslab+0xa8/0x100
[  437.897804][T11282]  __kvmalloc_node_noprof+0x181/0x910
[  437.897825][T11282]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  437.897851][T11282]  ? seq_read_iter+0x203/0xe20
[  437.897876][T11282]  ? seq_read_iter+0x203/0xe20
[  437.897902][T11282]  ? seq_read_iter+0xb8/0xe20
[  437.897929][T11282]  seq_read_iter+0x203/0xe20
[  437.897958][T11282]  ? apparmor_file_permission+0x1f4/0x300
[  437.897999][T11282]  vfs_read+0x58b/0xa80
[  437.898032][T11282]  ? __pfx_vfs_read+0x10/0x10
[  437.898055][T11282]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  437.898078][T11282]  ? lockdep_hardirqs_on+0x7a/0x110
[  437.898102][T11282]  ? mutex_lock_nested+0x152/0x1d0
[  437.898131][T11282]  ? fdget_pos+0x252/0x320
[  437.898157][T11282]  ksys_read+0x156/0x270
[  437.898186][T11282]  ? __pfx_ksys_read+0x10/0x10
[  437.898216][T11282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.898238][T11282]  do_syscall_64+0x174/0x580
[  437.898262][T11282]  ? trace_irq_disable+0x3b/0x140
[  437.898287][T11282]  ? clear_bhb_loop+0x40/0x90
[  437.898311][T11282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.898331][T11282] RIP: 0033:0x7fcfc807ce59
[  437.898350][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.898368][T11282] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  437.898390][T11282] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  437.898411][T11282] RDX: 0000000000002020 RSI: 0000200000000740 RDI: 0000000000000003
[  437.898424][T11282] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  437.898438][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.898451][T11282] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  437.898483][T11282]  </TASK>
[  437.973818][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2022'.
[  438.002128][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2022'.
[  438.165102][ T6568] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  438.165189][ T6568] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  438.165268][ T6568] usb 6-1: config 0 interface 0 has no altsetting 0
[  438.165371][ T6568] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[  438.165436][ T6568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.250376][ T6568] usb 6-1: config 0 descriptor??
[  438.319623][ T5612] Bluetooth: hci7: command tx timeout
[  438.691313][ T6568] hid (null): unknown global tag 0xc
[  438.731761][   T60] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  438.831296][ T6568] logitech-hidpp-device 0003:046D:C343.000B: unknown main item tag 0x0
[  438.831343][ T6568] logitech-hidpp-device 0003:046D:C343.000B: unknown main item tag 0x6
[  438.831375][ T6568] logitech-hidpp-device 0003:046D:C343.000B: unknown global tag 0xc
[  438.831395][ T6568] logitech-hidpp-device 0003:046D:C343.000B: item 0 4 1 12 parsing failed
[  438.832200][ T6568] logitech-hidpp-device 0003:046D:C343.000B: hidpp_probe:parse failed
[  438.832339][ T6568] logitech-hidpp-device 0003:046D:C343.000B: probe with driver logitech-hidpp-device failed with error -22
[  438.974414][ T6568] usb 6-1: USB disconnect, device number 17
[  439.406875][   T60] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  439.449487][ T5719] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  439.601062][ T5719] usb 7-1: Using ep0 maxpacket: 16
[  439.610050][ T5719] usb 7-1: config index 0 descriptor too short (expected 16456, got 72)
[  439.610082][ T5719] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[  439.610106][ T5719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.610129][ T5719] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  439.610153][ T5719] usb 7-1: config 0 has no interface number 0
[  439.615552][ T5719] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  439.615590][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.615613][ T5719] usb 7-1: Product: syz
[  439.615631][ T5719] usb 7-1: Manufacturer: syz
[  439.615653][ T5719] usb 7-1: SerialNumber: syz
[  439.709903][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'.
[  439.709933][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'.
[  439.711799][ T5719] usb 7-1: config 0 descriptor??
[  439.930565][ T6568] usb 7-1: USB disconnect, device number 14
[  440.006885][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.006987][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  440.374485][T11229] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.376463][T11229] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.376813][T11229] bridge_slave_0: entered allmulticast mode
[  440.400481][   T60] Bluetooth: hci7: command tx timeout
[  440.411002][T11229] bridge_slave_0: entered promiscuous mode
[  440.421848][T11229] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.422279][T11229] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.422621][T11229] bridge_slave_1: entered allmulticast mode
[  440.426949][T11229] bridge_slave_1: entered promiscuous mode
[  440.564493][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'.
[  440.610351][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'.
[  440.771486][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.797052][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.911646][T11229] team0: Port device team_slave_0 added
[  440.948553][T11229] team0: Port device team_slave_1 added
[  441.060443][T11329] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2037'.
[  441.092322][ T5718] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  441.202050][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.202064][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.202086][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.222443][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.222465][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.223288][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.258001][ T5718] usb 7-1: Using ep0 maxpacket: 16
[  441.331534][ T5718] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  441.331566][ T5718] usb 7-1: config 0 has no interface number 0
[  441.331615][ T5718] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  441.331643][ T5718] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  441.339823][ T5718] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  441.339859][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.339883][ T5718] usb 7-1: Product: syz
[  441.339900][ T5718] usb 7-1: Manufacturer: syz
[  441.339916][ T5718] usb 7-1: SerialNumber: syz
[  441.435896][ T5718] usb 7-1: config 0 descriptor??
[  441.502614][T11326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  441.502747][T11326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  441.706514][T11326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  441.706651][T11326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  441.765388][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'.
[  441.765414][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'.
[  441.911743][ T5718] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  442.109066][ T5718] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  442.109100][ T5718] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  442.130860][ T5718] asix 7-1:0.34: probe with driver asix failed with error -71
[  442.164125][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  442.230962][ T5718] usb 7-1: USB disconnect, device number 15
[  442.476473][T11229] hsr_slave_0: entered promiscuous mode
[  442.481293][ T5612] Bluetooth: hci7: command tx timeout
[  442.506863][T11229] hsr_slave_1: entered promiscuous mode
[  442.517359][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'.
[  442.525604][T11229] debugfs: 'hsr0' already exists in 'hsr'
[  442.525684][T11229] Cannot create hsr debugfs directory
[  443.098752][T11357] __nla_validate_parse: 1 callbacks suppressed
[  443.098775][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'.
[  443.098799][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'.
[  443.207103][T11359] FAULT_INJECTION: forcing a failure.
[  443.207103][T11359] name failslab, interval 1, probability 0, space 0, times 0
[  443.207145][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.5.2050 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  443.207185][T11359] Tainted: [L]=SOFTLOCKUP
[  443.207194][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  443.207209][T11359] Call Trace:
[  443.207219][T11359]  <TASK>
[  443.207230][T11359]  dump_stack_lvl+0xe8/0x150
[  443.207263][T11359]  should_fail_ex+0x46b/0x600
[  443.207303][T11359]  should_failslab+0xa8/0x100
[  443.207333][T11359]  __kmalloc_noprof+0xfe/0x7e0
[  443.207357][T11359]  ? rcu_is_watching+0x15/0xb0
[  443.207390][T11359]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  443.207417][T11359]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  443.207451][T11359]  tomoyo_realpath_from_path+0xe3/0x5d0
[  443.207482][T11359]  ? tomoyo_domain+0xd7/0x130
[  443.207516][T11359]  ? tomoyo_path_number_perm+0x219/0x630
[  443.207552][T11359]  tomoyo_path_number_perm+0x246/0x630
[  443.207592][T11359]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  443.207626][T11359]  ? __lock_acquire+0x6b5/0x2d10
[  443.207659][T11359]  ? do_raw_spin_lock+0x12b/0x2f0
[  443.207720][T11359]  ? __fget_files+0x2a/0x420
[  443.207748][T11359]  ? __fget_files+0x2a/0x420
[  443.207771][T11359]  ? __fget_files+0x3a6/0x420
[  443.207794][T11359]  ? __fget_files+0x2a/0x420
[  443.207823][T11359]  security_file_ioctl+0xc3/0x2a0
[  443.207859][T11359]  __se_sys_ioctl+0x47/0x170
[  443.207890][T11359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.207916][T11359]  do_syscall_64+0x174/0x580
[  443.207946][T11359]  ? trace_irq_disable+0x3b/0x140
[  443.207974][T11359]  ? clear_bhb_loop+0x40/0x90
[  443.208005][T11359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.208029][T11359] RIP: 0033:0x7fa3df37ce59
[  443.208051][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.208071][T11359] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  443.208097][T11359] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  443.208115][T11359] RDX: 0000200000000080 RSI: 00000000c0984124 RDI: 0000000000000005
[  443.208131][T11359] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  443.208146][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.208159][T11359] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  443.208203][T11359]  </TASK>
[  443.208213][T11359] ERROR: Out of memory at tomoyo_realpath_from_path.
[  443.780128][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2053'.
[  443.833586][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'.
[  443.959694][ T6568] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  444.109469][ T6568] usb 5-1: Using ep0 maxpacket: 16
[  444.117238][ T6568] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  444.117272][ T6568] usb 5-1: config 0 has no interface number 0
[  444.117321][ T6568] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  444.117351][ T6568] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  444.164266][ T6568] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  444.164317][ T6568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.164336][ T6568] usb 5-1: Product: syz
[  444.164350][ T6568] usb 5-1: Manufacturer: syz
[  444.164364][ T6568] usb 5-1: SerialNumber: syz
[  444.235114][ T6568] usb 5-1: config 0 descriptor??
[  444.236014][T11361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  444.236155][T11361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  444.440813][T11361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  444.441038][T11361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  444.648659][ T6568] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  444.847059][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2058'.
[  444.847089][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2058'.
[  444.851078][ T6568] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  444.851112][ T6568] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  444.892250][ T6568] asix 5-1:0.34: probe with driver asix failed with error -71
[  444.923890][ T6568] usb 5-1: USB disconnect, device number 28
[  445.338655][T10439] Bluetooth: hci8: Frame reassembly failed (-84)
[  445.758230][T11389] FAULT_INJECTION: forcing a failure.
[  445.758230][T11389] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.758267][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.5.2060 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  445.758294][T11389] Tainted: [L]=SOFTLOCKUP
[  445.758301][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  445.758314][T11389] Call Trace:
[  445.758321][T11389]  <TASK>
[  445.758329][T11389]  dump_stack_lvl+0xe8/0x150
[  445.758357][T11389]  should_fail_ex+0x46b/0x600
[  445.758389][T11389]  _copy_from_user+0x2d/0xb0
[  445.758432][T11389]  ___sys_sendmsg+0x1c6/0x360
[  445.758457][T11389]  ? __lock_acquire+0x6b5/0x2d10
[  445.758494][T11389]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.758547][T11389]  ? __fget_files+0x2a/0x420
[  445.758567][T11389]  ? __fget_files+0x3a6/0x420
[  445.758596][T11389]  __x64_sys_sendmsg+0x1b7/0x290
[  445.758622][T11389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  445.758665][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.758686][T11389]  do_syscall_64+0x174/0x580
[  445.758710][T11389]  ? trace_irq_disable+0x3b/0x140
[  445.758734][T11389]  ? clear_bhb_loop+0x40/0x90
[  445.758758][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.758777][T11389] RIP: 0033:0x7fa3df37ce59
[  445.758794][T11389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.758811][T11389] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.758832][T11389] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  445.758847][T11389] RDX: 0000000000000041 RSI: 0000200000000500 RDI: 0000000000000004
[  445.758861][T11389] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  445.758874][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.758886][T11389] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  445.758912][T11389]  </TASK>
[  446.025774][T11229] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  446.085641][T11229] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  446.125668][T11229] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  446.183368][T11229] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  446.184573][T11229] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  446.352026][T11229] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  446.356347][T11229] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  446.396195][T11229] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  447.069102][T11229] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.151586][T11407] FAULT_INJECTION: forcing a failure.
[  447.151586][T11407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.151628][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.5.2066 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  447.151661][T11407] Tainted: [L]=SOFTLOCKUP
[  447.151670][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  447.151686][T11407] Call Trace:
[  447.151696][T11407]  <TASK>
[  447.151706][T11407]  dump_stack_lvl+0xe8/0x150
[  447.151740][T11407]  should_fail_ex+0x46b/0x600
[  447.151778][T11407]  _copy_from_user+0x2d/0xb0
[  447.151806][T11407]  ___sys_sendmsg+0x1c6/0x360
[  447.151835][T11407]  ? __lock_acquire+0x6b5/0x2d10
[  447.151869][T11407]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.151905][T11407]  ? kstrtouint+0x6e/0xe0
[  447.151963][T11407]  ? __fget_files+0x2a/0x420
[  447.151986][T11407]  ? __fget_files+0x3a6/0x420
[  447.152021][T11407]  __sys_sendmmsg+0x279/0x4d0
[  447.152058][T11407]  ? __pfx___sys_sendmmsg+0x10/0x10
[  447.152098][T11407]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  447.152136][T11407]  ? ksys_write+0x248/0x270
[  447.152169][T11407]  ? __pfx_ksys_write+0x10/0x10
[  447.152204][T11407]  __x64_sys_sendmmsg+0xa0/0xc0
[  447.152235][T11407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.152266][T11407]  do_syscall_64+0x174/0x580
[  447.152288][T11407]  ? trace_irq_disable+0x3b/0x140
[  447.152309][T11407]  ? clear_bhb_loop+0x40/0x90
[  447.152329][T11407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.152346][T11407] RIP: 0033:0x7fa3df37ce59
[  447.152361][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.152376][T11407] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  447.152398][T11407] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  447.152412][T11407] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003
[  447.152423][T11407] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  447.152433][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.152444][T11407] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  447.152468][T11407]  </TASK>
[  447.369980][   T60] Bluetooth: hci8: command 0x1003 tx timeout
[  447.400787][ T5612] Bluetooth: hci8: Opcode 0x1003 failed: -110
[  447.401693][T11229] 8021q: adding VLAN 0 to HW filter on device team0
[  447.496074][  T214] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.515672][  T214] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.650400][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'.
[  447.650429][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'.
[  447.935017][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.935303][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.506731][ T5718] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  448.674795][ T5718] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  448.674826][ T5718] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  448.674850][ T5718] usb 7-1: config 8 has no interface number 0
[  448.674882][ T5718] usb 7-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  448.678637][ T5718] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  448.678661][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.678676][ T5718] usb 7-1: Product: syz
[  448.678687][ T5718] usb 7-1: Manufacturer: syz
[  448.678698][ T5718] usb 7-1: SerialNumber: syz
[  449.412741][ T5719] usb 7-1: USB disconnect, device number 16
[  450.062194][ T5719] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  450.229477][ T5719] usb 6-1: Using ep0 maxpacket: 16
[  450.243847][ T5719] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  450.243880][ T5719] usb 6-1: config 0 has no interface number 0
[  450.243929][ T5719] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  450.243958][ T5719] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  450.264697][ T5719] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  450.264775][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.264838][ T5719] usb 6-1: Product: syz
[  450.264893][ T5719] usb 6-1: Manufacturer: syz
[  450.264943][ T5719] usb 6-1: SerialNumber: syz
[  450.369104][ T5719] usb 6-1: config 0 descriptor??
[  450.370564][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.370707][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.586542][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.586680][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.794386][ T5719] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  450.996599][ T5719] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  450.996634][ T5719] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  450.996892][ T5719] asix 6-1:0.34: probe with driver asix failed with error -71
[  451.052586][ T5719] usb 6-1: USB disconnect, device number 18
[  451.107692][T11229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.248911][ T5612] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  452.060496][T11487] FAULT_INJECTION: forcing a failure.
[  452.060496][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.060539][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz.6.2088 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  452.060571][T11487] Tainted: [L]=SOFTLOCKUP
[  452.060581][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  452.060605][T11487] Call Trace:
[  452.060614][T11487]  <TASK>
[  452.060624][T11487]  dump_stack_lvl+0xe8/0x150
[  452.060656][T11487]  should_fail_ex+0x46b/0x600
[  452.060694][T11487]  _copy_from_user+0x2d/0xb0
[  452.060720][T11487]  ___sys_sendmsg+0x1c6/0x360
[  452.060748][T11487]  ? __lock_acquire+0x6b5/0x2d10
[  452.060783][T11487]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.060817][T11487]  ? kstrtouint+0x6e/0xe0
[  452.060878][T11487]  ? __fget_files+0x2a/0x420
[  452.060901][T11487]  ? __fget_files+0x3a6/0x420
[  452.060936][T11487]  __sys_sendmmsg+0x279/0x4d0
[  452.060971][T11487]  ? __pfx___sys_sendmmsg+0x10/0x10
[  452.061010][T11487]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  452.061048][T11487]  ? ksys_write+0x248/0x270
[  452.061079][T11487]  ? __pfx_ksys_write+0x10/0x10
[  452.061114][T11487]  __x64_sys_sendmmsg+0xa0/0xc0
[  452.061146][T11487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.061172][T11487]  do_syscall_64+0x174/0x580
[  452.061201][T11487]  ? trace_irq_disable+0x3b/0x140
[  452.061230][T11487]  ? clear_bhb_loop+0x40/0x90
[  452.061259][T11487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.061282][T11487] RIP: 0033:0x7f8d3410ce59
[  452.061303][T11487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.061323][T11487] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  452.061347][T11487] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  452.061363][T11487] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  452.061378][T11487] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  452.061393][T11487] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001
[  452.061408][T11487] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  452.061442][T11487]  </TASK>
[  452.691048][ T5344] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  452.789463][ T5612] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  452.851402][ T5344] usb 6-1: device descriptor read/64, error -71
[  452.873323][T11490] syzkaller1: entered promiscuous mode
[  452.873354][T11490] syzkaller1: entered allmulticast mode
[  453.032906][T11229] veth0_vlan: entered promiscuous mode
[  453.127138][T11229] veth1_vlan: entered promiscuous mode
[  453.186238][ T5344] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  453.343797][ T5344] usb 6-1: device descriptor read/64, error -71
[  453.361301][ T6568] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  453.463916][T11229] veth0_macvtap: entered promiscuous mode
[  453.485900][ T5344] usb usb6-port1: attempt power cycle
[  453.530883][ T6568] usb 7-1: config 5 has an invalid interface number: 52 but max is 0
[  453.530914][ T6568] usb 7-1: config 5 has no interface number 0
[  453.530946][ T6568] usb 7-1: config 5 interface 52 has no altsetting 0
[  453.568042][ T6568] usb 7-1: New USB device found, idVendor=187f, idProduct=0500, bcdDevice=69.c2
[  453.568075][ T6568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.568097][ T6568] usb 7-1: Product: syz
[  453.568114][ T6568] usb 7-1: Manufacturer: syz
[  453.568130][ T6568] usb 7-1: SerialNumber: syz
[  453.638471][T11229] veth1_macvtap: entered promiscuous mode
[  453.781916][T11229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.846943][ T6568] smsusb:smsusb_probe: board id=17, interface number 52
[  453.864230][ T6568] usb 7-1: USB disconnect, device number 17
[  453.899553][ T5344] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  453.905036][T11229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.920974][ T5344] usb 6-1: device descriptor read/8, error -71
[  453.976707][   T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.987875][   T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.988594][   T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.996684][   T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.211947][ T5344] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  454.247387][ T5344] usb 6-1: device descriptor read/8, error -71
[  454.350419][ T5344] usb usb6-port1: unable to enumerate USB device
[  455.193512][ T5612] Bluetooth: hci6: link tx timeout
[  455.208619][ T5612] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
[  455.589546][ T5713] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  455.749503][ T5713] usb 7-1: Using ep0 maxpacket: 16
[  455.752115][ T5713] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  455.752147][ T5713] usb 7-1: config 0 has no interface number 0
[  455.752195][ T5713] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  455.752225][ T5713] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  455.847079][ T5713] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  455.847115][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.847137][ T5713] usb 7-1: Product: syz
[  455.847154][ T5713] usb 7-1: Manufacturer: syz
[  455.847172][ T5713] usb 7-1: SerialNumber: syz
[  455.895012][ T5713] usb 7-1: config 0 descriptor??
[  455.895836][T11513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  455.896061][T11513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  456.125683][T11513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  456.125812][T11513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  456.302691][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.302715][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.329243][ T5713] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  456.535309][ T5713] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  456.535345][ T5713] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  456.535649][ T5713] asix 7-1:0.34: probe with driver asix failed with error -71
[  456.612678][ T5713] usb 7-1: USB disconnect, device number 18
[  457.032851][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.032875][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.280011][ T5612] Bluetooth: hci6: command 0x0406 tx timeout
[  457.776516][T11531] program syz.4.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  457.794322][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2103'.
[  457.794349][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2103'.
[  458.256260][ T5344] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  458.379591][ T5344] usb 5-1: device descriptor read/64, error -71
[  458.510996][T11545] FAULT_INJECTION: forcing a failure.
[  458.510996][T11545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.511057][T11545] CPU: 0 UID: 0 PID: 11545 Comm: syz.7.2107 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  458.511090][T11545] Tainted: [L]=SOFTLOCKUP
[  458.511100][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  458.511114][T11545] Call Trace:
[  458.511123][T11545]  <TASK>
[  458.511133][T11545]  dump_stack_lvl+0xe8/0x150
[  458.511167][T11545]  should_fail_ex+0x46b/0x600
[  458.511205][T11545]  _copy_from_user+0x2d/0xb0
[  458.511233][T11545]  __sys_connect+0x156/0x450
[  458.511262][T11545]  ? __pfx___sys_connect+0x10/0x10
[  458.511299][T11545]  ? __pfx_ksys_write+0x10/0x10
[  458.511333][T11545]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.511358][T11545]  __x64_sys_connect+0x7a/0x90
[  458.511385][T11545]  do_syscall_64+0x174/0x580
[  458.511414][T11545]  ? trace_irq_disable+0x3b/0x140
[  458.511442][T11545]  ? clear_bhb_loop+0x40/0x90
[  458.511471][T11545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.511495][T11545] RIP: 0033:0x7f949ca9ce59
[  458.511516][T11545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.511535][T11545] RSP: 002b:00007f949acee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  458.511560][T11545] RAX: ffffffffffffffda RBX: 00007f949cd15fa0 RCX: 00007f949ca9ce59
[  458.511578][T11545] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  458.511593][T11545] RBP: 00007f949acee090 R08: 0000000000000000 R09: 0000000000000000
[  458.511607][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.511621][T11545] R13: 00007f949cd16038 R14: 00007f949cd15fa0 R15: 00007ffd99809e68
[  458.511654][T11545]  </TASK>
[  458.579592][  T821] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  458.677477][ T5344] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  458.810305][  T821] usb 6-1: Using ep0 maxpacket: 8
[  458.812507][  T821] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7
[  458.818603][  T821] usb 6-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40
[  458.818636][  T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.818659][  T821] usb 6-1: Product: syz
[  458.818676][  T821] usb 6-1: Manufacturer: syz
[  458.818694][  T821] usb 6-1: SerialNumber: syz
[  458.859780][ T5344] usb 5-1: device descriptor read/64, error -71
[  458.971390][ T5344] usb usb5-port1: attempt power cycle
[  459.190023][  T821] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  459.190580][  T821] usb 6-1: unit 2 not found!
[  459.431095][ T5344] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  459.460427][ T5344] usb 5-1: device descriptor read/8, error -71
[  459.539496][  T821] usb 6-1: USB disconnect, device number 23
[  459.709512][ T5344] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  459.735844][ T5344] usb 5-1: device descriptor read/8, error -71
[  459.841255][ T5344] usb usb5-port1: unable to enumerate USB device
[  459.989509][ T5713] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  460.141325][ T5713] usb 7-1: Using ep0 maxpacket: 8
[  460.144541][ T5713] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.144598][ T5713] usb 7-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  460.144630][ T5713] usb 7-1: config 1 interface 0 has no altsetting 0
[  460.147655][ T5713] usb 7-1: New USB device found, idVendor=0525, idProduct=ffa1, bcdDevice=ff.ff
[  460.147686][ T5713] usb 7-1: New USB device strings: Mfr=255, Product=2, SerialNumber=3
[  460.147709][ T5713] usb 7-1: Product: syz
[  460.147725][ T5713] usb 7-1: Manufacturer: syz
[  460.147741][ T5713] usb 7-1: SerialNumber: syz
[  460.478789][ T5713] cdc_ether 7-1:1.0: missing cdc ether descriptor
[  460.587540][ T5713] usb 7-1: USB disconnect, device number 19
[  462.033738][T11584] /dev/nullb0: Can't open blockdev
[  462.427777][T11589] program syz.7.2122 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  462.677371][T11597] FAULT_INJECTION: forcing a failure.
[  462.677371][T11597] name failslab, interval 1, probability 0, space 0, times 0
[  462.677411][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.4.2125 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  462.677444][T11597] Tainted: [L]=SOFTLOCKUP
[  462.677454][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  462.677469][T11597] Call Trace:
[  462.677478][T11597]  <TASK>
[  462.677489][T11597]  dump_stack_lvl+0xe8/0x150
[  462.677523][T11597]  should_fail_ex+0x46b/0x600
[  462.677563][T11597]  should_failslab+0xa8/0x100
[  462.677592][T11597]  __kmalloc_noprof+0xfe/0x7e0
[  462.677620][T11597]  ? rcu_is_watching+0x15/0xb0
[  462.677655][T11597]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  462.677693][T11597]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  462.677728][T11597]  tomoyo_realpath_from_path+0xe3/0x5d0
[  462.677758][T11597]  ? tomoyo_domain+0xd7/0x130
[  462.677792][T11597]  ? tomoyo_path_number_perm+0x219/0x630
[  462.677829][T11597]  tomoyo_path_number_perm+0x246/0x630
[  462.677868][T11597]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  462.677904][T11597]  ? __lock_acquire+0x6b5/0x2d10
[  462.677938][T11597]  ? do_raw_spin_lock+0x12b/0x2f0
[  462.677998][T11597]  ? __fget_files+0x2a/0x420
[  462.678026][T11597]  ? __fget_files+0x2a/0x420
[  462.678049][T11597]  ? __fget_files+0x3a6/0x420
[  462.678071][T11597]  ? __fget_files+0x2a/0x420
[  462.678100][T11597]  security_file_ioctl+0xc3/0x2a0
[  462.678136][T11597]  __se_sys_ioctl+0x47/0x170
[  462.678167][T11597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.678195][T11597]  do_syscall_64+0x174/0x580
[  462.678225][T11597]  ? trace_irq_disable+0x3b/0x140
[  462.678255][T11597]  ? clear_bhb_loop+0x40/0x90
[  462.678285][T11597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.678310][T11597] RIP: 0033:0x7fcfc807ce59
[  462.678331][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.678352][T11597] RSP: 002b:00007fcfc62b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  462.678377][T11597] RAX: ffffffffffffffda RBX: 00007fcfc82f6090 RCX: 00007fcfc807ce59
[  462.678395][T11597] RDX: 0000200000001ac0 RSI: 0000000000008982 RDI: 0000000000000003
[  462.678412][T11597] RBP: 00007fcfc62b5090 R08: 0000000000000000 R09: 0000000000000000
[  462.678427][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.678441][T11597] R13: 00007fcfc82f6128 R14: 00007fcfc82f6090 R15: 00007ffefb848128
[  462.678478][T11597]  </TASK>
[  462.678631][T11597] ERROR: Out of memory at tomoyo_realpath_from_path.
[  463.000119][ T5719] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  463.141047][ T5719] usb 8-1: device descriptor read/64, error -71
[  463.401061][ T5719] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  463.543321][ T5719] usb 8-1: device descriptor read/64, error -71
[  463.652277][ T5719] usb usb8-port1: attempt power cycle
[  464.005612][ T5719] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  464.020304][ T5719] usb 8-1: device descriptor read/8, error -71
[  464.269551][ T5719] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  464.303129][ T5719] usb 8-1: device descriptor read/8, error -71
[  464.441529][ T5719] usb usb8-port1: unable to enumerate USB device
[  464.653080][T11616] binder: 11615:11616 ioctl c0306201 0 returned -14
[  464.656520][T11616] binder: 11615:11616 ioctl c0306201 200000000040 returned -22
[  464.867203][T11620] netlink: 'syz.6.2136': attribute type 10 has an invalid length.
[  464.867230][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2136'.
[  464.929579][T11620] team0: Port device geneve1 added
[  465.056171][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2136'.
[  465.111052][ T5713] IPVS: starting estimator thread 0...
[  465.158396][T11620] vxcan1: tx address claim with different name
[  465.233863][T11624] IPVS: using max 7 ests per chain, 16800 per kthread
[  465.909513][  T821] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  466.090470][  T821] usb 7-1: Using ep0 maxpacket: 16
[  466.092947][  T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  466.108269][  T821] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  466.108370][  T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.108394][  T821] usb 7-1: Product: syz
[  466.108412][  T821] usb 7-1: Manufacturer: syz
[  466.108428][  T821] usb 7-1: SerialNumber: syz
[  466.166820][  T821] usb 7-1: config 0 descriptor??
[  466.203914][T11639] binder: 11638:11639 ioctl c0306201 0 returned -14
[  466.221699][T11639] binder: 11638:11639 ioctl c0306201 200000000040 returned -22
[  466.256568][  T821] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  466.529036][ T1555] usb 7-1: Failed to submit usb control message: -71
[  466.529078][ T1555] usb 7-1: unable to send the bmi data to the device: -71
[  466.529099][ T1555] usb 7-1: unable to get target info from device
[  466.529132][ T1555] usb 7-1: could not get target info (-71)
[  466.565393][ T5804] usb 7-1: USB disconnect, device number 20
[  466.596777][ T1555] usb 7-1: could not probe fw (-71)
[  466.842207][T11650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2148'.
[  467.015898][T11648] program syz.5.2147 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  467.490587][ T5804] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  467.631636][ T5804] usb 6-1: device descriptor read/64, error -71
[  467.789190][T11664] binder: 11662:11664 ioctl c0306201 0 returned -14
[  467.811477][T11664] binder: 11662:11664 ioctl c0306201 200000000040 returned -22
[  467.829502][ T5718] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  467.891073][ T5804] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  467.979602][ T5718] usb 7-1: Using ep0 maxpacket: 8
[  467.981981][ T5718] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7
[  468.025026][ T5718] usb 7-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40
[  468.025063][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.025085][ T5718] usb 7-1: Product: syz
[  468.025102][ T5718] usb 7-1: Manufacturer: syz
[  468.025120][ T5718] usb 7-1: SerialNumber: syz
[  468.094766][ T5804] usb 6-1: device descriptor read/64, error -71
[  468.211887][ T5804] usb usb6-port1: attempt power cycle
[  468.383708][ T5718] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  468.407742][ T5718] usb 7-1: unit 2 not found!
[  468.417862][   T60] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  468.546474][ T5718] usb 7-1: USB disconnect, device number 21
[  468.663464][ T5804] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  468.683429][ T5804] usb 6-1: device descriptor read/8, error -71
[  468.685801][T11676] netlink: 'syz.7.2157': attribute type 21 has an invalid length.
[  468.685966][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2157'.
[  468.882472][ T5692] udevd[5692]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  468.941576][ T5804] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  468.967017][ T5804] usb 6-1: device descriptor read/8, error -71
[  469.074989][ T5804] usb usb6-port1: unable to enumerate USB device
[  469.172774][T11688] FAULT_INJECTION: forcing a failure.
[  469.172774][T11688] name failslab, interval 1, probability 0, space 0, times 0
[  469.172815][T11688] CPU: 0 UID: 0 PID: 11688 Comm: syz.6.2160 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  469.172847][T11688] Tainted: [L]=SOFTLOCKUP
[  469.172856][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  469.172872][T11688] Call Trace:
[  469.172881][T11688]  <TASK>
[  469.172892][T11688]  dump_stack_lvl+0xe8/0x150
[  469.172927][T11688]  should_fail_ex+0x46b/0x600
[  469.172971][T11688]  should_failslab+0xa8/0x100
[  469.173000][T11688]  __kmalloc_cache_noprof+0xa0/0x6d0
[  469.173027][T11688]  ? alloc_pipe_info+0xe8/0x4d0
[  469.173056][T11688]  ? alloc_pipe_info+0xe8/0x4d0
[  469.173094][T11688]  alloc_pipe_info+0xe8/0x4d0
[  469.173128][T11688]  splice_direct_to_actor+0xa19/0xc80
[  469.173162][T11688]  ? kstrtouint+0x6e/0xe0
[  469.173206][T11688]  ? __pfx_direct_splice_actor+0x10/0x10
[  469.173235][T11688]  ? __pfx_aa_file_perm+0x10/0x10
[  469.173265][T11688]  ? __lock_acquire+0x6b5/0x2d10
[  469.173295][T11688]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  469.173333][T11688]  do_splice_direct+0x19b/0x2a0
[  469.173363][T11688]  ? __pfx_do_splice_direct+0x10/0x10
[  469.173392][T11688]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  469.173427][T11688]  ? rw_verify_area+0x25b/0x4e0
[  469.173459][T11688]  do_sendfile+0x547/0x7e0
[  469.173497][T11688]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  469.173533][T11688]  ? __pfx_do_sendfile+0x10/0x10
[  469.173582][T11688]  __se_sys_sendfile64+0x144/0x1a0
[  469.173620][T11688]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  469.173662][T11688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.173690][T11688]  do_syscall_64+0x174/0x580
[  469.173718][T11688]  ? trace_irq_disable+0x3b/0x140
[  469.173748][T11688]  ? clear_bhb_loop+0x40/0x90
[  469.173776][T11688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.173801][T11688] RIP: 0033:0x7f8d3410ce59
[  469.173823][T11688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.173844][T11688] RSP: 002b:00007f8d32366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  469.173869][T11688] RAX: ffffffffffffffda RBX: 00007f8d34385fa0 RCX: 00007f8d3410ce59
[  469.173886][T11688] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  469.173900][T11688] RBP: 00007f8d32366090 R08: 0000000000000000 R09: 0000000000000000
[  469.173915][T11688] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001
[  469.173931][T11688] R13: 00007f8d34386038 R14: 00007f8d34385fa0 R15: 00007ffd1dc49db8
[  469.173966][T11688]  </TASK>
[  470.017621][T11698] binder: 11697:11698 ioctl c0306201 200000000040 returned -22
[  471.165618][T11721] binder: 11718:11721 ioctl c0306201 200000000040 returned -22
[  471.250948][T11720] program syz.6.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  471.739520][ T5718] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  471.871500][ T5718] usb 7-1: device descriptor read/64, error -71
[  472.112171][ T5718] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  472.239677][ T5718] usb 7-1: device descriptor read/64, error -71
[  472.353330][ T5718] usb usb7-port1: attempt power cycle
[  472.543222][T11743] FAULT_INJECTION: forcing a failure.
[  472.543222][T11743] name failslab, interval 1, probability 0, space 0, times 0
[  472.543265][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.4.2179 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  472.543298][T11743] Tainted: [L]=SOFTLOCKUP
[  472.543307][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  472.543322][T11743] Call Trace:
[  472.543332][T11743]  <TASK>
[  472.543342][T11743]  dump_stack_lvl+0xe8/0x150
[  472.543377][T11743]  should_fail_ex+0x46b/0x600
[  472.543416][T11743]  should_failslab+0xa8/0x100
[  472.543446][T11743]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  472.543484][T11743]  ? do_getname+0x2e/0x250
[  472.543519][T11743]  ? do_getname+0x2e/0x250
[  472.543568][T11743]  do_getname+0x2e/0x250
[  472.543602][T11743]  ? getname_flags+0x11/0x20
[  472.543640][T11743]  do_sys_openat2+0xcc/0x200
[  472.543666][T11743]  ? __pfx_do_sys_openat2+0x10/0x10
[  472.543694][T11743]  ? ksys_write+0x248/0x270
[  472.543726][T11743]  ? __pfx_ksys_write+0x10/0x10
[  472.543759][T11743]  __x64_sys_openat+0x138/0x170
[  472.543785][T11743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.543811][T11743]  do_syscall_64+0x174/0x580
[  472.543840][T11743]  ? trace_irq_disable+0x3b/0x140
[  472.543869][T11743]  ? clear_bhb_loop+0x40/0x90
[  472.543898][T11743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.543922][T11743] RIP: 0033:0x7fcfc807ce59
[  472.543944][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.543965][T11743] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  472.543990][T11743] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  472.544008][T11743] RDX: 0000000000008101 RSI: 0000200000001400 RDI: ffffffffffffff9c
[  472.544024][T11743] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  472.544039][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.544053][T11743] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  472.544089][T11743]  </TASK>
[  472.749608][ T5718] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[  472.892466][ T5718] usb 7-1: device descriptor read/8, error -71
[  473.096276][T11750] binder: 11749:11750 ioctl c0306201 200000000040 returned -22
[  473.139836][ T5718] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  473.160819][ T5718] usb 7-1: device descriptor read/8, error -71
[  473.270602][ T5718] usb usb7-port1: unable to enumerate USB device
[  473.447666][T11753] FAULT_INJECTION: forcing a failure.
[  473.447666][T11753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.447710][T11753] CPU: 1 UID: 0 PID: 11753 Comm: syz.4.2184 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  473.447742][T11753] Tainted: [L]=SOFTLOCKUP
[  473.447751][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  473.447766][T11753] Call Trace:
[  473.447776][T11753]  <TASK>
[  473.447786][T11753]  dump_stack_lvl+0xe8/0x150
[  473.447820][T11753]  should_fail_ex+0x46b/0x600
[  473.447859][T11753]  _copy_to_iter+0x1e4/0x17d0
[  473.447902][T11753]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  473.447933][T11753]  ? lockdep_hardirqs_on+0x7a/0x110
[  473.447965][T11753]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  473.447988][T11753]  ? __pfx__copy_to_iter+0x10/0x10
[  473.448021][T11753]  ? rt_spin_lock+0x1e0/0x400
[  473.448045][T11753]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  473.448080][T11753]  __skb_datagram_iter+0xf8/0x980
[  473.448114][T11753]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  473.448156][T11753]  skb_copy_datagram_iter+0xb5/0x240
[  473.448193][T11753]  netlink_recvmsg+0x2c3/0xa50
[  473.448234][T11753]  ? __pfx_netlink_recvmsg+0x10/0x10
[  473.448267][T11753]  ? __pfx_aa_sk_perm+0x10/0x10
[  473.448308][T11753]  ? aa_file_perm+0x51a/0x15f0
[  473.448332][T11753]  ? aa_sock_msg_perm+0x122/0x200
[  473.448356][T11753]  ? __pfx_netlink_recvmsg+0x10/0x10
[  473.448394][T11753]  sock_recvmsg_nosec+0x130/0x170
[  473.448434][T11753]  sock_read_iter+0x26d/0x330
[  473.448469][T11753]  ? __pfx_sock_read_iter+0x10/0x10
[  473.448522][T11753]  do_iter_readv_writev+0x62b/0x8d0
[  473.448557][T11753]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  473.448597][T11753]  ? rw_verify_area+0x2ac/0x4e0
[  473.448629][T11753]  vfs_readv+0x292/0x850
[  473.448678][T11753]  ? __pfx_vfs_readv+0x10/0x10
[  473.448727][T11753]  ? __fget_files+0x2a/0x420
[  473.448756][T11753]  ? __fget_files+0x3a6/0x420
[  473.448778][T11753]  ? __fget_files+0x2a/0x420
[  473.448811][T11753]  do_readv+0x15a/0x2e0
[  473.448847][T11753]  ? __pfx_do_readv+0x10/0x10
[  473.448892][T11753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.448918][T11753]  do_syscall_64+0x174/0x580
[  473.448947][T11753]  ? trace_irq_disable+0x3b/0x140
[  473.448976][T11753]  ? clear_bhb_loop+0x40/0x90
[  473.449004][T11753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.449028][T11753] RIP: 0033:0x7fcfc807ce59
[  473.449049][T11753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.449070][T11753] RSP: 002b:00007fcfc62d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  473.449095][T11753] RAX: ffffffffffffffda RBX: 00007fcfc82f5fa0 RCX: 00007fcfc807ce59
[  473.449114][T11753] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003
[  473.449129][T11753] RBP: 00007fcfc62d6090 R08: 0000000000000000 R09: 0000000000000000
[  473.449145][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.449160][T11753] R13: 00007fcfc82f6038 R14: 00007fcfc82f5fa0 R15: 00007ffefb848128
[  473.449197][T11753]  </TASK>
[  474.187470][T11762] FAULT_INJECTION: forcing a failure.
[  474.187470][T11762] name failslab, interval 1, probability 0, space 0, times 0
[  474.187501][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.5.2188 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.187524][T11762] Tainted: [L]=SOFTLOCKUP
[  474.187530][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.187540][T11762] Call Trace:
[  474.187546][T11762]  <TASK>
[  474.187554][T11762]  dump_stack_lvl+0xe8/0x150
[  474.187578][T11762]  should_fail_ex+0x46b/0x600
[  474.187606][T11762]  should_failslab+0xa8/0x100
[  474.187626][T11762]  __kmalloc_cache_noprof+0xa0/0x6d0
[  474.187644][T11762]  ? alloc_pipe_info+0xe8/0x4d0
[  474.187665][T11762]  ? alloc_pipe_info+0xe8/0x4d0
[  474.187691][T11762]  alloc_pipe_info+0xe8/0x4d0
[  474.187715][T11762]  splice_direct_to_actor+0xa19/0xc80
[  474.187738][T11762]  ? kstrtouint+0x6e/0xe0
[  474.187762][T11762]  ? __pfx_direct_splice_actor+0x10/0x10
[  474.187783][T11762]  ? __pfx_aa_file_perm+0x10/0x10
[  474.187839][T11762]  ? __lock_acquire+0x6b5/0x2d10
[  474.187871][T11762]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  474.187909][T11762]  do_splice_direct+0x19b/0x2a0
[  474.187939][T11762]  ? __pfx_do_splice_direct+0x10/0x10
[  474.187969][T11762]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  474.187994][T11762]  ? rw_verify_area+0x25b/0x4e0
[  474.188019][T11762]  do_sendfile+0x547/0x7e0
[  474.188044][T11762]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  474.188071][T11762]  ? __pfx_do_sendfile+0x10/0x10
[  474.188105][T11762]  __se_sys_sendfile64+0x144/0x1a0
[  474.188132][T11762]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  474.188162][T11762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.188180][T11762]  do_syscall_64+0x174/0x580
[  474.188224][T11762]  ? trace_irq_disable+0x3b/0x140
[  474.188255][T11762]  ? clear_bhb_loop+0x40/0x90
[  474.188284][T11762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.188314][T11762] RIP: 0033:0x7fa3df37ce59
[  474.188336][T11762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.188356][T11762] RSP: 002b:00007fa3dd5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  474.188382][T11762] RAX: ffffffffffffffda RBX: 00007fa3df5f5fa0 RCX: 00007fa3df37ce59
[  474.188403][T11762] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  474.188413][T11762] RBP: 00007fa3dd5ce090 R08: 0000000000000000 R09: 0000000000000000
[  474.188424][T11762] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000001
[  474.188434][T11762] R13: 00007fa3df5f6038 R14: 00007fa3df5f5fa0 R15: 00007ffe2b13c1a8
[  474.188459][T11762]  </TASK>
[  474.562666][   T40] INFO: task syz.1.1534:9862 blocked for more than 143 seconds.
[  474.562695][   T40]       Tainted: G             L      syzkaller #0
[  474.562708][   T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  474.562735][   T40] task:syz.1.1534      state:D stack:24568 pid:9862  tgid:9861  ppid:5610   task_flags:0x400040 flags:0x00080002
[  474.562814][   T40] Call Trace:
[  474.562823][   T40]  <TASK>
[  474.562838][   T40]  __schedule+0x172b/0x5550
[  474.572474][   T40]  ? irqentry_exit+0x218/0x8c0
[  474.572513][   T40]  ? trace_irq_disable+0x3b/0x140
[  474.572545][   T40]  ? __pfx___schedule+0x10/0x10
[  474.572577][   T40]  ? __rt_mutex_slowlock_locked+0x1e0/0x2560
[  474.572618][   T40]  rt_mutex_schedule+0x76/0xf0
[  474.572649][   T40]  ? __rt_mutex_slowlock_locked+0x1e0/0x2560
[  474.572676][   T40]  __rt_mutex_slowlock_locked+0x1f3a/0x2560
[  474.572714][   T40]  ? __rt_mutex_slowlock_locked+0x1e0/0x2560
[  474.572755][   T40]  ? __pfx___rt_mutex_slowlock_locked+0x10/0x10
[  474.572794][   T40]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  474.572827][   T40]  ? rcu_is_watching+0x15/0xb0
[  474.572866][   T40]  __rwbase_read_lock+0xc3/0x180
[  474.572899][   T40]  ? __pfx___rwbase_read_lock+0x10/0x10
[  474.572943][   T40]  down_read+0x132/0x200
[  474.572976][   T40]  ? __pfx_down_read+0x10/0x10
[  474.573009][   T40]  ? mnt_put_write_access_file+0xbf/0x100
[  474.573042][   T40]  ? file_update_time_flags+0x406/0x4b0
[  474.573077][   T40]  blkdev_write_iter+0x50e/0x720
[  474.573124][   T40]  vfs_write+0x629/0xba0
[  474.573163][   T40]  ? __pfx_vfs_write+0x10/0x10
[  474.573203][   T40]  ? __fget_files+0x2a/0x420
[  474.573237][   T40]  ksys_write+0x156/0x270
[  474.573269][   T40]  ? __pfx_ksys_write+0x10/0x10
[  474.573307][   T40]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.573335][   T40]  do_syscall_64+0x174/0x580
[  474.573364][   T40]  ? trace_irq_disable+0x3b/0x140
[  474.573393][   T40]  ? clear_bhb_loop+0x40/0x90
[  474.573441][   T40]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.573466][   T40] RIP: 0033:0x7f0c315fce59
[  474.573488][   T40] RSP: 002b:00007f0c2f856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  474.573514][   T40] RAX: ffffffffffffffda RBX: 00007f0c31875fa0 RCX: 00007f0c315fce59
[  474.573533][   T40] RDX: 0000000000000854 RSI: 0000200000001040 RDI: 0000000000000004
[  474.573549][   T40] RBP: 00007f0c31692d6f R08: 0000000000000000 R09: 0000000000000000
[  474.573565][   T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.573580][   T40] R13: 00007f0c31876038 R14: 00007f0c31875fa0 R15: 00007ffe5ed69e98
[  474.573616][   T40]  </TASK>
[  474.573673][   T40] 
[  474.573673][   T40] Showing all locks held in the system:
[  474.573687][   T40] 4 locks held by kworker/u8:2/39:
[  474.573700][   T40]  #0: ffff8880333c5138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  474.573773][   T40]  #1: ffffc90000b07c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  474.573840][   T40]  #2: ffff888035a1f1d0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe8/0xfa0
[  474.573900][   T40]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x413/0xfa0
[  474.573960][   T40] 1 lock held by khungtaskd/40:
[  474.574001][   T40]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  474.574062][   T40] 5 locks held by kworker/u8:6/214:
[  474.574076][   T40]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  474.574143][   T40]  #1: ffffc90003c9fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  474.574214][   T40]  #2: ffff88803bec0310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  474.574287][   T40]  #3: ffff88805e180520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  474.574354][   T40]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  474.574429][   T40] 1 lock held by klogd/4967:
[  474.574443][   T40]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  474.574510][   T40] 2 locks held by udevd/4978:
[  474.574522][   T40]  #0: ffffffff8eb031b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  474.574588][   T40]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  474.576130][   T40] 2 locks held by getty/5366:
[  474.576147][   T40]  #0: ffff888036ed70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  474.576210][   T40]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[  474.576334][   T40] 2 locks held by syz.3.1450/9646:
[  474.576348][   T40]  #0: ffff88802722a3c8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550
[  474.576423][   T40]  #1: ffff88802722a598 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x294/0x550
[  474.576492][   T40] 1 lock held by syz.1.1534/9862:
[  474.576507][   T40]  #0: ffff88802722a3c8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x50e/0x720
[  474.576582][   T40] 1 lock held by syz.2.1588/10032:
[  474.576596][   T40]  #0: ffff88802722a598 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x2b4/0x4a0
[  474.576654][   T40] 9 locks held by syz-executor/10035:
[  474.576668][   T40]  #0: ffffffff8e49e250 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  474.576734][   T40]  #1: ffff88802e2cacb0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70
[  474.576799][   T40]  #2: ffff88803afe47b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70
[  474.576860][   T40]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[  474.576927][   T40]  #4: ffff888035e9e418 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  474.576998][   T40]  #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  474.577050][   T40]  #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x31/0x150
[  474.577116][   T40]  #7: ffff888025220558 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0x8b0
[  474.577168][   T40]  #8: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0
[  474.577224][   T40] 1 lock held by syz-executor/10215:
[  474.577238][   T40]  #0: ffffffff8eb031b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  474.577308][   T40] 1 lock held by syz.0.1941/11075:
[  474.577321][   T40]  #0: ffff88802722a598 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x2b4/0x4a0
[  474.577378][   T40] 1 lock held by syz-executor/11229:
[  474.577392][   T40]  #0: ffffffff8eb031b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  474.577458][   T40] 5 locks held by syz.4.2187/11765:
[  474.577472][   T40]  #0: ffff88807bdf90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  474.577528][   T40]  #1: ffff88807bdf9120 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1de/0x990
[  474.577584][   T40]  #2: ffff88807bdf92a8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f8/0x11e0
[  474.577649][   T40]  #3: ffffc9000594b360 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x673/0x11e0
[  474.577715][   T40]  #4: ffffffff8e3bd300 (console_lock){+.+.}-{0:0}, at: do_con_write+0x155/0x54b0
[  474.577784][   T40] 
[  474.577791][   T40] =============================================
[  474.577791][   T40] 
[  474.577813][   T40] NMI backtrace for cpu 1
[  474.577832][   T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.577863][   T40] Tainted: [L]=SOFTLOCKUP
[  474.577873][   T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.577887][   T40] Call Trace:
[  474.577898][   T40]  <TASK>
[  474.577907][   T40]  dump_stack_lvl+0xe8/0x150
[  474.577938][   T40]  nmi_cpu_backtrace+0x274/0x2d0
[  474.577963][   T40]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  474.577993][   T40]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  474.578020][   T40]  sys_info+0x135/0x170
[  474.578052][   T40]  watchdog+0xfd3/0x1030
[  474.578087][   T40]  ? watchdog+0x1c9/0x1030
[  474.578121][   T40]  kthread+0x388/0x470
[  474.578148][   T40]  ? __pfx_watchdog+0x10/0x10
[  474.578173][   T40]  ? __pfx_kthread+0x10/0x10
[  474.578201][   T40]  ret_from_fork+0x514/0xb70
[  474.578233][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[  474.578261][   T40]  ? __switch_to+0xc79/0x1410
[  474.578289][   T40]  ? __pfx_kthread+0x10/0x10
[  474.578317][   T40]  ret_from_fork_asm+0x1a/0x30
[  474.578365][   T40]  </TASK>
[  474.578375][   T40] Sending NMI from CPU 1 to CPUs 0:
[  474.578410][    C0] NMI backtrace for cpu 0
[  474.578427][    C0] CPU: 0 UID: 0 PID: 4967 Comm: klogd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.578452][    C0] Tainted: [L]=SOFTLOCKUP
[  474.578460][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.578471][    C0] RIP: 0010:check_preemption_disabled+0x1/0xe0
[  474.578500][    C0] Code: 20 4d cc 8b 48 c7 c6 60 4d cc 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 e7 3d 7d 07 65 8b 0d dc 3d 7d 07 f7 c1 ff
[  474.578517][    C0] RSP: 0018:ffffc90003a9f4b0 EFLAGS: 00000202
[  474.578533][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002
[  474.578545][    C0] RDX: 0000000000000000 RSI: ffffffff8bcc4d60 RDI: ffffffff8bcc4d20
[  474.578559][    C0] RBP: ffffc90003a9f6b8 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e
[  474.578574][    C0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 0000000000000001
[  474.578587][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  474.578600][    C0] FS:  00007ff2c6050c80(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000
[  474.578616][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  474.578630][    C0] CR2: 000055555987aa38 CR3: 00000000384a8000 CR4: 00000000003526f0
[  474.578646][    C0] Call Trace:
[  474.578653][    C0]  <TASK>
[  474.578661][    C0]  __schedule+0xf7/0x5550
[  474.578683][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  474.578711][    C0]  ? unwind_next_frame+0xa6/0x2550
[  474.578741][    C0]  ? unwind_next_frame+0xa6/0x2550
[  474.578769][    C0]  ? __pfx___schedule+0x10/0x10
[  474.578788][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  474.578823][    C0]  preempt_schedule_irq+0x4d/0xa0
[  474.578844][    C0]  irqentry_exit+0x14f/0x8c0
[  474.578867][    C0]  ? trace_irq_disable+0x3b/0x140
[  474.578892][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  474.578913][    C0] RIP: 0010:vsnprintf+0x531/0xef0
[  474.578931][    C0] Code: 44 24 10 42 0f b6 04 30 84 c0 0f 85 02 07 00 00 83 c3 08 89 5d 00 48 8b 6c 24 08 e9 d2 00 00 00 e8 e4 ed 8b f6 4c 03 64 24 30 <4c> 89 ed 4c 8b 2c 24 e9 6a 05 00 00 e8 ce ed 8b f6 e9 e5 03 00 00
[  474.578947][    C0] RSP: 0018:ffffc90003a9f7e8 EFLAGS: 00000282
[  474.578963][    C0] RAX: ffffc90003a9fad8 RBX: ffffffff8b6da844 RCX: 000000000000005d
[  474.578977][    C0] RDX: 0000000000000000 RSI: ffffffff8b6da844 RDI: ffffc90003a9fad8
[  474.578991][    C0] RBP: 0000000000000001 R08: ffffc90003a9fad8 R09: 1ffff92000753f5b
[  474.579004][    C0] R10: dffffc0000000000 R11: fffff52000753f5c R12: ffffc90003a9fad9
[  474.579019][    C0] R13: ffffc90083a9fad0 R14: dffffc0000000000 R15: ffffffff8b6da845
[  474.579043][    C0]  ? vsnprintf+0x3a0/0xef0
[  474.579066][    C0]  sprintf+0xe7/0x140
[  474.579088][    C0]  ? __pfx_sprintf+0x10/0x10
[  474.579107][    C0]  ? desc_read+0x179/0x410
[  474.579137][    C0]  info_print_prefix+0x20f/0x360
[  474.579160][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  474.579180][    C0]  ? _prb_read_valid+0xa95/0xab0
[  474.579211][    C0]  record_print_text+0x176/0x450
[  474.579232][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  474.579265][    C0]  ? __pfx_record_print_text+0x10/0x10
[  474.579287][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  474.579312][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  474.579342][    C0]  syslog_print+0x3b0/0x610
[  474.579371][    C0]  ? __pfx_syslog_print+0x10/0x10
[  474.579408][    C0]  ? apparmor_capable+0x126/0x170
[  474.579433][    C0]  ? bpf_lsm_capable+0x9/0x20
[  474.579456][    C0]  ? security_capable+0x7e/0x2c0
[  474.579488][    C0]  do_syslog+0x583/0x7d0
[  474.579515][    C0]  ? __pfx_do_syslog+0x10/0x10
[  474.579542][    C0]  ? ktime_get+0x1f5/0x220
[  474.579570][    C0]  ? rcu_is_watching+0x15/0xb0
[  474.579601][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.579620][    C0]  __x64_sys_syslog+0x7c/0x90
[  474.579648][    C0]  do_syscall_64+0x174/0x580
[  474.579672][    C0]  ? clear_bhb_loop+0x40/0x90
[  474.579693][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.579712][    C0] RIP: 0033:0x7ff2c621aa37
[  474.579727][    C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48
[  474.579743][    C0] RSP: 002b:00007ffc47804f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000067
[  474.579763][    C0] RAX: ffffffffffffffda RBX: 00007ff2c63ba490 RCX: 00007ff2c621aa37
[  474.579777][    C0] RDX: 00000000000003ff RSI: 00007ff2c63ba490 RDI: 0000000000000002
[  474.579789][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  474.579800][    C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007ff2c63ba490
[  474.579813][    C0] R13: 00007ff2c6397dfe R14: 00007ff2c63ba69c R15: 00007ff2c63ba69c
[  474.579836][    C0]  </TASK>
[  474.580448][   T40] Kernel panic - not syncing: hung_task: blocked tasks
[  474.580471][   T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.580502][   T40] Tainted: [L]=SOFTLOCKUP
[  474.580511][   T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.580525][   T40] Call Trace:
[  474.580534][   T40]  <TASK>
[  474.580543][   T40]  vpanic+0x56c/0xa60
[  474.580580][   T40]  ? __pfx___schedule+0x10/0x10
[  474.580607][   T40]  ? __pfx_vpanic+0x10/0x10
[  474.580650][   T40]  panic+0xc5/0xd0
[  474.580683][   T40]  ? __pfx_panic+0x10/0x10
[  474.580718][   T40]  ? preempt_schedule_thunk+0x16/0x40
[  474.580771][   T40]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  474.580801][   T40]  watchdog+0x102c/0x1030
[  474.580838][   T40]  ? watchdog+0x1c9/0x1030
[  474.580873][   T40]  kthread+0x388/0x470
[  474.580901][   T40]  ? __pfx_watchdog+0x10/0x10
[  474.580928][   T40]  ? __pfx_kthread+0x10/0x10
[  474.580957][   T40]  ret_from_fork+0x514/0xb70
[  474.580989][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[  474.581018][   T40]  ? __switch_to+0xc79/0x1410
[  474.581044][   T40]  ? __pfx_kthread+0x10/0x10
[  474.581074][   T40]  ret_from_fork_asm+0x1a/0x30
[  474.581120][   T40]  </TASK>
[  474.581739][   T40] Kernel Offset: disabled