last executing test programs:

9m38.671509472s ago: executing program 3 (id=988):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000019440)=[{&(0x7f0000000480)="480000001400190d7ebdeb75fd0d8c162c84e48068d8c033ed7a80ffe0090f000060000000a2bc566109c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191e", 0x48}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x300, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x88)

9m38.113906709s ago: executing program 3 (id=989):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x78}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

9m37.178465951s ago: executing program 3 (id=991):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x4d4dc1, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='omfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
read(r3, &(0x7f0000000140)=""/192, 0xc0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
openat(r2, &(0x7f0000000100)='./mydev\x00', 0x100, 0x62)
ioctl(r2, 0xc0145608, 0x0)
preadv(r2, &(0x7f0000000280), 0x1, 0xfffffffb, 0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5fea199e2b5ef42a, &(0x7f0000000040)={0x4b, &(0x7f0000000180)=[{0xa, 0x0, 0x9, 0x5}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

9m36.110189014s ago: executing program 3 (id=996):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x5, 0x2}}], 0x28})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
timer_create(0xc, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x6903, 0xa, 0x0, 0x3, 0x8], 0x41000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m35.474186781s ago: executing program 3 (id=998):
setns(0xc9, 0x40000000)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r3, 0x8, 0x80000000)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x8, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xf, 0x7, 0x1, {0x22, 0x4c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x5, 0x81}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000ac0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x9, @string={0x9, 0x3, "2f2664ffbc73ba"}}, 0x0, 0x0}, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

9m34.841767453s ago: executing program 3 (id=1000):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x7ffffff7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) (async)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x7ffffff7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) (async)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async)

9m34.424624572s ago: executing program 32 (id=1000):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x7ffffff7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) (async)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x7ffffff7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) (async)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async)

9m9.904350766s ago: executing program 0 (id=1060):
openat$comedi(0xffffff9c, 0x0, 0x8a001, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000701fcfffffffbdbdf25027c000004000d808a5f8daf45bbd54b475c92df16431796b77b"], 0x18}, 0x1, 0x0, 0x0, 0x4048884}, 0xc000)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="4001080000000890f953"], 0x0, 0x0, 0x0}, 0x0)
pipe2$9p(&(0x7f00000000c0), 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd'])
r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x4, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf8, 0x7, 0xfa}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0x4, 0x6, 0x0, 0x5}, 0x39, &(0x7f0000000200)={0x5, 0xf, 0x39, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7, 0x7700, 0x8, [0xc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0xd, 0x5, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x86, 0x22, 0xc, 0x4, 0x99}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x800}]}, 0x1, [{0x3, &(0x7f0000000240)=@string={0x3, 0x3, "cc"}}]})
syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x40, 0x24, 0x68, {0x68, 0x7, "0a1d50cc907023f461a193be641ef0741cc24ff7e1447d966e9cd2d65c63d943c4e26034ec5ca8a57b29837e8e97178914786a566553ff3c93661ba877d9a062bee0ea7f3fbd412c4b8ea9e2e3650ad995e044262c08cfdf702a9967718773b3e5226364d481"}}, &(0x7f0000000340)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "592325be974ed2d491dcf9c6037dd8b8b641ab7719e9b9f787c3be09ef803a6ca1ae45252c8c1335c2be6b58253b060c037838c16ca95cf4a2249c7a9bc0206d79a0d59e8ebecd771596bb712bb7583117b16ed9c1bc98cc07e8b3a50cb1e7779dda62ab92708416bd3611038a28e81fdcaffae54a9ee4b198d78236b85d1cb3207fcf1cbc3cbe58cb96a7e35a97e29a692bb6f23a684cb94cfe58a87585104382d3866d00550d0d69ef43fed08c6da5fba7bee86f2c61516e57a0345a666654254ecd4f8b7faabee23affecd9868aabe006c34e7102646e4b0e"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x40, 0x11, 0x5, "09725c04c4"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x1d, {0x1b, "2224598a72b698b72fc2ca5917b04cc25f2aae23ff1a13a4bf581d"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x1}})
openat$comedi(0xffffff9c, 0x0, 0x8a001, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000701fcfffffffbdbdf25027c000004000d808a5f8daf45bbd54b475c92df16431796b77b"], 0x18}, 0x1, 0x0, 0x0, 0x4048884}, 0xc000) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="4001080000000890f953"], 0x0, 0x0, 0x0}, 0x0) (async)
pipe2$9p(&(0x7f00000000c0), 0x800) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) (async)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x4, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf8, 0x7, 0xfa}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0x4, 0x6, 0x0, 0x5}, 0x39, &(0x7f0000000200)={0x5, 0xf, 0x39, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7, 0x7700, 0x8, [0xc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0xd, 0x5, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x86, 0x22, 0xc, 0x4, 0x99}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x800}]}, 0x1, [{0x3, &(0x7f0000000240)=@string={0x3, 0x3, "cc"}}]}) (async)
syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x40, 0x24, 0x68, {0x68, 0x7, "0a1d50cc907023f461a193be641ef0741cc24ff7e1447d966e9cd2d65c63d943c4e26034ec5ca8a57b29837e8e97178914786a566553ff3c93661ba877d9a062bee0ea7f3fbd412c4b8ea9e2e3650ad995e044262c08cfdf702a9967718773b3e5226364d481"}}, &(0x7f0000000340)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "592325be974ed2d491dcf9c6037dd8b8b641ab7719e9b9f787c3be09ef803a6ca1ae45252c8c1335c2be6b58253b060c037838c16ca95cf4a2249c7a9bc0206d79a0d59e8ebecd771596bb712bb7583117b16ed9c1bc98cc07e8b3a50cb1e7779dda62ab92708416bd3611038a28e81fdcaffae54a9ee4b198d78236b85d1cb3207fcf1cbc3cbe58cb96a7e35a97e29a692bb6f23a684cb94cfe58a87585104382d3866d00550d0d69ef43fed08c6da5fba7bee86f2c61516e57a0345a666654254ecd4f8b7faabee23affecd9868aabe006c34e7102646e4b0e"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x40, 0x11, 0x5, "09725c04c4"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x1d, {0x1b, "2224598a72b698b72fc2ca5917b04cc25f2aae23ff1a13a4bf581d"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x1}}) (async)

9m9.715365511s ago: executing program 0 (id=1061):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
r0 = syz_open_dev$dri(&(0x7f00000009c0), 0x44d, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000a40)={0x1, 0x0, 0xffff7fff, 0xfffffffb, 0x395, 0xb79d, 0x0, 0x3, 0xe})
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044066}, 0x4008000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x101})
write$binfmt_format(r3, &(0x7f0000000080)='0\x00', 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd8010000e3ffffff3f0000000000ddff8a00000000002dff080000000600380001"], 0x78)
close(r6)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000100)={0x556, 0x80, 0x140, 0x384, 0x5, 0x0, 0xf, 0x2, {0x7, 0x9, 0x1}, {0x1ff, 0xf, 0x1}, {0x0, 0x6}, {0x10, 0x5, 0x1}, 0x4, 0x80, 0x80, 0xb, 0x0, 0x40, 0x4, 0x1, 0xc6b, 0x9, 0x80, 0x2, 0x1, 0x505, 0x3, 0x2})
write(0xffffffffffffffff, &(0x7f0000000180)="2d000000010001", 0x7)

9m9.237244832s ago: executing program 0 (id=1063):
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0x26000, 0x4d, &(0x7f0000000200)=""/77}, {0x2, 0xb8, &(0x7f00000002c0)=""/184}, {0x2, 0x8c, &(0x7f0000000380)=""/140}, {0x80a0000, 0xb7, &(0x7f0000000440)=""/183}]})
mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x2, 0x11, r1, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040))
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x35314241, 0x9, 0x2, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x200}, {0x4, 0x405}, {0xfffffff8, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x402}], 0xeb, 0x9b, 0x0, 0x0, 0x5}})
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000600)=0x2)

9m8.29023485s ago: executing program 0 (id=1064):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000140)=0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00')
preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0)
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f00000003c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
futex(0xfffffffffffffffc, 0x4, 0x800001, 0x0, 0x0, 0x20000002)
getdents64(r3, &(0x7f0000000280)=""/244, 0xf4)
syz_clone(0x80064000, &(0x7f00000000c0)="95e2", 0x2, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)="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")
ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x180000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}}, 0x118)
write(r2, &(0x7f0000000100)='zstd\x00', 0x4)
socket$kcm(0x29, 0x2, 0x0)

9m5.603174557s ago: executing program 0 (id=1067):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x31}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x8000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r3, 0x8b32, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)

8m57.891836922s ago: executing program 0 (id=1082):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x6, 0x8, r0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x2}])
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4)
recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000002f40)=""/4018, 0xfb2}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000340)=""/147, 0x93}], 0x7}, 0x2}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x810)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x8000000)

8m57.169245665s ago: executing program 33 (id=1082):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x6, 0x8, r0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x2}])
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4)
recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000002f40)=""/4018, 0xfb2}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000340)=""/147, 0x93}], 0x7}, 0x2}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x810)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x8000000)

5m44.937817505s ago: executing program 2 (id=1937):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)

5m44.850858874s ago: executing program 2 (id=1938):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0)
migrate_pages(0x0, 0xb, 0x0, &(0x7f0000005080)=0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000300)={0x0, 0x7, 0xff, 0x8, 0x4, 0x4, 0x5})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
socket$inet_tcp(0x2, 0x1, 0x0)

5m43.437871027s ago: executing program 2 (id=1942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7, 0x0, <r3=>r2})
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f00000001c0)=ANY=[], 0x0)

5m40.16489474s ago: executing program 2 (id=1961):
setns(0xc9, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)="1528b8616b642e302e202e", 0xb)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002040)={0x2020}, 0x2020)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x200, 0x76e6d370})
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000000380)=""/102392, 0x18ff8)
futex(&(0x7f0000000000)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x1)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58})
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xa, 0xa, 0x201}, {0x804, 0x9, 0x4, 0x45, 0x7, 0xfd, 0x1, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20c}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5m39.502688468s ago: executing program 2 (id=1965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0xe703, &(0x7f0000000580)={&(0x7f0000000380)={0x34, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x0)

5m36.992585415s ago: executing program 2 (id=1977):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

5m36.385753515s ago: executing program 34 (id=1977):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

4m39.593932663s ago: executing program 4 (id=2286):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000140)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x60000, {0x1}}})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000001080)=[@nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x101}}, @set_irq_handler={0xc8, 0x20, {0xfc}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0xd81e, 0x2, 0x8}}, @wr_drn={0x68, 0x20}, @code={0xa, 0x56, {"66b8a2000f00d826470fc7b6ec00000066660f07660f38829209000000b9d40200000f328f090801f8670f01c466baf80cb8bc44d281ef66bafc0c66ed420fa314ce400f30"}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xee, 0x6}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x927}}, @nested_load_syzos={0x136, 0x1b8, {0x0, 0xa, [@nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xeba5}}, @out_dx={0x6a, 0x28, {0xac46, 0x6, 0xfffffffffffffffb}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_syzos={0x136, 0xe0, {0x1, 0x17, [@nested_amd_inject_event={0x180, 0x38, {0x3, 0x7, 0x0, 0x0, 0x1}}, @wr_crn={0x67, 0x20, {0x3}}, @cpuid={0x64, 0x18, {0x81, 0xd}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x1}}]}}, @set_irq_handler={0xc8, 0x20, {0xd5}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x3aa2, 0x7}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x78, 0x62c, 0x200, 0xfffffffffffffffa}}, @wr_drn={0x68, 0x20, {0x7, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x444, 0xffff}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x507, 0x6, 0xfffffffffffffff7}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xf5, 0x6, 0x8}}], 0x47e})
syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffffe, 0x4000)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4m38.984456036s ago: executing program 4 (id=2291):
mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='stm32g0-typel 0', 0xf)

4m38.642219294s ago: executing program 4 (id=2294):
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20100, 0x85)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

4m38.384454076s ago: executing program 4 (id=2296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d00)=ANY=[@ANYBLOB="a813000041000701feffffff00000000017c0000040042808c13018010000400cab1893a20b8d2a93521800a04001c807413e2804402158008007a00", @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="11110e8080e3067066cbbe0aa7af07e55e98be5cbcac6d4ca635fa115ad8edb71189adfa6aca3948aeca5d5f115dd89940f9bee4b5f947a2db1c0a8e813f48827106407e0e4d0c1f4ba7f6992bdfc40c3327e48115291d7a088f7c49e7058e24e0222094e97e11e2aaa796bb9e25508a43e971c053c763d610b646d95c1473e38e9d516d"], 0x13a8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

4m38.153977545s ago: executing program 4 (id=2301):
r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="201600000000cc53d19ca11b727f2e3fd0edba466e2d84505bbdff6bfd9fb873bb9db9d150f2a57b4bbf03d8e08da087195bf938d7f047692dba9d679726fed82f9a990f4cd7e8ee5352f982fbabef7842a6a2f54b1b8277f897bacf344570a7ba2ffa75a5d540474032c45653a90270d88a4de9e27565a81341b42f9d23cb9fbe1c328d350f91df71688c9e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x0, 0x9, 0x2, 0x0, 0x120, 0x1}, {0x4, 0x0, 0xce0d, 0x0, 0x5, 0x80000000, 0xfffffffffffffffd, 0x7fffffffffffffff}, {0x2, 0x20000, 0x4ba, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x200000}}, 0xe8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./bus\x00', 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r6=>0xffffffffffffffff})
lsm_list_modules(0x0, &(0x7f0000000000)=0xfffffffffffffe04, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'team0\x00', @random="0100031f8145"})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e22, 0xfffffff3, @mcast2, 0x74}}}, &(0x7f0000000280)=0x84)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r9=>r8}, './bus\x00'})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r8)
sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2800000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r11, 0x700, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m36.472615946s ago: executing program 4 (id=2309):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d00)=ANY=[@ANYBLOB="a813000041000701feffffff00000000017c0000040042808c13018010000400cab1893a20b8d2a93521800a04001c807413e2804402158008007a00", @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="11110e8080e3067066cbbe0aa7af07e55e98be5cbcac6d4ca635fa115ad8edb71189adfa6aca3948aeca5d5f115dd89940f9bee4b5f947a2db1c0a8e813f48827106407e0e4d0c1f4ba7f6992bdfc40c3327e48115291d7a088f7c49e7058e24e0222094e97e11e2aaa796bb9e25508a43e971c053c763d610b646d95c1473e38e9d516d"], 0x13a8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

4m21.448180428s ago: executing program 35 (id=2309):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d00)=ANY=[@ANYBLOB="a813000041000701feffffff00000000017c0000040042808c13018010000400cab1893a20b8d2a93521800a04001c807413e2804402158008007a00", @ANYBLOB="87000f000960e025c6a39cfa86246a61810064b32de1be045677e7da5a55178053504d633ff4ebe48fb1a1bb505cceaf917cbdccbe7b09013fd415b63a9c774e7de7212aafc30eae1f366a6b54ff68a2af320968f4dc6979b60279aea32eca1a069038d3a94028bef066e279256a418c2dbec99877ede1c9c23d06b4ea8e5bfc7d0c37b4561a50003a4ee8bf4910a6b87c1b63d4fdcd13ac3b3fd1a2bdc13f01d4471ac04f67d44d5ff5b758d647471be31a902d7abe7b801ee23432f94182ec5c6e164b8d594c9261f972edb8be972932723a3da3e8dcafdcd2955c8c1a2965a52dba10f8816bea50fc8f059584070443d3fc9d5534c417a8079f6c0d737c2558ec8d80cf3a375b82b9fc82b3c89c97749153226f94c72d8906cc8bc25568e6861110c51589a39c735961f8e6a65ef46ec47b56fd0036004b91e48fa5cf2c6ff9aba944f50421f6943434a913613fccdd7bd32acfd41f1c0ff3d9ccbef0796a75f1c29ef8f8030e12ae6f8c926e9055ef6649a3a84be4cd8be9f4f1746b6e101ad73a91fca93df715c3a7ef84ed4f6ed97af002d55cdf35145be562b9a9ce26f32dabe15007791c2ba4ab0819dd40e4d882b476d51e3e81e5b99376f535b136a9d74a61d2032a3352305a87e953d6f862d78343c594c747d298ed8a78144b7147b3fe14c58f8ef6ff83489bc40b0f403e5bb5ac2ec9b5a379846b20f54045842a33ec20555f868c88ee9a17227d1cfb4bf85b972457173cb18e82ce3548f066de4cfede80fab6e9efa62b02e13ccee8", @ANYRES32=r0, @ANYBLOB="11110e8080e3067066cbbe0aa7af07e55e98be5cbcac6d4ca635fa115ad8edb71189adfa6aca3948aeca5d5f115dd89940f9bee4b5f947a2db1c0a8e813f48827106407e0e4d0c1f4ba7f6992bdfc40c3327e48115291d7a088f7c49e7058e24e0222094e97e11e2aaa796bb9e25508a43e971c053c763d610b646d95c1473e38e9d516d"], 0x13a8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2m53.807740131s ago: executing program 1 (id=2590):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r3, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="974504a8000000000000000000b4a06bbd2c7afdc106ca7b", 0x18}], 0x1}, 0x400c804)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0xd7c0000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2d08c6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
dup(r1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4)

2m53.247410968s ago: executing program 1 (id=2594):
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
syz_usb_connect$uac3(0x2, 0xc3, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x6, 0x80, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x4d}, [@cluster_info_segment={0x6, 0x20, 0x7, 0x81, 0x1}, @extension_unit={0x15, 0x24, 0xa, 0x3, 0x5, [0x1, 0x2, 0x1, 0x3]}, @processing_unit={0xd, 0x24, 0x9, 0x3, 0x4, [0x0, 0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x403, 0x3, 0x6, 0x0, 0xfff, 0xada, 0x9, 0x8001}, @selector_unit={0x7, 0x24, 0xc, 0x8, 0x2, "dcca"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf8, 0x8, 0x10, {0xa, 0x25, 0x25, 0xe1, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x63, 0x5, {0xa, 0x25, 0x25, 0x80, 0x4}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x3a, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x1}])

2m51.404072454s ago: executing program 1 (id=2599):
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x486, 0x0, 0x4}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/81})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$can_raw(r0, &(0x7f0000001580)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000001540)={&(0x7f0000000440)=@can={{0x2}, 0x3, 0x0, 0x0, 0x0, "b8e19efcd595634e"}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x4048015)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ftruncate(r3, 0x81)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m49.673218129s ago: executing program 1 (id=2602):
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x34)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$MRT(r1, 0x0, 0xcf, 0x0, 0x0)
chdir(&(0x7f0000000940)='./file1\x00')
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, <r4=>0x0})
setpgid(r3, r4)
setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000140)="8367a08b66b7822b77a61d9eeac090de4be5c102e9db51038dfba9425d7c08eeb399700d3b7c5e8dc4703204f436c5927b984575f0eb3232c5e0ce55a3f871a118922456dbf9576cf7ea03e701a6ada1b7b5f842759a7260f24f9f9d47647551a6133d149838ef9242320c0aa60d", 0x6e)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r6 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
r7 = socket(0x11, 0x2, 0x0)
setsockopt(r7, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGSKNS(r9, 0x894c, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0xc, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"})
openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x4241, 0x80)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0xfffffffffffffe33, r5}, './file1\x00'})

2m43.634798391s ago: executing program 1 (id=2618):
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x50000)

2m40.664358163s ago: executing program 1 (id=2636):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7f2e1acbd8ce24a600000c000600010000000100000010002f80"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

2m39.971744773s ago: executing program 36 (id=2636):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7f2e1acbd8ce24a600000c000600010000000100000010002f80"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

2m32.148571123s ago: executing program 5 (id=2656):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m31.652589022s ago: executing program 5 (id=2660):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0x1, 0x3, 0x69c9, 0x4, 0xf3d, 0x385a2d2f, 0x4, 0x100000000})
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x448d0)

2m31.177452506s ago: executing program 5 (id=2661):
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x22000)
syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x4, 0xff78) (async, rerun: 64)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (rerun: 64)
close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x1ff, 0xc1, 0x6}, 0x10) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000bb00010324bd7022ffdbdf2510000000"], 0x14}}, 0x4044000) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)

2m25.880478986s ago: executing program 5 (id=2665):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d00)=ANY=[@ANYBLOB="a813000041000701feffffff00000000017c0000040042808c13018010000400cab1893a20b8d2a93521800a04001c807413e2804402158008007a00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="11110e8080e3067066cbbe0aa7af07e55e98be5cbcac6d4ca635fa115ad8edb71189adfa6aca3948aeca5d5f115dd89940f9bee4b5f947a2db1c0a8e813f48827106407e0e4d0c1f4ba7f6992bdfc40c3327e48115291d7a088f7c49e7058e24e0222094e97e11e2aaa796bb9e25508a43e971c053c763d610b646d95c1473e38e9d516d"], 0x13a8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2m25.434445764s ago: executing program 5 (id=2668):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044)

2m25.124548842s ago: executing program 5 (id=2670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sync_file_range(r0, 0x4, 0x8, 0x2)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x3200440, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1)

2m9.536417038s ago: executing program 37 (id=2670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sync_file_range(r0, 0x4, 0x8, 0x2)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x3200440, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1)

10.623980266s ago: executing program 6 (id=3020):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x20100, 0x85)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.160629739s ago: executing program 7 (id=3022):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x6, "fde61e0ee4a6"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

9.888154009s ago: executing program 6 (id=3025):
getpid()
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000540)={0x401, 0x3, 0xe65, 0x400000008, 0x10006, 0x0, 0x8, 0xcc3, 0xff, 0x100000a, 0x100400, 0x1})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000300)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@my=0x0}, 0x1})
landlock_create_ruleset(&(0x7f0000000300)={0xbe0c8241e3c58262, 0x0, 0x3, 0x0, 0x2}, 0x30, 0x0)
write$snddsp(r1, &(0x7f0000000080)='io', 0x2)

9.728551213s ago: executing program 6 (id=3026):
getpid()
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000180)={r0, &(0x7f0000000240)='\xe5\xfc:\x00\xb1\x0e!\xb6X\t\xa6\xb5\xee\xc8\xcf\xed\x92\xea\xf5\xb3\x8fU\xb7\"=u\x1eYuf\xb3B>3\xcc\xac\x05\xd7\x16\xe6\x95\x89~*\x84\xf8\x1e\x8e\x05r\x9dg\xd8\xccNfJ.\xc6\xc0ny\x99(A\xf0\xba\xad;\x92\xb0\xe3\xbc\x18\x7fr:\"?\'\xd0\x02\x84\xb0MR\xf8d\xcb\x18\xafU\xcc\x91\xc2\\\x90\x80\xe1\n\xe1hE\x8a\x10\a\xe8\x99h\xb9%S\xeaV\x98\x94t\x1c\x9b\x15\t\x06J\xa62\xd6\xda\xfa\xab\xb6@\xcd2\t\xfe;\x15\xc0N<\x02\v\xc1\xdcW\xa9{\'\a\x00\x00\x00\x00\x00\x00\x00\"`\v\xe7\xccp\xcc\x86\t\x92=H!\xc1J\xbf\xc1s\x1c=N\\oJV\\*\xfb\xde\xac\x00\xcd\x16\xdad\xe9\xefu\x06\xf0\xaeJ\xfc1\xcb\xeb!\x03\xfd \x1d\x93)\f\x97V\xb8\x9a\xe8Rw\xac\x00\xf8DE\x05\xe7\xb7\xa4G\vl\xe5<\xd5j', 0x200, &(0x7f0000000080)={@align=0xfffffffffffffffe, {0x9, 0x8000, 0x200, 0xfa0}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x7})
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000540)={0x1, 0x3, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1})

8.772850351s ago: executing program 6 (id=3030):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="b90b400000d6ff00"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000440)={0x40, 0x6, 0x5, "05ceff6012"}, 0x0, 0x0, 0x0, 0x0, 0x0})

7.000513371s ago: executing program 9 (id=3036):
setreuid(0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1f5)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0xf)

7.000186834s ago: executing program 7 (id=3037):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
pread64(r0, &(0x7f0000001680)=""/190, 0xbe, 0x10000)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x228000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000180)={0x980903, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x34)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x201)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000080, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=interleave,mpol=lgc'])
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x802, &(0x7f0000000400))
chdir(&(0x7f0000000940)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040004)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r6})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, 0x0)
ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, <r7=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r7, 0x0, 0x0, 0x3ba0, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})

6.80691148s ago: executing program 7 (id=3039):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004001)
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, 0x0, 0x800)
r8 = syz_pidfd_open(r0, 0x0)
setns(r8, 0x24020000)
syz_pidfd_open(0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000200)=ANY=[])
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r10, 0x7b0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000040)='dir0/per_cpu/cpu0/trace\x00', 0xa4000, 0x28)

5.620841053s ago: executing program 6 (id=3041):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xede}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x40000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000900)={0x10200, 0x200, 0x180, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b02006c0000000008000061979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

5.460413155s ago: executing program 9 (id=3042):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x6a2, 0x0, 0x8}]})

5.203260021s ago: executing program 9 (id=3043):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x20100, 0x85)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.047710613s ago: executing program 7 (id=3044):
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x7010c2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
close_range(r1, r0, 0x0)

4.850363444s ago: executing program 7 (id=3045):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x7, "fde61e0ee4a63b"}, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

4.078392642s ago: executing program 8 (id=3046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r2, 0x11}, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

4.076880767s ago: executing program 9 (id=3047):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
pread64(r0, &(0x7f0000001680)=""/190, 0xbe, 0x10000)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x228000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000180)={0x980903, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x34)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x201)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000080, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=interleave,mpol=lgc'])
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x802, &(0x7f0000000400))
chdir(&(0x7f0000000940)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040004)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r8})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, 0x0)
ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r8, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r9=>r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'})

3.956484055s ago: executing program 6 (id=3048):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x412100, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x3, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x8, 0xe3}}}}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0})
write$rfkill(r0, &(0x7f0000000080)={0xb, 0x1, 0x3, 0x1}, 0x8)

3.837783482s ago: executing program 8 (id=3049):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000000)={0x28, r1, 0x611, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488c5}, 0x20000084)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x286822, &(0x7f0000000040)=ANY=[@ANYBLOB='nrb'])

3.809887093s ago: executing program 9 (id=3050):
r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x18, '\x00', @buffer={"33e3ee7608f84e1f2aefa327ad62a29457acd30cefa08b03bcaf6821fe4802d4", 0x20}, 0x7ff}, {0x3, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x2, @uvalue=0x2}, {0x2, @svalue=0x1}, {0x3, @svalue=0x7}]}, 0x9}, {0x3d, '\x00', @data=0x2, 0x479a}]})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='utf8', &(0x7f00000000c0)='/%@#\x00', 0x0)
r2 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
write$tun(r4, &(0x7f0000000280)={@void, @val={0x2, 0x4, 0x9, 0x8, 0x0, 0xfad}, @ipv4=@tipc={{0x22, 0x4, 0x2, 0x24, 0xa9, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0xf, 0xf6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @generic={0x44, 0xa, "d810257736efb226"}, @end, @end, @ssrr={0x89, 0x17, 0x34, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100, @broadcast, @multicast1]}, @generic={0x94, 0xf, "a8cdf248fae462ad1b49b21166"}, @cipso={0x86, 0x30, 0x3, [{0x1, 0x2}, {0x2, 0x6, "54af41b5"}, {0x1, 0xf, "afd21fc5a3f6facd54cf216478"}, {0x7, 0x6, "49000598"}, {0x5, 0x4, "01ee"}, {0x6, 0x6, "b5d7c944"}, {0x2, 0x3, '$'}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x2, 0xa3bc, 0x0, 0x0, 0x1, 0x7, 0x3, 0x8, 0x2, 0x2, 0x4e24, 0x4e20}, 0x0, 0x1}}, [0x0]}}}, 0xb3)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x24, 0x0, &(0x7f0000001a40))
syz_usb_control_io(r2, 0x0, 0x0)

3.640376519s ago: executing program 8 (id=3051):
setreuid(0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1f5)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0xf)

3.212682429s ago: executing program 8 (id=3052):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14)
write(r0, &(0x7f0000000080)='4', 0x1)
syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

2.101162674s ago: executing program 8 (id=3053):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x39, 0x1a, r0, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fanotify_mark(r2, 0x455, 0x8000003, r3, 0x0)
close(r2)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x2, "08dd161a979cb0e43cb73d2d00000d0000814d0008000000000000000000005f", 0x31364d4e})
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x8f, 0x5f, 0x5f, 0x20, 0x545, 0x8002, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x5, 0x20, 0x7, "", [{{0x9, 0x4, 0x78, 0x2, 0x0, 0xc3, 0x9b, 0x75, 0x8}}]}}]}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000340)="2c5db18271fe054658fe1c586b1dc826d06eecc3a3d4bf8d4e96bee8fccc6fc6d9007e72cfd626690e4f7417b006c94270e430183086043c832a77bce4c65f222ab9bcf4150d0719ff224953c6973546b0addd455b442c5dee8d77a6a55944cb2abb20245833804f2fac736b3f4130cae1cf2e8662f906e3e706431a091b5643581cd7e8845df5c127be2f7e992acb", 0xff3b}, {&(0x7f0000000400)="84b688ed1cbebf252bbc6aabd90fbe35fbafc537dcdd565ba8b411e8be2284808f99d80b6603fc4fe127c29d4bf85c6fc7c5e6dcffe44b0cb81b402d3b73de214c5f7908d656ac194ec399f8a555fbfdb15f23489f1a7e9a088f946d81d63c24b8f771a54832df29f2a291e65acb5411b08c4a576ab26bdf61eb05c1f6b7bb0af7", 0x81}, {&(0x7f00000004c0)="35bd6bc58bbb757381f14f85ceb73c410612334952c497a1835af1d0f20812b23b4cb2f765a28dcec1", 0x29}], 0x3}}], 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x3c, 0x9f, 0x25, 0x10, 0xdf6, 0x72, 0xf84f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x9, 0x90, 0xa5, "", [{{0x9, 0x4, 0xfb, 0x8, 0x0, 0xff, 0xff, 0x0, 0x8}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0})

1.024530294s ago: executing program 7 (id=3054):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xa00000000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)

537.658045ms ago: executing program 9 (id=3055):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x7, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b002000"}})

0s ago: executing program 8 (id=3056):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x20100, 0x85)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

0:50
[  907.561988][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.648216][T15821] 9p: Bad value for 'dfltuid'
[  908.648231][T15821] 9p: Bad value for 'dfltuid'
[  909.060818][T13290] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  909.197738][T15829] FAULT_INJECTION: forcing a failure.
[  909.197738][T15829] name failslab, interval 1, probability 0, space 0, times 0
[  909.197767][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.9.2752 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  909.197787][T15829] Tainted: [L]=SOFTLOCKUP
[  909.197792][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  909.197800][T15829] Call Trace:
[  909.197806][T15829]  <TASK>
[  909.197813][T15829]  dump_stack_lvl+0xe8/0x150
[  909.197839][T15829]  should_fail_ex+0x467/0x600
[  909.197862][T15829]  ? create_io_worker+0x27/0x5c0
[  909.197884][T15829]  should_failslab+0xa8/0x100
[  909.197900][T15829]  __kmalloc_cache_noprof+0xa1/0x670
[  909.197920][T15829]  ? create_io_worker+0xab/0x5c0
[  909.197938][T15829]  ? create_io_worker+0xab/0x5c0
[  909.197958][T15829]  ? create_io_worker+0x27/0x5c0
[  909.197977][T15829]  create_io_worker+0xab/0x5c0
[  909.197999][T15829]  io_wq_enqueue+0x675/0x8a0
[  909.198017][T15829]  ? io_wq_enqueue+0x332/0x8a0
[  909.198033][T15829]  ? __pfx_io_wq_work_match_item+0x10/0x10
[  909.198055][T15829]  io_submit_sqes+0x1e74/0x2310
[  909.198092][T15829]  __se_sys_io_uring_enter+0x364/0x1bb0
[  909.198110][T15829]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  909.198133][T15829]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  909.198152][T15829]  ? fput+0xa0/0xd0
[  909.198172][T15829]  ? ksys_write+0x248/0x270
[  909.198188][T15829]  ? __pfx_ksys_write+0x10/0x10
[  909.198205][T15829]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  909.198226][T15829]  do_syscall_64+0x17b/0x530
[  909.198239][T15829]  ? irqentry_exit+0x10f/0x8f0
[  909.198252][T15829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.198265][T15829]  ? clear_bhb_loop+0x40/0x90
[  909.198281][T15829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.198294][T15829] RIP: 0033:0x7f39fa84e0d9
[  909.198307][T15829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.198319][T15829] RSP: 002b:00007f39f8aa5fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  909.198334][T15829] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f39fa84e0d9
[  909.198344][T15829] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[  909.198352][T15829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[  909.198359][T15829] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  909.198367][T15829] R13: 00007f39faad6038 R14: 00007f39faad5fa0 R15: 00007ffc941b4908
[  909.198386][T15829]  </TASK>
[  909.223430][T13290] usb 9-1: unable to get BOS descriptor or descriptor too short
[  909.223950][T13290] usb 9-1: not running at top speed; connect to a high speed hub
[  909.225290][T13290] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  909.225307][T13290] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  909.225320][T13290] usb 9-1: config 14 has no interface number 0
[  909.225345][T13290] usb 9-1: config 14 has no interface number 1
[  909.225390][T13290] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  909.225414][T13290] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  909.225430][T13290] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  909.225445][T13290] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  909.225461][T13290] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  909.225476][T13290] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  909.225490][T13290] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  909.225506][T13290] usb 9-1: config 14 interface 57 has no altsetting 0
[  909.225518][T13290] usb 9-1: config 14 interface 228 has no altsetting 0
[  909.227578][T13290] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  909.227596][T13290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.227608][T13290] usb 9-1: Product: syz
[  909.227618][T13290] usb 9-1: Manufacturer: syz
[  909.227627][T13290] usb 9-1: SerialNumber: syz
[  910.317076][T13290] legousbtower 9-1:14.57: interrupt endpoints not found
[  910.757099][T13290] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  910.758846][T13290] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  911.344430][T15845] usb 9-1: LEGO USB Tower reset control request failed
[  911.374788][T13290] usb 9-1: USB disconnect, device number 4
[  911.453500][T13290] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  911.725645][T15826] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2750'.
[  912.409084][T15857] binder: 15854:15857 ioctl c0306201 200000000640 returned -22
[  913.063901][T15869] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2761'.
[  913.890769][ T5697] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  914.057214][ T5697] usb 9-1: unable to get BOS descriptor or descriptor too short
[  914.060255][ T5697] usb 9-1: not running at top speed; connect to a high speed hub
[  914.081884][ T5697] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  914.081904][ T5697] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  914.081917][ T5697] usb 9-1: config 14 has no interface number 0
[  914.081927][ T5697] usb 9-1: config 14 has no interface number 1
[  914.081974][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  914.081990][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  914.082005][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  914.082020][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  914.082037][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  914.082053][ T5697] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  914.082066][ T5697] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  914.082082][ T5697] usb 9-1: config 14 interface 57 has no altsetting 0
[  914.082092][ T5697] usb 9-1: config 14 interface 228 has no altsetting 0
[  914.253167][ T5697] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  914.253189][ T5697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.253202][ T5697] usb 9-1: Product: syz
[  914.253211][ T5697] usb 9-1: Manufacturer: syz
[  914.253219][ T5697] usb 9-1: SerialNumber: syz
[  914.931528][ T5697] legousbtower 9-1:14.57: interrupt endpoints not found
[  915.344889][ T5697] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  915.347075][ T5697] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  915.919227][T15909] usb 9-1: LEGO USB Tower reset control request failed
[  915.949681][T13290] usb 9-1: USB disconnect, device number 5
[  916.077346][T13290] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  916.127658][T15916] FAULT_INJECTION: forcing a failure.
[  916.127658][T15916] name failslab, interval 1, probability 0, space 0, times 0
[  916.127685][T15916] CPU: 0 UID: 0 PID: 15916 Comm: syz.7.2772 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  916.127703][T15916] Tainted: [L]=SOFTLOCKUP
[  916.127708][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  916.127716][T15916] Call Trace:
[  916.127721][T15916]  <TASK>
[  916.127727][T15916]  dump_stack_lvl+0xe8/0x150
[  916.127751][T15916]  should_fail_ex+0x467/0x600
[  916.127771][T15916]  should_failslab+0xa8/0x100
[  916.127786][T15916]  __kmalloc_noprof+0xfb/0x790
[  916.127804][T15916]  ? tomoyo_realpath_from_path+0xef/0x640
[  916.127824][T15916]  ? tomoyo_realpath_from_path+0xef/0x640
[  916.127846][T15916]  tomoyo_realpath_from_path+0xef/0x640
[  916.127870][T15916]  ? tomoyo_path_number_perm+0x219/0x5f0
[  916.127886][T15916]  tomoyo_path_number_perm+0x246/0x5f0
[  916.127903][T15916]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  916.127920][T15916]  ? do_raw_spin_lock+0x12b/0x2f0
[  916.127945][T15916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  916.127959][T15916]  ? lockdep_hardirqs_on+0x7a/0x110
[  916.127982][T15916]  ? __fget_files+0x2a/0x420
[  916.127998][T15916]  ? __fget_files+0x3a8/0x420
[  916.128010][T15916]  ? __fget_files+0x2a/0x420
[  916.128028][T15916]  security_file_ioctl+0xb9/0x260
[  916.128045][T15916]  __se_sys_ioctl+0x47/0x170
[  916.128063][T15916]  do_syscall_64+0x17b/0x530
[  916.128076][T15916]  ? irqentry_exit+0x10f/0x8f0
[  916.128088][T15916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.128101][T15916]  ? clear_bhb_loop+0x40/0x90
[  916.128117][T15916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.128129][T15916] RIP: 0033:0x7f5d2be4e0d9
[  916.128142][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.128153][T15916] RSP: 002b:00007f5d2a0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  916.128169][T15916] RAX: ffffffffffffffda RBX: 00007f5d2c0d5fa0 RCX: 00007f5d2be4e0d9
[  916.128178][T15916] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003
[  916.128187][T15916] RBP: 00007f5d2a0a6090 R08: 0000000000000000 R09: 0000000000000000
[  916.128195][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.128202][T15916] R13: 00007f5d2c0d6038 R14: 00007f5d2c0d5fa0 R15: 00007ffc086a33a8
[  916.128222][T15916]  </TASK>
[  916.128237][T15916] ERROR: Out of memory at tomoyo_realpath_from_path.
[  916.438242][T15917] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2771'.
[  917.016742][T15932] tmpfs: Group quota block hardlimit too large.
[  917.779250][T15951] FAULT_INJECTION: forcing a failure.
[  917.779250][T15951] name failslab, interval 1, probability 0, space 0, times 0
[  917.779284][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.9.2780 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  917.779303][T15951] Tainted: [L]=SOFTLOCKUP
[  917.779308][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  917.779316][T15951] Call Trace:
[  917.779322][T15951]  <TASK>
[  917.779329][T15951]  dump_stack_lvl+0xe8/0x150
[  917.779369][T15951]  should_fail_ex+0x467/0x600
[  917.779391][T15951]  should_failslab+0xa8/0x100
[  917.779407][T15951]  kmem_cache_alloc_node_noprof+0xac/0x660
[  917.779426][T15951]  ? preload_this_cpu_lock+0x49/0xc0
[  917.779446][T15951]  ? preload_this_cpu_lock+0x49/0xc0
[  917.779465][T15951]  ? alloc_vmap_area+0x21c/0x1420
[  917.779483][T15951]  preload_this_cpu_lock+0x49/0xc0
[  917.779503][T15951]  alloc_vmap_area+0x3c3/0x1420
[  917.779529][T15951]  ? __pfx_alloc_vmap_area+0x10/0x10
[  917.779544][T15951]  ? __kmalloc_cache_node_noprof+0x459/0x670
[  917.779564][T15951]  ? __get_vm_area_node+0x136/0x300
[  917.779578][T15951]  ? __get_vm_area_node+0x136/0x300
[  917.779597][T15951]  __get_vm_area_node+0x1f2/0x300
[  917.779617][T15951]  __vmalloc_node_range_noprof+0x34e/0x1560
[  917.779634][T15951]  ? copy_process+0x820/0x43f0
[  917.779657][T15951]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  917.779682][T15951]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  917.779700][T15951]  ? trace_kmem_cache_alloc+0x29/0xe0
[  917.779717][T15951]  ? memcpy_and_pad+0x48/0x80
[  917.779735][T15951]  __vmalloc_node_noprof+0xc2/0x100
[  917.779752][T15951]  ? copy_process+0x820/0x43f0
[  917.779763][T15951]  ? copy_process+0x820/0x43f0
[  917.779777][T15951]  dup_task_struct+0x2a0/0x8e0
[  917.779790][T15951]  ? rt_spin_unlock+0x163/0x200
[  917.779810][T15951]  copy_process+0x820/0x43f0
[  917.779842][T15951]  ? __pfx_copy_process+0x10/0x10
[  917.779867][T15951]  vhost_task_create+0x1f9/0x380
[  917.779884][T15951]  ? look_up_lock_class+0x57/0x110
[  917.779896][T15951]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  917.779909][T15951]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  917.779924][T15951]  ? __pfx_vhost_task_create+0x10/0x10
[  917.779946][T15951]  ? __pfx_vhost_task_fn+0x10/0x10
[  917.779965][T15951]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  917.779978][T15951]  ? lockdep_hardirqs_on+0x7a/0x110
[  917.779991][T15951]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  917.780003][T15951]  ? mutex_lock_nested+0x152/0x1d0
[  917.780019][T15951]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  917.780040][T15951]  kvm_mmu_post_init_vm+0x147/0x2b0
[  917.780056][T15951]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  917.780078][T15951]  ? rt_write_unlock+0x19c/0x360
[  917.780102][T15951]  kvm_vcpu_ioctl+0xa64/0xfe0
[  917.780126][T15951]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  917.780145][T15951]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  917.780158][T15951]  ? lockdep_hardirqs_on+0x7a/0x110
[  917.780180][T15951]  ? __fget_files+0x2a/0x420
[  917.780197][T15951]  ? __fget_files+0x3a8/0x420
[  917.780209][T15951]  ? __fget_files+0x2a/0x420
[  917.780224][T15951]  ? bpf_lsm_file_ioctl+0x9/0x20
[  917.780244][T15951]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  917.780263][T15951]  __se_sys_ioctl+0xff/0x170
[  917.780284][T15951]  do_syscall_64+0x17b/0x530
[  917.780297][T15951]  ? irqentry_exit+0x10f/0x8f0
[  917.780309][T15951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.780322][T15951]  ? clear_bhb_loop+0x40/0x90
[  917.780338][T15951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.780350][T15951] RIP: 0033:0x7f39fa84e0d9
[  917.780370][T15951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  917.780381][T15951] RSP: 002b:00007f39f8a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  917.780396][T15951] RAX: ffffffffffffffda RBX: 00007f39faad6090 RCX: 00007f39fa84e0d9
[  917.780406][T15951] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  917.780414][T15951] RBP: 00007f39f8a85090 R08: 0000000000000000 R09: 0000000000000000
[  917.780423][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.780430][T15951] R13: 00007f39faad6128 R14: 00007f39faad6090 R15: 00007ffc941b4908
[  917.780450][T15951]  </TASK>
[  918.310173][T15951] kvm: emulating exchange as write
[  918.542153][ T7940] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  918.690820][ T5698] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  918.717926][ T7940] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  918.717947][ T7940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  918.719962][ T7940] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  918.719981][ T7940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.719993][ T7940] usb 7-1: Product: syz
[  918.720002][ T7940] usb 7-1: Manufacturer: syz
[  918.720012][ T7940] usb 7-1: SerialNumber: syz
[  918.796715][ T7940] usb 7-1: config 0 descriptor??
[  918.825545][ T7940] gspca_main: sunplus-2.14.0 probing 055f:c630
[  918.842921][ T5698] usb 9-1: unable to get BOS descriptor or descriptor too short
[  918.843394][ T5698] usb 9-1: not running at top speed; connect to a high speed hub
[  918.844468][ T5698] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  918.844484][ T5698] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  918.844496][ T5698] usb 9-1: config 14 has no interface number 0
[  918.844506][ T5698] usb 9-1: config 14 has no interface number 1
[  918.844554][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  918.844656][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  918.844675][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  918.844691][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  918.844707][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  918.844762][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  918.844777][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  918.844793][ T5698] usb 9-1: config 14 interface 57 has no altsetting 0
[  918.844804][ T5698] usb 9-1: config 14 interface 228 has no altsetting 0
[  918.848156][ T5698] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  918.848175][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.848187][ T5698] usb 9-1: Product: syz
[  918.848210][ T5698] usb 9-1: Manufacturer: syz
[  918.848219][ T5698] usb 9-1: SerialNumber: syz
[  919.554939][ T5698] legousbtower 9-1:14.57: interrupt endpoints not found
[  919.968545][ T5698] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  920.036614][ T5698] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  920.230242][T15971] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2787'.
[  920.598090][T15977] usb 9-1: LEGO USB Tower reset control request failed
[  920.616821][ T7940] gspca_sunplus: reg_r err -71
[  920.616900][ T7940] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  920.682443][ T7940] usb 7-1: USB disconnect, device number 50
[  920.778460][ T5698] usb 9-1: USB disconnect, device number 6
[  921.311443][ T5698] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  922.530831][ T5698] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  922.662015][ T5698] usb 10-1: device descriptor read/64, error -71
[  922.900716][ T5698] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  923.030736][ T5698] usb 10-1: device descriptor read/64, error -71
[  923.141030][ T5698] usb usb10-port1: attempt power cycle
[  923.182495][T16018] CUSE: info not properly terminated
[  923.503316][ T5698] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  923.521556][ T5698] usb 10-1: device descriptor read/8, error -71
[  923.765854][ T5698] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  923.781369][ T5698] usb 10-1: device descriptor read/8, error -71
[  923.892655][ T5698] usb usb10-port1: unable to enumerate USB device
[  924.175151][T16018] Flush: task=syz.6.2797[16018] dev=loop4 state=2
[  924.283048][T16018] Teardown: task=syz.6.2797[16018] dev=loop4 state=2
[  924.283728][T16018] Flush: task=syz.6.2797[16018] dev=loop6 state=2
[  924.332968][T16018] Teardown: task=syz.6.2797[16018] dev=loop6 state=2
[  924.520835][    T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  924.674443][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  924.674998][    T9] usb 9-1: not running at top speed; connect to a high speed hub
[  924.676075][    T9] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  924.676092][    T9] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  924.676103][    T9] usb 9-1: config 14 has no interface number 0
[  924.676113][    T9] usb 9-1: config 14 has no interface number 1
[  924.676155][    T9] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  924.676170][    T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  924.676186][    T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  924.676201][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  924.676217][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  924.676234][    T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  924.676247][    T9] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  924.676264][    T9] usb 9-1: config 14 interface 57 has no altsetting 0
[  924.676275][    T9] usb 9-1: config 14 interface 228 has no altsetting 0
[  924.680175][    T9] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  924.680195][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.680207][    T9] usb 9-1: Product: syz
[  924.680216][    T9] usb 9-1: Manufacturer: syz
[  924.680225][    T9] usb 9-1: SerialNumber: syz
[  924.770675][ T5698] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  924.952491][ T5698] usb 7-1: config 0 has no interfaces?
[  924.952520][ T5698] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  924.952537][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.999436][ T5698] usb 7-1: config 0 descriptor??
[  925.281785][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.293876][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.321903][    T9] legousbtower 9-1:14.57: interrupt endpoints not found
[  925.380749][ T7941] usb 7-1: USB disconnect, device number 51
[  925.828721][    T9] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  925.846108][    T9] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  925.870676][ T7941] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  925.991760][T16038] fuse: Bad value for 'fd'
[  926.021542][ T7941] usb 7-1: Using ep0 maxpacket: 8
[  926.023209][ T7941] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  926.023230][ T7941] usb 7-1: config 0 has no interface number 0
[  926.023259][ T7941] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  926.023273][ T7941] usb 7-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  926.023289][ T7941] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  926.023303][ T7941] usb 7-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  926.023319][ T7941] usb 7-1: config 0 interface 1 has no altsetting 0
[  926.023342][ T7941] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  926.023357][ T7941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.122478][ T7941] usb 7-1: config 0 descriptor??
[  926.392831][T16040] usb 9-1: LEGO USB Tower reset control request failed
[  926.409934][ T7941] usb 9-1: USB disconnect, device number 7
[  926.472317][ T7941] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  926.717567][ T7941] usb 7-1: USB disconnect, device number 52
[  928.550770][ T5697] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  928.711423][ T5697] usb 10-1: unable to get BOS descriptor or descriptor too short
[  928.712051][ T5697] usb 10-1: not running at top speed; connect to a high speed hub
[  928.714460][ T5697] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  928.714483][ T5697] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  928.714510][ T5697] usb 10-1: config 14 has no interface number 0
[  928.714521][ T5697] usb 10-1: config 14 has no interface number 1
[  928.714570][ T5697] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  928.714587][ T5697] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  928.714607][ T5697] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  928.714627][ T5697] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  928.714651][ T5697] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  928.714666][ T5697] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  928.714681][ T5697] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  928.714699][ T5697] usb 10-1: config 14 interface 57 has no altsetting 0
[  928.714710][ T5697] usb 10-1: config 14 interface 228 has no altsetting 0
[  928.718818][ T5697] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  928.718838][ T5697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.718852][ T5697] usb 10-1: Product: syz
[  928.718862][ T5697] usb 10-1: Manufacturer: syz
[  928.718872][ T5697] usb 10-1: SerialNumber: syz
[  928.794211][ T7940] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  929.004032][ T7940] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  929.004055][ T7940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.104739][ T7940] usb 7-1: config 0 descriptor??
[  929.328047][ T7940] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  929.344790][ T7940] [drm:udl_init] *ERROR* Selecting channel failed
[  929.369230][ T5697] legousbtower 10-1:14.57: interrupt endpoints not found
[  929.864297][ T5697] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  929.992303][ T5697] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  930.448683][T16087] usb 10-1: LEGO USB Tower reset control request failed
[  930.481112][ T7639] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  930.489256][ T5698] usb 10-1: USB disconnect, device number 6
[  930.534075][ T5698] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[  930.642840][ T7639] usb 9-1: Using ep0 maxpacket: 32
[  930.659286][ T7639] usb 9-1: config 2 has an invalid interface number: 88 but max is 0
[  930.659306][ T7639] usb 9-1: config 2 has no interface number 0
[  930.659335][ T7639] usb 9-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  930.659351][ T7639] usb 9-1: config 2 interface 88 has no altsetting 0
[  930.690132][ T7639] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  930.690161][ T7639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  930.690174][ T7639] usb 9-1: Product: syz
[  930.690183][ T7639] usb 9-1: Manufacturer: syz
[  930.690192][ T7639] usb 9-1: SerialNumber: syz
[  930.750379][T16081] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  930.993929][T16081] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  931.647918][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.665838][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.118160][ T7639] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  933.118186][ T7639] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  933.118393][ T7639] asix 9-1:2.88: probe with driver asix failed with error -71
[  933.195184][ T7639] usb 9-1: USB disconnect, device number 8
[  933.477332][ T7940] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[  933.477362][ T7940] [drm] Initialized udl on minor 2
[  933.516134][T16117] kernel profiling enabled (shift: 5)
[  934.003494][ T7940] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  934.210288][ T7940] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  934.507286][ T7940] usb 7-1: USB disconnect, device number 53
[  934.829486][T16127] veth1_to_bond: entered allmulticast mode
[  934.829635][T16127] veth1_to_bond: entered promiscuous mode
[  934.830243][T16127] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2830'.
[  934.914995][T16127] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.027080][ T7941] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  935.063652][    T9] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  935.241215][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  935.241700][    T9] usb 10-1: not running at top speed; connect to a high speed hub
[  935.242785][    T9] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  935.242803][    T9] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  935.242817][    T9] usb 10-1: config 14 has no interface number 0
[  935.242828][    T9] usb 10-1: config 14 has no interface number 1
[  935.242873][    T9] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  935.242888][    T9] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  935.242906][    T9] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  935.242923][    T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  935.242942][    T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  935.242958][    T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  935.242973][    T9] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  935.242990][    T9] usb 10-1: config 14 interface 57 has no altsetting 0
[  935.243002][    T9] usb 10-1: config 14 interface 228 has no altsetting 0
[  935.245342][    T9] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  935.245362][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.245375][    T9] usb 10-1: Product: syz
[  935.245385][    T9] usb 10-1: Manufacturer: syz
[  935.245395][    T9] usb 10-1: SerialNumber: syz
[  935.775279][T16127] bridge_slave_0 (unregistering): left allmulticast mode
[  935.775308][T16127] bridge_slave_0 (unregistering): left promiscuous mode
[  935.775440][T16127] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.946911][    T9] legousbtower 10-1:14.57: interrupt endpoints not found
[  936.353075][    T9] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  936.421303][    T9] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  936.920864][T16138] usb 10-1: LEGO USB Tower reset control request failed
[  936.923247][    T9] usb 10-1: USB disconnect, device number 7
[  937.019599][    T9] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[  937.314144][ T1342] ieee802154 phy0 wpan0: encryption failed: -22
[  937.314230][ T1342] ieee802154 phy1 wpan1: encryption failed: -22
[  939.583811][ T7940] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  939.721162][ T7940] usb 10-1: device descriptor read/64, error -71
[  940.012048][ T7940] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  940.151420][ T7940] usb 10-1: device descriptor read/64, error -71
[  940.263938][ T7940] usb usb10-port1: attempt power cycle
[  940.631963][ T7940] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  940.652671][ T7940] usb 10-1: device descriptor read/8, error -71
[  940.903439][ T7940] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  940.921491][ T7940] usb 10-1: device descriptor read/8, error -71
[  941.006209][T16129] veth1_to_bond: left promiscuous mode
[  941.032842][ T7940] usb usb10-port1: unable to enumerate USB device
[  941.148518][T16129] veth1_to_bond: left allmulticast mode
[  941.180667][    T9] usb 7-1: new full-speed USB device number 54 using dummy_hcd
[  941.332737][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  941.333273][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  941.340060][    T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  941.340080][    T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  941.340092][    T9] usb 7-1: config 14 has no interface number 0
[  941.340102][    T9] usb 7-1: config 14 has no interface number 1
[  941.340147][    T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  941.340162][    T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  941.340178][    T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  941.340194][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  941.340211][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  941.340227][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  941.340241][    T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  941.340258][    T9] usb 7-1: config 14 interface 57 has no altsetting 0
[  941.340269][    T9] usb 7-1: config 14 interface 228 has no altsetting 0
[  941.479196][    T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  941.479219][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.479231][    T9] usb 7-1: Product: syz
[  941.479241][    T9] usb 7-1: Manufacturer: syz
[  941.479250][    T9] usb 7-1: SerialNumber: syz
[  941.972335][    T9] legousbtower 7-1:14.57: interrupt endpoints not found
[  942.384149][    T9] legousbtower 7-1:14.228: get version request failed: -32
[  942.384273][    T9] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -32
[  942.479820][    T9] usb 7-1: USB disconnect, device number 54
[  942.596674][T16178] vivid-003: disconnect
[  942.618459][T16177] vivid-003: reconnect
[  943.303326][ T7639] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  943.451200][ T7639] usb 7-1: Using ep0 maxpacket: 16
[  943.458795][ T7639] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[  943.472676][ T7639] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  943.472697][ T7639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.472710][ T7639] usb 7-1: Product: syz
[  943.472719][ T7639] usb 7-1: Manufacturer: syz
[  943.472728][ T7639] usb 7-1: SerialNumber: syz
[  943.478437][ T7639] r8152-cfgselector 7-1: Unknown version 0x0000
[  943.478455][ T7639] r8152-cfgselector 7-1: config 0 descriptor??
[  943.886549][ T7940] r8152-cfgselector 7-1: USB disconnect, device number 55
[  944.090655][ T7639] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  944.293827][ T7639] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  944.293853][ T7639] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  944.293880][ T7639] usb 9-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  944.293894][ T7639] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.300289][ T7639] usb 9-1: config 0 descriptor??
[  944.809128][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809155][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809171][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809186][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809201][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809217][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809232][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809247][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809262][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.809279][ T7639] hid-u2fzero 0003:20A0:4287.001A: unknown main item tag 0x0
[  944.901345][ T7639] hid-u2fzero 0003:20A0:4287.001A: collection stack underflow
[  944.901367][ T7639] hid-u2fzero 0003:20A0:4287.001A: item 0 0 0 12 parsing failed
[  944.901913][ T7639] hid-u2fzero 0003:20A0:4287.001A: probe with driver hid-u2fzero failed with error -22
[  944.979293][ T7940] usb 9-1: USB disconnect, device number 9
[  945.039092][T16211] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2861'.
[  945.070806][    T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  945.195780][ T7639] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  945.226709][    T9] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  945.226731][    T9] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  945.226743][    T9] usb 7-1: config 220 has no interface number 2
[  945.226791][    T9] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  945.226815][    T9] usb 7-1: config 220 interface 0 has no altsetting 0
[  945.226827][    T9] usb 7-1: config 220 interface 76 has no altsetting 0
[  945.226838][    T9] usb 7-1: config 220 interface 1 has no altsetting 0
[  945.228655][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  945.228673][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.228685][    T9] usb 7-1: Product: syz
[  945.228694][    T9] usb 7-1: Manufacturer: syz
[  945.228708][    T9] usb 7-1: SerialNumber: syz
[  945.353861][ T7639] usb 10-1: unable to get BOS descriptor or descriptor too short
[  945.355687][ T7639] usb 10-1: not running at top speed; connect to a high speed hub
[  945.358535][ T7639] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  945.358553][ T7639] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  945.358566][ T7639] usb 10-1: config 14 has no interface number 0
[  945.358576][ T7639] usb 10-1: config 14 has no interface number 1
[  945.358620][ T7639] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  945.358673][ T7639] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  945.358689][ T7639] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  945.358711][ T7639] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  945.358727][ T7639] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  945.358743][ T7639] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  945.358756][ T7639] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  945.358772][ T7639] usb 10-1: config 14 interface 57 has no altsetting 0
[  945.358818][ T7639] usb 10-1: config 14 interface 228 has no altsetting 0
[  945.504790][ T7639] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  945.504812][ T7639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.504825][ T7639] usb 10-1: Product: syz
[  945.504835][ T7639] usb 10-1: Manufacturer: syz
[  945.504844][ T7639] usb 10-1: SerialNumber: syz
[  945.735946][    T9] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  945.736186][    T9] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  945.736207][    T9] uvcvideo 7-1:220.0: No valid video chain found.
[  945.736251][    T9] usb 7-1: selecting invalid altsetting 0
[  945.998515][    T9] usb 7-1: selecting invalid altsetting 0
[  945.998584][    T9] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  946.004851][    T9] usb 7-1: USB disconnect, device number 56
[  946.072264][ T7639] legousbtower 10-1:14.57: interrupt endpoints not found
[  946.465942][ T7639] legousbtower 10-1:14.228: get version request failed: -32
[  946.466068][ T7639] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -32
[  946.513078][ T7639] usb 10-1: USB disconnect, device number 12
[  946.640837][    T9] usb 7-1: new full-speed USB device number 57 using dummy_hcd
[  946.792935][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  946.794039][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  946.794970][    T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  946.794987][    T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  946.794999][    T9] usb 7-1: config 14 has no interface number 0
[  946.795009][    T9] usb 7-1: config 14 has no interface number 1
[  946.795051][    T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  946.795065][    T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  946.795081][    T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  946.795096][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  946.795113][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  946.795129][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  946.795142][    T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  946.795158][    T9] usb 7-1: config 14 interface 57 has no altsetting 0
[  946.795168][    T9] usb 7-1: config 14 interface 228 has no altsetting 0
[  946.796990][    T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  946.797007][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.797019][    T9] usb 7-1: Product: syz
[  946.797028][    T9] usb 7-1: Manufacturer: syz
[  946.797037][    T9] usb 7-1: SerialNumber: syz
[  946.909718][ T7941] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  947.120678][ T7941] usb 9-1: Using ep0 maxpacket: 32
[  947.179280][ T7941] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  947.179302][ T7941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.179314][ T7941] usb 9-1: Product: syz
[  947.179324][ T7941] usb 9-1: Manufacturer: syz
[  947.179332][ T7941] usb 9-1: SerialNumber: syz
[  947.267139][ T7941] usb 9-1: config 0 descriptor??
[  947.302730][ T7941] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  947.302769][ T7941] dvb-usb: bulk message failed: -22 (2/0)
[  947.446087][ T7941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  947.446822][ T7941] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  947.446861][ T7941] usb 9-1: media controller created
[  947.490996][    T9] legousbtower 7-1:14.57: interrupt endpoints not found
[  947.564983][ T7941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  947.779017][ T7941] usb 9-1: selecting invalid altsetting 7
[  947.779032][ T7941] cxusb: set interface failed
[  947.779040][ T7941] dvb-usb: bulk message failed: -22 (1/0)
[  947.911798][    T9] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  947.920411][    T9] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  947.999272][ T7941] DVB: Unable to find symbol lgdt330x_attach()
[  947.999287][ T7941] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  948.154840][ T7941] rc_core: IR keymap rc-dvico-portable not found
[  948.154857][ T7941] Registered IR keymap rc-empty
[  948.156007][ T7941] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[  948.204812][ T7941] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input61
[  948.222752][ T7941] dvb-usb: schedule remote query interval to 100 msecs.
[  948.222768][ T7941] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  948.253854][ T7941] usb 9-1: USB disconnect, device number 10
[  948.467117][ T7941] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  948.483176][T16238] usb 7-1: LEGO USB Tower reset control request failed
[  948.723728][ T5698] usb 7-1: USB disconnect, device number 57
[  948.742569][T16243] FAULT_INJECTION: forcing a failure.
[  948.742569][T16243] name failslab, interval 1, probability 0, space 0, times 0
[  948.742598][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.9.2870 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  948.742616][T16243] Tainted: [L]=SOFTLOCKUP
[  948.742621][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  948.742629][T16243] Call Trace:
[  948.742635][T16243]  <TASK>
[  948.742641][T16243]  dump_stack_lvl+0xe8/0x150
[  948.742665][T16243]  should_fail_ex+0x467/0x600
[  948.742686][T16243]  should_failslab+0xa8/0x100
[  948.742701][T16243]  __kmalloc_cache_noprof+0xa1/0x670
[  948.742720][T16243]  ? init_srcu_struct_fields+0x7f/0xaa0
[  948.742735][T16243]  ? init_srcu_struct_fields+0x7f/0xaa0
[  948.742751][T16243]  init_srcu_struct_fields+0x7f/0xaa0
[  948.742768][T16243]  dm_create+0x1fc/0xf80
[  948.742857][T16243]  ? lock_acquire+0x115/0x350
[  948.742878][T16243]  dev_create+0x1f7/0x400
[  948.742922][T16243]  ? __pfx_dev_create+0x10/0x10
[  948.742937][T16243]  ? __might_fault+0xaf/0x130
[  948.742957][T16243]  dm_ctl_ioctl+0x9ec/0xe10
[  948.742975][T16243]  ? __pfx_dev_create+0x10/0x10
[  948.742988][T16243]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  948.743017][T16243]  ? __fget_files+0x3a8/0x420
[  948.743030][T16243]  ? __fget_files+0x2a/0x420
[  948.743044][T16243]  ? bpf_lsm_file_ioctl+0x9/0x20
[  948.743066][T16243]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  948.743079][T16243]  __se_sys_ioctl+0xff/0x170
[  948.743097][T16243]  do_syscall_64+0x17b/0x530
[  948.743111][T16243]  ? irqentry_exit+0x10f/0x8f0
[  948.743123][T16243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.743135][T16243]  ? clear_bhb_loop+0x40/0x90
[  948.743151][T16243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.743163][T16243] RIP: 0033:0x7f39fa84e0d9
[  948.743177][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  948.743188][T16243] RSP: 002b:00007f39f8aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  948.743203][T16243] RAX: ffffffffffffffda RBX: 00007f39faad5fa0 RCX: 00007f39fa84e0d9
[  948.743213][T16243] RDX: 0000200000000240 RSI: 00000000c138fd03 RDI: 0000000000000003
[  948.743221][T16243] RBP: 00007f39f8aa6090 R08: 0000000000000000 R09: 0000000000000000
[  948.743229][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  948.743237][T16243] R13: 00007f39faad6038 R14: 00007f39faad5fa0 R15: 00007ffc941b4908
[  948.743255][T16243]  </TASK>
[  949.119006][ T5698] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected
[  949.561007][    T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  949.711614][    T9] usb 7-1: Using ep0 maxpacket: 16
[  949.713343][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.713361][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  949.715419][    T9] usb 7-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  949.715439][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.715451][    T9] usb 7-1: Product: syz
[  949.715461][    T9] usb 7-1: Manufacturer: syz
[  949.715470][    T9] usb 7-1: SerialNumber: syz
[  949.840735][ T5698] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  949.994144][ T5698] usb 9-1: unable to get BOS descriptor or descriptor too short
[  950.007332][ T5698] usb 9-1: not running at top speed; connect to a high speed hub
[  950.026219][ T5698] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  950.026239][ T5698] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  950.026252][ T5698] usb 9-1: config 14 has no interface number 0
[  950.026261][ T5698] usb 9-1: config 14 has no interface number 1
[  950.068333][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  950.068356][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  950.068374][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  950.068389][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  950.068458][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  950.068475][ T5698] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  950.068488][ T5698] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  950.068504][ T5698] usb 9-1: config 14 interface 57 has no altsetting 0
[  950.068515][ T5698] usb 9-1: config 14 interface 228 has no altsetting 0
[  950.202827][ T5698] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  950.202849][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.202862][ T5698] usb 9-1: Product: syz
[  950.202871][ T5698] usb 9-1: Manufacturer: syz
[  950.202880][ T5698] usb 9-1: SerialNumber: syz
[  950.290372][T16257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.308155][T16257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.705029][ T5698] legousbtower 9-1:14.57: interrupt endpoints not found
[  950.785696][    T9] usb 7-1: USB disconnect, device number 58
[  950.877296][T15060] udevd[15060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  950.901937][ T7941] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  951.066637][ T7941] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  951.066698][ T7941] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  951.066711][ T7941] usb 10-1: Product: syz
[  951.066720][ T7941] usb 10-1: SerialNumber: syz
[  951.102859][ T5698] legousbtower 9-1:14.228: get version request failed: -121
[  951.102982][ T5698] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121
[  951.107386][ T7941] usb 10-1: config 0 descriptor??
[  951.334095][    T9] usb 9-1: USB disconnect, device number 11
[  951.426159][ T7941] usb 10-1: USB disconnect, device number 13
[  951.800707][ T5698] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  951.918869][T16268] tmpfs: Bad value for 'mpol'
[  951.930385][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2879'.
[  951.967164][ T5698] usb 7-1: Using ep0 maxpacket: 16
[  951.969785][ T5698] usb 7-1: unable to get BOS descriptor or descriptor too short
[  951.986778][ T5698] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  951.986917][ T5698] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  952.055523][ T5698] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  952.055546][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.055558][ T5698] usb 7-1: Product: syz
[  952.055567][ T5698] usb 7-1: Manufacturer: syz
[  952.055576][ T5698] usb 7-1: SerialNumber: syz
[  952.413115][ T5698] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  952.413790][ T5698] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  952.600954][  T202] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  952.761985][  T202] usb 10-1: unable to get BOS descriptor or descriptor too short
[  952.762832][  T202] usb 10-1: not running at top speed; connect to a high speed hub
[  952.783244][  T202] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  952.783266][  T202] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  952.783279][  T202] usb 10-1: config 14 has no interface number 0
[  952.783289][  T202] usb 10-1: config 14 has no interface number 1
[  952.783333][  T202] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  952.783387][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  952.783405][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  952.783420][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  952.783444][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  952.783459][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  952.783473][  T202] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  952.783490][  T202] usb 10-1: config 14 interface 57 has no altsetting 0
[  952.783538][  T202] usb 10-1: config 14 interface 228 has no altsetting 0
[  952.952952][  T202] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  952.952974][  T202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.952986][  T202] usb 10-1: Product: syz
[  952.952995][  T202] usb 10-1: Manufacturer: syz
[  952.953004][  T202] usb 10-1: SerialNumber: syz
[  953.404895][T16280] binder: BINDER_SET_CONTEXT_MGR already set
[  953.404907][T16280] binder: 16279:16280 ioctl 4018620d 200000004a80 returned -16
[  953.453578][ T5698] usb 7-1: USB disconnect, device number 59
[  953.525954][  T202] legousbtower 10-1:14.57: interrupt endpoints not found
[  953.648505][T16268] syz.8.2879 (16268): drop_caches: 2
[  953.677523][T15060] udevd[15060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  953.937133][  T202] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  953.957714][  T202] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  954.134654][T16289] overlayfs: missing 'workdir'
[  954.485907][T16292] usb 10-1: LEGO USB Tower reset control request failed
[  954.688329][  T202] usb 10-1: USB disconnect, device number 14
[  954.738013][  T202] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[  954.929596][T16298] netlink: 'syz.8.2889': attribute type 32 has an invalid length.
[  955.129173][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2892'.
[  955.458972][T16314] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.0), cmd(3)
[  955.546358][ T5698] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  955.702978][ T5698] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.703007][ T5698] usb 10-1: too many endpoints for config 0 interface 0 altsetting 237: 195, using maximum allowed: 30
[  955.703031][ T5698] usb 10-1: config 0 interface 0 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 195
[  955.703049][ T5698] usb 10-1: config 0 interface 0 has no altsetting 0
[  955.703069][ T5698] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  955.703084][ T5698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.775548][ T5698] usb 10-1: config 0 descriptor??
[  956.078842][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2894'.
[  956.128532][T16311] : renamed from veth0_vlan (while UP)
[  956.174930][T16325] netlink: 'syz.8.2900': attribute type 1 has an invalid length.
[  956.175019][T16325] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2900'.
[  956.175031][T16325] nbd: illegal input index 2147483646
[  956.474074][ T5698] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  956.650687][ T5698] usb 9-1: Using ep0 maxpacket: 8
[  956.658641][ T5698] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  956.658662][ T5698] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  956.694251][ T5698] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  956.694276][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.694289][ T5698] usb 9-1: Product: syz
[  956.694299][ T5698] usb 9-1: Manufacturer: syz
[  956.694308][ T5698] usb 9-1: SerialNumber: syz
[  956.987332][T16329] jffs2: notice: (16329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  957.027217][ T5698] usb 9-1: unit 4 not found!
[  957.237862][ T5698] usb 9-1: USB disconnect, device number 12
[  957.408362][T14348] udevd[14348]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  957.461154][  T202] usb 7-1: new full-speed USB device number 60 using dummy_hcd
[  957.614402][  T202] usb 7-1: unable to get BOS descriptor or descriptor too short
[  957.615256][  T202] usb 7-1: not running at top speed; connect to a high speed hub
[  957.616686][  T202] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  957.616704][  T202] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  957.616717][  T202] usb 7-1: config 14 has no interface number 0
[  957.616728][  T202] usb 7-1: config 14 has no interface number 1
[  957.616772][  T202] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  957.616788][  T202] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  957.616805][  T202] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  957.616820][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  957.616838][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  957.616855][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  957.616869][  T202] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  957.616886][  T202] usb 7-1: config 14 interface 57 has no altsetting 0
[  957.616897][  T202] usb 7-1: config 14 interface 228 has no altsetting 0
[  957.708417][  T202] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  957.708442][  T202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.708455][  T202] usb 7-1: Product: syz
[  957.708465][  T202] usb 7-1: Manufacturer: syz
[  957.708476][  T202] usb 7-1: SerialNumber: syz
[  958.315756][  T202] legousbtower 7-1:14.57: interrupt endpoints not found
[  958.356950][T16343] netlink: 'syz.7.2905': attribute type 3 has an invalid length.
[  958.356970][T16343] netlink: 610 bytes leftover after parsing attributes in process `syz.7.2905'.
[  958.538967][ T7941] usb 10-1: USB disconnect, device number 15
[  958.722931][  T202] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  958.749599][  T202] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  959.286229][T16360] usb 7-1: LEGO USB Tower reset control request failed
[  959.491741][  T202] usb 7-1: USB disconnect, device number 60
[  959.627841][  T202] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected
[  960.103640][  T202] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[  960.284650][  T202] usb 10-1: unable to get BOS descriptor or descriptor too short
[  960.285133][  T202] usb 10-1: not running at top speed; connect to a high speed hub
[  960.289435][  T202] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  960.289455][  T202] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  960.289468][  T202] usb 10-1: config 14 has no interface number 0
[  960.289479][  T202] usb 10-1: config 14 has no interface number 1
[  960.289524][  T202] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  960.289538][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  960.289557][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  960.289574][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  960.289592][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  960.289609][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  960.289624][  T202] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  960.289642][  T202] usb 10-1: config 14 interface 57 has no altsetting 0
[  960.289653][  T202] usb 10-1: config 14 interface 228 has no altsetting 0
[  960.413199][  T202] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  960.413227][  T202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.413241][  T202] usb 10-1: Product: syz
[  960.413252][  T202] usb 10-1: Manufacturer: syz
[  960.413262][  T202] usb 10-1: SerialNumber: syz
[  960.710318][T16379] jffs2: notice: (16379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  960.938236][    T9] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  960.981364][  T202] legousbtower 10-1:14.57: interrupt endpoints not found
[  961.132080][    T9] usb 7-1: Using ep0 maxpacket: 32
[  961.167379][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.167403][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.167474][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  961.167489][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.255755][    T9] usb 7-1: config 0 descriptor??
[  961.294775][    T9] hub 7-1:0.0: USB hub found
[  961.437221][  T202] legousbtower 10-1:14.228: get version request failed: -121
[  961.437385][  T202] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -121
[  961.487360][    T9] hub 7-1:0.0: 11 ports detected
[  961.487747][    T9] hub 7-1:0.0: insufficient power available to use all downstream ports
[  961.662752][  T202] usb 10-1: USB disconnect, device number 16
[  961.972822][    T9] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  961.972911][    T9] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  962.055977][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  962.056075][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  962.106357][    T9] usb 7-1: USB disconnect, device number 61
[  962.771130][    T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  962.995194][    T9] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  962.995217][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.995229][    T9] usb 9-1: Product: syz
[  962.995238][    T9] usb 9-1: Manufacturer: syz
[  962.995247][    T9] usb 9-1: SerialNumber: syz
[  963.590732][    T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  963.590777][    T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  964.187643][T16400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.188230][T16400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.651797][ T7941] hid_parser_main: 117 callbacks suppressed
[  964.651818][ T7941] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  964.729238][ T7941] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  964.870834][  T202] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  964.955207][ T4905] Bluetooth: hci0: command 0x0406 tx timeout
[  965.149284][  T202] usb 10-1: unable to get BOS descriptor or descriptor too short
[  965.149897][  T202] usb 10-1: not running at top speed; connect to a high speed hub
[  965.170936][  T202] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  965.170996][  T202] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  965.171010][  T202] usb 10-1: config 14 has no interface number 0
[  965.171020][  T202] usb 10-1: config 14 has no interface number 1
[  965.171063][  T202] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  965.171078][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  965.171094][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  965.171148][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  965.171165][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  965.171181][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  965.171195][  T202] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  965.171211][  T202] usb 10-1: config 14 interface 57 has no altsetting 0
[  965.171223][  T202] usb 10-1: config 14 interface 228 has no altsetting 0
[  965.183758][  T202] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  965.183779][  T202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.183791][  T202] usb 10-1: Product: syz
[  965.183800][  T202] usb 10-1: Manufacturer: syz
[  965.183809][  T202] usb 10-1: SerialNumber: syz
[  965.297975][T16418] fido_id[16418]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  965.476817][    T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[  965.529969][    T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  965.579718][    T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  965.641969][    T9] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  965.696129][    T9] usb 9-1: USB disconnect, device number 13
[  966.045988][  T202] legousbtower 10-1:14.57: interrupt endpoints not found
[  966.471317][  T202] legousbtower 10-1:14.228: get version request failed: -121
[  966.471448][  T202] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -121
[  966.681222][ T5698] usb 10-1: USB disconnect, device number 17
[  966.770343][T16427] netlink: 'syz.6.2931': attribute type 1 has an invalid length.
[  966.770363][T16427] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2931'.
[  966.770374][T16427] nbd: illegal input index 2147483646
[  967.075387][T16435] netlink: 'syz.7.2934': attribute type 10 has an invalid length.
[  967.161502][    T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  967.221684][T16439] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2936'.
[  967.320818][    T9] usb 7-1: Using ep0 maxpacket: 8
[  967.326449][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  967.326468][    T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  967.358369][    T9] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  967.358390][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.358403][    T9] usb 7-1: Product: syz
[  967.358412][    T9] usb 7-1: Manufacturer: syz
[  967.358422][    T9] usb 7-1: SerialNumber: syz
[  967.451043][ T5698] usb 9-1: new low-speed USB device number 14 using dummy_hcd
[  967.581283][ T5698] usb 9-1: device descriptor read/64, error -71
[  967.648983][    T9] usb 7-1: unit 4 not found!
[  967.796811][    T9] usb 7-1: USB disconnect, device number 62
[  967.831119][ T5698] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[  967.904024][T14348] udevd[14348]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.962513][ T5698] usb 9-1: device descriptor read/64, error -71
[  968.073205][ T5698] usb usb9-port1: attempt power cycle
[  968.452550][ T5698] usb 9-1: new low-speed USB device number 16 using dummy_hcd
[  968.472010][ T5698] usb 9-1: device descriptor read/8, error -71
[  968.711295][ T5698] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[  968.732629][ T5698] usb 9-1: device descriptor read/8, error -71
[  968.841371][ T5698] usb usb9-port1: unable to enumerate USB device
[  968.954512][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.954880][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.172197][  T202] usb 7-1: new full-speed USB device number 63 using dummy_hcd
[  969.182523][ T5698] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  969.323985][  T202] usb 7-1: unable to get BOS descriptor or descriptor too short
[  969.324670][  T202] usb 7-1: not running at top speed; connect to a high speed hub
[  969.325684][  T202] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  969.325701][  T202] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  969.325713][  T202] usb 7-1: config 14 has no interface number 0
[  969.325723][  T202] usb 7-1: config 14 has no interface number 1
[  969.325767][  T202] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  969.325782][  T202] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  969.325798][  T202] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  969.325816][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  969.325837][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  969.325854][  T202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  969.325866][  T202] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  969.325882][  T202] usb 7-1: config 14 interface 57 has no altsetting 0
[  969.325893][  T202] usb 7-1: config 14 interface 228 has no altsetting 0
[  969.476578][ T5698] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  969.476728][ T5698] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 11776, setting to 64
[  969.476747][ T5698] usb 10-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  969.477657][  T202] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  969.477727][  T202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.477741][  T202] usb 7-1: Product: syz
[  969.477750][  T202] usb 7-1: Manufacturer: syz
[  969.477760][  T202] usb 7-1: SerialNumber: syz
[  969.557944][ T5698] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  969.558040][ T5698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.558055][ T5698] usb 10-1: Product: syz
[  969.558064][ T5698] usb 10-1: Manufacturer: syz
[  969.558172][ T5698] usb 10-1: SerialNumber: syz
[  969.818472][T16461] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[  969.820160][ T5698] snd-usb-caiaq 10-1:1.0: invalid EPs
[  969.820282][ T5698] usb 10-1: unable to init card! (ret=-22)
[  969.860094][ T5698] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  970.025036][T16461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.025514][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.028562][T16461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.029621][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.071786][ T7941] usb 10-1: USB disconnect, device number 18
[  970.123147][  T202] legousbtower 7-1:14.57: interrupt endpoints not found
[  970.515653][  T202] legousbtower 7-1:14.228: get version request failed: -121
[  970.515778][  T202] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121
[  970.566408][T16475] tmpfs: Bad value for 'mpol'
[  970.742406][  T202] usb 7-1: USB disconnect, device number 63
[  970.779824][T16477] netlink: 'syz.7.2949': attribute type 1 has an invalid length.
[  970.779841][T16477] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2949'.
[  970.779852][T16477] nbd: illegal input index 2147483646
[  970.854561][T16479] netlink: 'syz.8.2950': attribute type 4 has an invalid length.
[  970.854578][T16479] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2950'.
[  971.859202][T16501] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2955'.
[  972.272463][ T7941] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  972.431494][ T7941] usb 7-1: Using ep0 maxpacket: 32
[  972.433545][ T7941] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  972.433566][ T7941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.436940][ T7941] usb 7-1: config 0 descriptor??
[  972.505126][ T7941] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  973.791443][  T202] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  973.967931][  T202] usb 10-1: unable to get BOS descriptor or descriptor too short
[  973.968588][  T202] usb 10-1: not running at top speed; connect to a high speed hub
[  973.969743][  T202] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  973.969759][  T202] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  973.969772][  T202] usb 10-1: config 14 has no interface number 0
[  973.969782][  T202] usb 10-1: config 14 has no interface number 1
[  973.969824][  T202] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  973.969902][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  973.969920][  T202] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  973.969935][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  973.969952][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  973.969968][  T202] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  973.969982][  T202] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  973.970034][  T202] usb 10-1: config 14 interface 57 has no altsetting 0
[  973.970046][  T202] usb 10-1: config 14 interface 228 has no altsetting 0
[  974.133418][  T202] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  974.133441][  T202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.133453][  T202] usb 10-1: Product: syz
[  974.133463][  T202] usb 10-1: Manufacturer: syz
[  974.134067][  T202] usb 10-1: SerialNumber: syz
[  974.325890][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  974.642516][  T202] legousbtower 10-1:14.57: interrupt endpoints not found
[  975.054475][  T202] legousbtower 10-1:14.228: get version request failed: -121
[  975.054638][  T202] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -121
[  975.266578][  T202] usb 10-1: USB disconnect, device number 19
[  975.799924][T16534] FAULT_INJECTION: forcing a failure.
[  975.799924][T16534] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  975.799952][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.7.2969 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  975.799971][T16534] Tainted: [L]=SOFTLOCKUP
[  975.799976][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  975.799983][T16534] Call Trace:
[  975.799989][T16534]  <TASK>
[  975.799995][T16534]  dump_stack_lvl+0xe8/0x150
[  975.800021][T16534]  should_fail_ex+0x467/0x600
[  975.800043][T16534]  prepare_alloc_pages+0x223/0x650
[  975.800067][T16534]  __alloc_frozen_pages_noprof+0x193/0x5b0
[  975.800089][T16534]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  975.800109][T16534]  ? __alloc_frozen_pages_noprof+0x2a9/0x5b0
[  975.800131][T16534]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  975.800153][T16534]  ? __pfx_policy_nodemask+0x10/0x10
[  975.800166][T16534]  ? lockdep_hardirqs_on+0x7a/0x110
[  975.800181][T16534]  __alloc_pages_noprof+0x10/0x100
[  975.800207][T16534]  alloc_pages_bulk_noprof+0x681/0x890
[  975.800228][T16534]  ? alloc_pages_mpol+0x11b/0x280
[  975.800243][T16534]  ? alloc_pages_noprof+0x161/0x2f0
[  975.800259][T16534]  __kasan_populate_vmalloc+0xb7/0x1c0
[  975.800276][T16534]  ? rt_spin_unlock+0x163/0x200
[  975.800295][T16534]  alloc_vmap_area+0xd1a/0x1420
[  975.800321][T16534]  ? __pfx_alloc_vmap_area+0x10/0x10
[  975.800336][T16534]  ? __kmalloc_cache_node_noprof+0x459/0x670
[  975.800356][T16534]  ? __get_vm_area_node+0x136/0x300
[  975.800371][T16534]  ? __get_vm_area_node+0x136/0x300
[  975.800395][T16534]  __get_vm_area_node+0x1f2/0x300
[  975.800415][T16534]  __vmalloc_node_range_noprof+0x34e/0x1560
[  975.800433][T16534]  ? copy_process+0x820/0x43f0
[  975.800451][T16534]  ? percpu_ref_get_many+0x19/0x140
[  975.800469][T16534]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  975.800494][T16534]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  975.800512][T16534]  ? trace_kmem_cache_alloc+0x29/0xe0
[  975.800528][T16534]  ? memcpy_and_pad+0x48/0x80
[  975.800546][T16534]  __vmalloc_node_noprof+0xc2/0x100
[  975.800563][T16534]  ? copy_process+0x820/0x43f0
[  975.800574][T16534]  ? copy_process+0x820/0x43f0
[  975.800589][T16534]  dup_task_struct+0x2a0/0x8e0
[  975.800602][T16534]  ? rt_spin_unlock+0x163/0x200
[  975.800620][T16534]  copy_process+0x820/0x43f0
[  975.800652][T16534]  ? __pfx_copy_process+0x10/0x10
[  975.800673][T16534]  vhost_task_create+0x1f9/0x380
[  975.800690][T16534]  ? look_up_lock_class+0x57/0x110
[  975.800702][T16534]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  975.800715][T16534]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  975.800730][T16534]  ? __pfx_vhost_task_create+0x10/0x10
[  975.800752][T16534]  ? __pfx_vhost_task_fn+0x10/0x10
[  975.800771][T16534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  975.800784][T16534]  ? lockdep_hardirqs_on+0x7a/0x110
[  975.800797][T16534]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  975.800809][T16534]  ? mutex_lock_nested+0x152/0x1d0
[  975.800825][T16534]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  975.800843][T16534]  kvm_mmu_post_init_vm+0x147/0x2b0
[  975.800859][T16534]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  975.800880][T16534]  ? rt_write_unlock+0x19c/0x360
[  975.800903][T16534]  kvm_vcpu_ioctl+0xa64/0xfe0
[  975.800926][T16534]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  975.800946][T16534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  975.800958][T16534]  ? lockdep_hardirqs_on+0x7a/0x110
[  975.800980][T16534]  ? __fget_files+0x2a/0x420
[  975.800996][T16534]  ? __fget_files+0x3a8/0x420
[  975.801008][T16534]  ? __fget_files+0x2a/0x420
[  975.801023][T16534]  ? bpf_lsm_file_ioctl+0x9/0x20
[  975.801043][T16534]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  975.801062][T16534]  __se_sys_ioctl+0xff/0x170
[  975.801080][T16534]  do_syscall_64+0x17b/0x530
[  975.801092][T16534]  ? irqentry_exit+0x10f/0x8f0
[  975.801104][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.801116][T16534]  ? clear_bhb_loop+0x40/0x90
[  975.801132][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.801145][T16534] RIP: 0033:0x7f5d2be4e0d9
[  975.801158][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.801169][T16534] RSP: 002b:00007f5d2a0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  975.801184][T16534] RAX: ffffffffffffffda RBX: 00007f5d2c0d5fa0 RCX: 00007f5d2be4e0d9
[  975.801194][T16534] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  975.801202][T16534] RBP: 00007f5d2a0a6090 R08: 0000000000000000 R09: 0000000000000000
[  975.801210][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.801217][T16534] R13: 00007f5d2c0d6038 R14: 00007f5d2c0d5fa0 R15: 00007ffc086a33a8
[  975.801236][T16534]  </TASK>
[  975.816722][T16534] syz.7.2969: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  975.816778][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.7.2969 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  975.816796][T16534] Tainted: [L]=SOFTLOCKUP
[  975.816801][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  975.816809][T16534] Call Trace:
[  975.816814][T16534]  <TASK>
[  975.816821][T16534]  dump_stack_lvl+0xe8/0x150
[  975.816847][T16534]  warn_alloc+0x24c/0x270
[  975.816867][T16534]  ? kasan_quarantine_put+0xbb/0x1f0
[  975.816888][T16534]  ? __pfx_warn_alloc+0x10/0x10
[  975.816907][T16534]  ? __get_vm_area_node+0x20b/0x300
[  975.816927][T16534]  ? __get_vm_area_node+0x20b/0x300
[  975.816946][T16534]  __vmalloc_node_range_noprof+0x376/0x1560
[  975.816968][T16534]  ? percpu_ref_get_many+0x19/0x140
[  975.816986][T16534]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  975.817010][T16534]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  975.817028][T16534]  ? trace_kmem_cache_alloc+0x29/0xe0
[  975.817045][T16534]  ? memcpy_and_pad+0x48/0x80
[  975.817062][T16534]  __vmalloc_node_noprof+0xc2/0x100
[  975.817079][T16534]  ? copy_process+0x820/0x43f0
[  975.817092][T16534]  ? copy_process+0x820/0x43f0
[  975.817106][T16534]  dup_task_struct+0x2a0/0x8e0
[  975.817119][T16534]  ? rt_spin_unlock+0x163/0x200
[  975.817139][T16534]  copy_process+0x820/0x43f0
[  975.817170][T16534]  ? __pfx_copy_process+0x10/0x10
[  975.817191][T16534]  vhost_task_create+0x1f9/0x380
[  975.817208][T16534]  ? look_up_lock_class+0x57/0x110
[  975.817220][T16534]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  975.817234][T16534]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  975.817248][T16534]  ? __pfx_vhost_task_create+0x10/0x10
[  975.817269][T16534]  ? __pfx_vhost_task_fn+0x10/0x10
[  975.817289][T16534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  975.817301][T16534]  ? lockdep_hardirqs_on+0x7a/0x110
[  975.817314][T16534]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  975.817326][T16534]  ? mutex_lock_nested+0x152/0x1d0
[  975.817341][T16534]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  975.817358][T16534]  kvm_mmu_post_init_vm+0x147/0x2b0
[  975.817374][T16534]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  975.817401][T16534]  ? rt_write_unlock+0x19c/0x360
[  975.817425][T16534]  kvm_vcpu_ioctl+0xa64/0xfe0
[  975.817448][T16534]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  975.817467][T16534]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  975.817479][T16534]  ? lockdep_hardirqs_on+0x7a/0x110
[  975.817502][T16534]  ? __fget_files+0x2a/0x420
[  975.817518][T16534]  ? __fget_files+0x3a8/0x420
[  975.817530][T16534]  ? __fget_files+0x2a/0x420
[  975.817544][T16534]  ? bpf_lsm_file_ioctl+0x9/0x20
[  975.817563][T16534]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  975.817582][T16534]  __se_sys_ioctl+0xff/0x170
[  975.817601][T16534]  do_syscall_64+0x17b/0x530
[  975.817614][T16534]  ? irqentry_exit+0x10f/0x8f0
[  975.817625][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.817638][T16534]  ? clear_bhb_loop+0x40/0x90
[  975.817654][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.817666][T16534] RIP: 0033:0x7f5d2be4e0d9
[  975.817679][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.817690][T16534] RSP: 002b:00007f5d2a0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  975.817703][T16534] RAX: ffffffffffffffda RBX: 00007f5d2c0d5fa0 RCX: 00007f5d2be4e0d9
[  975.817713][T16534] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  975.817721][T16534] RBP: 00007f5d2a0a6090 R08: 0000000000000000 R09: 0000000000000000
[  975.817729][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.817736][T16534] R13: 00007f5d2c0d6038 R14: 00007f5d2c0d5fa0 R15: 00007ffc086a33a8
[  975.817756][T16534]  </TASK>
[  975.817807][T16534] Mem-Info:
[  975.817813][T16534] active_anon:7829 inactive_anon:11 isolated_anon:0
[  975.817813][T16534]  active_file:336 inactive_file:56284 isolated_file:0
[  975.817813][T16534]  unevictable:768 dirty:133 writeback:0
[  975.817813][T16534]  slab_reclaimable:8628 slab_unreclaimable:107148
[  975.817813][T16534]  mapped:30573 shmem:1310 pagetables:1891
[  975.817813][T16534]  sec_pagetables:0 bounce:0
[  975.817813][T16534]  kernel_misc_reclaimable:0
[  975.817813][T16534]  free:1285903 free_pcp:3081 free_cma:0
[  975.817847][T16534] Node 0 active_anon:31316kB inactive_anon:44kB active_file:1344kB inactive_file:224904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122264kB dirty:532kB writeback:0kB shmem:3704kB kernel_stack:14688kB pagetables:7424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  975.817878][T16534] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  975.817906][T16534] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  975.817980][T16534] lowmem_reserve[]: 0 2490 2490 2490 2490
[  975.818002][T16534] Node 0 DMA32 free:1198588kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31316kB inactive_anon:44kB active_file:1344kB inactive_file:224904kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:12324kB local_pcp:12324kB free_cma:0kB
[  975.818040][T16534] lowmem_reserve[]: 0 0 0 0 0
[  975.818127][T16534] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  975.823378][T16534] lowmem_reserve[]: 0 0 0 0 0
[  975.823451][T16534] Node 1 Normal free:3929664kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  975.823488][T16534] lowmem_reserve[]: 0 0 0 0 0
[  975.823508][T16534] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  975.823618][T16534] Node 0 DMA32: 575*4kB (UME) 503*8kB (UME) 1020*16kB (UME) 541*32kB (UME) 338*64kB (UME) 165*128kB (UME) 125*256kB (UME) 37*512kB (UME) 14*1024kB (UME) 9*2048kB (UME) 252*4096kB (UM) = 1198612kB
[  975.823758][T16534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  975.823817][T16534] Node 1 Normal: 0*4kB 4*8kB (UM) 10*16kB (UM) 12*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 957*4096kB (M) = 3929664kB
[  975.823971][T16534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  975.823982][T16534] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  975.823995][T16534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  975.824043][T16534] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  975.824054][T16534] 57938 total pagecache pages
[  975.824059][T16534] 12 pages in swap cache
[  975.824064][T16534] Free swap  = 124948kB
[  975.824068][T16534] Total swap = 124996kB
[  975.824074][T16534] 2097051 pages RAM
[  975.824078][T16534] 0 pages HighMem/MovableOnly
[  975.824083][T16534] 427780 pages reserved
[  975.824087][T16534] 0 pages cma reserved
[  976.078494][T16540] netlink: 'syz.9.2971': attribute type 1 has an invalid length.
[  976.078736][T16540] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2971'.
[  976.078750][T16540] nbd: illegal input index 2147483646
[  976.091332][ T7941] gspca_vc032x: reg_w err -110
[  976.091349][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091356][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091362][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091368][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091373][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091379][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091384][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091389][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091394][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091400][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091405][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091410][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091415][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091420][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091426][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091432][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091437][ T7941] gspca_vc032x: I2c Bus Busy Wait 00
[  976.091491][ T7941] gspca_vc032x: Unknown sensor...
[  976.091548][ T7941] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  977.662301][ T5697] usb 7-1: USB disconnect, device number 64
[  977.983141][ T7639] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  978.159183][ T7639] usb 10-1: Using ep0 maxpacket: 8
[  978.170206][ T7639] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  978.170224][ T7639] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  978.191918][ T7639] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  978.191939][ T7639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.191952][ T7639] usb 10-1: Product: syz
[  978.191961][ T7639] usb 10-1: Manufacturer: syz
[  978.191969][ T7639] usb 10-1: SerialNumber: syz
[  978.332558][T16556] tmpfs: Bad value for 'mpol'
[  978.620187][ T7639] usb 10-1: unit 4 not found!
[  978.963136][ T7639] usb 10-1: USB disconnect, device number 20
[  979.061569][  T202] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  979.222501][  T202] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.222543][  T202] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  979.222559][  T202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.227975][  T202] usb 9-1: config 0 descriptor??
[  979.306875][  T202] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[  979.307103][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[  979.307149][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[  979.351170][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[  979.351234][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 82
[  979.351285][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[  979.351335][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[  979.351385][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[  979.351436][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[  979.497375][  T202] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  979.515261][T14348] udevd[14348]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  979.563213][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[  979.563280][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 84
[  979.563331][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3
[  979.563381][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[  979.563438][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[  979.563488][  T202] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[  979.568775][T16561] Bluetooth: MGMT ver 1.23
[  979.639853][  T202] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  979.861520][  T202] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  980.016924][  T202] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  980.016948][  T202] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  980.016984][  T202] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  980.016999][  T202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.238607][ T5697] usb 9-1: USB disconnect, device number 18
[  980.329980][ T5697] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  980.389576][ T5697] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  980.393989][ T5697] keyspan 9-1:0.0: device disconnected
[  980.574945][  T202] gud 7-1:1.0: probe with driver gud failed with error -71
[  980.604394][  T202] usb 7-1: USB disconnect, device number 65
[  982.007642][T16606] base or size exceeds the MTRR width
[  982.154694][T16610] tmpfs: Bad value for 'mpol'
[  982.196795][T16608] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  982.231418][T14071] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  982.242069][T14071] Bluetooth: hci2: command 0x0c1a tx timeout
[  982.580923][T16618] FAULT_INJECTION: forcing a failure.
[  982.580923][T16618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  982.580952][T16618] CPU: 0 UID: 0 PID: 16618 Comm: syz.9.2996 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  982.580970][T16618] Tainted: [L]=SOFTLOCKUP
[  982.580975][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  982.580984][T16618] Call Trace:
[  982.580989][T16618]  <TASK>
[  982.580995][T16618]  dump_stack_lvl+0xe8/0x150
[  982.581019][T16618]  should_fail_ex+0x467/0x600
[  982.581040][T16618]  _copy_from_user+0x2d/0xb0
[  982.581052][T16618]  ___sys_sendmsg+0x1c6/0x360
[  982.581071][T16618]  ? __lock_acquire+0x6df/0x2e40
[  982.581087][T16618]  ? __pfx____sys_sendmsg+0x10/0x10
[  982.581123][T16618]  ? __fget_files+0x2a/0x420
[  982.581137][T16618]  ? __fget_files+0x3a8/0x420
[  982.581155][T16618]  __x64_sys_sendmsg+0x1b7/0x290
[  982.581175][T16618]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  982.581204][T16618]  do_syscall_64+0x17b/0x530
[  982.581218][T16618]  ? irqentry_exit+0x10f/0x8f0
[  982.581230][T16618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.581242][T16618]  ? clear_bhb_loop+0x40/0x90
[  982.581258][T16618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.581270][T16618] RIP: 0033:0x7f39fa84e0d9
[  982.581290][T16618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.581301][T16618] RSP: 002b:00007f39f8aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.581316][T16618] RAX: ffffffffffffffda RBX: 00007f39faad5fa0 RCX: 00007f39fa84e0d9
[  982.581326][T16618] RDX: 000000002400c040 RSI: 00002000000006c0 RDI: 0000000000000004
[  982.581334][T16618] RBP: 00007f39f8aa6090 R08: 0000000000000000 R09: 0000000000000000
[  982.581342][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.581350][T16618] R13: 00007f39faad6038 R14: 00007f39faad5fa0 R15: 00007ffc941b4908
[  982.581373][T16618]  </TASK>
[  982.987925][   T38] audit: type=1326 audit(1786417074.564:398): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16624 comm="syz.9.2998" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39fa84e0d9 code=0x0
[  983.218367][T16629] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2998'.
[  983.344340][   T38] audit: type=1326 audit(1786417074.924:399): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16631 comm="syz.7.3000" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2be4e0d9 code=0x0
[  983.783377][T16646] FAULT_INJECTION: forcing a failure.
[  983.783377][T16646] name failslab, interval 1, probability 0, space 0, times 0
[  983.783404][T16646] CPU: 0 UID: 0 PID: 16646 Comm: syz.6.3004 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  983.783423][T16646] Tainted: [L]=SOFTLOCKUP
[  983.783427][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  983.783435][T16646] Call Trace:
[  983.783441][T16646]  <TASK>
[  983.783447][T16646]  dump_stack_lvl+0xe8/0x150
[  983.783470][T16646]  should_fail_ex+0x467/0x600
[  983.783491][T16646]  should_failslab+0xa8/0x100
[  983.783505][T16646]  __kmalloc_cache_noprof+0xa1/0x670
[  983.783523][T16646]  ? vhost_task_create+0x123/0x380
[  983.783540][T16646]  ? vhost_task_create+0x123/0x380
[  983.783561][T16646]  vhost_task_create+0x123/0x380
[  983.783577][T16646]  ? look_up_lock_class+0x57/0x110
[  983.783591][T16646]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  983.783605][T16646]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  983.783619][T16646]  ? __pfx_vhost_task_create+0x10/0x10
[  983.783641][T16646]  ? __pfx_vhost_task_fn+0x10/0x10
[  983.783661][T16646]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  983.783674][T16646]  ? lockdep_hardirqs_on+0x7a/0x110
[  983.783686][T16646]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  983.783699][T16646]  ? mutex_lock_nested+0x152/0x1d0
[  983.783714][T16646]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  983.783734][T16646]  kvm_mmu_post_init_vm+0x147/0x2b0
[  983.783750][T16646]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  983.783776][T16646]  ? rt_write_unlock+0x19c/0x360
[  983.783799][T16646]  kvm_vcpu_ioctl+0xa64/0xfe0
[  983.783822][T16646]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  983.783843][T16646]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  983.783856][T16646]  ? lockdep_hardirqs_on+0x7a/0x110
[  983.783878][T16646]  ? __fget_files+0x2a/0x420
[  983.783894][T16646]  ? __fget_files+0x3a8/0x420
[  983.783906][T16646]  ? __fget_files+0x2a/0x420
[  983.783921][T16646]  ? bpf_lsm_file_ioctl+0x9/0x20
[  983.783940][T16646]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  983.783960][T16646]  __se_sys_ioctl+0xff/0x170
[  983.783978][T16646]  do_syscall_64+0x17b/0x530
[  983.783991][T16646]  ? irqentry_exit+0x10f/0x8f0
[  983.784002][T16646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.784015][T16646]  ? clear_bhb_loop+0x40/0x90
[  983.784031][T16646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.784043][T16646] RIP: 0033:0x7f38b7ebe0d9
[  983.784057][T16646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.784067][T16646] RSP: 002b:00007f38b6116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  983.784082][T16646] RAX: ffffffffffffffda RBX: 00007f38b8145fa0 RCX: 00007f38b7ebe0d9
[  983.784092][T16646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  983.784100][T16646] RBP: 00007f38b6116090 R08: 0000000000000000 R09: 0000000000000000
[  983.784108][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  983.784115][T16646] R13: 00007f38b8146038 R14: 00007f38b8145fa0 R15: 00007ffc1bdfbb08
[  983.784135][T16646]  </TASK>
[  983.975218][  T202] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  984.218541][  T202] usb 9-1: unable to get BOS descriptor or descriptor too short
[  984.220079][  T202] usb 9-1: not running at top speed; connect to a high speed hub
[  984.247267][  T202] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  984.247287][  T202] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  984.247300][  T202] usb 9-1: config 14 has no interface number 0
[  984.247309][  T202] usb 9-1: config 14 has no interface number 1
[  984.247364][  T202] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  984.247378][  T202] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  984.247393][  T202] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  984.247410][  T202] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  984.247426][  T202] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  984.247441][  T202] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  984.247454][  T202] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  984.247470][  T202] usb 9-1: config 14 interface 57 has no altsetting 0
[  984.247481][  T202] usb 9-1: config 14 interface 228 has no altsetting 0
[  984.339060][  T202] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  984.339082][  T202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.339095][  T202] usb 9-1: Product: syz
[  984.339104][  T202] usb 9-1: Manufacturer: syz
[  984.339114][  T202] usb 9-1: SerialNumber: syz
[  984.893344][  T202] legousbtower 9-1:14.57: interrupt endpoints not found
[  985.364262][  T202] legousbtower 9-1:14.228: get version request failed: -121
[  985.364386][  T202] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121
[  985.567837][ T7941] usb 9-1: USB disconnect, device number 19
[  985.590810][ T5697] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  985.722188][ T5697] usb 7-1: device descriptor read/64, error -71
[  985.967433][ T5697] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  986.110680][ T5697] usb 7-1: device descriptor read/64, error -71
[  986.186178][T16675] program syz.8.3014 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  986.222558][ T5697] usb usb7-port1: attempt power cycle
[  986.303795][T16678] input: syz1 as /devices/virtual/input/input62
[  986.543193][ T5698] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  986.561065][ T5697] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  986.594605][ T5697] usb 7-1: device descriptor read/8, error -71
[  986.670824][ T5698] usb 9-1: device descriptor read/64, error -71
[  986.830745][ T5697] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  986.862788][ T5697] usb 7-1: device descriptor read/8, error -71
[  986.920824][ T5698] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  986.972044][ T5697] usb usb7-port1: unable to enumerate USB device
[  987.050706][ T5698] usb 9-1: device descriptor read/64, error -71
[  987.162994][ T5698] usb usb9-port1: attempt power cycle
[  987.501298][ T5698] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  987.522990][ T5698] usb 9-1: device descriptor read/8, error -71
[  987.740721][ T5697] usb 10-1: new low-speed USB device number 21 using dummy_hcd
[  987.760722][ T5698] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  987.781301][ T5698] usb 9-1: device descriptor read/8, error -71
[  987.890974][ T5698] usb usb9-port1: unable to enumerate USB device
[  987.902330][ T5697] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  987.902353][ T5697] usb 10-1: config 179 has no interface number 0
[  987.902384][ T5697] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 8
[  987.902404][ T5697] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 14385, setting to 8
[  987.902421][ T5697] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  987.902438][ T5697] usb 10-1: config 179 interface 65 has no altsetting 0
[  987.902461][ T5697] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  987.902475][ T5697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.908257][T16687] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[  987.908392][T16687] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[  988.298651][T16690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  988.299072][T16690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  988.361888][ T5697] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input63
[  988.469514][T16691] FAULT_INJECTION: forcing a failure.
[  988.469514][T16691] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.469544][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.6.3019 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  988.469566][T16691] Tainted: [L]=SOFTLOCKUP
[  988.469571][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  988.469579][T16691] Call Trace:
[  988.469585][T16691]  <TASK>
[  988.469591][T16691]  dump_stack_lvl+0xe8/0x150
[  988.469613][T16691]  should_fail_ex+0x467/0x600
[  988.469634][T16691]  _copy_from_user+0x2d/0xb0
[  988.469648][T16691]  kstrtouint_from_user+0xd6/0x180
[  988.469667][T16691]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  988.469682][T16691]  ? __lock_acquire+0x6df/0x2e40
[  988.469695][T16691]  ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500
[  988.469721][T16691]  ? lock_acquire+0x115/0x350
[  988.469743][T16691]  proc_fail_nth_write+0x8e/0x210
[  988.469759][T16691]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  988.469777][T16691]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  988.469790][T16691]  vfs_write+0x29f/0xbb0
[  988.469811][T16691]  ? __pfx_vfs_write+0x10/0x10
[  988.469827][T16691]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  988.469842][T16691]  ? lockdep_hardirqs_on+0x7a/0x110
[  988.469854][T16691]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  988.469867][T16691]  ? mutex_lock_nested+0x152/0x1d0
[  988.469882][T16691]  ? fdget_pos+0x252/0x320
[  988.469901][T16691]  ksys_write+0x156/0x270
[  988.469917][T16691]  ? __pfx_ksys_write+0x10/0x10
[  988.469938][T16691]  do_syscall_64+0x17b/0x530
[  988.469950][T16691]  ? irqentry_exit+0x10f/0x8f0
[  988.469962][T16691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.469974][T16691]  ? clear_bhb_loop+0x40/0x90
[  988.469990][T16691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.470003][T16691] RIP: 0033:0x7f38b7e7e90e
[  988.470016][T16691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  988.470027][T16691] RSP: 002b:00007f38b6115fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  988.470042][T16691] RAX: ffffffffffffffda RBX: 00007f38b61166c0 RCX: 00007f38b7e7e90e
[  988.470051][T16691] RDX: 0000000000000001 RSI: 00007f38b61160a0 RDI: 0000000000000003
[  988.470059][T16691] RBP: 00007f38b6116090 R08: 0000000000000000 R09: 0000000000000000
[  988.470067][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  988.470075][T16691] R13: 00007f38b8146038 R14: 00007f38b8145fa0 R15: 00007ffc1bdfbb08
[  988.470095][T16691]  </TASK>
[  989.422512][ T4941] input input63: unable to receive magic message: -71
[  989.662144][ T5697] usb 10-1: USB disconnect, device number 21
[  989.662209][    C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  989.662253][    C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  989.783948][ T4941] input input63: unable to receive magic message: -19
[  990.480714][  T202] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  990.632862][  T202] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  990.632887][  T202] usb 10-1: config 0 interface 0 has no altsetting 0
[  990.632909][  T202] usb 10-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  990.632924][  T202] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.638805][  T202] usb 10-1: config 0 descriptor??
[  991.126039][  T202] hid-rmi 0003:0461:4E72.001C: hidraw0: USB HID v10.01 Device [HID 0461:4e72] on usb-dummy_hcd.9-1/input0
[  991.167482][T16717] tmpfs: Bad value for 'mpol'
[  991.309368][T16702] binder_alloc: 16701: binder_alloc_buf, no vma
[  991.353164][ T5697] usb 10-1: USB disconnect, device number 22
[  991.620740][  T202] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  991.671114][ T7941] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  991.773495][  T202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.773519][  T202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  991.773545][  T202] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  991.773559][  T202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.779038][  T202] usb 9-1: config 0 descriptor??
[  991.830658][ T7941] usb 7-1: Using ep0 maxpacket: 16
[  991.837961][ T7941] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  991.837980][ T7941] usb 7-1: config 0 has no interface number 0
[  991.838018][ T7941] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  991.838034][ T7941] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  991.876647][ T7941] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  991.876671][ T7941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.876684][ T7941] usb 7-1: Product: syz
[  991.876693][ T7941] usb 7-1: Manufacturer: syz
[  991.876702][ T7941] usb 7-1: SerialNumber: syz
[  991.934808][ T7941] usb 7-1: config 0 descriptor??
[  991.937394][T16722] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  991.938458][T16722] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  992.109692][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3029'.
[  992.109713][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3029'.
[  992.163307][  T202] usbhid 9-1:0.0: can't add hid device: -71
[  992.163450][  T202] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  992.190259][T16722] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  992.190383][T16722] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  992.221453][  T202] usb 9-1: USB disconnect, device number 24
[  992.417928][ T7941] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  992.617913][ T7941] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  992.617937][ T7941] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  992.618124][ T7941] asix 7-1:0.34: probe with driver asix failed with error -61
[  992.961465][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3034'.
[  993.160370][T16738] tmpfs: Bad value for 'mpol'
[  993.446744][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3038'.
[  993.471210][T16744] FAULT_INJECTION: forcing a failure.
[  993.471210][T16744] name failslab, interval 1, probability 0, space 0, times 0
[  993.471237][T16744] CPU: 0 UID: 0 PID: 16744 Comm: syz.8.3038 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  993.471255][T16744] Tainted: [L]=SOFTLOCKUP
[  993.471260][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  993.471268][T16744] Call Trace:
[  993.471273][T16744]  <TASK>
[  993.471279][T16744]  dump_stack_lvl+0xe8/0x150
[  993.471308][T16744]  should_fail_ex+0x467/0x600
[  993.471328][T16744]  should_failslab+0xa8/0x100
[  993.471346][T16744]  kmem_cache_alloc_node_noprof+0xac/0x660
[  993.471365][T16744]  ? __alloc_skb+0x1d7/0x7a0
[  993.471380][T16744]  ? __alloc_skb+0x1d7/0x7a0
[  993.471400][T16744]  __alloc_skb+0x1d7/0x7a0
[  993.471422][T16744]  ctnetlink_conntrack_event+0x440/0x15f0
[  993.471447][T16744]  ? lock_acquire+0x115/0x350
[  993.471467][T16744]  ? __pfx_ctnetlink_conntrack_event+0x10/0x10
[  993.471482][T16744]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  993.471500][T16744]  ? __nf_conntrack_eventmask_report+0xc1/0x480
[  993.471520][T16744]  __nf_conntrack_eventmask_report+0x1fa/0x480
[  993.471542][T16744]  nf_conntrack_eventmask_report+0x2b5/0x450
[  993.471564][T16744]  ? __pfx_nf_conntrack_eventmask_report+0x10/0x10
[  993.471586][T16744]  ? ctnetlink_new_conntrack+0x751/0x2960
[  993.471604][T16744]  ctnetlink_new_conntrack+0x2389/0x2960
[  993.471619][T16744]  ? get_symbol_pos+0x322/0x3b0
[  993.471638][T16744]  ? ctnetlink_new_conntrack+0x751/0x2960
[  993.471658][T16744]  ? __pfx_ctnetlink_new_conntrack+0x10/0x10
[  993.471681][T16744]  ? __pfx___nla_validate_parse+0x10/0x10
[  993.471699][T16744]  ? lock_acquire+0x115/0x350
[  993.471731][T16744]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  993.471746][T16744]  ? lockdep_hardirqs_on+0x7a/0x110
[  993.471758][T16744]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  993.471775][T16744]  nfnetlink_rcv_msg+0xcd6/0x12c0
[  993.471793][T16744]  ? nfnetlink_rcv_msg+0x22e/0x12c0
[  993.471821][T16744]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  993.471855][T16744]  ? __lock_acquire+0x6df/0x2e40
[  993.471871][T16744]  ? __lock_acquire+0x6df/0x2e40
[  993.471882][T16744]  ? sock_sendmsg_nosec+0x13a/0x180
[  993.471900][T16744]  netlink_rcv_skb+0x226/0x4a0
[  993.471919][T16744]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  993.471938][T16744]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  993.471964][T16744]  ? bpf_lsm_capable+0x9/0x20
[  993.471976][T16744]  ? security_capable+0x74/0x280
[  993.471998][T16744]  nfnetlink_rcv+0x2b9/0x28d0
[  993.472017][T16744]  ? sock_sendmsg_nosec+0x13a/0x180
[  993.472031][T16744]  ? __pfx_snprintf+0x10/0x10
[  993.472050][T16744]  ? unwind_get_return_address+0x4d/0x90
[  993.472070][T16744]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  993.472094][T16744]  ? trim_netdev_trace+0x791/0x820
[  993.472109][T16744]  ? __pfx_trim_netdev_trace+0x10/0x10
[  993.472121][T16744]  ? stack_trace_save+0xa9/0x100
[  993.472141][T16744]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  993.472159][T16744]  ? save_netdev_trace_buffer+0x18f/0x5e0
[  993.472174][T16744]  ? save_netdev_trace_buffer+0x4c3/0x5e0
[  993.472191][T16744]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  993.472204][T16744]  ? ref_tracker_free+0x668/0x820
[  993.472220][T16744]  ? __netlink_deliver_tap+0x600/0x880
[  993.472238][T16744]  ? netlink_deliver_tap+0x19c/0x1b0
[  993.472255][T16744]  ? netlink_unicast+0x7b8/0x990
[  993.472270][T16744]  ? netlink_sendmsg+0x813/0xb40
[  993.472288][T16744]  ? sock_sendmsg_nosec+0x13a/0x180
[  993.472308][T16744]  ? ____sys_sendmsg+0x565/0x870
[  993.472327][T16744]  ? ___sys_sendmsg+0x2a5/0x360
[  993.472344][T16744]  ? __x64_sys_sendmsg+0x1b7/0x290
[  993.472360][T16744]  ? do_syscall_64+0x17b/0x530
[  993.472372][T16744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.472390][T16744]  ? __skb_clone+0x449/0x6c0
[  993.472412][T16744]  ? skb_clone+0x246/0x3a0
[  993.472433][T16744]  ? __netlink_deliver_tap+0x838/0x880
[  993.472451][T16744]  ? netlink_deliver_tap+0x2e/0x1b0
[  993.472473][T16744]  ? netlink_deliver_tap+0x2e/0x1b0
[  993.472491][T16744]  ? netlink_deliver_tap+0x2e/0x1b0
[  993.472513][T16744]  netlink_unicast+0x7f5/0x990
[  993.472537][T16744]  netlink_sendmsg+0x813/0xb40
[  993.472566][T16744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.472587][T16744]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  993.472608][T16744]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  993.472627][T16744]  ? arch_stack_walk+0xfb/0x150
[  993.472647][T16744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.472665][T16744]  sock_sendmsg_nosec+0x13a/0x180
[  993.472681][T16744]  ____sys_sendmsg+0x565/0x870
[  993.472705][T16744]  ? __pfx_____sys_sendmsg+0x10/0x10
[  993.472729][T16744]  ? import_iovec+0x73/0xa0
[  993.472751][T16744]  ___sys_sendmsg+0x2a5/0x360
[  993.472768][T16744]  ? __lock_acquire+0x6df/0x2e40
[  993.472782][T16744]  ? __pfx____sys_sendmsg+0x10/0x10
[  993.472822][T16744]  ? __fget_files+0x2a/0x420
[  993.472835][T16744]  ? __fget_files+0x3a8/0x420
[  993.472854][T16744]  __x64_sys_sendmsg+0x1b7/0x290
[  993.472875][T16744]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  993.472905][T16744]  do_syscall_64+0x17b/0x530
[  993.472918][T16744]  ? irqentry_exit+0x10f/0x8f0
[  993.472930][T16744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.472942][T16744]  ? clear_bhb_loop+0x40/0x90
[  993.472957][T16744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.472970][T16744] RIP: 0033:0x7fc9c06fe0d9
[  993.472983][T16744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.472995][T16744] RSP: 002b:00007fc9be956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  993.473010][T16744] RAX: ffffffffffffffda RBX: 00007fc9c0985fa0 RCX: 00007fc9c06fe0d9
[  993.473019][T16744] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  993.473027][T16744] RBP: 00007fc9be956090 R08: 0000000000000000 R09: 0000000000000000
[  993.473035][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  993.473043][T16744] R13: 00007fc9c0986038 R14: 00007fc9c0985fa0 R15: 00007fff649d0f88
[  993.473062][T16744]  </TASK>
[  994.444570][ T7941] usb 7-1: USB disconnect, device number 70
[  994.856542][T16757] xt_l2tp: missing protocol rule (udp|l2tpip)
[  995.157993][T16762] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  995.690208][ T4905] Bluetooth: hci3: command 0x0406 tx timeout
[  996.177318][T16768] tmpfs: Bad value for 'mpol'
[  996.197652][T16770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3048'.
[  996.364522][T16772] tmpfs: Unknown parameter 'nrbn0'
[  996.468246][  T202] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  996.611588][ T7941] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  996.630078][  T202] usb 7-1: Using ep0 maxpacket: 32
[  996.638702][  T202] usb 7-1: unable to get BOS descriptor or descriptor too short
[  996.639795][  T202] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 32
[  996.639817][  T202] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  996.639835][  T202] usb 7-1: config 1 interface 0 has no altsetting 0
[  996.685752][  T202] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  996.685776][  T202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.685789][  T202] usb 7-1: Product: syz
[  996.685798][  T202] usb 7-1: Manufacturer: syz
[  996.685807][  T202] usb 7-1: SerialNumber: syz
[  996.736765][T16770] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  996.740714][ T7941] usb 10-1: device descriptor read/64, error -71
[  997.014768][ T7941] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  997.098557][T16781] FAULT_INJECTION: forcing a failure.
[  997.098557][T16781] name failslab, interval 1, probability 0, space 0, times 0
[  997.098587][T16781] CPU: 0 UID: 0 PID: 16781 Comm: syz.8.3052 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  997.098607][T16781] Tainted: [L]=SOFTLOCKUP
[  997.098615][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  997.098623][T16781] Call Trace:
[  997.098629][T16781]  <TASK>
[  997.098635][T16781]  dump_stack_lvl+0xe8/0x150
[  997.098660][T16781]  should_fail_ex+0x467/0x600
[  997.098682][T16781]  should_failslab+0xa8/0x100
[  997.098696][T16781]  ? prepare_creds+0x30/0x820
[  997.098716][T16781]  kmem_cache_alloc_noprof+0x9e/0x680
[  997.098737][T16781]  ? alloc_task_exec_state+0x27/0x2e0
[  997.098754][T16781]  ? prepare_creds+0x30/0x820
[  997.098775][T16781]  prepare_creds+0x30/0x820
[  997.098795][T16781]  copy_creds+0x109/0x9f0
[  997.098817][T16781]  copy_process+0xd1f/0x43f0
[  997.098835][T16781]  ? irqentry_exit+0x218/0x8f0
[  997.098861][T16781]  ? __lock_acquire+0x6df/0x2e40
[  997.098876][T16781]  ? __pfx_copy_process+0x10/0x10
[  997.098890][T16781]  ? get_pid_task+0x20/0x1f0
[  997.098909][T16781]  ? get_pid_task+0x20/0x1f0
[  997.098930][T16781]  kernel_clone+0x2d7/0x940
[  997.098947][T16781]  ? __pfx_kernel_clone+0x10/0x10
[  997.098967][T16781]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  997.098984][T16781]  __x64_sys_clone+0x1b6/0x230
[  997.099001][T16781]  ? __pfx___x64_sys_clone+0x10/0x10
[  997.099024][T16781]  ? __pfx_ksys_write+0x10/0x10
[  997.099045][T16781]  do_syscall_64+0x17b/0x530
[  997.099058][T16781]  ? irqentry_exit+0x10f/0x8f0
[  997.099070][T16781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.099083][T16781]  ? clear_bhb_loop+0x40/0x90
[  997.099098][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.099111][T16781] RIP: 0033:0x7fc9c06fe0d9
[  997.099125][T16781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.099136][T16781] RSP: 002b:00007fc9be934fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  997.099151][T16781] RAX: ffffffffffffffda RBX: 00007fc9c0986090 RCX: 00007fc9c06fe0d9
[  997.099161][T16781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000180400
[  997.099169][T16781] RBP: 00007fc9be935090 R08: 0000000000000000 R09: 0000000000000000
[  997.099177][T16781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  997.099185][T16781] R13: 00007fc9c0986128 R14: 00007fc9c0986090 R15: 00007fff649d0f88
[  997.099204][T16781]  </TASK>
[  997.150766][ T7941] usb 10-1: device descriptor read/64, error -71
[  997.261251][ T7941] usb usb10-port1: attempt power cycle
[  997.739116][ T7941] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  997.764566][ T7941] usb 10-1: device descriptor read/8, error -71
[  998.020688][ T7941] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  998.041364][ T7941] usb 10-1: device descriptor read/8, error -71
[  998.151220][ T7941] usb usb10-port1: unable to enumerate USB device
[  998.561829][ T7639] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  998.735130][ T1342] ieee802154 phy0 wpan0: encryption failed: -22
[  998.735311][ T1342] ieee802154 phy1 wpan1: encryption failed: -22
[  998.774117][ T7639] usb 9-1: Using ep0 maxpacket: 32
[  998.810631][ T7639] usb 9-1: config 3 has an invalid interface number: 120 but max is 0
[  998.810655][ T7639] usb 9-1: config 3 has no interface number 0
[  998.810676][ T7639] usb 9-1: config 3 interface 120 has no altsetting 0
[  998.843307][ T7639] usb 9-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a
[  998.843331][ T7639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.843344][ T7639] usb 9-1: Product: syz
[  998.843354][ T7639] usb 9-1: Manufacturer: syz
[  998.843363][ T7639] usb 9-1: SerialNumber: syz
[  999.188385][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  999.196030][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  999.600934][ T7639] usb 9-1: USB disconnect, device number 25
[  999.971868][ T7941] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1000.130680][ T7941] usb 10-1: Using ep0 maxpacket: 32
[ 1000.138729][ T7941] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1000.138755][ T7941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.193787][ T7941] usb 10-1: config 0 descriptor??
[ 1000.443183][ T7941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1000.595523][ T7941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1000.596536][ T7941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1000.596611][ T7941] usb 10-1: media controller created
[ 1000.675324][T16787] ==================================================================
[ 1000.675337][T16787] BUG: KASAN: slab-use-after-free in i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.675395][T16787] Read of size 8 at addr ffff88802a576108 by task syz.9.3055/16787
[ 1000.675408][T16787] 
[ 1000.675419][T16787] CPU: 0 UID: 0 PID: 16787 Comm: syz.9.3055 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1000.675438][T16787] Tainted: [L]=SOFTLOCKUP
[ 1000.675443][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1000.675451][T16787] Call Trace:
[ 1000.675458][T16787]  <TASK>
[ 1000.675464][T16787]  dump_stack_lvl+0xe8/0x150
[ 1000.675482][T16787]  print_address_description+0x55/0x1e0
[ 1000.675502][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.675516][T16787]  print_report+0x58/0x70
[ 1000.675532][T16787]  kasan_report+0x117/0x150
[ 1000.675546][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.675562][T16787]  i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.675578][T16787]  i2c_smbus_xfer+0xd5/0x310
[ 1000.675595][T16787]  i2cdev_ioctl_smbus+0x407/0x700
[ 1000.675627][T16787]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[ 1000.675645][T16787]  i2cdev_ioctl+0x618/0x890
[ 1000.675657][T16787]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1000.675671][T16787]  ? __fget_files+0x2a/0x420
[ 1000.675685][T16787]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1000.675705][T16787]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1000.675717][T16787]  __se_sys_ioctl+0xff/0x170
[ 1000.675733][T16787]  do_syscall_64+0x17b/0x530
[ 1000.675747][T16787]  ? irqentry_exit+0x10f/0x8f0
[ 1000.675759][T16787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.675771][T16787]  ? clear_bhb_loop+0x40/0x90
[ 1000.675785][T16787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.675798][T16787] RIP: 0033:0x7f39fa84e0d9
[ 1000.675810][T16787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.675821][T16787] RSP: 002b:00007f39f8aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1000.675836][T16787] RAX: ffffffffffffffda RBX: 00007f39faad5fa0 RCX: 00007f39fa84e0d9
[ 1000.675846][T16787] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 1000.675855][T16787] RBP: 00007f39fa8e5024 R08: 0000000000000000 R09: 0000000000000000
[ 1000.675863][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1000.675871][T16787] R13: 00007f39faad6038 R14: 00007f39faad5fa0 R15: 00007ffc941b4908
[ 1000.675884][T16787]  </TASK>
[ 1000.675889][T16787] 
[ 1000.675892][T16787] Allocated by task 14302:
[ 1000.675900][T16787]  kasan_save_track+0x3e/0x80
[ 1000.675917][T16787]  __kasan_kmalloc+0x93/0xb0
[ 1000.675933][T16787]  __kmalloc_node_track_caller_noprof+0x566/0x7b0
[ 1000.675951][T16787]  __alloc_skb+0x2bd/0x7a0
[ 1000.675966][T16787]  nsim_dev_trap_report_work+0x2b1/0xcb0
[ 1000.675985][T16787]  process_one_work+0xaaf/0x1480
[ 1000.675996][T16787]  worker_thread+0xb05/0x10d0
[ 1000.676007][T16787]  kthread+0x388/0x470
[ 1000.676021][T16787]  ret_from_fork+0x514/0xb70
[ 1000.676036][T16787]  ret_from_fork_asm+0x1a/0x30
[ 1000.676052][T16787] 
[ 1000.676055][T16787] Freed by task 14302:
[ 1000.676060][T16787]  kasan_save_track+0x3e/0x80
[ 1000.676076][T16787]  kasan_save_free_info+0x40/0x50
[ 1000.676088][T16787]  __kasan_slab_free+0x5c/0x80
[ 1000.676104][T16787]  kfree+0x1c5/0x6c0
[ 1000.676117][T16787]  skb_release_data+0x85e/0xab0
[ 1000.676133][T16787]  __kfree_skb+0x5d/0x210
[ 1000.676148][T16787]  nsim_dev_trap_report_work+0x879/0xcb0
[ 1000.676165][T16787]  process_one_work+0xaaf/0x1480
[ 1000.676175][T16787]  worker_thread+0xb05/0x10d0
[ 1000.676187][T16787]  kthread+0x388/0x470
[ 1000.676201][T16787]  ret_from_fork+0x514/0xb70
[ 1000.676215][T16787]  ret_from_fork_asm+0x1a/0x30
[ 1000.676230][T16787] 
[ 1000.676233][T16787] The buggy address belongs to the object at ffff88802a576000
[ 1000.676233][T16787]  which belongs to the cache kmalloc-4k of size 4096
[ 1000.676268][T16787] The buggy address is located 264 bytes inside of
[ 1000.676268][T16787]  freed 4096-byte region [ffff88802a576000, ffff88802a577000)
[ 1000.676281][T16787] 
[ 1000.676285][T16787] The buggy address belongs to the physical page:
[ 1000.676310][T16787] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a570
[ 1000.676324][T16787] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1000.676334][T16787] flags: 0x80000000000040(head|node=0|zone=1)
[ 1000.676345][T16787] page_type: f5(slab)
[ 1000.676357][T16787] raw: 0080000000000040 ffff88813fe3c140 dead000000000100 dead000000000122
[ 1000.676369][T16787] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1000.676380][T16787] head: 0080000000000040 ffff88813fe3c140 dead000000000100 dead000000000122
[ 1000.676391][T16787] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1000.676402][T16787] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1000.676413][T16787] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1000.676419][T16787] page dumped because: kasan: bad access detected
[ 1000.676427][T16787] page_owner tracks the page as allocated
[ 1000.676431][T16787] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13762819398
[ 1000.676454][T16787]  post_alloc_hook+0x1f9/0x250
[ 1000.676469][T16787]  get_page_from_freelist+0x264c/0x26c0
[ 1000.676488][T16787]  __alloc_frozen_pages_noprof+0x222/0x5b0
[ 1000.676507][T16787]  allocate_slab+0x7c/0x5e0
[ 1000.676519][T16787]  refill_objects+0x2d8/0x350
[ 1000.676532][T16787]  __pcs_replace_empty_main+0x330/0x690
[ 1000.676544][T16787]  __kmalloc_cache_noprof+0x467/0x670
[ 1000.676561][T16787]  usb_alloc_dev+0x5f/0xf20
[ 1000.676577][T16787]  usb_add_hcd+0x407/0xf80
[ 1000.676613][T16787]  dummy_hcd_probe+0x134/0x270
[ 1000.676624][T16787]  platform_probe+0xf9/0x190
[ 1000.676655][T16787]  really_probe+0x254/0xae0
[ 1000.676670][T16787]  __driver_probe_device+0x1e8/0x360
[ 1000.676683][T16787]  driver_probe_device+0x4f/0x240
[ 1000.676697][T16787]  __device_attach_driver+0x270/0x410
[ 1000.676711][T16787]  bus_for_each_drv+0x25b/0x2f0
[ 1000.676729][T16787] page_owner free stack trace missing
[ 1000.676734][T16787] 
[ 1000.676736][T16787] Memory state around the buggy address:
[ 1000.676744][T16787]  ffff88802a576000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1000.676752][T16787]  ffff88802a576080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1000.676761][T16787] >ffff88802a576100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1000.676768][T16787]                       ^
[ 1000.676788][T16787]  ffff88802a576180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1000.676797][T16787]  ffff88802a576200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1000.676804][T16787] ==================================================================
[ 1000.679203][T16787] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1000.679230][T16787] CPU: 0 UID: 0 PID: 16787 Comm: syz.9.3055 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1000.679250][T16787] Tainted: [L]=SOFTLOCKUP
[ 1000.679256][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1000.679269][T16787] Call Trace:
[ 1000.679276][T16787]  <TASK>
[ 1000.679284][T16787]  vpanic+0x56c/0xa60
[ 1000.679303][T16787]  ? __pfx_vpanic+0x10/0x10
[ 1000.679317][T16787]  ? __pfx___schedule+0x10/0x10
[ 1000.679338][T16787]  panic+0xc5/0xd0
[ 1000.679350][T16787]  ? __pfx_panic+0x10/0x10
[ 1000.679362][T16787]  ? preempt_schedule_thunk+0x16/0x40
[ 1000.679377][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.679394][T16787]  check_panic_on_warn+0x89/0xb0
[ 1000.679412][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.679426][T16787]  end_report+0x73/0x170
[ 1000.679438][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.679452][T16787]  kasan_report+0x128/0x150
[ 1000.679463][T16787]  ? i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.679480][T16787]  i2c_adapter_lock_bus+0x5e/0xf0
[ 1000.679495][T16787]  i2c_smbus_xfer+0xd5/0x310
[ 1000.679512][T16787]  i2cdev_ioctl_smbus+0x407/0x700
[ 1000.679528][T16787]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[ 1000.679550][T16787]  i2cdev_ioctl+0x618/0x890
[ 1000.679565][T16787]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1000.679579][T16787]  ? __fget_files+0x2a/0x420
[ 1000.679592][T16787]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1000.679612][T16787]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1000.679624][T16787]  __se_sys_ioctl+0xff/0x170
[ 1000.679641][T16787]  do_syscall_64+0x17b/0x530
[ 1000.679654][T16787]  ? irqentry_exit+0x10f/0x8f0
[ 1000.679665][T16787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.679678][T16787]  ? clear_bhb_loop+0x40/0x90
[ 1000.679692][T16787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.679704][T16787] RIP: 0033:0x7f39fa84e0d9
[ 1000.679723][T16787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.679739][T16787] RSP: 002b:00007f39f8aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1000.679755][T16787] RAX: ffffffffffffffda RBX: 00007f39faad5fa0 RCX: 00007f39fa84e0d9
[ 1000.679765][T16787] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 1000.679774][T16787] RBP: 00007f39fa8e5024 R08: 0000000000000000 R09: 0000000000000000
[ 1000.679782][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1000.679790][T16787] R13: 00007f39faad6038 R14: 00007f39faad5fa0 R15: 00007ffc941b4908
[ 1000.679805][T16787]  </TASK>
[ 1000.679863][T16787] Kernel Offset: disabled