last executing test programs:

38.308265194s ago: executing program 2 (id=824):
r0 = socket$netlink(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000380)="29000000150005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x401, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

38.289112703s ago: executing program 2 (id=825):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$midi(r2, &(0x7f0000000480)="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", 0xfa)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x30, r1, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000440)={r3, 0x487d60c11958e32, 0x1, 0x0, 0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x5)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000240)=@ethtool_stats})
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 9)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
socket$kcm(0x11, 0x2, 0x300)
r8 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
close_range(r7, 0xffffffffffffffff, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000402505a8a440000102030109021b0001010720e209040004010701fb06090501020800390281"], &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xc6, 0x0, 0x7, 0x20, 0xf8}, 0x54, &(0x7f0000000100)=ANY=[@ANYBLOB="050f540003071002103706003c10f95c6e7d87bbf98db01e6906eb9fe6343c4dd27c7348ff0d5104443da9ca9f8cd53e8a99ec3893005fbc158cc9731f124d840752fa7e251f250c100a02c000000000f0370000"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "244d8ea7dc170b4c3aa4e9d68d6861e61ada31d4adbdac05ecd1449a33fda585eafa279d338c525695107853ade4425bad91fe"}}]})

36.751733979s ago: executing program 2 (id=828):
syz_open_dev$rtc(0x0, 0x0, 0x8000)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)}, 0x10)
recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000380)=""/114, 0x72}], 0x2}, 0xff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x40010000, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
kcmp(r2, r1, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10)
sendmmsg$alg(r6, &(0x7f00000061c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40010000)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)}, 0x40)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f00000000c0), 0x10)
sendto$l2tp(r8, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10)
recvfrom$l2tp(r8, 0x0, 0x0, 0x20, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x4, 0x62})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

35.659141825s ago: executing program 2 (id=836):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2, @ANYBLOB="050000000000fedbdf250600000008000300", @ANYRESDEC=r0, @ANYBLOB="443b83f3eea3286abf66f9c580"], 0x24}, 0x1, 0x0, 0x0, 0x24040070}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="3bb472141f71dffb30ea155468aa7de05a826e2a64aaadb619126b09072a"], 0x70}}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000003c0)=""/183)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80008, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
getdents(0xffffffffffffffff, &(0x7f0000000600)=""/178, 0xb2)
mount_setattr(r6, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1b, 0xa, 0x80000, {r6}}, 0x20)
sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="576e40872d793724b09119faa63d47e1810559910e9da0b6cf6a1c93f266416ef2ffb6f6e0a70e51cf201e79e8b42bfa4aca524d6780b6b7486f8d3924207dab4cde2e54d0b20ce4fd8000f98c08fa17a4f96b4b12076476174dfc72e0e3b7416ec61c98b3787e8aa384b5caf17a854f2c7dfa282becb14862e0d4961d679b47a6337e3629b4204fed86d81be787886f542ffd9512d9309bdb51f622ad16bd68ac17fef8978c1be81f388f5b107184192c7a6758a6e58046579afd1b373ded2a5ccdd4132df7c82c14ae7c7b962e", @ANYBLOB="fae5f96e13d54ab3013f8b264e3cd2440844b082fb657982d56b4bad870d6c75976731ada3d75987d624b330"], 0x4a, 0x4c801}, 0x20008044)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = epoll_create1(0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="01002dbd700000000000360000000e0001006e657464657673696d0000000f0002006e657464657673686d310000", @ANYRESOCT=r4], 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000100)={0x2})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000140)={0xa0000000})
r10 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r10, 0x0, 0x12, 0x0, 0x0)

34.787417482s ago: executing program 2 (id=843):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback={0x200000000000000}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)

33.951684829s ago: executing program 2 (id=847):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000fa"], 0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000028c0)=ANY=[@ANYBLOB="180000000000000084000000000000006125"], 0x18}], 0x1, 0xc4)
setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0)

33.810563687s ago: executing program 32 (id=847):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000fa"], 0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000028c0)=ANY=[@ANYBLOB="180000000000000084000000000000006125"], 0x18}], 0x1, 0xc4)
setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0)

12.357691021s ago: executing program 4 (id=916):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0xe285, 0x1, 0xffff, 0x56f, 0x7b, "203cfffffffff200", 0x6, 0x5})
ioctl$TCXONC(r1, 0x540a, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14"], 0xa8}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x4c, &(0x7f0000000500)=[{&(0x7f0000000f00)="d800000018009903e00312ba0d8115040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
ioctl$KDSETLED(r2, 0x4b32, 0x5)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

11.758392412s ago: executing program 4 (id=921):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000030000000000000002003e00f42e0000d6030000000000004000000000000000000000000000000000000000008038000100feff120086ed0300000005000000080021440f0885a7028c0000000000000100000000000000e5"], 0xed)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2e, 0x0, 0x0, 0x401}})
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}, {&(0x7f0000000000)="80ddffc74b528619539108026043df1497d05607d533ca8289aea01b4e1915968fe0e92fa84ba71e6a2e1f6aa3e2d1a724e96809b5dbf6bf74bf14fe1b764df512d10c361c905503318246eb04e9c09e391ee059f35fc4aef88ad2f426039ddf1c056dd2cc1149f39e077e3fd8a097d45d9ef7a6cc7eabbeaa3a075166a78ebf4f9c359d24cf863a2288bbb145904e32dbd8740b15c5f5514beaa33f34fe4a5d569aa63fe51c431dae9e532f6ee8dcf588344f45df0a410fc13f3e037ece77a760936ad2982f22ee5f49d357642890d806ee6d2748b0044620d7eaf016179c064da4a652c45883de067c2188d1a3c0d40a83fab176455d"}], 0x1000000000000079)

11.689718976s ago: executing program 4 (id=922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002900)={0x24, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x10, 0xc, 0x0, 0x1, [@typed={0xc, 0xef, 0x0, 0x0, @u64=0xd1a000}, @generic]}]}, 0x24}}, 0x80000) (fail_nth: 7)

11.448797851s ago: executing program 4 (id=925):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000440)=""/69, &(0x7f0000000500)=0x45)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x68956e34, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]})
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x4, 0x9e, {0x9e, 0x30, "7eb24cc7715942dc63057a72d4477e10ecb8015421dc3fde544d3da2343352392dc2cbc8711a21ad207a505038013f0d00f28899d3b10073ff182fe3e6e35e588cc8fc42b4948c7d70191880fb18a2fdda74e6c9a648ca6875ee50d7dd27e88ddb98b9e62ec18a77cdbe9cbda4d9f843a009d3d07a9a78bf4fe8718788f82d49cdbae81a09f26d054f1ca98d6dc44e6bb4443a8a27cfd5eb311a1814"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "d2cae3952f3ac38fcf52a95acd11c12a774f7dbf88beab78c9e6e1d2c86eff3977a74eec33603c74d8c15107dbdb45c612f1e302cc41749cd8267a8d62f113f110da0a094dabd510534cba011c42f097489cafb7517af7421d03e243f079f149604ff255124d05368b47de7484e3b97ca3486659df4452e0557a88c45b806cd217059445d93636502104407fd1741052b05f2beb2b9d751801af7bc5c06964179b8a22715c51029374d3f8da498885050130bc8e6b"}}, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0x8, "509e3dc4"}, @main=@item_012={0x0, 0x0, 0x3}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfb, 0x1, {0x22, 0xaee}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0xd, 0x2e, "288010ff7dfb715ac831d8535e8f8e4f4fb62278dff864417cd63ea567da8c2744e2f2ca430cccb440c3cc76c04c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0xb3, "b762a2a4ca94db84420b9e4d1826978fbb0e6dd8d11c9d6cce421327a1f0c2c677f3abad15ff27f349a2916016fc631d00165da8acda67add53e11f8b7eb475f8111a01d58046ad7c2cc1354c190631e627b30158e098fa607b0e948e2c80956bf6d69392d961cbec393904f2a052f007375874b09b21f25ceaaadaf94754c0f612d1630ab234987063751c8a215d1475a56b6ee79dccb1db60baf828badabbc2bd7a25684d290febd5323dbe6be7a1987b238"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x80}})

8.875561052s ago: executing program 3 (id=937):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600002000000a00004000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001ac141432000000000000000000000000040003"], 0xc0}}, 0x8000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "4c264e2937a48b83", "91e366a16e5da80d5f80a20ccd1ee328", "7e830465", "11192e1352179d60"}, 0x28)

8.554669127s ago: executing program 3 (id=940):
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001540)={{}, "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"})
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
read(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = socket(0x0, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/183, 0xb7}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000004b00)=""/202, 0xca}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f0000005d00)=""/209, 0xd1}], 0x8}}], 0x1, 0x40000260, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_clone(0x800, 0x0, 0x0, 0x0, &(0x7f0000001b00), 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
accept(0xffffffffffffffff, &(0x7f0000002180)=@generic, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000002380)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xf}, 0x1c, 0x0}}], 0x2, 0x8004)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0xfd, 0x3, 0xcb, 0x5, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0xd000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write(r2, &(0x7f0000000140)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x34)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b15", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="24acadd7", 0x4}, {&(0x7f0000000180)}], 0x2}}], 0x2, 0x2090)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000000100)=0x1, 0x4)

7.739108647s ago: executing program 3 (id=943):
syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909080501bbaf550a47c2906ba100d247aea3116d5875b6d5739ef076a046d349d68747b61730baa14c3d008312affd23af2aac9eb9eef5d2cf8fca", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

6.335516894s ago: executing program 3 (id=947):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000cf5ff0000080039ec52bff67327d128a13c52c3973a23655f30cb8ce00ee4e3f6e84a420000b709b57f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b})
r3 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac3(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0xe013, r4, 0x4a850000)
preadv2(r4, &(0x7f0000000700)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x1ffd, 0x7b9, 0x1f)
write$hidraw(r1, &(0x7f00000002c0)="5bf9", 0x2)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

6.075555876s ago: executing program 0 (id=948):
syz_usb_connect(0x0, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d"], 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x19)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}})
read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0)
write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000705000100070000000c0007800800120000000000050005000a00000805000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x4055}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000006780), 0x288880, 0x0)
fcntl$setflags(r9, 0x2, 0x1)
r10 = fcntl$getown(r7, 0x9)
r11 = syz_clone(0xa00, &(0x7f0000008d40)="2e192ea5c3a505ee81a1353a9ed67cd9cfc92073172ec62be71727cc2fddd3a115201e32dd8520ca5089316af8292db0973622bf0081d8a63a010069d5bad32b7cfef185049193337fa4f099f2f88e7e8481b66f41599f6f89b6e5763aa231b22ebc2f56e26fe399adb1d4e93797aba4157e64903b6f0bc8a7d59316ec6622665e31770f6ec8dc5b44bfcd4ce33d589d2e28a820a2b15911a10ff0ad9e0b0fdfeb19389e4ba5db115fca68f14ee20573a67e31d7b2567888c4278d1961d6f40b06fdccbeb39ce8393a03edd266250b12ee56132d6bc0da762d8517ad1e37564defecafef", 0xe4, &(0x7f0000008e40), &(0x7f0000008e80), &(0x7f0000008ec0)="d534a0a466ed82425a9c010eff382af94c0496be602b19f72a36bb4b422b7776c9298a99f1677a281ec5b04a")
newfstatat(0xffffffffffffff9c, &(0x7f0000008f00)='./file0/file0\x00', &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x100)
r13 = syz_open_dev$hidraw(&(0x7f0000008fc0), 0x2, 0x1)
r14 = accept4$packet(0xffffffffffffffff, &(0x7f0000009000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000042c0)=0x14, 0x800)
r15 = creat(&(0x7f0000009080)='./file0\x00', 0x0)
r16 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r16, 0x6, 0x0, 0x0, 0x0)
r17 = fsmount(r16, 0x0, 0x0)
fchdir(r17)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a042, 0x113)
sendmsg$netlink(r7, &(0x7f0000009200)={&(0x7f0000002040)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000008cc0)=[{&(0x7f0000006e80)={0x12b8, 0x28, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@generic="5071314618ca106d8aada290b683da3154e635a6da6cbfcfc51219c6ebbcac6d680476ba8a753b10b135f92fe201ef331f12ca00a5aff31a7b7d32626105e3a86972c95a77acaffad1804a1aa3333a91e9e437216316cfc25b57551b79b84fc5ccc75fb1ebaf8d923b0cdfaf63e3e560eb29d13da00f8a3db6a918681dbebe2358a821f4a70c5e9a6fbe22852766371b00fcd0", @nested={0x1203, 0xc5, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x2}, @generic="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", @generic="4515b1d3d2c30da8d1b60797014f17fb6364ad504617109587e0939f3d4096a370698af7eeb99854b315077bcb428ee140965eff9506cf7185afeab77e59b02ac051216282293da329622759440730466dbfd36e0db6d0080e7955d80530274254bc8bcf22ba116a69d4202f50e77aae16fb58dc924f11f9d2277d9c7ac7ece810f5ebaea87dc20fca2c52b23645becf15954e067c4d3f793b549dd12c1c048768d345f580d55be21a22c94f5f99460f4fb2ded6a5b4aa8d4b3ab74908476dcd7d7bd7891a5092a84cd71ff3ffbdd5", @typed={0x6b, 0x42, 0x0, 0x0, @binary="49d09857a4160a67eac3a5b15833569d5255daab6d3cbc2698fec9b380071f16087d9dc949415e5bbbca62e59f6da440beb1e82c7b56a2c22509272d1724f1048f6906bda934344b11f356e588826af27cdf0c6685f55c303b419c6b69b425a9ef585e3175c802"}, @generic="da84edad2d8285cf41eeacfa583185823ec72074d3064ea0457fc5f16b2aec3b83fe292be05eec7c25d54aa534e5e5760322f4454ae32ba2196b024d6a1b8330fbdf91087f72d9a86959d83c26bc2b15be25fae586ec890639a5df9b83825c6300389ac92ac35771a4265d7b993a0e7f37286135a6d7080cdf669ef47c5722104317881fa70dbe2ab5036d0cadc06e87eac708f4fc900e01a0c84cf67c621390bad72ca259ef13608560bf5ec46aa39e", @typed={0x4, 0x12b}, @nested={0x4, 0x1}]}, @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xea, 0x0, 0x0, @pid=r10}]}, 0x12b8}, {&(0x7f0000008140)={0x3d8, 0x19, 0x300, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x6, 0x0, 0x0, @fd=r7}, @nested={0x265, 0x16, 0x0, 0x1, [@generic="5f4193ee7e3a2a182970108c720de3b0ca01e371ebf4b6aac94987d8230469bb7a3abf50face3e204d542a8d1ccf74f9794ea8395264717a8d72cf5aeb9ac560b12d9d544c78e80b4991858d52b622dabe7a86cc691be26b9525996ffaa73babee1bb52b827d521619bb2b414fde1736165272c9a28dcc0e74fdcf76f49ac859a5b5de99c685b9d249268cd1d2f9", @typed={0xf, 0xc, 0x0, 0x0, @str='/dev/audio\x00'}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@multicast2}, @generic="7b4e84894020a704158e850bff673fbe652f3a010ce1d2f01512fcde729a6f423b031f1fa73a487e2c89e77ec4ed2d176b3b0d17ee8d1f93ccf30fc95f83f09b461b2c8e760e1e82aff339f9ab854f949d031388cc0c5dbc7d2bd0c19e25b7eed0b729bda9ece8944bd236961d108c138205450ed4fffe00d433fbe260d3b505d1ed2ec70540f9d9e4ad314d89f4b745bd8d9c34af65f617d7375b62beba939582efab72272e64180a4279c4320d7b502367b316373af6630d90c54bc49fcf5199d491bdf468c44d6220e7be121bec250c9a81fdb20f", @typed={0x6, 0x6b, 0x0, 0x0, @str='#\x00'}, @nested={0x4, 0x1c}, @generic="a7faadc0adf9735372933c660109f8ad8e7d504bff8c1f915d47b7a06cabb5cc9d85882c46ab565b7390b2b85322fb8d1b5761dbf5a8b1c1b505a5adecb6af454da27e82471e93e3f6050292d1c1d6451f9dc509424282e6febf1834ad5b7c9f48903d9dcc5c3ebe6117252d52c825dfab59fca1e4eae557fa60a48bd986bf82696811c404d7b75e7cfa4351563a94662674625db23f557eb68dba87afca57117c8922d6b66c682ae7c935b0047ec2267382f4405996373d3b7d230e9280b39dd73e0ecd4382c89bbc41717103ed1b6838dc37b037e169702e"]}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0x2}, @generic="68bb8a08951e6b97d54ebaec390b44def710fba15c27d2f76de2be0e48fe983ac2c2a962d1be30bdfe5967f55d8b01de5b8c223fadbc6d23b4482766441c9be120ca63119ded2d5a936b3353d1f35b9f1f9b35d09f", @typed={0x8, 0x43, 0x0, 0x0, @uid=r4}, @generic="c9c643b37b77695919fd3583495955545f912dcd9c3c050b1aa4ee9b19310e24b93bf1a7386e3c532c205a1a7f4cc52105ec0c51e7d6b231ef229a891232de75cd6059353dc2e1a2db9b9ae21b3195ce4c0605b682cd5c0500062dfa5201bd623b405143449266108407f4643bcdfb7b15fe700dd42cddd0964ba0024f467001edef9b34be9783ece63a5e5d60330517a154f34df2ac16855e70fdb84a6cac6d6d3ff2e66b54d9fe2c583e665e6139a9f7025374658f344d48904971257f388e9dcf526fae965dff0e972ef8b352f3c62bbdac09fec0d85949c0e3a864f72c5fa01bb71d891f0da8a83bd20502"]}, 0x3d8}, {&(0x7f0000008640)={0x10, 0x2d, 0x401, 0x70bd27, 0x25dfdbfc}, 0x10}, {&(0x7f0000008680)={0x3c0, 0x14, 0xf00, 0x70bd28, 0x25dfdbfe, "", [@generic="67528f8ad32ef44515e6289c1ce3f4b5bbedfe1e3e80056389d95bb217c98d126d959742534e2a9ac3611d53270700000000000000287c4b687e6799f01453bafe7e6782d1d803942e1246e453a68105681364fe9271d6d86b9dc819e410fd5c291dde1624a8187eb0453a32684eeb6f93e0c2e626", @nested={0x10, 0x1, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0xc4}, @typed={0x4, 0xaa}]}, @generic="4c941a2a244d3cf4b6e3f763270b10472f4d5b3be725222655da3ef10366bc510c2689d5981a7365f40e10285bc29a4cff65c5bc98f1506d9fb8d012dd8a08be9725d4840eb4a3273d7bc799e10594af0c74a5e8a5323de21b9238ab6759473abe91c36ec719a1179ce717e8ca469c5ed0bd7cffa17a96a8da1f61be5ca50b6c1eeda39b63347e595a453eb2fd378536ca831e338ed2bc217ba96cc399e7e5b63558a60acf4e58830af3b7c89c5817321c4f65c149a1c17313b174057fe44a7adf4a632ed460e481ad1985de3f8d3426b027afe42406798dd56e", @generic="102f6f6df6ebb6dc158e1f7aa7498a072101532a5a44920b6a21a2d15e02ce9a918ec2e8bcb90096547c435137fbc81e200c9b47bad40d118fa116f3e23b35ca856c4af0264faeb04db457749d6b886328e6f5e0aaf6dc4546b0d06503a63f210e158e132b2372c596b128c6e879b4bb4181351e37418ca298d3b1d0e6b6999fe455e9f94dba6ee2f98faa3e4e865769202bac02eac70c23fc51b1ce5d4c7cf81567a6986a16c094a0f59930c595a7ab805b10773feaba515d1766b5c1d2735251a3da407c58b0861100d40e", @generic="c26053e82b9cab3695a37d4dc820d9e065b93b0be8d83c64e08822c7d69d8bcfb797add88d4cdffa7128af0e1c717ba2316733fe09f20d49310a2ff6d93eed80c9bc25832a6c755338aded92b4a9ba8f6e5bc88259926ea8909ddcf87b3cfbcae77fa28c1e12da9717bafc95c2017d36fb876ff70adb9a96f437548c262f4911973e774e3737f58f10f2f7c6555da33d434650", @generic="81a266642c2797d540d79bdedf30f21f738542f2628ab3914e4f53ab1ccec9396266dadf8c8994c74adda4af2b85375589a294051fe5847d4089bd267238d38bbf5f26966246bfdf86a73f9262660c5d26aeb1e40d945201d87331b43ff3364cc4f96ff58555e17c5ab479e700b04ee565fde3c3f31b66473cf2ec0a9b1279ef0b734f36ba1935e008a42601170bc965d8ddde7630fce6375ce874c304cbc530e8422ef0810a535a2379dab69dfd8127269c1bee2caa9f45018668af725adcd17645a29131f8856c7257e8868ee4d1be53b84a5210efa9", @typed={0xf, 0x55, 0x0, 0x0, @str='/dev/audio\x00'}, @typed={0x8, 0x154, 0x0, 0x0, @uid=r4}]}, 0x3c0}, {&(0x7f0000008a40)={0x254, 0x30, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x100, 0xa5, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @uid=r4}, @typed={0xf4, 0x72, 0x0, 0x0, @binary="495c9483ef06a3b1a41b53e2c96805a6d667c749661fa7b6542175912fd0ec44620dd47dcbb594b5b3e95d2b77d9669143a6563c9716fa98cfd0fafd085447f6736d326aec9ea61318b69dfc40fb2e6fa1e78977825c00ba8da8af76df256c7dd31061c27cdf0768d0d47c0bafeb39a0465636cb26ce76cb7d90dd7ad9d8acad1bc23b3b2bd8c4e7bb979ef787070ce91fdffa185f4cd710249176bc0e2333416c19e78d34bffa135b0a87ceb67cb1d6a80a581b2ae91124f72db6122c03f1cacc639e69e8bf29d24749d951ba75267f9230c61a282e560626c7f30c1d35fa29e980823a81648b5a0cb7c0dac74337c4"}]}, @generic="57523f23343aab4a081bafb6e19453da5f3153a016132ce710b1f2262c49ea01f8642a636bce69d2feff9c893dba869685149504b412dea7edc065cb1b0940d281b3968eddb3451ecc3b1d8774bbaac354084f86abe84c1658f2b0aa765ccc86508929bca022c4d2e7a768fd2a9b931df4b40d9c8dd7508b6762639aef10bba7c30ac8cfa95b2f269c37b326da475dcb2edec3dfd6bb6fa1372882781ec5ce83ce108d02fa5742a43914da210472d828305bdb94eb01aa7269001fe91d33bd1727cfb8b6f9aba157b25db23fa4c3c8c2f5afde38c81edff67703e46a6f27d8", @generic="aac80017b8b08bb6328d7f16dd940b99b25fd57f4c3ad929727dfc12bd548d8d421b753b3200", @generic="96fbab84a2ff750cffe3d1a77175035a0fcc035b02bfa4544172bbb23e587e4fdad18b8e857ca6f293ef785671d084994064a7e5275e72c0b60e8fd1135b"]}, 0x254}], 0x5, &(0x7f00000090c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r11, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x28, 0x1, 0x1, [r13, r9, r14, r7, r9, r15]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}], 0x118, 0x2000a054}, 0x24004044)
syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)={0x90, 0x0, 0x4, {0x100000000003, 0x1, 0x7fffffff, 0xffffffffffff, 0xe6, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x200, 0x123, 0x83, 0x2000, 0x0, 0x0, r5, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000002200)="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", 0x2000, &(0x7f000000b340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x130, 0x0, 0x5, {0x0, 0x4, 0x0, '\x00', {0x1, 0xb, 0x10000, 0x6e2fe504, 0x0, r5, 0xc000, '\x00', 0x9, 0x9, 0x4, 0x100, {0x3fb, 0x9}, {0xdd65, 0x1000000}, {0x8, 0xc}, {0x3ff, 0x88}, 0x3, 0x49, 0x401, 0xa13e}}}})

4.755680269s ago: executing program 4 (id=950):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES16=r0, @ANYBLOB="0cdcc43c736778c13d0c4db791a014f5a1e0d5df56562638b818d7508dd1bf891ab187cdaf477b16e4ec904836f4d438e0367fcf79a29007afb3fe4d3abf2118013ba3", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="a5c937e7cd81d3fdccf82cb8a9f87e90d5d8910eb930cbc918f83cf680c197d90ee524", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000440)={'#! ', '', [{0x20, '[\''}, {0x20, '{$$!(\\'}, {0x20, '/dev/ptp0\x00'}, {0x20, '#! '}, {0x20, '/dev/ptp0\x00'}, {0x20, ':'}, {0x20, ',]'}]}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001640), 0x101000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x5, 0xa2, {0xa2, 0x23, "4fe8ddbf5b7947305f2b340a7cf0f8313659d6ed53f0a246ef30cc2be2fe97bd31b89614b4c21adca0de28dd67578cb949a61772c403e03a9a929010fba390ed3ffd668d0f04df0fd08065999a707a20aea7018b438cb8cd4d7652dddccb06eeac67b1a8a0890ea48b3852d2d503c9126a7e7b4c782de1905d9018520e7857c71b5e174d78b1e06bf01db96a87b2fd99f6d3cd34158ef6c4552be9d34974877d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0x8, 0xf7, "01f12ddc1c1e566ca6f06432e6c4d37e1c53bd599b516d1d1d9576f6727c280a0cc8dbf236dbed7029217e793a53452a05d402a521821bfe884eff8195ccc40caa9535e8655ec4566ac851fbb37cf04dac804ea06677a148c91bd5a21d8aa5b75f05013ef5fda3edb0ac0b10a44264370e17505f2fadea1ee8d43bf3b6eefc539c015bf5c27af76f8cb4ff87be8b16553f75ce4e08624a09d3b534f58a3ac4fd7f25a067e7e940ca924443be44660b6d08d646b23dbb17ae9630a125dc9c295c396da3d371a22b130d60929a0bc027bb461e51b86f46d4e899a77e8b16c11cd97c745de949d4207f0a8abc98d5340de914892a677c04f3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}})
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$XFS_IOC_START_COMMIT(r9, 0x8916, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x5b15, 0x0)

4.487612318s ago: executing program 3 (id=951):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00003f0000003f00a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810156cb132f51eb6"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"])
syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x3, 0x72, {0x72, 0x21, "b155fa599634dab14a9902480246c4c13ab63824e295636016a18a9ef1dcc15819400b5239fdbd699ab071274c2161dcaabc65de0f70099296b77b0223ddc97c4bd67be58e65ad419dafe8319ad398d5528e65d1cd199a16616b6d5501a7776b935de8603671b64e86f1b92d0844f643"}}, &(0x7f0000000140)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "376c9a33f0e82ba6fff82dda005b090a1707fffd8b557e42d04e64ebd19f5ca6717bea990670ea5b13c3db914993cfc7abf8c9bce3a2c2af5ab6c65efc8ec4241e9546e7aaa947e51907763f9cf1d5e6ba353b8b504f5d017b689be8e193c55aaa679b13ebc9552f57a3f90fa0893f1c4422fedd4f4577d2353d6a51"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x91, "ab3ef802f8c88a9c22b58a784bb594476d5fc713795ccf6e63e932d93a8630738151a1a1ffa2717923b3abda3447b917c022a382553f27c4a049572b44eb7e28da44c3b4208e633801a5ecb60b8bcad3a7dc7d62f32011da39118515abd92459cc20396c210a5fe6e63f3ac056c0f0d79ff483c21c6246e82593b86956f9c6324eb423885dac7e247a674cbd3b065c81c9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "bfa383c87265b284998365d069f066f7d6e151ed802cca04b7ac004316d7ab8931f347376b55c05469f627740e9a96"}})

4.086722023s ago: executing program 0 (id=952):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd64df33832dd637a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3.374207402s ago: executing program 0 (id=954):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10040, 0x0)
openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x8100, 0x29)

2.399288477s ago: executing program 0 (id=957):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x6, 0x1, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x80a0000, 0xd, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x46, 0x2}, {0x5000, 0x53e61a9cd215004d, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x0, 0x16, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x9000, 0x30000, 0xb, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0x9}, {0x3000, 0x8092000, 0x8, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x9, 0x4}, {0x10000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x8, 0x0, 0x2, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x7, 0x3, 0x4, 0xf9, 0x1, 0x8, 0x0, 0xfa}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x20000021, 0x0, 0x2, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000000000d, 0x7]})
mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[])
write$eventfd(r6, &(0x7f00000001c0)=0x3, 0x50)

2.304032052s ago: executing program 1 (id=958):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x2)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0xc807, 0x8001, 0x2, 0x6, 0xf5, 0x2f, 0xf, '\x00', "556a48faada9fd6970811a3c3dc70d88d365e934"})
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x80100, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000280)={0x1, &(0x7f00001b2e80)=[{0xe000003, 0x0, 0x0, 0x3, 0x101}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000000)=0x404, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694fd2cd00103afffe8000000000000000000000000000bbffee"], 0x4a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002900)={0x24, 0x3b, 0x9, 0x70bd27, 0x0, {0x1}, [@nested={0x10, 0xc, 0x0, 0x1, [@typed={0xc, 0xef, 0x0, 0x0, @u64=0x20000000d19ffd}, @generic]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44005}, 0x80000)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, 0x0)
getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

1.75167743s ago: executing program 0 (id=959):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a000000030000000000006000"], 0x2a)
r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103"], 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[], 0x184}}, 0x40000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0000001080002"], 0x64}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a80"], 0x2c}], 0x1}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r4 = syz_usb_connect$uac1(0x0, 0xdb, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x6f, 0xf0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x16}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x4, 0xb, "13a4da9069"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1d, 0x40, 0x4, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0xa2, 0x3, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xb, 0x0, 0x96}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5c, 0x8, "bd9fba", "8b03"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8000, 0x81}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3ac2, 0x9, 0x65, 'C'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x2, 0x2, {0x7, 0x25, 0x1, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x5, 0x11, 'b'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8001, 0x4, 0x5, "02"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x0, 0x1}, @as_header={0x7, 0x24, 0x1, 0xff, 0x3, 0x9f99d0ca44174b2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x3, 0x9, {0x7, 0x25, 0x1, 0x0, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x4, 0xd, 0x2, 0xff, 0x1}, 0x4f, &(0x7f00000001c0)={0x5, 0xf, 0x4f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x8, 0x21}, @ssp_cap={0xc, 0x10, 0xa, 0x5b, 0x0, 0x9, 0xf00, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x41, "2fdd659022052cf2d59a5b259008fc2f"}, @generic={0x23, 0x10, 0xa, "0aa23ea36bc583180b01b30f6e17c94798d5930ae77ceb2ca9bd43d7025102f6"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x404}}]})
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x200200, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000380))

1.683920464s ago: executing program 1 (id=960):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4004}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x4, {0x40, 0x1, 0x1}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00'})
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket(0x1d, 0x3, 0x8004)
syz_genetlink_get_family_id$nl80211(0x0, r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x220c01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x6e0, 0x0, 0x5}]})
ioctl$int_out(0xffffffffffffffff, 0x2, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x4, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udplite\x00')
pread64(r8, &(0x7f0000000080)=""/205, 0xcd, 0x4009)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @empty}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
close_range(r9, 0xffffffffffffffff, 0x0)
close(r7)
r11 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x40)
ioctl$USBDEVFS_BULK(r11, 0xc0185502, &(0x7f00000001c0)={{{0x9, 0x1}}, 0x46, 0x4d7, &(0x7f0000000140)="1aa0124cf980fb9c335e0bfc9af33e8401e3578662864a7d2199fe0e686789b03015ee97fc7b089494520ce2d3ea32aa10bacdd6f692368afbb212623dcf657ff4ac046e7f68"})

1.43966606s ago: executing program 1 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x2400, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)

1.415901092s ago: executing program 4 (id=962):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
r3 = syz_open_dev$media(&(0x7f00000004c0), 0x101, 0x4000)
ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000580))
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, <r4=>r1, 0x2})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x1)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000200), 0x2)
r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x20, 0x9, 0x2e, "dad9da4c965740f482d4f527055e1ca3f1520f22ce35cbe7e88fdd44a4d942554e07a7c63d729d705d92d145c82f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x4)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x60, 0x9, 0xa1, {0xa1, 0x9, "6ab1c4f570f4e059761d4ec8ba87824e8219bc6ab0fddfbccdf5df383b2bac972f2e0030ccfde5c1117daddf74e51816acffd5324173b1bba43311b1b7879470f0db99d3d2d0072efa2500229e14760f1f94147837c58f50fe9a7a5874cf24e0aa6c43fe57f40c470715bd4784ee034dac8bcdc2fced4661c2810b34da3723464f788f2a6609859d911ae68e6b03ae73437c486c4c507500d5aeb7012990fd"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x94, "7e8dfa1647b31e6acbd68e7cfa22aaa1cf93fd48fa408315ad0c424eb8e8208ffa6576178edfb250916809ad7f1bb98b8f142c22f4721fa1b0b688471ef6e7bf08327e3186f4aa8a26da43c89020ae41971994160c80054b5231ef8a6330fc4f73b47445e8cf2abcadf2cee3ce4d9bd7b5b3de1a61bdaca713945ee55fa90b5150b5385803fd32b6d507a450f72c7859fa962c11"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x6, 0x14fd, 0xffffff78, 0x3, 0xc0, 0x3ff, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'nr0\x00', {'veth0_to_team\x00'}, 0x7})

1.345402928s ago: executing program 3 (id=963):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, <r3=>r1, 0x2})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000100)=0x1)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5725}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a3}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x48090}, 0x44800)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x6, 0x9]}, 0x4, 0x3}}}) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x29, 0xb, 0x0, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x16c, &(0x7f00000000c0)=ANY=[@ANYBLOB="8100004ec7148ca53d203ecb6ae2338c792a228c2ea5446a957af349cae9542e4bd761476625874cfe06f10244447d8ddf3c0c5babbd3f6b9e972c39098dd9f4957b4345fe26dceacb812affb2aeeaf7fc4bc72e1dcaac7cdc3a385e0595f3b1bdc54e16d0ec0f92cc31eb6a854e1dc24a6d7613c6e06496e73b6e09e7b53601342edd89300000004800004e99d6793c0d1068ce106476d50862a2549c2b8dc315cc0344e5767c5f29006ab50df62e364d25c6aa417c65aec76c229e1dc1bdd6fd08cb7ef93cc9d21d608b51ea866907022165ce9200004e113e"]) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) (rerun: 64)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r10, 0x6f2d, 0xfffffffffffffff2) (async)
write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[], 0x5) (async)
ioctl$SG_IO(r9, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x4200, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000880800034000000006080004400000000f08000140000000001c0005800c0001007061796c6f6164000c000280080007400000635009000100440b0000000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xa8}}, 0x10)

1.123083752s ago: executing program 1 (id=964):
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000034a6cf3561d3794f84136cf2aa20b4ade9a9d3dfb00b3113bee8f8393503557cc192e47514d3e7cdd7dc97629fa4a0782ca1baf4375fdaa5414b448d56a40656dc0bd89e2f034a4a56c9426df22bb5654d650d", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900010000005100000008009f0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa"])
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b4000)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
fcntl$setownex(r5, 0xf, &(0x7f0000002800)={0x2, r6})
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

416.816856ms ago: executing program 1 (id=965):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x100, 0x0, 0x1}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x1d3a, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = getpgid(0x0)
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x84, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1ff}]})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040))
socket(0x40000000015, 0x5, 0x0)

295.227355ms ago: executing program 1 (id=966):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x3b, {0x3b, 0x6, "92d729be3a26ce825311387c09d03d90267ee7387e9f016e7f6033516dab4691287f968c403e589bbb2127cecd34524bd665975b2e9b179154"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x6, 0xd8, "55b629379c99afa9c3a594eadf4434b942305fb02a8f8e3d4c0145b4b1398804a5c697bed7e659fd45b3fd0894d296751db509c7f255e69e1c2ea726345afbb102590fdc3c77a23cdffc0d62379f6b2d07d75966a517880ad275b54eaf0dd1d4459f637705898880c9a4a2680354cf03299840d0eaaa586c7cc1ef7dcdba29911842221e2337fcce9130824d671d6798799050c4370c3d1b57b95c3934dfc7d9c33522b45a9a464ded9493129af795b17f5d6eade430c525d546b86c8d46a9d084e63335f7e41a9d26d4b95050dac5192fdb361c22cf760a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0xc0, 0x5, 0x2, "5302"}, &(0x7f00000003c0)={0x40, 0x5, 0x4, "e7695a26"}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x2, "42a0be50"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @global=@item_012={0x2, 0x1, 0x1a, "77ef"}, @global=@item_012={0x2, 0x1, 0x1, "ead8"}]}}, 0x0}, 0x0)

0s ago: executing program 0 (id=967):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd)

kernel console output (not intermixed with test programs):

80]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.400811][ T7580] RIP: 0033:0x7f666f45ce59
[  211.400824][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.400838][ T7580] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  211.400854][ T7580] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  211.400865][ T7580] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  211.400875][ T7580] RBP: 00007f666d6b6090 R08: 000020000005ffe4 R09: 000000000000001c
[  211.400885][ T7580] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  211.400894][ T7580] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  211.400915][ T7580]  </TASK>
[  211.420922][ T5704] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  211.597001][ T5704] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  211.597058][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.597083][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.597104][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.597145][ T5704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.597167][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.628504][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.636527][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.689863][ T5704] usb 4-1: config 0 descriptor??
[  211.962152][ T7591] gfs2: not a GFS2 filesystem
[  212.112992][ T5704] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd
[  212.146635][ T5704] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  212.364891][ T5624] usb 4-1: USB disconnect, device number 48
[  212.514005][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.514584][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.941517][ T7596] FAULT_INJECTION: forcing a failure.
[  212.941517][ T7596] name failslab, interval 1, probability 0, space 0, times 0
[  212.941556][ T7596] CPU: 0 UID: 0 PID: 7596 Comm: syz.2.614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  212.941576][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  212.941587][ T7596] Call Trace:
[  212.941594][ T7596]  <TASK>
[  212.941601][ T7596]  dump_stack_lvl+0xe8/0x150
[  212.941628][ T7596]  should_fail_ex+0x46b/0x600
[  212.941654][ T7596]  should_failslab+0xa8/0x100
[  212.941677][ T7596]  kmem_cache_alloc_noprof+0x87/0x680
[  212.941696][ T7596]  ? alloc_empty_file+0x5b/0x1d0
[  212.941724][ T7596]  alloc_empty_file+0x5b/0x1d0
[  212.941747][ T7596]  dentry_open_nonotify+0x1f/0xc0
[  212.941763][ T7596]  fanotify_read+0xade/0x2bd0
[  212.941792][ T7596]  ? __pfx_fanotify_read+0x10/0x10
[  212.941807][ T7596]  ? get_pid_task+0x20/0x1f0
[  212.941825][ T7596]  ? __lock_acquire+0x6b5/0x2d10
[  212.941838][ T7596]  ? __pfx_woken_wake_function+0x10/0x10
[  212.941853][ T7596]  ? rw_verify_area+0x2ac/0x4e0
[  212.941862][ T7596]  ? __pfx_fanotify_read+0x10/0x10
[  212.941877][ T7596]  vfs_read+0x212/0xa80
[  212.941891][ T7596]  ? __pfx_vfs_read+0x10/0x10
[  212.941902][ T7596]  ? __fget_files+0x2a/0x420
[  212.941918][ T7596]  ? __fget_files+0x2a/0x420
[  212.941931][ T7596]  ? __fget_files+0x3a6/0x420
[  212.941945][ T7596]  ? __fget_files+0x2a/0x420
[  212.941962][ T7596]  ksys_read+0x156/0x270
[  212.941973][ T7596]  ? __pfx_ksys_read+0x10/0x10
[  212.941988][ T7596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.941999][ T7596]  do_syscall_64+0x15f/0x560
[  212.942010][ T7596]  ? trace_irq_disable+0x3b/0x140
[  212.942022][ T7596]  ? clear_bhb_loop+0x40/0x90
[  212.942034][ T7596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.942044][ T7596] RIP: 0033:0x7f2b3c9fce59
[  212.942054][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.942064][ T7596] RSP: 002b:00007f2b3ac4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  212.942075][ T7596] RAX: ffffffffffffffda RBX: 00007f2b3cc75fa0 RCX: 00007f2b3c9fce59
[  212.942083][ T7596] RDX: 0000000000002020 RSI: 0000200000002300 RDI: 0000000000000004
[  212.942090][ T7596] RBP: 00007f2b3ac4e090 R08: 0000000000000000 R09: 0000000000000000
[  212.942096][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.942102][ T7596] R13: 00007f2b3cc76038 R14: 00007f2b3cc75fa0 R15: 00007ffe45f391c8
[  212.942116][ T7596]  </TASK>
[  213.320224][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[  213.324394][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[  213.415498][ T7618] 9pnet: p9_errstr2errno: server reported unknown error 
[  214.294066][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.294440][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.510033][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'.
[  214.578974][ T7643] FAULT_INJECTION: forcing a failure.
[  214.578974][ T7643] name failslab, interval 1, probability 0, space 0, times 0
[  214.578997][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.3.631 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  214.579012][ T7643] Tainted: [L]=SOFTLOCKUP
[  214.579016][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  214.579022][ T7643] Call Trace:
[  214.579027][ T7643]  <TASK>
[  214.579031][ T7643]  dump_stack_lvl+0xe8/0x150
[  214.579048][ T7643]  should_fail_ex+0x46b/0x600
[  214.579067][ T7643]  should_failslab+0xa8/0x100
[  214.579079][ T7643]  __kmalloc_noprof+0xdf/0x7b0
[  214.579091][ T7643]  ? tomoyo_encode+0x28b/0x550
[  214.579109][ T7643]  tomoyo_encode+0x28b/0x550
[  214.579125][ T7643]  tomoyo_realpath_from_path+0x58d/0x5d0
[  214.579145][ T7643]  ? tomoyo_path_number_perm+0x219/0x630
[  214.579156][ T7643]  tomoyo_path_number_perm+0x246/0x630
[  214.579169][ T7643]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  214.579180][ T7643]  ? __lock_acquire+0x6b5/0x2d10
[  214.579196][ T7643]  ? do_raw_spin_lock+0x12b/0x2f0
[  214.579221][ T7643]  ? __fget_files+0x2a/0x420
[  214.579237][ T7643]  ? __fget_files+0x2a/0x420
[  214.579251][ T7643]  ? __fget_files+0x3a6/0x420
[  214.579264][ T7643]  ? __fget_files+0x2a/0x420
[  214.579280][ T7643]  security_file_ioctl+0xc3/0x2a0
[  214.579292][ T7643]  __se_sys_ioctl+0x47/0x170
[  214.579304][ T7643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.579315][ T7643]  do_syscall_64+0x15f/0x560
[  214.579326][ T7643]  ? trace_irq_disable+0x3b/0x140
[  214.579337][ T7643]  ? clear_bhb_loop+0x40/0x90
[  214.579349][ T7643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.579359][ T7643] RIP: 0033:0x7f8ef108ce59
[  214.579369][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.579378][ T7643] RSP: 002b:00007f8eef2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.579390][ T7643] RAX: ffffffffffffffda RBX: 00007f8ef1305fa0 RCX: 00007f8ef108ce59
[  214.579397][ T7643] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000003
[  214.579404][ T7643] RBP: 00007f8eef2de090 R08: 0000000000000000 R09: 0000000000000000
[  214.579410][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.579416][ T7643] R13: 00007f8ef1306038 R14: 00007f8ef1305fa0 R15: 00007ffc733f01e8
[  214.579432][ T7643]  </TASK>
[  214.579442][ T7643] ERROR: Out of memory at tomoyo_realpath_from_path.
[  214.884785][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  214.931033][ T5713] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  215.090638][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.090691][ T5713] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  215.090713][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.111596][ T5713] usb 4-1: config 0 descriptor??
[  215.142560][ T5713] pwc: Askey VC010 type 2 USB webcam detected.
[  215.148790][ T7654] FAULT_INJECTION: forcing a failure.
[  215.148790][ T7654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.148819][ T7654] CPU: 1 UID: 0 PID: 7654 Comm: syz.1.637 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  215.148839][ T7654] Tainted: [L]=SOFTLOCKUP
[  215.148844][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  215.148853][ T7654] Call Trace:
[  215.148859][ T7654]  <TASK>
[  215.148865][ T7654]  dump_stack_lvl+0xe8/0x150
[  215.148887][ T7654]  should_fail_ex+0x46b/0x600
[  215.148907][ T7654]  _copy_from_user+0x2d/0xb0
[  215.148929][ T7654]  ___sys_sendmsg+0x1c6/0x360
[  215.148947][ T7654]  ? __lock_acquire+0x6b5/0x2d10
[  215.148977][ T7654]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.149020][ T7654]  ? __fget_files+0x2a/0x420
[  215.149044][ T7654]  ? __fget_files+0x3a6/0x420
[  215.149073][ T7654]  __x64_sys_sendmsg+0x1c3/0x2a0
[  215.149090][ T7654]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.149113][ T7654]  ? __pfx_ksys_write+0x10/0x10
[  215.149133][ T7654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.149149][ T7654]  do_syscall_64+0x15f/0x560
[  215.149164][ T7654]  ? trace_irq_disable+0x3b/0x140
[  215.149179][ T7654]  ? clear_bhb_loop+0x40/0x90
[  215.149196][ T7654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.149210][ T7654] RIP: 0033:0x7f666f45ce59
[  215.149226][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.149239][ T7654] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.149255][ T7654] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  215.149265][ T7654] RDX: 0000000020008014 RSI: 0000200000000040 RDI: 0000000000000003
[  215.149274][ T7654] RBP: 00007f666d6b6090 R08: 0000000000000000 R09: 0000000000000000
[  215.149283][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.149291][ T7654] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  215.149313][ T7654]  </TASK>
[  215.503334][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.508042][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.554821][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.555289][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.669398][ T7666] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  215.669423][ T7666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  215.727745][ T7666] vhci_hcd vhci_hcd.0: Device attached
[  215.760971][   T32] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  215.767120][ T5713] pwc: recv_control_msg error -71 req 02 val 2700
[  215.768401][ T5713] pwc: recv_control_msg error -71 req 02 val 2c00
[  215.768849][ T5713] pwc: recv_control_msg error -71 req 04 val 1000
[  215.769532][ T5713] pwc: recv_control_msg error -71 req 04 val 1300
[  215.769989][ T5713] pwc: recv_control_msg error -71 req 04 val 1400
[  215.770535][ T5713] pwc: recv_control_msg error -71 req 02 val 2000
[  215.771701][ T5713] pwc: recv_control_msg error -71 req 02 val 2100
[  215.772273][ T5713] pwc: recv_control_msg error -71 req 04 val 1500
[  215.773277][ T5713] pwc: recv_control_msg error -71 req 02 val 2500
[  215.774195][ T5713] pwc: recv_control_msg error -71 req 02 val 2400
[  215.774876][ T5713] pwc: recv_control_msg error -71 req 02 val 2600
[  215.775538][ T5713] pwc: recv_control_msg error -71 req 02 val 2900
[  215.775990][ T5713] pwc: recv_control_msg error -71 req 02 val 2800
[  215.776601][ T5713] pwc: recv_control_msg error -71 req 04 val 1100
[  215.777038][ T5713] pwc: recv_control_msg error -71 req 04 val 1200
[  215.786252][ T5713] pwc: Registered as video103.
[  215.789477][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24
[  215.800008][ T5713] usb 4-1: USB disconnect, device number 49
[  215.965578][   T32] usb 3-1: Using ep0 maxpacket: 16
[  215.967923][   T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  215.967946][   T32] usb 3-1: config 0 has no interface number 0
[  215.967983][   T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.968008][   T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.968042][   T32] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  215.968064][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.971052][    T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  215.976364][   T32] usb 3-1: config 0 descriptor??
[  216.021014][ T5714] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  216.141189][    T9] usb 1-1: Using ep0 maxpacket: 32
[  216.149474][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.149497][    T9] usb 1-1: config 0 has no interfaces?
[  216.172828][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.172857][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.172875][    T9] usb 1-1: Product: syz
[  216.172888][    T9] usb 1-1: Manufacturer: syz
[  216.172902][    T9] usb 1-1: SerialNumber: syz
[  216.179876][    T9] usb 1-1: config 0 descriptor??
[  216.599636][ T7681] FAULT_INJECTION: forcing a failure.
[  216.599636][ T7681] name failslab, interval 1, probability 0, space 0, times 0
[  216.599672][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.1.646 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  216.599698][ T7681] Tainted: [L]=SOFTLOCKUP
[  216.599704][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  216.599715][ T7681] Call Trace:
[  216.599722][ T7681]  <TASK>
[  216.599730][ T7681]  dump_stack_lvl+0xe8/0x150
[  216.599776][ T7681]  should_fail_ex+0x46b/0x600
[  216.599802][ T7681]  should_failslab+0xa8/0x100
[  216.599824][ T7681]  __kmalloc_node_track_caller_noprof+0xe2/0x7e0
[  216.599847][ T7681]  ? vfs_parse_monolithic_sep+0x21d/0x360
[  216.599872][ T7681]  kmemdup_nul+0x36/0xf0
[  216.599900][ T7681]  vfs_parse_monolithic_sep+0x21d/0x360
[  216.599920][ T7681]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  216.599940][ T7681]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  216.599959][ T7681]  ? kstrdup+0x81/0x100
[  216.599984][ T7681]  ? v9fs_init_fs_context+0x174/0x500
[  216.600013][ T7681]  ? alloc_fs_context+0x9e9/0xd50
[  216.600041][ T7681]  do_new_mount+0x304/0xd30
[  216.600064][ T7681]  ? apparmor_capable+0x126/0x170
[  216.600094][ T7681]  ? security_capable+0x7e/0x2c0
[  216.600115][ T7681]  ? __pfx_do_new_mount+0x10/0x10
[  216.600137][ T7681]  ? ns_capable+0x89/0xe0
[  216.600163][ T7681]  ? path_mount+0x690/0x10e0
[  216.600187][ T7681]  ? user_path_at+0xd4/0x160
[  216.600209][ T7681]  ? user_path_at+0xd4/0x160
[  216.600227][ T7681]  __se_sys_mount+0x31d/0x420
[  216.600258][ T7681]  ? __pfx___se_sys_mount+0x10/0x10
[  216.600290][ T7681]  ? __x64_sys_mount+0x20/0xc0
[  216.600316][ T7681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.600337][ T7681]  do_syscall_64+0x15f/0x560
[  216.600357][ T7681]  ? trace_irq_disable+0x3b/0x140
[  216.600380][ T7681]  ? clear_bhb_loop+0x40/0x90
[  216.600402][ T7681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.600421][ T7681] RIP: 0033:0x7f666f45ce59
[  216.600438][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.600455][ T7681] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  216.600475][ T7681] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  216.600489][ T7681] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  216.600501][ T7681] RBP: 00007f666d6b6090 R08: 0000200000000100 R09: 0000000000000000
[  216.600514][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  216.600525][ T7681] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  216.600553][ T7681]  </TASK>
[  216.988628][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.995332][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.209135][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.219658][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.283632][   T32] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001B/input/input25
[  217.367717][   T32] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001B/input/input26
[  217.402465][   T32] uclogic 0003:28BD:0071.001B: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1
[  217.469094][   T32] usb 3-1: USB disconnect, device number 39
[  217.504952][ T7689] fido_id[7689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  217.590946][ T5624] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  217.776379][ T5624] usb 4-1: unable to read config index 0 descriptor/start: -71
[  217.776414][ T5624] usb 4-1: can't read configurations, error -71
[  217.906717][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.907271][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.083309][ T7697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.652'.
[  218.083330][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'.
[  218.083356][ T7697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.652'.
[  218.116789][ T7697] syz.2.652 (7697) used greatest stack depth: 17912 bytes left
[  218.430947][   T32] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  218.492939][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.493485][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.536703][ T7709] FAULT_INJECTION: forcing a failure.
[  218.536703][ T7709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.536726][ T7709] CPU: 1 UID: 0 PID: 7709 Comm: syz.3.656 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  218.536742][ T7709] Tainted: [L]=SOFTLOCKUP
[  218.536746][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  218.536752][ T7709] Call Trace:
[  218.536756][ T7709]  <TASK>
[  218.536761][ T7709]  dump_stack_lvl+0xe8/0x150
[  218.536778][ T7709]  should_fail_ex+0x46b/0x600
[  218.536793][ T7709]  _copy_to_user+0x31/0xb0
[  218.536808][ T7709]  simple_read_from_buffer+0xe1/0x170
[  218.536826][ T7709]  proc_fail_nth_read+0x1be/0x230
[  218.536844][ T7709]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  218.536861][ T7709]  ? rw_verify_area+0x2ac/0x4e0
[  218.536872][ T7709]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  218.536888][ T7709]  vfs_read+0x212/0xa80
[  218.536915][ T7709]  ? __pfx_vfs_read+0x10/0x10
[  218.536927][ T7709]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  218.536939][ T7709]  ? lockdep_hardirqs_on+0x7a/0x110
[  218.536949][ T7709]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  218.536960][ T7709]  ? mutex_lock_nested+0x152/0x1d0
[  218.536973][ T7709]  ? fdget_pos+0x252/0x320
[  218.536991][ T7709]  ksys_read+0x156/0x270
[  218.537003][ T7709]  ? __pfx_ksys_read+0x10/0x10
[  218.537013][ T7709]  ? __se_sys_renameat2+0x18a/0x2c0
[  218.537033][ T7709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.537044][ T7709]  do_syscall_64+0x15f/0x560
[  218.537054][ T7709]  ? trace_irq_disable+0x3b/0x140
[  218.537065][ T7709]  ? clear_bhb_loop+0x40/0x90
[  218.537077][ T7709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.537087][ T7709] RIP: 0033:0x7f8ef104d68e
[  218.537097][ T7709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  218.537106][ T7709] RSP: 002b:00007f8eef2ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  218.537117][ T7709] RAX: ffffffffffffffda RBX: 00007f8eef2de6c0 RCX: 00007f8ef104d68e
[  218.537125][ T7709] RDX: 000000000000000f RSI: 00007f8eef2de0a0 RDI: 0000000000000005
[  218.537131][ T7709] RBP: 00007f8eef2de090 R08: 0000000000000000 R09: 0000000000000000
[  218.537137][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.537143][ T7709] R13: 00007f8ef1306038 R14: 00007f8ef1305fa0 R15: 00007ffc733f01e8
[  218.537158][ T7709]  </TASK>
[  218.561535][   T32] usb 3-1: device descriptor read/64, error -71
[  218.728459][ T5624] usb 1-1: USB disconnect, device number 41
[  218.790990][ T7667] vhci_hcd: connection reset by peer
[  218.803433][   T32] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  218.837968][   T13] vhci_hcd vhci_hcd.0: stop threads
[  218.838942][   T13] vhci_hcd vhci_hcd.0: release socket
[  218.844842][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  218.930912][   T32] usb 3-1: device descriptor read/64, error -71
[  219.042816][   T32] usb usb3-port1: attempt power cycle
[  219.403576][   T32] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  219.429436][   T32] usb 3-1: device descriptor read/8, error -71
[  219.670937][   T32] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  219.706229][   T32] usb 3-1: device descriptor read/8, error -71
[  219.756636][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.757176][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.812959][   T32] usb usb3-port1: unable to enumerate USB device
[  220.060926][   T32] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  220.220938][   T32] usb 1-1: Using ep0 maxpacket: 32
[  220.223756][   T32] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  220.223787][   T32] usb 1-1: config 0 interface 0 has no altsetting 0
[  220.223818][   T32] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  220.223840][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.233896][   T32] usb 1-1: config 0 descriptor??
[  220.453591][   T32] usbhid 1-1:0.0: can't add hid device: -71
[  220.453711][   T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  220.476126][   T32] usb 1-1: USB disconnect, device number 42
[  220.618111][   T38] audit: type=1326 audit(1779429720.177:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.1.674" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666f45ce59 code=0x7fc00000
[  220.807860][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  220.981175][   T32] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  221.141501][   T32] usb 1-1: Using ep0 maxpacket: 32
[  221.146500][   T32] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  221.146532][   T32] usb 1-1: config 0 interface 0 has no altsetting 0
[  221.146564][   T32] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  221.146585][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.158108][   T32] usb 1-1: config 0 descriptor??
[  221.217204][ T5714] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  221.372983][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.374757][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.597367][   T32] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0
[  221.597403][   T32] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0
[  221.597430][   T32] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0
[  221.597456][   T32] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0
[  221.597482][   T32] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0
[  221.628617][   T32] corsair-cpro 0003:1B1C:0C10.001C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[  222.004660][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.005857][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.007849][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.007947][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.111883][   T38] audit: type=1326 audit(1779429721.677:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.2.693" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b3c9fce59 code=0x0
[  222.113358][   T32] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -110
[  222.120404][   T32] usb 1-1: USB disconnect, device number 43
[  222.451719][    T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  222.464254][ T7813] program syz.0.696 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.600958][    T9] usb 3-1: Using ep0 maxpacket: 32
[  222.605129][    T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  222.605154][    T9] usb 3-1: config 0 has no interface number 0
[  222.607579][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  222.607607][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.607626][    T9] usb 3-1: Product: syz
[  222.607640][    T9] usb 3-1: Manufacturer: syz
[  222.607654][    T9] usb 3-1: SerialNumber: syz
[  222.647463][ T7819] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in;
[  222.647463][ T7819]    program syz.1.699 not setting count and/or reply_len properly
[  222.677001][ T7820] tipc: Started in network mode
[  222.677037][ T7820] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  222.681963][ T7820] tipc: Enabled bearer <eth:macvtap0>, priority 6
[  222.707493][    T9] usb 3-1: config 0 descriptor??
[  222.755753][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.756258][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.831352][ T5713] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  222.844464][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'.
[  222.981238][ T5713] usb 1-1: Using ep0 maxpacket: 8
[  222.983243][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.983292][ T5713] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  222.983304][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.988465][ T5713] usb 1-1: config 0 descriptor??
[  223.038777][ T5713] gspca_main: vc032x-2.14.0 probing 046d:0892
[  223.262106][   T32] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  223.421676][   T32] usb 4-1: config 150 has an invalid interface number: 204 but max is 2
[  223.421704][   T32] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  223.421722][   T32] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3
[  223.421741][   T32] usb 4-1: config 150 has no interface number 0
[  223.421771][   T32] usb 4-1: config 150 interface 204 has no altsetting 0
[  223.427716][   T32] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  223.427744][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.427763][   T32] usb 4-1: Product: syz
[  223.427776][   T32] usb 4-1: Manufacturer: syz
[  223.427790][   T32] usb 4-1: SerialNumber: syz
[  223.531906][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  223.707397][ T5714] tipc: Node number set to 9480874
[  223.747963][ T5713] gspca_vc032x: reg_w err -110
[  223.748118][ T5713] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  223.988685][ T5713] usb 1-1: USB disconnect, device number 44
[  224.604230][ T7849] FAULT_INJECTION: forcing a failure.
[  224.604230][ T7849] name failslab, interval 1, probability 0, space 0, times 0
[  224.604319][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.1.708 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  224.604347][ T7849] Tainted: [L]=SOFTLOCKUP
[  224.604354][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  224.604366][ T7849] Call Trace:
[  224.604374][ T7849]  <TASK>
[  224.604382][ T7849]  dump_stack_lvl+0xe8/0x150
[  224.604411][ T7849]  should_fail_ex+0x46b/0x600
[  224.604441][ T7849]  should_failslab+0xa8/0x100
[  224.604463][ T7849]  __kmalloc_noprof+0xdf/0x7b0
[  224.604483][ T7849]  ? sock_kmalloc+0xd6/0x160
[  224.604511][ T7849]  sock_kmalloc+0xd6/0x160
[  224.604535][ T7849]  af_alg_sendmsg+0x10e1/0x21f0
[  224.604562][ T7849]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  224.604602][ T7849]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  224.604627][ T7849]  ? lockdep_hardirqs_on+0x7a/0x110
[  224.604652][ T7849]  ? skcipher_check_key+0x173/0x1e0
[  224.604674][ T7849]  ? skcipher_sendmsg_nokey+0x59/0x120
[  224.604695][ T7849]  ? __pfx_skcipher_sendmsg_nokey+0x10/0x10
[  224.604714][ T7849]  sock_sendmsg_nosec+0x112/0x150
[  224.604742][ T7849]  __sys_sendto+0x402/0x590
[  224.604766][ T7849]  ? __pfx___sys_sendto+0x10/0x10
[  224.604809][ T7849]  ? ksys_write+0x248/0x270
[  224.604831][ T7849]  ? __pfx_ksys_write+0x10/0x10
[  224.604856][ T7849]  __x64_sys_sendto+0xde/0x100
[  224.604875][ T7849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.604896][ T7849]  do_syscall_64+0x15f/0x560
[  224.604913][ T7849]  ? trace_irq_disable+0x3b/0x140
[  224.604933][ T7849]  ? clear_bhb_loop+0x40/0x90
[  224.604954][ T7849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.604971][ T7849] RIP: 0033:0x7f666f45ce59
[  224.604989][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.605005][ T7849] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  224.605025][ T7849] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  224.605039][ T7849] RDX: 703d59595f6742a8 RSI: 0000200000000440 RDI: 0000000000000006
[  224.605053][ T7849] RBP: 00007f666d6b6090 R08: 0000000000000000 R09: 0000000000000000
[  224.605065][ T7849] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  224.605076][ T7849] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  224.605105][ T7849]  </TASK>
[  225.086947][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.087865][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.187837][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  225.188184][    T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  225.243079][    T9] usb 3-1: USB disconnect, device number 44
[  225.747647][ T7869] 9p: Bad value for 'rfdno'
[  225.780950][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  225.856515][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.858967][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.921059][ T5714] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  225.931336][    T9] usb 3-1: Using ep0 maxpacket: 16
[  225.934077][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.934126][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  225.934151][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  225.934178][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  225.934199][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  225.935475][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  225.935499][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  225.935518][    T9] usb 3-1: Manufacturer: syz
[  225.948265][    T9] usb 3-1: config 0 descriptor??
[  226.065616][   T32] usb 4-1: USB disconnect, device number 52
[  226.145035][ T5714] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  226.145064][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.145083][ T5714] usb 1-1: Product: syz
[  226.145096][ T5714] usb 1-1: Manufacturer: syz
[  226.145110][ T5714] usb 1-1: SerialNumber: syz
[  226.150667][ T5714] usb 1-1: config 0 descriptor??
[  226.220926][    T9] rc_core: IR keymap rc-hauppauge not found
[  226.220945][    T9] Registered IR keymap rc-empty
[  226.228544][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.241018][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.274632][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  226.279455][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27
[  226.283798][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.301169][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.324241][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.341131][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.364910][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.381333][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.386004][ T5714] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  226.401570][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.422750][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.441611][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.460972][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  226.471024][   T32] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  226.545907][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  226.545932][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  226.631406][   T32] usb 4-1: device descriptor read/64, error -71
[  226.639205][    T9] usb 3-1: USB disconnect, device number 45
[  226.891113][   T32] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  226.936056][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.936860][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.020964][   T32] usb 4-1: device descriptor read/64, error -71
[  227.142674][   T32] usb usb4-port1: attempt power cycle
[  227.192294][ T7889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'.
[  227.257804][ T7892] input: syz0 as /devices/virtual/input/input28
[  227.399735][ T5714] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  227.456065][ T7895] tipc: Invalid UDP bearer configuration
[  227.456110][ T7895] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  227.490972][   T32] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  227.511477][   T32] usb 4-1: device descriptor read/8, error -71
[  227.594359][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.594919][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.612659][    T9] usb 1-1: USB disconnect, device number 45
[  227.760914][   T32] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  227.781403][   T32] usb 4-1: device descriptor read/8, error -71
[  227.891294][   T32] usb usb4-port1: unable to enumerate USB device
[  228.184425][   T32] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  228.267329][ T7916] input: syz0 as /devices/virtual/input/input29
[  228.342748][   T32] usb 3-1: Using ep0 maxpacket: 8
[  228.350483][   T32] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  228.350510][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.350529][   T32] usb 3-1: Product: syz
[  228.350542][   T32] usb 3-1: Manufacturer: syz
[  228.350554][   T32] usb 3-1: SerialNumber: syz
[  228.400732][   T32] usb 3-1: config 0 descriptor??
[  228.418378][   T32] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  228.910913][ T5704] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  229.064224][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.064276][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  229.065635][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.065659][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  229.065678][ T5704] usb 1-1: SerialNumber: syz
[  229.122313][ T5704] hub 1-1:1.0: bad descriptor, ignoring hub
[  229.122342][ T5704] hub 1-1:1.0: probe with driver hub failed with error -5
[  229.124818][ T5704] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  229.124836][ T5704] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  229.124870][ T5704] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  229.421633][   T32] gspca_sonixj: reg_w1 err -71
[  229.435842][ T5788] usb 1-1: USB disconnect, device number 46
[  229.471048][   T32] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  229.474701][   T32] usb 3-1: USB disconnect, device number 46
[  229.510923][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  229.660887][    T9] usb 4-1: Using ep0 maxpacket: 16
[  229.663383][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.663430][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  229.663445][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  229.663459][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  229.663472][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.664512][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  229.664537][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  229.664548][    T9] usb 4-1: Manufacturer: syz
[  229.667393][    T9] usb 4-1: config 0 descriptor??
[  229.941187][    T9] rc_core: IR keymap rc-hauppauge not found
[  229.941200][    T9] Registered IR keymap rc-empty
[  229.946135][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  229.970534][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  229.983400][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  229.987955][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30
[  230.023139][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.041239][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.061404][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.083452][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.116267][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.132579][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.147621][ T5704] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  230.156589][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.171367][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.191302][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.211319][    T9] mceusb 4-1:0.0: Error: mce write urb status = -71
[  230.232990][    T9] mceusb 4-1:0.0: Registered 鲾⨜঩᭚赐誃菱᪛钰䝑쥐뮒壋임汰뾊뤫筫 with mce emulator interface version 1
[  230.233014][    T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  230.259560][    T9] usb 4-1: USB disconnect, device number 57
[  230.261100][   T32] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  230.291021][ T5704] usb 1-1: Using ep0 maxpacket: 32
[  230.293922][ T5704] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  230.293945][ T5704] usb 1-1: config 0 has no interface number 0
[  230.293982][ T5704] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  230.293994][ T5704] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.294006][ T5704] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  230.296157][ T5704] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  230.296182][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.296201][ T5704] usb 1-1: Product: syz
[  230.296212][ T5704] usb 1-1: Manufacturer: syz
[  230.296219][ T5704] usb 1-1: SerialNumber: syz
[  230.299699][ T5704] usb 1-1: config 0 descriptor??
[  230.405038][ T7929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  230.408764][ T5704] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  230.410971][   T32] usb 3-1: Using ep0 maxpacket: 32
[  230.414013][   T32] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  230.414036][   T32] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  230.414055][   T32] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  230.414099][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  230.414120][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  230.414142][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.414162][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  230.414182][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  230.414219][   T32] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  230.414240][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.578488][   T32] usb 3-1: config 0 descriptor??
[  230.688827][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.690584][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.824428][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.859096][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.933986][   T32] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  230.962241][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.976922][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.018395][   T32] usb 3-1: USB disconnect, device number 47
[  231.051415][   T32] usblp0: removed
[  231.115955][ T5704] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -12
[  231.131972][ T5704] usb 1-1: USB disconnect, device number 47
[  231.169352][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.270931][    T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  231.423478][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  231.423519][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  231.423559][    T9] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[  231.423580][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.430959][   T32] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  231.485442][    T9] usb 4-1: config 0 descriptor??
[  231.486143][ T7937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  231.592907][   T32] usb 3-1: Using ep0 maxpacket: 16
[  231.600187][   T32] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  231.600214][   T32] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  231.600234][   T32] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  231.600302][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  231.600321][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  231.600343][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  231.600363][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  231.600384][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  231.600425][   T32] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  231.600446][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.613821][   T32] usb 3-1: config 0 descriptor??
[  231.685589][   T32] port100 3-1:0.0: NFC: Could not get supported command types
[  231.721647][ T5714] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  231.734691][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  231.734803][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  231.794413][    T9] usb 4-1: USB disconnect, device number 58
[  231.847926][ T7947] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.877369][   T32] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x054C pid 0x06C1
[  231.896790][ T5714] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  231.896842][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.896859][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.896870][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  231.896893][ T5714] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  231.896904][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.906600][   T32] usb 3-1: USB disconnect, device number 48
[  231.933071][ T5714] usb 1-1: config 0 descriptor??
[  231.962933][   T32] usblp0: removed
[  232.396487][ T5714] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd
[  232.417865][ T5714] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  232.576253][ T5704] usb 1-1: USB disconnect, device number 48
[  232.830090][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.751'.
[  232.850956][ T5714] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  232.905105][ T7965] netlink: 64 bytes leftover after parsing attributes in process `syz.1.752'.
[  233.003092][ T5714] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[  233.003118][ T5714] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  233.003136][ T5714] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3
[  233.003155][ T5714] usb 3-1: config 150 has no interface number 0
[  233.003172][ T5714] usb 3-1: config 150 interface 204 has no altsetting 0
[  233.010394][ T5714] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  233.010424][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.010443][ T5714] usb 3-1: Product: syz
[  233.010457][ T5714] usb 3-1: Manufacturer: syz
[  233.010470][ T5714] usb 3-1: SerialNumber: syz
[  233.051397][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.053812][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.261189][ T5623] block nbd1: Receive control failed (result -32)
[  233.480954][   T32] usb 1-1: new low-speed USB device number 49 using dummy_hcd
[  233.630954][   T32] usb 1-1: Invalid ep0 maxpacket: 32
[  233.762725][   T32] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  233.920892][   T32] usb 1-1: Invalid ep0 maxpacket: 32
[  233.921342][   T32] usb usb1-port1: attempt power cycle
[  234.055218][ T7980] FAULT_INJECTION: forcing a failure.
[  234.055218][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.055264][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.3.757 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  234.055289][ T7980] Tainted: [L]=SOFTLOCKUP
[  234.055295][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  234.055308][ T7980] Call Trace:
[  234.055315][ T7980]  <TASK>
[  234.055324][ T7980]  dump_stack_lvl+0xe8/0x150
[  234.055352][ T7980]  should_fail_ex+0x46b/0x600
[  234.055379][ T7980]  _copy_from_iter+0x1d3/0x1670
[  234.055410][ T7980]  ? trace_kmem_cache_alloc+0x29/0xe0
[  234.055428][ T7980]  ? __alloc_skb+0x27d/0x7d0
[  234.055447][ T7980]  ? __pfx__copy_from_iter+0x10/0x10
[  234.055469][ T7980]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  234.055487][ T7980]  ? __alloc_skb+0x27d/0x7d0
[  234.055509][ T7980]  ? netlink_sendmsg+0x650/0xb40
[  234.055529][ T7980]  ? skb_put+0x11b/0x210
[  234.055550][ T7980]  netlink_sendmsg+0x6c0/0xb40
[  234.055580][ T7980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.055604][ T7980]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  234.055637][ T7980]  ? aa_sock_msg_perm+0x122/0x200
[  234.055661][ T7980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.055682][ T7980]  sock_sendmsg_nosec+0x112/0x150
[  234.055712][ T7980]  ____sys_sendmsg+0x55c/0x870
[  234.055738][ T7980]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.055768][ T7980]  ? import_iovec+0x73/0xa0
[  234.055795][ T7980]  ___sys_sendmsg+0x2a5/0x360
[  234.055816][ T7980]  ? __lock_acquire+0x6b5/0x2d10
[  234.055841][ T7980]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.055894][ T7980]  ? __fget_files+0x2a/0x420
[  234.055920][ T7980]  ? __fget_files+0x3a6/0x420
[  234.055955][ T7980]  __x64_sys_sendmsg+0x1c3/0x2a0
[  234.055979][ T7980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.056009][ T7980]  ? __pfx_ksys_write+0x10/0x10
[  234.056044][ T7980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.056066][ T7980]  do_syscall_64+0x15f/0x560
[  234.056085][ T7980]  ? trace_irq_disable+0x3b/0x140
[  234.056105][ T7980]  ? clear_bhb_loop+0x40/0x90
[  234.056127][ T7980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.056147][ T7980] RIP: 0033:0x7f8ef108ce59
[  234.056165][ T7980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.056182][ T7980] RSP: 002b:00007f8eef2de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.056202][ T7980] RAX: ffffffffffffffda RBX: 00007f8ef1305fa0 RCX: 00007f8ef108ce59
[  234.056217][ T7980] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  234.056229][ T7980] RBP: 00007f8eef2de090 R08: 0000000000000000 R09: 0000000000000000
[  234.056241][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.056253][ T7980] R13: 00007f8ef1306038 R14: 00007f8ef1305fa0 R15: 00007ffc733f01e8
[  234.056280][ T7980]  </TASK>
[  234.293798][   T32] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  234.335507][   T32] usb 1-1: Invalid ep0 maxpacket: 32
[  234.471272][   T32] usb 1-1: new low-speed USB device number 52 using dummy_hcd
[  234.495471][   T32] usb 1-1: Invalid ep0 maxpacket: 32
[  234.495827][   T32] usb usb1-port1: unable to enumerate USB device
[  234.711899][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  234.865869][    T9] usb 4-1: Using ep0 maxpacket: 32
[  234.883497][    T9] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  234.883524][    T9] usb 4-1: config 0 has no interface number 0
[  234.883568][    T9] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  234.883593][    T9] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.883615][    T9] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  234.913690][    T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  234.913717][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.913737][    T9] usb 4-1: Product: syz
[  234.913750][    T9] usb 4-1: Manufacturer: syz
[  234.913763][    T9] usb 4-1: SerialNumber: syz
[  234.987090][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.987569][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.990742][    T9] usb 4-1: config 0 descriptor??
[  235.014450][ T7984] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  235.244756][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.263848][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.318968][    T9] usb-storage 4-1:0.20: USB Mass Storage device detected
[  235.343145][    T9] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  235.480391][    T9] scsi host1: usb-storage 4-1:0.20
[  235.701376][ T5714] usb 3-1: USB disconnect, device number 49
[  236.010179][    T9] usb 4-1: USB disconnect, device number 59
[  238.122238][ T5704] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  238.357018][ T5704] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  238.357070][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.357095][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.357114][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.357150][ T5704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.357172][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.434767][ T5704] usb 1-1: config 0 descriptor??
[  238.756108][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.756639][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.850368][ T5704] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd
[  238.893549][ T5704] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  239.049239][ T5704] usb 1-1: USB disconnect, device number 53
[  239.521836][   T32] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  239.671256][   T32] usb 3-1: Using ep0 maxpacket: 8
[  239.679851][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[  239.695865][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  239.695883][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  239.695895][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  239.695906][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  239.695920][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  239.695931][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  239.695942][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  239.705206][   T32] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  239.705235][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.705253][   T32] usb 3-1: Product: syz
[  239.705279][   T32] usb 3-1: Manufacturer: syz
[  239.705292][   T32] usb 3-1: SerialNumber: syz
[  239.735652][   T32] usb 3-1: config 0 descriptor??
[  239.736974][ T8019] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  239.776179][ T5704] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  239.844045][   T32] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  239.944006][ T8019] warning: `syz.2.770' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  239.950873][ T5704] usb 4-1: Using ep0 maxpacket: 16
[  239.968714][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.968746][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.968767][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  239.968807][ T5704] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  239.968829][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.056520][ T5704] usb 4-1: config 0 descriptor??
[  240.131833][   T32] usb 3-1: USB disconnect, device number 50
[  240.181055][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  240.187119][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.353238][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.353268][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  240.353503][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.368587][    T9] usb 1-1: config 0 descriptor??
[  240.396296][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  240.479391][ T5704] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001F/input/input34
[  240.625227][   T38] audit: type=1800 audit(1779429740.157:7): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.778" name="file1" dev="tmpfs" ino=802 res=0 errno=0
[  240.626342][ T5704] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  240.743613][ T5704] usb 1-1: USB disconnect, device number 54
[  240.881911][ T5714] usb 4-1: USB disconnect, device number 60
[  241.240988][ T5704] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  241.383124][ T5704] usb 1-1: device descriptor read/64, error -71
[  241.630965][ T5704] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  241.682011][   T32] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  241.771221][ T5704] usb 1-1: device descriptor read/64, error -71
[  241.785366][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.785895][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.830924][   T32] usb 3-1: Using ep0 maxpacket: 32
[  241.832813][   T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  241.832841][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  241.832858][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  241.832870][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  241.834977][   T32] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  241.835003][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.835018][   T32] usb 3-1: Product: syz
[  241.835025][   T32] usb 3-1: Manufacturer: syz
[  241.835032][   T32] usb 3-1: SerialNumber: syz
[  241.842381][   T32] usb 3-1: config 0 descriptor??
[  241.928367][ T5704] usb usb1-port1: attempt power cycle
[  242.122905][    T9] usb 3-1: USB disconnect, device number 51
[  242.291262][ T5704] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  242.313729][ T5704] usb 1-1: device descriptor read/8, error -71
[  242.460902][   T32] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  242.561208][ T5704] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  242.589232][ T5704] usb 1-1: device descriptor read/8, error -71
[  242.618206][   T32] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  242.618228][   T32] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  242.618238][   T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  242.618265][   T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  242.618278][   T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  242.662564][   T32] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  242.662590][   T32] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  242.662609][   T32] usb 4-1: Product: syz
[  242.662622][   T32] usb 4-1: Manufacturer: syz
[  242.689237][   T32] cdc_wdm 4-1:1.0: skipping garbage
[  242.689258][   T32] cdc_wdm 4-1:1.0: skipping garbage
[  242.689860][   T32] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  242.718124][ T5704] usb usb1-port1: unable to enumerate USB device
[  242.982389][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.983035][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.097369][ T8064] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.097399][ T8064] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  243.097816][ T8064] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.097835][ T8064] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  243.134770][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'.
[  243.317700][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.318274][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.680706][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.693891][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.000934][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  244.100959][ T5713] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  244.160916][    T9] usb 1-1: Using ep0 maxpacket: 16
[  244.169883][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  244.182004][    T9] usb 1-1: config 1 has an invalid interface number: 147 but max is 0
[  244.182030][    T9] usb 1-1: config 1 has no interface number 0
[  244.182061][    T9] usb 1-1: config 1 interface 147 has no altsetting 0
[  244.185964][    T9] usb 1-1: New USB device found, idVendor=0ca6, idProduct=a050, bcdDevice= 2.95
[  244.185991][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.186009][    T9] usb 1-1: Product: syz
[  244.186022][    T9] usb 1-1: Manufacturer: syz
[  244.186036][    T9] usb 1-1: SerialNumber: syz
[  244.265449][ T5713] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  244.265504][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.265583][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.265601][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  244.265640][ T5713] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  244.265658][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.329652][ T5713] usb 3-1: config 0 descriptor??
[  244.477833][    T9] usb 1-1: USB disconnect, device number 59
[  244.739127][ T5713] usbhid 3-1:0.0: can't add hid device: -71
[  244.739239][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  244.769512][ T5713] usb 3-1: USB disconnect, device number 52
[  245.383329][ T5722] usb 4-1: USB disconnect, device number 61
[  245.431335][ T8095] tmpfs: Bad value for 'mpol'
[  245.520194][ T8102] capability: warning: `syz.3.800' uses deprecated v2 capabilities in a way that may be insecure
[  245.886619][ T8109] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  246.174182][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  246.243679][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'.
[  246.351098][ T8120] pvfs2: Unknown parameter '����f��U.�0.�@p|��.�("Bļ�s"��smB�%
[  246.351098][ T8120] <�>�_��;��a�*-N���J�px�n���1N�Փk+�`'
[  246.500590][ T8123] syzkaller1: entered promiscuous mode
[  246.500614][ T8123] syzkaller1: entered allmulticast mode
[  246.565752][ T5722] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  246.767958][ T5722] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  246.768011][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.768035][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.768054][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  246.768092][ T5722] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  246.768112][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.799630][ T5722] usb 3-1: config 0 descriptor??
[  247.284030][ T5722] usbhid 3-1:0.0: can't add hid device: -71
[  247.284157][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  247.473824][ T5722] usb 3-1: USB disconnect, device number 53
[  248.162881][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.163763][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.461287][ T5714] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  248.772879][ T5714] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  248.772908][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.905890][ T5714] usb 1-1: config 0 descriptor??
[  249.701402][ T5624] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  249.827666][ T5714] usb 1-1: Cannot set autoneg
[  249.831214][ T5714] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  249.840499][ T5714] usb 1-1: USB disconnect, device number 60
[  249.893377][ T5624] usb 3-1: config 1 interface 0 has no altsetting 0
[  249.895095][ T5624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  249.895111][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.895122][ T5624] usb 3-1: Product: syz
[  249.895129][ T5624] usb 3-1: Manufacturer: 䴤ꞎៜ䰋ꐺ훩梍퐱붭֬퇬驄ﴳ薥﫪鴧谳噒႕卸孂醭
[  249.895138][ T5624] usb 3-1: SerialNumber: syz
[  250.099065][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.099644][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.245712][ T5624] usb 3-1: USB disconnect, device number 54
[  250.588512][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.603903][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.870887][ T5624] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  250.918146][ T8133] syz.2.812 (8133) used greatest stack depth: 17888 bytes left
[  251.023135][ T5624] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  251.023164][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.041843][ T5624] usb 1-1: config 0 descriptor??
[  251.092630][ T8171] FAULT_INJECTION: forcing a failure.
[  251.092630][ T8171] name failslab, interval 1, probability 0, space 0, times 0
[  251.092660][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.2.825 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  251.092675][ T8171] Tainted: [L]=SOFTLOCKUP
[  251.092679][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  251.092689][ T8171] Call Trace:
[  251.092696][ T8171]  <TASK>
[  251.092701][ T8171]  dump_stack_lvl+0xe8/0x150
[  251.092721][ T8171]  should_fail_ex+0x46b/0x600
[  251.092736][ T8171]  should_failslab+0xa8/0x100
[  251.092749][ T8171]  __kmalloc_cache_noprof+0x84/0x690
[  251.092760][ T8171]  ? sctp_add_bind_addr+0x8c/0x370
[  251.092779][ T8171]  sctp_add_bind_addr+0x8c/0x370
[  251.092795][ T8171]  sctp_copy_local_addr_list+0x314/0x4f0
[  251.092813][ T8171]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  251.092828][ T8171]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  251.092844][ T8171]  ? sctp_v6_is_any+0x64/0x80
[  251.092855][ T8171]  ? sctp_copy_one_addr+0x93/0x360
[  251.092872][ T8171]  sctp_bind_addr_copy+0xb3/0x3c0
[  251.092887][ T8171]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  251.092902][ T8171]  sctp_connect_new_asoc+0x2ff/0x6b0
[  251.092916][ T8171]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  251.092929][ T8171]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  251.092944][ T8171]  ? lockdep_hardirqs_on+0x7a/0x110
[  251.092955][ T8171]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  251.092968][ T8171]  ? security_sctp_bind_connect+0x7e/0x2c0
[  251.092980][ T8171]  sctp_sendmsg+0x14f2/0x29b0
[  251.092998][ T8171]  ? __pfx_sctp_sendmsg+0x10/0x10
[  251.093014][ T8171]  ? aa_sk_perm+0x703/0x950
[  251.093030][ T8171]  ? __pfx_aa_sk_perm+0x10/0x10
[  251.093041][ T8171]  ? sock_rps_record_flow+0x19/0x350
[  251.093058][ T8171]  ? inet_sendmsg+0x2f4/0x370
[  251.093073][ T8171]  ? __pfx_inet_sendmsg+0x10/0x10
[  251.093087][ T8171]  sock_sendmsg_nosec+0xf9/0x150
[  251.093103][ T8171]  __sys_sendto+0x402/0x590
[  251.093116][ T8171]  ? __pfx___sys_sendto+0x10/0x10
[  251.093138][ T8171]  ? ksys_write+0x248/0x270
[  251.093150][ T8171]  ? __pfx_ksys_write+0x10/0x10
[  251.093163][ T8171]  __x64_sys_sendto+0xde/0x100
[  251.093173][ T8171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.093185][ T8171]  do_syscall_64+0x15f/0x560
[  251.093195][ T8171]  ? trace_irq_disable+0x3b/0x140
[  251.093205][ T8171]  ? clear_bhb_loop+0x40/0x90
[  251.093218][ T8171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.093227][ T8171] RIP: 0033:0x7f2b3c9fce59
[  251.093237][ T8171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.093246][ T8171] RSP: 002b:00007f2b3ac4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  251.093257][ T8171] RAX: ffffffffffffffda RBX: 00007f2b3cc75fa0 RCX: 00007f2b3c9fce59
[  251.093264][ T8171] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000007
[  251.093271][ T8171] RBP: 00007f2b3ac4e090 R08: 000020000005ffe4 R09: 000000000000001c
[  251.093278][ T8171] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  251.093284][ T8171] R13: 00007f2b3cc76038 R14: 00007f2b3cc75fa0 R15: 00007ffe45f391c8
[  251.093300][ T8171]  </TASK>
[  251.518842][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'.
[  251.518882][ T8174] block nbd2: Unsupported socket: should be TCP or UNIX.
[  251.581148][ T5788] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  251.720904][    T9] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  251.732649][ T5788] usb 3-1: config 1 interface 0 has no altsetting 0
[  251.734756][ T5788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  251.734775][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.734785][ T5788] usb 3-1: Product: syz
[  251.734792][ T5788] usb 3-1: Manufacturer: 䴤ꞎៜ䰋ꐺ훩梍퐱붭֬퇬驄ﴳ薥﫪鴧谳噒႕卸孂醭
[  251.734856][ T5788] usb 3-1: SerialNumber: syz
[  251.894771][    T9] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  251.894797][    T9] usb 4-1: config 0 has no interface number 0
[  251.894840][    T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  251.894865][    T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  251.894886][    T9] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 53793, setting to 64
[  251.955444][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  251.955476][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  251.955495][    T9] usb 4-1: Product: syz
[  251.955508][    T9] usb 4-1: Manufacturer: syz
[  251.955521][    T9] usb 4-1: SerialNumber: syz
[  251.994759][    T9] usb 4-1: config 0 descriptor??
[  251.996790][ T8176] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  252.019934][    T9] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  252.025357][    T9] xpad 4-1:0.237: probe with driver xpad failed with error -90
[  252.164529][ T5624] usb 1-1: Cannot set autoneg
[  252.164874][ T5624] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  252.193692][ T5624] usb 1-1: USB disconnect, device number 61
[  252.228022][   T32] usb 4-1: USB disconnect, device number 62
[  252.535209][ T5788] usb 3-1: USB disconnect, device number 55
[  253.121026][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  253.190363][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.193644][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.270861][    T9] usb 1-1: Using ep0 maxpacket: 8
[  253.279176][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  253.279204][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.279223][    T9] usb 1-1: Product: syz
[  253.279237][    T9] usb 1-1: Manufacturer: syz
[  253.279251][    T9] usb 1-1: SerialNumber: syz
[  253.328162][    T9] usb 1-1: config 0 descriptor??
[  253.540641][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  253.789051][ T8207] FAULT_INJECTION: forcing a failure.
[  253.789051][ T8207] name failslab, interval 1, probability 0, space 0, times 0
[  253.789092][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.1.837 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  253.789126][ T8207] Tainted: [L]=SOFTLOCKUP
[  253.789133][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  253.789144][ T8207] Call Trace:
[  253.789152][ T8207]  <TASK>
[  253.789160][ T8207]  dump_stack_lvl+0xe8/0x150
[  253.789199][ T8207]  should_fail_ex+0x46b/0x600
[  253.789226][ T8207]  should_failslab+0xa8/0x100
[  253.789249][ T8207]  kmem_cache_alloc_noprof+0x87/0x680
[  253.789269][ T8207]  ? skb_clone+0x212/0x3a0
[  253.789296][ T8207]  skb_clone+0x212/0x3a0
[  253.789322][ T8207]  __netlink_deliver_tap+0x424/0x8b0
[  253.789356][ T8207]  ? netlink_deliver_tap+0x2e/0x1b0
[  253.789386][ T8207]  netlink_deliver_tap+0x19c/0x1b0
[  253.789413][ T8207]  netlink_unicast+0x754/0x920
[  253.789444][ T8207]  netlink_sendmsg+0x813/0xb40
[  253.789477][ T8207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.789502][ T8207]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  253.789539][ T8207]  ? aa_sock_msg_perm+0x122/0x200
[  253.789566][ T8207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.789587][ T8207]  sock_sendmsg_nosec+0x112/0x150
[  253.789616][ T8207]  ____sys_sendmsg+0x55c/0x870
[  253.789643][ T8207]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.789674][ T8207]  ? import_iovec+0x73/0xa0
[  253.789703][ T8207]  ___sys_sendmsg+0x2a5/0x360
[  253.789723][ T8207]  ? __lock_acquire+0x6b5/0x2d10
[  253.789749][ T8207]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.789804][ T8207]  ? __fget_files+0x2a/0x420
[  253.789836][ T8207]  ? __fget_files+0x3a6/0x420
[  253.789872][ T8207]  __x64_sys_sendmsg+0x1c3/0x2a0
[  253.789896][ T8207]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  253.789928][ T8207]  ? __pfx_ksys_write+0x10/0x10
[  253.789961][ T8207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.789982][ T8207]  do_syscall_64+0x15f/0x560
[  253.790000][ T8207]  ? trace_irq_disable+0x3b/0x140
[  253.790021][ T8207]  ? clear_bhb_loop+0x40/0x90
[  253.790043][ T8207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.790061][ T8207] RIP: 0033:0x7f666f45ce59
[  253.790079][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.790094][ T8207] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.790114][ T8207] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  253.790126][ T8207] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  253.790137][ T8207] RBP: 00007f666d6b6090 R08: 0000000000000000 R09: 0000000000000000
[  253.790147][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.790159][ T8207] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  253.790182][ T8207]  </TASK>
[  254.162503][ T8214] FAULT_INJECTION: forcing a failure.
[  254.162503][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.162537][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.1.839 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  254.162564][ T8214] Tainted: [L]=SOFTLOCKUP
[  254.162571][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  254.162583][ T8214] Call Trace:
[  254.162591][ T8214]  <TASK>
[  254.162599][ T8214]  dump_stack_lvl+0xe8/0x150
[  254.162632][ T8214]  should_fail_ex+0x46b/0x600
[  254.162659][ T8214]  _copy_to_user+0x31/0xb0
[  254.162689][ T8214]  simple_read_from_buffer+0xe1/0x170
[  254.162723][ T8214]  proc_fail_nth_read+0x1be/0x230
[  254.162755][ T8214]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.162787][ T8214]  ? rw_verify_area+0x2ac/0x4e0
[  254.162805][ T8214]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.162832][ T8214]  vfs_read+0x212/0xa80
[  254.162855][ T8214]  ? __pfx_vfs_read+0x10/0x10
[  254.162876][ T8214]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  254.162895][ T8214]  ? lockdep_hardirqs_on+0x7a/0x110
[  254.162914][ T8214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  254.162932][ T8214]  ? mutex_lock_nested+0x152/0x1d0
[  254.162957][ T8214]  ? fdget_pos+0x252/0x320
[  254.162990][ T8214]  ksys_read+0x156/0x270
[  254.163010][ T8214]  ? __pfx_ksys_read+0x10/0x10
[  254.163035][ T8214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.163054][ T8214]  do_syscall_64+0x15f/0x560
[  254.163073][ T8214]  ? trace_irq_disable+0x3b/0x140
[  254.163093][ T8214]  ? clear_bhb_loop+0x40/0x90
[  254.163116][ T8214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.163133][ T8214] RIP: 0033:0x7f666f41d68e
[  254.163151][ T8214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  254.163168][ T8214] RSP: 002b:00007f666d6b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  254.163188][ T8214] RAX: ffffffffffffffda RBX: 00007f666d6b66c0 RCX: 00007f666f41d68e
[  254.163200][ T8214] RDX: 000000000000000f RSI: 00007f666d6b60a0 RDI: 0000000000000003
[  254.163209][ T8214] RBP: 00007f666d6b6090 R08: 0000000000000000 R09: 0000000000000000
[  254.163217][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.163225][ T8214] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  254.163256][ T8214]  </TASK>
[  254.392252][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.392820][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.970619][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.975102][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.193098][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.193660][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.667741][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  255.688613][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.710674][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  255.712367][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  255.792335][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.825445][    T9] usb 1-1: USB disconnect, device number 62
[  255.841068][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.847133][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.856960][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.122445][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.144997][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.160270][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.235608][ T8241] vivid-002: disconnect
[  256.261540][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.263294][ T8237] vivid-002: reconnect
[  256.270588][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.880321][ T8236] syz.1.851 (8236) used greatest stack depth: 17216 bytes left
[  257.143661][ T8258] FAULT_INJECTION: forcing a failure.
[  257.143661][ T8258] name failslab, interval 1, probability 0, space 0, times 0
[  257.143695][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.1.857 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  257.143720][ T8258] Tainted: [L]=SOFTLOCKUP
[  257.143726][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  257.143737][ T8258] Call Trace:
[  257.143745][ T8258]  <TASK>
[  257.143752][ T8258]  dump_stack_lvl+0xe8/0x150
[  257.143780][ T8258]  should_fail_ex+0x46b/0x600
[  257.143807][ T8258]  should_failslab+0xa8/0x100
[  257.143829][ T8258]  kmem_cache_alloc_noprof+0x87/0x680
[  257.143849][ T8258]  ? __pmd_alloc+0xa4/0x5e0
[  257.143872][ T8258]  __pmd_alloc+0xa4/0x5e0
[  257.143895][ T8258]  handle_mm_fault+0xf4f/0x14d0
[  257.143919][ T8258]  ? handle_mm_fault+0xed/0x14d0
[  257.143943][ T8258]  ? __pfx_handle_mm_fault+0x10/0x10
[  257.143974][ T8258]  ? __lock_acquire+0x6b5/0x2d10
[  257.144000][ T8258]  ? lock_mm_and_find_vma+0xa7/0x340
[  257.144035][ T8258]  do_user_addr_fault+0x75b/0x1340
[  257.144073][ T8258]  exc_page_fault+0x6a/0xc0
[  257.144095][ T8258]  asm_exc_page_fault+0x26/0x30
[  257.144113][ T8258] RIP: 0010:rep_movs_alternative+0xf/0xa0
[  257.144140][ T8258] Code: c4 10 e9 14 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e
[  257.144160][ T8258] RSP: 0018:ffffc9001b6bfcb8 EFLAGS: 00050202
[  257.144177][ T8258] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[  257.144191][ T8258] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9001b6bfd70
[  257.144204][ T8258] RBP: ffffc9001b6bfe68 R08: 0000000000000003 R09: 0000000000000004
[  257.144217][ T8258] R10: dffffc0000000000 R11: fffff520036d7fae R12: 1ffff920036d7fa4
[  257.144231][ T8258] R13: 0000200000000000 R14: ffffc9001b6bfd70 R15: 0000200000000000
[  257.144261][ T8258]  _copy_from_user+0x7a/0xb0
[  257.144289][ T8258]  do_sock_getsockopt+0x200/0x7e0
[  257.144317][ T8258]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  257.144352][ T8258]  ? __fget_files+0x3a6/0x420
[  257.144379][ T8258]  ? __fget_files+0x2a/0x420
[  257.144411][ T8258]  __x64_sys_getsockopt+0x1aa/0x250
[  257.144437][ T8258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.144457][ T8258]  do_syscall_64+0x15f/0x560
[  257.144476][ T8258]  ? trace_irq_disable+0x3b/0x140
[  257.144496][ T8258]  ? clear_bhb_loop+0x40/0x90
[  257.144519][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.144538][ T8258] RIP: 0033:0x7f666f45ce59
[  257.144555][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.144570][ T8258] RSP: 002b:00007f666d6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  257.144589][ T8258] RAX: ffffffffffffffda RBX: 00007f666f6d5fa0 RCX: 00007f666f45ce59
[  257.144603][ T8258] RDX: 0000000000000001 RSI: 000000000000011e RDI: 0000000000000003
[  257.144615][ T8258] RBP: 00007f666d6b6090 R08: 0000200000000000 R09: 0000000000000000
[  257.144627][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.144638][ T8258] R13: 00007f666f6d6038 R14: 00007f666f6d5fa0 R15: 00007ffd8d410ec8
[  257.144668][ T8258]  </TASK>
[  257.331000][ T5704] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  257.554231][ T1298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.760913][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  257.914016][    T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  257.914064][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.914085][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.914103][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  257.914137][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  257.914161][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.984701][    T9] usb 1-1: config 0 descriptor??
[  258.121240][ T5704] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  258.237156][ T1298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.272231][ T5704] usb 4-1: not running at top speed; connect to a high speed hub
[  258.282038][ T5704] usb 4-1: config 1 interface 0 has no altsetting 0
[  258.285504][ T5704] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40
[  258.285532][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.285764][ T5704] usb 4-1: Product: syz
[  258.285778][ T5704] usb 4-1: Manufacturer: 轍葵姟ᬣﵱ勵ᄉ眨奴쯵鲊祕㛰컒哂먎淇㐁뀏␧戉鑡픙猯롸䕀㈤ﱿ쨴᧸Ⰰ踋酀⢿歈묛h舥
[  258.285807][ T5704] usb 4-1: SerialNumber: syz
[  258.462313][    T9] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd
[  258.508127][   T60] Bluetooth: hci3: command tx timeout
[  258.738491][    T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  258.826104][    T9] usb 1-1: USB disconnect, device number 63
[  259.025979][ T1298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.368376][ T1298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.577430][   T60] Bluetooth: hci3: command tx timeout
[  260.622885][ T1298] bridge_slave_1: left allmulticast mode
[  260.623147][ T1298] bridge_slave_1: left promiscuous mode
[  260.638202][   T37] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  260.647317][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.819581][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.819613][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.819635][   T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  260.819672][   T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  260.819684][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.830525][   T37] usb 1-1: config 0 descriptor??
[  260.989005][ T1298] bridge_slave_0: left allmulticast mode
[  260.989031][ T1298] bridge_slave_0: left promiscuous mode
[  260.990178][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.231159][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.232108][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.264445][ T1298] dvmrp2: left allmulticast mode
[  261.367681][   T37] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  261.367717][   T37] plantronics 0003:047F:FFFF.0021: collection stack underflow
[  261.367741][   T37] plantronics 0003:047F:FFFF.0021: item 0 2 0 12 parsing failed
[  261.368384][   T37] plantronics 0003:047F:FFFF.0021: parse failed
[  261.368479][   T37] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22
[  261.622482][    T9] usb 1-1: USB disconnect, device number 64
[  262.650972][   T60] Bluetooth: hci3: command tx timeout
[  262.771993][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.831617][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.879045][ T1298] bond0 (unregistering): Released all slaves
[  262.979872][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1
[  263.041706][ T5704] usbhid 4-1:1.0: can't add hid device: -71
[  263.042210][ T5704] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  263.138222][ T5704] usb 4-1: USB disconnect, device number 64
[  263.245000][ T8334] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  263.442489][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.442751][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.443004][ T8231] bridge_slave_0: entered allmulticast mode
[  263.446328][ T8231] bridge_slave_0: entered promiscuous mode
[  263.484701][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.485048][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.485334][ T8231] bridge_slave_1: entered allmulticast mode
[  263.488126][ T8231] bridge_slave_1: entered promiscuous mode
[  263.600928][ T5704] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  263.630747][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.651544][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.804004][ T5704] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  263.804052][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.804065][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.804077][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  263.804099][ T5704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  263.804110][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.812028][ T5704] usb 4-1: config 0 descriptor??
[  264.296992][ T5704] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd
[  264.337327][ T5704] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  264.494789][   T37] usb 4-1: USB disconnect, device number 65
[  264.518620][ T8359] fido_id[8359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  264.597581][ T8231] team0: Port device team_slave_0 added
[  264.731544][   T60] Bluetooth: hci3: command tx timeout
[  264.823154][ T8231] team0: Port device team_slave_1 added
[  264.964545][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'.
[  265.089206][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2
[  265.250109][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.250124][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.250143][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.306452][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.306463][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.306477][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.851762][   T37] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  265.948468][ T8231] hsr_slave_0: entered promiscuous mode
[  265.950572][ T8231] hsr_slave_1: entered promiscuous mode
[  265.995089][ T8231] debugfs: 'hsr0' already exists in 'hsr'
[  265.995112][ T8231] Cannot create hsr debugfs directory
[  266.040946][   T37] usb 4-1: Using ep0 maxpacket: 32
[  266.043111][   T37] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  266.043137][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.067197][   T37] usb 4-1: config 0 descriptor??
[  266.160418][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.162865][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.201925][   T37] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  266.543385][ T1298] hsr_slave_0: left promiscuous mode
[  266.580926][ T1298] hsr_slave_1: left promiscuous mode
[  266.591227][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.608336][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.646862][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.646888][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.879610][ T1298] veth1_macvtap: left promiscuous mode
[  266.947270][ T1298] veth0_macvtap: left promiscuous mode
[  266.963600][ T1298] veth1_vlan: left promiscuous mode
[  266.969097][ T1298] veth0_vlan: left promiscuous mode
[  266.986880][ T8390] netlink: 'syz.1.883': attribute type 13 has an invalid length.
[  266.986900][ T8390] netlink: 164 bytes leftover after parsing attributes in process `syz.1.883'.
[  267.081383][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  267.965115][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.061749][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  268.121572][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  268.476050][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3
[  268.500744][ T8390] erspan0: refused to change device tx_queue_len
[  268.794390][   T37] gspca_vc032x: reg_w err -71
[  268.794406][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794415][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794423][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794431][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794440][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794448][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794456][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794464][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794472][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794480][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794504][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794513][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794521][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794529][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794537][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794545][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794552][   T37] gspca_vc032x: I2c Bus Busy Wait 00
[  268.794560][   T37] gspca_vc032x: Unknown sensor...
[  268.794644][   T37] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  268.916919][   T37] usb 4-1: USB disconnect, device number 66
[  269.301040][    T9] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[  269.539890][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  269.539919][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.539938][    T9] usb 1-1: Product: syz
[  269.539962][    T9] usb 1-1: Manufacturer: syz
[  269.539975][    T9] usb 1-1: SerialNumber: syz
[  269.595127][    T9] usb 1-1: config 0 descriptor??
[  269.800986][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  270.158419][ T8438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  270.158836][ T8438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  270.349113][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4
[  270.378074][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'.
[  270.534668][ T8438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  270.583593][ T8231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  270.679871][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.691086][ T8231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  270.947645][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.996198][ T8231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  271.034841][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.065022][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.070302][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  271.092384][ T8231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  271.190711][ T8231] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  271.268997][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.270051][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.706284][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.711581][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.818906][ T8476] random: crng reseeded on system resumption
[  271.853299][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.858901][ T8474] usb usb7: usbfs: process 8474 (syz.1.897) did not claim interface 0 before use
[  271.897268][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  271.975308][ T8479] ieee802154 phy0 wpan0: encryption failed: -22
[  272.002082][    T9] usb 1-1: USB disconnect, device number 65
[  272.097968][ T8231] 8021q: adding VLAN 0 to HW filter on device team0
[  272.120656][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.131671][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.171199][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  272.262492][  T862] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.262697][  T862] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.611274][    T9] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  272.788403][    T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  272.788441][    T9] usb 4-1: config 0 has no interface number 0
[  272.788483][    T9] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  272.788507][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  272.788532][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  272.839291][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  272.839319][    T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  272.839340][    T9] usb 4-1: Product: syz
[  272.839353][    T9] usb 4-1: SerialNumber: syz
[  272.879969][    T9] usb 4-1: config 0 descriptor??
[  272.903024][    T9] cm109 4-1:0.8: invalid payload size 0, expected 4
[  272.968258][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input38
[  273.257747][    C0] cm109_urb_ctl_callback: 299 callbacks suppressed
[  273.257770][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.262638][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.262894][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.263139][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.263370][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.263592][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.263819][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.264056][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.264283][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.264513][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  273.463726][    T9] usb 4-1: USB disconnect, device number 67
[  273.463803][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  273.656136][    T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  273.680723][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.818156][ T8515] FAULT_INJECTION: forcing a failure.
[  273.818156][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.818192][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.906 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  273.818220][ T8515] Tainted: [L]=SOFTLOCKUP
[  273.818226][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  273.818237][ T8515] Call Trace:
[  273.818245][ T8515]  <TASK>
[  273.818252][ T8515]  dump_stack_lvl+0xe8/0x150
[  273.818287][ T8515]  should_fail_ex+0x46b/0x600
[  273.818313][ T8515]  _copy_from_user+0x2d/0xb0
[  273.818340][ T8515]  __sys_sendto+0x296/0x590
[  273.818365][ T8515]  ? __pfx___sys_sendto+0x10/0x10
[  273.818405][ T8515]  ? ksys_write+0x248/0x270
[  273.818428][ T8515]  ? __pfx_ksys_write+0x10/0x10
[  273.818451][ T8515]  __x64_sys_sendto+0xde/0x100
[  273.818470][ T8515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.818489][ T8515]  do_syscall_64+0x15f/0x560
[  273.818508][ T8515]  ? trace_irq_disable+0x3b/0x140
[  273.818526][ T8515]  ? clear_bhb_loop+0x40/0x90
[  273.818549][ T8515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.818569][ T8515] RIP: 0033:0x7f1800c9ce59
[  273.818586][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.818601][ T8515] RSP: 002b:00007f17feef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  273.818621][ T8515] RAX: ffffffffffffffda RBX: 00007f1800f15fa0 RCX: 00007f1800c9ce59
[  273.818635][ T8515] RDX: 000000000001e91b RSI: 00002000000000c0 RDI: 0000000000000005
[  273.818647][ T8515] RBP: 00007f17feef6090 R08: 0000200000000480 R09: 000000000000001c
[  273.818660][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.818671][ T8515] R13: 00007f1800f16038 R14: 00007f1800f15fa0 R15: 00007ffd85e12f08
[  273.818700][ T8515]  </TASK>
[  274.255199][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  274.310118][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.320446][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.360915][   T37] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  274.396564][ T8534] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5612] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     
[  274.448158][ T8231] veth0_vlan: entered promiscuous mode
[  274.492309][   T37] usb 1-1: device descriptor read/64, error -71
[  274.498670][ T8231] veth1_vlan: entered promiscuous mode
[  274.585013][ T8231] veth0_macvtap: entered promiscuous mode
[  274.598720][ T8231] veth1_macvtap: entered promiscuous mode
[  274.630267][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.650577][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.706363][ T1298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.707076][ T1298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.707120][ T1298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.707159][ T1298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.743132][   T37] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  274.880971][   T37] usb 1-1: device descriptor read/64, error -71
[  275.006528][   T37] usb usb1-port1: attempt power cycle
[  275.090212][ T8538] zonefs (nbd1) ERROR: Not a zoned block device
[  275.352043][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.352061][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.566823][   T37] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  275.594045][   T37] usb 1-1: device descriptor read/8, error -71
[  275.883038][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.883153][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.890892][   T37] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  275.913122][   T37] usb 1-1: device descriptor read/8, error -71
[  276.021184][   T37] usb usb1-port1: unable to enumerate USB device
[  277.059651][ T8555] IPv6: Can't replace route, no match found
[  277.420906][   T32] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  277.574291][   T32] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  277.574318][   T32] usb 1-1: config 0 has no interface number 0
[  277.574359][   T32] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  277.574382][   T32] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  277.574407][   T32] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  277.576051][   T32] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  277.576077][   T32] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  277.576096][   T32] usb 1-1: Product: syz
[  277.576109][   T32] usb 1-1: SerialNumber: syz
[  277.667352][   T32] usb 1-1: config 0 descriptor??
[  277.678698][   T32] cm109 1-1:0.8: invalid payload size 0, expected 4
[  277.692644][   T32] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input39
[  277.730375][ T8568] netlink: 'syz.4.922': attribute type 12 has an invalid length.
[  277.730420][ T8568] FAULT_INJECTION: forcing a failure.
[  277.730420][ T8568] name failslab, interval 1, probability 0, space 0, times 0
[  277.730448][ T8568] CPU: 1 UID: 0 PID: 8568 Comm: syz.4.922 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  277.730472][ T8568] Tainted: [L]=SOFTLOCKUP
[  277.730481][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  277.730492][ T8568] Call Trace:
[  277.730500][ T8568]  <TASK>
[  277.730508][ T8568]  dump_stack_lvl+0xe8/0x150
[  277.730535][ T8568]  should_fail_ex+0x46b/0x600
[  277.730562][ T8568]  should_failslab+0xa8/0x100
[  277.730585][ T8568]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  277.730602][ T8568]  ? __alloc_skb+0x1d0/0x7d0
[  277.730617][ T8568]  ? lockdep_hardirqs_on+0x7a/0x110
[  277.730641][ T8568]  __alloc_skb+0x1d0/0x7d0
[  277.730659][ T8568]  ? netlink_ack_tlv_len+0x6c/0x210
[  277.730684][ T8568]  netlink_ack+0x146/0xa50
[  277.730702][ T8568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.730726][ T8568]  ? ref_tracker_free+0x673/0x820
[  277.730748][ T8568]  ? ____sys_sendmsg+0x55c/0x870
[  277.730766][ T8568]  ? ___sys_sendmsg+0x2a5/0x360
[  277.730795][ T8568]  netlink_rcv_skb+0x2b6/0x4b0
[  277.730815][ T8568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.730841][ T8568]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.730886][ T8568]  genl_rcv+0x28/0x40
[  277.730909][ T8568]  netlink_unicast+0x780/0x920
[  277.730939][ T8568]  netlink_sendmsg+0x813/0xb40
[  277.730969][ T8568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.730992][ T8568]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  277.731024][ T8568]  ? aa_sock_msg_perm+0x122/0x200
[  277.731051][ T8568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.731071][ T8568]  sock_sendmsg_nosec+0x112/0x150
[  277.731101][ T8568]  ____sys_sendmsg+0x55c/0x870
[  277.731127][ T8568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.731157][ T8568]  ? import_iovec+0x73/0xa0
[  277.731187][ T8568]  ___sys_sendmsg+0x2a5/0x360
[  277.731207][ T8568]  ? __lock_acquire+0x6b5/0x2d10
[  277.731233][ T8568]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.731287][ T8568]  ? __fget_files+0x2a/0x420
[  277.731314][ T8568]  ? __fget_files+0x3a6/0x420
[  277.731351][ T8568]  __x64_sys_sendmsg+0x1c3/0x2a0
[  277.731375][ T8568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.731406][ T8568]  ? __pfx_ksys_write+0x10/0x10
[  277.731432][ T8568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.731452][ T8568]  do_syscall_64+0x15f/0x560
[  277.731471][ T8568]  ? trace_irq_disable+0x3b/0x140
[  277.731491][ T8568]  ? clear_bhb_loop+0x40/0x90
[  277.731514][ T8568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.731532][ T8568] RIP: 0033:0x7fa4d944ce59
[  277.731550][ T8568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.731565][ T8568] RSP: 002b:00007fa4d76a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.731583][ T8568] RAX: ffffffffffffffda RBX: 00007fa4d96c5fa0 RCX: 00007fa4d944ce59
[  277.731596][ T8568] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000003
[  277.731607][ T8568] RBP: 00007fa4d76a6090 R08: 0000000000000000 R09: 0000000000000000
[  277.731618][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.731629][ T8568] R13: 00007fa4d96c6038 R14: 00007fa4d96c5fa0 R15: 00007ffc74b20478
[  277.731660][ T8568]  </TASK>
[  277.842774][ T8570] netlink: 'syz.3.923': attribute type 2 has an invalid length.
[  277.900309][ T1953] usb 1-1: USB disconnect, device number 70
[  277.900449][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  278.063279][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'.
[  278.063387][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'.
[  278.094714][ T8570] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  278.108096][ T1953] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  278.280990][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  278.440890][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  278.442802][ T5916] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  278.442853][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.442874][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  278.442945][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.442966][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.443006][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.443028][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.664448][ T5916] usb 5-1: usb_control_msg returned -32
[  278.664475][ T5916] usbtmc 5-1:16.0: can't read capabilities
[  278.817776][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'.
[  279.148366][ T8593] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  279.500949][ T5788] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  279.530716][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.931'.
[  279.655380][ T5788] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  279.655657][ T5788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  279.655682][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.700990][ T5788] usb 4-1: config 0 descriptor??
[  279.804320][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.805343][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.905449][ T5788] ath6kl: Failed to submit usb control message: -71
[  279.905711][ T5788] ath6kl: unable to send the bmi data to the device: -71
[  279.905727][ T5788] ath6kl: Unable to send get target info: -71
[  279.948975][ T5788] ath6kl: Failed to init ath6kl core: -71
[  279.986657][ T5788] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  280.000592][ T5788] usb 4-1: USB disconnect, device number 68
[  280.543853][ T5916] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  280.742384][ T5916] usb 1-1: Using ep0 maxpacket: 32
[  280.794121][ T5916] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  280.794231][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.794252][ T5916] usb 1-1: Product: syz
[  280.794266][ T5916] usb 1-1: Manufacturer: syz
[  280.794280][ T5916] usb 1-1: SerialNumber: syz
[  280.845181][ T5916] usb 1-1: config 0 descriptor??
[  280.997058][ T8630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  281.417650][ T5916] airspy 1-1:0.0: usb_control_msg() failed -71 request 09
[  281.417676][ T5916] airspy 1-1:0.0: Could not detect board
[  281.417775][ T5916] airspy 1-1:0.0: probe with driver airspy failed with error -71
[  281.454481][ T5916] usb 1-1: USB disconnect, device number 71
[  281.635786][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.636331][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.870905][   T37] usb 4-1: new low-speed USB device number 69 using dummy_hcd
[  282.022684][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.022735][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  282.022934][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 21935, setting to 8
[  282.024044][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.024079][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  282.024094][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 21935, setting to 8
[  282.025571][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.025608][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  282.025622][   T37] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 21935, setting to 8
[  282.156394][   T37] usb 4-1: string descriptor 0 read error: -22
[  282.156667][   T37] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  282.156681][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.218620][   T37] adutux 4-1:168.0: interrupt endpoints not found
[  282.404836][ T5916] usb 4-1: USB disconnect, device number 69
[  283.311084][ T5916] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  283.509347][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.509379][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.509430][ T5916] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  283.509451][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.532954][ T5916] usb 4-1: config 0 descriptor??
[  283.550900][ T5704] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  283.700940][ T5704] usb 1-1: Using ep0 maxpacket: 16
[  283.705914][ T5704] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  283.705941][ T5704] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  283.705960][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.705977][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  283.706061][ T5704] usb 1-1: config 0 has no interface number 0
[  283.706101][ T5704] usb 1-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  283.706127][ T5704] usb 1-1: config 0 interface 125 has no altsetting 0
[  283.714247][ T5704] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  283.714273][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.714291][ T5704] usb 1-1: Product: syz
[  283.714304][ T5704] usb 1-1: Manufacturer: syz
[  283.714318][ T5704] usb 1-1: SerialNumber: syz
[  283.746713][ T5704] usb 1-1: config 0 descriptor??
[  284.186299][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.190648][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.237928][ T5916] usbhid 4-1:0.0: can't add hid device: -71
[  284.238031][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  284.290116][ T5916] usb 4-1: USB disconnect, device number 70
[  284.497380][ T8603] usbtmc 5-1:16.0: usb_control_msg returned -110
[  284.548795][ T5916] usb 5-1: USB disconnect, device number 2
[  284.630869][ T5704] usb 1-1: USB disconnect, device number 72
[  284.787376][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.789667][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.041389][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  285.121475][   T37] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  285.251780][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  285.283578][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  285.283612][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  285.283636][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  285.283660][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  285.283699][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  285.283722][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.356155][   T37] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  285.356189][   T37] usb 4-1: config 0 has no interface number 0
[  285.356238][   T37] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  285.356263][   T37] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  285.359659][   T37] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  285.359685][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.359704][   T37] usb 4-1: Product: syz
[  285.359718][   T37] usb 4-1: Manufacturer: syz
[  285.359732][   T37] usb 4-1: SerialNumber: syz
[  285.441141][   T37] usb 4-1: config 0 descriptor??
[  285.447834][ T8696] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  285.467638][   T37] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  285.501352][   T37] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  285.547456][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'.
[  285.613418][ T5916] usb 5-1: GET_CAPABILITIES returned 0
[  285.613460][ T5916] usbtmc 5-1:16.0: can't read capabilities
[  285.815506][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.829622][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.747956][ T8732] binder: 8730:8732 ioctl c00c620f 0 returned -14
[  287.698847][ T8747] tipc: Can't bind to reserved service type 1
[  287.874450][ T1953] usb 5-1: USB disconnect, device number 3
[  287.892557][ T5704] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  287.968643][ T5916] usb 4-1: USB disconnect, device number 71
[  287.998367][ T5916] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  287.999224][ T5916] cyberjack 4-1:0.69: device disconnected
[  288.040104][ T8751] misc userio: The device must be registered before sending interrupts
[  288.060115][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.060148][ T5704] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  288.060162][ T5704] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.060173][ T5704] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.060186][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0
[  288.060204][ T5704] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  288.060215][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.075646][ T5704] usb 1-1: config 0 descriptor??
[  288.365290][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.366262][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.366305][ T8745] netlink: 'syz.0.959': attribute type 58 has an invalid length.
[  288.380853][ T1953] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  288.542635][ T1953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  288.542657][ T1953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  288.542669][ T1953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  288.542716][ T1953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  288.542739][ T1953] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  288.542751][ T1953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.548211][ T1953] usb 5-1: config 0 descriptor??
[  288.574930][ T5916] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  288.597714][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.598625][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.605947][ T5704] usbhid 1-1:0.0: can't add hid device: -71
[  288.606114][ T5704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  288.690005][ T5704] usb 1-1: USB disconnect, device number 73
[  288.779248][ T5916] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  288.779267][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.779278][ T5916] usb 4-1: Product: syz
[  288.779285][ T5916] usb 4-1: Manufacturer: syz
[  288.779292][ T5916] usb 4-1: SerialNumber: syz
[  288.785165][ T1953] hdpvr 5-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[  288.785198][ T1953] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  288.804628][ T5916] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  288.878750][ T5776] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  289.070598][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.083721][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.090587][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.125079][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.214557][ T5776] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  317.146393][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  317.146494][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  378.579555][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.579652][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  394.290737][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  394.290754][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1953/1:b..l
[  394.290784][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=39357, q=1602 ncpus=2)
[  394.290807][    C0] task:kworker/0:3     state:R  running task     stack:21120 pid:1953  tgid:1953  ppid:2      task_flags:0x4208060 flags:0x00080000
[  394.290869][    C0] Workqueue: usb_hub_wq hub_event
[  394.290900][    C0] Call Trace:
[  394.290906][    C0]  <TASK>
[  394.290916][    C0]  __schedule+0x16f9/0x5500
[  394.290958][    C0]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  394.290979][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  394.290996][    C0]  ? __pfx___schedule+0x10/0x10
[  394.291018][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  394.291041][    C0]  preempt_schedule_irq+0x4d/0xa0
[  394.291055][    C0]  irqentry_exit+0x14f/0x760
[  394.291070][    C0]  ? trace_irq_disable+0x3b/0x140
[  394.291088][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  394.291105][    C0] RIP: 0010:lock_acquire+0x221/0x350
[  394.291121][    C0] Code: ff ff ff e8 01 f9 95 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b e3 f6 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 28 ba 0f
[  394.291135][    C0] RSP: 0018:ffffc9000761e9a0 EFLAGS: 00000286
[  394.291148][    C0] RAX: 3979b3c5457c8000 RBX: 0000000000000000 RCX: 0000000000000046
[  394.291158][    C0] RDX: 000000005375eb1c RSI: ffffffff8d9bd406 RDI: ffffffff8babc280
[  394.291168][    C0] RBP: ffffffff8b3979d0 R08: ffffffff8b3979d0 R09: ffffffff8e1caa00
[  394.291179][    C0] R10: dffffc0000000000 R11: fffffbfff1f5b63f R12: 0000000000000002
[  394.291189][    C0] R13: ffffffff8e1caa00 R14: 0000000000000000 R15: 0000000000000246
[  394.291201][    C0]  ? rt_spin_lock+0x1e0/0x400
[  394.291220][    C0]  ? rt_spin_lock+0x1e0/0x400
[  394.291246][    C0]  rt_spin_lock+0x1fc/0x400
[  394.291263][    C0]  ? rt_spin_lock+0x1e0/0x400
[  394.291283][    C0]  ? __pfx_rt_spin_lock+0x10/0x10
[  394.291306][    C0]  ? rt_spin_unlock+0x160/0x200
[  394.291327][    C0]  __slab_free+0xf1/0x2a0
[  394.291350][    C0]  qlist_free_all+0x99/0x100
[  394.291373][    C0]  kasan_quarantine_reduce+0x148/0x160
[  394.291395][    C0]  __kasan_slab_alloc+0x22/0x80
[  394.291411][    C0]  __kmalloc_noprof+0x399/0x7b0
[  394.291425][    C0]  ? usb_alloc_urb+0x46/0x150
[  394.291443][    C0]  usb_alloc_urb+0x46/0x150
[  394.291458][    C0]  usb_control_msg+0x118/0x3e0
[  394.291479][    C0]  hdpvr_set_options+0x840/0xf70
[  394.291506][    C0]  hdpvr_device_init+0x4e/0x480
[  394.291524][    C0]  hdpvr_probe+0x50a/0x930
[  394.291548][    C0]  ? __pfx_hdpvr_probe+0x10/0x10
[  394.291575][    C0]  usb_probe_interface+0x659/0xc70
[  394.291602][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[  394.291620][    C0]  really_probe+0x267/0xaf0
[  394.291647][    C0]  __driver_probe_device+0x1e2/0x350
[  394.291667][    C0]  driver_probe_device+0x4f/0x240
[  394.291682][    C0]  __device_attach_driver+0x270/0x410
[  394.291699][    C0]  bus_for_each_drv+0x25b/0x2f0
[  394.291710][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  394.291725][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  394.291736][    C0]  ? rt_spin_unlock+0x160/0x200
[  394.291753][    C0]  __device_attach+0x2c8/0x450
[  394.291767][    C0]  ? __pfx___device_attach+0x10/0x10
[  394.291782][    C0]  ? rt_spin_unlock+0x160/0x200
[  394.291798][    C0]  device_initial_probe+0xa1/0xd0
[  394.291812][    C0]  bus_probe_device+0x12d/0x220
[  394.291825][    C0]  device_add+0x7ec/0xb90
[  394.291841][    C0]  usb_set_configuration+0x1a87/0x2110
[  394.291866][    C0]  usb_generic_driver_probe+0x8d/0x150
[  394.291880][    C0]  usb_probe_device+0x1c4/0x3b0
[  394.291900][    C0]  ? __pfx_usb_probe_device+0x10/0x10
[  394.291913][    C0]  really_probe+0x267/0xaf0
[  394.291930][    C0]  __driver_probe_device+0x1e2/0x350
[  394.291945][    C0]  driver_probe_device+0x4f/0x240
[  394.291960][    C0]  __device_attach_driver+0x270/0x410
[  394.291976][    C0]  bus_for_each_drv+0x25b/0x2f0
[  394.291988][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  394.292002][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  394.292013][    C0]  ? rt_spin_unlock+0x160/0x200
[  394.292029][    C0]  __device_attach+0x2c8/0x450
[  394.292044][    C0]  ? __pfx___device_attach+0x10/0x10
[  394.292057][    C0]  ? rt_spin_unlock+0x160/0x200
[  394.292073][    C0]  device_initial_probe+0xa1/0xd0
[  394.292088][    C0]  bus_probe_device+0x12d/0x220
[  394.292100][    C0]  device_add+0x7ec/0xb90
[  394.292114][    C0]  usb_new_device+0x9f8/0x16e0
[  394.292130][    C0]  ? __pfx_usb_new_device+0x10/0x10
[  394.292145][    C0]  hub_event+0x2a49/0x4f60
[  394.292179][    C0]  ? __pfx_hub_event+0x10/0x10
[  394.292191][    C0]  ? process_one_work+0x8be/0x1630
[  394.292210][    C0]  ? process_one_work+0x8be/0x1630
[  394.292222][    C0]  process_one_work+0x98b/0x1630
[  394.292245][    C0]  ? __pfx_process_one_work+0x10/0x10
[  394.292257][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  394.292273][    C0]  worker_thread+0xb49/0x1140
[  394.292298][    C0]  kthread+0x389/0x470
[  394.292309][    C0]  ? __pfx_worker_thread+0x10/0x10
[  394.292326][    C0]  ? __pfx_kthread+0x10/0x10
[  394.292337][    C0]  ret_from_fork+0x514/0xb70
[  394.292351][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  394.292362][    C0]  ? __switch_to+0xc79/0x1410
[  394.292374][    C0]  ? __pfx_kthread+0x10/0x10
[  394.292385][    C0]  ret_from_fork_asm+0x1a/0x30
[  394.292405][    C0]  </TASK>
[  439.373472][   T39] INFO: task rcub/0:19 blocked for more than 143 seconds.
[  439.373502][   T39]       Tainted: G             L      syzkaller #0
[  439.373513][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  439.373522][   T39] task:rcub/0          state:D stack:28320 pid:19    tgid:19    ppid:2      task_flags:0x208040 flags:0x00080000
[  439.373589][   T39] Call Trace:
[  439.373597][   T39]  <TASK>
[  439.373612][   T39]  __schedule+0x16f9/0x5500
[  439.373667][   T39]  ? irqentry_exit+0x218/0x760
[  439.373693][   T39]  ? trace_irq_disable+0x3b/0x140
[  439.373717][   T39]  ? __pfx___schedule+0x10/0x10
[  439.373745][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  439.373786][   T39]  rt_mutex_schedule+0x76/0xf0
[  439.373812][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  439.373847][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  439.373874][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  439.373903][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  439.373929][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  439.373967][   T39]  ? rcu_boost_kthread+0x2fb/0x4b0
[  439.374003][   T39]  rt_mutex_lock_nested+0x170/0x1d0
[  439.374026][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  439.374047][   T39]  ? rcu_boost_kthread+0x2fb/0x4b0
[  439.374071][   T39]  rcu_boost_kthread+0x2fb/0x4b0
[  439.374107][   T39]  kthread+0x389/0x470
[  439.374129][   T39]  ? __pfx_rcu_boost_kthread+0x10/0x10
[  439.374149][   T39]  ? __pfx_kthread+0x10/0x10
[  439.374192][   T39]  ret_from_fork+0x514/0xb70
[  439.374220][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  439.374244][   T39]  ? __switch_to+0xc79/0x1410
[  439.374266][   T39]  ? __pfx_kthread+0x10/0x10
[  439.374289][   T39]  ret_from_fork_asm+0x1a/0x30
[  439.374332][   T39]  </TASK>
[  439.374506][   T39] INFO: task kworker/0:6:5776 blocked for more than 143 seconds.
[  439.374522][   T39]       Tainted: G             L      syzkal[  439.374522][   T39]       Tainted: G             L      syzkaller #0
[  439.374533][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  439.374541][   T39] task:kworker/0:6     state:D stack:17600 pid:5776  tgid:5776  ppid:2      task_flags:0x4208060 flags:0x00080000
[  439.374595][   T39] Workqueue: events request_firmware_work_func
[  439.374619][   T39] Call Trace:
[  439.374625][   T39]  <TASK>
[  439.374637][   T39]  __schedule+0x16f9/0x5500
[  439.374665][   T39]  ? arch_stack_walk+0x11b/0x150
[  439.374721][   T39]  ? __pfx___schedule+0x10/0x10
[  439.374760][   T39]  ? schedule+0x90/0x360
[  439.374793][   T39]  schedule+0x164/0x360
[  439.374829][   T39]  schedule_timeout+0xc3/0x2c0
[  439.374862][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  439.374892][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.374952][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.374972][   T39]  ? wait_for_completion+0x274/0x5e0
[  439.374993][   T39]  wait_for_completion+0x2cc/0x5e0
[  439.375026][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  439.375048][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  439.375068][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  439.375089][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  439.375113][   T39]  synchronize_rcu_normal+0x1c7/0x330
[  439.375142][   T39]  ? __pfx_synchronize_rcu_normal+0x10/0x10
[  439.375168][   T39]  ? ret_from_fork_asm+0x1a/0x30
[  439.375193][   T39]  ? ret_from_fork_asm+0x1a/0x30
[  439.375230][   T39]  ? ret_from_fork_asm+0x1a/0x30
[  439.375260][   T39]  ? stack_trace_save+0xa9/0x100
[  439.375298][   T39]  synchronize_rcu_expedited+0x15a/0x770
[  439.375329][   T39]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  439.375362][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.375385][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.375401][   T39]  ? lock_acquire+0x106/0x350
[  439.375447][   T39]  rhashtable_free_and_destroy+0x39/0x540
[  439.375475][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  439.375495][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  439.375515][   T39]  ? __timer_delete_sync+0x53e/0x610
[  439.375542][   T39]  sta_info_stop+0x29/0x40
[  439.375568][   T39]  ieee80211_free_hw+0x48/0x3c0
[  439.375593][   T39]  ath9k_htc_probe_device+0x23b/0x2360
[  439.375619][   T39]  ? dummy_urb_enqueue+0x570/0x760
[  439.375653][   T39]  ? __pfx_ath9k_htc_probe_device+0x10/0x10
[  439.375674][   T39]  ? usb_hcd_submit_urb+0x340/0x1b50
[  439.375711][   T39]  ? usb_free_urb+0x9d/0x120
[  439.375732][   T39]  ? ath9k_hif_usb_alloc_urbs+0x105a/0x1130
[  439.375762][   T39]  ath9k_htc_hw_init+0x32/0x70
[  439.375786][   T39]  ath9k_hif_usb_firmware_cb+0x240/0x4c0
[  439.375812][   T39]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[  439.375837][   T39]  request_firmware_work_func+0x103/0x2e0
[  439.375868][   T39]  ? process_one_work+0x8be/0x1630
[  439.375893][   T39]  process_one_work+0x98b/0x1630
[  439.375940][   T39]  ? __pfx_process_one_work+0x10/0x10
[  439.375965][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.375999][   T39]  worker_thread+0xb49/0x1140
[  439.376035][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  439.376069][   T39]  kthread+0x389/0x470
[  439.376089][   T39]  ? __pfx_worker_thread+0x10/0x10
[  439.376115][   T39]  ? __pfx_kthread+0x10/0x10
[  439.376137][   T39]  ret_from_fork+0x514/0xb70
[  439.376163][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  439.376186][   T39]  ? __switch_to+0xc79/0x1410
[  439.376208][   T39]  ? __pfx_kthread+0x10/0x10
[  439.376230][   T39]  ret_from_fork_asm+0x1a/0x30
[  439.376271][   T39]  </TASK>
[  439.376311][   T39] 
[  439.376311][   T39] Showing all locks held in the system:
[  439.376320][   T39] 2 locks held by kworker/u8:1/13:
[  439.376332][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.376393][   T39]  #1: ffffc90000127c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.376447][   T39] 5 locks held by ktimers/0/16:
[  439.376457][   T39]  #0: ffffffff8e061340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  439.376509][   T39]  #1: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  439.376561][   T39]  #2: ffff8880b86284b8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260
[  439.376613][   T39]  #3: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.376663][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: dummy_timer+0x8b1/0x47d0
[  439.376717][   T39] 1 lock held by rcub/0/19:
[  439.376727][   T39]  #0: ffffffff8e1d05c8 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0
[  439.376781][   T39] 5 locks held by kworker/1:1/37:
[  439.376792][   T39]  #0: ffff88813fe13938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.376843][   T39]  #1: ffffc90000ac7c40 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.376903][   T39]  #2: ffff888140ab9e88 (&ht->mutex#2){+.+.}-{4:4}, at: rht_deferred_worker+0x40/0x2180
[  439.376956][   T39]  #3: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.377009][   T39]  #4: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.377055][   T39] 1 lock held by khungtaskd/39:
[  439.377065][   T39]  #0: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  439.377115][   T39] 6 locks held by kworker/u8:2/44:
[  439.377126][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.377177][   T39]  #1: ffffc90000b67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.377231][   T39]  #2: ffff88803a92c310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  439.377291][   T39]  #3: ffff88803c6e5520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  439.377346][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.377415][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.377466][   T39] 6 locks held by kworker/u8:3/57:
[  439.377477][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.377528][   T39]  #1: ffffc9000123fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.377582][   T39]  #2: ffff88803a7b6310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  439.377641][   T39]  #3: ffff88805a6c9920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  439.377696][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.377745][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.377796][   T39] 6 locks held by kworker/u8:4/67:
[  439.377806][   T39]  #0: ffff8880202f5938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.377855][   T39]  #1: ffffc9000152fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.377907][   T39]  #2: ffff888035ba80d0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  439.377965][   T39]  #3: ffff888035c14cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  439.378020][   T39]  #4: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.378072][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.378119][   T39] 6 locks held by kworker/u8:6/862:
[  439.378130][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.378181][   T39]  #1: ffffc9000591fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.378234][   T39]  #2: ffff88802845a310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  439.378292][   T39]  #3: ffff88802d7a1120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  439.378348][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.378493][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.378548][   T39] 6 locks held by kworker/u8:12/1298:
[  439.378559][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.378611][   T39]  #1: ffffc9000664fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.378663][   T39]  #2: ffff888040f8a310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  439.378719][   T39]  #3: ffff888036e67120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  439.378774][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.378824][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.378874][   T39] 6 locks held by kworker/u8:13/1319:
[  439.378884][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.378936][   T39]  #1: ffffc9000678fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.378988][   T39]  #2: ffff88805a8c6310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  439.379044][   T39]  #3: ffff88805a8e9520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  439.379100][   T39]  #4: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.379150][   T39]  #5: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.379202][   T39] 9 locks held by kworker/0:3/1953:
[  439.379213][   T39]  #0: ffff888022695d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.379264][   T39]  #1: ffffc9000761fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.379315][   T39]  #2: ffff88802afb4210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  439.379371][   T39]  #3: ffff888059886210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  439.379421][   T39]  #4: ffff88805c5be1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  439.379472][   T39]  #5: ffff88803baa16c8 (&dev->usbc_mutex){+.+.}-{4:4}, at: hdpvr_set_options+0x7b5/0xf70
[  439.379528][   T39]  #6: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.379580][   T39]  #7: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.379624][   T39]  #8: ffffffff8e1caa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  439.379687][   T39] 2 locks held by jbd2/sda1-8/4944:
[  439.379697][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.379750][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.379795][   T39] 2 locks held by klogd/4971:
[  439.379805][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.379857][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.379902][   T39] 2 locks held by udevd/4982:
[  439.379912][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.379964][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.380010][   T39] 2 locks held by dhcpcd/5276:
[  439.380020][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.380073][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.380117][   T39] 2 locks held by crond/5353:
[  439.380127][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.380179][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.380224][   T39] 2 locks held by getty/5370:
[  439.380234][   T39]  #0: ffff888035eab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  439.380284][   T39]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  439.380330][   T39] 3 locks held by sshd-session/5600:
[  439.380341][   T39]  #0: ffff88803e101318 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  439.380393][   T39]  #1: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.380445][   T39]  #2: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.380489][   T39] 3 locks held by syz-executor/5601:
[  439.380500][   T39]  #0: ffff88803e100358 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  439.380545][   T39]  #1: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.380596][   T39]  #2: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.380634][   T39] 2 locks held by syz-executor/5612:
[  439.380642][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.749502][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.749568][   T39] 2 locks held by syz-executor/5616:
[  439.749580][   T39]  #0: ffffffff8e8f0838 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  439.749637][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620
[  439.749690][   T39] 2 locks held by syz-executor/5617:
[  439.749701][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.749756][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.749807][   T39] 7 locks held by kworker/0:4/5704:
[  439.749818][   T39]  #0: ffff888022695d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.749871][   T39]  #1: ffffc9000505fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.749924][   T39]  #2: ffff88802ae3a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  439.749974][   T39]  #3: ffff88802af7f658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4f60
[  439.750030][   T39]  #4: ffff88802aea0088 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x820
[  439.750075][   T39]  #5: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.750129][   T39]  #6: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.750177][   T39] 2 locks held by kworker/0:6/5776:
[  439.750188][   T39]  #0: ffff88813fe13938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  439.750240][   T39]  #1: ffffc9000521fc40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  439.750296][   T39] 2 locks held by syz-executor/8231:
[  439.750306][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.750358][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.750411][   T39] 2 locks held by syz.4.962/8750:
[  439.750422][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.750475][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.750519][   T39] 2 locks held by syz.4.962/8751:
[  439.750530][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.750583][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.750638][   T39] 3 locks held by syz.3.963/8755:
[  439.750649][   T39]  #0: ffff88802ad1ceb8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  439.863600][   T39]  #1: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.863670][   T39]  #2: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.863719][   T39] 2 locks held by syz.1.966/8760:
[  439.863730][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.878409][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.878460][   T39] 2 locks held by syz.1.966/8761:
[  439.878470][   T39]  #0: ffffffff8e310950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  439.878523][   T39]  #1: ffff88813fea5d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  439.878568][   T39] 
[  439.878573][   T39] =============================================
[  439.878573][   T39] 
[  439.878598][   T39] NMI backtrace for cpu 1
[  439.878615][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  439.878641][   T39] Tainted: [L]=SOFTLOCKUP
[  439.878648][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.878660][   T39] Call Trace:
[  439.878668][   T39]  <TASK>
[  439.878676][   T39]  dump_stack_lvl+0xe8/0x150
[  439.878703][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  439.878732][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  439.878757][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  439.878786][   T39]  sys_info+0x135/0x170
[  439.878811][   T39]  watchdog+0xfd3/0x1030
[  439.878837][   T39]  ? watchdog+0x1c9/0x1030
[  439.878861][   T39]  kthread+0x389/0x470
[  439.878882][   T39]  ? __pfx_watchdog+0x10/0x10
[  439.878898][   T39]  ? __pfx_kthread+0x10/0x10
[  439.878920][   T39]  ret_from_fork+0x514/0xb70
[  439.878946][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  439.878968][   T39]  ? __switch_to+0xc79/0x1410
[  439.878990][   T39]  ? __pfx_kthread+0x10/0x10
[  439.879011][   T39]  ret_from_fork_asm+0x1a/0x30
[  439.879050][   T39]  </TASK>
[  439.879057][   T39] Sending NMI from CPU 1 to CPUs 0:
[  439.879084][    C0] NMI backtrace for cpu 0
[  439.879098][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  439.879121][    C0] Tainted: [L]=SOFTLOCKUP
[  439.879127][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.879137][    C0] RIP: 0010:__lock_acquire+0x577/0x2d10
[  439.879160][    C0] Code: 0c 0e 00 75 13 48 8d 3d 97 b3 0f 0e 48 c7 c6 dd 1f 87 8d 67 48 0f b9 3a 90 31 c9 0f b6 81 c4 00 00 00 84 c0 0f 84 77 ff ff ff <41> 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 b9 c6 00 00 00 02 0f 84
[  439.879175][    C0] RSP: 0018:ffffc90000157558 EFLAGS: 00000006
[  439.879189][    C0] RAX: 0000000000000003 RBX: ffff88801dac8c18 RCX: ffffffff93419118
[  439.879202][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000
[  439.879212][    C0] RBP: ffff88801dac8cc0 R08: ffffffff8b3979d0 R09: ffffffff8e1caa00
[  439.879225][    C0] R10: dffffc0000000000 R11: fffffbfff1f5b63f R12: ffffffffffffff05
[  439.879237][    C0] R13: ffff88801dac8cc0 R14: ffff88801dac8000 R15: 0000000000000000
[  439.879249][    C0] FS:  0000000000000000(0000) GS:ffff888125c9f000(0000) knlGS:0000000000000000
[  439.879263][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.879275][    C0] CR2: 000055abb5363190 CR3: 000000000dfb8000 CR4: 00000000003526f0
[  439.879290][    C0] Call Trace:
[  439.879297][    C0]  <TASK>
[  439.879306][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  439.879329][    C0]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  439.879354][    C0]  ? rt_spin_lock+0x1e0/0x400
[  439.879375][    C0]  lock_acquire+0x106/0x350
[  439.879393][    C0]  ? rt_spin_lock+0x1e0/0x400
[  439.879417][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  439.879435][    C0]  rt_spin_lock+0x1fc/0x400
[  439.879456][    C0]  ? rt_spin_lock+0x1e0/0x400
[  439.879476][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  439.879494][    C0]  ? __pfx_rt_spin_lock+0x10/0x10
[  439.879517][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  439.879541][    C0]  usb_anchor_urb+0x29/0x200
[  439.879565][    C0]  ath9k_hif_usb_reg_in_cb+0x4c8/0x6f0
[  439.879586][    C0]  ? kcov_remote_start+0x523/0x710
[  439.879612][    C0]  __usb_hcd_giveback_urb+0x3b3/0x5e0
[  439.879637][    C0]  dummy_timer+0x8a9/0x47d0
[  439.879672][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  439.879691][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  439.879706][    C0]  ? lock_acquire+0x106/0x350
[  439.879730][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  439.879754][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  439.879771][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  439.879795][    C0]  __hrtimer_run_queues+0x405/0xb10
[  439.879825][    C0]  hrtimer_run_softirq+0x18f/0x260
[  439.879851][    C0]  handle_softirqs+0x1de/0x6d0
[  439.879878][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  439.879903][    C0]  run_ktimerd+0x69/0x100
[  439.879918][    C0]  smpboot_thread_fn+0x541/0xa50
[  439.879943][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  439.879970][    C0]  kthread+0x389/0x470
[  439.879986][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  439.880010][    C0]  ? __pfx_kthread+0x10/0x10
[  439.880027][    C0]  ret_from_fork+0x514/0xb70
[  439.880047][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  439.880065][    C0]  ? __switch_to+0xc79/0x1410
[  439.880082][    C0]  ? __pfx_kthread+0x10/0x10
[  439.880099][    C0]  ret_from_fork_asm+0x1a/0x30
[  439.880125][    C0]  </TASK>
[  440.026372][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  440.026468][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  440.108307][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  440.108331][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  440.108360][   T39] Tainted: [L]=SOFTLOCKUP
[  440.108367][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.108379][   T39] Call Trace:
[  440.108387][   T39]  <TASK>
[  440.108397][   T39]  vpanic+0x56c/0xa60
[  440.108430][   T39]  ? __pfx___schedule+0x10/0x10
[  440.108461][   T39]  ? __pfx_vpanic+0x10/0x10
[  440.108497][   T39]  panic+0xc5/0xd0
[  440.108524][   T39]  ? __pfx_panic+0x10/0x10
[  440.108551][   T39]  ? preempt_schedule_thunk+0x16/0x40
[  440.108587][   T39]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  440.108619][   T39]  watchdog+0x102c/0x1030
[  440.108646][   T39]  ? watchdog+0x1c9/0x1030
[  440.108669][   T39]  kthread+0x389/0x470
[  440.108691][   T39]  ? __pfx_watchdog+0x10/0x10
[  440.108708][   T39]  ? __pfx_kthread+0x10/0x10
[  440.108730][   T39]  ret_from_fork+0x514/0xb70
[  440.108755][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  440.108778][   T39]  ? __switch_to+0xc79/0x1410
[  440.108799][   T39]  ? __pfx_kthread+0x10/0x10
[  440.108821][   T39]  ret_from_fork_asm+0x1a/0x30
[  440.108866][   T39]  </TASK>
[  440.109022][   T39] Kernel Offset: disabled