last executing test programs:

13.858502686s ago: executing program 3 (id=4463):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009"], 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/255, 0xff}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/251, 0xfb}, {&(0x7f0000001a00)=""/179, 0xb3}], 0x7, 0x8, 0x8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r7, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)

10.474680297s ago: executing program 2 (id=4476):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r3})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000840)={r3, "32d1027621dee2964857c02bcbb81f47"})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x7}}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'virt_wifi0\x00', @random="0100000000eb"})
sendmsg$inet6(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="bb2f", 0x2}], 0x1}, 0x20004000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x1, 0x26, 0xffffffb9, 0x1b}, 0x9c)

10.440586488s ago: executing program 0 (id=4477):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000005c0)='freezer.parent_freezing\x00', 0x0, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
preadv(r2, &(0x7f0000000980)=[{&(0x7f0000000100)=""/129, 0x81}], 0x1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0, 0x0, 0x0}, 0x0)

10.372105103s ago: executing program 2 (id=4478):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
setrlimit(0xa, &(0x7f0000000000)={0x3, 0xfff})
iopl(0x3)
r1 = syz_open_dev$audion(0x0, 0x589, 0x100)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3c)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004)
r3 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil)
shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x2000)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="d0291dc581e9", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2}}, @void, @val, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x5, 0x1ff1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x26, "d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a2"}, {0xdd, 0xa, "3c8295fec149cec496f3"}]}, 0x76)
nanosleep(0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void}, 0x33)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x30}}], 0x1, 0x0)
pipe(&(0x7f0000000000))

9.256782234s ago: executing program 3 (id=4482):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402081, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004500002c006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c02ffff90780cb90403be000207e3c070ce296c9d2a5f4e7ad4dfb84183b0ab0f4a84cbecdb636d16d0423090a3fd9c12f60652255883b5fe7c52f80095dc981886521d8d10ca156d3e502a1cde981d62acf618cb1058f00d544c26508fecfcdaebb8ceb10c6d10d47eba475f0d328fc343c1501529e8f7a2fbfc83cabd5e9eb0aa497afc62d6beb5a251c4d637f9b8cb4b7d04bb908967f9a5f1922ac5270d5d5f39ce8fde143272612332df859a99cb4b7cbebea4892d69ca8d377bb040ae38dedfce6ad3996c990a996d958876743c14290754256091e5cd4aa86f2da30301"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180065631000000000000c0000000c0000000200000000000000000000040000"], 0x0, 0x26}, 0x28)
openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0)
unshare(0x24020400)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000001c0)={0x9, 0x1, 0x401})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="142300003600010000000000ffdbdf259dd4618000000000000000"], 0x14}], 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001200)={0x38, r5, 0x1, 0x0, 0x25dfdc00, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x20000000)

8.293361115s ago: executing program 3 (id=4484):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6], 0x9)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x15}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d00000003000000040000000700000011000000", @ANYRES32=r2], 0x50)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)

7.855024354s ago: executing program 3 (id=4485):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="200b00000402"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40)

7.776481169s ago: executing program 0 (id=4486):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0xf0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_open_procfs$userns(r3, &(0x7f00000010c0))
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf5, 0xb206, &(0x7f0000006680))
fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r7, 0xb97534d5fe9704cf, 0x70bd2d, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x33d}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x9c058)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x59, 0x8, 0x3, "3258c5c000e12d001b0000f400"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48)

6.550969638s ago: executing program 2 (id=4487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000002680)}, 0x20000890)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0)
syz_open_dev$video(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000040)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44040)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0)
r4 = dup(r3)
fallocate(r4, 0x10, 0x0, 0x1062200)
ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(0x0, r5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x24, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000)

6.392941266s ago: executing program 0 (id=4488):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

5.650734752s ago: executing program 2 (id=4490):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008800)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
unshare(0x40000000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200)
setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0)

5.082931919s ago: executing program 0 (id=4491):
memfd_create(0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x74, 0x88, 0xfc, 0x8, 0xa12, 0x5d10, 0x2663, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x86, 0x20, 0x6, [{{0x9, 0x4, 0xfd, 0xc, 0x1, 0x6e, 0xd1, 0xc8, 0x3, [], [{{0x9, 0x5, 0x2, 0x8, 0x40, 0x77, 0x0, 0xa}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x20, 0x0}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0)

5.032699715s ago: executing program 1 (id=4492):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]})
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x58, 0x4e25, 0x0, 0x2}, {0x0, 0xf, 0x0, 0x2, 0xfffffffffffffff6, 0x800002000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x4000008, 0x4}}, 0xe8)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x2060000, 0x0, 0x800, 0x7, 0x0})

4.880289518s ago: executing program 1 (id=4493):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x90)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000070000880240007800800060048000000040005"], 0x164}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x489d0}, 0x80)

4.716531423s ago: executing program 1 (id=4494):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f00000000c0)={0x18, r7, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x1000}]})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0)
read$usbfs(r8, &(0x7f00000001c0)=""/93, 0x5d)
ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f00000002c0))
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1})
socket$l2tp6(0xa, 0x2, 0x73)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, &(0x7f0000000180)="97ed68a9353ffd875a6aa3d084def843a0e3e62c40c1448c9704a3e4a7c009d30187759a5252b633c93a88755f8bed345862355f2bf6babb636601230bfab2bc8b001b99d83b659b5604b0f5228b6b5a44cea38d6411161580c964c9561046976afb32f12bb81251c73377c1274cd4a7e31ffc41c3584caac8c760ae9b5a87a8809aeb536437dc7aeecd8ecb05b368cdf25e892cd60d82d01247f861f4c06841d8249052fa5be754a570e9f3b579f4c205e83db40cd487852babe61ab575182be4", 0xc1, 0x2, 0x1})
io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

2.932318188s ago: executing program 4 (id=4497):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setrlimit(0xe, 0x0)
socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @private2={0xfc, 0x2, '\x00', 0x40}, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590042})
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000004c0)={0xd, 0xe778, 0xb1d})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x6, 0xa, {{0x29, 0x4, 0x1, 0x13, 0xa4, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty, {[@timestamp_addr={0x44, 0x2c, 0xac, 0x1, 0x8, [{@multicast1, 0x4f}, {@private=0xa010100, 0x9}, {@broadcast, 0x2}, {@remote, 0x8000}, {@private=0xa010102, 0x400}]}, @timestamp_prespec={0x44, 0x44, 0x3, 0x3, 0x3, [{@private=0xa010100, 0x2}, {@empty, 0x2}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbb8}, {@empty, 0x7}, {@local, 0x4}, {@empty, 0x1}]}, @noop, @generic={0x88, 0xb, "4c561df1d93116c03f"}, @rr={0x7, 0x3, 0x42}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x7, [{@broadcast, 0x1}]}, @timestamp_prespec={0x44, 0x4, 0xc5, 0x3, 0x6}]}}}}})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00')
preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x329202, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48)

2.601777198s ago: executing program 4 (id=4498):
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c000180"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 4)

2.22065632s ago: executing program 2 (id=4499):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019440)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0, @ANYBLOB="e1900962", @ANYRESDEC=0x0, @ANYRES64, @ANYRES64], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = fsopen(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019400)=ANY=[@ANYRES32, @ANYBLOB], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000001b340)=[{{&(0x7f0000019300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f0000019a00)=[@rights={{0x24, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8, 0x8880}}, {{&(0x7f0000019b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000001ad40)=[{&(0x7f0000019b80)="96fa7e17e288f029a3db354aa03def384df186fb1e7a2f3e1ab561a3ff43e6bbe6832a2851a37b9539f57532100bc655e89dae1a0c375fe4ea4bab7b3d6af000fa1df834afd353e477f36aefe2a6fb282e8c5eb654c514163259816bec33d890c7437653810862c1054fc97a7887714b6e03710b3168fd58d0e5a676e9f7308360adf1bebf66d0c88ffea02e4b4500fd8f0936c00f6b22ebeedaf63a57b7636b821f37fa647c748d439a3748a5e4097cf0cdbd91aaa998c84cb56f8973181ff0873b62c8cc200a84f4a2839e0d87873645898c00a446fea567ba5fe7840893ee22d316274e9bd6", 0xe7}, {&(0x7f0000019c80)="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", 0x1000}, {&(0x7f000001ac80)="64baf04c87d1b0a23079c7f83429d5cf726056560654e68850e705ce15238e6cd5ef71e225b5f5d272cad8d82ba902d20dc5dc1d111637630964b2de423cf8404168c6c3c36d637250d8b4de26ef54f5111419e259170dd5ec3f6bba45c04d4742c8e847e899b4e97769f7eecdcdd5986e7d3f5f183641ef780453664cca549446c3cfd86f", 0x85}], 0x3, &(0x7f000001aec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r6]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5]}}, @cred={{0x1c}}], 0x110, 0x4000000}}, {{&(0x7f000001b000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000001b080), 0x0, &(0x7f000001b1c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158, 0x400c010}}], 0x3, 0x10)

2.160597363s ago: executing program 3 (id=4500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000002680)}, 0x20000890)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0)
syz_open_dev$video(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000040)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44040)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0)
r4 = dup(r3)
fallocate(r4, 0x10, 0x0, 0x1062200)
ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(0x0, r5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x24, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000)

2.147659822s ago: executing program 4 (id=4501):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x402, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0)

2.144608561s ago: executing program 1 (id=4502):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

1.511804305s ago: executing program 4 (id=4503):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfea7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setgid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x2, 0x0, &(0x7f0000000200))
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x1c00)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000480)=0x2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='rpcgss_createauth\x00'}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000e27f0000010000000076ca3b929e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0xffffffffffffff55)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc)

1.43467517s ago: executing program 2 (id=4504):
socket$inet6_mptcp(0xa, 0x1, 0x106)
add_key(&(0x7f00000003c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_reqkey_keyring(0xe, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
gettid()
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x10ffff, 0xffffff88})
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="d80000005400010001000000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010400000a01010000000000000000000000000008"], 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0xef, 0x1, 0x6})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0)

901.892467ms ago: executing program 4 (id=4505):
setresgid(0xee00, 0xee01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x40, 0x1, 0xfff7fffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x4, 0x143}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x4a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc840)
setregid(0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034)

886.530275ms ago: executing program 0 (id=4506):
socket(0xa, 0x3, 0x3a)
socket$inet(0x2, 0x3, 0x2)
r0 = syz_io_uring_setup(0xd38, &(0x7f0000001180)={0x0, 0x7736, 0x10, 0x3, 0x350}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20})
io_uring_enter(r0, 0x47bc, 0xf5, 0x0, 0x0, 0x0)

870.7609ms ago: executing program 3 (id=4507):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x894b, 0x0)

587.51693ms ago: executing program 4 (id=4508):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x145003, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x402081, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x20000c0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180065631000000000000c0000000c00000002000000000000000000000400000000"], 0x0, 0x26}, 0x20)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0xfffe, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000001c0)={0x9, 0x1, 0x401})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001200)={0x38, r6, 0x1, 0x0, 0x25dfdc00, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x20000000)

586.15894ms ago: executing program 1 (id=4509):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x103e4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000500)={0xe, 0x1, 0x1, "8c9c0a090441444fe8c4f552aa8d2246792c90fe7b6c527aa5df4438101a4559", 0x35303553})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, <r4=>0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, r4, r5, 0x0, 0x2, 0x60ff, 0x0, 0x1, 0x600, 0xfffffffa, 0x1, 0x1d})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

513.394458ms ago: executing program 0 (id=4510):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ptrace$setopts(0x4206, r0, 0x9, 0x59)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x1fdb, &(0x7f0000000000)={0x0, 0x4a8b, 0x40, 0x3, 0x2d3}, &(0x7f0000000100), &(0x7f0000000180)=<r1=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r5 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3)
pwrite64(r5, &(0x7f0000000180)='q', 0x1, 0x100004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x404c884, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendfile(r6, r5, 0x0, 0xd39a)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
munmap(&(0x7f0000005000/0x1000)=nil, 0x1000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r7, &(0x7f0000000480)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x4}]}}}}}}, 0x42)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r4, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x2, 0xfffffffe, 0x200dd, r9, 0xfffffff9, '\x00', 0x0, r9, 0x4, 0x4, 0x4, 0xc}, 0x50)

0s ago: executing program 1 (id=4511):
r0 = socket(0x28, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x2, 0x4, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$cont(0x20, r5, 0x0, 0x0)
ptrace$cont(0x1f, r5, 0x5, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0xb0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]})
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94)

kernel console output (not intermixed with test programs):

6245][T21768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1510.659546][ T5879] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1510.822262][ T5879] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1510.838067][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.864624][ T5879] usb 2-1: config 0 descriptor??
[ 1511.109891][ T5879] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e
[ 1511.130544][ T5879] hackrf 2-1:0.0: Could not detect board
[ 1511.147867][ T5879] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[ 1511.165354][ T5879] usb 2-1: USB disconnect, device number 64
[ 1511.447126][ T6553] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1511.456324][T15539] usbhid 3-1:0.0: can't add hid device: -71
[ 1511.465624][T15539] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1511.481200][T15539] usb 3-1: USB disconnect, device number 62
[ 1511.622606][ T6553] usb 1-1: config index 0 descriptor too short (expected 64548, got 36)
[ 1511.632025][ T6553] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 1511.640154][ T6553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1511.649312][ T6553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1511.660916][ T6553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1511.671645][ T6553] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[ 1511.692003][ T6553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.720505][ T6553] usb 1-1: config 0 descriptor??
[ 1512.003198][ T5879] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1512.224996][T21791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4046'.
[ 1512.311721][ T5879] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1512.322029][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.411843][ T5879] usb 5-1: config 0 descriptor??
[ 1512.996769][T18949] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1513.033071][T18949] usbhid 4-1:0.0: can't add hid device: -71
[ 1513.050228][T18949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1513.224189][T18949] usb 4-1: USB disconnect, device number 57
[ 1513.398328][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'.
[ 1513.547290][ T5879] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0e
[ 1513.760121][ T5879] hackrf 5-1:0.0: Could not detect board
[ 1513.765957][ T5879] hackrf 5-1:0.0: probe with driver hackrf failed with error -110
[ 1515.071007][ T5879] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[ 1515.216358][ T6553] usbhid 1-1:0.0: can't add hid device: -71
[ 1515.228140][ T6553] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1515.249546][ T5879] usb 3-1: config 7 has an invalid interface number: 101 but max is 0
[ 1515.271454][ T6553] usb 1-1: USB disconnect, device number 38
[ 1515.277770][ T5879] usb 3-1: config 7 has no interface number 0
[ 1515.298348][ T5879] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[ 1515.317773][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.333721][ T5879] usb 3-1: Product: syz
[ 1515.347878][ T5879] usb 3-1: Manufacturer: syz
[ 1515.357749][ T5879] usb 3-1: SerialNumber: syz
[ 1515.624065][T15693] usb 2-1: new low-speed USB device number 65 using dummy_hcd
[ 1515.669386][T15539] usb 5-1: USB disconnect, device number 65
[ 1515.802467][T15693] usb 2-1: Invalid ep0 maxpacket: 64
[ 1515.813831][T21827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4060'.
[ 1515.835234][T21824] sp0: Synchronizing with TNC
[ 1515.882653][T21823] [U] è
[ 1515.941428][T15693] usb 2-1: new low-speed USB device number 66 using dummy_hcd
[ 1516.014934][T21828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1516.083504][T21828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1516.100800][T15693] usb 2-1: Invalid ep0 maxpacket: 64
[ 1516.107414][T15693] usb usb2-port1: attempt power cycle
[ 1516.178124][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4062'.
[ 1516.236500][T21836] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4062'.
[ 1516.260741][T15539] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1516.298906][T21834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4062'.
[ 1516.337887][T21834] bond5 (unregistering): Released all slaves
[ 1516.491023][T15693] usb 2-1: new low-speed USB device number 67 using dummy_hcd
[ 1516.532158][T15693] usb 2-1: Invalid ep0 maxpacket: 64
[ 1516.670873][T15693] usb 2-1: new low-speed USB device number 68 using dummy_hcd
[ 1516.698624][T15693] usb 2-1: Invalid ep0 maxpacket: 64
[ 1516.706064][T15693] usb usb2-port1: unable to enumerate USB device
[ 1517.100663][T15539] usb 1-1: Using ep0 maxpacket: 32
[ 1517.108333][T15539] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1517.116872][T21839] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1517.137255][T15539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1517.162257][T15539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1517.180085][T15539] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1517.189496][T15539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.208461][T15539] usb 1-1: config 0 descriptor??
[ 1517.216533][T21831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1517.233020][T15539] hub 1-1:0.0: USB hub found
[ 1517.293932][ T5879] as10x_usb: device has been detected
[ 1517.310324][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[ 1517.352194][ T5879] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[ 1517.467390][ T5879] as10x_usb: error during firmware upload part1
[ 1517.474286][ T5879] Registered device Elgato EyeTV DTT Deluxe
[ 1517.480074][ T5879] usb 3-1: USB disconnect, device number 63
[ 1517.957576][ T5879] Unregistered device Elgato EyeTV DTT Deluxe
[ 1517.960290][ T5879] as10x_usb: device has been disconnected
[ 1519.435098][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4068'.
[ 1519.684730][T21870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4069'.
[ 1519.764252][T15539] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1519.943989][T15539] usbhid 1-1:0.0: can't add hid device: -71
[ 1519.949965][T15539] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1519.981813][T15539] usb 1-1: USB disconnect, device number 39
[ 1520.033557][T21880] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1520.042107][T21883] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4072'.
[ 1520.470751][T21869] FAULT_INJECTION: forcing a failure.
[ 1520.470751][T21869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1520.814768][T21869] CPU: 1 UID: 0 PID: 21869 Comm: syz.1.4070 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1520.814801][T21869] Tainted: [L]=SOFTLOCKUP
[ 1520.814805][T21869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1520.814811][T21869] Call Trace:
[ 1520.814816][T21869]  <TASK>
[ 1520.814822][T21869]  dump_stack_lvl+0x16c/0x1f0
[ 1520.814839][T21869]  should_fail_ex+0x512/0x640
[ 1520.814857][T21869]  _copy_from_user+0x2e/0xd0
[ 1520.814870][T21869]  restore_sigcontext+0xcb/0x6a0
[ 1520.814887][T21869]  ? __pfx_restore_sigcontext+0x10/0x10
[ 1520.814911][T21869]  ? __pfx_restore_altstack+0x10/0x10
[ 1520.814924][T21869]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1520.814940][T21869]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1520.814953][T21869]  __do_sys_rt_sigreturn+0x229/0x2c0
[ 1520.814968][T21869]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[ 1520.814987][T21869]  do_syscall_64+0xcd/0xf80
[ 1520.814999][T21869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.815010][T21869] RIP: 0033:0x7fc67272b829
[ 1520.815019][T21869] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 1520.815030][T21869] RSP: 002b:00007fc673555340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[ 1520.815041][T21869] RAX: ffffffffffffffda RBX: 00007fc6729e5fa0 RCX: 00007fc67272b829
[ 1520.815047][T21869] RDX: 00007fc673555340 RSI: 00007fc673555470 RDI: 0000000000000021
[ 1520.815054][T21869] RBP: 00007fc673556090 R08: 0000000000000000 R09: 0000000000000000
[ 1520.815059][T21869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[ 1520.815065][T21869] R13: 00007fc6729e6038 R14: 00007fc6729e5fa0 R15: 00007ffc268bc548
[ 1520.815079][T21869]  </TASK>
[ 1521.508220][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4076'.
[ 1521.692545][T21903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1521.782922][T21903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1521.822728][T21904] input: syz0 as /devices/virtual/input/input47
[ 1522.710676][ T5886] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1522.925709][ T5886] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1522.935533][T21921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4083'.
[ 1522.946326][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.988941][ T5886] usb 2-1: Product: syz
[ 1522.993932][ T5886] usb 2-1: Manufacturer: syz
[ 1522.998609][ T5886] usb 2-1: SerialNumber: syz
[ 1523.343334][ T5886] usb 2-1: palm_os_4_probe - error -110 getting connection info
[ 1524.196784][ T5886] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[ 1524.215984][ T5886] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1524.242616][ T5886] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1524.263174][ T5886] usb 2-1: USB disconnect, device number 69
[ 1524.273476][ T5886] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1524.285316][ T5886] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1524.322973][ T5886] visor 2-1:1.0: device disconnected
[ 1525.049485][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4089'.
[ 1526.003847][T21954] FAULT_INJECTION: forcing a failure.
[ 1526.003847][T21954] name failslab, interval 1, probability 0, space 0, times 0
[ 1526.017462][T21954] CPU: 1 UID: 0 PID: 21954 Comm: syz.4.4091 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1526.017501][T21954] Tainted: [L]=SOFTLOCKUP
[ 1526.017507][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1526.017518][T21954] Call Trace:
[ 1526.017524][T21954]  <TASK>
[ 1526.017531][T21954]  dump_stack_lvl+0x16c/0x1f0
[ 1526.017556][T21954]  should_fail_ex+0x512/0x640
[ 1526.017578][T21954]  ? fs_reclaim_acquire+0xae/0x150
[ 1526.017604][T21954]  should_failslab+0xc2/0x120
[ 1526.017628][T21954]  __kmalloc_noprof+0xeb/0x910
[ 1526.017655][T21954]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1526.017682][T21954]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1526.017700][T21954]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1526.017723][T21954]  ? tomoyo_profile+0x47/0x60
[ 1526.017747][T21954]  tomoyo_path_number_perm+0x245/0x580
[ 1526.017764][T21954]  ? tomoyo_path_number_perm+0x237/0x580
[ 1526.017784][T21954]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1526.017813][T21954]  ? find_held_lock+0x2b/0x80
[ 1526.017863][T21954]  ? find_held_lock+0x2b/0x80
[ 1526.017888][T21954]  ? hook_file_ioctl_common+0x144/0x410
[ 1526.017917][T21954]  ? __fget_files+0x20e/0x3c0
[ 1526.017946][T21954]  security_file_ioctl+0x9b/0x240
[ 1526.017967][T21954]  __x64_sys_ioctl+0xb7/0x210
[ 1526.017989][T21954]  do_syscall_64+0xcd/0xf80
[ 1526.018009][T21954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.018027][T21954] RIP: 0033:0x7fcf4778f749
[ 1526.018042][T21954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1526.018058][T21954] RSP: 002b:00007fcf459f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1526.018077][T21954] RAX: ffffffffffffffda RBX: 00007fcf479e6090 RCX: 00007fcf4778f749
[ 1526.018089][T21954] RDX: 0000200000000100 RSI: 00000000c028aa03 RDI: 0000000000000006
[ 1526.018099][T21954] RBP: 00007fcf459f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.018110][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1526.018120][T21954] R13: 00007fcf479e6128 R14: 00007fcf479e6090 R15: 00007ffef42b6b98
[ 1526.018144][T21954]  </TASK>
[ 1526.018161][T21954] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1526.844082][T21964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1526.882922][T21961] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1526.966531][T21964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.087845][   T30] audit: type=1400 audit(1765570156.482:1235): avc:  denied  { connect } for  pid=21968 comm="syz.3.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1527.174295][   T30] audit: type=1400 audit(1765570156.512:1236): avc:  denied  { write } for  pid=21968 comm="syz.3.4097" path="socket:[71302]" dev="sockfs" ino=71302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1527.311889][T15693] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1527.833864][T15693] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1527.945572][T15693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.961560][T15693] usb 1-1: Product: syz
[ 1527.965795][T15693] usb 1-1: Manufacturer: syz
[ 1528.127273][T15693] usb 1-1: SerialNumber: syz
[ 1528.741331][T15693] usb 1-1: palm_os_4_probe - error -110 getting connection info
[ 1528.800321][T15693] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1529.244413][T15693] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1529.314862][T15693] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1529.495606][ T5886] usb 1-1: USB disconnect, device number 40
[ 1529.503012][ T5886] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1529.954134][ T5886] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1529.981745][ T5886] visor 1-1:1.0: device disconnected
[ 1530.857605][T21993] block nbd2: shutting down sockets
[ 1531.096499][T22003] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1531.668439][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1531.695458][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1532.638565][T22025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4112'.
[ 1532.819946][   T30] audit: type=1400 audit(1765570162.212:1237): avc:  denied  { append } for  pid=22024 comm="syz.2.4114" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1532.877854][T22027] loop6: detected capacity change from 0 to 4096
[ 1533.348455][T22039] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1533.584352][T22040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1533.861477][T15693] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1533.897671][   T30] audit: type=1400 audit(1765570163.282:1238): avc:  denied  { create } for  pid=22048 comm="syz.2.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1533.950776][ T5886] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1534.041855][T15693] usb 2-1: Using ep0 maxpacket: 32
[ 1534.051939][T15693] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1534.087783][T15693] usb 2-1: can't read configurations, error -61
[ 1534.123963][ T5886] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1534.152833][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.161152][T15539] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1534.197390][ T5886] usb 4-1: config 0 descriptor??
[ 1534.241484][T15693] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1534.300656][T15539] usb 3-1: device descriptor read/64, error -71
[ 1534.342470][ T5879] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1534.420824][T15693] usb 2-1: Using ep0 maxpacket: 32
[ 1534.434498][T15693] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1534.444785][T15693] usb 2-1: can't read configurations, error -61
[ 1534.455789][T15693] usb usb2-port1: attempt power cycle
[ 1534.517695][ T5879] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1534.573063][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1534.574332][T15539] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1534.581794][ T5879] usb 1-1: Product: syz
[ 1534.595943][ T5879] usb 1-1: Manufacturer: syz
[ 1534.601092][ T5879] usb 1-1: SerialNumber: syz
[ 1534.730686][T15539] usb 3-1: device descriptor read/64, error -71
[ 1534.843981][T15539] usb usb3-port1: attempt power cycle
[ 1534.844051][T15693] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1534.961469][ T5879] usb 1-1: palm_os_4_probe - error -110 getting connection info
[ 1535.083037][T15693] usb 2-1: Using ep0 maxpacket: 32
[ 1535.117166][T15693] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1535.127353][ T5879] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1535.136107][T15693] usb 2-1: can't read configurations, error -61
[ 1535.149646][ T5879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1535.163832][ T5879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1535.189935][ T5879] usb 1-1: USB disconnect, device number 41
[ 1535.190687][T15539] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1535.221659][ T5879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1535.243034][T15539] usb 3-1: device descriptor read/8, error -71
[ 1535.255534][ T5886] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0e
[ 1535.269941][ T5886] hackrf 4-1:0.0: Could not detect board
[ 1535.276977][ T5886] hackrf 4-1:0.0: probe with driver hackrf failed with error -110
[ 1535.290729][T15693] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1535.329394][ T5879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1535.353000][ T5879] visor 1-1:1.0: device disconnected
[ 1535.371870][T15693] usb 2-1: Using ep0 maxpacket: 32
[ 1535.381098][T15693] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1535.393232][T15693] usb 2-1: can't read configurations, error -61
[ 1535.400123][T15693] usb usb2-port1: unable to enumerate USB device
[ 1535.500740][T15539] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1535.521579][T15539] usb 3-1: device descriptor read/8, error -71
[ 1535.693084][T15539] usb usb3-port1: unable to enumerate USB device
[ 1535.744448][ T5879] usb 4-1: USB disconnect, device number 58
[ 1536.258463][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4125'.
[ 1536.616191][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'.
[ 1536.627831][T22079] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4126'.
[ 1536.641307][   T30] audit: type=1400 audit(1765570166.042:1239): avc:  denied  { write } for  pid=22078 comm="syz.4.4126" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1537.498149][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'.
[ 1537.591417][   T30] audit: type=1400 audit(1765570166.982:1240): avc:  denied  { setattr } for  pid=22085 comm="syz.0.4129" name="secretmem" dev="secretmem" ino=70392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1537.892963][T22108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4134'.
[ 1537.952530][T22109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4131'.
[ 1538.078457][T22106] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1539.241585][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4137'.
[ 1539.911705][T22124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1539.918944][T22124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1540.931098][T15539] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1541.074168][T15539] usb 3-1: device descriptor read/64, error -71
[ 1541.169209][  T422] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.179559][  T422] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.303797][  T422] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.320781][T15539] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1541.435838][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4143'.
[ 1541.634130][T22158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4143'.
[ 1541.670796][T15539] usb 3-1: device descriptor read/64, error -71
[ 1541.713043][T22159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4143'.
[ 1541.813655][T15539] usb usb3-port1: attempt power cycle
[ 1541.934996][  T422] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1542.229875][T15539] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1542.262154][T22161] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1542.271877][T15539] usb 3-1: device descriptor read/8, error -71
[ 1542.684131][T15539] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1542.711339][T15539] usb 3-1: device descriptor read/8, error -71
[ 1542.790989][T22161] ALSA: mixer_oss: invalid OSS volume ''
[ 1542.829327][T15539] usb usb3-port1: unable to enumerate USB device
[ 1543.642963][T22182] FAULT_INJECTION: forcing a failure.
[ 1543.642963][T22182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1543.748475][T22182] CPU: 0 UID: 0 PID: 22182 Comm: syz.1.4150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1543.748509][T22182] Tainted: [L]=SOFTLOCKUP
[ 1543.748515][T22182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1543.748526][T22182] Call Trace:
[ 1543.748533][T22182]  <TASK>
[ 1543.748541][T22182]  dump_stack_lvl+0x16c/0x1f0
[ 1543.748571][T22182]  should_fail_ex+0x512/0x640
[ 1543.748636][T22182]  _copy_from_user+0x2e/0xd0
[ 1543.748660][T22182]  memdup_user+0x6b/0xe0
[ 1543.748680][T22182]  adf_ctl_ioctl+0x5a8/0x1080
[ 1543.748704][T22182]  ? __pfx_adf_ctl_ioctl+0x10/0x10
[ 1543.748726][T22182]  ? selinux_file_ioctl+0x180/0x270
[ 1543.748743][T22182]  ? selinux_file_ioctl+0xb4/0x270
[ 1543.748762][T22182]  ? __pfx_adf_ctl_ioctl+0x10/0x10
[ 1543.748788][T22182]  __x64_sys_ioctl+0x18e/0x210
[ 1543.748813][T22182]  do_syscall_64+0xcd/0xf80
[ 1543.748833][T22182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1543.748850][T22182] RIP: 0033:0x7fc67278f749
[ 1543.748865][T22182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1543.748882][T22182] RSP: 002b:00007fc673556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1543.748900][T22182] RAX: ffffffffffffffda RBX: 00007fc6729e5fa0 RCX: 00007fc67278f749
[ 1543.748912][T22182] RDX: 0000200000000700 RSI: 0000000040096101 RDI: 0000000000000003
[ 1543.748922][T22182] RBP: 00007fc673556090 R08: 0000000000000000 R09: 0000000000000000
[ 1543.748932][T22182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1543.748942][T22182] R13: 00007fc6729e6038 R14: 00007fc6729e5fa0 R15: 00007ffc268bc548
[ 1543.748968][T22182]  </TASK>
[ 1543.961174][T22182] QAT: failed to copy from user cfg_data.
[ 1544.597991][T22193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4153'.
[ 1545.063190][T22201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1545.222530][T22198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1545.485581][T22206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1545.665971][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.672347][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.725723][T22213] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1545.881041][T22204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1546.807813][T22223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4163'.
[ 1546.961965][T22225] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1547.114653][T22229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4164'.
[ 1550.706657][ T5921] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1550.709307][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1551.005559][T22274] Failed to initialize the IGMP autojoin socket (err -2)
[ 1551.064954][T22275] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1551.072246][T22275] overlayfs: failed to set xattr on upper
[ 1551.077993][T22275] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1551.084883][T22275] overlayfs: ...falling back to index=off.
[ 1551.090711][T22275] overlayfs: ...falling back to uuid=null.
[ 1551.096511][T22275] overlayfs: maximum fs stacking depth exceeded
[ 1551.166000][   T30] audit: type=1400 audit(1765570180.402:1241): avc:  denied  { mounton } for  pid=22266 comm="syz.4.4176" path="/proc/710/cgroup" dev="proc" ino=72827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[ 1551.197001][   T30] audit: type=1400 audit(1765570180.452:1242): avc:  denied  { mount } for  pid=22266 comm="syz.4.4176" name="/" dev="hugetlbfs" ino=72841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 1551.208377][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1551.449186][ T5921] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1551.528343][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.595998][   T30] audit: type=1400 audit(1765570180.462:1243): avc:  denied  { mounton } for  pid=22266 comm="syz.4.4176" path="/file0" dev="hugetlbfs" ino=72843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[ 1551.626645][ T5921] usb 1-1: Product: syz
[ 1551.662242][ T5921] usb 1-1: Manufacturer: syz
[ 1551.698521][ T5921] usb 1-1: SerialNumber: syz
[ 1552.660011][ T5921] usb 1-1: palm_os_4_probe - error -110 getting connection info
[ 1552.667886][ T5921] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1552.685371][ T5921] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1552.706921][ T5921] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1552.729888][ T5921] usb 1-1: USB disconnect, device number 42
[ 1552.816940][   T30] audit: type=1400 audit(1765570182.212:1244): avc:  denied  { write } for  pid=22282 comm="syz.4.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1553.204535][ T5921] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1553.355122][ T5921] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1553.369350][ T5921] visor 1-1:1.0: device disconnected
[ 1553.410988][T15539] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1553.640614][T15539] usb 3-1: Using ep0 maxpacket: 16
[ 1553.699823][T15539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1553.720955][T15539] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1553.730383][T15539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.743745][T15539] usb 3-1: config 0 descriptor??
[ 1553.750636][T16460] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1553.837757][T22308] binder: Unknown parameter 'audit'
[ 1553.952996][T22311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1553.963225][T16460] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1553.964884][T22311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1553.973780][T16460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.151900][T16460] usb 5-1: Product: syz
[ 1554.156713][T16460] usb 5-1: Manufacturer: syz
[ 1554.246378][T16460] usb 5-1: SerialNumber: syz
[ 1554.572459][T15539] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[ 1554.591656][T16460] usb 5-1: palm_os_4_probe - error -110 getting connection info
[ 1554.600261][T16460] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[ 1554.911560][T16460] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1554.924456][T16460] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1555.025254][T16460] usb 5-1: USB disconnect, device number 66
[ 1555.057767][T16460] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1555.076848][T16460] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1555.110727][T16460] visor 5-1:1.0: device disconnected
[ 1556.551984][T22332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1557.427039][ T5879] usb 3-1: USB disconnect, device number 72
[ 1557.559574][T22344] FAULT_INJECTION: forcing a failure.
[ 1557.559574][T22344] name failslab, interval 1, probability 0, space 0, times 0
[ 1557.572709][T22344] CPU: 0 UID: 0 PID: 22344 Comm: syz.3.4196 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1557.572738][T22344] Tainted: [L]=SOFTLOCKUP
[ 1557.572744][T22344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1557.572754][T22344] Call Trace:
[ 1557.572761][T22344]  <TASK>
[ 1557.572769][T22344]  dump_stack_lvl+0x16c/0x1f0
[ 1557.572795][T22344]  should_fail_ex+0x512/0x640
[ 1557.572818][T22344]  ? fs_reclaim_acquire+0xae/0x150
[ 1557.572845][T22344]  should_failslab+0xc2/0x120
[ 1557.572868][T22344]  __kmalloc_noprof+0xeb/0x910
[ 1557.572896][T22344]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1557.572933][T22344]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1557.572953][T22344]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1557.572975][T22344]  ? tomoyo_profile+0x47/0x60
[ 1557.573000][T22344]  tomoyo_path_number_perm+0x245/0x580
[ 1557.573015][T22344]  ? tomoyo_path_number_perm+0x237/0x580
[ 1557.573035][T22344]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1557.573069][T22344]  ? find_held_lock+0x2b/0x80
[ 1557.573100][T22344]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1557.573119][T22344]  ? irqentry_exit+0x1dd/0x8c0
[ 1557.573148][T22344]  ? hook_file_ioctl_common+0x36/0x410
[ 1557.573172][T22344]  ? hook_file_ioctl_common+0x66/0x410
[ 1557.573195][T22344]  ? hook_file_ioctl_common+0x144/0x410
[ 1557.573223][T22344]  ? __fget_files+0x20e/0x3c0
[ 1557.573252][T22344]  security_file_ioctl+0x9b/0x240
[ 1557.573273][T22344]  __x64_sys_ioctl+0xb7/0x210
[ 1557.573295][T22344]  do_syscall_64+0xcd/0xf80
[ 1557.573314][T22344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1557.573330][T22344] RIP: 0033:0x7f0ef158f749
[ 1557.573346][T22344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1557.573362][T22344] RSP: 002b:00007f0ef2415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1557.573381][T22344] RAX: ffffffffffffffda RBX: 00007f0ef17e6090 RCX: 00007f0ef158f749
[ 1557.573392][T22344] RDX: 0000200000000100 RSI: 00000000c028aa03 RDI: 0000000000000007
[ 1557.573403][T22344] RBP: 00007f0ef2415090 R08: 0000000000000000 R09: 0000000000000000
[ 1557.573413][T22344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1557.573423][T22344] R13: 00007f0ef17e6128 R14: 00007f0ef17e6090 R15: 00007fff2be2ba48
[ 1557.573448][T22344]  </TASK>
[ 1557.801301][T22344] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1559.234162][T22353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4199'.
[ 1559.835665][ T5879] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1560.100625][ T5879] usb 1-1: device descriptor read/64, error -71
[ 1560.134329][   T30] audit: type=1400 audit(1765570189.532:1245): avc:  denied  { ioctl } for  pid=22369 comm="syz.1.4205" path="socket:[73006]" dev="sockfs" ino=73006 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1560.184849][   T30] audit: type=1400 audit(1765570189.562:1246): avc:  denied  { connect } for  pid=22369 comm="syz.1.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1560.217031][T22372] QAT: Device 116 not found
[ 1560.281033][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1560.408466][ T6553] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1560.419108][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1560.598706][ T5879] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1560.628414][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'.
[ 1560.731178][ T6553] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1560.768846][ T6553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1560.800720][ T5879] usb 1-1: device descriptor read/64, error -71
[ 1560.811332][ T6553] usb 3-1: Product: syz
[ 1560.837648][ T6553] usb 3-1: Manufacturer: syz
[ 1560.852442][ T6553] usb 3-1: SerialNumber: syz
[ 1561.057828][ T5879] usb usb1-port1: attempt power cycle
[ 1562.375875][ T6553] usb 3-1: palm_os_4_probe - error -110 getting connection info
[ 1562.518310][ T6553] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 1562.537057][ T5879] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1562.679317][ T6553] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1562.705340][ T6553] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1562.805843][T16460] usb 3-1: USB disconnect, device number 73
[ 1562.813783][T16460] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1562.836300][T16460] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1562.840899][ T5879] usb 1-1: device not accepting address 45, error -71
[ 1562.856801][T16460] visor 3-1:1.0: device disconnected
[ 1563.328200][T22405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4214'.
[ 1563.361848][ T5879] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1563.461053][ T5879] usb 1-1: Using ep0 maxpacket: 32
[ 1563.482002][ T5879] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1563.500249][ T5879] usb 1-1: config 0 has no interface number 0
[ 1563.514481][ T5879] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1563.527765][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.540691][ T5879] usb 1-1: Product: syz
[ 1563.544942][ T5879] usb 1-1: Manufacturer: syz
[ 1563.601259][ T5879] usb 1-1: SerialNumber: syz
[ 1563.683189][ T5879] usb 1-1: config 0 descriptor??
[ 1563.875341][T22420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4216'.
[ 1564.345738][ T5879] smsc95xx v2.0.0
[ 1564.416341][ T5879] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1564.534683][ T5879] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22
[ 1564.595929][ T5879] usb 1-1: USB disconnect, device number 46
[ 1564.931259][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4223'.
[ 1564.987286][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'.
[ 1565.000691][T16460] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1565.072453][T22441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4223'.
[ 1565.268600][T16460] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1565.342490][T16460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.402268][T16460] usb 4-1: Product: syz
[ 1565.428809][T16460] usb 4-1: Manufacturer: syz
[ 1565.462400][T16460] usb 4-1: SerialNumber: syz
[ 1565.681198][T22445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1565.694351][T22448] FAULT_INJECTION: forcing a failure.
[ 1565.694351][T22448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1565.710627][T22448] CPU: 0 UID: 0 PID: 22448 Comm: syz.2.4227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1565.710658][T22448] Tainted: [L]=SOFTLOCKUP
[ 1565.710664][T22448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1565.710675][T22448] Call Trace:
[ 1565.710681][T22448]  <TASK>
[ 1565.710687][T22448]  dump_stack_lvl+0x16c/0x1f0
[ 1565.710712][T22448]  should_fail_ex+0x512/0x640
[ 1565.710739][T22448]  strncpy_from_user+0x3b/0x2e0
[ 1565.710763][T22448]  getname_flags.part.0+0x8f/0x550
[ 1565.710784][T22448]  getname_flags+0x93/0xf0
[ 1565.710805][T22448]  __x64_sys_renameat+0xaf/0x100
[ 1565.710824][T22448]  do_syscall_64+0xcd/0xf80
[ 1565.710844][T22448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.710861][T22448] RIP: 0033:0x7fcefef8f749
[ 1565.710876][T22448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1565.710892][T22448] RSP: 002b:00007fceffd80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108
[ 1565.710908][T22448] RAX: ffffffffffffffda RBX: 00007fceff1e5fa0 RCX: 00007fcefef8f749
[ 1565.710918][T22448] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff
[ 1565.710929][T22448] RBP: 00007fceffd80090 R08: 0000000000000000 R09: 0000000000000000
[ 1565.710938][T22448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1565.710948][T22448] R13: 00007fceff1e6038 R14: 00007fceff1e5fa0 R15: 00007ffd40248de8
[ 1565.710971][T22448]  </TASK>
[ 1565.880136][T22449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1566.021279][T16460] usb 4-1: palm_os_4_probe - error -110 getting connection info
[ 1566.048620][T16460] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[ 1566.212989][T16460] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1566.233266][T16460] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1566.283194][ T5879] usb 4-1: USB disconnect, device number 59
[ 1566.301765][ T5879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1566.344137][ T5879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1566.403241][ T5879] visor 4-1:1.0: device disconnected
[ 1566.610731][ T6553] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1567.078441][ T6553] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1567.088667][ T6553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.097937][ T6553] usb 5-1: Product: syz
[ 1567.103165][ T6553] usb 5-1: Manufacturer: syz
[ 1567.107921][ T6553] usb 5-1: SerialNumber: syz
[ 1567.440737][T16460] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1567.455067][ T6553] usb 5-1: palm_os_4_probe - error -110 getting connection info
[ 1567.460627][ T5921] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[ 1567.515278][ T6553] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[ 1567.613130][T16460] usb 3-1: Using ep0 maxpacket: 16
[ 1567.646025][ T6553] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1567.647554][T16460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1567.680970][ T5921] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1567.705268][ T5921] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1567.713578][T16460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1567.726320][T16460] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1567.740838][T16460] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1567.752657][T16460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.773670][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1567.795812][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.804279][ T5921] usb 1-1: Product: syz
[ 1567.808479][ T5921] usb 1-1: Manufacturer: င
[ 1567.813763][ T5921] usb 1-1: SerialNumber: syz
[ 1567.891537][ T6553] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1568.391430][ T6553] usb 5-1: USB disconnect, device number 67
[ 1568.409213][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'.
[ 1568.455878][ T6553] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1568.594209][ T6553] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1568.604435][ T6553] visor 5-1:1.0: device disconnected
[ 1568.807306][T16460] usb 3-1: config 0 descriptor??
[ 1568.813714][T22468] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1569.394163][T22464] netlink: 'syz.2.4232': attribute type 1 has an invalid length.
[ 1569.459382][T22488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4237'.
[ 1569.804165][T16460] usbhid 3-1:0.0: can't add hid device: -71
[ 1569.815766][T16460] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1569.868426][T22499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4240'.
[ 1569.875311][T16460] usb 3-1: USB disconnect, device number 74
[ 1570.011122][   T30] audit: type=1400 audit(1765570199.412:1247): avc:  denied  { getopt } for  pid=22498 comm="syz.1.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1570.673022][T22513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'.
[ 1570.703403][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4241'.
[ 1570.713569][T22513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4241'.
[ 1571.463581][T22518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1571.483806][T16460] usb 1-1: USB disconnect, device number 47
[ 1571.932617][T22518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1572.016417][T22521] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1572.575436][T22526] FAULT_INJECTION: forcing a failure.
[ 1572.575436][T22526] name failslab, interval 1, probability 0, space 0, times 0
[ 1572.588609][T22526] CPU: 1 UID: 0 PID: 22526 Comm: syz.1.4246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1572.588628][T22526] Tainted: [L]=SOFTLOCKUP
[ 1572.588632][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1572.588638][T22526] Call Trace:
[ 1572.588643][T22526]  <TASK>
[ 1572.588648][T22526]  dump_stack_lvl+0x16c/0x1f0
[ 1572.588665][T22526]  should_fail_ex+0x512/0x640
[ 1572.588679][T22526]  ? __kmalloc_cache_noprof+0x5f/0x800
[ 1572.588699][T22526]  should_failslab+0xc2/0x120
[ 1572.588714][T22526]  __kmalloc_cache_noprof+0x80/0x800
[ 1572.588731][T22526]  ? allocate_cgrp_cset_links+0xca/0x230
[ 1572.588747][T22526]  ? allocate_cgrp_cset_links+0xca/0x230
[ 1572.588759][T22526]  allocate_cgrp_cset_links+0xca/0x230
[ 1572.588773][T22526]  find_css_set+0x785/0x1c70
[ 1572.588806][T22526]  ? __pfx_find_css_set+0x10/0x10
[ 1572.588827][T22526]  ? lockdep_unlock+0x64/0xd0
[ 1572.588857][T22526]  cgroup_migrate_prepare_dst+0x10b/0x7f0
[ 1572.588877][T22526]  cgroup_attach_task+0x3cc/0x700
[ 1572.588935][T22526]  ? __pfx_cgroup_attach_task+0x10/0x10
[ 1572.588958][T22526]  ? get_task_cred+0x189/0x360
[ 1572.588974][T22526]  __cgroup1_procs_write.constprop.0+0x2bc/0x430
[ 1572.588992][T22526]  ? __pfx___cgroup1_procs_write.constprop.0+0x10/0x10
[ 1572.589008][T22526]  ? kernfs_root+0xf8/0x2a0
[ 1572.589024][T22526]  cgroup_file_write+0x1ef/0x7a0
[ 1572.589038][T22526]  ? __pfx_cgroup1_procs_write+0x10/0x10
[ 1572.589053][T22526]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1572.589070][T22526]  kernfs_fop_write_iter+0x3af/0x570
[ 1572.589086][T22526]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1572.589101][T22526]  vfs_write+0x7d3/0x11d0
[ 1572.589116][T22526]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1572.589133][T22526]  ? __pfx_vfs_write+0x10/0x10
[ 1572.589157][T22526]  ksys_write+0x12a/0x250
[ 1572.589170][T22526]  ? __pfx_ksys_write+0x10/0x10
[ 1572.589181][T22526]  ? rcu_is_watching+0x12/0xc0
[ 1572.589196][T22526]  do_syscall_64+0xcd/0xf80
[ 1572.589209][T22526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1572.589221][T22526] RIP: 0033:0x7fc67278f749
[ 1572.589231][T22526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1572.589242][T22526] RSP: 002b:00007fc6709d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1572.589253][T22526] RAX: ffffffffffffffda RBX: 00007fc6729e6180 RCX: 00007fc67278f749
[ 1572.589260][T22526] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000006
[ 1572.589266][T22526] RBP: 00007fc6709d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1572.589272][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1572.589278][T22526] R13: 00007fc6729e6218 R14: 00007fc6729e6180 R15: 00007ffc268bc548
[ 1572.589293][T22526]  </TASK>
[ 1572.993199][T22533] sp0: Synchronizing with TNC
[ 1573.079059][   T30] audit: type=1804 audit(1765570202.462:1248): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.4250" name="/newroot/251/file1" dev="fuse" ino=1 res=1 errno=0
[ 1573.241072][ T6553] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1573.783641][T22546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4252'.
[ 1574.149856][   T30] audit: type=1800 audit(1765570202.472:1249): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4250" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1574.360655][ T6553] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1574.385366][ T6553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.409189][T22555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1574.452574][ T6553] usb 1-1: Product: syz
[ 1574.457213][ T6553] usb 1-1: Manufacturer: syz
[ 1574.492641][T22555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1574.703590][ T6553] usb 1-1: SerialNumber: syz
[ 1575.451731][ T6553] usb 1-1: palm_os_4_probe - error -110 getting connection info
[ 1575.497222][ T6553] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1575.550815][ T5879] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[ 1576.120882][ T6553] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1576.156076][ T6553] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1576.254226][ T6553] usb 1-1: USB disconnect, device number 48
[ 1576.341565][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4257'.
[ 1576.477792][   T30] audit: type=1804 audit(1765570205.872:1250): pid=22577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4256" name="/newroot/258/file1" dev="fuse" ino=1 res=1 errno=0
[ 1576.478767][T22574] FAULT_INJECTION: forcing a failure.
[ 1576.478767][T22574] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.543202][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'.
[ 1576.578176][T22574] CPU: 0 UID: 0 PID: 22574 Comm: syz.3.4256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1576.578207][T22574] Tainted: [L]=SOFTLOCKUP
[ 1576.578213][T22574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1576.578221][T22574] Call Trace:
[ 1576.578227][T22574]  <TASK>
[ 1576.578234][T22574]  dump_stack_lvl+0x16c/0x1f0
[ 1576.578254][T22574]  should_fail_ex+0x512/0x640
[ 1576.578273][T22574]  ? __kmalloc_noprof+0xca/0x910
[ 1576.578296][T22574]  should_failslab+0xc2/0x120
[ 1576.578314][T22574]  __kmalloc_noprof+0xeb/0x910
[ 1576.578334][T22574]  ? copy_splice_read+0x1a8/0xc20
[ 1576.578357][T22574]  ? copy_splice_read+0x1a8/0xc20
[ 1576.578373][T22574]  copy_splice_read+0x1a8/0xc20
[ 1576.578397][T22574]  ? __pfx_copy_splice_read+0x10/0x10
[ 1576.578417][T22574]  ? look_up_lock_class+0x59/0x130
[ 1576.578435][T22574]  ? lockdep_init_map_type+0x5c/0x270
[ 1576.578453][T22574]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1576.578472][T22574]  ? __pfx_fuse_splice_read+0x10/0x10
[ 1576.578487][T22574]  do_splice_read+0x2bd/0x370
[ 1576.578508][T22574]  splice_direct_to_actor+0x2a1/0xa30
[ 1576.578528][T22574]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1576.578550][T22574]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1576.578567][T22574]  ? get_pid_task+0xfc/0x250
[ 1576.578587][T22574]  do_splice_direct+0x174/0x240
[ 1576.578606][T22574]  ? __pfx_do_splice_direct+0x10/0x10
[ 1576.578624][T22574]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1576.578646][T22574]  ? rw_verify_area+0xcf/0x6c0
[ 1576.578663][T22574]  do_sendfile+0xb06/0xe50
[ 1576.578683][T22574]  ? __pfx_do_sendfile+0x10/0x10
[ 1576.578699][T22574]  ? __fget_files+0x20e/0x3c0
[ 1576.578722][T22574]  __x64_sys_sendfile64+0x1d8/0x220
[ 1576.578742][T22574]  ? ksys_write+0x1ac/0x250
[ 1576.578757][T22574]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1576.578782][T22574]  do_syscall_64+0xcd/0xf80
[ 1576.578804][T22574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.578818][T22574] RIP: 0033:0x7f0ef158f749
[ 1576.578838][T22574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1576.578851][T22574] RSP: 002b:00007f0ef2436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1576.578865][T22574] RAX: ffffffffffffffda RBX: 00007f0ef17e5fa0 RCX: 00007f0ef158f749
[ 1576.578874][T22574] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[ 1576.578882][T22574] RBP: 00007f0ef2436090 R08: 0000000000000000 R09: 0000000000000000
[ 1576.578891][T22574] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001
[ 1576.578899][T22574] R13: 00007f0ef17e6038 R14: 00007f0ef17e5fa0 R15: 00007fff2be2ba48
[ 1576.578919][T22574]  </TASK>
[ 1576.588916][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4257'.
[ 1576.924583][T22581] netlink: 'syz.4.4258': attribute type 10 has an invalid length.
[ 1576.957510][ T6553] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1577.000366][   T30] audit: type=1800 audit(1765570205.872:1251): pid=22577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4256" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1577.294337][ T6553] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1577.414589][ T6553] visor 1-1:1.0: device disconnected
[ 1577.509395][ T5879] usb 2-1: device descriptor read/all, error -71
[ 1577.819225][T22593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1577.880227][T22593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1578.950801][T16460] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1578.974294][T22581] team0 (unregistering): Port device team_slave_0 removed
[ 1578.998190][T22581] team0 (unregistering): Port device team_slave_1 removed
[ 1579.128280][T16460] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1579.137481][T16460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1579.150121][T16460] usb 4-1: Product: syz
[ 1579.163485][T16460] usb 4-1: Manufacturer: syz
[ 1579.173188][T16460] usb 4-1: SerialNumber: syz
[ 1579.310658][ T5921] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1579.330289][T22610] FAULT_INJECTION: forcing a failure.
[ 1579.330289][T22610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1579.367965][T22610] CPU: 1 UID: 0 PID: 22610 Comm: syz.4.4267 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1579.367995][T22610] Tainted: [L]=SOFTLOCKUP
[ 1579.368002][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1579.368012][T22610] Call Trace:
[ 1579.368018][T22610]  <TASK>
[ 1579.368027][T22610]  dump_stack_lvl+0x16c/0x1f0
[ 1579.368053][T22610]  should_fail_ex+0x512/0x640
[ 1579.368088][T22610]  _copy_to_user+0x32/0xd0
[ 1579.368111][T22610]  simple_read_from_buffer+0xcb/0x170
[ 1579.368136][T22610]  proc_fail_nth_read+0x197/0x240
[ 1579.368154][T22610]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1579.368174][T22610]  ? rw_verify_area+0xcf/0x6c0
[ 1579.368193][T22610]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1579.368210][T22610]  vfs_read+0x1e4/0xcf0
[ 1579.368232][T22610]  ? __pfx___mutex_lock+0x10/0x10
[ 1579.368255][T22610]  ? __pfx_vfs_read+0x10/0x10
[ 1579.368282][T22610]  ? __fget_files+0x20e/0x3c0
[ 1579.368313][T22610]  ksys_read+0x12a/0x250
[ 1579.368334][T22610]  ? __pfx_ksys_read+0x10/0x10
[ 1579.368360][T22610]  do_syscall_64+0xcd/0xf80
[ 1579.368378][T22610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1579.368395][T22610] RIP: 0033:0x7fcf4778e15c
[ 1579.368409][T22610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1579.368420][T22610] RSP: 002b:00007fcf4854f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1579.368432][T22610] RAX: ffffffffffffffda RBX: 00007fcf479e5fa0 RCX: 00007fcf4778e15c
[ 1579.368438][T22610] RDX: 000000000000000f RSI: 00007fcf4854f0a0 RDI: 0000000000000004
[ 1579.368444][T22610] RBP: 00007fcf4854f090 R08: 0000000000000000 R09: 0000000000000000
[ 1579.368451][T22610] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001
[ 1579.368457][T22610] R13: 00007fcf479e6038 R14: 00007fcf479e5fa0 R15: 00007ffef42b6b98
[ 1579.368471][T22610]  </TASK>
[ 1579.558698][T16460] usb 4-1: palm_os_4_probe - error -110 getting connection info
[ 1579.566476][T16460] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[ 1579.670744][ T5921] usb 3-1: Using ep0 maxpacket: 8
[ 1579.682325][T16460] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1579.744152][T16460] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1579.753242][ T5921] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1579.785848][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1579.891051][ T5921] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[ 1580.053314][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1580.518931][ T5921] usb 3-1: config 0 descriptor??
[ 1580.635640][ T6553] usb 4-1: USB disconnect, device number 60
[ 1580.647095][ T6553] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1580.678823][ T6553] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1580.704760][ T6553] visor 4-1:1.0: device disconnected
[ 1581.007865][ T5921] razer 0003:1532:011B.0028: hidraw0: USB HID vff.ff Device [HID 1532:011b] on usb-dummy_hcd.2-1/input0
[ 1581.100628][T16460] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1581.356879][   T30] audit: type=1400 audit(1765570210.752:1252): avc:  denied  { accept } for  pid=22607 comm="syz.2.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1581.399461][T22608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1581.440843][T22608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1581.462520][T16460] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1581.526407][ T6553] usb 3-1: USB disconnect, device number 75
[ 1582.035267][T22623] block nbd3: shutting down sockets
[ 1582.080359][T16460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1582.090592][T16460] usb 5-1: Product: syz
[ 1582.094788][T16460] usb 5-1: Manufacturer: syz
[ 1582.099390][T16460] usb 5-1: SerialNumber: syz
[ 1582.454056][T16460] usb 5-1: palm_os_4_probe - error -110 getting connection info
[ 1582.676971][T16460] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[ 1583.101648][T16460] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1583.112174][T22627] block nbd1: shutting down sockets
[ 1583.168368][T16460] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1583.197232][T16460] usb 5-1: USB disconnect, device number 68
[ 1583.205190][T16460] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1583.412205][T16460] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1583.516582][T16460] visor 5-1:1.0: device disconnected
[ 1583.927849][T22651] FAULT_INJECTION: forcing a failure.
[ 1583.927849][T22651] name failslab, interval 1, probability 0, space 0, times 0
[ 1583.940762][T22651] CPU: 1 UID: 0 PID: 22651 Comm: syz.1.4278 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1583.940791][T22651] Tainted: [L]=SOFTLOCKUP
[ 1583.940798][T22651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1583.940808][T22651] Call Trace:
[ 1583.940815][T22651]  <TASK>
[ 1583.940822][T22651]  dump_stack_lvl+0x16c/0x1f0
[ 1583.940846][T22651]  should_fail_ex+0x512/0x640
[ 1583.940867][T22651]  ? __kmalloc_cache_noprof+0x5f/0x800
[ 1583.940897][T22651]  should_failslab+0xc2/0x120
[ 1583.940919][T22651]  __kmalloc_cache_noprof+0x80/0x800
[ 1583.940944][T22651]  ? eventfd_ctx_fdget+0x95/0x110
[ 1583.940966][T22651]  ? kvm_assign_ioeventfd_idx+0xac/0xa80
[ 1583.940995][T22651]  ? kvm_assign_ioeventfd_idx+0xac/0xa80
[ 1583.941019][T22651]  kvm_assign_ioeventfd_idx+0xac/0xa80
[ 1583.941058][T22651]  kvm_ioeventfd+0x19d/0x340
[ 1583.941085][T22651]  kvm_vm_ioctl+0x17de/0x4090
[ 1583.941109][T22651]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 1583.941133][T22651]  ? finish_task_switch.isra.0+0x210/0xbd0
[ 1583.941161][T22651]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1583.941182][T22651]  ? rcu_is_watching+0x12/0xc0
[ 1583.941198][T22651]  ? trace_sched_exit_tp+0xd1/0x110
[ 1583.941214][T22651]  ? __schedule+0x10b9/0x6150
[ 1583.941239][T22651]  ? __schedule+0x114c/0x6150
[ 1583.941263][T22651]  ? irqentry_exit+0x1dd/0x8c0
[ 1583.941294][T22651]  ? __pfx___schedule+0x10/0x10
[ 1583.941319][T22651]  ? finish_task_switch.isra.0+0x210/0xbd0
[ 1583.941348][T22651]  ? rcu_is_watching+0x12/0xc0
[ 1583.941363][T22651]  ? irqentry_exit+0x1dd/0x8c0
[ 1583.941379][T22651]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1583.941409][T22651]  ? do_vfs_ioctl+0xdf6/0x14f0
[ 1583.941429][T22651]  ? do_vfs_ioctl+0x1234/0x14f0
[ 1583.941448][T22651]  ? do_vfs_ioctl+0x128/0x14f0
[ 1583.941468][T22651]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1583.941487][T22651]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1583.941510][T22651]  ? irqentry_exit+0x1dd/0x8c0
[ 1583.941525][T22651]  ? rcu_is_watching+0x12/0xc0
[ 1583.941551][T22651]  ? selinux_file_ioctl+0x180/0x270
[ 1583.941568][T22651]  ? selinux_file_ioctl+0xb4/0x270
[ 1583.941587][T22651]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1583.941610][T22651]  __x64_sys_ioctl+0x18e/0x210
[ 1583.941631][T22651]  do_syscall_64+0xcd/0xf80
[ 1583.941651][T22651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.941669][T22651] RIP: 0033:0x7fc67278f749
[ 1583.941683][T22651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1583.941700][T22651] RSP: 002b:00007fc6709f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1583.941718][T22651] RAX: ffffffffffffffda RBX: 00007fc6729e6090 RCX: 00007fc67278f749
[ 1583.941732][T22651] RDX: 0000200000000240 RSI: 000000004040ae79 RDI: 0000000000000004
[ 1583.941742][T22651] RBP: 00007fc6709f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1583.941752][T22651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1583.941762][T22651] R13: 00007fc6729e6128 R14: 00007fc6729e6090 R15: 00007ffc268bc548
[ 1583.941787][T22651]  </TASK>
[ 1584.313947][   T30] audit: type=1400 audit(1765570213.712:1253): avc:  denied  { map } for  pid=22652 comm="syz.2.4280" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1585.221810][T22666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4284'.
[ 1585.649110][T22664] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1586.951009][T22668] block nbd2: shutting down sockets
[ 1587.703372][T22685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1587.910751][T16460] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1588.001408][T22681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1588.094899][T16460] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1588.107085][T16460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.145798][T16460] usb 2-1: Product: syz
[ 1588.156548][T16460] usb 2-1: Manufacturer: syz
[ 1588.162622][T16460] usb 2-1: SerialNumber: syz
[ 1588.889877][T16460] usb 2-1: palm_os_4_probe - error -110 getting connection info
[ 1588.902443][T16460] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[ 1589.259487][T16460] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1589.280499][T16460] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1589.296053][T16460] usb 2-1: USB disconnect, device number 76
[ 1589.312022][T16460] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1589.327594][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'.
[ 1589.628750][T16460] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1589.756507][T16460] visor 2-1:1.0: device disconnected
[ 1590.244912][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4297'.
[ 1591.274469][T22719] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1591.475520][T22729] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1591.574588][ T6553] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1591.593406][ T5879] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1591.618665][T22728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4303'.
[ 1591.750742][ T5879] usb 2-1: Using ep0 maxpacket: 32
[ 1591.759149][ T6553] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1591.769198][ T5879] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1591.779750][ T6553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.790734][ T5879] usb 2-1: config 0 has no interface number 0
[ 1591.802070][ T6553] usb 3-1: config 0 descriptor??
[ 1591.809773][ T5879] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1591.823308][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.832306][ T5879] usb 2-1: Product: syz
[ 1591.836580][ T5879] usb 2-1: Manufacturer: syz
[ 1591.841472][   T30] audit: type=1400 audit(1765570221.242:1254): avc:  denied  { bind } for  pid=22732 comm="syz.3.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1591.861302][ T5879] usb 2-1: SerialNumber: syz
[ 1591.868748][ T5879] usb 2-1: config 0 descriptor??
[ 1591.899091][ T5879] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1591.909915][ T5879] usb 2-1: selecting invalid altsetting 1
[ 1591.916005][ T5879] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1591.930643][T15693] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1591.995204][ T5879] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1592.007820][ T5879] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1592.110853][T15693] usb 5-1: Using ep0 maxpacket: 16
[ 1592.125765][T15693] usb 5-1: config 0 has no interfaces?
[ 1592.145478][T15693] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1592.211425][ T5879] usb 2-1: media controller created
[ 1592.226845][T15693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.259450][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1592.484638][T15693] usb 5-1: config 0 descriptor??
[ 1592.703465][ T5879] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1592.723404][ T5879] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1592.861746][ T6553] hackrf 3-1:0.0: usb_control_msg() failed -110 request 0e
[ 1592.871684][T16460] usb 5-1: USB disconnect, device number 69
[ 1592.877289][ T6553] hackrf 3-1:0.0: Could not detect board
[ 1592.884377][ T5879] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1592.896232][ T6553] hackrf 3-1:0.0: probe with driver hackrf failed with error -110
[ 1592.944760][ T5879] usb 2-1: USB disconnect, device number 77
[ 1592.951985][   T30] audit: type=1400 audit(1765570222.342:1255): avc:  denied  { read } for  pid=22739 comm="syz.3.4308" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1592.978984][   T30] audit: type=1400 audit(1765570222.342:1256): avc:  denied  { open } for  pid=22739 comm="syz.3.4308" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1593.004774][T15693] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1593.027879][   T30] audit: type=1400 audit(1765570222.422:1257): avc:  denied  { prog_load } for  pid=22739 comm="syz.3.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1593.054592][   T30] audit: type=1400 audit(1765570222.452:1258): avc:  denied  { bpf } for  pid=22739 comm="syz.3.4308" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1593.167714][T15693] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1593.177114][T15693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1593.196828][T15693] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1593.206556][T15693] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1593.215448][T15693] usb 1-1: Manufacturer: syz
[ 1593.225238][T15693] usb 1-1: config 0 descriptor??
[ 1593.321881][T15693] rc_core: IR keymap rc-hauppauge not found
[ 1593.328476][T15693] Registered IR keymap rc-empty
[ 1593.339855][T15693] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1593.356442][T15693] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48
[ 1593.390701][ T5879] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1593.444797][    C0] igorplugusb 1-1:0.0: Error: urb status = -32
[ 1593.472381][T15693] usb 1-1: USB disconnect, device number 49
[ 1593.550667][T16460] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1593.576866][T22754] FAULT_INJECTION: forcing a failure.
[ 1593.576866][T22754] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1593.590193][T22754] CPU: 1 UID: 0 PID: 22754 Comm: syz.4.4311 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1593.590220][T22754] Tainted: [L]=SOFTLOCKUP
[ 1593.590226][T22754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1593.590236][T22754] Call Trace:
[ 1593.590243][T22754]  <TASK>
[ 1593.590251][T22754]  dump_stack_lvl+0x16c/0x1f0
[ 1593.590273][T22754]  should_fail_ex+0x512/0x640
[ 1593.590299][T22754]  should_fail_alloc_page+0xe7/0x130
[ 1593.590324][T22754]  prepare_alloc_pages+0x401/0x670
[ 1593.590351][T22754]  __alloc_frozen_pages_noprof+0x18b/0x2430
[ 1593.590367][T22754]  ? lock_acquire+0x179/0x330
[ 1593.590382][T22754]  ? find_held_lock+0x2b/0x80
[ 1593.590402][T22754]  ? finish_task_switch.isra.0+0x202/0xbd0
[ 1593.590423][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590436][T22754]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1593.590455][T22754]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1593.590469][T22754]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1593.590485][T22754]  ? trace_sched_exit_tp+0xd1/0x110
[ 1593.590497][T22754]  ? __schedule+0x10b9/0x6150
[ 1593.590517][T22754]  ? __schedule+0x114c/0x6150
[ 1593.590546][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590568][T22754]  alloc_pages_bulk_noprof+0x77a/0x1410
[ 1593.590583][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590594][T22754]  ? irqentry_exit+0x1dd/0x8c0
[ 1593.590608][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590620][T22754]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1593.590644][T22754]  __kasan_populate_vmalloc+0xfb/0x220
[ 1593.590663][T22754]  alloc_vmap_area+0x98d/0x2a50
[ 1593.590687][T22754]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1593.590713][T22754]  __get_vm_area_node+0x1ca/0x330
[ 1593.590733][T22754]  __vmalloc_node_range_noprof+0x247/0x16b0
[ 1593.590752][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1593.590771][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590783][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1593.590801][T22754]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1593.590819][T22754]  ? find_held_lock+0x2b/0x80
[ 1593.590838][T22754]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 1593.590859][T22754]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1593.590876][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1593.590889][T22754]  __vmalloc_node_noprof+0xad/0xf0
[ 1593.590907][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1593.590923][T22754]  __vmalloc_noprof+0xa3/0x120
[ 1593.590940][T22754]  ? __pfx___vmalloc_noprof+0x10/0x10
[ 1593.590960][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.590972][T22754]  ? cap_capable+0x10d/0x3f0
[ 1593.590993][T22754]  bpf_prog_alloc_no_stats+0x58/0x610
[ 1593.591006][T22754]  ? security_capable+0x7e/0x260
[ 1593.591026][T22754]  bpf_prog_alloc+0x3b/0x230
[ 1593.591038][T22754]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1593.591055][T22754]  bpf_prog_load+0x19bc/0x2cc0
[ 1593.591073][T22754]  ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0
[ 1593.591095][T22754]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1593.591112][T22754]  ? __rcu_read_unlock+0x2b5/0x5a0
[ 1593.591129][T22754]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1593.591149][T22754]  ? avc_has_perm+0x144/0x1f0
[ 1593.591175][T22754]  ? selinux_bpf+0xdd/0x130
[ 1593.591192][T22754]  ? bpf_lsm_bpf+0x9/0x10
[ 1593.591208][T22754]  __sys_bpf+0x3e72/0x4980
[ 1593.591225][T22754]  ? lock_acquire+0x179/0x330
[ 1593.591241][T22754]  ? __pfx___sys_bpf+0x10/0x10
[ 1593.591257][T22754]  ? finish_task_switch.isra.0+0x202/0xbd0
[ 1593.591277][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.591289][T22754]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1593.591308][T22754]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1593.591320][T22754]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1593.591340][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.591352][T22754]  ? __schedule+0x10b9/0x6150
[ 1593.591370][T22754]  ? __schedule+0x114c/0x6150
[ 1593.591403][T22754]  ? fput+0x70/0xf0
[ 1593.591423][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1593.591439][T22754]  __x64_sys_bpf+0x78/0xc0
[ 1593.591456][T22754]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1593.591469][T22754]  do_syscall_64+0xcd/0xf80
[ 1593.591484][T22754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1593.591497][T22754] RIP: 0033:0x7fcf4778f749
[ 1593.591509][T22754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1593.591522][T22754] RSP: 002b:00007fcf459d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1593.591535][T22754] RAX: ffffffffffffffda RBX: 00007fcf479e6180 RCX: 00007fcf4778f749
[ 1593.591544][T22754] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[ 1593.591552][T22754] RBP: 00007fcf459d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1593.591560][T22754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1593.591567][T22754] R13: 00007fcf479e6218 R14: 00007fcf479e6180 R15: 00007ffef42b6b98
[ 1593.591586][T22754]  </TASK>
[ 1594.051155][T22754] syz.4.4311: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1594.067719][T22754] CPU: 1 UID: 0 PID: 22754 Comm: syz.4.4311 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1594.067747][T22754] Tainted: [L]=SOFTLOCKUP
[ 1594.067754][T22754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1594.067764][T22754] Call Trace:
[ 1594.067770][T22754]  <TASK>
[ 1594.067778][T22754]  dump_stack_lvl+0x16c/0x1f0
[ 1594.067802][T22754]  warn_alloc+0x248/0x3a0
[ 1594.067822][T22754]  ? __pfx_warn_alloc+0x10/0x10
[ 1594.067836][T22754]  ? irqentry_exit+0x1dd/0x8c0
[ 1594.067852][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.067875][T22754]  ? kasan_save_stack+0x33/0x60
[ 1594.067896][T22754]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 1594.067920][T22754]  ? __get_vm_area_node+0x208/0x330
[ 1594.067941][T22754]  __vmalloc_node_range_noprof+0xbe0/0x16b0
[ 1594.067964][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.067976][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1594.067996][T22754]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1594.068014][T22754]  ? find_held_lock+0x2b/0x80
[ 1594.068034][T22754]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 1594.068056][T22754]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1594.068074][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1594.068087][T22754]  __vmalloc_node_noprof+0xad/0xf0
[ 1594.068105][T22754]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1594.068121][T22754]  __vmalloc_noprof+0xa3/0x120
[ 1594.068139][T22754]  ? __pfx___vmalloc_noprof+0x10/0x10
[ 1594.068158][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.068170][T22754]  ? cap_capable+0x10d/0x3f0
[ 1594.068191][T22754]  bpf_prog_alloc_no_stats+0x58/0x610
[ 1594.068204][T22754]  ? security_capable+0x7e/0x260
[ 1594.068225][T22754]  bpf_prog_alloc+0x3b/0x230
[ 1594.068237][T22754]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1594.068253][T22754]  bpf_prog_load+0x19bc/0x2cc0
[ 1594.068271][T22754]  ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0
[ 1594.068294][T22754]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1594.068311][T22754]  ? __rcu_read_unlock+0x2b5/0x5a0
[ 1594.068328][T22754]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1594.068348][T22754]  ? avc_has_perm+0x144/0x1f0
[ 1594.068374][T22754]  ? selinux_bpf+0xdd/0x130
[ 1594.068390][T22754]  ? bpf_lsm_bpf+0x9/0x10
[ 1594.068406][T22754]  __sys_bpf+0x3e72/0x4980
[ 1594.068423][T22754]  ? lock_acquire+0x179/0x330
[ 1594.068439][T22754]  ? __pfx___sys_bpf+0x10/0x10
[ 1594.068455][T22754]  ? finish_task_switch.isra.0+0x202/0xbd0
[ 1594.068476][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.068488][T22754]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1594.068506][T22754]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1594.068520][T22754]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1594.068540][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.068552][T22754]  ? __schedule+0x10b9/0x6150
[ 1594.068570][T22754]  ? __schedule+0x114c/0x6150
[ 1594.068603][T22754]  ? fput+0x70/0xf0
[ 1594.068623][T22754]  ? rcu_is_watching+0x12/0xc0
[ 1594.068638][T22754]  __x64_sys_bpf+0x78/0xc0
[ 1594.068655][T22754]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1594.068668][T22754]  do_syscall_64+0xcd/0xf80
[ 1594.068683][T22754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1594.068696][T22754] RIP: 0033:0x7fcf4778f749
[ 1594.068708][T22754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1594.068721][T22754] RSP: 002b:00007fcf459d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1594.068734][T22754] RAX: ffffffffffffffda RBX: 00007fcf479e6180 RCX: 00007fcf4778f749
[ 1594.068742][T22754] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[ 1594.068751][T22754] RBP: 00007fcf459d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1594.068758][T22754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1594.068766][T22754] R13: 00007fcf479e6218 R14: 00007fcf479e6180 R15: 00007ffef42b6b98
[ 1594.068785][T22754]  </TASK>
[ 1594.068806][T22754] Mem-Info:
[ 1594.441243][T22754] active_anon:8301 inactive_anon:0 isolated_anon:0
[ 1594.441243][T22754]  active_file:24428 inactive_file:4551 isolated_file:0
[ 1594.441243][T22754]  unevictable:768 dirty:426 writeback:0
[ 1594.441243][T22754]  slab_reclaimable:10739 slab_unreclaimable:127804
[ 1594.441243][T22754]  mapped:31680 shmem:1381 pagetables:1274
[ 1594.441243][T22754]  sec_pagetables:3 bounce:0
[ 1594.441243][T22754]  kernel_misc_reclaimable:0
[ 1594.441243][T22754]  free:1290692 free_pcp:11245 free_cma:0
[ 1594.487972][   T30] audit: type=1400 audit(1765570222.972:1259): avc:  denied  { map_create } for  pid=22751 comm="syz.4.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1594.525893][   T30] audit: type=1400 audit(1765570222.972:1260): avc:  denied  { perfmon } for  pid=22751 comm="syz.4.4311" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1594.570683][T22754] Node 0 active_anon:33848kB inactive_anon:0kB active_file:97616kB inactive_file:18068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126892kB dirty:1732kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15112kB pagetables:4968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1594.603108][T22754] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1594.633887][T22754] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1594.664254][T22754] lowmem_reserve[]: 0 2481 2482 2482 2482
[ 1594.670214][T22754] Node 0 DMA32 free:1242208kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33948kB inactive_anon:0kB active_file:97616kB inactive_file:18068kB unevictable:1536kB writepending:1732kB zspages:0kB present:3129332kB managed:2540888kB mlocked:0kB bounce:0kB free_pcp:38864kB local_pcp:15488kB free_cma:0kB
[ 1594.703629][T22754] lowmem_reserve[]: 0 0 1 1 1
[ 1594.708510][T22754] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1594.738779][T22754] lowmem_reserve[]: 0 0 0 0 0
[ 1594.744076][T22754] Node 1 Normal free:3905136kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5408kB local_pcp:0kB free_cma:0kB
[ 1594.776879][T22754] lowmem_reserve[]: 0 0 0 0 0
[ 1594.781788][T22754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1594.794742][T22754] Node 0 DMA32: 4022*4kB (UME) 3471*8kB (UME) 2447*16kB (UME) 983*32kB (ME) 623*64kB (UME) 437*128kB (UME) 167*256kB (UME) 130*512kB (UM) 83*1024kB (UM) 23*2048kB (UME) 193*4096kB (UM) = 1242208kB
[ 1594.814678][T22754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1594.826967][T22754] Node 1 Normal: 168*4kB (UME) 56*8kB (UME) 47*16kB (UME) 241*32kB (UE) 102*64kB (UE) 29*128kB (UME) 7*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 4*2048kB (UME) 945*4096kB (M) = 3905136kB
[ 1594.846363][T22754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1594.856053][T22754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1594.865382][T22754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1594.874956][T22754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1594.884280][T22754] 30334 total pagecache pages
[ 1594.888965][T22754] 0 pages in swap cache
[ 1594.893148][T22754] Free swap  = 124996kB
[ 1594.897298][T22754] Total swap = 124996kB
[ 1594.901514][T22754] 2097051 pages RAM
[ 1594.905330][T22754] 0 pages HighMem/MovableOnly
[ 1594.910017][T22754] 429803 pages reserved
[ 1594.914215][T22754] 0 pages cma reserved
[ 1595.090598][ T5879] usb 2-1: device descriptor read/64, error -71
[ 1595.110850][   T30] audit: type=1400 audit(1765570222.972:1261): avc:  denied  { map_read map_write } for  pid=22751 comm="syz.4.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1595.153849][   T30] audit: type=1400 audit(1765570224.552:1262): avc:  denied  { prog_run } for  pid=22755 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1595.208005][T22758] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1595.270631][T16460] usb 4-1: device descriptor read/64, error -71
[ 1595.297350][ T5921] usb 3-1: USB disconnect, device number 76
[ 1595.340730][ T5879] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1595.348562][   T30] audit: type=1400 audit(1765570224.732:1263): avc:  denied  { read } for  pid=22762 comm="syz.2.4316" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1595.458300][T22764] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4316'.
[ 1595.502441][ T5879] usb 2-1: device descriptor read/64, error -71
[ 1595.551187][T16460] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1595.622904][ T5879] usb usb2-port1: attempt power cycle
[ 1595.700997][T16460] usb 4-1: device descriptor read/64, error -71
[ 1595.706715][T22771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4318'.
[ 1595.812907][T16460] usb usb4-port1: attempt power cycle
[ 1595.980647][ T5879] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1596.190801][T16460] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1596.195247][ T5879] usb 2-1: device not accepting address 80, error -71
[ 1596.223480][T16460] usb 4-1: device descriptor read/8, error -71
[ 1596.472104][T16460] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1596.856469][T16460] usb 4-1: device not accepting address 64, error -71
[ 1597.073409][T22791] FAULT_INJECTION: forcing a failure.
[ 1597.073409][T22791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1597.128686][T22791] CPU: 0 UID: 0 PID: 22791 Comm: syz.1.4326 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1597.128719][T22791] Tainted: [L]=SOFTLOCKUP
[ 1597.128726][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1597.128736][T22791] Call Trace:
[ 1597.128745][T22791]  <TASK>
[ 1597.128754][T22791]  dump_stack_lvl+0x16c/0x1f0
[ 1597.128779][T22791]  should_fail_ex+0x512/0x640
[ 1597.128811][T22791]  _copy_from_iter+0x2a4/0x16c0
[ 1597.128839][T22791]  ? __alloc_skb+0x220/0x410
[ 1597.128860][T22791]  ? __alloc_skb+0x35d/0x410
[ 1597.128881][T22791]  ? __pfx__copy_from_iter+0x10/0x10
[ 1597.128902][T22791]  ? netlink_autobind.isra.0+0x158/0x370
[ 1597.128929][T22791]  netlink_sendmsg+0x820/0xdd0
[ 1597.128952][T22791]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1597.128979][T22791]  ____sys_sendmsg+0xa5d/0xc30
[ 1597.128999][T22791]  ? copy_msghdr_from_user+0x10a/0x160
[ 1597.129023][T22791]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1597.129049][T22791]  ? lock_acquire+0x179/0x330
[ 1597.129073][T22791]  ___sys_sendmsg+0x134/0x1d0
[ 1597.129100][T22791]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1597.129124][T22791]  ? finish_task_switch.isra.0+0x207/0xbd0
[ 1597.129181][T22791]  __sys_sendmsg+0x16d/0x220
[ 1597.129207][T22791]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1597.129229][T22791]  ? irqentry_exit+0x1dd/0x8c0
[ 1597.129247][T22791]  ? rcu_is_watching+0x12/0xc0
[ 1597.129280][T22791]  do_syscall_64+0xcd/0xf80
[ 1597.129300][T22791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1597.129318][T22791] RIP: 0033:0x7fc67278f749
[ 1597.129333][T22791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1597.129350][T22791] RSP: 002b:00007fc673556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1597.129368][T22791] RAX: ffffffffffffffda RBX: 00007fc6729e5fa0 RCX: 00007fc67278f749
[ 1597.129379][T22791] RDX: 0000000000004840 RSI: 0000200000000040 RDI: 0000000000000003
[ 1597.129390][T22791] RBP: 00007fc673556090 R08: 0000000000000000 R09: 0000000000000000
[ 1597.129402][T22791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1597.129412][T22791] R13: 00007fc6729e6038 R14: 00007fc6729e5fa0 R15: 00007ffc268bc548
[ 1597.129438][T22791]  </TASK>
[ 1597.617210][T22788] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1597.644831][T16460] usb usb4-port1: unable to enumerate USB device
[ 1599.303322][T22811] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1599.408877][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1599.408926][   T30] audit: type=1400 audit(1765570228.292:1266): avc:  denied  { getopt } for  pid=22808 comm="syz.0.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1599.844536][T16460] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1600.092424][T16460] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[ 1600.100791][T16460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1600.117146][T16460] usb 2-1: config 0 has no interface number 0
[ 1600.125027][T16460] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1600.277654][T16460] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1600.303845][T16460] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1600.313225][T16460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.341959][T16460] usb 2-1: Product: syz
[ 1600.349152][T16460] usb 2-1: Manufacturer: syz
[ 1600.368327][T16460] usb 2-1: SerialNumber: syz
[ 1600.397601][T16460] usb 2-1: config 0 descriptor??
[ 1600.424454][T22829] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1600.482662][T22831] netlink: 'syz.3.4339': attribute type 10 has an invalid length.
[ 1600.505923][T22833] FAULT_INJECTION: forcing a failure.
[ 1600.505923][T22833] name failslab, interval 1, probability 0, space 0, times 0
[ 1600.590639][T22833] CPU: 0 UID: 0 PID: 22833 Comm: syz.4.4340 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1600.590668][T22833] Tainted: [L]=SOFTLOCKUP
[ 1600.590673][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1600.590684][T22833] Call Trace:
[ 1600.590690][T22833]  <TASK>
[ 1600.590696][T22833]  dump_stack_lvl+0x16c/0x1f0
[ 1600.590717][T22833]  should_fail_ex+0x512/0x640
[ 1600.590738][T22833]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1600.590759][T22833]  should_failslab+0xc2/0x120
[ 1600.590782][T22833]  kmem_cache_alloc_noprof+0x83/0x770
[ 1600.590798][T22833]  ? skb_clone+0x190/0x3f0
[ 1600.590824][T22833]  ? skb_clone+0x190/0x3f0
[ 1600.590843][T22833]  skb_clone+0x190/0x3f0
[ 1600.590866][T22833]  netlink_deliver_tap+0xabd/0xd30
[ 1600.590897][T22833]  netlink_unicast+0x64c/0x870
[ 1600.590917][T22833]  ? __pfx_netlink_unicast+0x10/0x10
[ 1600.590941][T22833]  netlink_sendmsg+0x8c8/0xdd0
[ 1600.590960][T22833]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1600.590979][T22833]  ____sys_sendmsg+0xa5d/0xc30
[ 1600.590992][T22833]  ? copy_msghdr_from_user+0x10a/0x160
[ 1600.591007][T22833]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1600.591024][T22833]  ___sys_sendmsg+0x134/0x1d0
[ 1600.591044][T22833]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1600.591094][T22833]  __sys_sendmsg+0x16d/0x220
[ 1600.591115][T22833]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1600.591139][T22833]  do_syscall_64+0xcd/0xf80
[ 1600.591151][T22833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.591162][T22833] RIP: 0033:0x7fcf4778f749
[ 1600.591172][T22833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1600.591186][T22833] RSP: 002b:00007fcf4854f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1600.591203][T22833] RAX: ffffffffffffffda RBX: 00007fcf479e5fa0 RCX: 00007fcf4778f749
[ 1600.591213][T22833] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1600.591222][T22833] RBP: 00007fcf4854f090 R08: 0000000000000000 R09: 0000000000000000
[ 1600.591232][T22833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1600.591240][T22833] R13: 00007fcf479e6038 R14: 00007fcf479e5fa0 R15: 00007ffef42b6b98
[ 1600.591260][T22833]  </TASK>
[ 1600.603732][T22831] syz_tun: entered promiscuous mode
[ 1601.354187][T16460] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1601.408057][T16460] usb 2-1: USB disconnect, device number 82
[ 1601.489276][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'.
[ 1601.576315][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4342'.
[ 1601.842197][T22849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4343'.
[ 1601.900878][T22850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4342'.
[ 1603.492916][T22866] FAULT_INJECTION: forcing a failure.
[ 1603.492916][T22866] name failslab, interval 1, probability 0, space 0, times 0
[ 1603.520900][T22866] CPU: 1 UID: 0 PID: 22866 Comm: syz.3.4347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1603.520931][T22866] Tainted: [L]=SOFTLOCKUP
[ 1603.520937][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1603.520946][T22866] Call Trace:
[ 1603.520952][T22866]  <TASK>
[ 1603.520959][T22866]  dump_stack_lvl+0x16c/0x1f0
[ 1603.520981][T22866]  should_fail_ex+0x512/0x640
[ 1603.521001][T22866]  ? __kmalloc_cache_noprof+0x5f/0x800
[ 1603.521026][T22866]  should_failslab+0xc2/0x120
[ 1603.521044][T22866]  __kmalloc_cache_noprof+0x80/0x800
[ 1603.521063][T22866]  ? copy_mount_options+0x55/0x190
[ 1603.521081][T22866]  ? copy_mount_options+0x55/0x190
[ 1603.521094][T22866]  copy_mount_options+0x55/0x190
[ 1603.521109][T22866]  __x64_sys_mount+0x1ab/0x310
[ 1603.521123][T22866]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1603.521140][T22866]  do_syscall_64+0xcd/0xf80
[ 1603.521156][T22866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.521169][T22866] RIP: 0033:0x7f0ef158f749
[ 1603.521180][T22866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1603.521193][T22866] RSP: 002b:00007f0ef23f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1603.521208][T22866] RAX: ffffffffffffffda RBX: 00007f0ef17e6180 RCX: 00007f0ef158f749
[ 1603.521217][T22866] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1603.521225][T22866] RBP: 00007f0ef23f4090 R08: 0000200000000380 R09: 0000000000000000
[ 1603.521233][T22866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1603.521241][T22866] R13: 00007f0ef17e6218 R14: 00007f0ef17e6180 R15: 00007fff2be2ba48
[ 1603.521260][T22866]  </TASK>
[ 1604.850741][ T5879] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1605.223437][ T5879] usb 1-1: Using ep0 maxpacket: 8
[ 1605.245697][ T5879] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[ 1605.341800][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.470784][T16460] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1605.473602][ T5879] usb 1-1: config 0 descriptor??
[ 1605.690835][T16460] usb 3-1: Using ep0 maxpacket: 16
[ 1606.204271][T16460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1606.310682][T16460] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1606.345800][T16460] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1606.347126][ T5879] usb 1-1: string descriptor 0 read error: -71
[ 1606.385910][T16460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.388488][ T5879] uvcvideo 1-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[ 1606.420706][ T5879] uvcvideo 1-1:0.0: No valid video chain found.
[ 1606.436758][T16460] usb 3-1: Product: syz
[ 1606.443540][T16460] usb 3-1: Manufacturer: syz
[ 1606.446887][ T5879] usb 1-1: USB disconnect, device number 50
[ 1606.450758][ T5921] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1606.464792][T16460] usb 3-1: SerialNumber: syz
[ 1606.476514][T16460] usb 3-1: config 0 descriptor??
[ 1606.486699][T16460] mcba_usb 3-1:0.0: Can't find endpoints
[ 1607.545634][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.557679][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.687533][ T5921] usb 4-1: Using ep0 maxpacket: 32
[ 1607.699349][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1607.710761][ T5921] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1607.719812][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1607.954039][ T5921] usb 4-1: config 0 descriptor??
[ 1608.169403][ T5921] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1608.258589][T22897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1608.270667][ T5921] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1608.279649][ T5921] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1608.287440][T22897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1608.409355][T22917] blk_print_req_error: 6 callbacks suppressed
[ 1608.409378][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.425422][T22917] buffer_io_error: 6 callbacks suppressed
[ 1608.425439][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.439250][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.449217][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.457655][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.472938][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.481136][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.490742][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.499719][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.509352][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.520342][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.530049][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.538576][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.548661][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.557151][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.566813][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.574658][T22917] ldm_validate_partition_table(): Disk read failed.
[ 1608.581614][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.591221][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.599358][T22917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1608.608950][T22917] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1608.619812][T22917] Dev nbd0: unable to read RDB block 0
[ 1608.627987][T22917]  nbd0: unable to read partition table
[ 1609.494835][ T5921] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1609.698141][ T5879] usb 3-1: USB disconnect, device number 77
[ 1609.713617][ T5921] usb 2-1: Using ep0 maxpacket: 8
[ 1609.721567][   T30] audit: type=1326 audit(1765570239.122:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1609.816616][ T5921] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[ 1609.832190][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.867363][   T30] audit: type=1326 audit(1765570239.142:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1609.892494][ T5921] usb 2-1: Product: syz
[ 1609.897037][ T5921] usb 2-1: Manufacturer: syz
[ 1609.907523][ T5921] usb 2-1: SerialNumber: syz
[ 1609.918947][ T5921] usb 2-1: config 0 descriptor??
[ 1609.937037][ T5921] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[ 1609.948042][   T30] audit: type=1326 audit(1765570239.142:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1609.974099][ T5921] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50
[ 1610.056639][   T30] audit: type=1326 audit(1765570239.142:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.127796][T22931] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1610.359828][   T30] audit: type=1326 audit(1765570239.142:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.421398][   T30] audit: type=1326 audit(1765570239.162:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.496275][   T30] audit: type=1326 audit(1765570239.162:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.554195][   T30] audit: type=1326 audit(1765570239.172:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.580839][ T5879] usb 2-1: USB disconnect, device number 83
[ 1610.671354][   T30] audit: type=1326 audit(1765570239.172:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.715481][   T30] audit: type=1326 audit(1765570239.172:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.4.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf4778f749 code=0x7ffc0000
[ 1610.724739][T15693] usb 4-1: USB disconnect, device number 65
[ 1611.505498][ T5921] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1611.814664][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1611.829560][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1611.840204][ T5921] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1611.868543][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1611.883013][ T5921] usb 5-1: SerialNumber: syz
[ 1612.634590][ T5921] usb 5-1: 0:2 : does not exist
[ 1612.676269][ T5921] usb 5-1: unit 5 not found!
[ 1612.798505][ T5921] usb 5-1: USB disconnect, device number 70
[ 1613.720361][T22261] udevd[22261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1613.802711][T22960] block nbd1: shutting down sockets
[ 1614.977246][T22988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1615.002146][T22988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1615.474636][T22987] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2
[ 1615.484939][T22987] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter
[ 1615.589542][T15693] libceph: mon0 (1)[c::]:6789 connect error
[ 1615.780762][T22993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1615.942358][T22990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4382'.
[ 1616.052119][T22983] ceph: No mds server is up or the cluster is laggy
[ 1616.088246][T22986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1617.576318][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4388'.
[ 1617.675820][T15693] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1617.719911][T23016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4388'.
[ 1618.018268][T15693] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1618.064282][T15693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.205927][T15693] usb 3-1: Product: syz
[ 1618.248028][T15693] usb 3-1: Manufacturer: syz
[ 1618.259988][T15693] usb 3-1: SerialNumber: syz
[ 1618.276591][   T30] kauditd_printk_skb: 30 callbacks suppressed
[ 1618.276608][   T30] audit: type=1400 audit(1765570247.652:1307): avc:  denied  { open } for  pid=23018 comm="syz.4.4389" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1618.462887][   T30] audit: type=1400 audit(1765570247.662:1308): avc:  denied  { ioctl } for  pid=23018 comm="syz.4.4389" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x4b69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1619.196649][T15693] usb 3-1: palm_os_4_probe - error -110 getting connection info
[ 1619.216449][T15693] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 1619.226256][T15693] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1619.528295][T15693] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1619.948312][T15693] usb 3-1: USB disconnect, device number 78
[ 1620.093559][T15693] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1620.280059][T15693] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1620.388353][T15693] visor 3-1:1.0: device disconnected
[ 1621.211812][T23056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1621.496798][T23054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1622.419851][   T30] audit: type=1400 audit(1765570251.812:1309): avc:  denied  { accept } for  pid=23068 comm="syz.3.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1622.870606][T15693] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1623.585300][T15693] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1623.602125][T15693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.614000][T15693] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1623.623568][T15693] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1623.631954][T15693] usb 3-1: Manufacturer: syz
[ 1623.640114][T15693] usb 3-1: config 0 descriptor??
[ 1623.653512][T15693] igorplugusb 3-1:0.0: incorrect number of endpoints
[ 1624.164126][T23074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.211694][T23074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.252144][T23089] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1624.551927][T15693] usb 3-1: USB disconnect, device number 79
[ 1625.295752][T23098] block device autoloading is deprecated and will be removed.
[ 1625.772360][T23112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1625.974374][T23107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1626.179623][T23124] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1626.352273][T15693] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1626.427385][T23127] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1626.791107][T15693] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1626.801277][T15693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.814308][T15693] usb 2-1: config 0 descriptor??
[ 1626.824967][T23132] fuse: Bad value for 'user_id'
[ 1627.397529][T23132] fuse: Bad value for 'user_id'
[ 1627.413703][T15693] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e
[ 1627.434937][T15693] hackrf 2-1:0.0: Could not detect board
[ 1627.446278][T15693] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[ 1627.465448][T15693] usb 2-1: USB disconnect, device number 84
[ 1628.507695][T23154] IPv4: Oversized IP packet from 127.202.26.0
[ 1629.176126][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4432'.
[ 1629.619522][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4432'.
[ 1629.714278][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4432'.
[ 1630.613953][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'.
[ 1630.681449][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'.
[ 1630.796008][T23175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'.
[ 1631.414875][ T5921] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1631.795808][ T5921] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 1632.467225][T23180] block nbd2: shutting down sockets
[ 1632.503192][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.511768][ T5921] usb 2-1: Product: syz
[ 1632.516411][ T5921] usb 2-1: Manufacturer: syz
[ 1632.521098][ T5921] usb 2-1: SerialNumber: syz
[ 1632.530908][T23187] FAULT_INJECTION: forcing a failure.
[ 1632.530908][T23187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1632.584808][T23187] CPU: 0 UID: 0 PID: 23187 Comm: syz.0.4437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1632.584839][T23187] Tainted: [L]=SOFTLOCKUP
[ 1632.584844][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1632.584853][T23187] Call Trace:
[ 1632.584859][T23187]  <TASK>
[ 1632.584865][T23187]  dump_stack_lvl+0x16c/0x1f0
[ 1632.584887][T23187]  should_fail_ex+0x512/0x640
[ 1632.584912][T23187]  _copy_to_user+0x32/0xd0
[ 1632.584935][T23187]  simple_read_from_buffer+0xcb/0x170
[ 1632.584957][T23187]  proc_fail_nth_read+0x197/0x240
[ 1632.584975][T23187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1632.584993][T23187]  ? rw_verify_area+0xcf/0x6c0
[ 1632.585011][T23187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1632.585027][T23187]  vfs_read+0x1e4/0xcf0
[ 1632.585047][T23187]  ? __pfx___mutex_lock+0x10/0x10
[ 1632.585067][T23187]  ? __pfx_vfs_read+0x10/0x10
[ 1632.585092][T23187]  ? __fget_files+0x20e/0x3c0
[ 1632.585122][T23187]  ksys_read+0x12a/0x250
[ 1632.585140][T23187]  ? __pfx_ksys_read+0x10/0x10
[ 1632.585167][T23187]  do_syscall_64+0xcd/0xf80
[ 1632.585187][T23187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1632.585204][T23187] RIP: 0033:0x7fccbb78e15c
[ 1632.585219][T23187] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1632.585235][T23187] RSP: 002b:00007fccbc5c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1632.585252][T23187] RAX: ffffffffffffffda RBX: 00007fccbb9e5fa0 RCX: 00007fccbb78e15c
[ 1632.585271][T23187] RDX: 000000000000000f RSI: 00007fccbc5c60a0 RDI: 0000000000000004
[ 1632.585281][T23187] RBP: 00007fccbc5c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1632.585291][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1632.585301][T23187] R13: 00007fccbb9e6038 R14: 00007fccbb9e5fa0 R15: 00007ffc88f95ff8
[ 1632.585324][T23187]  </TASK>
[ 1632.891152][ T5921] usb 2-1: palm_os_4_probe - error -110 getting connection info
[ 1632.899234][ T5921] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[ 1632.966721][ T5921] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1633.142526][ T5921] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1634.018998][T23201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1634.033907][T23201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1634.102420][ T5879] usb 2-1: USB disconnect, device number 85
[ 1634.122182][ T5879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1634.162931][ T5879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1634.188793][ T5879] visor 2-1:1.0: device disconnected
[ 1634.231202][T15693] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1634.284004][T23209] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1634.308944][T23209] UDF-fs: Scanning with blocksize 512 failed
[ 1634.337089][T23209] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1634.353891][T23209] UDF-fs: Scanning with blocksize 1024 failed
[ 1634.360262][T23209] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1634.368671][T23209] UDF-fs: Scanning with blocksize 2048 failed
[ 1634.402898][T15693] usb 1-1: device descriptor read/64, error -71
[ 1634.415780][T23209] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1634.425710][T23209] UDF-fs: Scanning with blocksize 4096 failed
[ 1634.650632][T15693] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1634.780863][T15693] usb 1-1: device descriptor read/64, error -71
[ 1634.912519][ T5879] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1634.921103][T15693] usb usb1-port1: attempt power cycle
[ 1634.927813][   T30] audit: type=1400 audit(1765570264.322:1310): avc:  denied  { getopt } for  pid=23217 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1634.948129][T23218] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[ 1634.954621][T23218] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1634.962108][T23218] vhci_hcd vhci_hcd.0: Device attached
[ 1635.150205][ T5921] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1635.182160][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1635.193506][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1635.213893][ T5879] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[ 1635.224469][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.383921][T15693] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1635.636082][ T5921] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[ 1635.663264][T23220] vhci_hcd: connection reset by peer
[ 1635.670846][   T50] vhci_hcd vhci_hcd.1: stop threads
[ 1635.677968][   T50] vhci_hcd vhci_hcd.1: release socket
[ 1635.681099][T15693] usb 1-1: device descriptor read/8, error -71
[ 1635.685445][   T50] vhci_hcd vhci_hcd.1: disconnect device
[ 1635.698396][ T5879] usb 4-1: config 0 descriptor??
[ 1635.990088][T15693] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1636.081058][T15693] usb 1-1: device descriptor read/8, error -71
[ 1636.241763][T15693] usb usb1-port1: unable to enumerate USB device
[ 1636.286153][ T5879] stadia 0003:18D1:9400.0029: item fetching failed at offset 5/7
[ 1636.425959][ T5879] stadia 0003:18D1:9400.0029: parse failed
[ 1636.702229][ T5879] stadia 0003:18D1:9400.0029: probe with driver stadia failed with error -22
[ 1636.920642][ T5879] usb 4-1: USB disconnect, device number 66
[ 1637.579898][T23249] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2
[ 1637.590127][T23249] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter
[ 1637.918340][T23250] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1638.871606][T23251] block nbd1: shutting down sockets
[ 1638.944138][T23258] devpts: Bad value for 'max'
[ 1638.983125][   T30] audit: type=1400 audit(1765570268.382:1311): avc:  denied  { write } for  pid=23257 comm="syz.3.4458" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1639.122892][   T30] audit: type=1400 audit(1765570268.472:1312): avc:  denied  { map } for  pid=23265 comm="syz.2.4461" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1639.743583][T23278] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1640.100309][   T30] audit: type=1400 audit(1765570268.472:1313): avc:  denied  { execute } for  pid=23265 comm="syz.2.4461" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1640.230259][   T30] audit: type=1400 audit(1765570269.122:1314): avc:  denied  { remount } for  pid=23262 comm="syz.4.4456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1640.585753][T23301] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1640.702197][ T5879] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1640.800726][ T5921] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1640.955140][ T5879] usb 4-1: Using ep0 maxpacket: 16
[ 1641.058737][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.083995][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1641.357583][ T5879] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1641.368020][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.376950][ T5879] usb 4-1: Product: syz
[ 1641.383044][ T5879] usb 4-1: Manufacturer: syz
[ 1641.390782][ T5879] usb 4-1: SerialNumber: syz
[ 1641.441982][ T5879] usb 4-1: config 0 descriptor??
[ 1641.452419][ T5879] mcba_usb 4-1:0.0: Can't find endpoints
[ 1642.790121][T23340] openvswitch: netlink: Message has 2712 unknown bytes.
[ 1642.851173][ T5921] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1642.985549][T23341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.016345][T23341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.041675][ T5921] usb 1-1: Using ep0 maxpacket: 16
[ 1643.050946][ T5921] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1643.073009][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1643.087143][T23343] Failed to initialize the IGMP autojoin socket (err -2)
[ 1643.187571][ T5921] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1643.198244][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.218823][ T5921] usb 1-1: config 0 descriptor??
[ 1643.724902][ T5879] usb 4-1: USB disconnect, device number 67
[ 1644.000266][ T5921] hid_parser_main: 5 callbacks suppressed
[ 1644.000279][ T5921] acrux 0003:1A34:0802.002A: unknown main item tag 0x0
[ 1644.455391][ T5921] acrux 0003:1A34:0802.002A: unknown main item tag 0x0
[ 1644.486317][ T5921] acrux 0003:1A34:0802.002A: unknown main item tag 0x0
[ 1644.507090][ T5921] acrux 0003:1A34:0802.002A: unknown main item tag 0x0
[ 1644.519718][ T5921] acrux 0003:1A34:0802.002A: unknown main item tag 0x0
[ 1644.562392][ T5921] acrux 0003:1A34:0802.002A: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0
[ 1644.577998][ T5921] acrux 0003:1A34:0802.002A: no inputs found
[ 1644.589431][ T5921] acrux 0003:1A34:0802.002A: Failed to enable force feedback support, error: -19
[ 1644.820670][T16460] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1644.883864][ T5921] usb 1-1: USB disconnect, device number 55
[ 1645.040710][T16460] usb 5-1: Using ep0 maxpacket: 32
[ 1645.052231][T16460] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1645.067655][T16460] usb 5-1: config 0 has no interface number 0
[ 1645.076044][T16460] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1645.104534][T23357] fido_id[23357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1645.175889][T16460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.857175][T16460] usb 5-1: Product: syz
[ 1645.863063][T16460] usb 5-1: Manufacturer: syz
[ 1645.867712][T16460] usb 5-1: SerialNumber: syz
[ 1645.890025][T16460] usb 5-1: config 0 descriptor??
[ 1646.319438][T16460] smsc95xx v2.0.0
[ 1646.325040][T16460] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1646.343878][T16460] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[ 1646.440651][ T5879] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1646.643123][ T5879] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1646.843376][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.870668][ T5879] usb 4-1: Product: syz
[ 1646.874978][ T5879] usb 4-1: Manufacturer: syz
[ 1646.883581][ T5879] usb 4-1: SerialNumber: syz
[ 1647.334604][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1647.347850][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1647.652982][T23385] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1647.688916][T23385] netlink: 'syz.2.4490': attribute type 2 has an invalid length.
[ 1647.714839][T23385] : entered promiscuous mode
[ 1647.744699][T23385] Failed to initialize the IGMP autojoin socket (err -2)
[ 1648.012794][T23394] usb usb7: usbfs: process 23394 (syz.1.4492) did not claim interface 0 before use
[ 1648.195632][T23397] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4493'.
[ 1648.205459][T23397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4493'.
[ 1648.217426][T23397] netlink: 'syz.1.4493': attribute type 5 has an invalid length.
[ 1648.318040][T16460] usb 5-1: USB disconnect, device number 71
[ 1648.683142][T15693] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[ 1648.769775][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1648.861608][T15693] usb 1-1: not running at top speed; connect to a high speed hub
[ 1648.892617][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[ 1648.893002][T15693] usb 1-1: config 8 has an invalid interface number: 253 but max is 0
[ 1648.913767][T15693] usb 1-1: config 8 has no interface number 0
[ 1648.920211][T15693] usb 1-1: config 8 interface 253 has no altsetting 0
[ 1648.932479][T15693] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=26.63
[ 1648.941750][T15693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.949799][T15693] usb 1-1: Product: syz
[ 1648.954281][T15693] usb 1-1: Manufacturer: syz
[ 1648.961028][T15693] usb 1-1: SerialNumber: syz
[ 1649.951605][   T30] audit: type=1400 audit(1765570279.322:1315): avc:  denied  { mounton } for  pid=23366 comm="syz.3.4485" path="/file0" dev="ramfs" ino=76951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1650.062168][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[ 1650.136803][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1650.413603][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1650.455461][ T5879] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1650.477757][T23413] FAULT_INJECTION: forcing a failure.
[ 1650.477757][T23413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1650.487326][ T5879] usb 4-1: USB disconnect, device number 68
[ 1650.527603][T23413] CPU: 1 UID: 0 PID: 23413 Comm: syz.4.4498 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1650.527631][T23413] Tainted: [L]=SOFTLOCKUP
[ 1650.527637][T23413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1650.527646][T23413] Call Trace:
[ 1650.527652][T23413]  <TASK>
[ 1650.527661][T23413]  dump_stack_lvl+0x16c/0x1f0
[ 1650.527684][T23413]  should_fail_ex+0x512/0x640
[ 1650.527709][T23413]  _copy_from_iter+0x2a4/0x16c0
[ 1650.527734][T23413]  ? __alloc_skb+0x220/0x410
[ 1650.527754][T23413]  ? __alloc_skb+0x35d/0x410
[ 1650.527775][T23413]  ? __pfx__copy_from_iter+0x10/0x10
[ 1650.527809][T23413]  netlink_sendmsg+0x820/0xdd0
[ 1650.527832][T23413]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1650.527859][T23413]  ____sys_sendmsg+0xa5d/0xc30
[ 1650.527880][T23413]  ? copy_msghdr_from_user+0x10a/0x160
[ 1650.527902][T23413]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1650.527925][T23413]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1650.527952][T23413]  ___sys_sendmsg+0x134/0x1d0
[ 1650.527978][T23413]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1650.528002][T23413]  ? finish_task_switch.isra.0+0x202/0xbd0
[ 1650.528037][T23413]  ? find_held_lock+0x2b/0x80
[ 1650.528081][T23413]  __sys_sendmmsg+0x200/0x420
[ 1650.528108][T23413]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1650.528156][T23413]  ? fput+0x70/0xf0
[ 1650.528180][T23413]  ? ksys_write+0x1ac/0x250
[ 1650.528200][T23413]  ? __pfx_ksys_write+0x10/0x10
[ 1650.528225][T23413]  __x64_sys_sendmmsg+0x9c/0x100
[ 1650.528248][T23413]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1650.528266][T23413]  do_syscall_64+0xcd/0xf80
[ 1650.528286][T23413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1650.528302][T23413] RIP: 0033:0x7fcf4778f749
[ 1650.528317][T23413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1650.528333][T23413] RSP: 002b:00007fcf4854f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1650.528351][T23413] RAX: ffffffffffffffda RBX: 00007fcf479e5fa0 RCX: 00007fcf4778f749
[ 1650.528362][T23413] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003
[ 1650.528372][T23413] RBP: 00007fcf4854f090 R08: 0000000000000000 R09: 0000000000000000
[ 1650.528382][T23413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1650.528392][T23413] R13: 00007fcf479e6038 R14: 00007fcf479e5fa0 R15: 00007ffef42b6b98
[ 1650.528416][T23413]  </TASK>
[ 1651.840656][   T30] audit: type=1400 audit(1765570281.072:1316): avc:  denied  { append } for  pid=23428 comm="syz.4.4503" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1652.028324][T15693] ushc 1-1:8.253: probe with driver ushc failed with error -71
[ 1652.076775][T15693] usb 1-1: USB disconnect, device number 56
[ 1652.298549][T23439] openvswitch: netlink: Flow key attr not present in new flow.
[ 1652.326301][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4505'.
[ 1758.040494][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1758.047478][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P23432/1:b..l P36/1:b..l
[ 1758.057041][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=137661, q=256 ncpus=2)
[ 1758.064851][    C1] task:kworker/u8:2    state:R  running task     stack:23272 pid:36    tgid:36    ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1758.079635][    C1] Workqueue: iou_exit io_ring_exit_work
[ 1758.085201][    C1] Call Trace:
[ 1758.088577][    C1]  <TASK>
[ 1758.091520][    C1]  ? __schedule+0x10b9/0x6150
[ 1758.096203][    C1]  __schedule+0x1139/0x6150
[ 1758.100710][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1758.105893][    C1]  ? __pfx___schedule+0x10/0x10
[ 1758.110731][    C1]  ? mark_held_locks+0x49/0x80
[ 1758.115482][    C1]  preempt_schedule_irq+0x51/0x90
[ 1758.120485][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1758.125074][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1758.131042][    C1] RIP: 0010:stack_access_ok+0x166/0x200
[ 1758.136582][    C1] Code: 0f 85 95 00 00 00 48 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f e9 8c ee 0d 0a 48 83 c4 08 31 c0 5b 5d
[ 1758.156262][    C1] RSP: 0018:ffffc90000ac74f8 EFLAGS: 00000296
[ 1758.162314][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90000ac8000
[ 1758.170276][    C1] RDX: ffffc90000ac7d01 RSI: ffffc90000ac7d30 RDI: ffffc90000ac7598
[ 1758.178314][    C1] RBP: ffffc90000ac7d30 R08: ffffffff91225910 R09: 000000000b90c0bb
[ 1758.186266][    C1] R10: 0000000000000002 R11: 000000000000846d R12: 0000000000000008
[ 1758.194212][    C1] R13: ffffc90000ac75a8 R14: ffffc90000ac75a0 R15: ffffc90000ac0000
[ 1758.202186][    C1]  unwind_next_frame+0xb7d/0x20a0
[ 1758.207205][    C1]  ? process_one_work+0x9ba/0x1b20
[ 1758.212301][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1758.218451][    C1]  arch_stack_walk+0x94/0x100
[ 1758.223111][    C1]  ? process_one_work+0x9ba/0x1b20
[ 1758.228300][    C1]  stack_trace_save+0x8e/0xc0
[ 1758.232965][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1758.238319][    C1]  ? __lock_acquire+0x436/0x2890
[ 1758.243320][    C1]  kasan_save_stack+0x33/0x60
[ 1758.247993][    C1]  ? kasan_save_stack+0x33/0x60
[ 1758.252818][    C1]  ? kasan_record_aux_stack+0xa7/0xc0
[ 1758.258192][    C1]  ? __call_rcu_common.constprop.0+0xa5/0xa10
[ 1758.264245][    C1]  ? kmem_cache_free+0x171/0x770
[ 1758.269157][    C1]  ? __io_req_caches_free+0x19e/0x5c0
[ 1758.274518][    C1]  ? io_ring_exit_work+0x33c/0x1130
[ 1758.279690][    C1]  ? process_one_work+0x9ba/0x1b20
[ 1758.284814][    C1]  kasan_record_aux_stack+0xa7/0xc0
[ 1758.289996][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 1758.296123][    C1]  __call_rcu_common.constprop.0+0xa5/0xa10
[ 1758.301996][    C1]  kmem_cache_free+0x171/0x770
[ 1758.306749][    C1]  ? __io_req_caches_free+0x19e/0x5c0
[ 1758.312099][    C1]  ? __io_req_caches_free+0x19e/0x5c0
[ 1758.317444][    C1]  __io_req_caches_free+0x19e/0x5c0
[ 1758.322619][    C1]  io_ring_exit_work+0x33c/0x1130
[ 1758.327623][    C1]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1758.333072][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1758.338508][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1758.344295][    C1]  ? debug_object_deactivate+0x1ec/0x3a0
[ 1758.349911][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1758.354671][    C1]  process_one_work+0x9ba/0x1b20
[ 1758.359642][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[ 1758.365784][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1758.371173][    C1]  ? assign_work+0x1a0/0x250
[ 1758.375743][    C1]  worker_thread+0x6c8/0xf10
[ 1758.380319][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1758.385424][    C1]  kthread+0x3c5/0x780
[ 1758.389470][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.394058][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1758.398800][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.403386][    C1]  ret_from_fork+0x983/0xb10
[ 1758.407979][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1758.413079][    C1]  ? __switch_to+0x7af/0x10d0
[ 1758.417788][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.422371][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1758.427124][    C1]  </TASK>
[ 1758.430125][    C1] task:syz.2.4504      state:R  running task     stack:27080 pid:23432 tgid:23431 ppid:17982  task_flags:0x40044c flags:0x00080001
[ 1758.443564][    C1] Call Trace:
[ 1758.446823][    C1]  <TASK>
[ 1758.449729][    C1]  ? __schedule+0x10b9/0x6150
[ 1758.454389][    C1]  __schedule+0x1139/0x6150
[ 1758.458879][    C1]  ? lock_acquire+0x179/0x330
[ 1758.463556][    C1]  ? __pfx___schedule+0x10/0x10
[ 1758.468395][    C1]  ? find_held_lock+0x2b/0x80
[ 1758.473054][    C1]  ? preempt_schedule_thunk+0x16/0x30
[ 1758.478401][    C1]  preempt_schedule_common+0x44/0xc0
[ 1758.483659][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1758.488831][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1758.493487][    C1]  unmap_page_range+0x1047/0x43c0
[ 1758.498500][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1758.503860][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1758.508773][    C1]  ? uprobe_munmap+0x20/0x600
[ 1758.513422][    C1]  unmap_single_vma+0x153/0x240
[ 1758.518251][    C1]  unmap_vmas+0x218/0x470
[ 1758.522555][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1758.527380][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1758.532299][    C1]  exit_mmap+0x1b0/0xb60
[ 1758.536521][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1758.541297][    C1]  ? __lock_acquire+0x436/0x2890
[ 1758.546238][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1758.551798][    C1]  __mmput+0x12a/0x410
[ 1758.555854][    C1]  mmput+0x62/0x70
[ 1758.559553][    C1]  do_exit+0x7d7/0x2bd0
[ 1758.563693][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1758.569057][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1758.573643][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1758.578685][    C1]  ? find_held_lock+0x2b/0x80
[ 1758.583363][    C1]  do_group_exit+0xd3/0x2a0
[ 1758.587857][    C1]  get_signal+0x2671/0x26d0
[ 1758.592363][    C1]  ? fput+0xcf/0xf0
[ 1758.596157][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1758.600985][    C1]  ? __pfx_do_mq_timedsend+0x10/0x10
[ 1758.606271][    C1]  ? do_futex+0x122/0x350
[ 1758.610584][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1758.616116][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1758.622249][    C1]  ? __x64_sys_mq_timedsend+0x1d5/0x260
[ 1758.627777][    C1]  exit_to_user_mode_loop+0x8c/0x540
[ 1758.633044][    C1]  do_syscall_64+0x4ee/0xf80
[ 1758.637625][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1758.643509][    C1] RIP: 0033:0x7fcefef8f749
[ 1758.647909][    C1] RSP: 002b:00007fceffd80038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2
[ 1758.656300][    C1] RAX: fffffffffffffe00 RBX: 00007fceff1e5fa0 RCX: 00007fcefef8f749
[ 1758.664259][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 1758.672485][    C1] RBP: 00007fceff013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1758.680455][    C1] R10: ff7f000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1758.688513][    C1] R13: 00007fceff1e6038 R14: 00007fceff1e5fa0 R15: 00007ffd40248de8
[ 1758.696468][    C1]  </TASK>
[ 1758.699467][    C1] rcu: rcu_preempt kthread starved for 10565 jiffies! g137661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1758.710716][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1758.720693][    C1] rcu: RCU grace-period kthread stack dump:
[ 1758.726553][    C1] task:rcu_preempt     state:R  running task     stack:28064 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1758.739994][    C1] Call Trace:
[ 1758.743250][    C1]  <TASK>
[ 1758.746178][    C1]  ? __schedule+0x10b9/0x6150
[ 1758.750840][    C1]  __schedule+0x1139/0x6150
[ 1758.755335][    C1]  ? __pfx___schedule+0x10/0x10
[ 1758.760165][    C1]  ? find_held_lock+0x2b/0x80
[ 1758.764838][    C1]  ? schedule+0x2d7/0x3a0
[ 1758.769143][    C1]  schedule+0xe7/0x3a0
[ 1758.773204][    C1]  schedule_timeout+0x123/0x290
[ 1758.778030][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1758.783377][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1758.788638][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1758.794437][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1758.799904][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1758.804669][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1758.809932][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1758.815106][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1758.820019][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1758.824845][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1758.830629][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1758.835280][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1758.840450][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1758.845204][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1758.850395][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1758.855409][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1758.860593][    C1]  kthread+0x3c5/0x780
[ 1758.864639][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.869216][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1758.873960][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.878540][    C1]  ret_from_fork+0x983/0xb10
[ 1758.883132][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1758.888231][    C1]  ? __switch_to+0x7af/0x10d0
[ 1758.892886][    C1]  ? __pfx_kthread+0x10/0x10
[ 1758.897473][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1758.902223][    C1]  </TASK>
[ 1758.905220][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1758.911514][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1758.916711][    C0] NMI backtrace for cpu 0
[ 1758.916725][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1758.916743][    C0] Tainted: [L]=SOFTLOCKUP
[ 1758.916748][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1758.916756][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1758.916772][    C0] Code: 26 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d9 12 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1758.916785][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1758.916796][    C0] RAX: 000000000aed97d9 RBX: 0000000000000000 RCX: ffffffff8b7786d9
[ 1758.916805][    C0] RDX: 0000000000000000 RSI: ffffffff8dacbd07 RDI: ffffffff8bf2a800
[ 1758.916814][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[ 1758.916822][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[ 1758.916830][    C0] R13: ffffffff8e097b40 R14: ffffffff908880d0 R15: 0000000000000000
[ 1758.916838][    C0] FS:  0000000000000000(0000) GS:ffff8881248fb000(0000) knlGS:0000000000000000
[ 1758.916852][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1758.916860][    C0] CR2: 0000001b33d01ff8 CR3: 0000000034c3b000 CR4: 00000000003526f0
[ 1758.916869][    C0] Call Trace:
[ 1758.916875][    C0]  <TASK>
[ 1758.916880][    C0]  default_idle+0x13/0x20
[ 1758.916894][    C0]  default_idle_call+0x6c/0xb0
[ 1758.916908][    C0]  do_idle+0x38d/0x510
[ 1758.916928][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1758.916948][    C0]  cpu_startup_entry+0x4f/0x60
[ 1758.916965][    C0]  rest_init+0x16b/0x2b0
[ 1758.916980][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1758.916996][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1758.917012][    C0]  start_kernel+0x3ef/0x4d0
[ 1758.917027][    C0]  x86_64_start_reservations+0x18/0x30
[ 1758.917042][    C0]  x86_64_start_kernel+0x130/0x190
[ 1758.917056][    C0]  common_startup_64+0x13e/0x148
[ 1758.917077][    C0]  </TASK>