last executing test programs:

3m34.982602853s ago: executing program 0 (id=1902):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x844)

3m34.811585153s ago: executing program 0 (id=1906):
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f0000002680)=""/4117, 0x1015}], 0x9}, 0x40012100)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f00000004c0)=0xfffffff8, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

3m33.266766699s ago: executing program 0 (id=1923):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
recvmsg(r0, 0x0, 0x100)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000400)={{}, 0x3, &(0x7f00000003c0)=[0x8, 0x10, 0x100], 0x2, 0x7, 0x1})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={r0, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}})
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x74, 0x38]}}]})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc", 0x3e}], 0x1}, 0x0)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x6f, 0xfd, 0x90, 0x10, 0x525, 0x2888, 0x5369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x3, 0x3d, 0x0, 0x1a, 0x22, 0xf5}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000004c0)={0x9})
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8)
fcntl$setlease(r3, 0x400, 0x1)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}}], 0x1, 0x2004000)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000a00)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffffff1, 0xfffffffffffffff8, {0x0, 0x31bc, 0x4, 0x6, 0x80000001}, [0x59d4]}}, @devid})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x60, 0x0, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @device_b, @broadcast, @random="40b2bc5eb7e8"}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x3, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}]]}, 0x60}}, 0x0)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x48000)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xb, 0xb, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x7, 0x7, 0x0, 0x8}})
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000480))

3m31.416943327s ago: executing program 0 (id=1944):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003c80)={'ip6gre0\x00', 0x0})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

3m31.195757571s ago: executing program 0 (id=1946):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x844)

3m30.071287337s ago: executing program 0 (id=1956):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/202, 0xca}], 0x1, 0x0, 0x0, 0x40094}, 0x0)
close(r0)
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={'\x00', 0x5, 0x3})
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x19}, {0x6, [{0xc8, 0x4}, {0xc9, 0x150}, {0xc8, 0x3}, {0xc8, 0x7}, {0xc8, 0x7}, {0xc9, 0x400}]}}}, 0x1c)
epoll_create(0x100)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10)
syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "bcb5cd73a429894a591a47dedcc0a34fdcf09ce12dbe00fc5497d9ed1b3f43d2437acd68595e72d46604c8e6fbe80d4853cef8a786f2b048079ba9a9e92c3ac6a91ae972095b20bbdf161b642eeee08c288c449608e5a9baeca9de1d792ec794f9ee375993943f3e4d1543fac0a42697eab6216a1d505d983733771799acd50ef286f62f70978668af23d6e41c57ea7384952b00b95b44"}, 0x9b)
pipe2$9p(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x20000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cachetag={'cachetag', 0x3d, '/]*%'}}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x8001}}], [{@flag='nolazytime'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x400200, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000680)='cgroup.stat\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x6f5, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x69, 0xd, 0x8, 0x20, 0x41e, 0x4060, 0xa013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e3, 0x2, 0x8, 0x9, 0x70, 0xa, [{{0x9, 0x4, 0xbe, 0x1, 0x6, 0x41, 0xb6, 0x11, 0x8, [], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x9, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x3, 0x8, 0xe6, [@generic={0x53, 0x8, "34e139263ba16d13cfd463fb2df21f6056f63fca2d7915fff606cd5c267c3c6b2e52821a9149f6082800b8bc16aaed2a8eb994ba7777f7dc79bb6019a2cd9e36ac7b3b04d5722be74c88eaf270090a05af"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x5, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xe, 0x4, 0x5, [@generic={0x8e, 0xc, "afd47dee311e6111c3efb6002f122143422efffcab1a105dbb6dfdde389f9f371f831b3ca9db9efa1829d74c90628d733df202b0796754c1a1477592afcf9fa1f08762f92f22a86b5ba52d5b36fefd272046a1fb32ae01b38f4ac6cb6d4ce0f8a99abb64f3a093e0e8afd808d011f2c2d8301f32fb32606a37f902cc4dbcb36f44708d8c360b49532087853c"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x420, 0x8, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3ff}, @generic={0x38, 0xa, "ee01e047075654d3466f4c7bf5eb552ac77b0f0cde0a7b618ed9ffe350cf1ba484e1dd6aba83b77d903e2143e9b828a22dc38bb31eed"}]}}]}}, {{0x9, 0x4, 0x2, 0x81, 0x10, 0x5a, 0x8f, 0xa3, 0x4, [], [{{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0x0, 0x3, [@generic={0x77, 0x10, "86638ddd5ffe681cf56774b67b53712ab022efd60309b5736e30fe24d1c0ce28f7e7c74ca65ed2d8617fea132bbfb490e22951053a31761de3d01f8602c0939a325badd92965314838459e3530b5de88ee9d9911276b37faf011edb38bb285a5860a06c3ddb444c77a4f1b15e0668f8737966cd1a7"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x2, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x50, 0x14}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x401}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x9, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xd8}]}}, {{0x9, 0x5, 0xf, 0xc, 0x308, 0xf0, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x8f, 0x4, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x40, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0xd, 0x28, [@generic={0x95, 0x6, "df8dde0aace6286c5bbf587c5e3215014301f3d9cb5231e7e8f1c14c74572f2556f5495323c3bc91e9d11d3b245c0a1838a1556c23f4f73a62cf8ed8dca00ea1a5f68ee4ecf92b9abb89d1d133ba80e4676474c0a3fc02832cd0ab69d2a460713a72b20943f4070fa26065ea161a316f8401884fc48b98857fd7adc76cf772454ae3948889fdcbadf76da26bd463b872b66fb3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xdee}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc1, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xa8, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x6, 0x19, 0x3, [@generic={0x3f, 0x11, "98107856d6612305e302cc6bd56f8e44e50ded85f2c082bf307f32273e6f56d7594613788238f375ac37e7f7d472cd2c2288283c6b3223f16908f9648c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x7, 0x8, 0x5, [@generic={0x70, 0x10, "16c42d69cea29a32675ad4d07f43bd3e35a7b5c8f49788d240100f90f38d2ffa276d2b0711e190ca63a7a82d1720cb225d7a415ecbd4b39532b80b912167bbe99d1d27eed49b580de84ecba3ad83c71d299d9aac49a6476b9758a33f5a17c4621fcb66163ac518c09507f0d9e647"}, @generic={0x22, 0xb, "bba94eb8ce6c904d0f0e4f886db96988e7da9f269ea618589276ef429a5fa562"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2, 0x2, 0x0, [@generic={0x78, 0x21, "61644e12bb15a2505fd90216512d75dbc16bf9c7dd12fa0e9eeda4d6d16c6e242f482075c2ea32e04e15f9c82e7d0af0e5c462ebb6c4f2d9df030ae03fcf31bd2f87856dfffd2a65d8ad9df3084aa44e5241c7c4bc9a0c3a76fdead9104383fb2c1588f0fc66ea805187da336962579c85687a5d7ebc"}, @generic={0x6c, 0x10, "6d88274f510abcfaa03bbbb657cf3a34907973b56bf033131257e111b551b46dde66a4371183884a728cd835ed569c1862b71f48a38168bf5caf68db17ed9537bdcbd1731b1dc4cb99103248fb07c22234b2f9ced07d669fb8cb70ecf86f8fb67995986f12f637e4bc97"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xd5, 0xe, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x5, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}, @generic={0xbb, 0x22, "b35b9e338a12660ea01407e0cc81787f62594e59d4dbff1f161c7e6350edf9063e5e6867f2d274d0cf181faba27674e25b18a97ae58b4f0427f7617bdeea6e84c90db611402b150a69760fcf76875b6555656a74bee0fffcd3758a7a985902b5ac89496c8a2234b19ca4d9dec64c7ce1fb5f1945fce690a591b146b5ce8979a1ed7acc83c01bad5789ed2fee5c7c8fa04ca665010798e489f09b96ebf86b3a3a11d8593ac4133d3940b3c10cada2818a0402874e1577b8509c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x7, 0x6, [@generic={0x6f, 0x21, "3e1d2fbe099df18b35c069f7a57c90d944f8b825916cd160b52c9a005dc997a5613328bb0c4d578033f2ac584bacc9ff784ee3fccdd0e8779cab9bfa6f05621a9ce123c8de3b5b65ab0250dae08115464162e807a42c023f385f4199ff1739946d8ca85531701272a863963fe9"}, @generic={0xa3, 0x24, "cd189650105dd23af1fc7dce74b2c13e02035e7c08844e4e143c4e3733663d2caa74227ccda62fddb22dcadb2d37fd33823a4caf5f3e2d2af92ba4348a69aee642ec4f2b5f88367fd93f3aaa571cca5c02fd353b3b285efca507861f0c7e911c238eaaee32f2a3de78c44595f8150e633af0deea2dd96f70e44331e980fc251ef4da353aec5eca2576752edbb00e6ac94b38245e6ba3a9d650761496ded5fb2ef5"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x66, 0x81, 0x3d}}, {{0x9, 0x5, 0xf, 0xf, 0x10, 0x85, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x90, 0x5, 0x5, 0x20, 0x8}, 0x1a, &(0x7f0000000e00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x35, 0x9, 0x4d, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xda, 0x33, 0x7}]}, 0x1, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1004}}]})
ioctl$KDENABIO(r7, 0x4b36)
setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000ec0)=0x7ed, 0x4)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000f00)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
syz_emit_vhci(&(0x7f0000000f40)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe2}, "0f900d840ccf09361f42bbd30d516fa7132a16efbe0390971834bc7cf59c599eab425989b1069c00b49a01be87130e17096a27608c799d4e44b18e03485b6eaa210fd25077f106d98a56071c8014b9ee2438ded19dd449c6368b9d8c8092cb5ce9a44102284fa5836f3e4d527ed9a7ad6bea7300d433a43cd813a3e3a80c762a73c7fa743325f3c49a8986110fd556d3465eefd58f880ce67352c140758231b8c90e0d93a8c92f4c03a8fd654d5bce9c2411092c8b3aa2f9d91ec3c0f88e0f29c836ac5d0e64877be5a0f1384cf35b7bfe61360962321e8d67fc04f37797b7353fa0"}, 0xe6)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000001040)={0x6, 0x0, [{0x6, 0x8, 0x6, 0x9, 0x8}, {0x1, 0x7, 0x4, 0x8, 0x7}, {0x0, 0x5, 0x59, 0x5, 0x9}, {0x7, 0xd4b, 0x2, 0x9, 0x6}, {0x80000019, 0x9, 0x2, 0x5, 0x3ff}, {0xb, 0x401, 0x7, 0xa, 0x3}]})
setsockopt(r5, 0x400, 0x0, &(0x7f0000001100)="e387cf0b5f6fec35f454899b11870eecf984e6f77dfd84e899be9e45c381c85c24ea8fc7a12db068cc8ada57ea71ac58cca580b7b5e363cbca5269ae5016e63a6673d4ca7ac3b2e1737758ecd37d3d287d9c997a004170f545bc49032ac90f500e927430413bf3c608661ecc2cdf88a61b10b8613d71f8061c0c0dc96aa6ee3ec1f6302dc8edf490", 0x88)
removexattr(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)=@known='system.sockprotoname\x00')
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001240)={{0x1, 0x1, 0x18, <r8=>r4, {0x8}}, './file0\x00'})
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000001280)={r8, 0x0, 0xfffffffffffff000, 0xfffffffff0000000})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000012c0)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000001300)={0x9, {0x1f, 0x8001, 0x2, 0x4, 0xfff}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001440)={&(0x7f0000001340)=[0x0, 0x0, 0x0, <r9=>0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000001480)=r9)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000014c0))

3m29.888636865s ago: executing program 32 (id=1956):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/202, 0xca}], 0x1, 0x0, 0x0, 0x40094}, 0x0)
close(r0)
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={'\x00', 0x5, 0x3})
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x19}, {0x6, [{0xc8, 0x4}, {0xc9, 0x150}, {0xc8, 0x3}, {0xc8, 0x7}, {0xc8, 0x7}, {0xc9, 0x400}]}}}, 0x1c)
epoll_create(0x100)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10)
syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "bcb5cd73a429894a591a47dedcc0a34fdcf09ce12dbe00fc5497d9ed1b3f43d2437acd68595e72d46604c8e6fbe80d4853cef8a786f2b048079ba9a9e92c3ac6a91ae972095b20bbdf161b642eeee08c288c449608e5a9baeca9de1d792ec794f9ee375993943f3e4d1543fac0a42697eab6216a1d505d983733771799acd50ef286f62f70978668af23d6e41c57ea7384952b00b95b44"}, 0x9b)
pipe2$9p(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x20000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cachetag={'cachetag', 0x3d, '/]*%'}}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x8001}}], [{@flag='nolazytime'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x400200, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_io_uring_complete(0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000680)='cgroup.stat\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x6f5, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x69, 0xd, 0x8, 0x20, 0x41e, 0x4060, 0xa013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e3, 0x2, 0x8, 0x9, 0x70, 0xa, [{{0x9, 0x4, 0xbe, 0x1, 0x6, 0x41, 0xb6, 0x11, 0x8, [], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x9, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x3, 0x8, 0xe6, [@generic={0x53, 0x8, "34e139263ba16d13cfd463fb2df21f6056f63fca2d7915fff606cd5c267c3c6b2e52821a9149f6082800b8bc16aaed2a8eb994ba7777f7dc79bb6019a2cd9e36ac7b3b04d5722be74c88eaf270090a05af"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x5, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xe, 0x4, 0x5, [@generic={0x8e, 0xc, "afd47dee311e6111c3efb6002f122143422efffcab1a105dbb6dfdde389f9f371f831b3ca9db9efa1829d74c90628d733df202b0796754c1a1477592afcf9fa1f08762f92f22a86b5ba52d5b36fefd272046a1fb32ae01b38f4ac6cb6d4ce0f8a99abb64f3a093e0e8afd808d011f2c2d8301f32fb32606a37f902cc4dbcb36f44708d8c360b49532087853c"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x420, 0x8, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3ff}, @generic={0x38, 0xa, "ee01e047075654d3466f4c7bf5eb552ac77b0f0cde0a7b618ed9ffe350cf1ba484e1dd6aba83b77d903e2143e9b828a22dc38bb31eed"}]}}]}}, {{0x9, 0x4, 0x2, 0x81, 0x10, 0x5a, 0x8f, 0xa3, 0x4, [], [{{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0x0, 0x3, [@generic={0x77, 0x10, "86638ddd5ffe681cf56774b67b53712ab022efd60309b5736e30fe24d1c0ce28f7e7c74ca65ed2d8617fea132bbfb490e22951053a31761de3d01f8602c0939a325badd92965314838459e3530b5de88ee9d9911276b37faf011edb38bb285a5860a06c3ddb444c77a4f1b15e0668f8737966cd1a7"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x2, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x50, 0x14}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x401}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x9, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xd8}]}}, {{0x9, 0x5, 0xf, 0xc, 0x308, 0xf0, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x8f, 0x4, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x40, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0xd, 0x28, [@generic={0x95, 0x6, "df8dde0aace6286c5bbf587c5e3215014301f3d9cb5231e7e8f1c14c74572f2556f5495323c3bc91e9d11d3b245c0a1838a1556c23f4f73a62cf8ed8dca00ea1a5f68ee4ecf92b9abb89d1d133ba80e4676474c0a3fc02832cd0ab69d2a460713a72b20943f4070fa26065ea161a316f8401884fc48b98857fd7adc76cf772454ae3948889fdcbadf76da26bd463b872b66fb3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xdee}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc1, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xa8, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x6, 0x19, 0x3, [@generic={0x3f, 0x11, "98107856d6612305e302cc6bd56f8e44e50ded85f2c082bf307f32273e6f56d7594613788238f375ac37e7f7d472cd2c2288283c6b3223f16908f9648c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x7, 0x8, 0x5, [@generic={0x70, 0x10, "16c42d69cea29a32675ad4d07f43bd3e35a7b5c8f49788d240100f90f38d2ffa276d2b0711e190ca63a7a82d1720cb225d7a415ecbd4b39532b80b912167bbe99d1d27eed49b580de84ecba3ad83c71d299d9aac49a6476b9758a33f5a17c4621fcb66163ac518c09507f0d9e647"}, @generic={0x22, 0xb, "bba94eb8ce6c904d0f0e4f886db96988e7da9f269ea618589276ef429a5fa562"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2, 0x2, 0x0, [@generic={0x78, 0x21, "61644e12bb15a2505fd90216512d75dbc16bf9c7dd12fa0e9eeda4d6d16c6e242f482075c2ea32e04e15f9c82e7d0af0e5c462ebb6c4f2d9df030ae03fcf31bd2f87856dfffd2a65d8ad9df3084aa44e5241c7c4bc9a0c3a76fdead9104383fb2c1588f0fc66ea805187da336962579c85687a5d7ebc"}, @generic={0x6c, 0x10, "6d88274f510abcfaa03bbbb657cf3a34907973b56bf033131257e111b551b46dde66a4371183884a728cd835ed569c1862b71f48a38168bf5caf68db17ed9537bdcbd1731b1dc4cb99103248fb07c22234b2f9ced07d669fb8cb70ecf86f8fb67995986f12f637e4bc97"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xd5, 0xe, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x5, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}, @generic={0xbb, 0x22, "b35b9e338a12660ea01407e0cc81787f62594e59d4dbff1f161c7e6350edf9063e5e6867f2d274d0cf181faba27674e25b18a97ae58b4f0427f7617bdeea6e84c90db611402b150a69760fcf76875b6555656a74bee0fffcd3758a7a985902b5ac89496c8a2234b19ca4d9dec64c7ce1fb5f1945fce690a591b146b5ce8979a1ed7acc83c01bad5789ed2fee5c7c8fa04ca665010798e489f09b96ebf86b3a3a11d8593ac4133d3940b3c10cada2818a0402874e1577b8509c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x7, 0x6, [@generic={0x6f, 0x21, "3e1d2fbe099df18b35c069f7a57c90d944f8b825916cd160b52c9a005dc997a5613328bb0c4d578033f2ac584bacc9ff784ee3fccdd0e8779cab9bfa6f05621a9ce123c8de3b5b65ab0250dae08115464162e807a42c023f385f4199ff1739946d8ca85531701272a863963fe9"}, @generic={0xa3, 0x24, "cd189650105dd23af1fc7dce74b2c13e02035e7c08844e4e143c4e3733663d2caa74227ccda62fddb22dcadb2d37fd33823a4caf5f3e2d2af92ba4348a69aee642ec4f2b5f88367fd93f3aaa571cca5c02fd353b3b285efca507861f0c7e911c238eaaee32f2a3de78c44595f8150e633af0deea2dd96f70e44331e980fc251ef4da353aec5eca2576752edbb00e6ac94b38245e6ba3a9d650761496ded5fb2ef5"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x66, 0x81, 0x3d}}, {{0x9, 0x5, 0xf, 0xf, 0x10, 0x85, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x90, 0x5, 0x5, 0x20, 0x8}, 0x1a, &(0x7f0000000e00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x35, 0x9, 0x4d, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xda, 0x33, 0x7}]}, 0x1, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1004}}]})
ioctl$KDENABIO(r7, 0x4b36)
setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000ec0)=0x7ed, 0x4)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000f00)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
syz_emit_vhci(&(0x7f0000000f40)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe2}, "0f900d840ccf09361f42bbd30d516fa7132a16efbe0390971834bc7cf59c599eab425989b1069c00b49a01be87130e17096a27608c799d4e44b18e03485b6eaa210fd25077f106d98a56071c8014b9ee2438ded19dd449c6368b9d8c8092cb5ce9a44102284fa5836f3e4d527ed9a7ad6bea7300d433a43cd813a3e3a80c762a73c7fa743325f3c49a8986110fd556d3465eefd58f880ce67352c140758231b8c90e0d93a8c92f4c03a8fd654d5bce9c2411092c8b3aa2f9d91ec3c0f88e0f29c836ac5d0e64877be5a0f1384cf35b7bfe61360962321e8d67fc04f37797b7353fa0"}, 0xe6)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000001040)={0x6, 0x0, [{0x6, 0x8, 0x6, 0x9, 0x8}, {0x1, 0x7, 0x4, 0x8, 0x7}, {0x0, 0x5, 0x59, 0x5, 0x9}, {0x7, 0xd4b, 0x2, 0x9, 0x6}, {0x80000019, 0x9, 0x2, 0x5, 0x3ff}, {0xb, 0x401, 0x7, 0xa, 0x3}]})
setsockopt(r5, 0x400, 0x0, &(0x7f0000001100)="e387cf0b5f6fec35f454899b11870eecf984e6f77dfd84e899be9e45c381c85c24ea8fc7a12db068cc8ada57ea71ac58cca580b7b5e363cbca5269ae5016e63a6673d4ca7ac3b2e1737758ecd37d3d287d9c997a004170f545bc49032ac90f500e927430413bf3c608661ecc2cdf88a61b10b8613d71f8061c0c0dc96aa6ee3ec1f6302dc8edf490", 0x88)
removexattr(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)=@known='system.sockprotoname\x00')
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001240)={{0x1, 0x1, 0x18, <r8=>r4, {0x8}}, './file0\x00'})
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000001280)={r8, 0x0, 0xfffffffffffff000, 0xfffffffff0000000})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000012c0)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000001300)={0x9, {0x1f, 0x8001, 0x2, 0x4, 0xfff}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001440)={&(0x7f0000001340)=[0x0, 0x0, 0x0, <r9=>0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000001480)=r9)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000014c0))

23.058599794s ago: executing program 1 (id=2969):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18410e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x8050}, 0x20040051)

23.023836533s ago: executing program 1 (id=2970):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x3d, 0x7, &(0x7f0000000040)={0x20, "0fd62f5244b23ee763e6acba8d11e6da00"}})

22.378837731s ago: executing program 1 (id=2972):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0)

22.360049666s ago: executing program 1 (id=2973):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0xfffff000)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000000380)='2', 0x1)

21.639442339s ago: executing program 2 (id=2986):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
r3 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvfrom(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) (async)
recvfrom(r4, 0x0, 0x0, 0x2000, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="ac8a6ef6c8b551c2eb8e265746e2ebb34b5847819c", 0x15}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0)

21.620872257s ago: executing program 4 (id=2987):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (fail_nth: 3)

21.182924962s ago: executing program 4 (id=2988):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000100), 0x1004)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async)
r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000040)='coredump_filter\x00')
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x41, 0x100, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r4}]}, 0x1c}}, 0x0)

21.111439792s ago: executing program 4 (id=2989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
unshare(0x6a043a00)

21.071823904s ago: executing program 2 (id=2990):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2184, &(0x7f0000000400)={[{0x1000, 0x4e00, "788b5cce0c622a5ed0610853d4bd380bae4b6f3ba648260620cd037b623fb6462e2bcca250d8e815aa45efb804817433de54377621e3ddad623ae1baa7c9ca008af86e573048224eb105031e234a3f25956f64553e58af5ea1be58bbde4157785a97b5d606b01f92d9f36877d5be71441ccb74f1dccd17005f3474745581c76c465f76817b91dd6838ed39b69a912f2d05c45ce0c99692494beaf7dc4440c1bb858a8208de995f16d19b1275db4c21d9b9c4272d48eb8f701c17c9d30722da71ee1f6a017bb1ad115ad9b542c751663c63a34771c5dc97a8515bdf4bc6fbcdd48a2c652cb286cc9b34660df540809e40c8208edbfb4d8703d306cbc2dce83afc1311087f01f7ad9aa01f9c3778465145d3cb083c67f55c66c9eccafdd21bf9f568c5481e69f153f9d8ea15505049aa41797334e5122b12185c391511fc57fa8ddc9dc44a5a2093f0ae16e13d3f1fab24df121436d72b6dc84ec2b81ce8c1c99b6794a250bfa96d71de0b5b0955fee9758801211e9cb9596da421ec391ea273e7c662e22d48d394ea7427b7e37e8d35bd5d1147d709c2b7aeb8e10358aea1c6d3d3fdd5d845fc7fc01c7a507520990f2c5ad05fb793fc971664cf564b4f35244c4deb321c7f56bee26d28a8b1afc4191bab943289ee32b613ca9042915c80af24b7374b9ef636bad3a2df2e58aebca9ec8f036eee28d2f391348a4b7b3aebcdb6326b4c4add4a79b7600b6402261417d32bb70631d418078d9de36c9f5d59177a4801616bcb56cd7bbd7ac14825c5d01979784b2f91a87a5db2bf8657796e4ec2ac9ef8ec97a88709fe37157dc909ec4662cc215143b9696cceb0016848e36e23b03be0219902893d2a57158dd920cd77e7d6cf4898e6af8d3ee187bd490b4517a055a472f784ce03b394d9f0ba92d6513cfdd803112581f72556e15eac488dbfb5cc6978202c1168b4bbff26a3edc75c4338521331f55a217f74352eb777116ac310a66567b38e7109cc462c0ac1794118c2dc0ee996561d17e19cfe337730607b2215ad1acb9bee000446dd238baeb5e814171435888005be9abb729970772f77120c4c8887e9c52d470027c75cc5867a5a9895356cba96cf2ade6b25018606f296b982e282296166522534f0c4967a1e8f72274862fe1ed79cc58743f3995a45dfa5fdb55e43aec4c0b4c7d718ae16e23a79f33a1eab5b10cafaf266030600586b4c2348f153098b6ae87aaf9a2842eeb8784816f668522af554e8a9d316363c2ff4383aece087785332d807f34dbe8bd53bb69d099d2a3dc8a5d648b51fb2ee00473324a4162f0e0794217e576d6cd1ca0340a38df45f2a6cd7e8e86c882ef0e58812bc9e66382ddb7e8b2da0ed9a6ce52f431fc0213392f60565ce7da940a4faf024e27e81cb44cec41b8b69348e71c2fa1f6fd17a53cf035cf47fe95f81b3bdec5d10b5499c800e10dc0ba99cd2ffd7c99f491f9d4d948492505ceca81371ad7617ebf44f27be77db8e303e1d329a241fa7b49995f4f1a9e482b5a0e84db2692e695d0336a1fd05f57343ede0295eb4cdcdd0a8f07839103befb3a4cee1822f84573db4d60c6675cc20067ed731b75f9c213b4f7ef0ecf80a45d3c61570435024439ee47225cdeb3d7aae79ed90ae875f86e1b44a9347feaaab4655b6f95c83c1d25f25139b6252456fdf35fb817e10518bec8d10e4e00f70dd04ec7b1da7b2eb9c432ccb1fb640fab109b6e46f04c02d21f86c2ca51ab498c79772b88ef0105726c8edc4d4c76ce7c0f7a5cee53d7cfe014a6375a622262d71631829ea5adb3b1a4b813a2e0ecf2affe14646a2b906d11d526ad7c811b53dc7531d1360e3a63d3053d891a619dbb19c11d62dc0d54ebb60ae421167095b750f05619f9854b0d239734f8796f83786070d6456d162c97d63f2dd09f43bb9788fe3bb1c573b6a015654b96d1dbf3a37034b782b493b1bc4bac3f74aa53645e1f1228d84c9c871e17fa365b1e543122dfa0a69413300b6786da59d024ac29373816d47d3326f548514e524630e53fcc581c3f46c9933d677fcf10b8023665c44ac73e53553edcb349a7c3f979c4fc8891f772c2f69d61ffa0293ab7ff5140b29a3851fec219ff9f8680dd9f4a4f94c8c9fbbe43143632bc7f42f6518019c6d422f751757bde684af23a6609383aeb748abc9d085fbb45d1cdea840e0659be6b7136c6a75368842188ebcb9a304a490416a6741b77f4512ea5cf1740b239d1f418019bb16d2bbc6729dde2f0e5635ce7600783aef115b4fd0420beda2579a542c06f16de50a8e4e278d193b7a89024b958438808e1c2e040a4a75f20702a2518a93f0f38c9df6b232b0ae131f091c12d411303fc01feee71895183959a28f2894e39bf2b7f39d2f20d571db3f004fb806b76e4d7132e63d2155bdd59d9d1f8feb792692d6eec8b82db5b0c717e799327d4b2a4a17edb289ec70eafb308495590d5de68d9d73bafb6399e606d14ce15285d71c72b09ba8fe80d91c576c3ba3a3f8d3f572dd8ec725fd271a43017a54e2dc22657199d6ce38109cb1b74473921f944c9844ee2dada0fa5f0a746097a59597c1c951da7af6b66311fae85ebeb93c57d8dd1fcfa8909c38b249b648d28f84df3825e8a1534eb9c7bd0053d6317d623fda19a1254aec96691bc3451cb127c4540d4c37109f10606c79f8f0048c3f4013e9a14be071c36c355d23079921de53ee9c691eb362ebb213e0f3c07a28649222da72cfd715cfc1218ce59fcf51da162fa247f1c419bd1a9212b37ad07ab9c847ea728ba4ac9ce893760f2bf35dd7569336f151dc11098d72f1adfb6c4e2d7a249fd9ae14e05e94088fd59be17497c25418c728c19e2a32680937e95094df54d3f31ff0a520ef2e1365fe8066bf376925bcc8610b11653e21ee329b6767d6998f4f089bc586a103d38cdb4853933b1c3e0c79c7aec44da8a28e0b8a6975a3cf381de0b6727974ef1e70ebef8d580b46dc13bc0e6332d35891681762b8e540d2b455507ca687d8fedc6d1d94d784e8c50e08aa9e9cdaa80874125ca4abb797dfd8c178c26e98e129ee28339cf4a81c80aa7a2a59cb2684adc827d12f2a36401fd308587ff06e285e4ff1100116aff7da939a1462e032649f032d7a88f769a6061c21102dfc5368e4a8ab4d2d04d3c64f4c7f6b01a7d3b1a6330968162e95ae62ea832a7eeed2c43c3d2004cc048961018c54de99cd03c7772920c82f3e709c2ba6ef0a7e1c5ecd4a08d9e476e9a04ce60b424090228c5d1083d03b9c1d864f23e24b4f9e50d4ca93f3d2b64a82009a53e4b99a208878108d73bd880bcde8ec497a2599173b68bfb0418995ddd74bc729a6558f91511b77f4c93ac8572a31fb0319d2859a9d2a57d17facab19dc0dc81cf419c6e95374c0e89a8e2561076aa47c12a64c99cb4a7aa3677f86bd3b514c2fa0a112523c644e443be911925aade57359879afa015cc3bd5f12de1a02b9ba2058f8f0f9d33f28f01b5045e633941236b4ac3c3aadccc8cebbc67396391e2efa14695920cc0cb3d45ea19b52b94313d939edcb4c736a3fe604561001380ce89dff54a1dee0da84d71d31e07ff5681c83dbff23b6ae9dc4e9030ec098811986ccceede1cf98d978605cbb54b5f1a36894d17ecde53cbf74f18792fb2ef9f5dde259d49d2baf59613c84a0cd2298b07bbef3be67ae00e70c191d4959697f64ab4161414d5bb5659b28b97872e571b69f9a1cc54535b140498b5ac8bb2f17629a21c0e13390ac026879bfb2471280b3a6576cfdb48b70f477937476d678f54287e3898b6efb5d18f21d317209ef32df20854c815784cbb0546db526d89eea65f3c2871696fd2cd4b45525777496ff428c6e76a8759681ab3d055e38e41c6b1b5a203f5f4bd81456d43de0186b1e4dd1fd06bb8d2bc7b9ad35a2fd923d90fbd5c4bd5464479672f718080ed6853a38782cbba557d4924c0938d4c92d32f72fec43af1df06203e9123cc8167d96b702271fa2edde1add2200be210caae95888b7f3b5133d8075b9ed65a7faefa92ac3a858c76584528cfe74969f5d896dd2acf9b10712d25735b2c75e3539e67898d91c9051306cbf69b982afa3029eef5c86be9dabdc5c5567c10f51cc5b9664d8b566867d6c0f7f836476955c4b75fcca121a078b10071d3c038082eb51fc82a461e28c010823a3a9631dc834a7c64fe03bf908c6dadc12a99f43a51da87e7d03cfe6690d940cb0332784a53401d09051a3c75e80873c92c80b4193d893839aeb870f986cc68cf816238ff93cbc66d5a66f9a009da8cedf672c08f2718b0e24973ee1491d45ee5e48f336b4781aecf087f4f29984b39651a7d175f954240f14658b4123f85c5a2a0fd0b1e1f88f8914d0d63122340b47fee7e9d5d51dc2a8fca39c9b912da2df89f3e0f8d46afe0af1e136ab45571c07623366824cb3d03e08623bc97d8c06368805d276b16244fa7ef9b160e85e3f113b574332e30b5f5753e0ffef526f2aaa4192263500d85f57c45dcd9248e0520a3b2fddc6b31afd1998947a8ed9fb4978b61d240f999f34aa6602080d23ed42567e580eff4682ad19acc197da93248b1f11c4e9e9ce00e563ae95666a0729eec89d5d3690fd65e748e31105491fcb7d3cc803bc82d5084e6afc8f2e0ef221f83487562f15ad2bafc65607868f204c1e0052ab188075a79763ad0ffc32a3d133dceb8b1da88bd9ef8f83f0ca80600f2d282cd2530e7b578c092c7f81e6626257a7333f65a5efc110faa762a1d338dec1370eb8941f77d2afff38f8796059e591ea76fceaf801e3408345295a6267ebaff099af3c9f5716e10335374e7e789b7c693a71180f3ec7dfdbb28121d103d63d59ef5d580253efb648afdb97f2a466acaa1ffa7f8cddfac808818805255aae64a59639a4736510a46aeb458e2b95ebcda0ae68e58245d385ad43401e985f545a02bf37dbbea349209c75327f35867081e187d2d33ab52a96493b63fbece874396e4b02d3cbed48dbe312f62c0dd52fd29b79cc843e6e2605d00e5e72bb0ffb459bdeeb74f84a54f2ffa691008e56fa2831a9f2efbe9e1d2615677df5653f37dee40f130fc3dc8caa80e026b72901e84cc0f13714e6e70edb27f5b38e195328ef50be56cf5fe2ab28e5a016fca171e0aca19f3bc0879103e1d49776d9c37e9fd4f03269329f711bd0300b3a1cf3e71b8100986a2436f37c25f569c1797176d5f5a7780a23f908cd51f4ac88b343050f1d3c40d9332d1f1697b3ec4b7629204745369dfff354f6db05bae9b8344b7d76b5c6d8fcbcf027364eaccd260e0cb89c2155a680de96e48ace04a7f4a006f79e66955a0369beca02a0747c7521d2a4b01ac273ae08d31315815ba709f644cc3a7e749d29c887e5ea6274788d8405081ea788b89ddc1ddda2d16bd2176b95a95251c3f4eceabb7af76e9ec03e6c94b3e11a39f593dbbebf8480d4aacde7fc8f2eff7b4245a30c28c3d58e92e670d6f47f2515c3adbae9ee3579d7b724c1813b4c5d77a7ee6c7d8a91717fec26a61dee90e1fe4cb7bb352f28668fe393a87c94b27bbf7c4f11be7960aa5320d5bb7d031543add2eb799f8d7f855175eaa7dbd4ce7d28e7deb012bb18c7f8564d5ceb21c7462cf4d5f9aa00cf15cfab65acd00fb131bb3388f8f438365f4be4431b9b362c674f75159b1306093984e41ba587a735055cc7bf901d5ec4668086c8c5a4dd34f855f3b205bdae804b504f1468c639515b3abdf33be5cedb1d03e3ad2f51f230df14ad419c2e"}, {0x8a, 0x4e00, "554eba06b81af1d5bf56f19e1f21f1635014abf0afcbea035411fbd0ab8e049b94e4d14073f20434c3a20cc9cd91e856cebc38a6bacf71c89c4b7d1611915504a7e885bef34506c71a9ee147ec2810f305883529dfd07c80e73b621be6b6d17d901811edb5fc1717c18af13c765a53553dce0cd9f9e8b472978bd28b13ed4a24e18b7ad8febc6650d535"}, {0xe7, 0x4e00, "d160ae68a67a040404fb04c31f3c7fb63e92bee3fe680f53efcdcbce68e567b45c8aade2a3ac4684282b6fe3a263246527691008676a85003702b6b82d00b9994b8e8f2bffa2455e8d1c5c9ddc7e66eab898ebafb81209390ccbb3fa70392e27e024d34533389bc63e880d7e87f939b14832c1d39607bb17f9acc8a8f7b8116a32c464e6372275c81370b6132a65d6d03504acc067f7094cf7a7695099af14648f7591a50f1059f31318a31ff63751159ce1a66ab175c52eea870aef3c3974469df77cb8781f7509c4fb64ae50d33bbd65cacbe25fd89fa1bf8823cd44dc284dd761ae401b5156"}, {0x1000, 0x4e00, "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"}]})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000003f40)={r4, 0x7, 0x1, 0x5, 0x0, 0x1}, 0x14)
r5 = dup(r1)
r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
dup3(r7, r6, 0x0)
finit_module(r7, 0x0, 0x0)
ioctl$BLKRRPART(r7, 0x125f, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x10, r1, 0x77163000)

20.94015034s ago: executing program 3 (id=2992):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x3ff000000}]})

20.905603162s ago: executing program 4 (id=2993):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
sendfile(r0, r0, 0x0, 0x200700)

20.747223324s ago: executing program 3 (id=2994):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8)
mlock(&(0x7f0000000000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5ac}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0)

20.746848071s ago: executing program 4 (id=2995):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x178, 0x29, 0x36, {0x5e, 0x2b, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x328}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x200000000000000)

20.661381873s ago: executing program 3 (id=2996):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x84, 0x12d5c, 0x12d5c}}, 0x44)

20.607295749s ago: executing program 3 (id=2997):
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03000800010000000000140000004519001c00000000ff029078ac459e01ac14141113019078ac1414aa"], 0x2a)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x401}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)

20.530997732s ago: executing program 4 (id=2998):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = dup(r0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
unshare(0x20040600)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x2a060600)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet6(r3, &(0x7f0000004a40)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

19.488466623s ago: executing program 2 (id=2999):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x3d, 0x7, &(0x7f0000000040)={0x20, "0fd62f5244b23ee763e6acba8d11e6da00"}})

19.430284556s ago: executing program 3 (id=3000):
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129000000000100000000000000070594ef6333ef"], 0x0) (async)
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129000000000100000000000000070594ef6333ef"], 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x0)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000180)="bc6d214c808b8166ef75f54dadffcbd76e20e98b43459e5ac98ecaa11fc9e88ad237a384544cc0e66e5da8aed9d5095eb92b82ef41e6f5677e6e87af2d9ceafe14925c072476bfa5640d93", &(0x7f0000000100)="c98012b87eb4f2e27c33364a147573922a688b74cd81cb2b901c869d39b58222817b6fda770097d277014a5e1943f504bad06d4da8064fbef2fb98a4bb2e"}}, &(0x7f0000000140))

19.059695082s ago: executing program 1 (id=3001):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x80, 0x2}, {0x8, 0x1, 0x300, 0x0, 0x100, 0xfffffffffffffffc, 0xffffffff, 0xffffffffffffffff}, {0x2, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
syz_usb_connect(0x4, 0x24, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0xf9, 0x52, 0x23, 0x40, 0x2040, 0x6517, 0x331, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x80, 0xa0, 0x6, [{{0x9, 0x4, 0xc3, 0x8, 0x0, 0xa, 0x66, 0xff, 0x22}}]}}]}}, 0x0)

18.876732575s ago: executing program 2 (id=3002):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write$binfmt_elf32(r2, &(0x7f0000000980)=ANY=[], 0x238)
setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0xdf9, 0x5)
shutdown(r1, 0x1)
socket$kcm(0x2, 0x8, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'pimreg1\x00', @multicast})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x42)
personality(0x5400004)
ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0)
mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0x200000e, 0x10, 0xffffffffffffffff, 0x2339000)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r5)

18.702920005s ago: executing program 2 (id=3003):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003bf000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e00fbedc650ff8210f21a1f30fc7b400000f20c06635100000000fb5c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x43}], 0x1, 0x46, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',srokp_\'R\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x84)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x10}}, 0x28)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.475337643s ago: executing program 1 (id=3004):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x8000000, 0x0, 0x3, 0x1}, 0x8)

17.716588194s ago: executing program 2 (id=3005):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xfd, 0x5, 0x6, 0x0, 0xf, 0x4d, 0x0, 0x7, 0x1, 0x10, 0x0, 0xd2, 0x80, 0x4}, 0xe)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={r1}, &(0x7f0000000080)=0x8)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x845)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
close(r2)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x147}], 0x1)
timerfd_create(0x8, 0x80000)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7)

16.173365501s ago: executing program 3 (id=3006):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e060b7c0c"], 0x9)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.376471022s ago: executing program 33 (id=2998):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = dup(r0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
unshare(0x20040600)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x2a060600)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet6(r3, &(0x7f0000004a40)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

2.183547652s ago: executing program 34 (id=3004):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x8000000, 0x0, 0x3, 0x1}, 0x8)

1.091458454s ago: executing program 35 (id=3005):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xfd, 0x5, 0x6, 0x0, 0xf, 0x4d, 0x0, 0x7, 0x1, 0x10, 0x0, 0xd2, 0x80, 0x4}, 0xe)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={r1}, &(0x7f0000000080)=0x8)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x845)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
close(r2)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x147}], 0x1)
timerfd_create(0x8, 0x80000)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7)

0s ago: executing program 36 (id=3006):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e060b7c0c"], 0x9)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

rocess `syz.1.2708'.
[  577.986655][T14134] openvswitch: netlink: Message has 6 unknown bytes.
[  578.114445][ T9308] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  578.274156][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  578.280912][ T9308] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  578.291295][ T9308] usb 4-1: config 155 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  578.302332][ T9308] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  578.319144][ T9308] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  578.328446][ T9308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.336570][ T9308] usb 4-1: Product: syz
[  578.340961][ T9308] usb 4-1: Manufacturer: syz
[  578.345659][ T9308] usb 4-1: SerialNumber: syz
[  578.348829][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  578.357270][ T9308] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  578.366043][ T9308] imon 4-1:155.0: unable to initialize intf0, err -19
[  578.373002][ T9308] imon:imon_probe: failed to initialize context!
[  578.379499][ T9308] imon 4-1:155.0: unable to register, err -19
[  578.533161][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.543380][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  578.553662][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  578.562791][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  578.570912][   T10] usb 2-1: SerialNumber: syz
[  578.581090][ T9308] usb 4-1: USB disconnect, device number 70
[  578.744832][  T891] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  578.817280][   T10] usb 2-1: 0:2 : does not exist
[  578.823974][   T10] usb 2-1: unit 5: unexpected type 0x0a
[  578.841282][   T10] usb 2-1: USB disconnect, device number 54
[  578.870674][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  578.915823][  T891] usb 5-1: Using ep0 maxpacket: 16
[  578.923337][  T891] usb 5-1: config index 0 descriptor too short (expected 65532, got 18)
[  578.932538][  T891] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  578.940887][  T891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  578.953915][  T891] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  578.963310][  T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.972274][  T891] usb 5-1: Product: syz
[  578.976474][  T891] usb 5-1: Manufacturer: syz
[  578.981159][  T891] usb 5-1: SerialNumber: syz
[  578.989395][  T891] r8152-cfgselector 5-1: Unknown version 0x0000
[  578.996026][  T891] r8152-cfgselector 5-1: config 0 descriptor??
[  579.165492][T14142] FAULT_INJECTION: forcing a failure.
[  579.165492][T14142] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  579.179882][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.3.2712 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  579.179911][T14142] Tainted: [L]=SOFTLOCKUP
[  579.179916][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  579.179923][T14142] Call Trace:
[  579.179928][T14142]  <TASK>
[  579.179934][T14142]  dump_stack_lvl+0x189/0x250
[  579.179952][T14142]  ? __pfx____ratelimit+0x10/0x10
[  579.179976][T14142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  579.179996][T14142]  ? __pfx__printk+0x10/0x10
[  579.180025][T14142]  ? fs_reclaim_acquire+0x7d/0x100
[  579.180061][T14142]  should_fail_ex+0x414/0x560
[  579.180083][T14142]  prepare_alloc_pages+0x22b/0x650
[  579.180103][T14142]  __alloc_frozen_pages_noprof+0x123/0x370
[  579.180118][T14142]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  579.180151][T14142]  ? __pfx__copy_from_iter+0x10/0x10
[  579.180173][T14142]  ? policy_nodemask+0x27c/0x720
[  579.180193][T14142]  ? aa_file_perm+0x44c/0x1530
[  579.180216][T14142]  alloc_pages_mpol+0x232/0x4a0
[  579.180234][T14142]  alloc_pages_noprof+0xa9/0x190
[  579.180247][T14142]  anon_pipe_write+0xbf0/0x1460
[  579.180259][T14142]  ? __pfx_aa_file_perm+0x10/0x10
[  579.180295][T14142]  ? __pfx_anon_pipe_write+0x10/0x10
[  579.180312][T14142]  ? common_file_perm+0x1b5/0x220
[  579.180335][T14142]  ? bpf_lsm_file_permission+0x9/0x20
[  579.180360][T14142]  ? security_file_permission+0x75/0x290
[  579.180387][T14142]  vfs_write+0x5c9/0xb30
[  579.180404][T14142]  ? __pfx_anon_pipe_write+0x10/0x10
[  579.180416][T14142]  ? __pfx_vfs_write+0x10/0x10
[  579.180443][T14142]  ? __fget_files+0x2a/0x420
[  579.180474][T14142]  ksys_write+0x145/0x250
[  579.180502][T14142]  ? __pfx_ksys_write+0x10/0x10
[  579.180531][T14142]  ? do_syscall_64+0xbe/0xf80
[  579.180549][T14142]  do_syscall_64+0xfa/0xf80
[  579.180565][T14142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.180577][T14142]  ? clear_bhb_loop+0x60/0xb0
[  579.180594][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.180611][T14142] RIP: 0033:0x7fc6c718f749
[  579.180630][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.180645][T14142] RSP: 002b:00007fc6c7f42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  579.180666][T14142] RAX: ffffffffffffffda RBX: 00007fc6c73e5fa0 RCX: 00007fc6c718f749
[  579.180680][T14142] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000
[  579.180691][T14142] RBP: 00007fc6c7f42090 R08: 0000000000000000 R09: 0000000000000000
[  579.180698][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.180705][T14142] R13: 00007fc6c73e6038 R14: 00007fc6c73e5fa0 R15: 00007fff05228da8
[  579.180725][T14142]  </TASK>
[  579.667317][  T891] r8152-cfgselector 5-1: USB disconnect, device number 77
[  579.752527][T14153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2716'.
[  579.867583][ T9308] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  579.959143][T14157] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.2718'.
[  579.969755][T14157] openvswitch: netlink: Message has 6 unknown bytes.
[  580.029393][ T9308] usb 3-1: Using ep0 maxpacket: 16
[  580.042451][ T9308] usb 3-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config
[  580.067495][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  580.081073][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 240, changing to 11
[  580.092669][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 49986, setting to 1024
[  580.105306][ T9308] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.119881][ T9308] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  580.129649][ T9308] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  580.137781][ T9308] usb 3-1: Manufacturer: syz
[  580.155356][ T9308] usb 3-1: config 0 descriptor??
[  580.308183][  T891] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  580.445294][ T9308] rc_core: IR keymap rc-hauppauge not found
[  580.451726][ T9308] Registered IR keymap rc-empty
[  580.461442][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.477196][  T891] usb 2-1: Using ep0 maxpacket: 32
[  580.492303][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.496527][  T891] usb 2-1: config 0 has an invalid interface number: 141 but max is 0
[  580.509808][  T891] usb 2-1: config 0 has no interface number 0
[  580.521961][ T9308] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  580.522920][  T891] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65
[  580.547753][  T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.560666][ T9308] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input117
[  580.563812][  T891] usb 2-1: Product: syz
[  580.577348][   T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  580.585198][  T891] usb 2-1: Manufacturer: syz
[  580.593999][  T891] usb 2-1: SerialNumber: syz
[  580.599614][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.609700][  T891] usb 2-1: config 0 descriptor??
[  580.625520][  T891] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  580.628138][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.670139][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.704553][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.723416][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.737395][T14165] netlink: 372 bytes leftover after parsing attributes in process `syz.3.2721'.
[  580.747425][   T10] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  580.757488][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.764963][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  580.774376][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  580.777243][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.785453][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  580.796147][T14165] trusted_key: encrypted_key: keylen parameter is missing
[  580.807635][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  580.817279][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  580.828348][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  580.835448][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.847366][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  580.856541][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  580.862464][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.867749][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  580.894610][ T9308] mceusb 3-1:0.0: Error: mce write urb status = -71
[  580.902586][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  580.920516][ T9308] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  580.930482][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  580.931367][ T9308] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  580.950723][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  580.960015][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  580.972818][T14167] netlink: 'syz.3.2722': attribute type 4 has an invalid length.
[  580.980837][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  581.012415][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  581.031246][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  581.061951][T14159] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[  581.077405][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  581.098717][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  581.109533][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  581.119795][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  581.132553][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  581.142777][  T891] gspca_vc032x: reg_w err -71
[  581.147552][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.154649][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.161572][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.167065][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.172737][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  581.181931][   T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  581.193405][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.198903][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.204742][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.210070][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.216563][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  581.223741][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.229408][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.236961][   T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  581.246042][   T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  581.254508][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.263157][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.271254][   T10] usb 5-1: Product: syz
[  581.275479][   T10] usb 5-1: Manufacturer: syz
[  581.281017][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.286453][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.291866][   T10] usb 5-1: SerialNumber: syz
[  581.300085][   T10] usb 5-1: config 0 descriptor??
[  581.305464][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.310788][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.316601][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.322315][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.334457][   T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  581.344722][  T891] gspca_vc032x: I2c Bus Busy Wait 00
[  581.350136][  T891] gspca_vc032x: Unknown sensor...
[  581.358452][  T891] vc032x 2-1:0.141: probe with driver vc032x failed with error -22
[  581.372511][  T891] usb 2-1: USB disconnect, device number 55
[  581.504078][ T9308] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  581.664304][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  581.672418][ T9308] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  581.681388][ T5878] usb 5-1: USB disconnect, device number 78
[  581.688925][T14172] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19
[  581.702116][ T5878] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  581.710687][ T9308] usb 4-1: unable to read config index 0 descriptor/start: -61
[  581.720030][ T9308] usb 4-1: can't read configurations, error -61
[  581.778832][T14174] netlink: 'syz.1.2724': attribute type 4 has an invalid length.
[  581.794816][T14174] FAULT_INJECTION: forcing a failure.
[  581.794816][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.808216][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.1.2724 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  581.808241][T14174] Tainted: [L]=SOFTLOCKUP
[  581.808245][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  581.808253][T14174] Call Trace:
[  581.808261][T14174]  <TASK>
[  581.808269][T14174]  dump_stack_lvl+0x189/0x250
[  581.808296][T14174]  ? __pfx____ratelimit+0x10/0x10
[  581.808324][T14174]  ? __pfx_dump_stack_lvl+0x10/0x10
[  581.808341][T14174]  ? __pfx__printk+0x10/0x10
[  581.808369][T14174]  ? __might_fault+0xb0/0x130
[  581.808405][T14174]  should_fail_ex+0x414/0x560
[  581.808438][T14174]  _copy_from_user+0x2d/0xb0
[  581.808461][T14174]  do_sock_getsockopt+0x15c/0x3d0
[  581.808493][T14174]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  581.808519][T14174]  ? do_syscall_64+0x80/0xf80
[  581.808538][T14174]  ? __fget_files+0x2a/0x420
[  581.808550][T14174]  ? __fget_files+0x3a0/0x420
[  581.808560][T14174]  ? __fget_files+0x2a/0x420
[  581.808576][T14174]  __x64_sys_getsockopt+0x1a5/0x250
[  581.808598][T14174]  ? do_syscall_64+0x80/0xf80
[  581.808625][T14174]  ? do_syscall_64+0x80/0xf80
[  581.808654][T14174]  do_syscall_64+0xfa/0xf80
[  581.808681][T14174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.808694][T14174]  ? clear_bhb_loop+0x60/0xb0
[  581.808707][T14174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.808718][T14174] RIP: 0033:0x7f8c6cf8f749
[  581.808730][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.808741][T14174] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  581.808762][T14174] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  581.808776][T14174] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  581.808788][T14174] RBP: 00007f8c6de51090 R08: 0000200000000000 R09: 0000000000000000
[  581.808800][T14174] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  581.808820][T14174] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  581.808849][T14174]  </TASK>
[  581.867567][ T9308] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  582.048777][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'.
[  582.106192][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'.
[  582.188451][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  582.195304][ T9308] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  582.208121][ T9308] usb 4-1: unable to read config index 0 descriptor/start: -61
[  582.216014][ T9308] usb 4-1: can't read configurations, error -61
[  582.223049][ T9308] usb usb4-port1: attempt power cycle
[  582.584289][ T9308] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  582.606997][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  582.612878][ T9308] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  582.623378][ T9308] usb 4-1: unable to read config index 0 descriptor/start: -61
[  582.631343][ T9308] usb 4-1: can't read configurations, error -61
[  582.776698][ T9308] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  582.779259][  T891] usb 3-1: USB disconnect, device number 57
[  582.800097][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  582.821700][ T9308] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  582.845085][ T9308] usb 4-1: unable to read config index 0 descriptor/start: -61
[  582.858789][ T9308] usb 4-1: can't read configurations, error -61
[  582.865838][ T9308] usb usb4-port1: unable to enumerate USB device
[  582.879377][T14183] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2727'.
[  582.888985][T14183] openvswitch: netlink: Message has 6 unknown bytes.
[  582.931824][T14185] FAULT_INJECTION: forcing a failure.
[  582.931824][T14185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.945691][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.2.2728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.945712][T14185] Tainted: [L]=SOFTLOCKUP
[  582.945717][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  582.945724][T14185] Call Trace:
[  582.945729][T14185]  <TASK>
[  582.945734][T14185]  dump_stack_lvl+0x189/0x250
[  582.945750][T14185]  ? __pfx____ratelimit+0x10/0x10
[  582.945766][T14185]  ? __pfx_dump_stack_lvl+0x10/0x10
[  582.945777][T14185]  ? __pfx__printk+0x10/0x10
[  582.945798][T14185]  ? __might_fault+0xb0/0x130
[  582.945834][T14185]  should_fail_ex+0x414/0x560
[  582.945868][T14185]  _copy_from_iter+0x1cd/0x1630
[  582.945884][T14185]  ? __build_skb_around+0x22d/0x3c0
[  582.945905][T14185]  ? __pfx__copy_from_iter+0x10/0x10
[  582.945915][T14185]  ? __alloc_skb+0x2f1/0x430
[  582.945931][T14185]  ? __pfx___alloc_skb+0x10/0x10
[  582.945947][T14185]  ? netlink_sendmsg+0x642/0xb30
[  582.945958][T14185]  ? skb_put+0x11b/0x210
[  582.945975][T14185]  netlink_sendmsg+0x6b2/0xb30
[  582.945986][T14185]  ? aa_sk_perm+0x15f/0x920
[  582.946002][T14185]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.946015][T14185]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  582.946033][T14185]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.946044][T14185]  sock_sendmsg_nosec+0x18f/0x1d0
[  582.946059][T14185]  ____sys_sendmsg+0x577/0x880
[  582.946080][T14185]  ? __pfx_____sys_sendmsg+0x10/0x10
[  582.946102][T14185]  ? import_iovec+0x74/0xa0
[  582.946117][T14185]  ___sys_sendmsg+0x21f/0x2a0
[  582.946129][T14185]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.946152][T14185]  ? rcu_read_lock_any_held+0xb3/0x120
[  582.946180][T14185]  ? __fget_files+0x2a/0x420
[  582.946192][T14185]  ? __fget_files+0x3a0/0x420
[  582.946209][T14185]  __x64_sys_sendmsg+0x19b/0x260
[  582.946222][T14185]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  582.946239][T14185]  ? __pfx_ksys_write+0x10/0x10
[  582.946256][T14185]  ? do_syscall_64+0xbe/0xf80
[  582.946273][T14185]  do_syscall_64+0xfa/0xf80
[  582.946289][T14185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.946300][T14185]  ? clear_bhb_loop+0x60/0xb0
[  582.946313][T14185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.946324][T14185] RIP: 0033:0x7fcee9b8f749
[  582.946336][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  582.946347][T14185] RSP: 002b:00007fceeaac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.946361][T14185] RAX: ffffffffffffffda RBX: 00007fcee9de5fa0 RCX: 00007fcee9b8f749
[  582.946369][T14185] RDX: 0000000000004000 RSI: 00002000000004c0 RDI: 0000000000000003
[  582.946377][T14185] RBP: 00007fceeaac0090 R08: 0000000000000000 R09: 0000000000000000
[  582.946384][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.946391][T14185] R13: 00007fcee9de6038 R14: 00007fcee9de5fa0 R15: 00007ffe68858378
[  582.946410][T14185]  </TASK>
[  583.350783][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'.
[  583.413006][T14193] netlink: 'syz.1.2732': attribute type 11 has an invalid length.
[  583.433846][T14196] vivid-000: =================  START STATUS  =================
[  583.442353][T14196] vivid-000: Generate PTS: true
[  583.447355][T14196] vivid-000: Generate SCR: true
[  583.457838][T14196] tpg source WxH: 1280x720 (Y'CbCr)
[  583.477290][T14196] tpg field: 1
[  583.484612][T14196] tpg crop: (0,0)/64x64
[  583.495754][T14196] tpg compose: (0,0)/16x16
[  583.500295][T14196] tpg colorspace: 3
[  583.508591][T14196] tpg transfer function: 0/1
[  583.508620][T14193] veth1_to_bond: entered allmulticast mode
[  583.513214][T14196] tpg Y'CbCr encoding: 0/2
[  583.513231][T14196] tpg quantization: 0/2
[  583.513242][T14196] tpg RGB range: 0/1
[  583.513254][T14196] vivid-000: ==================  END STATUS  ==================
[  583.570661][T14193] veth1_to_bond: left allmulticast mode
[  583.628015][T14198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2734'.
[  583.723550][T14204] tmpfs: User quota inode hardlimit too large.
[  583.775577][T14206] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.2737'.
[  583.785180][T14206] openvswitch: netlink: Message has 6 unknown bytes.
[  583.889394][ T9308] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  584.017290][ T5878] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  584.060141][ T9308] usb 5-1: Using ep0 maxpacket: 32
[  584.072391][ T9308] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  584.083158][ T9308] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  584.095720][ T9308] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  584.107240][ T9308] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  584.125325][ T9308] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  584.135352][ T9308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.143526][ T9308] usb 5-1: Product: syz
[  584.148226][ T9308] usb 5-1: Manufacturer: syz
[  584.153006][ T9308] usb 5-1: SerialNumber: syz
[  584.177761][ T5878] usb 3-1: Using ep0 maxpacket: 16
[  584.185597][    C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  584.199700][ T5878] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  584.224820][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.235863][ T9308] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input118
[  584.249070][ T5878] usb 3-1: Product: syz
[  584.255668][ T5878] usb 3-1: Manufacturer: syz
[  584.261720][ T5878] usb 3-1: SerialNumber: syz
[  584.274738][ T5878] usb 3-1: config 0 descriptor??
[  584.423838][ T9308] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  584.445824][ T9308]  (id 0x00)
[  584.466673][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2742'.
[  584.515338][ T5878] speedtch 3-1:0.0: speedtch_bind: wrong device class 68
[  584.533531][ T5878] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  584.564183][ T9308] rc_core: IR keymap rc-imon-pad not found
[  584.573090][ T9308] Registered IR keymap rc-empty
[  584.580392][ T9308] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  584.584386][ T5197] Dev loop6: unable to read RDB block 1
[  584.593734][ T9308] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  584.606355][T14220] sctp: [Deprecated]: syz.3.2742 (pid 14220) Use of int in max_burst socket option deprecated.
[  584.606355][T14220] Use struct sctp_assoc_value instead
[  584.617243][ T5197]  loop6: unable to read partition table
[  584.629050][ T5197] loop6: partition table beyond EOD, truncated
[  584.650292][ T9308] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  584.679828][ T9308] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input119
[  584.714729][ T9308] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:79> initialized
[  584.754831][  T891] usb 3-1: USB disconnect, device number 58
[  584.979833][   T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  585.118908][ T9308] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  585.142841][   T10] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  585.151962][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.160879][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.172395][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.179978][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.188984][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.200083][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.208325][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.218039][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.229052][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.236936][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.246234][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.257237][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.265573][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.274601][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.279314][ T9308] usb 4-1: Using ep0 maxpacket: 32
[  585.285573][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.293290][ T9308] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  585.298654][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.308188][ T9308] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  585.316586][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.330374][ T9308] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  585.352724][ T9308] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  585.363496][ T9308] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  585.364808][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.386087][ T9308] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  585.389028][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.396941][ T9308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.405178][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.415348][ T9308] usb 4-1: Product: syz
[  585.434877][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.445709][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  585.454219][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  585.461716][ T9308] usb 4-1: Manufacturer: syz
[  585.466552][ T9308] usb 4-1: SerialNumber: syz
[  585.481414][ T9308] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  585.489629][ T9308] imon 4-1:155.0: unable to initialize intf0, err -90
[  585.494253][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  585.496726][ T9308] imon:imon_probe: failed to initialize context!
[  585.515036][ T9308] imon 4-1:155.0: unable to register, err -19
[  585.520574][T14234] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2747'.
[  585.534021][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  585.546773][T14234] openvswitch: netlink: Message has 6 unknown bytes.
[  585.546878][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  585.563689][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  585.573091][   T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  585.581914][   T10] usb 2-1: Product: syz
[  585.600770][   T10] usb 2-1: Manufacturer: syz
[  585.606060][   T10] usb 2-1: SerialNumber: syz
[  585.623307][   T10] usb 2-1: config 0 descriptor??
[  585.631594][T14237] FAULT_INJECTION: forcing a failure.
[  585.631594][T14237] name failslab, interval 1, probability 0, space 0, times 0
[  585.644868][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.2.2748 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  585.644906][T14237] Tainted: [L]=SOFTLOCKUP
[  585.644914][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  585.644925][T14237] Call Trace:
[  585.644933][T14237]  <TASK>
[  585.644941][T14237]  dump_stack_lvl+0x189/0x250
[  585.644967][T14237]  ? __pfx____ratelimit+0x10/0x10
[  585.644995][T14237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  585.645015][T14237]  ? __pfx__printk+0x10/0x10
[  585.645049][T14237]  ? __pfx___might_resched+0x10/0x10
[  585.645093][T14237]  should_fail_ex+0x414/0x560
[  585.645129][T14237]  should_failslab+0xa8/0x100
[  585.645152][T14237]  __kmalloc_noprof+0xdf/0x800
[  585.645179][T14237]  ? kfree+0x4d/0x660
[  585.645199][T14237]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  585.645220][T14237]  ? rcu_is_watching+0x15/0xb0
[  585.645246][T14237]  tomoyo_realpath_from_path+0xe3/0x5d0
[  585.645279][T14237]  ? tomoyo_mount_permission+0x27a/0x970
[  585.645300][T14237]  tomoyo_mount_permission+0x377/0x970
[  585.645324][T14237]  ? tomoyo_mount_permission+0x27a/0x970
[  585.645346][T14237]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  585.645430][T14237]  security_sb_mount+0xec/0x350
[  585.645456][T14237]  path_mount+0xbc/0xff0
[  585.645475][T14237]  ? kmem_cache_free+0x197/0x620
[  585.645501][T14237]  ? user_path_at+0x44/0x60
[  585.645536][T14237]  __se_sys_mount+0x313/0x410
[  585.645564][T14237]  ? __pfx___se_sys_mount+0x10/0x10
[  585.645590][T14237]  ? do_syscall_64+0xbe/0xf80
[  585.645617][T14237]  ? __x64_sys_mount+0x20/0xc0
[  585.645640][T14237]  do_syscall_64+0xfa/0xf80
[  585.645669][T14237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.645688][T14237]  ? clear_bhb_loop+0x60/0xb0
[  585.645711][T14237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.645727][T14237] RIP: 0033:0x7fcee9b8f749
[  585.645746][T14237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  585.645762][T14237] RSP: 002b:00007fceeaac0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  585.645784][T14237] RAX: ffffffffffffffda RBX: 00007fcee9de5fa0 RCX: 00007fcee9b8f749
[  585.645797][T14237] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 00002000000000c0
[  585.645809][T14237] RBP: 00007fceeaac0090 R08: 0000000000000000 R09: 0000000000000000
[  585.645820][T14237] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000001
[  585.645832][T14237] R13: 00007fcee9de6038 R14: 00007fcee9de5fa0 R15: 00007ffe68858378
[  585.645865][T14237]  </TASK>
[  585.646125][T14237] ERROR: Out of memory at tomoyo_realpath_from_path.
[  585.659825][   T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1
[  585.789063][T14240] fuse: Unknown parameter 'fY�������̟'
[  585.811005][  T891] usb 4-1: USB disconnect, device number 75
[  585.824888][T14240] afs: Unknown parameter 'euid<00000000000000000000'
[  586.026143][  T891] usb 2-1: USB disconnect, device number 56
[  586.199282][   T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  586.361457][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  586.372754][   T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  586.383311][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.399062][   T10] usb 3-1: config 0 descriptor??
[  586.404192][T14242] imon:display_open: display port is already open
[  586.405061][T14241] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  586.418589][  T891] yurex 2-1:0.0: USB YUREX #1 now disconnected
[  586.592680][ T9308] usb 5-1: USB disconnect, device number 79
[  586.840954][  T891] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  586.868650][   T10] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  587.001257][  T891] usb 4-1: Using ep0 maxpacket: 32
[  587.007317][  T891] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  587.017605][  T891] usb 4-1: unable to read config index 0 descriptor/start: -61
[  587.025400][  T891] usb 4-1: can't read configurations, error -61
[  587.077109][T14240] elan 0003:04F3:0755.0039: pid 14240 passed too short report
[  587.085972][ T9308] usb 3-1: USB disconnect, device number 59
[  587.161760][  T891] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  587.343421][  T891] usb 4-1: Using ep0 maxpacket: 32
[  587.355135][  T891] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  587.367451][  T891] usb 4-1: unable to read config index 0 descriptor/start: -61
[  587.377374][  T891] usb 4-1: can't read configurations, error -61
[  587.384111][  T891] usb usb4-port1: attempt power cycle
[  587.643188][ T9308] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  587.712992][T14260] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2756'.
[  587.722839][T14260] openvswitch: netlink: Message has 6 unknown bytes.
[  587.760618][  T891] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  587.794626][  T891] usb 4-1: Using ep0 maxpacket: 32
[  587.801038][  T891] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  587.812261][  T891] usb 4-1: unable to read config index 0 descriptor/start: -61
[  587.823288][  T891] usb 4-1: can't read configurations, error -61
[  587.830949][ T9308] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  587.845904][ T9308] usb 5-1: can't read configurations, error -22
[  587.963919][  T891] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  587.985263][ T9308] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  588.010009][  T891] usb 4-1: Using ep0 maxpacket: 32
[  588.017706][  T891] usb 4-1: too many configurations: 197, using maximum allowed: 8
[  588.028209][  T891] usb 4-1: unable to read config index 0 descriptor/start: -61
[  588.038112][  T891] usb 4-1: can't read configurations, error -61
[  588.045072][  T891] usb usb4-port1: unable to enumerate USB device
[  588.081464][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  588.148360][ T9308] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  588.156590][ T9308] usb 5-1: can't read configurations, error -22
[  588.167459][ T9308] usb usb5-port1: attempt power cycle
[  588.248089][T14271] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2761'.
[  588.268605][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.280666][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.292095][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  588.302031][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.305802][    T9] usb 3-1: config 0 descriptor??
[  588.360413][T14273] FAULT_INJECTION: forcing a failure.
[  588.360413][T14273] name failslab, interval 1, probability 0, space 0, times 0
[  588.373536][T14273] CPU: 1 UID: 0 PID: 14273 Comm: syz.1.2762 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  588.373569][T14273] Tainted: [L]=SOFTLOCKUP
[  588.373577][T14273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  588.373588][T14273] Call Trace:
[  588.373596][T14273]  <TASK>
[  588.373605][T14273]  dump_stack_lvl+0x189/0x250
[  588.373630][T14273]  ? __pfx____ratelimit+0x10/0x10
[  588.373652][T14273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  588.373663][T14273]  ? __pfx__printk+0x10/0x10
[  588.373683][T14273]  ? __pfx___might_resched+0x10/0x10
[  588.373699][T14273]  ? fs_reclaim_acquire+0x7d/0x100
[  588.373732][T14273]  should_fail_ex+0x414/0x560
[  588.373765][T14273]  should_failslab+0xa8/0x100
[  588.373796][T14273]  __kmalloc_noprof+0xdf/0x800
[  588.373815][T14273]  ? tomoyo_encode+0x28b/0x550
[  588.373830][T14273]  tomoyo_encode+0x28b/0x550
[  588.373846][T14273]  tomoyo_realpath_from_path+0x58d/0x5d0
[  588.373860][T14273]  ? tomoyo_domain+0xd8/0x130
[  588.373887][T14273]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  588.373914][T14273]  tomoyo_path_number_perm+0x1e8/0x5a0
[  588.373944][T14273]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  588.373975][T14273]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  588.374003][T14273]  ? __fget_files+0x2a/0x420
[  588.374021][T14273]  ? __fget_files+0x3a0/0x420
[  588.374039][T14273]  ? __fget_files+0x2a/0x420
[  588.374063][T14273]  security_file_ioctl+0xcb/0x2d0
[  588.374090][T14273]  __se_sys_ioctl+0x47/0x170
[  588.374117][T14273]  do_syscall_64+0xfa/0xf80
[  588.374134][T14273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.374145][T14273]  ? clear_bhb_loop+0x60/0xb0
[  588.374159][T14273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.374169][T14273] RIP: 0033:0x7f8c6cf8f749
[  588.374187][T14273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.374203][T14273] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  588.374224][T14273] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  588.374238][T14273] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000005
[  588.374249][T14273] RBP: 00007f8c6de51090 R08: 0000000000000000 R09: 0000000000000000
[  588.374261][T14273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.374271][T14273] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  588.374291][T14273]  </TASK>
[  588.374306][T14273] ERROR: Out of memory at tomoyo_realpath_from_path.
[  588.668077][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'.
[  588.680417][ T9308] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  588.704347][ T9308] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  588.712763][ T9308] usb 5-1: can't read configurations, error -22
[  588.770502][    T9] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0
[  588.787480][    T9] cp2112 0003:10C4:EA90.003A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  588.857279][ T9308] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  588.887677][ T9308] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  588.901592][ T9308] usb 5-1: can't read configurations, error -22
[  588.909262][ T9308] usb usb5-port1: unable to enumerate USB device
[  588.950912][T14280] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.2765'.
[  588.960922][T14280] openvswitch: netlink: Message has 6 unknown bytes.
[  588.983080][    T9] cp2112 0003:10C4:EA90.003A: Part Number: 0x82 Device Version: 0xFE
[  589.030685][T14282] add_ndev_hash(syzkaller0) on ffff888044108000 done
[  589.037588][T14282] siw: device registration error -23
[  589.198270][    T9] cp2112 0003:10C4:EA90.003A: error requesting SMBus config
[  589.208378][    T9] cp2112 0003:10C4:EA90.003A: probe with driver cp2112 failed with error -32
[  589.221580][    T9] usb 3-1: USB disconnect, device number 60
[  590.188453][    T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  590.363334][    T9] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  590.381984][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.390923][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.403478][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.411698][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.422150][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.433950][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.442373][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.462839][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.475456][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.487472][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.499839][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.515375][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.515482][T14299] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2771'.
[  590.534952][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.545985][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.557040][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.565399][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.574852][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.587223][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.595616][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.604633][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.617369][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.625840][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  590.635073][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  590.647035][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  590.663439][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  590.672752][    T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  590.682476][    T9] usb 4-1: Product: syz
[  590.686842][    T9] usb 4-1: Manufacturer: syz
[  590.694991][    T9] usb 4-1: SerialNumber: syz
[  590.707289][    T9] usb 4-1: config 0 descriptor??
[  590.727337][    T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  591.080398][T14310] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2774'.
[  591.097690][T14310] openvswitch: netlink: Message has 6 unknown bytes.
[  591.121597][    T9] usb 4-1: USB disconnect, device number 80
[  591.133268][T14311] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19
[  591.151551][    T9] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  591.264509][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'.
[  591.450439][ T9308] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  591.557861][   T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  591.613255][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.624437][ T5832] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  591.634532][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.644527][ T9308] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  591.653682][ T9308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.664955][ T9308] usb 5-1: config 0 descriptor??
[  591.717855][   T24] usb 2-1: Using ep0 maxpacket: 32
[  591.723840][   T24] usb 2-1: too many configurations: 197, using maximum allowed: 8
[  591.734167][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  591.741996][   T24] usb 2-1: can't read configurations, error -61
[  591.792654][ T5832] usb 3-1: Using ep0 maxpacket: 16
[  591.825734][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short
[  591.834884][ T5832] usb 3-1: no configurations
[  591.839774][ T5832] usb 3-1: can't read configurations, error -22
[  591.879333][   T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  592.049353][   T24] usb 2-1: Using ep0 maxpacket: 32
[  592.055432][   T24] usb 2-1: too many configurations: 197, using maximum allowed: 8
[  592.065086][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  592.072911][   T24] usb 2-1: can't read configurations, error -61
[  592.079450][   T24] usb usb2-port1: attempt power cycle
[  592.112843][ T9308] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0
[  592.122027][ T9308] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  592.323854][ T9308] cp2112 0003:10C4:EA90.003B: Part Number: 0x00 Device Version: 0x00
[  592.456809][   T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  592.478108][   T24] usb 2-1: Using ep0 maxpacket: 32
[  592.483949][   T24] usb 2-1: too many configurations: 197, using maximum allowed: 8
[  592.493745][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  592.501456][   T24] usb 2-1: can't read configurations, error -61
[  592.538400][ T9308] cp2112 0003:10C4:EA90.003B: error requesting SMBus config
[  592.553218][ T9308] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -32
[  592.570386][ T9308] usb 5-1: USB disconnect, device number 84
[  592.648407][   T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  592.670470][   T24] usb 2-1: Using ep0 maxpacket: 32
[  592.676367][   T24] usb 2-1: too many configurations: 197, using maximum allowed: 8
[  592.687595][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  592.695432][   T24] usb 2-1: can't read configurations, error -61
[  592.702258][   T24] usb usb2-port1: unable to enumerate USB device
[  593.109883][   T60] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  593.196924][T14338] FAULT_INJECTION: forcing a failure.
[  593.196924][T14338] name failslab, interval 1, probability 0, space 0, times 0
[  593.211361][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.4.2783 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.211393][T14338] Tainted: [L]=SOFTLOCKUP
[  593.211401][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  593.211412][T14338] Call Trace:
[  593.211421][T14338]  <TASK>
[  593.211431][T14338]  dump_stack_lvl+0x189/0x250
[  593.211455][T14338]  ? __pfx____ratelimit+0x10/0x10
[  593.211483][T14338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.211502][T14338]  ? __pfx__printk+0x10/0x10
[  593.211533][T14338]  ? __pfx___might_resched+0x10/0x10
[  593.211562][T14338]  ? fs_reclaim_acquire+0x7d/0x100
[  593.211597][T14338]  should_fail_ex+0x414/0x560
[  593.211631][T14338]  should_failslab+0xa8/0x100
[  593.211654][T14338]  __kmalloc_node_track_caller_noprof+0xe2/0x820
[  593.211683][T14338]  ? kasprintf+0xd4/0x120
[  593.211713][T14338]  kvasprintf+0xdc/0x190
[  593.211740][T14338]  ? __pfx_kvasprintf+0x10/0x10
[  593.211788][T14338]  kasprintf+0xd4/0x120
[  593.211812][T14338]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  593.211841][T14338]  ? __pfx_kasprintf+0x10/0x10
[  593.211861][T14338]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  593.211903][T14338]  ieee80211_alloc_led_names+0xa4/0x2b0
[  593.211935][T14338]  ieee80211_alloc_hw_nm+0x18f2/0x1f60
[  593.211976][T14338]  mac80211_hwsim_new_radio+0x1ea/0x5320
[  593.212009][T14338]  ? stack_trace_save+0x9c/0xe0
[  593.212037][T14338]  ? stack_depot_save_flags+0x40/0x850
[  593.212056][T14338]  ? __kasan_slab_free+0x5c/0x80
[  593.212082][T14338]  ? kmem_cache_free+0x197/0x620
[  593.212114][T14338]  ? kasan_save_track+0x4f/0x80
[  593.212139][T14338]  ? kasan_save_track+0x3e/0x80
[  593.212168][T14338]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  593.212195][T14338]  ? __nla_validate_parse+0x2400/0x2d40
[  593.212216][T14338]  ? __x64_sys_sendmsg+0x19b/0x260
[  593.212245][T14338]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  593.212278][T14338]  ? __pfx___nla_validate_parse+0x10/0x10
[  593.212316][T14338]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  593.212347][T14338]  ? rcu_is_watching+0x15/0xb0
[  593.212371][T14338]  ? __nla_parse+0x40/0x60
[  593.212398][T14338]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  593.212433][T14338]  genl_family_rcv_msg_doit+0x215/0x300
[  593.212467][T14338]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  593.212506][T14338]  ? bpf_lsm_capable+0x9/0x20
[  593.212523][T14338]  ? security_capable+0x7e/0x2e0
[  593.212547][T14338]  genl_rcv_msg+0x60e/0x790
[  593.212577][T14338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  593.212598][T14338]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  593.212636][T14338]  netlink_rcv_skb+0x208/0x470
[  593.212658][T14338]  ? __pfx_genl_rcv_msg+0x10/0x10
[  593.212686][T14338]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  593.212725][T14338]  ? down_read+0x274/0x2e0
[  593.212750][T14338]  ? genl_rcv+0xd/0x40
[  593.212773][T14338]  genl_rcv+0x28/0x40
[  593.212795][T14338]  netlink_unicast+0x82f/0x9e0
[  593.212831][T14338]  ? __pfx_netlink_unicast+0x10/0x10
[  593.212859][T14338]  ? netlink_sendmsg+0x642/0xb30
[  593.212877][T14338]  ? skb_put+0x11b/0x210
[  593.212909][T14338]  netlink_sendmsg+0x805/0xb30
[  593.212925][T14338]  ? aa_sk_perm+0x15f/0x920
[  593.212953][T14338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.212976][T14338]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  593.213008][T14338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.213025][T14338]  sock_sendmsg_nosec+0x18f/0x1d0
[  593.213048][T14338]  ____sys_sendmsg+0x577/0x880
[  593.213087][T14338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  593.213125][T14338]  ? import_iovec+0x74/0xa0
[  593.213154][T14338]  ___sys_sendmsg+0x21f/0x2a0
[  593.213176][T14338]  ? __pfx____sys_sendmsg+0x10/0x10
[  593.213201][T14338]  ? rcu_read_lock_any_held+0xb3/0x120
[  593.213254][T14338]  ? __fget_files+0x2a/0x420
[  593.213273][T14338]  ? __fget_files+0x3a0/0x420
[  593.213316][T14338]  __x64_sys_sendmsg+0x19b/0x260
[  593.213340][T14338]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  593.213371][T14338]  ? __pfx_ksys_write+0x10/0x10
[  593.213400][T14338]  ? do_syscall_64+0xbe/0xf80
[  593.213439][T14338]  do_syscall_64+0xfa/0xf80
[  593.213468][T14338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.213487][T14338]  ? clear_bhb_loop+0x60/0xb0
[  593.213511][T14338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.213530][T14338] RIP: 0033:0x7ff9f978f749
[  593.213549][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.213564][T14338] RSP: 002b:00007ff9fa691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.213587][T14338] RAX: ffffffffffffffda RBX: 00007ff9f99e5fa0 RCX: 00007ff9f978f749
[  593.213602][T14338] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[  593.213615][T14338] RBP: 00007ff9fa691090 R08: 0000000000000000 R09: 0000000000000000
[  593.213629][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  593.213642][T14338] R13: 00007ff9f99e6038 R14: 00007ff9f99e5fa0 R15: 00007ffde50e8a68
[  593.213678][T14338]  </TASK>
[  593.963125][T14349] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2786'.
[  593.982469][T14349] openvswitch: netlink: Message has 6 unknown bytes.
[  594.277578][T14353] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2788'.
[  594.284682][   T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  594.444323][T14357] kAFS: unable to lookup cell '/yz1'
[  594.455738][   T24] usb 4-1: Using ep0 maxpacket: 16
[  594.473366][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.484515][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.496121][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  594.507515][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  594.517331][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  594.533018][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  594.542266][   T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  594.550418][   T24] usb 4-1: Manufacturer: syz
[  594.568321][   T24] usb 4-1: config 0 descriptor??
[  594.851581][ T9308] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  594.872896][   T24] rc_core: IR keymap rc-hauppauge not found
[  594.878944][   T24] Registered IR keymap rc-empty
[  594.884367][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  594.904989][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  594.927444][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  594.941187][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input120
[  594.956577][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  594.980110][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  594.998953][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.004636][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.012457][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.025670][ T9308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.038627][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.046151][ T9308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.056511][ T9308] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  595.065932][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.074371][ T9308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.097662][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.106129][ T9308] usb 2-1: config 0 descriptor??
[  595.119197][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.140494][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.161792][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.183456][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.204557][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  595.229457][   T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  595.264180][   T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  595.371756][ T5917] usb 4-1: USB disconnect, device number 81
[  595.404313][T14367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  595.416753][T14367] block device autoloading is deprecated and will be removed.
[  595.567596][ T9308] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0
[  595.598673][ T9308] cp2112 0003:10C4:EA90.003C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  595.619289][T14373] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2795'.
[  595.643198][T14373] openvswitch: netlink: Message has 6 unknown bytes.
[  595.775937][ T9308] cp2112 0003:10C4:EA90.003C: Part Number: 0x00 Device Version: 0x00
[  595.811175][T14381] fuse: Unknown parameter 'X�o5_:F2����nd'
[  595.902052][T14386] netlink: 'syz.4.2799': attribute type 1 has an invalid length.
[  595.914245][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2799'.
[  595.924563][T14386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.996856][ T9308] cp2112 0003:10C4:EA90.003C: error requesting SMBus config
[  596.032952][ T9308] cp2112 0003:10C4:EA90.003C: probe with driver cp2112 failed with error -32
[  596.059260][ T9308] usb 2-1: USB disconnect, device number 61
[  596.143093][T14395] FAULT_INJECTION: forcing a failure.
[  596.143093][T14395] name failslab, interval 1, probability 0, space 0, times 0
[  596.156470][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.3.2802 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.156503][T14395] Tainted: [L]=SOFTLOCKUP
[  596.156511][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.156522][T14395] Call Trace:
[  596.156531][T14395]  <TASK>
[  596.156540][T14395]  dump_stack_lvl+0x189/0x250
[  596.156565][T14395]  ? __pfx____ratelimit+0x10/0x10
[  596.156593][T14395]  ? __pfx_dump_stack_lvl+0x10/0x10
[  596.156613][T14395]  ? __pfx__printk+0x10/0x10
[  596.156648][T14395]  ? __pfx___might_resched+0x10/0x10
[  596.156676][T14395]  ? fs_reclaim_acquire+0x7d/0x100
[  596.156711][T14395]  should_fail_ex+0x414/0x560
[  596.156746][T14395]  should_failslab+0xa8/0x100
[  596.156765][T14395]  __kmalloc_noprof+0xdf/0x800
[  596.156791][T14395]  ? ethnl_default_start+0x148/0x3f0
[  596.156812][T14395]  ? __kasan_kmalloc+0x93/0xb0
[  596.156835][T14395]  ethnl_default_start+0x148/0x3f0
[  596.156864][T14395]  genl_start+0x4c3/0x6c0
[  596.156899][T14395]  __netlink_dump_start+0x469/0x7e0
[  596.156930][T14395]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  596.156961][T14395]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  596.156985][T14395]  ? genl_get_cmd+0x67f/0x910
[  596.157024][T14395]  ? __pfx_genl_start+0x10/0x10
[  596.157046][T14395]  ? __pfx_genl_dumpit+0x10/0x10
[  596.157068][T14395]  ? __pfx_genl_done+0x10/0x10
[  596.157097][T14395]  ? trim_netdev_trace+0x2a3/0x3d0
[  596.157129][T14395]  genl_rcv_msg+0x5da/0x790
[  596.157161][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  596.157184][T14395]  ? __pfx_ethnl_default_start+0x10/0x10
[  596.157204][T14395]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  596.157224][T14395]  ? __pfx_ethnl_default_done+0x10/0x10
[  596.157262][T14395]  netlink_rcv_skb+0x208/0x470
[  596.157283][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  596.157310][T14395]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  596.157351][T14395]  ? down_read+0x274/0x2e0
[  596.157368][T14395]  ? genl_rcv+0xd/0x40
[  596.157395][T14395]  genl_rcv+0x28/0x40
[  596.157417][T14395]  netlink_unicast+0x82f/0x9e0
[  596.157457][T14395]  ? __pfx_netlink_unicast+0x10/0x10
[  596.157488][T14395]  ? netlink_sendmsg+0x642/0xb30
[  596.157506][T14395]  ? skb_put+0x11b/0x210
[  596.157540][T14395]  netlink_sendmsg+0x805/0xb30
[  596.157559][T14395]  ? aa_sk_perm+0x15f/0x920
[  596.157588][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.157612][T14395]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  596.157645][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.157664][T14395]  sock_sendmsg_nosec+0x18f/0x1d0
[  596.157691][T14395]  ____sys_sendmsg+0x577/0x880
[  596.157729][T14395]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.157769][T14395]  ? import_iovec+0x74/0xa0
[  596.157797][T14395]  ___sys_sendmsg+0x21f/0x2a0
[  596.157820][T14395]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.157848][T14395]  ? rcu_read_lock_any_held+0xb3/0x120
[  596.157900][T14395]  ? __fget_files+0x2a/0x420
[  596.157921][T14395]  ? __fget_files+0x3a0/0x420
[  596.157955][T14395]  __x64_sys_sendmsg+0x19b/0x260
[  596.157977][T14395]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.158016][T14395]  ? __pfx_ksys_write+0x10/0x10
[  596.158049][T14395]  ? do_syscall_64+0xbe/0xf80
[  596.158082][T14395]  do_syscall_64+0xfa/0xf80
[  596.158111][T14395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.158130][T14395]  ? clear_bhb_loop+0x60/0xb0
[  596.158155][T14395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.158174][T14395] RIP: 0033:0x7fc6c718f749
[  596.158193][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.158210][T14395] RSP: 002b:00007fc6c7f42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.158231][T14395] RAX: ffffffffffffffda RBX: 00007fc6c73e5fa0 RCX: 00007fc6c718f749
[  596.158243][T14395] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  596.158254][T14395] RBP: 00007fc6c7f42090 R08: 0000000000000000 R09: 0000000000000000
[  596.158261][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.158268][T14395] R13: 00007fc6c73e6038 R14: 00007fc6c73e5fa0 R15: 00007fff05228da8
[  596.158288][T14395]  </TASK>
[  596.166956][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  596.400760][T14402] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2805'.
[  596.565618][   T24] usb 3-1: Using ep0 maxpacket: 32
[  596.575714][T14402] openvswitch: netlink: Message has 6 unknown bytes.
[  596.577690][   T24] usb 3-1: too many configurations: 197, using maximum allowed: 8
[  596.618901][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  596.626676][   T24] usb 3-1: can't read configurations, error -61
[  596.766020][   T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  596.866593][T14417] FAULT_INJECTION: forcing a failure.
[  596.866593][T14417] name failslab, interval 1, probability 0, space 0, times 0
[  596.879461][T14417] CPU: 1 UID: 0 PID: 14417 Comm: syz.3.2811 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.879493][T14417] Tainted: [L]=SOFTLOCKUP
[  596.879500][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.879512][T14417] Call Trace:
[  596.879520][T14417]  <TASK>
[  596.879529][T14417]  dump_stack_lvl+0x189/0x250
[  596.879554][T14417]  ? __pfx____ratelimit+0x10/0x10
[  596.879581][T14417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  596.879601][T14417]  ? __pfx__printk+0x10/0x10
[  596.879624][T14417]  ? save_netdev_trace_buffer+0x4b5/0x5a0
[  596.879667][T14417]  should_fail_ex+0x414/0x560
[  596.879701][T14417]  should_failslab+0xa8/0x100
[  596.879724][T14417]  kmem_cache_alloc_noprof+0x88/0x710
[  596.879748][T14417]  ? __netlink_lookup+0xbd/0x8a0
[  596.879767][T14417]  ? skb_clone+0x212/0x3a0
[  596.879791][T14417]  skb_clone+0x212/0x3a0
[  596.879815][T14417]  __netlink_deliver_tap+0x424/0x8b0
[  596.879850][T14417]  ? netlink_deliver_tap+0x2e/0x1b0
[  596.879871][T14417]  netlink_deliver_tap+0x19c/0x1b0
[  596.879892][T14417]  netlink_unicast+0x7fa/0x9e0
[  596.879927][T14417]  ? __pfx_netlink_unicast+0x10/0x10
[  596.879957][T14417]  ? netlink_sendmsg+0x642/0xb30
[  596.879984][T14417]  ? skb_put+0x11b/0x210
[  596.880015][T14417]  netlink_sendmsg+0x805/0xb30
[  596.880034][T14417]  ? aa_sk_perm+0x15f/0x920
[  596.880064][T14417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.880086][T14417]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  596.880119][T14417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.880155][T14417]  sock_sendmsg_nosec+0x18f/0x1d0
[  596.880183][T14417]  ____sys_sendmsg+0x577/0x880
[  596.880222][T14417]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.880263][T14417]  ? import_iovec+0x74/0xa0
[  596.880292][T14417]  ___sys_sendmsg+0x21f/0x2a0
[  596.880313][T14417]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.880339][T14417]  ? rcu_read_lock_any_held+0xb3/0x120
[  596.880393][T14417]  ? __fget_files+0x2a/0x420
[  596.880413][T14417]  ? __fget_files+0x3a0/0x420
[  596.880445][T14417]  __x64_sys_sendmsg+0x19b/0x260
[  596.880468][T14417]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.880499][T14417]  ? __pfx_ksys_write+0x10/0x10
[  596.880530][T14417]  ? do_syscall_64+0xbe/0xf80
[  596.880562][T14417]  do_syscall_64+0xfa/0xf80
[  596.880590][T14417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.880610][T14417]  ? clear_bhb_loop+0x60/0xb0
[  596.880634][T14417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.880653][T14417] RIP: 0033:0x7fc6c718f749
[  596.880671][T14417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.880687][T14417] RSP: 002b:00007fc6c7f42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.880707][T14417] RAX: ffffffffffffffda RBX: 00007fc6c73e5fa0 RCX: 00007fc6c718f749
[  596.880721][T14417] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000003
[  596.880733][T14417] RBP: 00007fc6c7f42090 R08: 0000000000000000 R09: 0000000000000000
[  596.880746][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.880757][T14417] R13: 00007fc6c73e6038 R14: 00007fc6c73e5fa0 R15: 00007fff05228da8
[  596.880790][T14417]  </TASK>
[  597.226314][   T24] usb 3-1: Using ep0 maxpacket: 32
[  597.232305][   T24] usb 3-1: too many configurations: 197, using maximum allowed: 8
[  597.242404][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  597.250498][   T24] usb 3-1: can't read configurations, error -61
[  597.257396][   T24] usb usb3-port1: attempt power cycle
[  597.332827][ T9308] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  597.461154][ T5832] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  597.496929][ T9308] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  597.506184][ T9308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.514299][ T9308] usb 5-1: Product: syz
[  597.518627][ T9308] usb 5-1: Manufacturer: syz
[  597.523244][ T9308] usb 5-1: SerialNumber: syz
[  597.531154][ T9308] usb 5-1: config 0 descriptor??
[  597.539765][ T9308] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  597.600149][ T5832] usb 2-1: device descriptor read/64, error -71
[  597.621603][   T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  597.643601][   T24] usb 3-1: Using ep0 maxpacket: 32
[  597.649394][   T24] usb 3-1: too many configurations: 197, using maximum allowed: 8
[  597.659140][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  597.668454][   T24] usb 3-1: can't read configurations, error -61
[  597.814141][   T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  597.836273][   T24] usb 3-1: Using ep0 maxpacket: 32
[  597.842418][   T24] usb 3-1: too many configurations: 197, using maximum allowed: 8
[  597.852425][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  597.860182][ T5832] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  597.867895][   T24] usb 3-1: can't read configurations, error -61
[  597.874438][   T24] usb usb3-port1: unable to enumerate USB device
[  597.969330][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.978442][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.988016][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.997086][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.007545][T14407] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2807'.
[  598.016946][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2807'.
[  598.028108][ T5832] usb 2-1: device descriptor read/64, error -71
[  598.041000][ T9308] gspca_sunplus: reg_w_riv err -71
[  598.051448][ T9308] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  598.062540][ T9308] usb 5-1: USB disconnect, device number 85
[  598.146014][ T5832] usb usb2-port1: attempt power cycle
[  598.509325][ T5832] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  598.531787][ T5832] usb 2-1: device descriptor read/8, error -71
[  598.636418][T14425] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2814'.
[  598.647998][T14425] openvswitch: netlink: Message has 6 unknown bytes.
[  598.787498][ T5832] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  598.809401][ T5832] usb 2-1: device descriptor read/8, error -71
[  598.926677][ T5832] usb usb2-port1: unable to enumerate USB device
[  599.011908][   T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  599.148818][T14433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2818'.
[  599.177040][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.188995][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.199335][   T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  599.209171][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.223503][   T24] usb 5-1: config 0 descriptor??
[  599.683307][   T24] cp2112 0003:10C4:EA90.003D: unknown main item tag 0x0
[  599.692543][   T24] cp2112 0003:10C4:EA90.003D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  599.897070][   T24] cp2112 0003:10C4:EA90.003D: Part Number: 0x00 Device Version: 0x00
[  599.951575][T14446] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2823'.
[  599.962327][T14446] openvswitch: netlink: Message has 6 unknown bytes.
[  600.111727][   T24] cp2112 0003:10C4:EA90.003D: error requesting SMBus config
[  600.131374][   T24] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -32
[  600.147182][   T24] usb 5-1: USB disconnect, device number 86
[  600.349410][ T5832] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  600.523258][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  600.534616][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.545653][ T5832] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  600.554960][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.566710][ T5832] usb 3-1: config 0 descriptor??
[  600.627089][   T24] usb 2-1: new low-speed USB device number 66 using dummy_hcd
[  600.766018][   T24] usb 2-1: device descriptor read/64, error -71
[  600.936725][T14464] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2832'.
[  600.946335][T14464] openvswitch: netlink: Message has 6 unknown bytes.
[  601.029076][   T24] usb 2-1: new low-speed USB device number 67 using dummy_hcd
[  601.037485][ T5832] smartjoyplus 0003:0B43:0003.003E: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.2-1/input0
[  601.049682][ T5832] smartjoyplus 0003:0B43:0003.003E: no output reports found
[  601.054935][    T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  601.193744][   T24] usb 2-1: device descriptor read/64, error -71
[  601.232124][ T5832] usb 3-1: USB disconnect, device number 67
[  601.247579][    T9] usb 5-1: Using ep0 maxpacket: 16
[  601.258871][    T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0
[  601.267231][    T9] usb 5-1: config 0 has no interface number 0
[  601.276233][    T9] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  601.286756][    T9] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 33090, setting to 1024
[  601.299061][    T9] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  601.318158][   T24] usb usb2-port1: attempt power cycle
[  601.324321][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  601.335185][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.343241][    T9] usb 5-1: Product: syz
[  601.347647][    T9] usb 5-1: Manufacturer: syz
[  601.352276][    T9] usb 5-1: SerialNumber: syz
[  601.365083][    T9] usb 5-1: config 0 descriptor??
[  601.371162][T14462] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  601.380106][T14462] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  601.620325][    T9] usb 5-1: USB disconnect, device number 87
[  601.686428][   T24] usb 2-1: new low-speed USB device number 68 using dummy_hcd
[  601.707871][   T24] usb 2-1: device descriptor read/8, error -71
[  601.963792][   T24] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[  602.007146][   T24] usb 2-1: device descriptor read/8, error -71
[  602.125219][   T24] usb usb2-port1: unable to enumerate USB device
[  602.156322][    T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  602.246887][T14484] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2841'.
[  602.264273][T14484] openvswitch: netlink: Message has 6 unknown bytes.
[  602.329489][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.343052][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  602.355476][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  602.365882][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.381401][T14486] delete_channel: no stack
[  602.387315][    T9] usb 3-1: config 0 descriptor??
[  602.390248][T14486] delete_channel: no stack
[  602.851748][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  602.870976][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  602.899094][    T9] usb 3-1: USB disconnect, device number 68
[  603.253428][T14516] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2850'.
[  603.263400][T14516] openvswitch: netlink: Message has 6 unknown bytes.
[  603.496972][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2853'.
[  603.602396][T14529] delete_channel: no stack
[  603.620369][T14529] delete_channel: no stack
[  604.201615][T14561] trusted_key: encrypted_key: insufficient parameters specified
[  604.306073][ T5917] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  604.313759][   T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  604.351117][T14564] can0: slcan on ptm0.
[  604.416010][T14563] can0 (unregistered): slcan off ptm0.
[  604.489946][  T891] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  604.498835][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  604.506860][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.531626][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  604.551090][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.564085][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  604.578588][   T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  604.589962][T14571] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  604.598655][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  604.609069][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.617984][T14571] syzkaller0: entered promiscuous mode
[  604.623949][T14571] syzkaller0: entered allmulticast mode
[  604.629919][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  604.644865][   T10] usb 3-1: config 0 descriptor??
[  604.653197][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  604.666470][  T891] usb 5-1: Using ep0 maxpacket: 8
[  604.677299][  T891] usb 5-1: too many configurations: 23, using maximum allowed: 8
[  604.687729][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  604.698115][ T5917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  604.707096][  T891] usb 5-1: unable to read config index 0 descriptor/start: -61
[  604.717869][  T891] usb 5-1: can't read configurations, error -61
[  604.725753][ T5917] usb 2-1: Manufacturer: syz
[  604.738605][ T5917] usb 2-1: config 0 descriptor??
[  604.872934][  T891] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  605.054679][  T891] usb 5-1: Using ep0 maxpacket: 8
[  605.065011][  T891] usb 5-1: too many configurations: 23, using maximum allowed: 8
[  605.090683][  T891] usb 5-1: unable to read config index 0 descriptor/start: -61
[  605.113781][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  605.130614][  T891] usb 5-1: can't read configurations, error -61
[  605.145861][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  605.161250][  T891] usb usb5-port1: attempt power cycle
[  605.178212][   T10] usb 3-1: USB disconnect, device number 69
[  605.204737][ T5917] rc_core: IR keymap rc-hauppauge not found
[  605.218186][ T5917] Registered IR keymap rc-empty
[  605.218778][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.229612][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.249692][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.259517][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.283255][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  605.300060][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input122
[  605.323505][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.358560][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.399526][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.418899][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.450975][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.483627][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.534493][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.548401][  T891] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  605.591120][  T891] usb 5-1: Using ep0 maxpacket: 8
[  605.604246][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.619432][  T891] usb 5-1: too many configurations: 23, using maximum allowed: 8
[  605.635390][  T891] usb 5-1: unable to read config index 0 descriptor/start: -61
[  605.643317][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.650634][  T891] usb 5-1: can't read configurations, error -61
[  605.675144][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.696723][ T5917] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  605.731597][ T5917] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  605.742631][ T5917] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  605.772581][ T5917] usb 2-1: USB disconnect, device number 70
[  605.803608][  T891] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  605.803725][ T5832] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  605.827376][  T891] usb 5-1: Using ep0 maxpacket: 8
[  605.836254][  T891] usb 5-1: too many configurations: 23, using maximum allowed: 8
[  605.850646][  T891] usb 5-1: unable to read config index 0 descriptor/start: -61
[  605.859105][  T891] usb 5-1: can't read configurations, error -61
[  605.865956][  T891] usb usb5-port1: unable to enumerate USB device
[  606.006555][ T5832] usb 4-1: Using ep0 maxpacket: 8
[  606.014436][ T5832] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  606.024198][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.034484][ T5832] usb 4-1: config 0 has no interface number 0
[  606.040941][ T5832] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  606.054602][ T5832] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  606.064780][ T5832] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023
[  606.075117][ T5832] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  606.086135][ T5832] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  606.096126][ T5832] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  606.111140][ T5832] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  606.120369][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.128649][ T5832] usb 4-1: Product: syz
[  606.134070][ T5832] usb 4-1: Manufacturer: syz
[  606.138752][ T5832] usb 4-1: SerialNumber: syz
[  606.145804][ T5832] usb 4-1: config 0 descriptor??
[  606.151616][T14600] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  606.159493][T14600] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  606.316983][ T5917] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  606.392671][ T5832] usb 4-1: NFC: intf ffff8880675f6000 id ffffffff8ed58f00
[  606.470377][ T5917] usb 3-1: device descriptor read/64, error -71
[  606.477785][ T5832] nfcmrvl 4-1:0.122: NFC: registered with nci successfully
[  606.500056][ T5832] usb 4-1: USB disconnect, device number 82
[  606.516398][ T5832] usb 4-1: NFC: intf ffff8880675f6000
[  606.595015][T14620] program syz.1.2875 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  606.744589][ T5917] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  606.904973][ T5917] usb 3-1: device descriptor read/64, error -71
[  606.969262][T14627] netlink: 'syz.3.2878': attribute type 3 has an invalid length.
[  606.977060][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'.
[  607.023664][ T5917] usb usb3-port1: attempt power cycle
[  607.033316][  T891] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  607.217198][  T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.229165][  T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.229220][  T891] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  607.229245][  T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.244096][  T891] usb 2-1: config 0 descriptor??
[  607.386252][ T5917] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  607.408505][ T5917] usb 3-1: device descriptor read/8, error -71
[  607.664686][ T5917] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  607.698151][ T5917] usb 3-1: device descriptor read/8, error -71
[  607.713424][  T891] usbhid 2-1:0.0: can't add hid device: -71
[  607.719832][  T891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  607.734410][  T891] usb 2-1: USB disconnect, device number 71
[  607.825554][ T5917] usb usb3-port1: unable to enumerate USB device
[  608.102929][ T5917] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  608.273303][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  608.283248][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  608.294292][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  608.309646][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  608.324518][ T5917] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  608.334111][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.343398][ T5917] usb 5-1: Product: syz
[  608.347644][ T5917] usb 5-1: Manufacturer: syz
[  608.353035][ T5917] usb 5-1: SerialNumber: syz
[  608.368547][ T5917] usb 5-1: config 0 descriptor??
[  608.382278][  T891] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  608.420597][T14655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  608.545892][  T891] usb 4-1: device descriptor read/64, error -71
[  608.577763][T14660] FAULT_INJECTION: forcing a failure.
[  608.577763][T14660] name failslab, interval 1, probability 0, space 0, times 0
[  608.590661][T14660] CPU: 1 UID: 0 PID: 14660 Comm: syz.1.2891 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.590694][T14660] Tainted: [L]=SOFTLOCKUP
[  608.590701][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  608.590714][T14660] Call Trace:
[  608.590723][T14660]  <TASK>
[  608.590730][T14660]  dump_stack_lvl+0x189/0x250
[  608.590754][T14660]  ? __pfx____ratelimit+0x10/0x10
[  608.590780][T14660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  608.590798][T14660]  ? __pfx__printk+0x10/0x10
[  608.590833][T14660]  ? __pfx___might_resched+0x10/0x10
[  608.590867][T14660]  should_fail_ex+0x414/0x560
[  608.590900][T14660]  should_failslab+0xa8/0x100
[  608.590922][T14660]  __kmalloc_noprof+0xdf/0x800
[  608.590947][T14660]  ? kfree+0x4d/0x660
[  608.590966][T14660]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  608.590994][T14660]  tomoyo_realpath_from_path+0xe3/0x5d0
[  608.591017][T14660]  ? tomoyo_domain+0xd8/0x130
[  608.591044][T14660]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  608.591071][T14660]  tomoyo_path_number_perm+0x1e8/0x5a0
[  608.591101][T14660]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  608.591147][T14660]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  608.591198][T14660]  ? __fget_files+0x2a/0x420
[  608.591225][T14660]  ? __fget_files+0x3a0/0x420
[  608.591244][T14660]  ? __fget_files+0x2a/0x420
[  608.591269][T14660]  security_file_ioctl+0xcb/0x2d0
[  608.591297][T14660]  __se_sys_ioctl+0x47/0x170
[  608.591325][T14660]  do_syscall_64+0xfa/0xf80
[  608.591352][T14660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.591371][T14660]  ? clear_bhb_loop+0x60/0xb0
[  608.591394][T14660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.591412][T14660] RIP: 0033:0x7f8c6cf8f749
[  608.591428][T14660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.591445][T14660] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  608.591465][T14660] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  608.591479][T14660] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  608.591491][T14660] RBP: 00007f8c6de51090 R08: 0000000000000000 R09: 0000000000000000
[  608.591502][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.591522][T14660] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  608.591555][T14660]  </TASK>
[  608.591564][T14660] ERROR: Out of memory at tomoyo_realpath_from_path.
[  608.836605][T14660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  608.838180][  T891] usb 4-1: new full-speed USB device number 84 using dummy_hcd
[  608.920741][ T9308] usb 5-1: USB disconnect, device number 92
[  609.001247][  T891] usb 4-1: device descriptor read/64, error -71
[  609.007572][T14663] ksmbd: Unknown IPC event: 3, ignore.
[  609.016421][T14663] 8021q: VLANs not supported on ip6tnl0
[  609.027066][   T30] audit: type=1326 audit(1765428545.266:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.2892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c6cf8f749 code=0x0
[  609.083251][T14664] netlink: 'syz.1.2892': attribute type 1 has an invalid length.
[  609.120352][  T891] usb usb4-port1: attempt power cycle
[  609.320875][T14666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  609.480737][T14670] tmpfs: Bad value for 'size'
[  609.493217][  T891] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  609.515289][  T891] usb 4-1: device descriptor read/8, error -71
[  609.771331][  T891] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[  609.793214][  T891] usb 4-1: device descriptor read/8, error -71
[  609.916357][  T891] usb usb4-port1: unable to enumerate USB device
[  609.945412][    T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  610.115074][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.126262][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.136202][    T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  610.145513][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.155611][    T9] usb 5-1: config 0 descriptor??
[  610.188417][   T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  610.353587][   T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  610.364053][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.373828][   T24] usb 2-1: Product: syz
[  610.378114][   T24] usb 2-1: Manufacturer: syz
[  610.387350][   T24] usb 2-1: SerialNumber: syz
[  610.399440][   T24] usb 2-1: config 0 descriptor??
[  610.604728][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  610.616179][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  610.628630][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.647675][    T9] usb 5-1: USB disconnect, device number 93
[  610.656413][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.706957][   T10] usb 2-1: USB disconnect, device number 72
[  610.953012][T14699] tmpfs: Bad value for 'size'
[  610.981115][T14699] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  610.997630][T14699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.011965][   T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  611.012457][T14699] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  611.161861][   T24] usb 3-1: device descriptor read/64, error -71
[  611.419412][   T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  611.568046][   T24] usb 3-1: device descriptor read/64, error -71
[  611.607331][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'.
[  611.686135][   T24] usb usb3-port1: attempt power cycle
[  611.846147][ T5832] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  612.031249][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.042680][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.049347][    T9] usb 5-1: new low-speed USB device number 94 using dummy_hcd
[  612.053935][ T5832] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  612.069199][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.077638][   T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  612.087600][ T5832] usb 4-1: config 0 descriptor??
[  612.115542][   T24] usb 3-1: device descriptor read/8, error -71
[  612.220469][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  612.361062][    T9] usb 5-1: new low-speed USB device number 95 using dummy_hcd
[  612.371110][   T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  612.392353][   T24] usb 3-1: device descriptor read/8, error -71
[  612.509828][   T24] usb usb3-port1: unable to enumerate USB device
[  612.520198][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  612.525864][    T9] usb usb5-port1: attempt power cycle
[  612.534773][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[  612.542270][ T5832] usbhid 4-1:0.0: can't add hid device: -32
[  612.548277][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  612.564118][ T5832] usb 4-1: USB disconnect, device number 87
[  612.894282][    T9] usb 5-1: new low-speed USB device number 96 using dummy_hcd
[  612.927163][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  613.065751][    T9] usb 5-1: new low-speed USB device number 97 using dummy_hcd
[  613.087494][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  613.100489][    T9] usb usb5-port1: unable to enumerate USB device
[  614.338358][    T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  614.417549][  T891] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  614.453711][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'.
[  614.465462][T14740] netlink: 'syz.1.2923': attribute type 3 has an invalid length.
[  614.480048][T14740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2923'.
[  614.520153][    T9] usb 4-1: Using ep0 maxpacket: 32
[  614.533202][    T9] usb 4-1: config 128 has an invalid interface number: 67 but max is 0
[  614.552049][    T9] usb 4-1: config 128 has no interface number 0
[  614.561261][    T9] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=51.9c
[  614.572923][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.582191][    T9] usb 4-1: Product: syz
[  614.587301][    T9] usb 4-1: Manufacturer: syz
[  614.592153][    T9] usb 4-1: SerialNumber: syz
[  614.605509][  T891] usb 3-1: Using ep0 maxpacket: 16
[  614.612935][  T891] usb 3-1: config 0 has an invalid interface number: 195 but max is 0
[  614.621275][  T891] usb 3-1: config 0 has no interface number 0
[  614.631512][  T891] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  614.640987][  T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.650137][  T891] usb 3-1: Product: syz
[  614.654324][  T891] usb 3-1: Manufacturer: syz
[  614.659619][  T891] usb 3-1: SerialNumber: syz
[  614.666963][  T891] usb 3-1: config 0 descriptor??
[  614.676794][  T891] go7007 3-1:0.195: probe with driver go7007 failed with error -12
[  614.819411][ T9308] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  614.905265][T14728] /dev/nullb0: Can't open blockdev
[  614.971299][  T891] usb 3-1: USB disconnect, device number 78
[  614.987088][ T9308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.001762][ T9308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.015368][ T9308] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  615.051546][    T9] dvb-usb: found a 'DiBcom STK7770P reference design' in warm state.
[  615.054668][ T9308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.088046][ T9308] usb 2-1: config 0 descriptor??
[  615.094955][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  615.107415][    T9] dvbdev: DVB: registering new adapter (DiBcom STK7770P reference design)
[  615.118545][    T9] usb 4-1: media controller created
[  615.138181][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  615.192658][    T9] DVB: Unable to find symbol dib7000p_attach()
[  615.199153][    T9] dvb-usb: no frontend was attached by 'DiBcom STK7770P reference design'
[  615.269878][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[  615.276018][    T9] Registered IR keymap rc-empty
[  615.284003][    T9] dvb-usb: could not initialize remote control.
[  615.290324][    T9] dvb-usb: DiBcom STK7770P reference design successfully initialized and connected.
[  615.439707][ T5832] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  615.534688][T14742] dib0700: tx buffer length is larger than 4. Not supported.
[  615.553664][  T891] usb 4-1: USB disconnect, device number 88
[  615.558209][ T9308] usbhid 2-1:0.0: can't add hid device: -71
[  615.581200][ T9308] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  615.589951][ T5832] usb 5-1: device descriptor read/64, error -71
[  615.617612][ T9308] usb 2-1: USB disconnect, device number 73
[  615.629975][  T891] dvb-usb: DiBcom STK7770P reference design successfully deinitialized and disconnected.
[  615.846146][ T5832] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  615.985221][ T5832] usb 5-1: device descriptor read/64, error -71
[  616.103704][ T5832] usb usb5-port1: attempt power cycle
[  616.172654][T14752] FAULT_INJECTION: forcing a failure.
[  616.172654][T14752] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  616.187266][T14752] CPU: 0 UID: 0 PID: 14752 Comm: syz.1.2928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.187298][T14752] Tainted: [L]=SOFTLOCKUP
[  616.187306][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  616.187317][T14752] Call Trace:
[  616.187325][T14752]  <TASK>
[  616.187335][T14752]  dump_stack_lvl+0x189/0x250
[  616.187361][T14752]  ? __pfx____ratelimit+0x10/0x10
[  616.187388][T14752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  616.187408][T14752]  ? __pfx__printk+0x10/0x10
[  616.187436][T14752]  ? fs_reclaim_acquire+0x7d/0x100
[  616.187467][T14752]  should_fail_ex+0x414/0x560
[  616.187497][T14752]  prepare_alloc_pages+0x22b/0x650
[  616.187535][T14752]  __alloc_frozen_pages_noprof+0x123/0x370
[  616.187561][T14752]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  616.187586][T14752]  ? __pfx__copy_from_iter+0x10/0x10
[  616.187610][T14752]  ? policy_nodemask+0x27c/0x720
[  616.187631][T14752]  ? aa_file_perm+0x44c/0x1530
[  616.187658][T14752]  alloc_pages_mpol+0x232/0x4a0
[  616.187695][T14752]  alloc_pages_noprof+0xa9/0x190
[  616.187719][T14752]  anon_pipe_write+0xbf0/0x1460
[  616.187739][T14752]  ? __pfx_aa_file_perm+0x10/0x10
[  616.187789][T14752]  ? __pfx_anon_pipe_write+0x10/0x10
[  616.187805][T14752]  ? common_file_perm+0x1b5/0x220
[  616.187831][T14752]  ? bpf_lsm_file_permission+0x9/0x20
[  616.187858][T14752]  ? security_file_permission+0x75/0x290
[  616.187893][T14752]  vfs_write+0x5c9/0xb30
[  616.187923][T14752]  ? __pfx_anon_pipe_write+0x10/0x10
[  616.187942][T14752]  ? __pfx_vfs_write+0x10/0x10
[  616.187980][T14752]  ? __fget_files+0x2a/0x420
[  616.188009][T14752]  ksys_write+0x145/0x250
[  616.188039][T14752]  ? __pfx_ksys_write+0x10/0x10
[  616.188069][T14752]  ? do_syscall_64+0xbe/0xf80
[  616.188104][T14752]  do_syscall_64+0xfa/0xf80
[  616.188131][T14752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.188150][T14752]  ? clear_bhb_loop+0x60/0xb0
[  616.188171][T14752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.188188][T14752] RIP: 0033:0x7f8c6cf8f749
[  616.188204][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.188220][T14752] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  616.188241][T14752] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  616.188255][T14752] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000
[  616.188268][T14752] RBP: 00007f8c6de51090 R08: 0000000000000000 R09: 0000000000000000
[  616.188280][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.188290][T14752] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  616.188322][T14752]  </TASK>
[  616.477237][ T5832] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  616.510060][ T5832] usb 5-1: device descriptor read/8, error -71
[  616.766736][ T9308] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  616.793555][ T5832] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  616.820804][ T5832] usb 5-1: device descriptor read/8, error -71
[  616.873281][ T5826] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  616.938072][ T5832] usb usb5-port1: unable to enumerate USB device
[  616.958410][ T9308] usb 4-1: Using ep0 maxpacket: 16
[  616.967781][ T9308] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  616.977689][ T9308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.985853][ T9308] usb 4-1: Product: syz
[  616.990095][ T9308] usb 4-1: Manufacturer: syz
[  616.995252][ T9308] usb 4-1: SerialNumber: syz
[  617.036790][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  617.047178][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  617.057514][ T5826] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  617.066748][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  617.075042][ T5826] usb 2-1: SerialNumber: syz
[  617.228537][ T9308] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  617.240658][ T9308] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  617.253048][ T9308] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  617.262312][ T9308] usb 4-1: media controller created
[  617.279277][ T9308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  617.310148][ T5826] usb 2-1: 0:2 : does not exist
[  617.315821][ T9308] zl10353_read_register: readreg error (reg=127, ret==-71)
[  617.332906][ T5826] usb 2-1: unit 5: unexpected type 0x0a
[  617.363790][ T5826] usb 2-1: USB disconnect, device number 74
[  617.405199][ T9308] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  617.424384][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  617.453754][ T9308] usb 4-1: USB disconnect, device number 89
[  617.535450][T14770] netlink: 'syz.2.2937': attribute type 4 has an invalid length.
[  617.599125][T14772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.010788][T14781] netlink: 'syz.1.2941': attribute type 4 has an invalid length.
[  618.020760][T14781] FAULT_INJECTION: forcing a failure.
[  618.020760][T14781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  618.034414][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.1.2941 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  618.034434][T14781] Tainted: [L]=SOFTLOCKUP
[  618.034439][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  618.034446][T14781] Call Trace:
[  618.034461][T14781]  <TASK>
[  618.034467][T14781]  dump_stack_lvl+0x189/0x250
[  618.034485][T14781]  ? __pfx____ratelimit+0x10/0x10
[  618.034501][T14781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  618.034512][T14781]  ? __pfx__printk+0x10/0x10
[  618.034527][T14781]  ? __might_fault+0xb0/0x130
[  618.034548][T14781]  should_fail_ex+0x414/0x560
[  618.034568][T14781]  _copy_from_user+0x2d/0xb0
[  618.034582][T14781]  do_tcp_getsockopt+0x1dd/0x2680
[  618.034602][T14781]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  618.034618][T14781]  ? sock_recv_errqueue+0x500/0x510
[  618.034645][T14781]  ? __lock_acquire+0x6b6/0x2cf0
[  618.034676][T14781]  ? _parse_integer_limit+0x1ae/0x1f0
[  618.034701][T14781]  ? aa_label_sk_perm+0x4c4/0x610
[  618.034717][T14781]  ? kstrtoull+0x12f/0x1d0
[  618.034733][T14781]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  618.034750][T14781]  ? __lock_acquire+0x6b6/0x2cf0
[  618.034780][T14781]  ? __might_fault+0xb0/0x130
[  618.034800][T14781]  tcp_getsockopt+0x83/0x130
[  618.034813][T14781]  ? sock_recv_errqueue+0x500/0x510
[  618.034826][T14781]  ? sock_recv_errqueue+0x500/0x510
[  618.034839][T14781]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  618.034853][T14781]  do_sock_getsockopt+0x2b4/0x3d0
[  618.034871][T14781]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  618.034886][T14781]  ? do_syscall_64+0x80/0xf80
[  618.034901][T14781]  ? __fget_files+0x2a/0x420
[  618.034912][T14781]  ? __fget_files+0x3a0/0x420
[  618.034923][T14781]  ? __fget_files+0x2a/0x420
[  618.034939][T14781]  __x64_sys_getsockopt+0x1a5/0x250
[  618.034954][T14781]  ? do_syscall_64+0x80/0xf80
[  618.034970][T14781]  ? do_syscall_64+0x80/0xf80
[  618.034986][T14781]  do_syscall_64+0xfa/0xf80
[  618.035002][T14781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.035013][T14781]  ? clear_bhb_loop+0x60/0xb0
[  618.035027][T14781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.035038][T14781] RIP: 0033:0x7f8c6cf8f749
[  618.035050][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  618.035060][T14781] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  618.035074][T14781] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  618.035083][T14781] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  618.035090][T14781] RBP: 00007f8c6de51090 R08: 0000200000000000 R09: 0000000000000000
[  618.035098][T14781] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  618.035105][T14781] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  618.035129][T14781]  </TASK>
[  618.417335][T14785] netlink: 'syz.1.2942': attribute type 4 has an invalid length.
[  618.749298][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2947'.
[  618.819645][ T5826] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[  618.984602][ T5826] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  618.994492][ T9308] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  619.002138][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.010155][ T5826] usb 3-1: Product: syz
[  619.014565][ T5826] usb 3-1: Manufacturer: syz
[  619.019264][ T5826] usb 3-1: SerialNumber: syz
[  619.028314][ T5826] usb 3-1: config 0 descriptor??
[  619.054709][ T5918] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[  619.182988][ T9308] usb 2-1: Using ep0 maxpacket: 16
[  619.190506][ T9308] usb 2-1: unable to get BOS descriptor or descriptor too short
[  619.200721][ T9308] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 511
[  619.210826][ T9308] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  619.223971][ T9308] usb 2-1: config 1 interface 0 has no altsetting 0
[  619.233293][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  619.239620][ T9308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  619.255337][ T9308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.255592][ T5826] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  619.258123][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  619.300706][ T5918] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  619.305212][ T9308] usb 2-1: Product: syz
[  619.317337][ T9308] usb 2-1: Manufacturer: syz
[  619.322370][ T9308] usb 2-1: SerialNumber: syz
[  619.336367][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.338195][T14797] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  619.361956][ T5918] usb 4-1: config 0 descriptor??
[  619.376940][T14801] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  619.485215][T14805] vivid-000: =================  START STATUS  =================
[  619.493548][T14805] vivid-000: Generate PTS: true
[  619.498957][T14805] vivid-000: Generate SCR: true
[  619.504314][T14805] tpg source WxH: 1280x720 (Y'CbCr)
[  619.509613][T14805] tpg field: 1
[  619.513035][T14805] tpg crop: (0,0)/64x64
[  619.517339][T14805] tpg compose: (0,0)/16x16
[  619.521890][T14805] tpg colorspace: 3
[  619.525890][T14805] tpg transfer function: 0/1
[  619.530523][T14805] tpg Y'CbCr encoding: 0/2
[  619.534984][T14805] tpg quantization: 0/2
[  619.539336][T14805] tpg RGB range: 0/1
[  619.543354][T14805] vivid-000: ==================  END STATUS  ==================
[  619.641579][ T5918] usbhid 4-1:0.0: can't add hid device: -71
[  619.644712][ T9308] usb 2-1: USB disconnect, device number 75
[  619.657942][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  619.693444][ T5918] usb 4-1: USB disconnect, device number 90
[  619.953338][    T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  620.093396][    T9] usb 5-1: device descriptor read/64, error -71
[  620.177698][ T5918] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  620.350158][ T5918] usb 4-1: device descriptor read/64, error -71
[  620.359547][    T9] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  620.509228][    T9] usb 5-1: device descriptor read/64, error -71
[  620.519936][ T5893] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  620.616154][ T5918] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  620.627143][    T9] usb usb5-port1: attempt power cycle
[  620.680401][ T5893] usb 2-1: Using ep0 maxpacket: 8
[  620.687929][ T5893] usb 2-1: config 0 has an invalid interface number: 94 but max is 0
[  620.697441][ T5893] usb 2-1: config 0 has no interface number 0
[  620.703993][ T5893] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd
[  620.714724][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.725947][ T5893] usb 2-1: config 0 descriptor??
[  620.739835][ T5893] bfusb 2-1:0.94: probe with driver bfusb failed with error -5
[  620.755535][ T5918] usb 4-1: device descriptor read/64, error -71
[  620.783104][ T5826] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  620.796912][ T5826] usb 3-1: USB disconnect, device number 79
[  620.873208][ T5918] usb usb4-port1: attempt power cycle
[  621.001289][    T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  621.023368][    T9] usb 5-1: device descriptor read/8, error -71
[  621.258205][ T5918] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  621.290204][    T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  621.298524][ T5918] usb 4-1: device descriptor read/8, error -71
[  621.322829][    T9] usb 5-1: device descriptor read/8, error -71
[  621.440526][    T9] usb usb5-port1: unable to enumerate USB device
[  621.480864][T14818] FAULT_INJECTION: forcing a failure.
[  621.480864][T14818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.494071][T14818] CPU: 0 UID: 0 PID: 14818 Comm: syz.2.2956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  621.494092][T14818] Tainted: [L]=SOFTLOCKUP
[  621.494097][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  621.494104][T14818] Call Trace:
[  621.494110][T14818]  <TASK>
[  621.494115][T14818]  dump_stack_lvl+0x189/0x250
[  621.494131][T14818]  ? __pfx____ratelimit+0x10/0x10
[  621.494147][T14818]  ? __pfx_dump_stack_lvl+0x10/0x10
[  621.494158][T14818]  ? __pfx__printk+0x10/0x10
[  621.494174][T14818]  ? __might_fault+0xb0/0x130
[  621.494195][T14818]  should_fail_ex+0x414/0x560
[  621.494215][T14818]  _copy_from_iter+0x1cd/0x1630
[  621.494230][T14818]  ? __build_skb_around+0x22d/0x3c0
[  621.494249][T14818]  ? __pfx__copy_from_iter+0x10/0x10
[  621.494259][T14818]  ? __alloc_skb+0x2f1/0x430
[  621.494275][T14818]  ? __pfx___alloc_skb+0x10/0x10
[  621.494291][T14818]  ? netlink_sendmsg+0x642/0xb30
[  621.494302][T14818]  ? skb_put+0x11b/0x210
[  621.494318][T14818]  netlink_sendmsg+0x6b2/0xb30
[  621.494330][T14818]  ? aa_sk_perm+0x15f/0x920
[  621.494346][T14818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.494359][T14818]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  621.494376][T14818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.494387][T14818]  sock_sendmsg_nosec+0x18f/0x1d0
[  621.494405][T14818]  ____sys_sendmsg+0x577/0x880
[  621.494427][T14818]  ? __pfx_____sys_sendmsg+0x10/0x10
[  621.494448][T14818]  ? import_iovec+0x74/0xa0
[  621.494463][T14818]  ___sys_sendmsg+0x21f/0x2a0
[  621.494476][T14818]  ? __pfx____sys_sendmsg+0x10/0x10
[  621.494490][T14818]  ? rcu_read_lock_any_held+0xb3/0x120
[  621.494519][T14818]  ? __fget_files+0x2a/0x420
[  621.494530][T14818]  ? __fget_files+0x3a0/0x420
[  621.494547][T14818]  __x64_sys_sendmsg+0x19b/0x260
[  621.494560][T14818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  621.494576][T14818]  ? __pfx_ksys_write+0x10/0x10
[  621.494594][T14818]  ? do_syscall_64+0xbe/0xf80
[  621.494611][T14818]  do_syscall_64+0xfa/0xf80
[  621.494627][T14818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.494639][T14818]  ? clear_bhb_loop+0x60/0xb0
[  621.494664][T14818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.494676][T14818] RIP: 0033:0x7fcee9b8f749
[  621.494688][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.494698][T14818] RSP: 002b:00007fceeaac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.494712][T14818] RAX: ffffffffffffffda RBX: 00007fcee9de5fa0 RCX: 00007fcee9b8f749
[  621.494721][T14818] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000003
[  621.494729][T14818] RBP: 00007fceeaac0090 R08: 0000000000000000 R09: 0000000000000000
[  621.494737][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.494744][T14818] R13: 00007fcee9de6038 R14: 00007fcee9de5fa0 R15: 00007ffe68858378
[  621.494767][T14818]  </TASK>
[  621.857534][ T5918] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  621.879058][ T5918] usb 4-1: device descriptor read/8, error -71
[  622.014211][ T5918] usb usb4-port1: unable to enumerate USB device
[  622.712429][ T5918] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  622.723288][ T5917] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  622.896979][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  622.905001][ T5918] usb 4-1: Using ep0 maxpacket: 32
[  622.917064][ T5918] usb 4-1: config 3 has an invalid interface number: 202 but max is 0
[  622.925562][ T5917] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  622.936318][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  622.947578][ T5918] usb 4-1: config 3 has no interface number 0
[  622.954642][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  622.966588][ T5918] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61
[  622.976116][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  622.987245][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.996692][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.010539][ T5918] usb 4-1: Product: syz
[  623.021543][ T5918] usb 4-1: Manufacturer: syz
[  623.026858][ T5918] usb 4-1: SerialNumber: syz
[  623.032037][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  623.043675][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.074641][ T5918] ax88179_178a 4-1:3.202: probe with driver ax88179_178a failed with error -22
[  623.303508][ T5917] usb 3-1: usb_control_msg returned -32
[  623.309795][ T5917] usbtmc 3-1:16.0: can't read capabilities
[  623.345942][ T5893] usb 4-1: USB disconnect, device number 95
[  623.386237][ T5918] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[  623.420163][ T9308] usb 2-1: USB disconnect, device number 76
[  623.571147][ T5918] usb 5-1: not running at top speed; connect to a high speed hub
[  623.581630][ T5918] usb 5-1: config 1 has an invalid interface number: 95 but max is 2
[  623.589826][ T5918] usb 5-1: config 1 has an invalid interface number: 38 but max is 2
[  623.598178][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  623.608868][ T5918] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  623.618028][ T5918] usb 5-1: config 1 has no interface number 0
[  623.624406][ T5918] usb 5-1: config 1 has no interface number 1
[  623.630525][ T5918] usb 5-1: config 1 interface 95 altsetting 6 endpoint 0x7 has an invalid bInterval 170, changing to 4
[  623.642915][ T5918] usb 5-1: config 1 interface 95 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 1023
[  623.654756][ T5918] usb 5-1: config 1 interface 95 altsetting 6 endpoint 0xE has invalid maxpacket 495, setting to 64
[  623.665711][ T5918] usb 5-1: config 1 interface 95 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  623.676566][ T5918] usb 5-1: config 1 interface 95 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  623.689358][ T5918] usb 5-1: config 1 interface 95 altsetting 6 has an endpoint descriptor with address 0xA5, changing to 0x85
[  623.695339][T14848] usbtmc 3-1:16.0: stb usb_control_msg returned -32
[  623.701092][ T5918] usb 5-1: config 1 interface 95 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  623.701121][ T5918] usb 5-1: config 1 interface 95 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  623.701145][ T5918] usb 5-1: config 1 interface 95 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  623.701186][ T5918] usb 5-1: config 1 interface 38 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  623.755415][ T5918] usb 5-1: config 1 interface 95 has no altsetting 0
[  623.756928][ T9308] usb 3-1: USB disconnect, device number 80
[  623.763244][ T5918] usb 5-1: config 1 interface 38 has no altsetting 0
[  623.778903][ T5918] usb 5-1: Dual-Role OTG device on HNP port
[  623.785257][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=b703, bcdDevice=7c.e3
[  623.794493][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.802513][ T5918] usb 5-1: Product: 豶쒣ﱚ减ౄ樞⽅I霖ⶪጋ畬齖ꍔ궐뾸ྜྷ课喾鮋䔴踹汿び廍컑ᆃ눞䒷⃴‍續몍ۿ햅粭ᣖ턆ℚ숳絘鴣鎤饽䗃嬾䆎㖬軆툰撱㙲㺥㹩
[  623.821249][ T5918] usb 5-1: Manufacturer: 篨愿ш掠㓷ᵶ藶᤬忨惋蛥​ᗄ╎鞺핡櫝紾횼⇒❦빂ᭊ傒㉧ٜ㱨௔뿶掉︣뫀ࠅꍡ៭ᦣ筼钰ᅲ쫈頽⥍脅錭쩪沨猇锴ᛖ镪ள⓿芿무ܠ㧐ś꿥鍠반ᰫﳀ뎥葠୮롷ዡ彿祋ꕂꘀ풚৳钔ࠓ暠㳒ᙾ릝田ꋂꣾ⁀텮첯㧜킗
[  623.850456][ T5918] usb 5-1: SerialNumber: ࠒ
[  623.861214][T14841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  624.086645][T14841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'.
[  624.142622][ T5918] usb 5-1: USB disconnect, device number 106
[  624.351277][T14856] Invalid source name
[  624.355488][T14856] UBIFS error (pid: 14856): cannot open "./file0", error -22
[  624.489425][ T5893] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  624.659116][ T5893] usb 2-1: device descriptor read/64, error -71
[  624.947974][ T5893] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  624.993360][T14887] FAULT_INJECTION: forcing a failure.
[  624.993360][T14887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.012813][T14887] CPU: 1 UID: 0 PID: 14887 Comm: syz.4.2987 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  625.012847][T14887] Tainted: [L]=SOFTLOCKUP
[  625.012854][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  625.012866][T14887] Call Trace:
[  625.012875][T14887]  <TASK>
[  625.012884][T14887]  dump_stack_lvl+0x189/0x250
[  625.012910][T14887]  ? __pfx____ratelimit+0x10/0x10
[  625.012938][T14887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  625.012957][T14887]  ? __pfx__printk+0x10/0x10
[  625.013001][T14887]  should_fail_ex+0x414/0x560
[  625.013038][T14887]  _copy_to_user+0x31/0xb0
[  625.013065][T14887]  simple_read_from_buffer+0xe1/0x170
[  625.013089][T14887]  proc_fail_nth_read+0x1b3/0x220
[  625.013122][T14887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.013152][T14887]  ? rw_verify_area+0x2a6/0x4d0
[  625.013185][T14887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.013211][T14887]  vfs_read+0x200/0xa30
[  625.013235][T14887]  ? fdget_pos+0x247/0x320
[  625.013260][T14887]  ? __pfx___mutex_lock+0x10/0x10
[  625.013279][T14887]  ? __pfx_vfs_read+0x10/0x10
[  625.013307][T14887]  ? __fget_files+0x2a/0x420
[  625.013333][T14887]  ? __fget_files+0x3a0/0x420
[  625.013352][T14887]  ? __fget_files+0x2a/0x420
[  625.013381][T14887]  ksys_read+0x145/0x250
[  625.013406][T14887]  ? __fget_files+0x2a/0x420
[  625.013427][T14887]  ? __pfx_ksys_read+0x10/0x10
[  625.013456][T14887]  ? do_syscall_64+0xbe/0xf80
[  625.013485][T14887]  do_syscall_64+0xfa/0xf80
[  625.013513][T14887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.013532][T14887]  ? clear_bhb_loop+0x60/0xb0
[  625.013556][T14887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.013576][T14887] RIP: 0033:0x7ff9f978e15c
[  625.013595][T14887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  625.013611][T14887] RSP: 002b:00007ff9fa691030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  625.013643][T14887] RAX: ffffffffffffffda RBX: 00007ff9f99e5fa0 RCX: 00007ff9f978e15c
[  625.013658][T14887] RDX: 000000000000000f RSI: 00007ff9fa6910a0 RDI: 0000000000000004
[  625.013671][T14887] RBP: 00007ff9fa691090 R08: 0000000000000000 R09: 0000000000000000
[  625.013683][T14887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.013707][T14887] R13: 00007ff9f99e6038 R14: 00007ff9f99e5fa0 R15: 00007ffde50e8a68
[  625.013742][T14887]  </TASK>
[  625.267083][ T5893] usb 2-1: device descriptor read/64, error -71
[  625.322160][T14884] ieee802154 phy0 wpan0: encryption failed: -22
[  625.386992][ T5893] usb usb2-port1: attempt power cycle
[  625.522454][T14896] add_ndev_hash(syzkaller0) on ffff888028aac000 done
[  625.531308][T14896] siw: device registration error -23
[  625.781983][ T5893] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  625.804090][ T5917] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  625.822498][ T5893] usb 2-1: device descriptor read/8, error -71
[  626.008969][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  626.029133][T14912] syzkaller1: entered promiscuous mode
[  626.034832][T14912] syzkaller1: entered allmulticast mode
[  626.036608][ T5917] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  626.052679][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.064077][ T5917] usb 3-1: Product: syz
[  626.068279][ T5917] usb 3-1: Manufacturer: syz
[  626.073654][ T5917] usb 3-1: SerialNumber: syz
[  626.080542][ T5917] usb 3-1: config 0 descriptor??
[  626.103575][ T5893] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  626.125095][ T5893] usb 2-1: device descriptor read/8, error -71
[  626.244781][ T5893] usb usb2-port1: unable to enumerate USB device
[  626.336084][ T5917] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  626.345676][ T5917] gspca_sunplus: reg_w_riv err -71
[  626.351627][ T5917] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  626.368217][ T5917] usb 3-1: USB disconnect, device number 81
[  626.922960][T14920] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  626.942214][T14920] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  627.016829][T14920] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  627.033211][T14920] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  627.155933][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.168173][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.407665][ T5826] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  627.465643][T14931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3001'.
[  627.547612][ T5826] usb 4-1: device descriptor read/64, error -71
[  627.814055][ T5826] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  627.884373][T14939] fuse: Unknown parameter 'srokp_'R'
[  627.953099][ T5826] usb 4-1: device descriptor read/64, error -71
[  628.072171][ T5826] usb usb4-port1: attempt power cycle
[  628.434377][ T5826] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  628.456261][ T5826] usb 4-1: device descriptor read/8, error -71
[  628.712457][ T5826] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[  628.734818][ T5826] usb 4-1: device descriptor read/8, error -71
[  628.854119][ T5826] usb usb4-port1: unable to enumerate USB device
[  651.136291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  651.143328][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  716.856678][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  716.864055][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  782.567786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  782.574356][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  790.765988][   T31] INFO: task kworker/1:9:9308 blocked for more than 143 seconds.
[  790.773779][   T31]       Tainted: G             L      syzkaller #0
[  790.780427][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  790.789346][   T31] task:kworker/1:9     state:D stack:21144 pid:9308  tgid:9308  ppid:2      task_flags:0x4208060 flags:0x00080000
[  790.801468][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  790.808783][   T31] Call Trace:
[  790.812083][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  790.815034][   T31]  __schedule+0x14bc/0x5000
[  790.819954][   T31]  ? __pfx___schedule+0x10/0x10
[  790.824864][   T31]  ? schedule+0x91/0x360
[  790.829147][   T31]  schedule+0x165/0x360
[  790.833929][   T31]  schedule_preempt_disabled+0x13/0x30
[  790.839438][   T31]  __mutex_lock+0x7e6/0x1350
[  790.844574][   T31]  ? __mutex_lock+0x5bb/0x1350
[  790.849375][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  790.855839][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  790.860906][   T31]  ? process_one_work+0x868/0x15a0
[  790.866256][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  790.872403][   T31]  ? process_one_work+0x868/0x15a0
[  790.878009][   T31]  process_one_work+0x93a/0x15a0
[  790.883122][   T31]  ? __pfx_process_one_work+0x10/0x10
[  790.888635][   T31]  ? assign_work+0x3c7/0x5b0
[  790.893266][   T31]  worker_thread+0x9b0/0xee0
[  790.897998][   T31]  kthread+0x711/0x8a0
[  790.902104][   T31]  ? __pfx_worker_thread+0x10/0x10
[  790.907413][   T31]  ? __pfx_kthread+0x10/0x10
[  790.912045][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  790.917404][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  790.922638][   T31]  ? __pfx_kthread+0x10/0x10
[  790.927344][   T31]  ret_from_fork+0x599/0xb30
[  790.931967][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  790.937437][   T31]  ? __switch_to_asm+0x39/0x70
[  790.942257][   T31]  ? __switch_to_asm+0x33/0x70
[  790.947058][   T31]  ? __pfx_kthread+0x10/0x10
[  790.951967][   T31]  ret_from_fork_asm+0x1a/0x30
[  790.956782][   T31]  </TASK>
[  790.961756][   T31] INFO: task syz.4.2998:14914 blocked for more than 143 seconds.
[  790.969712][   T31]       Tainted: G             L      syzkaller #0
[  790.976321][   T31]       Blocked by coredump.
[  790.983159][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  790.992053][   T31] task:syz.4.2998      state:D stack:25512 pid:14914 tgid:14913 ppid:11881  task_flags:0x40054c flags:0x00080001
[  791.004440][   T31] Call Trace:
[  791.007760][   T31]  <TASK>
[  791.010723][   T31]  __schedule+0x14bc/0x5000
[  791.015382][   T31]  ? __pfx___schedule+0x10/0x10
[  791.020377][   T31]  ? schedule+0x91/0x360
[  791.026082][   T31]  schedule+0x165/0x360
[  791.054772][   T31]  schedule_preempt_disabled+0x13/0x30
[  791.060308][   T31]  __mutex_lock+0x7e6/0x1350
[  791.064948][   T31]  ? __mutex_lock+0x5bb/0x1350
[  791.090193][   T31]  ? rfkill_unregister+0xc8/0x220
[  791.095313][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  791.100830][   T31]  ? __pfx_device_del+0x10/0x10
[  791.105815][   T31]  ? __cancel_work_sync+0x5c/0x110
[  791.111174][   T31]  rfkill_unregister+0xc8/0x220
[  791.116173][   T31]  nfc_unregister_device+0x96/0x300
[  791.121613][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  791.127568][   T31]  virtual_ncidev_close+0x56/0x90
[  791.132947][   T31]  __fput+0x44c/0xa70
[  791.136984][   T31]  task_work_run+0x1d4/0x260
[  791.141824][   T31]  ? __pfx_task_work_run+0x10/0x10
[  791.146969][   T31]  ? kmem_cache_free+0x197/0x620
[  791.151997][   T31]  ? do_exit+0x6c0/0x2310
[  791.156472][   T31]  do_exit+0x6c5/0x2310
[  791.160658][   T31]  ? do_raw_spin_lock+0x121/0x290
[  791.165993][   T31]  ? __pfx_do_exit+0x10/0x10
[  791.170617][   T31]  do_group_exit+0x21c/0x2d0
[  791.175344][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  791.180658][   T31]  get_signal+0x1285/0x1340
[  791.185273][   T31]  arch_do_signal_or_restart+0x9a/0x7a0
[  791.190853][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  791.197382][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[  791.202883][   T31]  exit_to_user_mode_loop+0x87/0x4f0
[  791.209314][   T31]  ? rcu_is_watching+0x15/0xb0
[  791.214089][   T31]  do_syscall_64+0x2d0/0xf80
[  791.219922][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.226061][   T31]  ? clear_bhb_loop+0x60/0xb0
[  791.230828][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.236766][   T31] RIP: 0033:0x7ff9f978f749
[  791.241200][   T31] RSP: 002b:00007ff9fa691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  791.249748][   T31] RAX: fffffffffffffe00 RBX: 00007ff9f99e5fa0 RCX: 00007ff9f978f749
[  791.257845][   T31] RDX: 000000000000001c RSI: 0000200000004a40 RDI: 0000000000000007
[  791.265837][   T31] RBP: 00007ff9f9813f91 R08: 0000000000000000 R09: 0000000000000000
[  791.273899][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.282479][   T31] R13: 00007ff9f99e6038 R14: 00007ff9f99e5fa0 R15: 00007ffde50e8a68
[  791.290590][   T31]  </TASK>
[  791.293668][   T31] INFO: task syz.4.2998:14920 blocked for more than 143 seconds.
[  791.302561][   T31]       Tainted: G             L      syzkaller #0
[  791.309082][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  791.317825][   T31] task:syz.4.2998      state:D stack:24464 pid:14920 tgid:14913 ppid:11881  task_flags:0x400040 flags:0x00080002
[  791.329938][   T31] Call Trace:
[  791.334449][   T31]  <TASK>
[  791.337400][   T31]  __schedule+0x14bc/0x5000
[  791.341920][   T31]  ? __pfx___schedule+0x10/0x10
[  791.347457][   T31]  ? schedule+0x91/0x360
[  791.351714][   T31]  schedule+0x165/0x360
[  791.356022][   T31]  schedule_preempt_disabled+0x13/0x30
[  791.361511][   T31]  __mutex_lock+0x7e6/0x1350
[  791.366678][   T31]  ? __mutex_lock+0x5bb/0x1350
[  791.371719][   T31]  ? nfc_dev_down+0x3b/0x290
[  791.376488][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  791.381533][   T31]  ? do_raw_spin_lock+0x121/0x290
[  791.386671][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  791.392693][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  791.398035][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  791.403790][   T31]  nfc_dev_down+0x3b/0x290
[  791.408377][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  791.414118][   T31]  nfc_rfkill_set_block+0x2d/0x100
[  791.419354][   T31]  rfkill_set_block+0x1d2/0x440
[  791.424232][   T31]  rfkill_fop_write+0x44b/0x570
[  791.429460][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  791.434839][   T31]  ? security_kernfs_init_security+0x260/0x290
[  791.441129][   T31]  ? rw_verify_area+0x255/0x4d0
[  791.446008][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  791.451694][   T31]  vfs_write+0x27e/0xb30
[  791.455990][   T31]  ? __pfx_vfs_write+0x10/0x10
[  791.460766][   T31]  ? __fget_files+0x2a/0x420
[  791.465528][   T31]  ? __fget_files+0x2a/0x420
[  791.470146][   T31]  ? __fget_files+0x3a0/0x420
[  791.478531][   T31]  ? __fget_files+0x2a/0x420
[  791.484157][   T31]  ksys_write+0x145/0x250
[  791.488561][   T31]  ? __pfx_ksys_write+0x10/0x10
[  791.493581][   T31]  ? do_syscall_64+0xbe/0xf80
[  791.498296][   T31]  do_syscall_64+0xfa/0xf80
[  791.502929][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.509143][   T31]  ? clear_bhb_loop+0x60/0xb0
[  791.513855][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.519970][   T31] RIP: 0033:0x7ff9f978f749
[  791.524425][   T31] RSP: 002b:00007ff9fa670038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  791.533160][   T31] RAX: ffffffffffffffda RBX: 00007ff9f99e6090 RCX: 00007ff9f978f749
[  791.541239][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  791.549664][   T31] RBP: 00007ff9f9813f91 R08: 0000000000000000 R09: 0000000000000000
[  791.557802][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.566110][   T31] R13: 00007ff9f99e6128 R14: 00007ff9f99e6090 R15: 00007ffde50e8a68
[  791.574257][   T31]  </TASK>
[  791.577311][   T31] INFO: task syz.1.3004:14943 blocked for more than 144 seconds.
[  791.587635][   T31]       Tainted: G             L      syzkaller #0
[  791.594295][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  791.603069][   T31] task:syz.1.3004      state:D stack:28152 pid:14943 tgid:14942 ppid:13857  task_flags:0x400040 flags:0x00080002
[  791.615118][   T31] Call Trace:
[  791.618415][   T31]  <TASK>
[  791.621890][   T31]  __schedule+0x14bc/0x5000
[  791.626571][   T31]  ? __pfx___schedule+0x10/0x10
[  791.631475][   T31]  ? schedule+0x91/0x360
[  791.635839][   T31]  schedule+0x165/0x360
[  791.640042][   T31]  schedule_preempt_disabled+0x13/0x30
[  791.645786][   T31]  __mutex_lock+0x7e6/0x1350
[  791.650407][   T31]  ? __mutex_lock+0x5bb/0x1350
[  791.655254][   T31]  ? rfkill_fop_open+0x12d/0x820
[  791.660221][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  791.665517][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  791.670806][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  791.676372][   T31]  rfkill_fop_open+0x12d/0x820
[  791.681176][   T31]  ? __pfx_rfkill_fop_open+0x10/0x10
[  791.686544][   T31]  misc_open+0x2d5/0x350
[  791.690812][   T31]  chrdev_open+0x4cc/0x5e0
[  791.695224][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  791.700291][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  791.706967][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  791.711966][   T31]  do_dentry_open+0x7ce/0x1420
[  791.716828][   T31]  vfs_open+0x3b/0x340
[  791.720961][   T31]  ? path_openat+0x33f3/0x3dd0
[  791.725749][   T31]  path_openat+0x340e/0x3dd0
[  791.730433][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  791.735830][   T31]  ? stack_depot_save_flags+0x40/0x850
[  791.741505][   T31]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  791.747250][   T31]  ? getname_flags+0xb8/0x540
[  791.752052][   T31]  ? __pfx_path_openat+0x10/0x10
[  791.757033][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  791.762075][   T31]  do_filp_open+0x1fa/0x410
[  791.766701][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  791.771874][   T31]  ? _raw_spin_unlock+0x28/0x50
[  791.777270][   T31]  ? alloc_fd+0x64c/0x6c0
[  791.781613][   T31]  do_sys_openat2+0x121/0x200
[  791.786589][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  791.791891][   T31]  ? rcu_is_watching+0x15/0xb0
[  791.796975][   T31]  __x64_sys_openat+0x138/0x170
[  791.801930][   T31]  do_syscall_64+0xfa/0xf80
[  791.807409][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.813502][   T31]  ? clear_bhb_loop+0x60/0xb0
[  791.818286][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.824332][   T31] RIP: 0033:0x7f8c6cf8f749
[  791.829627][   T31] RSP: 002b:00007f8c6de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  791.839217][   T31] RAX: ffffffffffffffda RBX: 00007f8c6d1e5fa0 RCX: 00007f8c6cf8f749
[  791.847308][   T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  791.855532][   T31] RBP: 00007f8c6d013f91 R08: 0000000000000000 R09: 0000000000000000
[  791.864444][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.872735][   T31] R13: 00007f8c6d1e6038 R14: 00007f8c6d1e5fa0 R15: 00007fffae3447f8
[  791.881088][   T31]  </TASK>
[  791.884138][   T31] INFO: task syz.2.3005:14946 blocked for more than 144 seconds.
[  791.898686][   T31]       Tainted: G             L      syzkaller #0
[  791.905316][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  791.914025][   T31] task:syz.2.3005      state:D stack:27512 pid:14946 tgid:14945 ppid:13540  task_flags:0x400040 flags:0x00080002
[  791.926419][   T31] Call Trace:
[  791.929749][   T31]  <TASK>
[  791.932859][   T31]  __schedule+0x14bc/0x5000
[  791.937517][   T31]  ? __pfx___schedule+0x10/0x10
[  791.942480][   T31]  ? schedule+0x91/0x360
[  791.946748][   T31]  schedule+0x165/0x360
[  791.950904][   T31]  schedule_preempt_disabled+0x13/0x30
[  791.956501][   T31]  __mutex_lock+0x7e6/0x1350
[  791.961112][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  791.966190][   T31]  ? __mutex_lock+0x5bb/0x1350
[  791.970977][   T31]  ? misc_open+0x51/0x350
[  791.975447][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  791.980504][   T31]  misc_open+0x51/0x350
[  791.984670][   T31]  chrdev_open+0x4cc/0x5e0
[  791.989189][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  791.994142][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  792.000579][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  792.005680][   T31]  do_dentry_open+0x7ce/0x1420
[  792.010646][   T31]  vfs_open+0x3b/0x340
[  792.014841][   T31]  ? path_openat+0x33f3/0x3dd0
[  792.019993][   T31]  path_openat+0x340e/0x3dd0
[  792.024649][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  792.030219][   T31]  ? stack_depot_save_flags+0x40/0x850
[  792.035800][   T31]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  792.041745][   T31]  ? getname_flags+0xb8/0x540
[  792.046466][   T31]  ? __pfx_path_openat+0x10/0x10
[  792.051525][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  792.056514][   T31]  do_filp_open+0x1fa/0x410
[  792.061172][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  792.066239][   T31]  ? _raw_spin_unlock+0x28/0x50
[  792.071193][   T31]  ? alloc_fd+0x64c/0x6c0
[  792.075547][   T31]  do_sys_openat2+0x121/0x200
[  792.080219][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  792.085572][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  792.090807][   T31]  __x64_sys_openat+0x138/0x170
[  792.095785][   T31]  do_syscall_64+0xfa/0xf80
[  792.100516][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.106734][   T31]  ? clear_bhb_loop+0x60/0xb0
[  792.111446][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.117559][   T31] RIP: 0033:0x7fcee9b8f749
[  792.122041][   T31] RSP: 002b:00007fceeaac0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  792.130671][   T31] RAX: ffffffffffffffda RBX: 00007fcee9de5fa0 RCX: 00007fcee9b8f749
[  792.139300][   T31] RDX: 0000000000101000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  792.147574][   T31] RBP: 00007fcee9c13f91 R08: 0000000000000000 R09: 0000000000000000
[  792.155594][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  792.163653][   T31] R13: 00007fcee9de6038 R14: 00007fcee9de5fa0 R15: 00007ffe68858378
[  792.171821][   T31]  </TASK>
[  792.174925][   T31] INFO: task syz.3.3006:14949 blocked for more than 144 seconds.
[  792.182755][   T31]       Tainted: G             L      syzkaller #0
[  792.189424][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  792.198214][   T31] task:syz.3.3006      state:D stack:28152 pid:14949 tgid:14948 ppid:13034  task_flags:0x400040 flags:0x00080002
[  792.210334][   T31] Call Trace:
[  792.213641][   T31]  <TASK>
[  792.216759][   T31]  __schedule+0x14bc/0x5000
[  792.221726][   T31]  ? __pfx___schedule+0x10/0x10
[  792.226640][   T31]  ? schedule+0x91/0x360
[  792.230911][   T31]  schedule+0x165/0x360
[  792.235636][   T31]  schedule_preempt_disabled+0x13/0x30
[  792.241129][   T31]  __mutex_lock+0x7e6/0x1350
[  792.245838][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  792.250824][   T31]  ? __mutex_lock+0x5bb/0x1350
[  792.255948][   T31]  ? misc_open+0x51/0x350
[  792.260311][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  792.265580][   T31]  misc_open+0x51/0x350
[  792.269783][   T31]  chrdev_open+0x4cc/0x5e0
[  792.274403][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  792.279369][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  792.285759][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  792.290718][   T31]  do_dentry_open+0x7ce/0x1420
[  792.295724][   T31]  vfs_open+0x3b/0x340
[  792.299819][   T31]  ? path_openat+0x33f3/0x3dd0
[  792.304677][   T31]  path_openat+0x340e/0x3dd0
[  792.309560][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  792.314991][   T31]  ? stack_depot_save_flags+0x40/0x850
[  792.320671][   T31]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  792.326438][   T31]  ? getname_flags+0xb8/0x540
[  792.331260][   T31]  ? __pfx_path_openat+0x10/0x10
[  792.336253][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  792.341426][   T31]  do_filp_open+0x1fa/0x410
[  792.346201][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  792.351406][   T31]  ? _raw_spin_unlock+0x28/0x50
[  792.356296][   T31]  ? alloc_fd+0x64c/0x6c0
[  792.360780][   T31]  do_sys_openat2+0x121/0x200
[  792.365592][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  792.371168][   T31]  ? exc_page_fault+0x82/0x100
[  792.376040][   T31]  __x64_sys_openat+0x138/0x170
[  792.381025][   T31]  do_syscall_64+0xfa/0xf80
[  792.385560][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.392099][   T31]  ? clear_bhb_loop+0x60/0xb0
[  792.396819][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.404028][   T31] RIP: 0033:0x7fc6c718f749
[  792.408479][   T31] RSP: 002b:00007fc6c7f42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  792.417171][   T31] RAX: ffffffffffffffda RBX: 00007fc6c73e5fa0 RCX: 00007fc6c718f749
[  792.425227][   T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  792.433217][   T31] RBP: 00007fc6c7213f91 R08: 0000000000000000 R09: 0000000000000000
[  792.441333][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  792.449547][   T31] R13: 00007fc6c73e6038 R14: 00007fc6c73e5fa0 R15: 00007fff05228da8
[  792.457713][   T31]  </TASK>
[  792.460783][   T31] 
[  792.460783][   T31] Showing all locks held in the system:
[  792.468788][   T31] 2 locks held by ksoftirqd/0/15:
[  792.473837][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  792.484519][   T31]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  792.494582][   T31] 1 lock held by khungtaskd/31:
[  792.499667][   T31]  #0: ffffffff8e341a60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  792.509806][   T31] 2 locks held by getty/5580:
[  792.514540][   T31]  #0: ffff888034c5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  792.525088][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  792.537080][   T31] 3 locks held by kworker/1:9/9308:
[  792.543769][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0
[  792.554308][   T31]  #1: ffffc9000f93fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0
[  792.571301][   T31]  #2: ffffffff8fa181e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  792.582790][   T31] 2 locks held by syz.4.2998/14914:
[  792.588777][   T31]  #0: ffff8880330e3100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300
[  792.598824][   T31]  #1: ffffffff8fa181e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  792.609103][   T31] 2 locks held by syz.4.2998/14920:
[  792.614373][   T31]  #0: ffffffff8fa181e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  792.624659][   T31]  #1: ffff8880330e3100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290
[  792.633784][   T31] 2 locks held by syz.1.3004/14943:
[  792.639141][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.647737][   T31]  #1: ffffffff8fa181e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  792.658057][   T31] 1 lock held by syz.2.3005/14946:
[  792.663380][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.672024][   T31] 1 lock held by syz.3.3006/14949:
[  792.677246][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.685761][   T31] 1 lock held by syz-executor/14952:
[  792.691261][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.699898][   T31] 1 lock held by syz-executor/14954:
[  792.705266][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.713789][   T31] 1 lock held by syz-executor/14956:
[  792.719080][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.727599][   T31] 1 lock held by syz-executor/14958:
[  792.732893][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.742057][   T31] 1 lock held by syz-executor/14964:
[  792.747627][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.756252][   T31] 1 lock held by syz-executor/14966:
[  792.761553][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.770102][   T31] 1 lock held by syz-executor/14968:
[  792.775416][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.783979][   T31] 1 lock held by syz-executor/14970:
[  792.789440][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.797958][   T31] 1 lock held by syz-executor/14976:
[  792.803248][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.811823][   T31] 1 lock held by syz-executor/14978:
[  792.817129][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.825693][   T31] 1 lock held by syz-executor/14980:
[  792.831065][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.839562][   T31] 1 lock held by syz-executor/14982:
[  792.845083][   T31]  #0: ffffffff8ebb81e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  792.853745][   T31] 
[  792.856254][   T31] =============================================
[  792.856254][   T31] 
[  792.864901][   T31] NMI backtrace for cpu 0
[  792.864919][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  792.864944][   T31] Tainted: [L]=SOFTLOCKUP
[  792.864950][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  792.864961][   T31] Call Trace:
[  792.864969][   T31]  <TASK>
[  792.864978][   T31]  dump_stack_lvl+0x189/0x250
[  792.865004][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  792.865023][   T31]  ? __pfx__printk+0x10/0x10
[  792.865064][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  792.865092][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  792.865117][   T31]  ? __pfx__printk+0x10/0x10
[  792.865149][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  792.865176][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  792.865202][   T31]  sys_info+0x135/0x170
[  792.865221][   T31]  watchdog+0xf95/0xfe0
[  792.865248][   T31]  ? watchdog+0x20a/0xfe0
[  792.865278][   T31]  kthread+0x711/0x8a0
[  792.865304][   T31]  ? __pfx_watchdog+0x10/0x10
[  792.865326][   T31]  ? __pfx_kthread+0x10/0x10
[  792.865350][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  792.865377][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  792.865404][   T31]  ? __pfx_kthread+0x10/0x10
[  792.865426][   T31]  ret_from_fork+0x599/0xb30
[  792.865455][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  792.865490][   T31]  ? __switch_to_asm+0x39/0x70
[  792.865536][   T31]  ? __switch_to_asm+0x33/0x70
[  792.865554][   T31]  ? __pfx_kthread+0x10/0x10
[  792.865576][   T31]  ret_from_fork_asm+0x1a/0x30
[  792.865614][   T31]  </TASK>
[  792.865623][   T31] Sending NMI from CPU 0 to CPUs 1:
[  793.022222][    C1] NMI backtrace for cpu 1
[  793.022243][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  793.022265][    C1] Tainted: [L]=SOFTLOCKUP
[  793.022271][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  793.022281][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  793.022307][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d0 22 00 f3 0f 1e fa fb f4 <e9> c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  793.022321][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  793.022338][    C1] RAX: 6893547b94027000 RBX: ffffffff8197d83a RCX: 6893547b94027000
[  793.022355][    C1] RDX: 0000000000000001 RSI: ffffffff8daa54ce RDI: ffffffff8be251e0
[  793.022367][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[  793.022378][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fc3cc70
[  793.022390][    C1] R13: 1ffff11003adcb70 R14: 0000000000000001 R15: 0000000000000001
[  793.022402][    C1] FS:  0000000000000000(0000) GS:ffff888125ae6000(0000) knlGS:0000000000000000
[  793.022415][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  793.022428][    C1] CR2: 000056152e932468 CR3: 000000000e13a000 CR4: 00000000003526f0
[  793.022446][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  793.022457][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  793.022468][    C1] Call Trace:
[  793.022477][    C1]  <TASK>
[  793.022483][    C1]  default_idle+0x13/0x20
[  793.022499][    C1]  default_idle_call+0x73/0xb0
[  793.022516][    C1]  do_idle+0x1ea/0x520
[  793.022530][    C1]  ? irqentry_exit+0x5ba/0x660
[  793.022553][    C1]  ? __pfx_do_idle+0x10/0x10
[  793.022573][    C1]  cpu_startup_entry+0x44/0x60
[  793.022587][    C1]  start_secondary+0x101/0x110
[  793.022606][    C1]  common_startup_64+0x13e/0x147
[  793.022629][    C1]  </TASK>