last executing test programs:

2m26.8606486s ago: executing program 0 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (fail_nth: 5)

2m26.766235872s ago: executing program 0 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x14)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]})
syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r2, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r7, 0x0, 0x1004000, 0x0, 0x0})

2m26.247980562s ago: executing program 0 (id=56):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025002100190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2m26.118096169s ago: executing program 0 (id=57):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x230)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

2m25.920180736s ago: executing program 0 (id=59):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x505841, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x40946400, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2m25.842734802s ago: executing program 0 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de94000040"])
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m10.699066701s ago: executing program 32 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de94000040"])
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

16.646719193s ago: executing program 3 (id=881):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000000)=0xc)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x72}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {"060400"}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000001000000000001"}, 0x80000001}}}, 0x118)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x4, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0xe0, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0xffffffffffffffff}, {0x0, 0x2ab9, 0x0, 0x3}, {0x0, 0x11, 0xff}, 0x0, 0x0, 0xa, 0x1, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'tgr160-generic\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0)
setuid(r1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000004503"])
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r10, 0x0, 0x0)
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690100000109021b00010000000009040000010e01000009058103"], 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r12, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
sendmsg$nl_crypto(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000120001"], 0x118}}, 0x4048850)

15.14060431s ago: executing program 3 (id=891):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r4}, 0x18)
getpeername$packet(0xffffffffffffffff, &(0x7f0000002180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000021c0)=0x14)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000080)={0x1d, r9}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002280)={'ip6_vti0\x00', &(0x7f0000002200)={'ip6_vti0\x00', <r10=>0x0, 0x4, 0x1, 0xb, 0x7, 0x45, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x6, 0x682}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'\x00', <r11=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002bc0)={@private1, <r12=>0x0}, &(0x7f0000002c00)=0x14)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r13, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r15=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r13, &(0x7f0000000100)={0x2c, 0x0, r15}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="d1597187a7a48cc1641d6bdd9ebf3a214a13210b5199ea1167a7c4c8cfc5fe8782315da2a1ecf49e90eaf13d3d0c38fb8723e6f118a19b50da6f5c565f00061688f2a464dd81a554f81f6944e1bb7c4440c3cc642f9966f793dd1a934a0acfa171d88ed5802206f6a51798d4661e3795114d76eb8be226e4e67480842225864d1dd89eaaa025a23ff910bbb6a888c528817b232b8bbfa0f2d730212996413490bebb04ede6ee95c0a4f90e1770858a83bda01c91a1114e2a4436ac32b03582334a9af5799e6502b4c41c4c1b", 0xcc}, {&(0x7f0000000040)="7053dec6e4b97105fe16e4af682dd12e7c95441d90f28718c6010c1868070a", 0x1f}, {&(0x7f0000000240)="565056681b49f7715053b9cc9984e845db960b82ebe7f474ed1c2e3b53126d40b46c5e30801551e19cee16b117edc07df534c9a1ac68b235fe7c48d8e72c7e85ea24dff04d89f0cc2bbeba28e32a52e01029c8f957a57037a14cb0f0a23fb781f8e823e8", 0x64}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000007f0000010000000011000000000000000000000001000000990000000000000014000000000000000000000002000000ba0000000000000011000000000000000000000001000000020000000000000011000000000000000000000001000000030000001c00000000000000000000000800000000000000", @ANYRES32=r4, @ANYBLOB="64010101ffffffff00000000780000000000000000000000070000009404000089070ee0000002441082d00000008b000000070000000644184c800000000700000004000000000000084c000001018307ecac141429440c46400000000200000009831f9aac14140cac1414aa0000000064010100ac1414bb64010102ac1414bb000000140000000000000000000000010000000600000000000000"], 0x2a8}}, {{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000680)="71c6e4c7383aea4b1a1b5fd448e749286f4d620f2d2f75253d60a8cdaf94b6b358d65d99ee4b5746b0bdd845740ff6d2f63b5ab59e8422e534cd9b9d78c6de1b54c9f6be0ad7cb3a99b1ba466e3f238a083ec7d65935ff6c23749f24db", 0x5d}, {&(0x7f0000000700)="2a41647bb8c83cc9fb64e7689de34b", 0xf}, {&(0x7f0000000740)="f887", 0x2}, {&(0x7f0000000780)="4a0469aeea23da24232056b2e48220a93d2f719502ff845e92849499ea998864c072613246fd8bf6be93835649a0d7a9b396e99b704349cf700db48a7b3d137334d84b5085d79ade9ff1dfcb813ef2c1bbea11266aa3af1ffecb9ebc9ac3f6aaef95550ddfef45729e094dc854bc7f6fddc19ac554b0c1a50e1e5c6992c0", 0x7e}, {&(0x7f0000000800)="6ac5f45948442eb8bc95973c1ae7a2d71fff69ad5d1e4f09d172cc85753af7560f2073965c09781a6722eb8e58285b7f32ddebfb354bbfca3bd1eeacdb2b36c8a8d8cef02f849be951ca2ebb4bc72ae55531986411b8b12289808341947c821695c0d5868c001a8ab11b2f76bba6ebda9c4cf26055df40bdde26e50854e57dcd04927ff153bf6d0c671b6d5c348c6fd067da08918dd3c764fe313c5975f972e673ff3c35a5370d6e01dc5f0a81ef5a0b0ba9f571714a0820b2895f82254f6b619f4a09c83dee9af3c727d5a16f0fd543edc1068ec41e409c911b33648f044f6f", 0xe0}, {&(0x7f0000000900)="08ae35b372853b6cc35156ff258e147b02f7635befe737e6b5963e90c6b3cf5a2df70d9beed73439be686dbd1d041fb5713539e6ef6acdbb78e40c0b5c14cd0f6ecda8e4a99c4fabae83245d1aaa11f537b536320dfdcbbe27c5d3c8da5e318ac3218b7a05f1fc44894e1b0f2703d5fdd6babfab33169b047bbb39ff086be7f3ed3c781523e86d47bc7b7fc89d31f5951e6ed6298ad7142a5ca631cb293b4419a2f40b9398943cc0d354ab2b2e8bddd7f30149916447c2d10ce05772a39d027780576bee1b2df5ef473040340b982e46ab75c8c216acc9b2b840805b7d80aaced13a985a33611605174a621866c587b3a6ac89f8b2", 0xf5}, {&(0x7f0000000a00)="94f0ed5ad9ad9cab2a69e84161f34300b68539417ee18213f48c0dc837071f26054cb5177186c15a798eee21ee723d81878d3ff227b04f3f9d76c77ea9a361b077d1dca2956855a58c0b14d9d8ce354ffa6aa6c8f66d3a37b31eeda7b04758e96fa42e14f26fb7f1e57d27d53b5bc6207ba734b18a7523863a84c79a99625a8f057721fb7aedf82f461be97867c8add81e625e101e07d495500b8b82e695b4f3bdf773d5d7bda48bf127e6f091adc2", 0xaf}], 0x7, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf36c}}], 0x30}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000002100)=[{&(0x7f0000000bc0)="8939088d789cb13784c4b356c9cc6eb4d2ac8f537332db406e5e2c5bf7ca720a23b17a55395a471e5afdc82f1df94478066519955fcd621ce3215fbdc1b4b52d38fd304c4092309d75aff720b57e1eb7b82b9a7cc913662aa7f5a6c1221b7c32ccc3960ed378d2", 0x67}, {&(0x7f0000000c40)="f9a19172b9177d8c11ba45d179021f86a61f8f566fe369aa4cb06af3029adffeb916b5066343e6e8d1602debb31c3bc5a453a306ebbae948d816bd72417cb6ba37fb6459d0507d4820b671ce9b19f772343e0099a369648001d8e2358325bc2b6eba25ec174362f9f0351e35406377e1548d80e9b3dc40285af4ee5c6bea68574ddc0f2f91e961da67b9c7cbae0c36b70eb278a9043188c723d0497e32f13955d313a8afc824a4024e2b76e6e46eb3038c5188be618c23a8d5192b885d38e69f2a55963ce414ff2e4413e9751a1b720529f6bbfad038", 0xd6}, {&(0x7f0000000d40)="7ddd219e6efc3a93035bc42c3685a4ec4c7a368278ceb6e303b8e3c4ca2c81eeb02892c61f6a28502442cce94e6d641eca70ea7eea0b08ef5f6618255fc40784c3af05800df30de180cc2c02994d51ecada4aef4b820194038f7371a57cff3b109674c12b968f1dd16da64616448d769c789faf3c90af6ad5fabb4996dc745c6c95ad27e12ead314caa7553e30757859daa717847d8f63f364286024ca6150a0a07c771fb007a5f647fc37da985968fd954fb47de7919d08d75132b5cc6e2974001b225ab38357b388a070d84a4c723f8b98f65651549866f21b7d45192f308435c12bdaa16526d9640e2d4a53b4099966c7ed2be0bde7", 0xf7}, {&(0x7f0000000e40)="bc7c3302b304137c6c5db61afe7afdfc15c8d7b01684daac539fbb4208775cd8912bb56f8e3265e82c6d073c820dadcf27989776bcd562e204d2347e968448efb5d70dffe8ba5824b708d8e7d3380d59aa912cc5dd9ce4911221632e", 0x5c}, {&(0x7f0000000ec0)="3482593b977d9e2d40d54c69671839f5b616eed2836a6f7a1dcd76baae0fb3ff3157972d28dfe63d3f5bbb9aa003973ed164cb16fad8ff0b9ad3d59e9991f3a4211639a8dbc129c4cda9b2647c4979a86b8ba30bb333b0cd8c30945b76abf9994ee8f2c3e1317eba08903033a1c8986d30218333148ee0e6ceb73b5226b896b32243da3dcb4e4b21c01c1b137cc3528cdf33c0a8122065a36b018e5283bab4594dc1", 0xa2}, {&(0x7f0000000f80)="0efd87c332d793380ac45f57eda6de0e696dcbde2a78946d29b0f2a70146509ed4e6cd59de45d811151b1f0ca1b5d0b8bebaa94bcc9a200bc9d3956b31b3bb404bd600ea3f3db9d3a8eb1a85d3c9d73b44fba4cd3fd37bde11caf30729e30b7cbc5b790630811e9ec256256660b9dedf83ca1963c34d1a1f4b1bf2", 0x7b}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="10d84f23696933cbabb29cf7ab68d097e922879b1d9086ffdbb06a0012ebb7064752d034d918eb3c36cf94e08914fc7bc33e639f8008549fe9f3a9dd716b3c3ccc8a30e57dadc25118bbb9d71df1e1ab79cdfea7716b09afc40dfb8094a84577ef5ac3147ac33c1d9fdc8333c463a0c97f69955593a96c8d9b6304da0db8fdba66e5c59811da57da2671af79312b95ebe733243bfb78f67e0755d71246b4db4c89b2de74dfad172dce7433a912e465438740a34d166c744e3584913bd86cd32cb2db29964a7a7001427d9ecc007d68c670adb18db2c39ad1ad3b98155f0b8b8c431b14fac3e13a353e8c3e", 0xeb}], 0x8, &(0x7f00000022c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xa8}}, {{&(0x7f0000002380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002480)=[{&(0x7f00000023c0)="c3850f382693666570de25a206e486fe697d02bc6e3650ddcbc9c45e966c00148c39aa5e42bb835b901edf04e7bc295b4859d6", 0x33}, {&(0x7f0000002400)="9045011e020ac5c4a1e46d3e712b033d26260f91ad1768c1ba583386638dc74a0d37519c680a9e691ae1ad84b938283745bdbee301a0e5e1fb6210c0ee2f22a6a1e290df80417e921fbe98142bd05f829917909115bf87bf402c5c1e4fbd71a33b40afe3b2a334bf", 0x68}], 0x2, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010101, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x38}}, {{&(0x7f0000002540)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002580)="ff8de27570e3d7306af282d26592d0c094ed9371e4", 0x15}, {&(0x7f00000025c0)="da6931416f735fd127f0722cfd7790e61e0de0fc6e4c03e7335b8102cec0e15aaf5ec09e813470ac17ebcbd992004a904036796274476aadc7036c54f34d26425ff4dc0690d5b2de0cc4cf3719d96ecf08edd179883116319527e52f7dd1e47910ff582da1d6a8dcaf3415edfa3d53f047b5c081860f68d0df7bb6a882fc82281ed3ccb8f090a43322f5796861482810099d9224ea01a4fbf22716b83930ceba498756d01a3a758a25500b7223735d0b4c6cfd", 0xb3}, {&(0x7f0000002680)="901101764397a1f4a9fee4b83d7f2b1c08655b84f78b9b2b5938f1efa6ab9c124e5023b535564f57625a4bcb66cbd4982ccd4ac7125f9f0cae538882414ea18dae1ef5effa0dabeae82977208b0690d8d2b3b0083302313b5fd17264dced64227647b81f926cd0204408cab3dde27e29740010ef02c17b72926c68d631e457f49421725189edbfe3b462ccc86d677cf64cb4082ea26fd21b95705685df4da07c4e715ad06c295dc2302278ecfb6f8a78267953cbe72251d9d52d435b233ecfbfa7db9f34444d148da4b86026db63876b9666395d7e7316b94d5ff4e7982b4e5c91b8c05b9fd8ab1ccc84a1287d960ca62b00444cfe3427", 0xf7}, {&(0x7f0000002780)="bc688a6096dfdb5af863c23775609a831add1a14", 0x14}, {&(0x7f00000027c0)="e94487d9d05feb02e04f8020481e9437ea12e03e30b3d37116f7d4f146917e0db060e4a36579f5f945eb2a4ca74966b7eb665ff3e2bf21a5c6e31a9700d661cedb7b133fb87f4f2628d95ad32e3b501328718b53f57c92e8fe8767cfe79eca6c246ab93c32b410568c50d2ddf676df1fb32c2249e1be4c9a84b03a7ec47a910993af54c6fad096131e554f9bd2fa4db6e1a19c9f8659c0ce70d988c64ec0004d7662ccfd6aa0eda94e3058e86abc8d5f59d4", 0xb2}], 0x5, &(0x7f0000002900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000002940)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002980)="5d6aa6b171c03dfbac54d1ed2801013b9e7c8f93b9b11aec", 0x18}, {&(0x7f00000029c0)="a205c823d7c127297b7c050b1ad11314952b373ebb8b8e0d51bc75c951e239db5fa124b07a9265fa2f5ccde11420b31c3811d9c2c85adf8c489f78dbe47ab489f9db48357a00d8779cdd9547b042cc41fa66e1bff1dc3b72d216561d2cf233e1f980f86772cf51beabe0ac284d0ae017dafe", 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a80)="ef20d5cad9ee2d136cf9ec1b90d9a00f8c8a166aa157", 0x16}, {&(0x7f0000002ac0)="8fa3ac697b3e81e8ed6ca02306f289205229afff83a96272e5b9c08b3fe0552baacc0066ead59fd1c1b99240d4b6752b7037480695f438cd8ae5f673020d3b6793318e7049d7974a28759e9c5bbee851990761de105058cdb901c1ebad5c410545f8a6218b0c15838c56ad5131331e8ea45072956fe9b8f07ce23d64c16de22c7dee9d2b8c0f4bcc56da395d2c365364eadf1a5ac0d25b654a1982b208143fe60cbb17b3efe36d46151b4109084b47866e", 0xb1}], 0x2, &(0x7f0000002c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x6, 0x9, "df74a4eb069c7c"}, @lsrr={0x83, 0x7, 0x17, [@remote]}, @noop, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}], 0xe0}}, {{&(0x7f0000002d40)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="84ca93fdc3c845c42b", 0x9}, {&(0x7f0000002dc0)="48eb2e1f34ce9bd4d05da7c2ce15c8fe08408a37668f772c0c92b56dfd2befa70b66147386c1ebb66ad3d35a83f19f2d3946e9a51fd36f7e33ca4f8d02468dd8080d8309a69334792f636cf8ae422cc795f0a74dfb6c", 0x56}, {&(0x7f0000002e40)="7e7959c83bf8f431fe0846a9f8281ba9114129ff4dc2f024598a4d1a099c1047e0d83c54df7c9ff6a08fe5ecd9d9fd04d4de93bcda6f8c8f85bc9072cdd70b9ec742c579aa46a0bf3b5d396e0aaf3a5d", 0x50}, {&(0x7f0000002ec0)="2f82c27ee8889bce863bfa79850b5583a2269e6e9363a225f649fdbb4bcd12f5813da16587e885b42ed815a104e0a9f1d428d8940c45e2b46d51e524457319308c205c311dad89bdb6ea2164d7cdc9aeee4f173a3e9bc3569c3748577a49dae7c20b9397278425d4244307fb100012a8d336082a278c", 0x76}, {&(0x7f0000002f40)="bcba2accc5b880567efe5791746e769ddd2c8927ffb6c77b7cfc385347980dc7b89c05d0954dc74884f16929fda4d51713e18ac1f6169d3d3366c33a9fe3a59af216a8e2dc", 0x45}], 0x5}}, {{&(0x7f0000003040)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000003140)=[{&(0x7f0000003080)="cbaaadd0fa20eb645db88a42f832630259e3ea8342687ae33fc0a49d415a1eb32d87ec7753d6c949d6a94172396c5e729044907df6c5f39551cce47bf3654d43d7ffb2897223663307e02ea3cfcc7041b6bd3ff654036fcd9512666d3839890f1764168a278c8d6cbdb29ad3c9e1e13117105d77b2701a30ce34cf292870c27b7798b70ef50e90830f5b230c2fd4b8a294a438981dc3355404c5478a12916d1fc056", 0xa2}], 0x1, &(0x7f0000003180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x453}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x98}}, {{&(0x7f0000003240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000004340)=[{&(0x7f0000003280)="c4d64a", 0x3}, {&(0x7f00000032c0)="233b98495c31f5e1490f21ca7ca6742ec268b4bd2ee3fdcedc119452f0ce90", 0x1f}, {&(0x7f0000003300)="0817443ec03c0b6766f42ad59cf412a32c9c4c8487e6481e2e3a73c03ff09955239b3a756552a4", 0x27}, {&(0x7f0000003340)="26efed0e3e620e0e7b40283d68318affa47cc0777be7b96bf7af480f37574c25e32ddd6cd269f0f92912a9159f9d21a6fdf464990a85f55f4c742881f1526d97e6bc1f558e307d4659ab334164ff338595310909081ab1a6ae55722635f8465d8e67c1f0a0d1d73c0b5032d3a7a8db188af633e4bdd6023ee92e1d764b4491f0e51d248d555a15091bf59daa214116135003b59e02402ae6b4a3572d9cabf285ed5321b230a9a8fd1c8460f302bd7b2c411cabaff8b2fb118c1bbc3159fbd1b31c06ef3bebe8f4189fda2f4c73be7e976759d3fd56c11e7b39aadf352124a9a21aa86b953b2d75cf60c92f2a66090c3c0c3eb727b508bac9da7fea4b20e801d4d466d6e8d376b529a275b30e5ffb8431609f4782efa10d006c1be3f3e8150285208fe11d2f052ab19e5ab2a2f322db8f8e5d101c2c7607325448c6d69c8b14757dc73e3a424cf72eccabe7b8c681cf645dd951702173ac70aba6ef0b401689a6a9fb6410e937be80731f9729e475ee9b61fd355603063f107695604a37bd3302a51862f09658aacc1fca603487a9bc4360004df3c225843e7add711442d8500c21e187c4fa254c5abb6c46ecd1d544104922a725777734bb8e89a420496619994984d5a10844c601566e5abbe096749cf28516d637c576c85917dec3d9c958972ba284465e8e8873bc2b09ef645175c57b755ecb635188ee9cbca46880bd25e5e0bf2569101fc09e7de1b1594fe5be4b09e585fa236bc0115a9756fd1e81c600d8d4ce09eaa45e3be369e9bf047c68f253b0f97945371d6fef5f97bd095a1706652a5222c0581353b6dc2f0ef4cbc68735bdb7d89065e832a331fd8b471358f6534ae890d2308127b0d4e4573ccb162d236a72e0f8a3a2b530bb2fcf80309ad2c83e6a07c0f30069231faaffe7586430f709b16d768bb7f740474c5187f440a2ff7f55dc243f6bdde9ad1ed614765ee53d2aea8fdfabccfbb02d937be41833d2770b1348f74fb4400bc05d4bc9247fa48f7c6893780a82b02f74e5a5ff718659b917136c314ccf91bef6c2ff05f0dca99be041868789743d171458a59b57d763199c288e740b4ea473fcafa626fbea67018c6e1e1b0b304dba39120b552099db52f82171e2178460ec8ae4c9bb9c192e5aabd224cb091f97e6c39f0be4ad1e829bbf4535a7ba067d381f89fdc6159623441c52072b7a22edd3a12750f7f69f9aed0ca68a4e458f8aa757405d86cb45b8969acdd831df30ee4294c7cc6d3e5036bd0487a2e522544110e25d22f15cc02830d95b967ec82654b1e9f6478bfbcde2f73644f4b96db984a2280013d357599d7c51f0774fd0af1784d8b95fed9e1d08e1a23bd4c79d2c3f1a475777f0d3b394d0ad62164f365f2ad56c0a9408fd2724bcf26dffeb22d6a27b90a96c4fbcb4e75a070bd592b58a496f300b04d855fcfe8a22a43bacd3e430aa5d002a7bdf672186c1c2a006a9c6dd2e171df80c409433ebd72d7662e20d87bc14f4f2a1c9bc8b6069cf583658e0dd77cb4ebd93143444d0def131b3537ddbc3efb3035d5a7399f8f98aa9862fa9a33adc8809bbecfa77e26a866326ec199fce85fb7635b542a8807306caf60f57ea21fd545ede4dcc1d8d64a4b87c901b14572c54cb48d531a4e7b77eccd9039144a0a79f677c0962255382fb1bef921bdc30e0f8ea12518303a0af0ed45aa1a05db6a0b348262b4dace864e1c2a7d1f760eb6830f52a03cc4072548233786a535cfb4917d8a88ba57bd23ab5220a4fa0834a806cf2ed6d2e1f2e6e5fe38aa31917e9c8e230618f5eb466b0e32f14fd9374f78d06207b373b3a2975b284e778cf945d3dd8e442aeb2df2c9909b9f0bae9d29e8b63e71d8be424b0546aa581e5933cfba1baf464272375a373d500a506ea9fd439cb53ad6fbdcf24126578bb289094f01b954e5a34bd8d362088ffb4d5d41c9fe982af05a553fc035188a26f5739d3d9e1905096ce9094a1a1e4e8e17a6f437405c710fbf87b26c85f8870c19c2701d7f63738796758cd632dec2587e081ca642aa5657d132ca642a68a2795127fef7d5730efe0b1ec710f463a5d19e92c47b4f6fd3a146be4e347b63c12a2d7bf39f5b2349d347b3a8944faf66855ccab633e596c093469b4d6542dd133ea30a4516c40c8f7edbb4f2555726219514428bc3feadbb587ba2dda05562733ffc415184db0edf3be98401cdc644a792213b8eadcb5b5c9b7f542838c8eaf58f04fe5bf3fa9206ce444b0a1161d5356c858870ecda40d09b0190e7d7cae4868b630505acfe03ea4a9aa6e47f1c94e124c9f583af1f045102ec255434ef8c18ea87bb30234bce28fef99d83fd330c8eb857cdef5e8ced4321a525af1fd70fa1b41c258e70fc3c35a242f3c4c05ba913cc33f77eaf18afa9592ed0050c6edd673553083bba7ec346052788a0f10c909b113aeb24e7478ce66a5225a6ce41510306c71d34d450955dc87e0897147eb6eb9a2bdeb1766497e7d73661f2141c2c6d06be7104c0bdec0e912968f08585048c0c5060cd432652bda4971beefd56447bcbbf1a2de5cf33201e1d567163fe719ce04f62401807da617f68ad9b2715f98c2e37570b334f38d5e555d7115be41b0baa890d32f40ab9b0dd91264de0f7601defae16f71d6afd56f990fce752e60dd5d654aa448e8d600badbe5e498bca34e358b1c34b578cad488bfe0a181dd58b2b149924e518e98a3001bd3be89943ed649d118b9da96a3c3385a3dc8fd64d370a0222b622d21da1671cae1fe615e6b334c6454d3670686d955c9507a36714fec8b48294d23a52a9b3906a5748e60996b79084c818b2f05c9643436b7fb0ec9fdf2abdbb448530c1950d4030752d1d05b3055cabec30d9e82f8e4cc33834e2ee84db1edb27476b1443efc3e3dd2aee377ded345f58a2c63540c8c35e2cd360fc161a5e73957d4592d466dc5b9aecc7cf9bba6c4301ab3b51bdb9231141dac67c7ee8e8ed8af0ca0fcc1c70933c6438f759bea4ce23f7008a289c92938b951718f5223229eaf5bb1645d29c7e9d4cc5593dd217b62f1f8d5c9be521b01c1fc061c70494306116b2e938c7e02642d0f8cb1a2012e518dfbae048745cb74d4a6e7949ea15827867fa4ad735169bb45acad3b27d07286320d5f7ec01b3928f02bac7d80ecbc8fc4584c9707171e94c92f32de9506fc2c82e088b98bd3dfe548be2884f1f5e7426a590337e3b78f27b46b09e43eb503c2c40b17673d80114f0c0c620c1f6fcdb5af4d073315e5e51dfa7025a13e7e34a85961aa1196b6874d4e9bb8948b8c85936a03fbcaf92fe7a1c7e2473f2ed279357e602a36b527f636019a3a359c7892db966332338f41b25356e0733733d59fdae48dcc8a0e5857118c178b503aa2f72115a49be3ecfa87190d1d992d4b44c500faa38eb3453390dd29bbe62498d4467ce36f9fedc0492cce722095c900e5b9f63b04f88ce8e9f017226fc0465933d45e923896bcdd9aa9aa844aa7c68e8011cafd355513468320dee9a68a0aa17175ba6e080d1a5aa500d1e59379e2089c2171088e2cd457e7b9a07121e1e32727544dba1a8388d45f9168798695725509aec1d90d1c3c9121808d8c88dca9066a1731e49e2288321f7e73ae7840af70744235bc36265cfc65601c8e4a5db0ea68cb584d83fde4183b2b15aee707319cd80e10c36fcc60fe30e6e3af90e03aea0a87c1898b797a0bb82e4807d2f66a8a673755e835e52a185b7535a184c9c1e82088145195d10b874d9629c06f8f69238097824d78f9a77021dd544f1cdffad2337d1cd554d0d5200aec3fa9a5b4a1ca5c046030998b7a80f25e497bdae883578fbe6902dc01ba54f11cb65ab2e45c31a51514ce9adb208507d262fcf5dafae9b11ec126af9ab23d0e6df4ab3f39672b1cd367b343d2cc6c76a7c2ceecb0ea2b4ba332dd3622b852594ce7b0fed284e45679e249691e0bcea0d4660e611a3314ae3134417eba908efaddc63939c3047a79f0493e431de2a36b476f9e5af5c09b2d04078d08ce2d741bf9294bc028f3b6e6944d38d63d88b8f72173d4d76cf927831a786ac7a6b0178e579b4eb8741ff0eecd4bcca0f2b7fb1c073b556ade15da571ce7a3f068fa10fd786fa6c725073f1dc8e175fca767c20e9be4c578031af6a91402854842f3d657c3a437975c0ecd4b68fc7dff8a85fc1741edd9e4db511a5d379bc362cc1abc3245b42aee121b59f669a3f6cf661012ac03a8cee6031ffe28c62bb9697ec71b0d20df809522263eafb11964b463dfe5ceeb96af9163d13c7198b6d65231931699441ae263b5b1cfe542de36d5c30aa242716e5671452bb7b8b40b1ae026fca6774b58b1b628a9b325782e6a96910113aed9c76cc4436475ef335f524c5d7787a43c2d03183dfe5dbc9e0c96badd25152dbc6b4b2ca4501a0b344f68bc5e12e74a5f9af96949c202d545f485870337d2981be3232b627b8a071fb1eaef2824d67990b6b396194f8a1c8dd81eca4d6560701906b90477106f0b75166572e1bfa3ed2449cbcdaa9ff304b9d77152a84123bd3a733417d24618540df287f67a953e2a6048bfcf4f65b852b220d0a98de4753168e739f4b0fa3ce10bbb39c8dbed5da8d5c3185e5027a096ab14a4b211eee9f86170fc608ff559bccc866d358983ead10d953b64332e2e41d1c84f61cdb18575e2bff4cbe60d408e4e45bb388f18fcbef9cb203bcd76d1cdcd82a6f600ac0378da474d8bb0115ad2e79fde0449cf0f80a28406a62c6e814856e7a22418caed2f660a1ab402684a01ee7c43b872307e61146c691db088a794ee7db986c82cb2bcb06efb149d5d70340a877240189232af5e551de62fdcf57a515ef507d1cc8f1ee92f10a957b47c8f241ae1ecf7c1805a9a64c7e2f72ef60459aeeda2fb99b7c461f92038c6d1230d7d249f1703c0d07b58892ca937c235e5a0d99279ae75b24665b6b29ee529bdd439561039a49de2eea10eae5efbf01805c380b7e0309dfcf98c9b3c1b7947d0b498305de7a5e846ad9d9907586e5d41c2b84986f8bb869b2cbfe67a17b54e8b65dd952b1c7c89e3ca290dae06e74004aa3144152148a2c40067c8b2235acb9f98f886ec24bd1bb923575bdc70b2efc10beb4c5341e42e9dfb175116697768e019ff2d39d3b72f633249496ecf65d24d8de0255107c21573efd06bddae4968415b9f085ddf826ea4fe14622423bd5083e963741d04412c400b76cb19604ba5cc28daa4aa537e5970cc4cec474da7b5711b9cbad4bf110def3cc5e6916c32123a2a54c16a4bb5e3e4175f5a626afac9a7690102aba34fd559eb5f7bb58e25c1c955968ac9bb9d85ef42fc184cccee6f464bad57205d9e040efbf55a13256e6bfb8e1c28f398a0d48a20425868e7bb6c4b898c09830628c9a58120d2b1d99f86b14eb43f40008ef9b0fb757fb5c97d6da03d85ae3fb801f2ba4cb163015e0123210f656a0df00fa64b9ac47f26034afa624aad9c38fe13a7141b9353bb6c650bac8d925881ddc5cf00aa9053b64a97a5a9b2e24f8f07853da446f13e1455dda5619bd29b5de120bfd36dbbf0a6ab251b360ede46ff5e8c85e67e4561edd53518236b88417866d351ace3907c7145cecced23107cc8c21d6c88d7d666a04ab6f2b66097df7247ef906f04a92e0441f5d9a628a80d483278689f95855b6f00c86bfdb2f07343c3358184b8407c62e56a1a3b1bb38b919a872da3d8710dc2a4806bff6a658f43181f1e5ea860bd3c0a53656f553c09cbef325799ec196390", 0x1000}], 0x4, &(0x7f0000004380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x1d, 0x0, 0x5, [0xff2, 0x100, 0x2, 0x10, 0x2]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x7, [0xa000000, 0x4, 0x2b59]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x70}}], 0xa, 0x24008800)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r16, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7fffffbf}, @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x800)

14.704017462s ago: executing program 3 (id=895):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000010300000009210000080122070009058103000081000100"/40], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3409000005060300000000000000000005000009850001000700000009797a30000000000900030073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
rt_sigaction(0x13, &(0x7f0000000040)={0x0, 0x44000007, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000080))
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)

11.578355882s ago: executing program 3 (id=916):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x25c0c, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
setxattr$security_evm(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@ng={0x4, 0x15, "5d4adb66433f82c8561a1d4c8a54f6"}, 0x11, 0x0)
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sr0, 0xee00, &(0x7f0000000140))
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

11.349710529s ago: executing program 3 (id=919):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x30, r1, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0)

10.654793498s ago: executing program 3 (id=923):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0xf5ff}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

10.500466514s ago: executing program 33 (id=923):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0xf5ff}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

4.00566202s ago: executing program 5 (id=949):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x4c8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x401, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0xc}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x78, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd48}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x153}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c0754", 0xd6}], 0x1}, 0x20004804)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x401}, 0xe)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02000486b2060905", @ANYBLOB="b8"], 0x0)
pipe(&(0x7f0000002cc0)={<r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x7, &(0x7f0000004440)={0x1, 0x0, 0x8, 0xcfc1})
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902120001000000000904"], 0x0)

3.506832959s ago: executing program 2 (id=953):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x800)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 51)

3.329081249s ago: executing program 2 (id=955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xa0}}, 0x0)

3.303619062s ago: executing program 1 (id=956):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040020000000000000", 0x39}], 0x1)

3.179362122s ago: executing program 2 (id=957):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r2 = semget$private(0x0, 0x6, 0x40d)
semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r2, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semctl$GETZCNT(r2, 0x1, 0xf, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4)
sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
capget(&(0x7f0000000140)={0x20080522, r6}, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x3, 0xed9, 0x4})
getgroups(0x2, &(0x7f0000000100)=[0x0, <r8=>0x0])
setresgid(r8, 0x0, 0x0)
r9 = syz_clone(0x10828400, 0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x24, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x5c6}}, 0x5, 0x9, 0x0, 0x80, 0x18, 0x3, 0x44}, &(0x7f00000002c0)=0x9c)
kcmp(r9, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x0, 0x20)
openat$cgroup_ro(r11, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0)

3.036030186s ago: executing program 1 (id=958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32, @ANYBLOB="14001a801000db800c00ac8008000100627066"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)

2.439597989s ago: executing program 5 (id=962):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x298}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="d9"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r3, 0x4b4a, 0x0)

2.167988505s ago: executing program 5 (id=965):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00000000000040dd40000000a42800048008fd014000000012080001400000e7ff1300030069703667726574617030000000000000140000001100010000000000"], 0xa0}}, 0x0)

2.141635231s ago: executing program 2 (id=966):
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080))
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec2}, 0x40010141)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.135909444s ago: executing program 5 (id=967):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) (fail_nth: 4)

1.829814977s ago: executing program 2 (id=968):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0x400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xb, 0x80, 0x2, 0xbe3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x1, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x4, 0x12f, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x9, 0x6c7, 0x1000, 0xc0fe626c, 0x3, 0x0, 0x2007, 0x492e0401, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x4, 0x6, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0xffffffff, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x9, 0x38, 0x8, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaeb, 0x4, 0x25], [0x9, 0xbb31, 0x6, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x101, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x3, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x9, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000040)=0x1f)

1.757495664s ago: executing program 5 (id=969):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xc4, 0xca, 0x85, 0x10, 0xb48, 0x300d, 0xd4cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x0, 0x39, 0x6e, 0x3}}]}}]}}, 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000180)='./file1\x00', 0x142)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x25440a, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]})

1.462262941s ago: executing program 1 (id=970):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040021000000000000", 0x39}], 0x1)

1.339679457s ago: executing program 1 (id=971):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)=@newae={0x54, 0x1e, 0xb09, 0x70bd2d, 0x25dfdbfc, {{@in=@multicast1, 0x4d3, 0x2, 0x6c}, @in=@broadcast, 0x6, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0xfff}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x28000000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d03, &(0x7f0000000040))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x4d4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x429, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x12}, {0xc}, {0xc, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2})
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001114080026bd7000ffdbdf25080003000200000008003e000300000008004b002600000008004f00010000000001000000000308004f00000000000800030000000000080003000400000000"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x40)
close_range(r5, 0xffffffffffffffff, 0x0)

1.339398083s ago: executing program 2 (id=972):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = dup(r0)
getsockopt$inet_buf(r1, 0x118, 0x26, 0x0, &(0x7f00000003c0))
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_connect$uac1(0x0, 0xe6, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x6, 0x20, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xad}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x1, 0x5, 0xff}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x873, 0xa0, 'u'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3b6e, 0xc0b1, 0x6, "797b98310279"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x60, "b72eaa5af9ce804c90"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xeb, 0x2, 0xc, 0xf4, "d834f0a4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x86, 0x6, 0xa5, {0x7, 0x25, 0x1, 0x0, 0xd, 0xc463}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7400, 0x4, 0xf8, "510fda"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0xc1, 0xe, 0x8, "2f2a97"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0xce3, 0x10, "d08ba3ed4cb376"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x1, "", "967e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x2, 0xa, 0x8}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0x9, 0xa, 0x20, 0x9}, 0x29, &(0x7f0000000040)={0x5, 0xf, 0x29, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x40, 0xf000, 0x2, [0xc0, 0x6000, 0xff0000]}, @generic={0x9, 0x10, 0xa, "71bba46478b7"}, @ptm_cap={0x3}]}, 0x5, [{0x6b, &(0x7f0000000340)=@string={0x6b, 0x3, "e74b840f9ef85e479122eb8e780db18436b6e6597a7afbc8cc22e87782490d2a7e89de6c265e245523590789fec9e522a1ff3e61fbd5379e41c9921e437c0a900633eb419e555c0b9bf057a989454906a72a3984294464200574a6a1ecee55d4d7b3bae6387413bd51"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x422}}, {0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "7756f5bedea7d34482240dff4bdf6c4591fcd9d4eb243da4263dcf11bf8eb5d7445ad46d4bfe294cb9c4e48fd8ea5d9057717156182196dfe843749d704e1173fef1b8a036fa3555839c807ac255600ee1f9801e8f581dc469f73fa576123a41e0e3c82bfa75378eba34996bdd72caabefe883670ff19e7672775788df3e1c8e51566c2096e5829508199c180ecb0eb13c15c8838405328e7295ee74263f84d6fc836864319338170e02663eae0eead6fd235908b0fb95a93c5f799aa6446f08d92c7ece19c8c6cca140adb92dd4427336ab4931159d94298d63"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x415}}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x72b, 0x0, 0x327}, 0x14}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0xfffffffffffffdd1, &(0x7f00000000c0)={0x20, 0x0, 0xca, {0xca, 0x31, "330d44d8f7a9f677339d1fe8e07956cd56546f08f610897d70ac7ad189b8fba9161ca86d0cc55b994ff382ff0d324378f949982aeb917ad168424c668c72ce011fea5e12a49e4bdee85530c9c6922cd0ec97e31b62ee2c448da06dd6a86c73052be47b9c96a07d280904882540dcdbf58e9ecd47e832d4ade6e8e72d7d1daa7098201b9c28f628145ba56d7e3032ec7aedd1dd842052a891da779f210e63dfef27d62f5ab7409706e9d32e22c26926f0369bf13783f7a185a629f79adaab4eb4b14a178e3ac28d57"}}, 0x0, 0x0, 0x0}, 0x0)

1.306325129s ago: executing program 1 (id=973):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x12b000, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x458)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000001040)=0x80000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x20000091)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000001080)=0x1a, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000030200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600ffffffffffffffff3235dc7e977221f83c3f179e65022fc09a4dd73867b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470f71f00000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000300000a624fb0223d74318256b027d0dd7a670ad7f56ca7dce6d8b3714c4d0557cb7fef33aeec9994171fcbb386d5baab57aac60fe340c69eb115dda072d3be6ea2285d73464efa480ca70e62acac71cfea4ef407c0024551668141c9e5e90f5ae3cf92cff6dfff8fbf63446508c9b2c8c094fef8a1fb35970179b3b57f942d8a9809c113c157700cf0114856fd981516d92934c3b57edd691db1e6cf8f3d218d5d0d699d043bff5328557b521226aa9813f4b50e0aebbbff65e2af03ae40c6fb451ceeca16a5a490ef268c6eb7a8f05c33a431c6798c3d9b3ca1293d11ca242ea60f4152e6f10b3e1e6e7eec22a86affe41bc28f96d6cdc3d9e21a223ae947dd52ec2ab90e5f20872ad6cd57b1be05416bd88fabf63ebac878e5f3add1457dcfb502a99da31531b2a6d12ab86089fc8c9e558dc6894bc68c29969d4b15bcad526620ae98b36822e3981653f8ef8c39"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r9, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
read$char_usb(r11, &(0x7f0000000040)=""/4092, 0xffc)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
connect$can_bcm(r1, &(0x7f0000001100), 0x10)
ioctl$KVM_SET_PIT2(r13, 0x400caed0, &(0x7f0000000040)={[{0x3, 0x81, 0xff, 0x0, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xa, 0x19}, {0xfffffffc, 0xf3f, 0xfe, 0x7d, 0x8, 0x4, 0x2, 0x4, 0x2, 0x2, 0x10, 0x42, 0xf000000000000000}, {0x4, 0x4, 0x13, 0xfc, 0x5, 0x7, 0x8, 0xd, 0x2, 0xf4, 0x3, 0xe, 0x7ffffffffffffffc}]})
socket$kcm(0x2, 0x3, 0x2)

1.128141776s ago: executing program 4 (id=975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a010300000000000000000500000009000100"], 0xa0}}, 0x0)

975.957397ms ago: executing program 4 (id=976):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f004000170a001700000000040037000b00030001332564aaee7b1d7694e97311f6bbf44d", 0x39}], 0x1)

752.136965ms ago: executing program 4 (id=977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000000000000000f00170000006c000680080001000f00000008000600090000000800060005000000040005000800060009000000420004"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

639.682181ms ago: executing program 4 (id=978):
keyctl$invalidate(0x15, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "7b2e8278ff996500b2f61d819f6a72e2e1f65db87f523ce15718af47814e6c9712c4e2652a6abc984ec9a8fcf0b65c1ea2d5fdfb33c6009872d4d73d29b49175", 0x17}, 0x48, 0xffffffffffffffff)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/131, 0x83)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$instantiate(0xc, r1, &(0x7f0000000240)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x2}, 0x2a, r0)
keyctl$revoke(0x3, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "f28bb1028a34c3f47dff498c89dd2b29eeecbfa3835ab103a6719b8dc0bd1281468c15526d670ff16ed3cc99dbbced8939a29ddf287f06dc154d7cd6af888ac9", 0x3b}, 0x48, r1)
keyctl$read(0xb, r2, &(0x7f0000000380)=""/40, 0x28)
r3 = request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='{\x00', r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000003c0)='trusted\x00', &(0x7f00000004c0)=@keyring={'key_or_keyring:', r3})
pipe2$watch_queue(&(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x40)
r6 = add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)={0x1, 0x0, @d}, 0x18, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0xee01, <r8=>0x0}}, './file0\x00'})
keyctl$chown(0x4, r2, r7, r8)
fsopen(&(0x7f0000000700)='ubifs\x00', 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)='fscrypt-provisioning\x00')
keyctl$describe(0x6, r6, &(0x7f00000007c0)=""/4096, 0x1000)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/asound/card0/oss_mixer\x00', 0x84080, 0x0)
r9 = add_key$keyring(&(0x7f0000001800), &(0x7f0000001840)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000001880)='\x00', &(0x7f00000018c0))
r10 = memfd_secret(0x0)
keyctl$KEYCTL_MOVE(0x1e, r9, r3, r9, 0x0)
getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001900), &(0x7f0000001940)=0x4)
request_key(&(0x7f0000001980)='rxrpc\x00', &(0x7f00000019c0)={'syz', 0x1}, &(0x7f0000001a00)='\x8a*+^\xfb\xac:-],-/+]-[{*\x00', r0)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r5)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x160, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6, 0x3, "9525"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8c}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60000}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x27}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
add_key$keyring(&(0x7f0000001cc0), &(0x7f0000001d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000001d40)='keyring\x00', &(0x7f0000001d80)='/proc/asound/card0/oss_mixer\x00')

639.354316ms ago: executing program 4 (id=979):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="e40000001000010000000000000000002100000a20"], 0xe4}}, 0x20050800)

589.454401ms ago: executing program 4 (id=980):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe5}, "82eff92c086563c9d0a07917c5f3e5d95a9c614e3e1f1aa359e3351d43d2950cc9372c6167c947118c7abcd864b7b00de47203f32df52bd48026dde1fd451e5ae5748d6116c19e9ad76e3582dd0293df236cf3ca009a7aacb0406d8dda29050fbedb5981f1048678586ee922576a83d4e6167d801443bbb079f0ca4d66c75ebe3db01ba88c4a81b53122dfce4bf7d243bcec61326213724e2c26e2e3326a0ed59bfbaa08302041f3b83bd6c90a433fb3f006f23285e8c692398af237080eca66b72b8984a1b1525264f37811ab5dab1a6b2d351b2cf34f7fdc5383b7a75ad363caeca81177"}, 0xe9)
close_range(r2, 0xffffffffffffffff, 0x0)

212.572327ms ago: executing program 1 (id=981):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000000)=0x3c, 0x4)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0xdf4f6e410c2156ce, 0xa, 0xe6, {0xe6, 0x24, "ab3c2d4d2a6734aec6c5fd8f1d82190fbf932d3304bd4f3c2c62c9d9fd7e606dd18d2992a33b2238f70dc96fa56e96c644eb98511e579cf532cab52d162a66d577ebfd0bdcd62cb949abb5513ba649fc8c3f0d1f31dfe50a5d4f6f99fbb75c8ca1147bac0a7c1dc7d499ff35342a677ce0b7e137225882ecd679c154bf06029f3c3f42f872c9f6b554a3353325b1fd744d743b53c57acf7f80da2413d158b6de35eac0f142e51d93d4bc9b56e06af70191f9e94ddd514a97a03a93f49ba388314c8a1e8c61880f94ab3f223bf5fe0f3f6409615e22bb498f43800a7b6187a44c0d33f068"}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x30, 0xf, 0xc5, "363ddcb93c0ad90bdada740ae1124ce06db2de1885d2dd4a44308502d34bfdd3784f7ba76754b52efdbc023bb341cfd72d1fb24dd6a2c7156067fad80d0707a11623653efab2a1ee3093f85311341c4734fdb8d621ea7e4fdd984e3e26022557256ff185345ac5cb4c0d2f1fdbd664fa325d28e0407708e7b51ceee7e89c54724022d85ac741482ad7bf6db48a4c40527b8541ad35b8b17e951dd64edd3f4c9d1f3cf73d8e61b557020837c5d23b2526031ed04b94c782767fe6458d84e0924f028bd296d6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x2, "9847"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "c05ad4"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "b0"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "d7ff5b07"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "498ffa"}})

0s ago: executing program 5 (id=982):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0xffffffffffffffff, &(0x7f00000004c0)="ff8257e2dd4e6e695b3bc01628d94dfea10aef76518b28fb28672947bc3f708da3e25f2f028f80f2d63a4b116db6fb23199a3bda6b0eefed4a9853dcde6d5166bc729cd30a3b3eb75a9954242c0d946a3616f6b8966dcd349444b70a588ab1b253e0e43a45955c9893dad02432c7108f6acb3a07a85e55546391d66f5c0c009cc8cabe988f516f13ded34d771dd7c3981c2e5e5682f3b881d8c499a25210796063aa1b9d8f8da8433f27341e45aae54029693d4856cd97532d0338544a00fbb477b2f580c99c65e8cd500aaaaf450930625ad1996d79721f8e639bf6204a621253071d6ceb5b26f62375e827d23ce9dc8e3725f3ce7d2fec9dbdde5efa947568ad3a9f949f75a93c28cc073229e2fa27c21d5c71fa5c2b2d0972d2b526d791215f211ca2b420e291505f65f19b571fcae1843b3eba21d8b73452f6cb34c32670c0399df37d94c2cadb73bb5c11042f4260db6c693a666baa987d275f162029c845a688ed72c90415f3c1ce244fa63ea7037380acd302508cb0c8b6590759f2a75425b2d483b8f07598ca9973305006e21aa4a57293f2d943b7b543d401a736f4216f0476f74edb8a44417321ee471eca9d5089ceda7add1e365fcb69df27861ef589345234bd19be2e8ceb04fb6ab7b231f376ad344029c8b806f5e3da26b6abcc1c9257d8caea40aa63f44a8eab3a1b29180adf4155da05794ebdfa473bb5701821b42da5d11b8bc83c98c73450e45e051301338e56e431ccc4e324eeffb3359c631a8fcfa802cab18ed1dff097fc3d99538176018802da9a4eb144adc1a2135d03de1a9a83eb3ce09636f1c30382fc9005a25de37c6e093e18394441d9f32fc5b8bd49b7a9cfc7e558944f38631fcbd3341dda789ac52c7c1d088b63c034e18a62a3833b54f427c7fbd9230f027d0b4290ff1ee372a63a0eeca778e182b6c254b777afaed2a933dc0bda70e196116c0b18279ae4c58370cefb4bcbaba0f971ab818acf63361271f80783fd31efb7f1e92f91dcb089127d4f04fc4810fb077f7df08b05ffa453089c057d12ba9dbfd2d92a72154b904bc2044406475a080b9dc545b69a6de999192cad6c03a42c7bded956690afa3c24498e0090e2c82f045b11fb93cacff43fb181d76f9269f82f158f6dfc870941c7902d4d84f22952a94f44b7c06cd1287e265083768480979d314a82f6ad97c97088f9bff43185396c2f37309941d28cb996d5454b62273b00b54d212ab8a6e2d6d83ab80ebb26ca857eecefd6d1fa5b2c158ce10fa3e2838b1566c5a05ea5140c287abdc70ee736733d44df847cb3a53d81aec948b87c10c5179dc021b216197d42b1046bf1910a5f561394059a64e8da76319d209b72ea48fde52c2e5ed1b4c3c339af608b5723970c169c041495a0ffab47e9772d9816dd212323621ff7d9e70bbedfd97fb9f192e141dea06a64271b8f037765f48e78d3a9ee4f1390144a08cf79f7174b2b2a4a71680da99dc814fb53d67a048b4d7fe2364e87a9c80bf8bdf8b776ba49b91fa3fb3222c5d452f38172f32197139d636dd3684e9701c1ac2df8740d7dbdbf3507b652feb09c7eb35538c5928628816a98724339632898b6bd865bb86a3a61da709d1967b1f960a8ac88670b97fe5223081fd16d65d85afd35c7643e25bc648596e81845e03be19051ecbfb1ae8b1169330443e63d67f922ae7c9ae70e8a916f408bcf5b0ad85be5e1639b4653a455b0d5328a306e7d35291556943928835ba6cbd26088b06ab3c5dc8abf13d2708ed42fda9d16bbe7873bdb0d97ee6158b04ed932d99bd310f1a10cc417984fbb16ca5d9ef96979852fe797ea8b4f43119588ea7f2b791e77c727bb01d6fcf5493be31c34a0f9ea5927da914b57d2c2158754ff6026da8ca96c5e0059fd358975e778f17d26a43711659db685b6fa68f21ba90133181ee904ea5bc659a6e11121e93b14e00cbb09abd9a3fce43855754e5886c6a96dd703321dd8683e5dcb4ad33291f0000b15efbb3a2838dad5ebfdc051fc724cd792da3700d923854adac2a55302b6e06b0ff2770552194aacb4e234c57e996a34dd2810f3b3b984c1e54a35c592258dacf913b0bb32be1b1ba9017a6edb2ec122610168d8613fa237a3dd0b06e6bc329801e6557ebfee56488621b9a6011273ba21936e8cc4bd8ad7e0a7de69756676f3fa4ee92a6fe3bec8828ae0c575217132ff03dd6e0a5ec887abeab6fbdd85cfab59d7f02c8beaf5b036884c6dd3ef33d0a50d7ffa2786d934cfff5a2c6576238389f98382546abe39d7b542667a59335bc60f9c38802db9fd1beff66bef52ef822caffd4ff22a3f50be2c3c4c34ac7ceeb559d1bfd4f6d25f3de1c3ce3abd1530169f0e2bdbd01fb5171403f3d68d2223d0ea41afbc9a2cfb6dfe9b24becfdb9b6e939ce42dd19893c79881db5ab809df1bac712b5a8adedd32dc649e5df0dca39806c0c6b039153c2c1fac10362f3ff55ef2745968ba2627b2a8549d76fa002f88395c660e28a3e05c6042909dcfd577783cc8e5cfacad07f7123322da055559f7888c913b405872e56a394eaa0035d2fdd3aacf0cd27e051c26df919ba8aca1a07c39078360f202b02f465dc7afe5585cc48ab50815a90882a717219cad8d4a8b8c94bbd6341dc89527afa9059850bf569aeb248f1981578892cb0dc418529dd44c3f83d06ab908412d847f556e7e68a1a476240bf3013c4507681f69684d75d90f81ac511f4ea422536918cd9be4efbcc00b6d2c35ce543e8dfc7ce554b3c75be24fdf6542502764601a4425f1e8f984727df7aa877879a4e982bdef3bc4c5e8c68515273fc334528135ea65065db3a7cb23982fef96e08700523e01373a54e4192d9c924290112573f95010c3d29209bf3a358a93737ea302b444477d3ae569f0411aff1a5861e92bd7b1bb443a3281077c404bbf023dbc1b30cb7438ad2fe5ae8edc8d27ed28069695bac05dca0ea309559a46269796e0bc362c19f947e63fb1434aa45e5e302a3b4e19330f67aeddfa195978600bfe6f749125", 0x86d, 0x8, 0x0, 0x1}])
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d6320000000a000000ac1414aa000000000000000000000000053500000303030009000000b4000000070000007f000001000000000000000000000000000004d36c00000000000000fc0100000000000006000000000000000000000000000900010000000080000008000000ac1414aa000000000000000000000000000004d2330000000a00"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
mmap(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x2000000, 0x28011, r1, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000000)={0xeeee0000, 0x1a000})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000ca000000ca11330d44d8f7a9f677339d1fe8e07956cd56546f08f610897d70ac7ad189b8fba9161ca86d0cc5db994ff382ccaf28ebafeed975ff0d324378f949982aeb917ad168424c668c72ce011fea5e12a49e4bdee85530c9c6922cd0ec97e31b62ee2c448da06dd6a86c73052be47b9c96a07d280904882540dcdbf58e9ecd47e832d4ade6e8e72d7d1daa7098201b9c28f628145ba56d7e3032ec7aedd1dd842052a891da779f210e63dfef27d62f5ab7409706e9d32e22c26926f0369bf13783f7a185a629f79adaab4eb4"], 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Engine/Google Compute Engine, BIOS Google 08/18/2025
[  519.314179][ T7903] Call Trace:
[  519.314187][ T7903]  <TASK>
[  519.314195][ T7903]  dump_stack_lvl+0x189/0x250
[  519.314218][ T7903]  ? __pfx____ratelimit+0x10/0x10
[  519.314247][ T7903]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.314266][ T7903]  ? __pfx__printk+0x10/0x10
[  519.314306][ T7903]  should_fail_ex+0x414/0x560
[  519.314335][ T7903]  _copy_to_user+0x31/0xb0
[  519.314357][ T7903]  simple_read_from_buffer+0xe1/0x170
[  519.314388][ T7903]  proc_fail_nth_read+0x1b3/0x220
[  519.314411][ T7903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  519.314434][ T7903]  ? rw_verify_area+0x2a6/0x4d0
[  519.314454][ T7903]  ? __lock_acquire+0xab9/0xd20
[  519.314473][ T7903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  519.314494][ T7903]  vfs_read+0x200/0xa30
[  519.314515][ T7903]  ? fdget_pos+0x247/0x320
[  519.314545][ T7903]  ? __pfx___mutex_lock+0x10/0x10
[  519.314565][ T7903]  ? __pfx_vfs_read+0x10/0x10
[  519.314588][ T7903]  ? __fget_files+0x2a/0x420
[  519.314618][ T7903]  ? __fget_files+0x3a0/0x420
[  519.314642][ T7903]  ? __fget_files+0x2a/0x420
[  519.314677][ T7903]  ksys_read+0x145/0x250
[  519.314698][ T7903]  ? __fget_files+0x2a/0x420
[  519.314725][ T7903]  ? __pfx_ksys_read+0x10/0x10
[  519.314752][ T7903]  ? do_syscall_64+0xbe/0xfa0
[  519.314785][ T7903]  do_syscall_64+0xfa/0xfa0
[  519.314812][ T7903]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.314840][ T7903]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.314860][ T7903]  ? clear_bhb_loop+0x60/0xb0
[  519.314884][ T7903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.314903][ T7903] RIP: 0033:0x7f11a278d5bc
[  519.314920][ T7903] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  519.314938][ T7903] RSP: 002b:00007f11a35cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  519.314959][ T7903] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278d5bc
[  519.314974][ T7903] RDX: 000000000000000f RSI: 00007f11a35cc0a0 RDI: 0000000000000005
[  519.314986][ T7903] RBP: 00007f11a35cc090 R08: 0000000000000000 R09: 0000000000000000
[  519.314999][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.315011][ T7903] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  519.315046][ T7903]  </TASK>
[  519.423801][ T5998] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  519.425502][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.443188][ T5998] usb 4-1: device descriptor read/8, error -71
[  519.488180][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.508198][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.609232][ T6023] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  519.610811][ T5978] usb 3-1: USB disconnect, device number 44
[  519.631428][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.641458][ T5978] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  519.655084][ T6023] usb 2-1: config 0 descriptor??
[  519.722787][ T5998] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  519.763668][ T5998] usb 4-1: device descriptor read/8, error -71
[  519.831083][ T7909] syzkaller1: entered promiscuous mode
[  519.846586][ T7909] syzkaller1: entered allmulticast mode
[  519.872974][ T5998] usb usb4-port1: unable to enumerate USB device
[  520.372378][ T7926] netlink: 'syz.4.761': attribute type 4 has an invalid length.
[  520.485470][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.496615][ T7932] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  520.518513][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.724988][ T6023] usbhid 2-1:0.0: can't add hid device: -71
[  520.748291][ T6023] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  520.765453][ T6023] usb 2-1: USB disconnect, device number 35
[  520.958377][ T7940] netlink: 9 bytes leftover after parsing attributes in process `syz.1.765'.
[  520.969007][ T7940] 0ªî{: renamed from 
30ªî{X¹¦ (while UP)
[  520.979661][ T7940] A link change request failed with some changes committed already. Interface 
30ªî{ may have been left with an inconsistent configuration, please check.
[  521.103630][ T6027] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  521.262679][ T6027] usb 3-1: Using ep0 maxpacket: 32
[  521.270537][ T6027] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  521.283929][ T6027] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  521.300128][ T6027] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  521.315899][ T6027] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  521.330002][ T6027] usb 3-1: config 0 interface 0 has no altsetting 0
[  521.333582][ T5998] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  521.339182][ T6027] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  521.362536][ T6027] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  521.371123][ T6027] usb 3-1: Product: syz
[  521.375422][ T6023] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  521.375979][ T7949] netlink: 'syz.4.769': attribute type 10 has an invalid length.
[  521.384214][ T6027] usb 3-1: Manufacturer: syz
[  521.396182][ T6027] usb 3-1: SerialNumber: syz
[  521.403699][ T7949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.769'.
[  521.413900][ T6027] usb 3-1: config 0 descriptor??
[  521.424623][ T6027] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  521.437241][ T6027] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  521.492740][ T5998] usb 2-1: device descriptor read/64, error -71
[  521.552615][ T6023] usb 4-1: Using ep0 maxpacket: 8
[  521.559203][ T6023] usb 4-1: config 162 has an invalid interface number: 76 but max is 1
[  521.567555][ T6023] usb 4-1: config 162 has an invalid interface number: 238 but max is 1
[  521.575979][ T6023] usb 4-1: config 162 has an invalid interface number: 253 but max is 1
[  521.584471][ T6023] usb 4-1: config 162 has 3 interfaces, different from the descriptor's value: 2
[  521.595207][ T6023] usb 4-1: config 162 has no interface number 0
[  521.601470][ T6023] usb 4-1: config 162 has no interface number 1
[  521.607802][ T6023] usb 4-1: config 162 has no interface number 2
[  521.614150][ T6023] usb 4-1: config 162 interface 238 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  521.625369][ T6023] usb 4-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  521.636472][ T6023] usb 4-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  521.647686][ T6023] usb 4-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  521.658592][ T6023] usb 4-1: config 162 interface 238 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14
[  521.671963][ T6023] usb 4-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30
[  521.683302][ T6023] usb 4-1: config 162 interface 253 altsetting 49 endpoint 0xC has an invalid bInterval 139, changing to 7
[  521.695648][ T6023] usb 4-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  521.707810][ T6023] usb 4-1: config 162 interface 253 altsetting 49 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  521.719024][ T6023] usb 4-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  521.730214][ T6023] usb 4-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0xC, skipping
[  521.735582][ T5998] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  521.741319][ T6023] usb 4-1: config 162 interface 253 altsetting 49 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  521.760200][ T6023] usb 4-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping
[  521.771206][ T6023] usb 4-1: config 162 interface 253 altsetting 49 has 8 endpoint descriptors, different from the interface descriptor's value: 131
[  521.784820][ T6023] usb 4-1: config 162 interface 238 has no altsetting 0
[  521.793683][ T6023] usb 4-1: config 162 interface 253 has no altsetting 0
[  521.802689][ T6023] usb 4-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  521.811763][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.819817][ T6023] usb 4-1: Product: syz
[  521.824034][ T6023] usb 4-1: Manufacturer: syz
[  521.828625][ T6023] usb 4-1: SerialNumber: syz
[  521.882620][ T5998] usb 2-1: device descriptor read/64, error -71
[  521.992882][ T5998] usb usb2-port1: attempt power cycle
[  522.053625][ T6023] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  522.087774][ T6023] pvrusb2: Failed to create hdw handler
[  522.106021][ T6023] pvrusb2 4-1:162.76: probe with driver pvrusb2 failed with error -12
[  522.133635][ T6023] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  522.148400][ T6023] pvrusb2: Failed to create hdw handler
[  522.162442][ T6023] pvrusb2 4-1:162.238: probe with driver pvrusb2 failed with error -12
[  522.191729][ T6023] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  522.201049][ T7955] netlink: 5 bytes leftover after parsing attributes in process `syz.4.770'.
[  522.210522][ T6023] pvrusb2: Failed to create hdw handler
[  522.211282][ T7955] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  522.217107][ T6023] pvrusb2 4-1:162.253: probe with driver pvrusb2 failed with error -12
[  522.238610][ T7955] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  522.246142][ T6023] usb 4-1: USB disconnect, device number 43
[  522.332579][ T5998] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  522.364836][ T5998] usb 2-1: device descriptor read/8, error -71
[  522.492436][ T7963] FAULT_INJECTION: forcing a failure.
[  522.492436][ T7963] name failslab, interval 1, probability 0, space 0, times 0
[  522.506556][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.4.772 Not tainted syzkaller #0 PREEMPT(full) 
[  522.506583][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  522.506595][ T7963] Call Trace:
[  522.506603][ T7963]  <TASK>
[  522.506612][ T7963]  dump_stack_lvl+0x189/0x250
[  522.506634][ T7963]  ? __pfx____ratelimit+0x10/0x10
[  522.506662][ T7963]  ? __pfx_dump_stack_lvl+0x10/0x10
[  522.506682][ T7963]  ? __pfx__printk+0x10/0x10
[  522.506723][ T7963]  ? __pfx___might_resched+0x10/0x10
[  522.506745][ T7963]  ? fs_reclaim_acquire+0x7d/0x100
[  522.506774][ T7963]  should_fail_ex+0x414/0x560
[  522.506801][ T7963]  should_failslab+0xa8/0x100
[  522.506825][ T7963]  __kmalloc_noprof+0xcb/0x7f0
[  522.506845][ T7963]  ? __list_lru_init+0xba/0x5c0
[  522.506879][ T7963]  __list_lru_init+0xba/0x5c0
[  522.506913][ T7963]  alloc_super+0x7db/0x930
[  522.506933][ T7963]  ? do_raw_spin_unlock+0x122/0x240
[  522.506967][ T7963]  sget_fc+0x329/0xa40
[  522.506990][ T7963]  ? __pfx_set_anon_super_fc+0x10/0x10
[  522.507011][ T7963]  ? __pfx_ovl_fill_super+0x10/0x10
[  522.507038][ T7963]  get_tree_nodev+0x2a/0x150
[  522.507062][ T7963]  vfs_get_tree+0x8f/0x2b0
[  522.507086][ T7963]  do_new_mount+0x302/0xa10
[  522.507108][ T7963]  ? apparmor_capable+0x137/0x1b0
[  522.507135][ T7963]  ? __pfx_do_new_mount+0x10/0x10
[  522.507159][ T7963]  ? ns_capable+0x8a/0xf0
[  522.507183][ T7963]  ? path_mount+0x61c/0xfe0
[  522.507204][ T7963]  ? kmem_cache_free+0x19a/0x690
[  522.507237][ T7963]  __se_sys_mount+0x313/0x410
[  522.507268][ T7963]  ? __pfx___se_sys_mount+0x10/0x10
[  522.507297][ T7963]  ? do_syscall_64+0xbe/0xfa0
[  522.507324][ T7963]  ? __x64_sys_mount+0x20/0xc0
[  522.507352][ T7963]  do_syscall_64+0xfa/0xfa0
[  522.507378][ T7963]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.507406][ T7963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.507425][ T7963]  ? clear_bhb_loop+0x60/0xb0
[  522.507449][ T7963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.507467][ T7963] RIP: 0033:0x7f11a278eba9
[  522.507485][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.507501][ T7963] RSP: 002b:00007f11a35cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  522.507522][ T7963] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278eba9
[  522.507537][ T7963] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000
[  522.507550][ T7963] RBP: 00007f11a35cc090 R08: 0000200000000180 R09: 0000000000000000
[  522.507563][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  522.507575][ T7963] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  522.507609][ T7963]  </TASK>
[  522.863401][ T5998] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  522.883680][ T5998] usb 2-1: device descriptor read/8, error -71
[  522.992787][ T5998] usb usb2-port1: unable to enumerate USB device
[  523.204879][ T7985] FAULT_INJECTION: forcing a failure.
[  523.204879][ T7985] name failslab, interval 1, probability 0, space 0, times 0
[  523.220145][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.4.781 Not tainted syzkaller #0 PREEMPT(full) 
[  523.220170][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  523.220182][ T7985] Call Trace:
[  523.220190][ T7985]  <TASK>
[  523.220198][ T7985]  dump_stack_lvl+0x189/0x250
[  523.220220][ T7985]  ? __pfx____ratelimit+0x10/0x10
[  523.220247][ T7985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.220262][ T7985]  ? __pfx__printk+0x10/0x10
[  523.220280][ T7985]  ? __pfx___might_resched+0x10/0x10
[  523.220295][ T7985]  should_fail_ex+0x414/0x560
[  523.220311][ T7985]  should_failslab+0xa8/0x100
[  523.220325][ T7985]  __kmalloc_noprof+0xcb/0x7f0
[  523.220335][ T7985]  ? vb2_core_reqbufs+0x904/0x1420
[  523.220351][ T7985]  vb2_core_reqbufs+0x904/0x1420
[  523.220372][ T7985]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  523.220387][ T7985]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  523.220397][ T7985]  ? trace_contention_end+0x39/0x120
[  523.220415][ T7985]  __vb2_init_fileio+0x318/0xff0
[  523.220429][ T7985]  ? _parse_integer_limit+0x1ae/0x1f0
[  523.220443][ T7985]  ? vb2_fop_read+0x101/0x360
[  523.220457][ T7985]  ? __pfx___mutex_lock+0x10/0x10
[  523.220468][ T7985]  __vb2_perform_fileio+0x284/0x1600
[  523.220491][ T7985]  vb2_fop_read+0x273/0x360
[  523.220506][ T7985]  v4l2_read+0x19c/0x2c0
[  523.220522][ T7985]  vfs_readv+0x5a7/0x850
[  523.220537][ T7985]  ? __pfx_v4l2_read+0x10/0x10
[  523.220550][ T7985]  ? __pfx_vfs_readv+0x10/0x10
[  523.220573][ T7985]  ? __fget_files+0x2a/0x420
[  523.220589][ T7985]  ? __fget_files+0x3a0/0x420
[  523.220601][ T7985]  ? __fget_files+0x2a/0x420
[  523.220621][ T7985]  __x64_sys_preadv+0x197/0x2a0
[  523.220636][ T7985]  ? __pfx___x64_sys_preadv+0x10/0x10
[  523.220651][ T7985]  ? do_syscall_64+0xbe/0xfa0
[  523.220669][ T7985]  do_syscall_64+0xfa/0xfa0
[  523.220682][ T7985]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.220697][ T7985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.220707][ T7985]  ? clear_bhb_loop+0x60/0xb0
[  523.220720][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.220730][ T7985] RIP: 0033:0x7f11a278eba9
[  523.220740][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.220749][ T7985] RSP: 002b:00007f11a35cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  523.220761][ T7985] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278eba9
[  523.220768][ T7985] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003
[  523.220775][ T7985] RBP: 00007f11a35cc090 R08: 000000000000000d R09: 0000000000000000
[  523.220781][ T7985] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  523.220787][ T7985] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  523.220804][ T7985]  </TASK>
[  523.632633][ T6023] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  523.794007][ T6023] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  523.802581][ T5977] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  523.807776][ T6023] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  523.821542][ T6023] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  523.834873][ T6023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  523.843934][ T6023] usb 4-1: SerialNumber: syz
[  523.874167][    T9] usb 3-1: USB disconnect, device number 45
[  523.892922][    T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  523.952561][ T5977] usb 5-1: Using ep0 maxpacket: 8
[  523.970494][ T5977] usb 5-1: config 162 has an invalid interface number: 76 but max is 1
[  523.989365][ T5977] usb 5-1: config 162 has an invalid interface number: 238 but max is 1
[  524.000864][ T5977] usb 5-1: config 162 has an invalid interface number: 253 but max is 1
[  524.026861][ T5977] usb 5-1: config 162 has 3 interfaces, different from the descriptor's value: 2
[  524.053203][ T5977] usb 5-1: config 162 has no interface number 0
[  524.058218][ T6023] usb 4-1: 0:2 : does not exist
[  524.062343][ T5977] usb 5-1: config 162 has no interface number 1
[  524.071059][ T5977] usb 5-1: config 162 has no interface number 2
[  524.098556][ T5977] usb 5-1: config 162 interface 238 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  524.107958][ T6023] usb 4-1: USB disconnect, device number 44
[  524.134466][ T5977] usb 5-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  524.175025][ T5977] usb 5-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  524.185502][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.201990][ T5977] usb 5-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  524.202021][ T5977] usb 5-1: config 162 interface 238 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14
[  524.202050][ T5977] usb 5-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30
[  524.202095][ T5977] usb 5-1: config 162 interface 253 altsetting 49 endpoint 0xC has an invalid bInterval 139, changing to 7
[  524.202122][ T5977] usb 5-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  524.202145][ T5977] usb 5-1: config 162 interface 253 altsetting 49 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  524.202172][ T5977] usb 5-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  524.202196][ T5977] usb 5-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0xC, skipping
[  524.202220][ T5977] usb 5-1: config 162 interface 253 altsetting 49 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  524.202247][ T5977] usb 5-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping
[  524.202269][ T5977] usb 5-1: config 162 interface 253 altsetting 49 has 8 endpoint descriptors, different from the interface descriptor's value: 131
[  524.333228][ T5977] usb 5-1: config 162 interface 238 has no altsetting 0
[  524.340193][ T5977] usb 5-1: config 162 interface 253 has no altsetting 0
[  524.349706][ T5977] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  524.359800][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.368327][ T5977] usb 5-1: Product: syz
[  524.372548][ T5977] usb 5-1: Manufacturer: syz
[  524.377141][ T5977] usb 5-1: SerialNumber: syz
[  524.478126][ T8005] netlink: 176 bytes leftover after parsing attributes in process `syz.1.787'.
[  524.604196][ T5977] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  524.612101][ T5977] pvrusb2: Failed to create hdw handler
[  524.640361][ T5977] pvrusb2 5-1:162.76: probe with driver pvrusb2 failed with error -12
[  524.695184][ T5977] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  524.718877][ T5977] pvrusb2: Failed to create hdw handler
[  524.727551][ T5977] pvrusb2 5-1:162.238: probe with driver pvrusb2 failed with error -12
[  524.767265][ T5977] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  524.785091][ T5977] pvrusb2: Failed to create hdw handler
[  524.790710][ T5977] pvrusb2 5-1:162.253: probe with driver pvrusb2 failed with error -12
[  524.818414][ T5977] usb 5-1: USB disconnect, device number 33
[  525.042608][ T5964] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  525.208861][ T5964] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  525.222606][ T5964] usb 2-1: config 0 has no interface number 0
[  525.253242][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  525.271439][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  525.298362][ T5964] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  525.312111][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.344377][ T5964] usb 2-1: config 0 descriptor??
[  525.363624][ T8012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  525.394692][ T5964] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  525.590043][ T8012] tmpfs: Bad value for 'mpol'
[  525.595811][ T6023] usb 2-1: USB disconnect, device number 40
[  525.595822][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  525.603112][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  525.618400][ T5978] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  525.773562][ T5978] usb 5-1: Using ep0 maxpacket: 32
[  525.780247][ T5978] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  525.789645][    T9] usb 4-1: Using ep0 maxpacket: 32
[  525.794885][ T5978] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  525.804325][ T5978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  525.813684][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  525.825360][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  525.835369][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  525.845274][    T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  525.853536][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  525.864528][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  525.874451][    T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  525.885549][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  525.898977][    T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  525.912655][ T5978] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  525.921692][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.929828][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  525.941097][    T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  525.950300][ T5978] usb 5-1: config 0 descriptor??
[  525.955319][    T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  525.963997][    T9] usb 4-1: Product: syz
[  525.968201][    T9] usb 4-1: Manufacturer: syz
[  525.968593][ T8018] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  525.972877][    T9] usb 4-1: SerialNumber: syz
[  525.988095][ T5978] usblp0: Disabling reads from problematic bidirectional printer
[  525.998252][    T9] usb 4-1: config 0 descriptor??
[  526.006920][    T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  526.018765][    T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  526.652792][ T5915] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  526.652877][ T5921] Bluetooth: hci4: command 0x1003 tx timeout
[  526.789496][ T8029] netlink: 240 bytes leftover after parsing attributes in process `syz.2.796'.
[  526.812573][ T5964] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  526.966626][ T5964] usb 2-1: config 5 has an invalid interface number: 1 but max is 0
[  526.976852][ T5964] usb 2-1: config 5 has no interface number 0
[  526.984581][ T5964] usb 2-1: config 5 interface 1 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  526.995541][ T5964] usb 2-1: config 5 interface 1 has no altsetting 0
[  527.007417][ T5964] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=a1.bd
[  527.017861][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.026037][ T5964] usb 2-1: Product: syz
[  527.030223][ T5964] usb 2-1: Manufacturer: syz
[  527.034864][ T5964] usb 2-1: SerialNumber: syz
[  527.152655][ T5885] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  527.259328][ T5964] usb 2-1: unknown interface protocol 0x38, assuming v1
[  527.266402][ T5964] usb 2-1: cannot find UAC_HEADER
[  527.285425][ T5964] snd-usb-audio 2-1:5.1: probe with driver snd-usb-audio failed with error -22
[  527.302966][ T5964] usb 2-1: USB disconnect, device number 41
[  527.325447][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.338316][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.349967][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  527.365963][ T5885] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  527.379160][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  527.387291][ T5885] usb 3-1: SerialNumber: syz
[  527.604699][ T5885] usb 3-1: 0:2 : does not exist
[  527.609691][ T5885] usb 3-1: unit 5 not found!
[  527.631373][ T5885] usb 3-1: USB disconnect, device number 46
[  527.663103][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.409807][    T9] usb 4-1: USB disconnect, device number 45
[  528.458036][ T5978] usblp 5-1:0.0: usblp1: USB Unidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  528.462824][    T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  528.470484][ T5978] usb 5-1: USB disconnect, device number 34
[  528.517977][ T5978] usblp1: removed
[  528.529254][ T8040] netlink: 'syz.2.801': attribute type 21 has an invalid length.
[  528.568831][ T8040] netlink: 128 bytes leftover after parsing attributes in process `syz.2.801'.
[  528.568897][ T8040] netlink: 'syz.2.801': attribute type 4 has an invalid length.
[  528.568913][ T8040] netlink: 35 bytes leftover after parsing attributes in process `syz.2.801'.
[  528.704187][   T30] audit: type=1400 audit(1757499441.610:4): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8046 comm="syz.4.804"
[  529.022726][ T5978] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  529.134331][ T8064] FAULT_INJECTION: forcing a failure.
[  529.134331][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.134380][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.3.809 Not tainted syzkaller #0 PREEMPT(full) 
[  529.134402][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  529.134415][ T8064] Call Trace:
[  529.134423][ T8064]  <TASK>
[  529.134431][ T8064]  dump_stack_lvl+0x189/0x250
[  529.134454][ T8064]  ? __pfx____ratelimit+0x10/0x10
[  529.134482][ T8064]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.134502][ T8064]  ? __pfx__printk+0x10/0x10
[  529.134544][ T8064]  should_fail_ex+0x414/0x560
[  529.134573][ T8064]  _copy_to_user+0x31/0xb0
[  529.134595][ T8064]  simple_read_from_buffer+0xe1/0x170
[  529.134626][ T8064]  proc_fail_nth_read+0x1b3/0x220
[  529.134648][ T8064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.134670][ T8064]  ? rw_verify_area+0x2a6/0x4d0
[  529.134690][ T8064]  ? __lock_acquire+0xab9/0xd20
[  529.134708][ T8064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.134729][ T8064]  vfs_read+0x200/0xa30
[  529.134750][ T8064]  ? fdget_pos+0x247/0x320
[  529.134780][ T8064]  ? __pfx___mutex_lock+0x10/0x10
[  529.134800][ T8064]  ? __pfx_vfs_read+0x10/0x10
[  529.134824][ T8064]  ? __fget_files+0x2a/0x420
[  529.134853][ T8064]  ? __fget_files+0x3a0/0x420
[  529.134877][ T8064]  ? __fget_files+0x2a/0x420
[  529.134913][ T8064]  ksys_read+0x145/0x250
[  529.134938][ T8064]  ? __pfx_ksys_read+0x10/0x10
[  529.134965][ T8064]  ? do_syscall_64+0xbe/0xfa0
[  529.134998][ T8064]  do_syscall_64+0xfa/0xfa0
[  529.135024][ T8064]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.135053][ T8064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.135072][ T8064]  ? clear_bhb_loop+0x60/0xb0
[  529.135096][ T8064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.135115][ T8064] RIP: 0033:0x7ff08b18d5bc
[  529.135132][ T8064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  529.135149][ T8064] RSP: 002b:00007ff08bfc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  529.135170][ T8064] RAX: ffffffffffffffda RBX: 00007ff08b3d5fa0 RCX: 00007ff08b18d5bc
[  529.135185][ T8064] RDX: 000000000000000f RSI: 00007ff08bfc20a0 RDI: 0000000000000004
[  529.135197][ T8064] RBP: 00007ff08bfc2090 R08: 0000000000000000 R09: 0000000000000000
[  529.135210][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  529.135221][ T8064] R13: 00007ff08b3d6038 R14: 00007ff08b3d5fa0 R15: 00007ffe16771348
[  529.135256][ T8064]  </TASK>
[  529.152088][ T8066] netlink: 5 bytes leftover after parsing attributes in process `syz.2.810'.
[  529.152201][ T8066] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  529.158232][ T8066] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  529.162617][ T5978] usb 5-1: device descriptor read/64, error -71
[  529.402747][ T5978] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  529.558048][ T8073] FAULT_INJECTION: forcing a failure.
[  529.558048][ T8073] name failslab, interval 1, probability 0, space 0, times 0
[  529.570756][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.1.813 Not tainted syzkaller #0 PREEMPT(full) 
[  529.570772][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  529.570780][ T8073] Call Trace:
[  529.570784][ T8073]  <TASK>
[  529.570788][ T8073]  dump_stack_lvl+0x189/0x250
[  529.570803][ T8073]  ? __pfx____ratelimit+0x10/0x10
[  529.570819][ T8073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.570829][ T8073]  ? __pfx__printk+0x10/0x10
[  529.570847][ T8073]  ? __pfx___might_resched+0x10/0x10
[  529.570859][ T8073]  ? fs_reclaim_acquire+0x7d/0x100
[  529.570875][ T8073]  should_fail_ex+0x414/0x560
[  529.570891][ T8073]  should_failslab+0xa8/0x100
[  529.570904][ T8073]  __kvmalloc_node_noprof+0x158/0x910
[  529.570917][ T8073]  ? rhashtable_init_noprof+0x4f3/0xbc0
[  529.570932][ T8073]  ? rhashtable_init_noprof+0x145/0xbc0
[  529.570949][ T8073]  rhashtable_init_noprof+0x4f3/0xbc0
[  529.570967][ T8073]  rhltable_init_noprof+0x1e/0x60
[  529.570984][ T8073]  nf_tables_newtable+0x68f/0x1890
[  529.571007][ T8073]  nfnetlink_rcv+0x112f/0x2520
[  529.571039][ T8073]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  529.571061][ T8073]  ? ref_tracker_free+0x63a/0x7d0
[  529.571090][ T8073]  ? __netlink_deliver_tap+0x807/0x850
[  529.571105][ T8073]  ? netlink_deliver_tap+0x2e/0x1b0
[  529.571130][ T8073]  netlink_unicast+0x82f/0x9e0
[  529.571156][ T8073]  ? __pfx_netlink_unicast+0x10/0x10
[  529.571183][ T8073]  ? netlink_sendmsg+0x642/0xb30
[  529.571198][ T8073]  ? skb_put+0x11b/0x210
[  529.571225][ T8073]  netlink_sendmsg+0x805/0xb30
[  529.571241][ T8073]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.571252][ T8073]  ? aa_sock_msg_perm+0xf1/0x1d0
[  529.571268][ T8073]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  529.571283][ T8073]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.571292][ T8073]  __sock_sendmsg+0x219/0x270
[  529.571307][ T8073]  ____sys_sendmsg+0x505/0x830
[  529.571321][ T8073]  ? __pfx_____sys_sendmsg+0x10/0x10
[  529.571337][ T8073]  ? import_iovec+0x74/0xa0
[  529.571349][ T8073]  ___sys_sendmsg+0x21f/0x2a0
[  529.571361][ T8073]  ? __pfx____sys_sendmsg+0x10/0x10
[  529.571391][ T8073]  ? __fget_files+0x2a/0x420
[  529.571404][ T8073]  ? __fget_files+0x3a0/0x420
[  529.571423][ T8073]  __x64_sys_sendmsg+0x19b/0x260
[  529.571435][ T8073]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  529.571451][ T8073]  ? __pfx_ksys_write+0x10/0x10
[  529.571466][ T8073]  ? do_syscall_64+0xbe/0xfa0
[  529.571483][ T8073]  do_syscall_64+0xfa/0xfa0
[  529.571496][ T8073]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.571511][ T8073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.571521][ T8073]  ? clear_bhb_loop+0x60/0xb0
[  529.571533][ T8073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.571543][ T8073] RIP: 0033:0x7f46fdb8eba9
[  529.571553][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.571562][ T8073] RSP: 002b:00007f46fe9fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.571574][ T8073] RAX: ffffffffffffffda RBX: 00007f46fddd5fa0 RCX: 00007f46fdb8eba9
[  529.571581][ T8073] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  529.571588][ T8073] RBP: 00007f46fe9fd090 R08: 0000000000000000 R09: 0000000000000000
[  529.571594][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.571600][ T8073] R13: 00007f46fddd6038 R14: 00007f46fddd5fa0 R15: 00007ffc79bcaf08
[  529.571617][ T8073]  </TASK>
[  529.897667][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.962608][ T6023] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  529.970369][ T5978] usb 5-1: device descriptor read/64, error -71
[  530.041143][ T8077] FAULT_INJECTION: forcing a failure.
[  530.041143][ T8077] name failslab, interval 1, probability 0, space 0, times 0
[  530.053942][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.1.815 Not tainted syzkaller #0 PREEMPT(full) 
[  530.053967][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  530.053979][ T8077] Call Trace:
[  530.053987][ T8077]  <TASK>
[  530.053995][ T8077]  dump_stack_lvl+0x189/0x250
[  530.054017][ T8077]  ? __pfx____ratelimit+0x10/0x10
[  530.054046][ T8077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.054065][ T8077]  ? __pfx__printk+0x10/0x10
[  530.054100][ T8077]  ? __pfx___might_resched+0x10/0x10
[  530.054122][ T8077]  ? fs_reclaim_acquire+0x7d/0x100
[  530.054150][ T8077]  should_fail_ex+0x414/0x560
[  530.054179][ T8077]  should_failslab+0xa8/0x100
[  530.054204][ T8077]  kmem_cache_alloc_noprof+0x74/0x6e0
[  530.054224][ T8077]  ? prepare_creds+0x31/0x6c0
[  530.054258][ T8077]  prepare_creds+0x31/0x6c0
[  530.054285][ T8077]  ? set_default_d_op+0x31/0x1b0
[  530.054306][ T8077]  ovl_fill_super+0x232/0x3da0
[  530.054337][ T8077]  ? __pfx___mutex_trylock_common+0x10/0x10
[  530.054377][ T8077]  ? rcu_is_watching+0x15/0xb0
[  530.054402][ T8077]  ? trace_contention_end+0x39/0x120
[  530.054438][ T8077]  ? shrinker_register+0x124/0x230
[  530.054469][ T8077]  ? __pfx_ovl_fill_super+0x10/0x10
[  530.054491][ T8077]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  530.054517][ T8077]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  530.054543][ T8077]  ? __raw_spin_lock_init+0x45/0x100
[  530.054573][ T8077]  ? __init_swait_queue_head+0xa9/0x150
[  530.054605][ T8077]  ? shrinker_register+0x16b/0x230
[  530.054635][ T8077]  ? sget_fc+0x962/0xa40
[  530.054658][ T8077]  ? __pfx_set_anon_super_fc+0x10/0x10
[  530.054679][ T8077]  ? __pfx_ovl_fill_super+0x10/0x10
[  530.054705][ T8077]  get_tree_nodev+0xb8/0x150
[  530.054730][ T8077]  vfs_get_tree+0x8f/0x2b0
[  530.054757][ T8077]  do_new_mount+0x302/0xa10
[  530.054780][ T8077]  ? apparmor_capable+0x137/0x1b0
[  530.054808][ T8077]  ? __pfx_do_new_mount+0x10/0x10
[  530.054833][ T8077]  ? ns_capable+0x8a/0xf0
[  530.054859][ T8077]  ? path_mount+0x61c/0xfe0
[  530.054881][ T8077]  ? kmem_cache_free+0x19a/0x690
[  530.054920][ T8077]  __se_sys_mount+0x313/0x410
[  530.054953][ T8077]  ? __pfx___se_sys_mount+0x10/0x10
[  530.054983][ T8077]  ? do_syscall_64+0xbe/0xfa0
[  530.055010][ T8077]  ? __x64_sys_mount+0x20/0xc0
[  530.055038][ T8077]  do_syscall_64+0xfa/0xfa0
[  530.055065][ T8077]  ? lockdep_hardirqs_on+0x9c/0x150
[  530.055093][ T8077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.055112][ T8077]  ? clear_bhb_loop+0x60/0xb0
[  530.055136][ T8077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.055154][ T8077] RIP: 0033:0x7f46fdb8eba9
[  530.055172][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.055189][ T8077] RSP: 002b:00007f46fe9fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  530.055210][ T8077] RAX: ffffffffffffffda RBX: 00007f46fddd5fa0 RCX: 00007f46fdb8eba9
[  530.055225][ T8077] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000
[  530.055239][ T8077] RBP: 00007f46fe9fd090 R08: 0000200000000180 R09: 0000000000000000
[  530.055252][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  530.055264][ T8077] R13: 00007f46fddd6038 R14: 00007f46fddd5fa0 R15: 00007ffc79bcaf08
[  530.055299][ T8077]  </TASK>
[  530.082865][ T5978] usb usb5-port1: attempt power cycle
[  530.402577][ T6023] usb 4-1: Using ep0 maxpacket: 32
[  530.410214][ T6023] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  530.418920][ T6023] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  530.443641][ T6023] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  530.465669][ T6023] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  530.492719][ T6023] usb 4-1: config 0 interface 0 has no altsetting 0
[  530.510051][ T6023] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  530.532615][ T6023] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  530.541377][ T6023] usb 4-1: Product: syz
[  530.555301][ T6023] usb 4-1: Manufacturer: syz
[  530.559943][ T6023] usb 4-1: SerialNumber: syz
[  530.573220][ T8084] netlink: 9 bytes leftover after parsing attributes in process `syz.1.818'.
[  530.583329][ T8084] 1ªî{: renamed from veth0_macvtap (while UP)
[  530.591476][ T6023] usb 4-1: config 0 descriptor??
[  530.606663][ T8084] A link change request failed with some changes committed already. Interface 
31ªî{ may have been left with an inconsistent configuration, please check.
[  530.624173][ T6023] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  530.636783][ T6023] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  530.722633][ T5978] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  530.753545][ T5978] usb 5-1: device descriptor read/8, error -71
[  530.997295][ T5978] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  531.163262][ T5978] usb 5-1: device descriptor read/8, error -71
[  531.882939][ T5978] usb usb5-port1: unable to enumerate USB device
[  532.402346][ T5978] usb 4-1: USB disconnect, device number 46
[  532.424832][ T5978] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  532.628682][ T8154] FAULT_INJECTION: forcing a failure.
[  532.628682][ T8154] name failslab, interval 1, probability 0, space 0, times 0
[  532.652384][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.2.840 Not tainted syzkaller #0 PREEMPT(full) 
[  532.652411][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  532.652423][ T8154] Call Trace:
[  532.652431][ T8154]  <TASK>
[  532.652439][ T8154]  dump_stack_lvl+0x189/0x250
[  532.652463][ T8154]  ? __pfx____ratelimit+0x10/0x10
[  532.652493][ T8154]  ? __pfx_dump_stack_lvl+0x10/0x10
[  532.652511][ T8154]  ? __pfx__printk+0x10/0x10
[  532.652543][ T8154]  ? __lock_acquire+0xab9/0xd20
[  532.652573][ T8154]  should_fail_ex+0x414/0x560
[  532.652601][ T8154]  should_failslab+0xa8/0x100
[  532.652627][ T8154]  kmem_cache_alloc_noprof+0x74/0x6e0
[  532.652648][ T8154]  ? skb_clone+0x212/0x3a0
[  532.652683][ T8154]  skb_clone+0x212/0x3a0
[  532.652709][ T8154]  __netlink_deliver_tap+0x404/0x850
[  532.652752][ T8154]  ? netlink_deliver_tap+0x2e/0x1b0
[  532.652783][ T8154]  netlink_deliver_tap+0x19c/0x1b0
[  532.652813][ T8154]  netlink_unicast+0x7fa/0x9e0
[  532.652849][ T8154]  ? __pfx_netlink_unicast+0x10/0x10
[  532.652878][ T8154]  ? netlink_sendmsg+0x642/0xb30
[  532.652895][ T8154]  ? skb_put+0x11b/0x210
[  532.652917][ T8154]  netlink_sendmsg+0x805/0xb30
[  532.652946][ T8154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  532.652968][ T8154]  ? aa_sock_msg_perm+0xf1/0x1d0
[  532.652999][ T8154]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  532.653025][ T8154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  532.653045][ T8154]  __sock_sendmsg+0x219/0x270
[  532.653074][ T8154]  ____sys_sendmsg+0x505/0x830
[  532.653102][ T8154]  ? __pfx_____sys_sendmsg+0x10/0x10
[  532.653133][ T8154]  ? import_iovec+0x74/0xa0
[  532.653156][ T8154]  ___sys_sendmsg+0x21f/0x2a0
[  532.653180][ T8154]  ? __pfx____sys_sendmsg+0x10/0x10
[  532.653240][ T8154]  ? __fget_files+0x2a/0x420
[  532.653264][ T8154]  ? __fget_files+0x3a0/0x420
[  532.653301][ T8154]  __x64_sys_sendmsg+0x19b/0x260
[  532.653325][ T8154]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  532.653357][ T8154]  ? __pfx_ksys_write+0x10/0x10
[  532.653385][ T8154]  ? do_syscall_64+0xbe/0xfa0
[  532.653418][ T8154]  do_syscall_64+0xfa/0xfa0
[  532.653445][ T8154]  ? lockdep_hardirqs_on+0x9c/0x150
[  532.653473][ T8154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.653492][ T8154]  ? clear_bhb_loop+0x60/0xb0
[  532.653516][ T8154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.653535][ T8154] RIP: 0033:0x7f943a38eba9
[  532.653553][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.653570][ T8154] RSP: 002b:00007f943b233038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.653591][ T8154] RAX: ffffffffffffffda RBX: 00007f943a5d5fa0 RCX: 00007f943a38eba9
[  532.653606][ T8154] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  532.653618][ T8154] RBP: 00007f943b233090 R08: 0000000000000000 R09: 0000000000000000
[  532.653630][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.653641][ T8154] R13: 00007f943a5d6038 R14: 00007f943a5d5fa0 R15: 00007ffc05833808
[  532.653681][ T8154]  </TASK>
[  532.945640][    C0] vkms_vblank_simulate: vblank timer overrun
[  533.114876][ T8162] capability: warning: `syz.2.844' uses 32-bit capabilities (legacy support in use)
[  533.202860][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  533.305076][ T8170] FAULT_INJECTION: forcing a failure.
[  533.305076][ T8170] name failslab, interval 1, probability 0, space 0, times 0
[  533.318682][ T8170] CPU: 0 UID: 0 PID: 8170 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) 
[  533.318706][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  533.318716][ T8170] Call Trace:
[  533.318723][ T8170]  <TASK>
[  533.318731][ T8170]  dump_stack_lvl+0x189/0x250
[  533.318752][ T8170]  ? __pfx____ratelimit+0x10/0x10
[  533.318777][ T8170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  533.318794][ T8170]  ? __pfx__printk+0x10/0x10
[  533.318823][ T8170]  ? __pfx___might_resched+0x10/0x10
[  533.318844][ T8170]  ? fs_reclaim_acquire+0x7d/0x100
[  533.318871][ T8170]  should_fail_ex+0x414/0x560
[  533.318895][ T8170]  should_failslab+0xa8/0x100
[  533.318919][ T8170]  __kmalloc_cache_noprof+0x6f/0x6f0
[  533.318940][ T8170]  ? nf_tables_newchain+0xeeb/0x2750
[  533.318966][ T8170]  nf_tables_newchain+0xeeb/0x2750
[  533.319002][ T8170]  ? __pfx_nf_tables_newchain+0x10/0x10
[  533.319056][ T8170]  ? nfnl_pernet+0x23/0x240
[  533.319090][ T8170]  ? __nla_parse+0x40/0x60
[  533.319120][ T8170]  nfnetlink_rcv+0x112f/0x2520
[  533.319172][ T8170]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  533.319214][ T8170]  ? ref_tracker_free+0x63a/0x7d0
[  533.319267][ T8170]  ? __netlink_deliver_tap+0x807/0x850
[  533.319295][ T8170]  ? netlink_deliver_tap+0x2e/0x1b0
[  533.319342][ T8170]  netlink_unicast+0x82f/0x9e0
[  533.319378][ T8170]  ? __pfx_netlink_unicast+0x10/0x10
[  533.319407][ T8170]  ? netlink_sendmsg+0x642/0xb30
[  533.319422][ T8170]  ? skb_put+0x11b/0x210
[  533.319445][ T8170]  netlink_sendmsg+0x805/0xb30
[  533.319472][ T8170]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.319495][ T8170]  ? aa_sock_msg_perm+0xf1/0x1d0
[  533.319526][ T8170]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  533.319553][ T8170]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.319572][ T8170]  __sock_sendmsg+0x219/0x270
[  533.319611][ T8170]  ____sys_sendmsg+0x505/0x830
[  533.319639][ T8170]  ? __pfx_____sys_sendmsg+0x10/0x10
[  533.319671][ T8170]  ? import_iovec+0x74/0xa0
[  533.319693][ T8170]  ___sys_sendmsg+0x21f/0x2a0
[  533.319716][ T8170]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.319774][ T8170]  ? __fget_files+0x2a/0x420
[  533.319799][ T8170]  ? __fget_files+0x3a0/0x420
[  533.319835][ T8170]  __x64_sys_sendmsg+0x19b/0x260
[  533.319858][ T8170]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  533.319887][ T8170]  ? __pfx_ksys_write+0x10/0x10
[  533.319914][ T8170]  ? do_syscall_64+0xbe/0xfa0
[  533.319945][ T8170]  do_syscall_64+0xfa/0xfa0
[  533.319972][ T8170]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.320000][ T8170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.320019][ T8170]  ? clear_bhb_loop+0x60/0xb0
[  533.320042][ T8170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.320061][ T8170] RIP: 0033:0x7f943a38eba9
[  533.320079][ T8170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.320096][ T8170] RSP: 002b:00007f943b233038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.320117][ T8170] RAX: ffffffffffffffda RBX: 00007f943a5d5fa0 RCX: 00007f943a38eba9
[  533.320132][ T8170] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  533.320145][ T8170] RBP: 00007f943b233090 R08: 0000000000000000 R09: 0000000000000000
[  533.320158][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  533.320169][ T8170] R13: 00007f943a5d6038 R14: 00007f943a5d5fa0 R15: 00007ffc05833808
[  533.320202][ T8170]  </TASK>
[  533.646060][    C0] vkms_vblank_simulate: vblank timer overrun
[  533.682744][    T9] usb 2-1: Using ep0 maxpacket: 8
[  533.701375][    T9] usb 2-1: config 162 has an invalid interface number: 76 but max is 0
[  533.709795][    T9] usb 2-1: config 162 has no interface number 0
[  533.724145][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  533.736993][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.745394][    T9] usb 2-1: Product: syz
[  533.749623][    T9] usb 2-1: Manufacturer: syz
[  533.758339][    T9] usb 2-1: SerialNumber: syz
[  533.798087][ T8175] netlink: 'syz.3.850': attribute type 4 has an invalid length.
[  533.822644][ T5978] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  533.972825][ T5978] usb 5-1: Using ep0 maxpacket: 32
[  533.981305][ T5978] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  533.989716][ T5978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  533.989764][ T5978] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  534.014421][ T5978] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  534.030893][ T5978] usb 5-1: config 0 interface 0 has no altsetting 0
[  534.041064][    T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  534.049189][    T9] pvrusb2: Failed to create hdw handler
[  534.054997][    T9] pvrusb2 2-1:162.76: probe with driver pvrusb2 failed with error -12
[  534.056863][ T8187] netlink: 25 bytes leftover after parsing attributes in process `syz.3.855'.
[  534.065773][    T9] usb 2-1: USB disconnect, device number 42
[  534.084452][ T5978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  534.093831][ T5978] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  534.102265][ T5978] usb 5-1: Product: syz
[  534.131041][ T5978] usb 5-1: Manufacturer: syz
[  534.136424][ T5978] usb 5-1: SerialNumber: syz
[  534.147227][ T5978] usb 5-1: config 0 descriptor??
[  534.164692][ T5978] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  534.190145][ T5978] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  534.240340][ T8192] netlink: 176 bytes leftover after parsing attributes in process `syz.3.857'.
[  534.372066][    T9] usb 5-1: USB disconnect, device number 39
[  534.380770][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  534.436533][ T8200] FAULT_INJECTION: forcing a failure.
[  534.436533][ T8200] name failslab, interval 1, probability 0, space 0, times 0
[  534.449322][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.3.861 Not tainted syzkaller #0 PREEMPT(full) 
[  534.449344][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  534.449356][ T8200] Call Trace:
[  534.449364][ T8200]  <TASK>
[  534.449371][ T8200]  dump_stack_lvl+0x189/0x250
[  534.449394][ T8200]  ? __pfx____ratelimit+0x10/0x10
[  534.449422][ T8200]  ? __pfx_dump_stack_lvl+0x10/0x10
[  534.449458][ T8200]  ? __pfx__printk+0x10/0x10
[  534.449492][ T8200]  ? __pfx___might_resched+0x10/0x10
[  534.449514][ T8200]  ? fs_reclaim_acquire+0x7d/0x100
[  534.449542][ T8200]  should_fail_ex+0x414/0x560
[  534.449571][ T8200]  should_failslab+0xa8/0x100
[  534.449596][ T8200]  __kmalloc_noprof+0xcb/0x7f0
[  534.449616][ T8200]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  534.449641][ T8200]  ? __local_bh_enable_ip+0x12d/0x1c0
[  534.449670][ T8200]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  534.449713][ T8200]  genl_family_rcv_msg_doit+0xb8/0x300
[  534.449744][ T8200]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  534.449777][ T8200]  ? apparmor_capable+0x137/0x1b0
[  534.449801][ T8200]  ? bpf_lsm_capable+0x9/0x20
[  534.449820][ T8200]  ? security_capable+0x7e/0x2e0
[  534.449853][ T8200]  genl_rcv_msg+0x60e/0x790
[  534.449883][ T8200]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.449904][ T8200]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  534.449926][ T8200]  ? __pfx_nl80211_start_ap+0x10/0x10
[  534.449950][ T8200]  ? __pfx_nl80211_post_doit+0x10/0x10
[  534.449974][ T8200]  ? __asan_memcpy+0x40/0x70
[  534.450002][ T8200]  ? __pfx_ref_tracker_free+0x10/0x10
[  534.450034][ T8200]  netlink_rcv_skb+0x205/0x470
[  534.450061][ T8200]  ? __lock_acquire+0xab9/0xd20
[  534.450083][ T8200]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.450107][ T8200]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  534.450156][ T8200]  ? down_read+0x1ad/0x2e0
[  534.450178][ T8200]  genl_rcv+0x28/0x40
[  534.450198][ T8200]  netlink_unicast+0x82f/0x9e0
[  534.450231][ T8200]  ? __pfx_netlink_unicast+0x10/0x10
[  534.450250][ T8200]  ? netlink_sendmsg+0x642/0xb30
[  534.450258][ T8200]  ? skb_put+0x11b/0x210
[  534.450270][ T8200]  netlink_sendmsg+0x805/0xb30
[  534.450285][ T8200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.450296][ T8200]  ? aa_sock_msg_perm+0xf1/0x1d0
[  534.450311][ T8200]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  534.450325][ T8200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.450335][ T8200]  __sock_sendmsg+0x219/0x270
[  534.450350][ T8200]  ____sys_sendmsg+0x505/0x830
[  534.450364][ T8200]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.450380][ T8200]  ? import_iovec+0x74/0xa0
[  534.450393][ T8200]  ___sys_sendmsg+0x21f/0x2a0
[  534.450405][ T8200]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.450436][ T8200]  ? __fget_files+0x2a/0x420
[  534.450451][ T8200]  ? __fget_files+0x3a0/0x420
[  534.450470][ T8200]  __x64_sys_sendmsg+0x19b/0x260
[  534.450482][ T8200]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  534.450498][ T8200]  ? __pfx_ksys_write+0x10/0x10
[  534.450512][ T8200]  ? do_syscall_64+0xbe/0xfa0
[  534.450530][ T8200]  do_syscall_64+0xfa/0xfa0
[  534.450543][ T8200]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.450558][ T8200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.450568][ T8200]  ? clear_bhb_loop+0x60/0xb0
[  534.450580][ T8200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.450590][ T8200] RIP: 0033:0x7ff08b18eba9
[  534.450600][ T8200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.450608][ T8200] RSP: 002b:00007ff08bfc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.450620][ T8200] RAX: ffffffffffffffda RBX: 00007ff08b3d5fa0 RCX: 00007ff08b18eba9
[  534.450628][ T8200] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  534.450634][ T8200] RBP: 00007ff08bfc2090 R08: 0000000000000000 R09: 0000000000000000
[  534.450641][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.450647][ T8200] R13: 00007ff08b3d6038 R14: 00007ff08b3d5fa0 R15: 00007ffe16771348
[  534.450664][ T8200]  </TASK>
[  534.832464][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.942646][ T6027] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  535.092699][ T6027] usb 3-1: Using ep0 maxpacket: 8
[  535.099062][ T6027] usb 3-1: config 162 has an invalid interface number: 76 but max is 1
[  535.108334][ T6027] usb 3-1: config 162 has an invalid interface number: 238 but max is 1
[  535.116784][ T6027] usb 3-1: config 162 has an invalid interface number: 253 but max is 1
[  535.125189][ T6027] usb 3-1: config 162 has 3 interfaces, different from the descriptor's value: 2
[  535.134396][ T6027] usb 3-1: config 162 has no interface number 0
[  535.140658][ T6027] usb 3-1: config 162 has no interface number 1
[  535.146944][ T6027] usb 3-1: config 162 has no interface number 2
[  535.153318][ T6027] usb 3-1: config 162 interface 238 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  535.164527][ T6027] usb 3-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  535.175607][ T6027] usb 3-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  535.186760][ T6027] usb 3-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  535.192741][ T5977] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  535.197709][ T6027] usb 3-1: config 162 interface 238 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14
[  535.219607][ T6027] usb 3-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30
[  535.230987][ T6027] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0xC has an invalid bInterval 139, changing to 7
[  535.242500][ T6027] usb 3-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  535.253689][ T6027] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  535.265154][ T6027] usb 3-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  535.276379][ T6027] usb 3-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0xC, skipping
[  535.287381][ T6027] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  535.298556][ T6027] usb 3-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping
[  535.310796][ T6027] usb 3-1: config 162 interface 253 altsetting 49 has 8 endpoint descriptors, different from the interface descriptor's value: 131
[  535.324378][ T6027] usb 3-1: config 162 interface 238 has no altsetting 0
[  535.331325][ T6027] usb 3-1: config 162 interface 253 has no altsetting 0
[  535.340358][ T6027] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  535.349504][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.357545][ T6027] usb 3-1: Product: syz
[  535.361702][ T6027] usb 3-1: Manufacturer: syz
[  535.366359][ T6027] usb 3-1: SerialNumber: syz
[  535.402546][ T5977] usb 2-1: Using ep0 maxpacket: 32
[  535.409175][ T5977] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  535.421104][ T5977] usb 2-1: config 0 has no interface number 0
[  535.430188][ T5977] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  535.452723][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.460739][ T5977] usb 2-1: Product: syz
[  535.484561][ T5977] usb 2-1: Manufacturer: syz
[  535.502637][ T5977] usb 2-1: SerialNumber: syz
[  535.514881][ T5977] usb 2-1: config 0 descriptor??
[  535.530954][ T5977] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  535.584639][ T6027] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  535.619911][ T6027] pvrusb2: Failed to create hdw handler
[  535.631501][ T6027] pvrusb2 3-1:162.76: probe with driver pvrusb2 failed with error -12
[  535.648683][ T6027] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  535.673930][ T6027] pvrusb2: Failed to create hdw handler
[  535.688270][ T6027] pvrusb2 3-1:162.238: probe with driver pvrusb2 failed with error -12
[  535.710720][ T6027] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  535.734395][ T6027] pvrusb2: Failed to create hdw handler
[  535.740108][ T6027] pvrusb2 3-1:162.253: probe with driver pvrusb2 failed with error -12
[  535.755838][ T5977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  535.761076][ T6027] usb 3-1: USB disconnect, device number 47
[  535.797945][ T5977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  536.162475][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  536.179471][ T5964] usb 2-1: USB disconnect, device number 43
[  536.210972][ T5964] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  536.247254][ T5964] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  536.274490][ T5964] quatech2 2-1:0.51: device disconnected
[  536.322690][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  536.502603][    T9] usb 4-1: Using ep0 maxpacket: 32
[  536.509241][    T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  536.517507][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  536.528712][    T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  536.540918][    T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  536.554126][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  536.564430][    T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  536.573544][    T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  536.581955][    T9] usb 4-1: Product: syz
[  536.586199][    T9] usb 4-1: Manufacturer: syz
[  536.590804][    T9] usb 4-1: SerialNumber: syz
[  536.598244][    T9] usb 4-1: config 0 descriptor??
[  536.606210][    T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  536.616678][    T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  536.814584][    T9] usb 4-1: USB disconnect, device number 47
[  536.823184][    T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  539.853687][ T5233] udevd[5233]: worker [6002] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[  544.412733][ T5921] Bluetooth: hci1: command 0x0406 tx timeout
[  547.462377][ T2345] pvrusb2: request_firmware fatal error with code=-110
[  547.469441][ T2345] pvrusb2: Failure uploading firmware1
[  547.475131][ T2345] pvrusb2: Device initialization was not successful.
[  547.481796][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  547.491911][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  547.501753][ T2345] pvrusb2: Invalid write control endpoint
[  547.502023][ T5999] pvrusb2: Device being rendered inoperable
[  547.508655][ T2345] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2
[  547.523201][ T2345] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw
[  561.353343][ T8238] can0: slcan on ttyS3.
[  561.422939][ T6027] IPVS: starting estimator thread 0...
[  561.473138][ T8237] can0 (unregistered): slcan off ttyS3.
[  561.522730][ T8245] IPVS: using max 31 ests per chain, 74400 per kthread
[  561.704039][ T6027] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  561.809272][ T8259] netlink: 'syz.4.885': attribute type 1 has an invalid length.
[  561.809309][ T8259] netlink: 216 bytes leftover after parsing attributes in process `syz.4.885'.
[  561.857252][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.857287][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.858306][ T6027] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  561.858335][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  561.858356][ T6027] usb 4-1: Manufacturer: syz
[  561.861266][ T6027] usb 4-1: config 0 descriptor??
[  561.880642][ T6027] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  561.880674][ T6027] usb 4-1: No valid video chain found.
[  562.085039][ T8243] netlink: 56 bytes leftover after parsing attributes in process `syz.3.881'.
[  562.086458][ T6027] usb 4-1: USB disconnect, device number 48
[  562.146399][ T5964] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  562.313068][ T5964] usb 3-1: Using ep0 maxpacket: 8
[  562.321547][ T5964] usb 3-1: config 162 has an invalid interface number: 76 but max is 1
[  562.321583][ T5964] usb 3-1: config 162 has an invalid interface number: 238 but max is 1
[  562.321605][ T5964] usb 3-1: config 162 has an invalid interface number: 253 but max is 1
[  562.321627][ T5964] usb 3-1: config 162 has 3 interfaces, different from the descriptor's value: 2
[  562.321649][ T5964] usb 3-1: config 162 has no interface number 0
[  562.321666][ T5964] usb 3-1: config 162 has no interface number 1
[  562.321683][ T5964] usb 3-1: config 162 has no interface number 2
[  562.321744][ T5964] usb 3-1: config 162 interface 238 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  562.321768][ T5964] usb 3-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  562.321797][ T5964] usb 3-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  562.321823][ T5964] usb 3-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  562.321847][ T5964] usb 3-1: config 162 interface 238 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14
[  562.321874][ T5964] usb 3-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30
[  562.321911][ T5964] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0xC has an invalid bInterval 139, changing to 7
[  562.321938][ T5964] usb 3-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  562.321961][ T5964] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  562.321988][ T5964] usb 3-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping
[  562.322011][ T5964] usb 3-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0xC, skipping
[  562.322035][ T5964] usb 3-1: config 162 interface 253 altsetting 49 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  562.322061][ T5964] usb 3-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping
[  562.322084][ T5964] usb 3-1: config 162 interface 253 altsetting 49 has 8 endpoint descriptors, different from the interface descriptor's value: 131
[  562.322112][ T5964] usb 3-1: config 162 interface 238 has no altsetting 0
[  562.322130][ T5964] usb 3-1: config 162 interface 253 has no altsetting 0
[  562.328958][ T5964] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  562.328987][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.329008][ T5964] usb 3-1: Product: syz
[  562.329023][ T5964] usb 3-1: Manufacturer: syz
[  562.329039][ T5964] usb 3-1: SerialNumber: syz
[  562.564622][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  562.565258][ T5964] pvrusb2: Failed to create hdw handler
[  562.565284][ T5964] pvrusb2 3-1:162.76: probe with driver pvrusb2 failed with error -12
[  562.595289][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  562.595869][ T5964] pvrusb2: Failed to create hdw handler
[  562.595890][ T5964] pvrusb2 3-1:162.238: probe with driver pvrusb2 failed with error -12
[  562.614903][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  562.615447][ T5964] pvrusb2: Failed to create hdw handler
[  562.615469][ T5964] pvrusb2 3-1:162.253: probe with driver pvrusb2 failed with error -12
[  562.653883][ T5964] usb 3-1: USB disconnect, device number 48
[  562.823310][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  562.823372][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  563.120753][ T8300] netlink: 176 bytes leftover after parsing attributes in process `syz.4.893'.
[  563.423495][ T8313] binder: 8312:8313 ioctl c018620c 200000000080 returned -1
[  563.445586][   T30] audit: type=1326 audit(1757499476.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.2.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943a38eba9 code=0x0
[  563.542872][ T5885] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  563.682658][ T5885] usb 4-1: device descriptor read/64, error -71
[  563.925915][ T5885] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  563.971818][ T8340] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  564.073649][ T5885] usb 4-1: device descriptor read/64, error -71
[  564.132560][ T6003] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  564.182975][ T5885] usb usb4-port1: attempt power cycle
[  564.232664][ T6027] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  564.287618][ T6003] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  564.300351][ T6003] usb 2-1: config 1 has no interface number 0
[  564.309806][ T6003] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  564.321533][ T6003] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  564.334682][ T6003] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.356609][ T6003] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  564.367496][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.375737][ T6003] usb 2-1: Product: syz
[  564.379998][ T6003] usb 2-1: Manufacturer: syz
[  564.385531][ T6003] usb 2-1: SerialNumber: syz
[  564.393111][ T6027] usb 5-1: Using ep0 maxpacket: 32
[  564.393826][ T8336] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  564.409626][ T6027] usb 5-1: config 8 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.424609][ T8345] FAULT_INJECTION: forcing a failure.
[  564.424609][ T8345] name failslab, interval 1, probability 0, space 0, times 0
[  564.428886][ T6027] usb 5-1: config 8 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.437512][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.2.908 Not tainted syzkaller #0 PREEMPT(full) 
[  564.437535][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  564.437546][ T8345] Call Trace:
[  564.437554][ T8345]  <TASK>
[  564.437562][ T8345]  dump_stack_lvl+0x189/0x250
[  564.437585][ T8345]  ? __pfx____ratelimit+0x10/0x10
[  564.437622][ T8345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.437641][ T8345]  ? __pfx__printk+0x10/0x10
[  564.437676][ T8345]  ? __pfx___might_resched+0x10/0x10
[  564.437698][ T8345]  ? fs_reclaim_acquire+0x7d/0x100
[  564.437727][ T8345]  should_fail_ex+0x414/0x560
[  564.437754][ T8345]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  564.437778][ T8345]  should_failslab+0xa8/0x100
[  564.437802][ T8345]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  564.437819][ T8345]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  564.437839][ T8345]  ? shmem_alloc_inode+0x28/0x40
[  564.437865][ T8345]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  564.437886][ T8345]  shmem_alloc_inode+0x28/0x40
[  564.437908][ T8345]  alloc_inode+0x67/0x1b0
[  564.437933][ T8345]  new_inode+0x22/0x170
[  564.437962][ T8345]  shmem_get_inode+0x346/0xe90
[  564.437995][ T8345]  shmem_mknod+0x18c/0x3e0
[  564.438026][ T8345]  shmem_mkdir+0x33/0x70
[  564.438051][ T8345]  vfs_mkdir+0x303/0x510
[  564.438079][ T8345]  ovl_workdir_create+0x4c3/0x8b0
[  564.438115][ T8345]  ? __pfx_ovl_workdir_create+0x10/0x10
[  564.438152][ T8345]  ? mnt_get_write_access+0x213/0x280
[  564.438180][ T8345]  ovl_get_workdir+0x32f/0x17c0
[  564.438213][ T8345]  ? __pfx_ovl_get_workdir+0x10/0x10
[  564.438242][ T8345]  ? __lock_acquire+0xab9/0xd20
[  564.438273][ T8345]  ? do_raw_spin_lock+0x121/0x290
[  564.438311][ T8345]  ? do_raw_spin_unlock+0x122/0x240
[  564.438341][ T8345]  ? _raw_spin_unlock+0x28/0x50
[  564.438364][ T8345]  ? ovl_inuse_trylock+0xae/0xf0
[  564.438389][ T8345]  ovl_fill_super+0x154a/0x3da0
[  564.438427][ T8345]  ? rcu_is_watching+0x15/0xb0
[  564.438450][ T8345]  ? trace_contention_end+0x39/0x120
[  564.438491][ T8345]  ? __pfx_ovl_fill_super+0x10/0x10
[  564.438512][ T8345]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  564.438537][ T8345]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  564.438561][ T8345]  ? __raw_spin_lock_init+0x45/0x100
[  564.438609][ T8345]  ? sget_fc+0x962/0xa40
[  564.438631][ T8345]  ? __pfx_set_anon_super_fc+0x10/0x10
[  564.438651][ T8345]  ? __pfx_ovl_fill_super+0x10/0x10
[  564.438675][ T8345]  get_tree_nodev+0xb8/0x150
[  564.438699][ T8345]  vfs_get_tree+0x8f/0x2b0
[  564.438725][ T8345]  do_new_mount+0x302/0xa10
[  564.438747][ T8345]  ? apparmor_capable+0x137/0x1b0
[  564.438774][ T8345]  ? __pfx_do_new_mount+0x10/0x10
[  564.438797][ T8345]  ? ns_capable+0x8a/0xf0
[  564.438821][ T8345]  ? path_mount+0x61c/0xfe0
[  564.438843][ T8345]  ? kmem_cache_free+0x19a/0x690
[  564.438875][ T8345]  __se_sys_mount+0x313/0x410
[  564.438906][ T8345]  ? __pfx___se_sys_mount+0x10/0x10
[  564.438935][ T8345]  ? do_syscall_64+0xbe/0xfa0
[  564.438961][ T8345]  ? __x64_sys_mount+0x20/0xc0
[  564.438988][ T8345]  do_syscall_64+0xfa/0xfa0
[  564.439014][ T8345]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.439040][ T8345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.439058][ T8345]  ? clear_bhb_loop+0x60/0xb0
[  564.439081][ T8345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.439100][ T8345] RIP: 0033:0x7f943a38eba9
[  564.439117][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.439133][ T8345] RSP: 002b:00007f943b212038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  564.439152][ T8345] RAX: ffffffffffffffda RBX: 00007f943a5d6090 RCX: 00007f943a38eba9
[  564.439166][ T8345] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000
[  564.439178][ T8345] RBP: 00007f943b212090 R08: 0000200000000180 R09: 0000000000000000
[  564.439191][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  564.439202][ T8345] R13: 00007f943a5d6128 R14: 00007f943a5d6090 R15: 00007ffc05833808
[  564.439236][ T8345]  </TASK>
[  564.439534][ T8345] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  564.454373][ T6027] usb 5-1: config 8 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  564.461022][ T8345] overlayfs: statfs failed on './file0'
[  564.467249][ T6027] usb 5-1: config 8 interface 0 has no altsetting 0
[  564.562648][ T5885] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  564.563807][ T6027] usb 5-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00
[  564.586252][ T5885] usb 4-1: device descriptor read/8, error -71
[  564.588427][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.615358][ T8336] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  564.988882][ T6003] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  565.032644][ T5885] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  565.054738][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.058737][ T5885] usb 4-1: device descriptor read/8, error -71
[  565.061727][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.061760][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.061785][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.089631][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.096674][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.103758][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.112307][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.119364][ T6027] lenovo 0003:04B3:3109.0014: unknown main item tag 0x0
[  565.129451][ T6027] lenovo 0003:04B3:3109.0014: hidraw0: USB HID v5f.b2 Device [HID 04b3:3109] on usb-dummy_hcd.4-1/input0
[  565.183469][ T5885] usb usb4-port1: unable to enumerate USB device
[  565.212805][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  565.257872][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.266737][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.276489][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.285610][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.296104][ T6027] usb 5-1: USB disconnect, device number 40
[  565.364357][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  565.373909][    T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  565.384790][    T9] usb 3-1: config 220 has no interface number 2
[  565.391079][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  565.408466][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[  565.416782][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[  565.424015][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[  565.435134][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  565.445155][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.454242][    T9] usb 3-1: Product: syz
[  565.458428][    T9] usb 3-1: Manufacturer: syz
[  565.468433][    T9] usb 3-1: SerialNumber: syz
[  565.650286][ T6003] usb 2-1: USB disconnect, device number 44
[  565.677507][ T6003] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem
[  565.701110][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.721530][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.759178][    T9] usb 3-1: selecting invalid altsetting 0
[  565.765828][    T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  565.772194][    T9] usb 3-1: No valid video chain found.
[  565.785173][ T6003] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  565.800714][    T9] usb 3-1: selecting invalid altsetting 0
[  565.808975][    T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  565.838093][    T9] usb 3-1: USB disconnect, device number 49
[  566.440403][ T8387] netlink: 176 bytes leftover after parsing attributes in process `syz.2.915'.
[  566.770783][ T8396] FAULT_INJECTION: forcing a failure.
[  566.770783][ T8396] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  566.787694][ T8396] CPU: 0 UID: 0 PID: 8396 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT(full) 
[  566.787715][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  566.787725][ T8396] Call Trace:
[  566.787733][ T8396]  <TASK>
[  566.787740][ T8396]  dump_stack_lvl+0x189/0x250
[  566.787760][ T8396]  ? __pfx____ratelimit+0x10/0x10
[  566.787784][ T8396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  566.787798][ T8396]  ? __pfx__printk+0x10/0x10
[  566.787820][ T8396]  ? fs_reclaim_acquire+0x7d/0x100
[  566.787844][ T8396]  should_fail_ex+0x414/0x560
[  566.787867][ T8396]  prepare_alloc_pages+0x213/0x610
[  566.787894][ T8396]  __alloc_frozen_pages_noprof+0x123/0x370
[  566.787918][ T8396]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  566.787948][ T8396]  ? policy_nodemask+0x27c/0x720
[  566.787965][ T8396]  ? do_raw_spin_lock+0x121/0x290
[  566.787995][ T8396]  alloc_pages_mpol+0x232/0x4a0
[  566.788019][ T8396]  alloc_pages_noprof+0xa9/0x190
[  566.788040][ T8396]  __pmd_alloc+0x3a/0x3b0
[  566.788063][ T8396]  __handle_mm_fault+0x9ad/0x5400
[  566.788091][ T8396]  ? __pfx___handle_mm_fault+0x10/0x10
[  566.788122][ T8396]  ? find_vma+0xe7/0x160
[  566.788137][ T8396]  ? __pfx_find_vma+0x10/0x10
[  566.788156][ T8396]  handle_mm_fault+0x40a/0x8e0
[  566.788181][ T8396]  do_user_addr_fault+0x764/0x1390
[  566.788219][ T8396]  exc_page_fault+0x82/0x100
[  566.788247][ T8396]  asm_exc_page_fault+0x26/0x30
[  566.788262][ T8396] RIP: 0010:__put_user_4+0xd/0x20
[  566.788288][ T8396] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 5d 03 00 90 90 90 90 90 90 90 90 90 90
[  566.788303][ T8396] RSP: 0018:ffffc9000b767c68 EFLAGS: 00050206
[  566.788320][ T8396] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000000800
[  566.788334][ T8396] RDX: 0000000000000000 RSI: ffffffff8de8f7b6 RDI: ffffffff8c04f000
[  566.788347][ T8396] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff820bf310
[  566.788361][ T8396] R10: dffffc0000000000 R11: fffffbfff1fca187 R12: 00000000000000c9
[  566.788375][ T8396] R13: 0000000000000044 R14: 0000200000000800 R15: ffff888027ddd800
[  566.788404][ T8396]  ? __might_fault+0xb0/0x130
[  566.788435][ T8396]  vt_do_diacrit+0x534/0xa40
[  566.788468][ T8396]  vt_ioctl+0x101a/0x1f20
[  566.788495][ T8396]  ? __pfx_vt_ioctl+0x10/0x10
[  566.788531][ T8396]  ? __fget_files+0x2a/0x420
[  566.788558][ T8396]  ? tty_jobctrl_ioctl+0x369/0xb70
[  566.788577][ T8396]  ? __fget_files+0x3a0/0x420
[  566.788599][ T8396]  ? __fget_files+0x2a/0x420
[  566.788624][ T8396]  tty_ioctl+0x926/0xde0
[  566.788651][ T8396]  ? __pfx_tty_ioctl+0x10/0x10
[  566.788677][ T8396]  __se_sys_ioctl+0xfc/0x170
[  566.788700][ T8396]  do_syscall_64+0xfa/0xfa0
[  566.788723][ T8396]  ? lockdep_hardirqs_on+0x9c/0x150
[  566.788747][ T8396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.788763][ T8396]  ? clear_bhb_loop+0x60/0xb0
[  566.788782][ T8396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.788797][ T8396] RIP: 0033:0x7f11a278eba9
[  566.788811][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.788825][ T8396] RSP: 002b:00007f11a35cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.788841][ T8396] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278eba9
[  566.788853][ T8396] RDX: 0000200000000800 RSI: 0000000000004b4a RDI: 0000000000000003
[  566.788864][ T8396] RBP: 00007f11a35cc090 R08: 0000000000000000 R09: 0000000000000000
[  566.788874][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.788884][ T8396] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  566.788911][ T8396]  </TASK>
[  567.222601][ T6003] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  567.230613][ T8399] unknown channel width for channel at 909000KHz?
[  567.269512][ T8403] tipc: MTU too low for tipc bearer
[  567.410568][ T6003] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  567.436160][ T6003] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  567.446572][ T5885] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  567.472725][ T6003] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  567.491997][ T6003] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  567.510783][ T6003] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  567.522717][ T5964] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  567.533380][ T6003] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  567.548516][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  567.557229][ T6003] usb 3-1: Product: syz
[  567.561405][ T6003] usb 3-1: Manufacturer: syz
[  567.584289][ T6003] cdc_wdm 3-1:1.0: skipping garbage
[  567.599106][ T6003] cdc_wdm 3-1:1.0: skipping garbage
[  567.609099][ T6003] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  567.617728][ T6003] cdc_wdm 3-1:1.0: Unknown control protocol
[  567.626274][ T5885] usb 2-1: Using ep0 maxpacket: 8
[  567.634721][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  567.652293][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  567.666416][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  567.677477][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  567.688948][ T5964] usb 5-1: Using ep0 maxpacket: 16
[  567.699206][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  567.717278][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  567.727544][ T5964] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  567.740981][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.749444][ T5964] usb 5-1: Product: syz
[  567.754120][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.762764][ T5964] usb 5-1: Manufacturer: syz
[  567.767491][ T5964] usb 5-1: SerialNumber: syz
[  567.779194][ T5885] usb 2-1: config 0 descriptor??
[  567.781187][ T5921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  567.794291][ T5921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  567.802281][ T5921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  567.810664][ T5921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  567.811530][   T30] audit: type=1326 audit(1757499480.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f943a38eba9 code=0x0
[  567.819760][ T8400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  567.849662][ T5964] r8152-cfgselector 5-1: Unknown version 0x0000
[  567.856391][ T5964] r8152-cfgselector 5-1: config 0 descriptor??
[  567.866300][ T5921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  567.875027][ T6003] usb 3-1: USB disconnect, device number 50
[  568.113607][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.126886][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.138012][ T5915] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8
[  568.146295][ T5915] Bluetooth: hci4: Malformed Event: 0x02
[  568.152155][ T5915] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10
[  568.152302][ T5915] Bluetooth: hci4: connection err: -111
[  568.174216][ T8405] chnl_net:caif_netlink_parms(): no params data found
[  568.285741][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.297187][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.306170][ T8405] bridge_slave_0: entered allmulticast mode
[  568.314279][ T8405] bridge_slave_0: entered promiscuous mode
[  568.322805][    T9] r8152-cfgselector 5-1: USB disconnect, device number 41
[  568.323293][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.339234][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.356499][ T8405] bridge_slave_1: entered allmulticast mode
[  568.364828][ T8405] bridge_slave_1: entered promiscuous mode
[  568.374477][ T5921] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  568.374669][ T5964] usb 2-1: USB disconnect, device number 45
[  568.449111][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.460882][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.497317][ T8405] team0: Port device team_slave_0 added
[  568.505953][ T8405] team0: Port device team_slave_1 added
[  568.538128][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.545876][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.572238][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.585970][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.593551][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.620002][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.667852][ T8405] hsr_slave_0: entered promiscuous mode
[  568.674162][ T8405] hsr_slave_1: entered promiscuous mode
[  568.680186][ T8405] debugfs: 'hsr0' already exists in 'hsr'
[  568.686533][ T8405] Cannot create hsr debugfs directory
[  568.834288][ T8405] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  568.848528][ T8405] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  568.865158][ T8405] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  568.880812][ T8405] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  568.932944][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.940149][ T8405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.947669][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.954833][ T8405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.050568][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.078725][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.098926][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.130258][ T8405] 8021q: adding VLAN 0 to HW filter on device team0
[  569.145951][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.153145][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.167045][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.174291][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.362676][ T6027] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  569.437687][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.513265][ T6027] usb 5-1: device descriptor read/64, error -71
[  569.666537][ T5978] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  569.728423][ T8446] FAULT_INJECTION: forcing a failure.
[  569.728423][ T8446] name failslab, interval 1, probability 0, space 0, times 0
[  569.746137][ T8446] CPU: 0 UID: 0 PID: 8446 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT(full) 
[  569.746163][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  569.746175][ T8446] Call Trace:
[  569.746182][ T8446]  <TASK>
[  569.746190][ T8446]  dump_stack_lvl+0x189/0x250
[  569.746213][ T8446]  ? __pfx____ratelimit+0x10/0x10
[  569.746241][ T8446]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.746259][ T8446]  ? __pfx__printk+0x10/0x10
[  569.746292][ T8446]  ? __pfx___might_resched+0x10/0x10
[  569.746313][ T8446]  ? fs_reclaim_acquire+0x7d/0x100
[  569.746340][ T8446]  should_fail_ex+0x414/0x560
[  569.746369][ T8446]  should_failslab+0xa8/0x100
[  569.746394][ T8446]  kmem_cache_alloc_noprof+0x74/0x6e0
[  569.746414][ T8446]  ? __pmd_alloc+0xc6/0x3b0
[  569.746438][ T8446]  __pmd_alloc+0xc6/0x3b0
[  569.746460][ T8446]  __handle_mm_fault+0x9ad/0x5400
[  569.746496][ T8446]  ? __pfx___handle_mm_fault+0x10/0x10
[  569.746534][ T8446]  ? find_vma+0xe7/0x160
[  569.746550][ T8446]  ? __pfx_find_vma+0x10/0x10
[  569.746573][ T8446]  handle_mm_fault+0x40a/0x8e0
[  569.746603][ T8446]  do_user_addr_fault+0x764/0x1390
[  569.746645][ T8446]  exc_page_fault+0x82/0x100
[  569.746676][ T8446]  asm_exc_page_fault+0x26/0x30
[  569.746696][ T8446] RIP: 0010:__put_user_4+0xd/0x20
[  569.746725][ T8446] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 5d 03 00 90 90 90 90 90 90 90 90 90 90
[  569.746743][ T8446] RSP: 0018:ffffc9001c517c68 EFLAGS: 00050206
[  569.746761][ T8446] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000000800
[  569.746773][ T8446] RDX: 0000000000000000 RSI: ffffffff8de8f7b6 RDI: ffffffff8c04f000
[  569.746785][ T8446] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff820bf310
[  569.746798][ T8446] R10: dffffc0000000000 R11: fffffbfff1fca187 R12: 00000000000000c9
[  569.746811][ T8446] R13: 0000000000000044 R14: 0000200000000800 R15: ffff888079f52800
[  569.746831][ T8446]  ? __might_fault+0xb0/0x130
[  569.746859][ T8446]  vt_do_diacrit+0x534/0xa40
[  569.746892][ T8446]  vt_ioctl+0x101a/0x1f20
[  569.746920][ T8446]  ? __pfx_vt_ioctl+0x10/0x10
[  569.746957][ T8446]  ? __fget_files+0x2a/0x420
[  569.746987][ T8446]  ? tty_jobctrl_ioctl+0x369/0xb70
[  569.747009][ T8446]  ? __fget_files+0x3a0/0x420
[  569.747033][ T8446]  ? __fget_files+0x2a/0x420
[  569.747068][ T8446]  tty_ioctl+0x926/0xde0
[  569.747097][ T8446]  ? __pfx_tty_ioctl+0x10/0x10
[  569.747123][ T8446]  __se_sys_ioctl+0xfc/0x170
[  569.747147][ T8446]  do_syscall_64+0xfa/0xfa0
[  569.747175][ T8446]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.747203][ T8446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.747223][ T8446]  ? clear_bhb_loop+0x60/0xb0
[  569.747247][ T8446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.747266][ T8446] RIP: 0033:0x7f943a38eba9
[  569.747284][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.747300][ T8446] RSP: 002b:00007f943b233038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  569.747320][ T8446] RAX: ffffffffffffffda RBX: 00007f943a5d5fa0 RCX: 00007f943a38eba9
[  569.747335][ T8446] RDX: 0000200000000800 RSI: 0000000000004b4a RDI: 0000000000000003
[  569.747348][ T8446] RBP: 00007f943b233090 R08: 0000000000000000 R09: 0000000000000000
[  569.747361][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.747373][ T8446] R13: 00007f943a5d6038 R14: 00007f943a5d5fa0 R15: 00007ffc05833808
[  569.747407][ T8446]  </TASK>
[  569.752391][ T8405] veth0_vlan: entered promiscuous mode
[  569.793987][ T6027] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  569.874901][ T8405] veth1_vlan: entered promiscuous mode
[  569.909126][ T5978] usb 2-1: Using ep0 maxpacket: 8
[  569.942239][ T8405] veth0_macvtap: entered promiscuous mode
[  569.943243][ T5921] Bluetooth: hci2: command tx timeout
[  569.954260][ T8449] netlink: 'syz.2.933': attribute type 4 has an invalid length.
[  569.998098][ T5978] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  570.014807][ T8405] veth1_macvtap: entered promiscuous mode
[  570.020242][ T6027] usb 5-1: device descriptor read/64, error -71
[  570.054745][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.062233][ T5978] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  570.180840][ T5978] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  570.190907][ T5978] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  570.204969][ T5978] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  570.214052][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.270055][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.283028][ T6027] usb usb5-port1: attempt power cycle
[  570.307426][ T5981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.321848][ T5981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.344700][ T5981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.353944][ T5981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.440908][ T8453] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  570.451446][ T8453] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  570.461034][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.466205][ T8453] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  570.481552][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.518329][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'.
[  570.526813][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.537353][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.538065][ T5978] usb 2-1: GET_CAPABILITIES returned 0
[  570.550831][ T5978] usbtmc 2-1:16.0: can't read capabilities
[  570.631309][   T30] audit: type=1400 audit(1757499483.530:7): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/kvm" pid=8454 comm="syz.5.924"
[  570.653778][ T6027] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  570.683382][ T6027] usb 5-1: device descriptor read/8, error -71
[  570.761596][ T8436] netlink: 'syz.1.930': attribute type 21 has an invalid length.
[  570.771252][ T8436] netlink: 168 bytes leftover after parsing attributes in process `syz.1.930'.
[  570.790745][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.806560][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.815667][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.824763][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.834104][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.843208][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.856030][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.866071][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.875170][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.884242][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.898781][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.907865][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.916919][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.925966][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.935476][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.944558][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  570.957402][ T5957] usb 2-1: USB disconnect, device number 46
[  570.993592][ T6027] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  571.024512][ T6027] usb 5-1: device descriptor read/8, error -71
[  571.133497][ T6027] usb usb5-port1: unable to enumerate USB device
[  571.303445][ T8467] netlink: 'syz.5.940': attribute type 4 has an invalid length.
[  571.355332][ T8469] netlink: 5 bytes leftover after parsing attributes in process `syz.5.941'.
[  571.502692][ T6003] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  571.632554][ T6003] usb 3-1: device descriptor read/64, error -71
[  571.652724][ T5885] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  571.773218][ T5957] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  571.803954][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.814869][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  571.825151][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  571.836831][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  571.847937][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  571.857725][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  571.871466][ T5885] usb 6-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[  571.880538][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.888657][ T6003] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  571.898804][ T5885] usb 6-1: config 0 descriptor??
[  571.909999][ T5885] appledisplay 6-1:0.0: Submitting URB failed
[  571.916244][ T5885] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5
[  571.938302][ T5957] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  571.947598][ T5957] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  571.958899][ T5957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  571.969023][ T5957] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  571.980765][ T5957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  571.992043][ T5957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  572.005678][ T5957] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  572.014875][ T5921] Bluetooth: hci2: command tx timeout
[  572.020282][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  572.022848][ T6003] usb 3-1: device descriptor read/64, error -71
[  572.028410][ T5957] usb 2-1: Product: syz
[  572.038701][ T5957] usb 2-1: Manufacturer: syz
[  572.048608][ T8473] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  572.057921][ T5957] cdc_wdm 2-1:1.0: skipping garbage
[  572.063447][ T5957] cdc_wdm 2-1:1.0: skipping garbage
[  572.072397][ T5957] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  572.078736][ T5957] cdc_wdm 2-1:1.0: Unknown control protocol
[  572.109901][ T5885] usb 6-1: USB disconnect, device number 2
[  572.145729][ T6003] usb usb3-port1: attempt power cycle
[  572.175636][ T8475] FAULT_INJECTION: forcing a failure.
[  572.175636][ T8475] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  572.189084][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.4.944 Not tainted syzkaller #0 PREEMPT(full) 
[  572.189110][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  572.189122][ T8475] Call Trace:
[  572.189130][ T8475]  <TASK>
[  572.189138][ T8475]  dump_stack_lvl+0x189/0x250
[  572.189162][ T8475]  ? __pfx____ratelimit+0x10/0x10
[  572.189191][ T8475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  572.189210][ T8475]  ? __pfx__printk+0x10/0x10
[  572.189240][ T8475]  ? fs_reclaim_acquire+0x7d/0x100
[  572.189274][ T8475]  should_fail_ex+0x414/0x560
[  572.189304][ T8475]  prepare_alloc_pages+0x213/0x610
[  572.189337][ T8475]  __alloc_frozen_pages_noprof+0x123/0x370
[  572.189368][ T8475]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  572.189397][ T8475]  ? __lock_acquire+0xab9/0xd20
[  572.189430][ T8475]  alloc_pages_mpol+0x232/0x4a0
[  572.189460][ T8475]  alloc_pages_noprof+0xa9/0x190
[  572.189485][ T8475]  pte_alloc_one+0x21/0x170
[  572.189513][ T8475]  __pte_alloc+0x25/0x1a0
[  572.189542][ T8475]  __handle_mm_fault+0x4985/0x5400
[  572.189589][ T8475]  ? __pfx___handle_mm_fault+0x10/0x10
[  572.189628][ T8475]  ? find_vma+0xe7/0x160
[  572.189646][ T8475]  ? __pfx_find_vma+0x10/0x10
[  572.189668][ T8475]  handle_mm_fault+0x40a/0x8e0
[  572.189693][ T8475]  do_user_addr_fault+0x764/0x1390
[  572.189713][ T8475]  exc_page_fault+0x82/0x100
[  572.189730][ T8475]  asm_exc_page_fault+0x26/0x30
[  572.189739][ T8475] RIP: 0010:__put_user_4+0xd/0x20
[  572.189754][ T8475] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 5d 03 00 90 90 90 90 90 90 90 90 90 90
[  572.189763][ T8475] RSP: 0018:ffffc9000b707c68 EFLAGS: 00050206
[  572.189774][ T8475] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000000800
[  572.189781][ T8475] RDX: 0000000000000000 RSI: ffffffff8de8f7b6 RDI: ffffffff8c04f000
[  572.189788][ T8475] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff820bf310
[  572.189795][ T8475] R10: dffffc0000000000 R11: fffffbfff1fca187 R12: 00000000000000c9
[  572.189802][ T8475] R13: 0000000000000044 R14: 0000200000000800 R15: ffff888023f77800
[  572.189813][ T8475]  ? __might_fault+0xb0/0x130
[  572.189828][ T8475]  vt_do_diacrit+0x534/0xa40
[  572.189845][ T8475]  vt_ioctl+0x101a/0x1f20
[  572.189860][ T8475]  ? __pfx_vt_ioctl+0x10/0x10
[  572.189880][ T8475]  ? __fget_files+0x2a/0x420
[  572.189895][ T8475]  ? tty_jobctrl_ioctl+0x369/0xb70
[  572.189906][ T8475]  ? __fget_files+0x3a0/0x420
[  572.189918][ T8475]  ? __fget_files+0x2a/0x420
[  572.189933][ T8475]  tty_ioctl+0x926/0xde0
[  572.189948][ T8475]  ? __pfx_tty_ioctl+0x10/0x10
[  572.189961][ T8475]  __se_sys_ioctl+0xfc/0x170
[  572.189973][ T8475]  do_syscall_64+0xfa/0xfa0
[  572.189987][ T8475]  ? lockdep_hardirqs_on+0x9c/0x150
[  572.190002][ T8475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.190011][ T8475]  ? clear_bhb_loop+0x60/0xb0
[  572.190024][ T8475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.190033][ T8475] RIP: 0033:0x7f11a278eba9
[  572.190042][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  572.190051][ T8475] RSP: 002b:00007f11a35cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  572.190061][ T8475] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278eba9
[  572.190068][ T8475] RDX: 0000200000000800 RSI: 0000000000004b4a RDI: 0000000000000003
[  572.190075][ T8475] RBP: 00007f11a35cc090 R08: 0000000000000000 R09: 0000000000000000
[  572.190081][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.190087][ T8475] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  572.190104][ T8475]  </TASK>
[  572.313736][ T5957] usb 2-1: USB disconnect, device number 47
[  572.492744][ T6003] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  572.605092][ T6003] usb 3-1: device descriptor read/8, error -71
[  572.712597][ T5964] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  572.842705][ T6003] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  572.862553][ T5964] usb 5-1: Using ep0 maxpacket: 8
[  572.868276][ T6003] usb 3-1: device descriptor read/8, error -71
[  572.875711][ T5964] usb 5-1: config 162 has an invalid interface number: 76 but max is 1
[  572.884014][ T5964] usb 5-1: config 162 has an invalid interface number: 238 but max is 1
[  572.895425][ T5964] usb 5-1: config 162 has no interface number 0
[  572.901688][ T5964] usb 5-1: config 162 has no interface number 1
[  572.908460][ T5964] usb 5-1: config 162 interface 238 has no altsetting 0
[  572.919514][ T5964] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  572.929113][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6
[  572.937336][ T5964] usb 5-1: Product: syz
[  572.941556][ T5964] usb 5-1: Manufacturer: syz
[  572.946414][ T5964] usb 5-1: SerialNumber: syz
[  572.952766][ T5957] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  572.982819][ T6003] usb usb3-port1: unable to enumerate USB device
[  573.113458][ T5957] usb 6-1: Using ep0 maxpacket: 8
[  573.125879][ T5957] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  573.139877][ T5957] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  573.155974][ T5957] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  573.165987][ T5957] usb 6-1: Product: syz
[  573.170220][ T5957] usb 6-1: Manufacturer: syz
[  573.174190][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  573.186838][ T5957] usb 6-1: SerialNumber: syz
[  573.198976][ T5964] pvrusb2: Failed to create hdw handler
[  573.215229][ T5964] pvrusb2 5-1:162.76: probe with driver pvrusb2 failed with error -12
[  573.242869][ T5978] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  573.245579][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  573.268359][ T5964] pvrusb2: Failed to create hdw handler
[  573.278036][ T5964] pvrusb2 5-1:162.238: probe with driver pvrusb2 failed with error -12
[  573.302264][ T5964] usb 5-1: USB disconnect, device number 46
[  573.392717][ T5978] usb 2-1: Using ep0 maxpacket: 32
[  573.409111][ T5957] usb 6-1: palm_os_3_probe - error -71 getting connection information
[  573.423050][ T5978] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  573.433685][ T5957] visor 6-1:1.0: probe with driver visor failed with error -71
[  573.441452][ T5978] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  573.462055][ T5957] usb 6-1: USB disconnect, device number 3
[  573.473810][ T5978] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  573.489970][ T5978] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  573.504848][ T5978] usb 2-1: config 0 interface 0 has no altsetting 0
[  573.514493][ T5978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  573.523915][ T5978] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  573.532345][ T5978] usb 2-1: Product: syz
[  573.537640][ T5978] usb 2-1: Manufacturer: syz
[  573.542236][ T5978] usb 2-1: SerialNumber: syz
[  573.549943][ T5978] usb 2-1: config 0 descriptor??
[  573.559788][ T5978] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  573.571024][ T5978] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  573.767441][ T5977] usb 2-1: USB disconnect, device number 48
[  573.793433][ T5977] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  573.953155][ T5957] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  574.092964][ T5921] Bluetooth: hci2: command tx timeout
[  574.132754][ T5957] usb 5-1: Using ep0 maxpacket: 16
[  574.139444][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  574.150483][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  574.161634][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  574.174813][ T5957] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  574.183880][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.194223][ T5957] usb 5-1: config 0 descriptor??
[  574.200003][ T8485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  574.212724][ T5977] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  574.301639][ T8489] netlink: 'syz.2.950': attribute type 11 has an invalid length.
[  574.372594][ T5977] usb 6-1: Using ep0 maxpacket: 32
[  574.388599][ T5977] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  574.412683][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.448084][ T5977] usb 6-1: config 0 has no interface number 0
[  574.467371][ T5977] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  574.488075][ T5977] usb 6-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  574.514436][ T5977] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  574.532415][ T5977] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  574.541231][ T8497] netlink: 'syz.1.954': attribute type 4 has an invalid length.
[  574.556140][ T5977] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  574.572070][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.575101][ T8495] overlayfs: statfs failed on './file0'
[  574.592563][ T5977] usb 6-1: Product: syz
[  574.596931][ T5977] usb 6-1: Manufacturer: syz
[  574.601605][ T5977] usb 6-1: SerialNumber: syz
[  574.615948][ T5957] hid (null): unknown global tag 0xd
[  574.629893][ T5977] usb 6-1: config 0 descriptor??
[  574.639731][ T8487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  574.650891][ T5957] shield 0003:0955:7214.0015: unknown global tag 0xd
[  574.682683][ T5957] shield 0003:0955:7214.0015: item 0 0 1 13 parsing failed
[  574.690603][ T5957] shield 0003:0955:7214.0015: Parse failed
[  574.710689][ T5957] shield 0003:0955:7214.0015: probe with driver shield failed with error -22
[  574.748750][ T8500] netlink: 'syz.1.956': attribute type 4 has an invalid length.
[  574.827860][ T5978] usb 5-1: USB disconnect, device number 47
[  574.909498][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.919460][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.927563][ T8508] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  574.927563][ T8508] The task syz.2.957 (8508) triggered the difference, watch for misbehavior.
[  574.951598][ T5977] usb 6-1: probing VID:PID(0424:012C)   
[  574.960981][ T5977] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B
[  574.967554][ T5977] usb 6-1: vub300 testing UNKNOWN EndPoint(1) 88
[  574.974509][ T5977] usb 6-1: vub300 ignoring EndPoint(1) 88
[  574.980291][ T5977] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[  574.988324][ T5977] vub300 6-1:0.133: probe with driver vub300 failed with error -22
[  575.000878][ T5977] usb 6-1: USB disconnect, device number 4
[  575.122572][ T5964] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  575.272527][ T5964] usb 2-1: Using ep0 maxpacket: 8
[  575.279096][ T5964] usb 2-1: config 162 has an invalid interface number: 76 but max is 0
[  575.287422][ T5964] usb 2-1: config 162 has no interface number 0
[  575.298544][ T5964] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78
[  575.307840][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.316028][ T5964] usb 2-1: Product: syz
[  575.320282][ T5964] usb 2-1: Manufacturer: syz
[  575.324976][ T5964] usb 2-1: SerialNumber: syz
[  575.378622][ T8511] netlink: 9 bytes leftover after parsing attributes in process `syz.4.959'.
[  575.494427][ T8517] netlink: 176 bytes leftover after parsing attributes in process `syz.4.961'.
[  575.553284][ T5964] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  575.564009][ T5964] pvrusb2: Failed to create hdw handler
[  575.576249][ T5964] pvrusb2 2-1:162.76: probe with driver pvrusb2 failed with error -12
[  575.614389][ T5964] usb 2-1: USB disconnect, device number 49
[  575.688265][ T8524] trusted_key: syz.4.964 sent an empty control message without MSG_MORE.
[  575.689649][ T8525] netlink: 212384 bytes leftover after parsing attributes in process `syz.4.964'.
[  575.710907][ T8525] openvswitch: netlink: Message has 512 unknown bytes.
[  575.770038][ T8527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.965'.
[  575.861674][ T8529] FAULT_INJECTION: forcing a failure.
[  575.861674][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  575.877363][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.5.967 Not tainted syzkaller #0 PREEMPT(full) 
[  575.877386][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  575.877398][ T8529] Call Trace:
[  575.877405][ T8529]  <TASK>
[  575.877413][ T8529]  dump_stack_lvl+0x189/0x250
[  575.877436][ T8529]  ? __pfx____ratelimit+0x10/0x10
[  575.877464][ T8529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  575.877481][ T8529]  ? __pfx__printk+0x10/0x10
[  575.877523][ T8529]  should_fail_ex+0x414/0x560
[  575.877550][ T8529]  _copy_to_user+0x31/0xb0
[  575.877572][ T8529]  simple_read_from_buffer+0xe1/0x170
[  575.877603][ T8529]  proc_fail_nth_read+0x1b3/0x220
[  575.877626][ T8529]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  575.877646][ T8529]  ? rw_verify_area+0x2a6/0x4d0
[  575.877665][ T8529]  ? __lock_acquire+0xab9/0xd20
[  575.877681][ T8529]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  575.877701][ T8529]  vfs_read+0x200/0xa30
[  575.877722][ T8529]  ? fdget_pos+0x247/0x320
[  575.877750][ T8529]  ? __pfx___mutex_lock+0x10/0x10
[  575.877769][ T8529]  ? __pfx_vfs_read+0x10/0x10
[  575.877792][ T8529]  ? __fget_files+0x2a/0x420
[  575.877820][ T8529]  ? __fget_files+0x3a0/0x420
[  575.877843][ T8529]  ? __fget_files+0x2a/0x420
[  575.877874][ T8529]  ksys_read+0x145/0x250
[  575.877892][ T8529]  ? __fget_files+0x2a/0x420
[  575.877915][ T8529]  ? __pfx_ksys_read+0x10/0x10
[  575.877940][ T8529]  ? do_syscall_64+0xbe/0xfa0
[  575.877974][ T8529]  do_syscall_64+0xfa/0xfa0
[  575.877999][ T8529]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.878022][ T8529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.878040][ T8529]  ? clear_bhb_loop+0x60/0xb0
[  575.878062][ T8529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.878081][ T8529] RIP: 0033:0x7fc1cdf8d5bc
[  575.878096][ T8529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  575.878111][ T8529] RSP: 002b:00007fc1cedb1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  575.878129][ T8529] RAX: ffffffffffffffda RBX: 00007fc1ce1d5fa0 RCX: 00007fc1cdf8d5bc
[  575.878141][ T8529] RDX: 000000000000000f RSI: 00007fc1cedb10a0 RDI: 0000000000000004
[  575.878151][ T8529] RBP: 00007fc1cedb1090 R08: 0000000000000000 R09: 0000000000000000
[  575.878161][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.878171][ T8529] R13: 00007fc1ce1d6038 R14: 00007fc1ce1d5fa0 R15: 00007ffff060b0c8
[  575.878231][ T8529]  </TASK>
[  576.130315][ T8533] ubi31: attaching mtd0
[  576.139655][ T8533] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  576.150996][ T8533] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  576.162836][ T8533] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  576.174470][ T5921] Bluetooth: hci2: command tx timeout
[  576.184664][ T8533] ubi31 error: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read 0 bytes
[  576.213722][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.2.968 Not tainted syzkaller #0 PREEMPT(full) 
[  576.213749][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  576.213762][ T8533] Call Trace:
[  576.213770][ T8533]  <TASK>
[  576.213779][ T8533]  dump_stack_lvl+0x189/0x250
[  576.213803][ T8533]  ? __pfx_ubi_err+0x10/0x10
[  576.213829][ T8533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.213853][ T8533]  ? __pfx_do_sched_yield+0x10/0x10
[  576.213896][ T8533]  ubi_io_read+0x68d/0xb00
[  576.213937][ T8533]  ? __pfx_ubi_io_read+0x10/0x10
[  576.213969][ T8533]  ? rcu_is_watching+0x15/0xb0
[  576.213999][ T8533]  ubi_io_read_ec_hdr+0x9d/0x630
[  576.214029][ T8533]  ? ubi_io_is_bad+0xc5/0x280
[  576.214062][ T8533]  ubi_attach+0x78a/0x5c00
[  576.214090][ T8533]  ? __vmalloc_node_range_noprof+0x1249/0x12f0
[  576.214143][ T8533]  ? __pfx_ubi_attach+0x10/0x10
[  576.214178][ T8533]  ? vmalloc_noprof+0xb2/0xf0
[  576.214204][ T8533]  ubi_attach_mtd_dev+0x1b75/0x37e0
[  576.214259][ T8533]  ctrl_cdev_ioctl+0x28b/0x3e0
[  576.214289][ T8533]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  576.214315][ T8533]  ? __fget_files+0x3a0/0x420
[  576.214341][ T8533]  ? __fget_files+0x2a/0x420
[  576.214377][ T8533]  ? bpf_lsm_file_ioctl+0x9/0x20
[  576.214409][ T8533]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  576.214434][ T8533]  __se_sys_ioctl+0xfc/0x170
[  576.214459][ T8533]  do_syscall_64+0xfa/0xfa0
[  576.214488][ T8533]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.214517][ T8533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.214538][ T8533]  ? clear_bhb_loop+0x60/0xb0
[  576.214562][ T8533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.214580][ T8533] RIP: 0033:0x7f943a38eba9
[  576.214597][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.214613][ T8533] RSP: 002b:00007f943b233038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  576.214634][ T8533] RAX: ffffffffffffffda RBX: 00007f943a5d5fa0 RCX: 00007f943a38eba9
[  576.214648][ T8533] RDX: 0000200000000040 RSI: 0000000040186f40 RDI: 0000000000000005
[  576.214659][ T8533] RBP: 00007f943a411e19 R08: 0000000000000000 R09: 0000000000000000
[  576.214671][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.214683][ T8533] R13: 00007f943a5d6038 R14: 00007f943a5d5fa0 R15: 00007ffc05833808
[  576.214714][ T8533]  </TASK>
[  576.497303][ T8533] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  576.527008][ T8537] netlink: 'syz.1.970': attribute type 4 has an invalid length.
[  576.592562][ T6003] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  576.691664][ T8543] netlink: 72 bytes leftover after parsing attributes in process `syz.1.973'.
[  576.692362][ T8545] FAULT_INJECTION: forcing a failure.
[  576.692362][ T8545] name failslab, interval 1, probability 0, space 0, times 0
[  576.714547][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.4.974 Not tainted syzkaller #0 PREEMPT(full) 
[  576.714573][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  576.714585][ T8545] Call Trace:
[  576.714593][ T8545]  <TASK>
[  576.714602][ T8545]  dump_stack_lvl+0x189/0x250
[  576.714626][ T8545]  ? __pfx____ratelimit+0x10/0x10
[  576.714654][ T8545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.714673][ T8545]  ? __pfx__printk+0x10/0x10
[  576.714708][ T8545]  ? __pfx___might_resched+0x10/0x10
[  576.714737][ T8545]  should_fail_ex+0x414/0x560
[  576.714765][ T8545]  should_failslab+0xa8/0x100
[  576.714791][ T8545]  kmem_cache_alloc_noprof+0x74/0x6e0
[  576.714812][ T8545]  ? __anon_vma_prepare+0xcb/0x4a0
[  576.714839][ T8545]  __anon_vma_prepare+0xcb/0x4a0
[  576.714860][ T8545]  ? __pte_alloc+0x15e/0x1a0
[  576.714889][ T8545]  __handle_mm_fault+0x4aff/0x5400
[  576.714926][ T8545]  ? __pfx___handle_mm_fault+0x10/0x10
[  576.714966][ T8545]  ? find_vma+0xe7/0x160
[  576.714984][ T8545]  ? __pfx_find_vma+0x10/0x10
[  576.715008][ T8545]  handle_mm_fault+0x40a/0x8e0
[  576.715040][ T8545]  do_user_addr_fault+0x764/0x1390
[  576.715081][ T8545]  exc_page_fault+0x82/0x100
[  576.715111][ T8545]  asm_exc_page_fault+0x26/0x30
[  576.715130][ T8545] RIP: 0010:__put_user_4+0xd/0x20
[  576.715159][ T8545] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 5d 03 00 90 90 90 90 90 90 90 90 90 90
[  576.715176][ T8545] RSP: 0018:ffffc9001c3dfc68 EFLAGS: 00050206
[  576.715194][ T8545] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000000800
[  576.715208][ T8545] RDX: 0000000000000000 RSI: ffffffff8de8f7b6 RDI: ffffffff8c04f000
[  576.715222][ T8545] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff820bf310
[  576.715236][ T8545] R10: dffffc0000000000 R11: fffffbfff1fca187 R12: 00000000000000c9
[  576.715250][ T8545] R13: 0000000000000044 R14: 0000200000000800 R15: ffff888079b2a800
[  576.715271][ T8545]  ? __might_fault+0xb0/0x130
[  576.715300][ T8545]  vt_do_diacrit+0x534/0xa40
[  576.715333][ T8545]  vt_ioctl+0x101a/0x1f20
[  576.715368][ T8545]  ? __pfx_vt_ioctl+0x10/0x10
[  576.715408][ T8545]  ? __fget_files+0x2a/0x420
[  576.715438][ T8545]  ? tty_jobctrl_ioctl+0x369/0xb70
[  576.715459][ T8545]  ? __fget_files+0x3a0/0x420
[  576.715483][ T8545]  ? __fget_files+0x2a/0x420
[  576.715512][ T8545]  tty_ioctl+0x926/0xde0
[  576.715540][ T8545]  ? __pfx_tty_ioctl+0x10/0x10
[  576.715566][ T8545]  __se_sys_ioctl+0xfc/0x170
[  576.715590][ T8545]  do_syscall_64+0xfa/0xfa0
[  576.715618][ T8545]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.715646][ T8545]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.715666][ T8545]  ? clear_bhb_loop+0x60/0xb0
[  576.715691][ T8545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.715709][ T8545] RIP: 0033:0x7f11a278eba9
[  576.715726][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.715743][ T8545] RSP: 002b:00007f11a35cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  576.715763][ T8545] RAX: ffffffffffffffda RBX: 00007f11a29d5fa0 RCX: 00007f11a278eba9
[  576.715778][ T8545] RDX: 0000200000000800 RSI: 0000000000004b4a RDI: 0000000000000003
[  576.715812][ T8545] RBP: 00007f11a35cc090 R08: 0000000000000000 R09: 0000000000000000
[  576.715825][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.715836][ T8545] R13: 00007f11a29d6038 R14: 00007f11a29d5fa0 R15: 00007ffe0aed93d8
[  576.715871][ T8545]  </TASK>
[  576.742717][ T6003] usb 6-1: Using ep0 maxpacket: 16
[  576.818615][ T8547] netlink: 56 bytes leftover after parsing attributes in process `syz.4.975'.
[  576.824641][ T6003] usb 6-1: config 252 has an invalid interface number: 165 but max is 0
[  576.932579][ T5978] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  576.933732][ T6003] usb 6-1: config 252 has no interface number 0
[  577.006764][ T8550] netlink: 9 bytes leftover after parsing attributes in process `syz.4.976'.
[  577.026829][ T6003] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[  577.124331][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.124937][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.151470][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.166842][ T6003] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  577.171325][ T5978] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  577.181781][ T6003] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  577.195381][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.228857][ T5978] usb 3-1: config 0 descriptor??
[  577.326697][ T8556] netlink: 176 bytes leftover after parsing attributes in process `syz.4.979'.
[  577.380664][ T5957] usb 6-1: USB disconnect, device number 5
[  577.439994][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.453286][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.672784][ T5978] usbhid 3-1:0.0: can't add hid device: -71
[  577.681844][ T5978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  577.702187][ T5978] usb 3-1: USB disconnect, device number 55
[  577.982676][ T6003] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  578.132597][ T6003] usb 2-1: Using ep0 maxpacket: 32
[  578.139330][ T6003] usb 2-1: unable to get BOS descriptor or descriptor too short
[  578.148586][ T6003] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  578.160722][ T6003] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  578.169810][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.178968][ T6003] usb 2-1: Product: syz
[  578.183330][ T6003] usb 2-1: Manufacturer: syz
[  578.184244][   T31] INFO: task syz.0.60:6162 blocked for more than 143 seconds.
[  578.187925][ T6003] usb 2-1: SerialNumber: syz
[  578.201217][   T31]       Not tainted syzkaller #0
[  578.206713][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  578.222841][   T31] task:syz.0.60        state:D stack:27208 pid:6162  tgid:6161  ppid:5908   task_flags:0x400040 flags:0x00004004
[  578.245780][   T31] Call Trace:
[  578.249182][   T31]  <TASK>
[  578.252203][   T31]  __schedule+0x1798/0x4cc0
[  578.264828][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  578.270924][   T31]  ? __lock_acquire+0xab9/0xd20
[  578.275924][   T31]  ? __lock_acquire+0xab9/0xd20
[  578.280859][   T31]  ? __pfx___schedule+0x10/0x10
[  578.286505][   T31]  ? schedule+0x91/0x360
[  578.290833][   T31]  schedule+0x165/0x360
[  578.295090][   T31]  schedule_preempt_disabled+0x13/0x30
[  578.300664][   T31]  __mutex_lock+0x7e6/0x1350
[  578.305681][   T31]  ? __mutex_lock+0x5bb/0x1350
[  578.310485][   T31]  ? usbdev_open+0x16e/0x760
[  578.316613][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  578.321656][   T31]  ? bus_find_device+0x273/0x2b0
[  578.327052][   T31]  ? __pfx_bus_find_device+0x10/0x10
[  578.332364][   T31]  ? __lock_acquire+0xab9/0xd20
[  578.337257][   T31]  usbdev_open+0x16e/0x760
[  578.341692][   T31]  ? __pfx_usbdev_open+0x10/0x10
[  578.346714][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  578.351949][   T31]  chrdev_open+0x4cc/0x5e0
[  578.357565][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  578.362572][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  578.368929][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  578.374006][   T31]  do_dentry_open+0x953/0x13f0
[  578.378828][   T31]  vfs_open+0x3b/0x340
[  578.382985][   T31]  ? path_openat+0x2ecd/0x3830
[  578.387761][   T31]  path_openat+0x2ee5/0x3830
[  578.392374][   T31]  ? __pfx_path_openat+0x10/0x10
[  578.397358][   T31]  do_filp_open+0x1fa/0x410
[  578.401880][   T31]  ? __lock_acquire+0xab9/0xd20
[  578.406867][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  578.412102][   T31]  ? _raw_spin_unlock+0x28/0x50
[  578.412153][ T6003] usb 2-1: Invalid number of CPorts: 0
[  578.417360][   T31]  ? alloc_fd+0x64c/0x6c0
[  578.428376][   T31]  do_sys_openat2+0x121/0x1c0
[  578.430524][ T6003] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22
[  578.433438][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  578.447702][   T31]  ? exc_page_fault+0x82/0x100
[  578.452785][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  578.472717][   T31]  __x64_sys_openat+0x138/0x170
[  578.477674][   T31]  do_syscall_64+0xfa/0xfa0
[  578.482272][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  578.487986][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.494747][   T31]  ? clear_bhb_loop+0x60/0xb0
[  578.499520][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.505973][   T31] RIP: 0033:0x7f83f0d8d510
[  578.510476][   T31] RSP: 002b:00007f83f1b58b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  578.519468][   T31] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007f83f0d8d510
[  578.528084][   T31] RDX: 000000000000a401 RSI: 00007f83f1b58c10 RDI: 00000000ffffff9c
[  578.537268][   T31] RBP: 00007f83f1b58c10 R08: 0000000000000000 R09: 0000000000000000
[  578.545356][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  578.553367][   T31] R13: 00007f83f0fd6038 R14: 00007f83f0fd5fa0 R15: 00007ffeeff7a078
[  578.561344][   T31]  </TASK>
[  578.564478][   T31] 
[  578.564478][   T31] Showing all locks held in the system:
[  578.572195][   T31] 1 lock held by khungtaskd/31:
[  578.588990][   T31]  #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  578.601907][   T31] 2 locks held by kworker/u8:3/49:
[  578.607104][   T31] 2 locks held by pvrusb2-context/2345:
[  578.616580][   T31]  #0: ffff888029a18188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0
[  578.628020][   T31]  #1: ffffffff8e3e2790 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0
[  578.638617][   T31] 1 lock held by klogd/5222:
[  578.643268][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  578.653464][   T31] 2 locks held by getty/5626:
[  578.658215][   T31]  #0: ffff88814d5060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  578.668401][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  578.678762][   T31] 5 locks held by kworker/u8:7/5997:
[  578.684319][   T31] 6 locks held by kworker/1:6/5999:
[  578.689520][   T31]  #0: ffff8881446eed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  578.700881][   T31]  #1: ffffc9000b6c7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  578.712794][   T31]  #2: ffff8880285c8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  578.721656][   T31]  #3: ffff88807cd9b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950
[  578.732145][   T31]  #4: ffff88802a248160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[  578.743429][   T31]  #5: ffff888029a18188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500
[  578.753961][   T31] 4 locks held by udevd/6002:
[  578.758644][   T31]  #0: ffff888075b7c1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20
[  578.767539][   T31]  #1: ffff88807a87ac88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  578.776991][   T31]  #2: ffff88807dc82878 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  578.786726][   T31]  #3: ffff88807cd9b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  578.796208][   T31] 1 lock held by syz.0.60/6162:
[  578.801093][   T31]  #0: ffff8880285c8198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[  578.810305][   T31] 
[  578.813240][   T31] =============================================
[  578.813240][   T31] 
[  578.821662][   T31] NMI backtrace for cpu 0
[  578.821677][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  578.821698][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  578.821711][   T31] Call Trace:
[  578.821719][   T31]  <TASK>
[  578.821727][   T31]  dump_stack_lvl+0x189/0x250
[  578.821752][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  578.821771][   T31]  ? __pfx__printk+0x10/0x10
[  578.821811][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  578.821838][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  578.821865][   T31]  ? __pfx__printk+0x10/0x10
[  578.821902][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  578.821926][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  578.821953][   T31]  watchdog+0xf60/0xfa0
[  578.821978][   T31]  ? watchdog+0x1e2/0xfa0
[  578.822004][   T31]  kthread+0x711/0x8a0
[  578.822035][   T31]  ? __pfx_watchdog+0x10/0x10
[  578.822054][   T31]  ? __pfx_kthread+0x10/0x10
[  578.822083][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.822110][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  578.822136][   T31]  ? __pfx_kthread+0x10/0x10
[  578.822165][   T31]  ret_from_fork+0x47c/0x820
[  578.822191][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  578.822221][   T31]  ? __switch_to_asm+0x39/0x70
[  578.822240][   T31]  ? __switch_to_asm+0x33/0x70
[  578.822259][   T31]  ? __pfx_kthread+0x10/0x10
[  578.822288][   T31]  ret_from_fork_asm+0x1a/0x30
[  578.822326][   T31]  </TASK>
[  578.822333][   T31] Sending NMI from CPU 0 to CPUs 1:
[  578.973882][    C1] NMI backtrace for cpu 1
[  578.973899][    C1] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  578.973918][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  578.973930][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  578.973958][    C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x30/0x2a0
[  578.973979][    C1] Code: 41 56 41 54 53 48 83 ec 10 65 48 8b 05 09 69 49 11 48 89 44 24 08 83 3d 3d b6 47 0e 00 0f 84 9d 01 00 00 65 8b 05 00 69 49 11 <a9> 00 00 f0 00 0f 85 8b 01 00 00 65 8b 05 ee a8 49 11 85 c0 0f 85
[  578.973994][    C1] RSP: 0018:ffffc900053778a0 EFLAGS: 00000002
[  578.974008][    C1] RAX: 0000000080000001 RBX: 0000000000000201 RCX: 3b39df7d2bad8500
[  578.974020][    C1] RDX: 0000000000000000 RSI: ffffffff8c04efe0 RDI: ffffffff8c04efa0
[  578.974032][    C1] RBP: ffffc90005377960 R08: ffffffff8fe50c37 R09: 1ffffffff1fca186
[  578.974045][    C1] R10: dffffc0000000000 R11: fffffbfff1fca187 R12: ffffffff8723ae37
[  578.974058][    C1] R13: ffff888063af8140 R14: dffffc0000000000 R15: 1ffff92000a6ef1c
[  578.974071][    C1] FS:  0000000000000000(0000) GS:ffff8881258b1000(0000) knlGS:0000000000000000
[  578.974085][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.974097][    C1] CR2: 00007ffe0aed867c CR3: 0000000074f22000 CR4: 00000000003526f0
[  578.974112][    C1] Call Trace:
[  578.974118][    C1]  <TASK>
[  578.974127][    C1]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  578.974150][    C1]  trace_hardirqs_on+0x28/0x40
[  578.974166][    C1]  __local_bh_enable_ip+0x12d/0x1c0
[  578.974187][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  578.974208][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  578.974232][    C1]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  578.974255][    C1]  nsim_dev_trap_report_work+0x7c7/0xb80
[  578.974285][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  578.974307][    C1]  process_scheduled_works+0xae1/0x17b0
[  578.974340][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  578.974367][    C1]  worker_thread+0x8a0/0xda0
[  578.974399][    C1]  kthread+0x711/0x8a0
[  578.974424][    C1]  ? __pfx_worker_thread+0x10/0x10
[  578.974444][    C1]  ? __pfx_kthread+0x10/0x10
[  578.974468][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.974491][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  578.974514][    C1]  ? __pfx_kthread+0x10/0x10
[  578.974537][    C1]  ret_from_fork+0x47c/0x820
[  578.974558][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  578.974580][    C1]  ? __switch_to_asm+0x39/0x70
[  578.974597][    C1]  ? __switch_to_asm+0x33/0x70
[  578.974614][    C1]  ? __pfx_kthread+0x10/0x10
[  578.974637][    C1]  ret_from_fork_asm+0x1a/0x30
[  578.974663][    C1]  </TASK>
[  578.975092][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  579.233478][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  579.242586][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  579.252653][   T31] Call Trace:
[  579.255940][   T31]  <TASK>
[  579.258876][   T31]  dump_stack_lvl+0x99/0x250
[  579.263466][   T31]  ? __asan_memcpy+0x40/0x70
[  579.268061][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  579.273252][   T31]  ? __pfx__printk+0x10/0x10
[  579.277851][   T31]  vpanic+0x237/0x6d0
[  579.281831][   T31]  ? __pfx_vpanic+0x10/0x10
[  579.286340][   T31]  ? preempt_schedule_common+0x83/0xd0
[  579.291820][   T31]  panic+0xb9/0xc0
[  579.295534][   T31]  ? __pfx_panic+0x10/0x10
[  579.299947][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  579.305407][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  579.311556][   T31]  watchdog+0xf9f/0xfa0
[  579.315709][   T31]  ? watchdog+0x1e2/0xfa0
[  579.320037][   T31]  kthread+0x711/0x8a0
[  579.324108][   T31]  ? __pfx_watchdog+0x10/0x10
[  579.328777][   T31]  ? __pfx_kthread+0x10/0x10
[  579.333370][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  579.338564][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  579.343760][   T31]  ? __pfx_kthread+0x10/0x10
[  579.348359][   T31]  ret_from_fork+0x47c/0x820
[  579.352945][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  579.358056][   T31]  ? __switch_to_asm+0x39/0x70
[  579.362814][   T31]  ? __switch_to_asm+0x33/0x70
[  579.367568][   T31]  ? __pfx_kthread+0x10/0x10
[  579.372155][   T31]  ret_from_fork_asm+0x1a/0x30
[  579.376923][   T31]  </TASK>
[  579.380184][   T31] Kernel Offset: disabled
[  579.384497][   T31] Rebooting in 86400 seconds..