last executing test programs:

7.364401262s ago: executing program 2 (id=2131):
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x40, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x1, @mcast1}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e1f, 0x7, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x80000000}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2541}]}]}, 0x60}}, 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d50905"], 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000180)={0x356, 0x960, 0x3619e9e119fcfddd, 0x400, 0x6, 0xfffffffc, 0x0, 0x0, {0xfffff519, 0x8}, {0x8, 0x8}, {0xe524, 0xb, 0x1}, {0x4, 0xb}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41, 0xa3b, 0xb, 0x8, 0x1000, 0x6, 0x8, 0x1, 0x2, 0x9})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0x8af0a56d13e39705)
futex(&(0x7f0000004000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYRES16=0x0], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.51264078s ago: executing program 1 (id=2142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x0, 0x0)
socket(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa0}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b61, 0x200, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 19)

3.987172946s ago: executing program 2 (id=2144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x7c}}, 0x4c001)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='::.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x6)
landlock_restrict_self(r3, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0)
landlock_restrict_self(r5, 0x4)
r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
unlinkat(r6, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r8 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.880119867s ago: executing program 1 (id=2146):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = epoll_create(0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3b94, &(0x7f0000000180)={0x48})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10000014})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x0, 0x8, "141b2bbf8e1f979bf03aea233d927a59e8a19eacf95810b5274a540f5ef6128e693ad527d29fa64f359b946a314a9ca893199763fc65ff782e904a29bc54186fd702879e24380cfee37b8f625f4f23a4d458c14d6f378851278ef12a15ef6a0253d5cb28d9c04e8c832953db030e4b41bac8d85ad078f5ee02b3d83419"}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0xfffffffffffffe49, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x21, 0x1, 0x170bd25, 0x0, {0x2}, [@typed={0xfd, 0x116, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40940}, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000340)="18000000010005", 0x7)
preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0x4, 0x68b8)
r7 = socket$netlink(0x10, 0x3, 0x4)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
read$FUSE(r8, &(0x7f0000001180)={0x2020}, 0x2020)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

3.561961279s ago: executing program 3 (id=2148):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close_range(r0, 0xffffffffffffffff, 0x0)
mount$overlay(0x3f00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3.464201437s ago: executing program 3 (id=2149):
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd91e, 0x800)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000200)={0x10001, 0x203184, "3a62786cc6983ab9387ae6ebc7f6a324667027dadba5c897", {0xffff, 0x8}, 0x5})

3.184300153s ago: executing program 3 (id=2151):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1})
r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"])
keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x62, 0x36, 0x36, 0x0, 0x62, 0x64, 0x0, 0x0, 0x0, 0x65]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000180)={0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000001880)={0x3, r4, 0xfff, 0x3ff, 0x0, 0x944, 0xe})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000b40))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x325)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={<r5=>0x0, 0xed8, 0x5, 0x1})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r5, 0xffffffffffffff6c, 0x800, 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002640)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x4008804)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

2.919984849s ago: executing program 1 (id=2153):
sched_getattr(0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904"], 0x0)

2.671740155s ago: executing program 0 (id=2155):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0017000412"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}})
r6 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0)
clock_gettime(0x5, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0})
ppoll(&(0x7f0000000100)=[{r6, 0x3306}], 0x1, &(0x7f0000000180)={r7, r8+60000000}, 0x0, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065fffffc7f000008003950323030302e3f297e4470b16754f1113b4efe7eac3d1f8ed8ec43d4c35074339f400f85b9f0678ee2f279f4cc11f74c0f33a29227fe3e495e2f1aa7f7595c07347f7c89a899162a7eb074696bdd1f74c771403ccc339a8486aa7182b39d89748cac2497e9d852ffd257ce154ac9870d4a708e63585cb3a1ff74c1823f78195cbc53ba87e735a2382267dc6cbb1efefd3a9501b30b0b5f35cdaae643df0579db0aacd0c8aed7c7f3754b3632131c9f18f4513f0b1ea05231e54a7e1edead3d15a5d52332203f"], 0xfe78)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_submit(0x0, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r11 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x37}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x23, 0x3, 0x401}, {0x5, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x0, 0xffffffff}}, 0xe8)
sendmmsg(r11, &(0x7f0000000480), 0x21, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r13, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1c48111}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x10, 0x7a, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x80c0)

2.337891536s ago: executing program 2 (id=2156):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.659939528s ago: executing program 2 (id=2157):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = socket(0x28, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x1000000, 0xfffffffa], [], [0x400000000000000, 0x0, 0x0, 0x5]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x3, 0xfe, 0x7fffffff, 0x3, 0x9}, 0x14)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000004000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, 0x4000, 0x2})
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x1e8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @void, @val={0xc, 0x99, {0x40, 0x78}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0xce, 0xc5, "0ae39c479844ea816b4656c97bde946f24cc86a053b0c9c3090551902c34c47c075f2d97e1772cfd308bde1b03d12cac57076224c9ee0d7c7af3c3ebbba50e4d7cd21e9cb6423cb97332059961abdfab1d39e49f16d65c5152aaa5ca8ad358e54160a685ad56bffd10d6072469a488401f1433a652390cb12ecd98b00c7b3b14b72d250fefe857e39e80becde3de361e16ff9a2109e2c8a9401dada1e68bbbd8c33d5a99b6abbc44793eb80322026576a6addc64197a870a40472b3c49d58cc381c3c868bcc25bafd2e6"}, @NL80211_ATTR_VENDOR_DATA={0xbd, 0xc5, "c46436d094e2bc27a18504cc254e434d21c2ff036a88b1ed91adf0d9305353f864721e08b6966e49224be6990fc74819fc8757e5896694bc5831f0d08bc4e209d1d53329982517a256eef18aebb03255be4b646bf9595cf03a1c34cd173a9f6f38d6dd27ea7bfeb05cefc6afb2380058bf9c1ffe297e347b855ad990012f5801414c6c5feae339e58fe374d1834bece422024fac4d4963adb204e55aa4cf875ffc46d021cdf452534bf9a20d9d3d4a4ad373a1290d61af41a5"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4)
setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000200)=""/244)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', <r7=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f0000001240)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "3cd3dd92ef26467ef0ca7ad9ee3e70043fa72360e4360307b45f38cacca0c95865afb7c5a410f0e3a11a2826e0b07f0d65b9797b8f04eb02020dfb2d22ae03f9"}, 0x94}}, 0x0)

1.43746542s ago: executing program 2 (id=2158):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
r2 = semget$private(0x0, 0x1, 0x404)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000001bc0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f}, 0x7fffffff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xb4})
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040))

1.332154298s ago: executing program 1 (id=2159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12f8a5041bb6bf5901100316c6c82040200075f351010203010902120001095500080904"], 0x0)
r2 = syz_pidfd_open(r1, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xff07, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xf033, 0x1, 0x1, 0x154, 0x0, r8}, 0x0, 0x1, 0x0, 0x0)
syz_ublk_process_io(0x0, 0x2, 0x8, 0x0, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300040000000000000a0000010900020073797a32000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x860}, 0x8000)
r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0xc540, 0x0)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0)

1.131582883s ago: executing program 0 (id=2160):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x51}, {0xed, 0xc9}}}, 0x6)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ffffffe, 0xffffffff, 0x3, 0xfffffffc}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863", 0x15}], 0x2, 0x0, 0x0, 0x10}, 0x4000000)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="07382a8c1e68231035af740b696ac11b843483c284414850a575fcb2769b8052dc36c671610939ed5b0688c76ef020840b0a27d2f36b034e753fa27b9001fb70551a09d46ba3d4831297a4cc18f6cbab75ec1cf7b35a7b1123bfb15ef56ed713e30025c5b339453ff28660d8436e4ca6c67032dc5f76812b662dac7bea963a3c39eebafa3535b5db46773d3d9212fc6942bf5a602653551a10dc1be0e2bdbd3248b3adcf24e6d6e02901003814721a9c3296c5dde212cded5babe5a4e9a7ea3699bb68696479dcbc9b5114da051c01e408b40aff420b3eb77dd9857de3c1072f044e884c956a96661a1287969ec43c", 0xef}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x88, 0x117, 0x2, 0x6e, "1b38aaef61ff4ffbefd545749b599bc971d57cb1a8ed9d2dc9da5145708f7630fcc2b42e8009be8733f24f866b57658fe9cbbd8ac697284c92a6c535efb6b860cc8fd118b5642b4479ad3bf7be971be277a57c995d1d383345a96561cbba0651996203519d794b34743461a9dd09"}], 0xa0, 0x800}, 0x4)

1.007998805s ago: executing program 0 (id=2161):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0xfffffe60, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @multicast2}, 0x10)

888.424899ms ago: executing program 3 (id=2162):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x2, 0xc040)

870.264254ms ago: executing program 0 (id=2163):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newsa={0x13c, 0x10, 0x1, 0x4, 0x8000, {{@in6=@private1, @in6=@mcast1, 0x400, 0xecdf}, {@in=@private=0xa010101, 0x0, 0x32}, @in6=@private1, {0x1a00, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

679.983801ms ago: executing program 3 (id=2164):
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0)
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000200)={0xb, 0x1})
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000240)=""/159, 0x9f}], 0x2, 0x1a, 0xf7)
renameat2(r0, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard')

677.917445ms ago: executing program 0 (id=2165):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

595.55728ms ago: executing program 3 (id=2166):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2843, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x108001, 0x24ff871999e2dfe7, 0x3, 0x1, 0xcf4, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_READ_SNR(r3, 0x80026f48, &(0x7f0000000000))
syz_fuse_handle_req(r1, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1f00000000000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@wr_drn={0x68, 0x20, {0x7, 0x6}}, @nested_amd_stgi={0x17e, 0x10}], 0x30})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

301.512874ms ago: executing program 0 (id=2167):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016", 0x33}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async, rerun: 64)
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe6, 0x3, 0x4, 0x6}, @as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

137.661137ms ago: executing program 1 (id=2168):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffa, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]})

262.719µs ago: executing program 2 (id=2169):
memfd_secret(0x0) (async)
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5)
syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
close(0x3)
openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) (async)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/214, 0xd6}], 0x1)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x2, {0xa, 0x4e23, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x33, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18)
ftruncate(r0, 0x51a9497)
r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x480200)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000100)=0x21)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000080)={"dd7ff7bc", 0xf09b, 0x6, 0x7, 0x10001, 0x4, "785144b84ef7ebe60630484ac7b0c8", "02004900", "cd5ca376", "b4538793", ["1aff03000000006b00a7e31f", "000000000000000000f58704", "0300ffffffffffff00004000", "ffffd39271af6300000200"]})
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x5, &(0x7f0000000000)=0xa)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8)
sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080))

0s ago: executing program 1 (id=2170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001f5ffffff00000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040)

kernel console output (not intermixed with test programs):


[  456.299076][   T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  456.459024][   T43] usb 2-1: Using ep0 maxpacket: 8
[  456.460927][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  456.463995][   T43] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  456.464030][   T43] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  456.464048][   T43] usb 2-1: Product: syz
[  456.464058][   T43] usb 2-1: Manufacturer: syz
[  456.464069][   T43] usb 2-1: SerialNumber: syz
[  456.739681][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  456.819070][   T43] usb 2-1: palm_os_3_probe - error -71 getting connection information
[  456.819181][   T43] visor 2-1:1.0: probe with driver visor failed with error -71
[  456.851360][   T43] usb 2-1: USB disconnect, device number 89
[  457.299273][  T823] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  457.451021][  T823] usb 1-1: Using ep0 maxpacket: 32
[  457.453277][  T823] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  457.453309][  T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.487938][  T823] usb 1-1: config 0 descriptor??
[  457.612852][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'.
[  457.681872][   T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  457.706862][  T823] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  457.734179][  T823] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  457.734354][  T823] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  457.831165][   T43] usb 2-1: Using ep0 maxpacket: 16
[  457.837116][   T43] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  457.837236][   T43] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  457.837295][   T43] usb 2-1: config 8 has no interface number 0
[  457.866996][   T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  457.867030][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.867055][   T43] usb 2-1: Product: syz
[  457.867073][   T43] usb 2-1: Manufacturer: syz
[  457.867107][   T43] usb 2-1: SerialNumber: syz
[  458.211433][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.212427][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.219731][ T5768] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  458.263552][   T43] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  458.271989][ T5632] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  458.297682][   T43] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  458.297726][   T43] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  458.325847][   T43] usb 2-1: USB disconnect, device number 90
[  458.335782][   T43] garmin_gps 2-1:8.206: device disconnected
[  458.419428][ T5768] usb 3-1: Using ep0 maxpacket: 8
[  458.421936][ T5768] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  458.421966][ T5768] usb 3-1: config 0 has no interface number 0
[  458.422022][ T5768] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  458.422049][ T5768] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  458.422074][ T5768] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  458.422101][ T5768] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  458.422152][ T5768] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  458.422170][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.426661][ T5768] usb 3-1: config 0 descriptor??
[  458.457484][ T5632] usb 4-1: Using ep0 maxpacket: 8
[  458.538239][ T5632] usb 4-1: config 0 interface 0 has no altsetting 0
[  458.538281][ T5632] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  458.538306][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.616979][ T5632] usb 4-1: config 0 descriptor??
[  458.706409][ T5768] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  458.742383][ T5768] usb 3-1: USB disconnect, device number 112
[  458.787504][ T5768] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  459.115669][ T5632] hid_parser_main: 471 callbacks suppressed
[  459.115793][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115830][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115858][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115882][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115907][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115934][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115959][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.115986][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.116012][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.116039][ T5632] nintendo 0003:057E:200E.0016: unknown main item tag 0x0
[  459.207338][ T5632] nintendo 0003:057E:200E.0016: hidraw0: USB HID v80.c1 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0
[  459.287434][ T5632] nintendo 0003:057E:200E.0016: Failed charging grip handshake
[  459.287460][ T5632] nintendo 0003:057E:200E.0016: Failed to initialize controller; ret=-110
[  459.402620][ T5632] nintendo 0003:057E:200E.0016: probe - fail = -110
[  459.402791][ T5632] nintendo 0003:057E:200E.0016: probe with driver nintendo failed with error -110
[  459.417387][ T5632] usb 4-1: USB disconnect, device number 117
[  459.507312][T11032] fido_id[11032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  459.709384][ T5701] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  459.859887][ T5701] usb 3-1: Using ep0 maxpacket: 32
[  459.863305][ T5701] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  459.863340][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0
[  459.863377][ T5701] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  459.863394][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.884165][ T5701] usb 3-1: config 0 descriptor??
[  460.036609][T11048] CUSE: info not properly terminated
[  460.579491][   T43] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  460.696916][ T5701] corsair-cpro 0003:1B1C:0C10.0017: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  460.780658][   T43] usb 4-1: Using ep0 maxpacket: 16
[  460.783212][   T43] usb 4-1: config 8 has an invalid interface number: 206 but max is 0
[  460.783242][   T43] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  460.783262][   T43] usb 4-1: config 8 has no interface number 0
[  460.812126][   T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  460.812159][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.812182][   T43] usb 4-1: Product: syz
[  460.812198][   T43] usb 4-1: Manufacturer: syz
[  460.812213][   T43] usb 4-1: SerialNumber: syz
[  461.129475][T11065] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  461.129507][T11065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  461.254262][ T5701] corsair-cpro 0003:1B1C:0C10.0017: probe with driver corsair-cpro failed with error -71
[  461.314216][ T5701] usb 3-1: USB disconnect, device number 113
[  461.584085][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.598735][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.359336][   T43] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected
[  462.387470][   T43] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  462.387798][   T43] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  462.408744][   T43] usb 4-1: USB disconnect, device number 118
[  462.420962][   T43] garmin_gps 4-1:8.206: device disconnected
[  462.441610][T11078] netlink: 'syz.2.1730': attribute type 27 has an invalid length.
[  462.449854][T11079] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1730'.
[  462.631846][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1733'.
[  462.698746][T11089] FAULT_INJECTION: forcing a failure.
[  462.698746][T11089] name failslab, interval 1, probability 0, space 0, times 0
[  462.698787][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.2.1735 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  462.698818][T11089] Tainted: [L]=SOFTLOCKUP
[  462.698826][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  462.698840][T11089] Call Trace:
[  462.698848][T11089]  <TASK>
[  462.698857][T11089]  dump_stack_lvl+0xe8/0x150
[  462.698893][T11089]  should_fail_ex+0x467/0x600
[  462.698931][T11089]  should_failslab+0xa8/0x100
[  462.698955][T11089]  __kmalloc_noprof+0xfb/0x790
[  462.698988][T11089]  ? tomoyo_realpath_from_path+0xef/0x640
[  462.699020][T11089]  ? tomoyo_realpath_from_path+0xef/0x640
[  462.699054][T11089]  ? __kmalloc_noprof+0x436/0x790
[  462.699090][T11089]  tomoyo_realpath_from_path+0xef/0x640
[  462.699138][T11089]  tomoyo_mount_permission+0x3e9/0x9e0
[  462.699168][T11089]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  462.699205][T11089]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  462.699236][T11089]  ? kasan_save_track+0x4f/0x80
[  462.699350][T11089]  ? kasan_quarantine_put+0xbb/0x1f0
[  462.699385][T11089]  security_sb_mount+0xda/0x2d0
[  462.699422][T11089]  path_mount+0xbc/0x1050
[  462.699456][T11089]  ? user_path_at+0xd4/0x160
[  462.699484][T11089]  __se_sys_mount+0x31d/0x420
[  462.699511][T11089]  ? __pfx___se_sys_mount+0x10/0x10
[  462.699539][T11089]  ? __x64_sys_mount+0x20/0xc0
[  462.699564][T11089]  do_syscall_64+0x17b/0x530
[  462.699585][T11089]  ? irqentry_exit+0x10f/0x8f0
[  462.699606][T11089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.699644][T11089]  ? clear_bhb_loop+0x40/0x90
[  462.699672][T11089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.699695][T11089] RIP: 0033:0x7f432454de59
[  462.699716][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.699735][T11089] RSP: 002b:00007f43227a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  462.699758][T11089] RAX: ffffffffffffffda RBX: 00007f43247d5fa0 RCX: 00007f432454de59
[  462.699774][T11089] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  462.699788][T11089] RBP: 00007f43227a6090 R08: 0000200000000140 R09: 0000000000000000
[  462.699802][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.699815][T11089] R13: 00007f43247d6038 R14: 00007f43247d5fa0 R15: 00007ffe916732f8
[  462.699849][T11089]  </TASK>
[  462.901403][T11089] ERROR: Out of memory at tomoyo_realpath_from_path.
[  463.259858][ T5701] usb 3-1: new full-speed USB device number 114 using dummy_hcd
[  463.289772][   T43] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  463.389950][ T5701] usb 3-1: device descriptor read/64, error -71
[  463.439812][   T43] usb 2-1: Using ep0 maxpacket: 8
[  463.442405][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  463.446542][   T43] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  463.446578][   T43] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  463.446604][   T43] usb 2-1: Product: syz
[  463.446629][   T43] usb 2-1: Manufacturer: syz
[  463.446647][   T43] usb 2-1: SerialNumber: syz
[  463.641890][ T5701] usb 3-1: new full-speed USB device number 115 using dummy_hcd
[  463.744621][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  463.770080][ T5701] usb 3-1: device descriptor read/64, error -71
[  463.820098][   T43] usb 2-1: palm_os_3_probe - error -110 getting connection information
[  463.820333][   T43] visor 2-1:1.0: probe with driver visor failed with error -110
[  463.906896][ T5703] usb 2-1: USB disconnect, device number 91
[  463.911107][ T5701] usb usb3-port1: attempt power cycle
[  464.252339][ T5701] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  464.270624][ T5701] usb 3-1: device descriptor read/8, error -71
[  464.275678][T11112] FAULT_INJECTION: forcing a failure.
[  464.275678][T11112] name failslab, interval 1, probability 0, space 0, times 0
[  464.275706][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.3.1742 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  464.275728][T11112] Tainted: [L]=SOFTLOCKUP
[  464.275733][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  464.275743][T11112] Call Trace:
[  464.275749][T11112]  <TASK>
[  464.275756][T11112]  dump_stack_lvl+0xe8/0x150
[  464.275780][T11112]  should_fail_ex+0x467/0x600
[  464.275804][T11112]  should_failslab+0xa8/0x100
[  464.275822][T11112]  kmem_cache_alloc_node_noprof+0xac/0x660
[  464.275849][T11112]  ? __alloc_skb+0x1d7/0x7a0
[  464.275869][T11112]  ? __alloc_skb+0x1d7/0x7a0
[  464.275895][T11112]  __alloc_skb+0x1d7/0x7a0
[  464.275919][T11112]  __ip6_append_data+0x2ec4/0x40c0
[  464.275958][T11112]  ? __pfx_raw6_getfrag+0x10/0x10
[  464.275977][T11112]  ? lock_acquire+0x115/0x350
[  464.276011][T11112]  ? ip6_mtu+0x7d/0x490
[  464.276037][T11112]  ? __pfx___ip6_append_data+0x10/0x10
[  464.276066][T11112]  ? ip6_setup_cork+0x547/0xf60
[  464.276092][T11112]  ? ip6_append_data+0x1b6/0x280
[  464.276119][T11112]  ip6_append_data+0x108/0x280
[  464.276153][T11112]  ? __pfx_raw6_getfrag+0x10/0x10
[  464.276173][T11112]  rawv6_sendmsg+0x1298/0x18c0
[  464.276199][T11112]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  464.276219][T11112]  ? lock_acquire+0x115/0x350
[  464.276257][T11112]  ? is_bpf_text_address+0x26/0x2b0
[  464.276279][T11112]  ? sock_rps_record_flow+0x19/0x350
[  464.276303][T11112]  ? inet_sendmsg+0x298/0x320
[  464.276335][T11112]  ? arch_stack_walk+0xfb/0x150
[  464.276362][T11112]  ? __pfx_inet_sendmsg+0x10/0x10
[  464.276382][T11112]  sock_sendmsg_nosec+0x10e/0x180
[  464.276402][T11112]  sock_write_iter+0x2e4/0x3f0
[  464.276421][T11112]  ? __pfx_sock_write_iter+0x10/0x10
[  464.276451][T11112]  do_iter_readv_writev+0x624/0x8d0
[  464.276474][T11112]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  464.276499][T11112]  ? bpf_lsm_file_permission+0x9/0x20
[  464.276523][T11112]  ? security_file_permission+0x68/0x220
[  464.276574][T11112]  ? rw_verify_area+0x209/0x4d0
[  464.276602][T11112]  vfs_writev+0x34c/0x990
[  464.276635][T11112]  ? do_raw_spin_lock+0x12b/0x2f0
[  464.276668][T11112]  ? __pfx_vfs_writev+0x10/0x10
[  464.276714][T11112]  ? __fget_files+0x2a/0x420
[  464.276746][T11112]  ? __fget_files+0x3a8/0x420
[  464.276761][T11112]  ? __fget_files+0x2a/0x420
[  464.276783][T11112]  do_writev+0x15a/0x2e0
[  464.276808][T11112]  ? __pfx_do_writev+0x10/0x10
[  464.276841][T11112]  do_syscall_64+0x17b/0x530
[  464.276857][T11112]  ? irqentry_exit+0x10f/0x8f0
[  464.276873][T11112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.276890][T11112]  ? clear_bhb_loop+0x40/0x90
[  464.276910][T11112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.276926][T11112] RIP: 0033:0x7f7ad653de59
[  464.276941][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.276955][T11112] RSP: 002b:00007f7ad4796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  464.276972][T11112] RAX: ffffffffffffffda RBX: 00007f7ad67c5fa0 RCX: 00007f7ad653de59
[  464.276984][T11112] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  464.276994][T11112] RBP: 00007f7ad4796090 R08: 0000000000000000 R09: 0000000000000000
[  464.277004][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.277013][T11112] R13: 00007f7ad67c6038 R14: 00007f7ad67c5fa0 R15: 00007fff0d9f2f38
[  464.277038][T11112]  </TASK>
[  464.520836][ T5701] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  464.566746][ T5701] usb 3-1: device descriptor read/8, error -71
[  464.675492][ T5701] usb usb3-port1: unable to enumerate USB device
[  464.725913][T11117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  465.011757][ T5768] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  465.170670][ T5768] usb 4-1: Using ep0 maxpacket: 16
[  465.178143][ T5768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  465.178176][ T5768] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  465.222794][ T5768] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  465.222829][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.222851][ T5768] usb 4-1: Product: syz
[  465.222866][ T5768] usb 4-1: Manufacturer: syz
[  465.222882][ T5768] usb 4-1: SerialNumber: syz
[  465.274518][ T5768] usb 4-1: 0:2 : does not exist
[  465.416066][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  465.525449][T11128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  466.026619][ T5768] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  466.313593][ T5768] usb 4-1: USB disconnect, device number 119
[  466.424458][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  466.606655][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'.
[  467.170421][T11151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294949504 (8589899008 ns) > initial count (973042162 ns). Using initial count to start timer.
[  467.825480][ T5703] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  467.942290][T11178] pimreg: entered allmulticast mode
[  468.003379][ T5703] usb 2-1: not running at top speed; connect to a high speed hub
[  468.004621][ T5703] usb 2-1: config 8 has an invalid interface number: 130 but max is 0
[  468.004649][ T5703] usb 2-1: config 8 has no interface number 0
[  468.004684][ T5703] usb 2-1: config 8 interface 130 has no altsetting 0
[  468.007818][ T5703] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=8c.18
[  468.007851][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.007865][ T5703] usb 2-1: Product: syz
[  468.007876][ T5703] usb 2-1: Manufacturer: syz
[  468.007887][ T5703] usb 2-1: SerialNumber: syz
[  468.085695][ T5703] kvaser_usb 2-1:8.130: error -ENODEV: Cannot get usb endpoint(s)
[  468.276131][ T5701] usb 2-1: USB disconnect, device number 92
[  468.570386][ T5703] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  468.609653][ T5632] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  468.720354][ T5703] usb 4-1: Using ep0 maxpacket: 16
[  468.722878][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0
[  468.722921][ T5703] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  468.722939][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.743998][ T5703] usb 4-1: config 0 descriptor??
[  468.760493][ T5632] usb 3-1: Using ep0 maxpacket: 32
[  468.779178][ T5632] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  468.779208][ T5632] usb 3-1: config 0 has no interface number 0
[  468.796162][ T5632] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  468.796195][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.796215][ T5632] usb 3-1: Product: syz
[  468.796229][ T5632] usb 3-1: Manufacturer: syz
[  468.796249][ T5632] usb 3-1: SerialNumber: syz
[  468.838338][ T5632] usb 3-1: config 0 descriptor??
[  468.857228][ T5632] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  468.857250][ T5632] usb 3-1: selecting invalid altsetting 1
[  468.857262][ T5632] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  468.929816][ T5632] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  468.938155][ T5632] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  468.938289][ T5632] usb 3-1: media controller created
[  469.079148][ T5632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  469.198244][ T5703] hid_parser_main: 30 callbacks suppressed
[  469.198270][ T5703] wacom 0003:056A:00BB.0018: unknown main item tag 0x6
[  469.198350][ T5703] wacom 0003:056A:00BB.0018: ignoring exceeding usage max
[  469.204763][ T5703] wacom 0003:056A:00BB.0018: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[  469.232033][ T5703] wacom 0003:056A:00BB.0018: hidraw0: USB HID v0.81 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0
[  469.253504][ T5703] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.0018/input/input26
[  469.393009][ T5768] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  469.572316][ T5768] usb 2-1: Using ep0 maxpacket: 16
[  469.574960][ T5768] usb 2-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config
[  469.574989][ T5768] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  469.575113][ T5768] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.00
[  469.575140][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.715954][ T5768] usb 2-1: config 0 descriptor??
[  469.780195][ T5703] usb 4-1: USB disconnect, device number 120
[  469.882335][ T5604] Bluetooth: hci1: command 0x2016 tx timeout
[  469.946621][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.949711][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.129778][T11186] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  470.140983][ T5632] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  470.141041][ T5632] zl10353_read_register: readreg error (reg=127, ret==-71)
[  470.142906][ T5632] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  470.205596][ T5632] usb 3-1: USB disconnect, device number 118
[  470.347074][T11196] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1775'.
[  470.347135][T11197] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1775'.
[  470.660670][ T5768] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  470.835683][ T5768] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  470.835718][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.866122][ T5768] usb 4-1: config 0 descriptor??
[  470.877340][ T5768] cp210x 4-1:0.0: cp210x converter detected
[  471.276031][ T5768] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  471.300857][T10580] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  471.470674][T10580] usb 3-1: Using ep0 maxpacket: 16
[  471.475363][T10580] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  471.475387][T10580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.478729][ T5768] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -121
[  471.478765][ T5768] cp210x 4-1:0.0: GPIO initialisation failed: -121
[  471.518354][T10580] usb 3-1: config 0 descriptor??
[  471.530363][ T5768] usb 4-1: cp210x converter now attached to ttyUSB0
[  471.546729][T10580] gspca_main: sonixj-2.14.0 probing 0471:0327
[  471.960711][ T5591] Bluetooth: hci1: command 0x2016 tx timeout
[  472.186101][ T5632] usb 2-1: USB disconnect, device number 93
[  472.427395][T10580] gspca_sonixj: reg_r err -32
[  472.427494][T10580] sonixj 3-1:0.0: probe with driver sonixj failed with error -32
[  472.581023][ T5632] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  472.730716][ T5632] usb 2-1: Using ep0 maxpacket: 32
[  472.733689][ T5632] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  472.733719][ T5632] usb 2-1: config 0 has no interface number 0
[  472.733766][ T5632] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  472.733797][ T5632] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  472.736825][ T5632] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  472.736867][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.736882][ T5632] usb 2-1: Product: syz
[  472.736893][ T5632] usb 2-1: Manufacturer: syz
[  472.736904][ T5632] usb 2-1: SerialNumber: syz
[  472.774111][ T5632] usb 2-1: config 0 descriptor??
[  473.435862][T10580] usb 4-1: USB disconnect, device number 121
[  473.464582][T10580] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  473.465495][T10580] cp210x 4-1:0.0: device disconnected
[  473.532535][ T5632] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -110
[  473.614501][ T5632] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  473.641677][ T5632] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  474.023985][T11226] FAULT_INJECTION: forcing a failure.
[  474.023985][T11226] name failslab, interval 1, probability 0, space 0, times 0
[  474.024019][T11226] CPU: 0 UID: 0 PID: 11226 Comm: syz.3.1785 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.024046][T11226] Tainted: [L]=SOFTLOCKUP
[  474.024053][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  474.024064][T11226] Call Trace:
[  474.024071][T11226]  <TASK>
[  474.024078][T11226]  dump_stack_lvl+0xe8/0x150
[  474.024110][T11226]  should_fail_ex+0x467/0x600
[  474.024138][T11226]  should_failslab+0xa8/0x100
[  474.024154][T11226]  ? vm_area_dup+0x28/0x670
[  474.024182][T11226]  kmem_cache_alloc_noprof+0x9e/0x680
[  474.024207][T11226]  ? vm_area_dup+0x28/0x670
[  474.024239][T11226]  vm_area_dup+0x28/0x670
[  474.024266][T11226]  ? __split_vma+0x1d3/0xbd0
[  474.024289][T11226]  __split_vma+0x1f3/0xbd0
[  474.024316][T11226]  ? mas_next_slot+0xc94/0xd70
[  474.024334][T11226]  ? __pfx___split_vma+0x10/0x10
[  474.024365][T11226]  ? mas_find+0x6ef/0xca0
[  474.024385][T11226]  vms_gather_munmap_vmas+0x4e3/0x1370
[  474.024416][T11226]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  474.024440][T11226]  ? mas_walk+0x372/0x480
[  474.024473][T11226]  mmap_region+0x91a/0x2230
[  474.024500][T11226]  ? __lock_acquire+0x6df/0x2e40
[  474.024521][T11226]  ? __pfx_mmap_region+0x10/0x10
[  474.024551][T11226]  ? __lock_acquire+0x6df/0x2e40
[  474.024573][T11226]  ? __lock_acquire+0x6df/0x2e40
[  474.024594][T11226]  ? do_raw_spin_lock+0x12b/0x2f0
[  474.024672][T11226]  ? __lock_acquire+0x6df/0x2e40
[  474.024707][T11226]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  474.024744][T11226]  ? mm_get_unmapped_area_vmflags+0xd9/0x110
[  474.024769][T11226]  ? cap_mmap_addr+0xaf/0x100
[  474.024790][T11226]  ? bpf_lsm_mmap_addr+0x9/0x50
[  474.024847][T11226]  ? security_mmap_addr+0x64/0x200
[  474.024878][T11226]  ? shmem_mapping+0xd/0x50
[  474.024905][T11226]  ? memfd_check_seals_mmap+0x18c/0x210
[  474.024934][T11226]  do_mmap+0xc1e/0x10b0
[  474.024977][T11226]  ? __pfx_do_mmap+0x10/0x10
[  474.025014][T11226]  ? rwbase_write_lock+0x550/0x720
[  474.025046][T11226]  vm_mmap_pgoff+0x275/0x4e0
[  474.025074][T11226]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  474.025095][T11226]  ? __fget_files+0x2a/0x420
[  474.025117][T11226]  ? __fget_files+0x3a8/0x420
[  474.025134][T11226]  ? __fget_files+0x2a/0x420
[  474.025167][T11226]  ksys_mmap_pgoff+0x4a6/0x720
[  474.025197][T11226]  do_syscall_64+0x17b/0x530
[  474.025215][T11226]  ? irqentry_exit+0x10f/0x8f0
[  474.025231][T11226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.025250][T11226]  ? clear_bhb_loop+0x40/0x90
[  474.025271][T11226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.025289][T11226] RIP: 0033:0x7f7ad653de59
[  474.025306][T11226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.025322][T11226] RSP: 002b:00007f7ad4796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  474.025341][T11226] RAX: ffffffffffffffda RBX: 00007f7ad67c5fa0 RCX: 00007f7ad653de59
[  474.025354][T11226] RDX: 0000000000000000 RSI: 0000000000007000 RDI: 0000200000000000
[  474.025366][T11226] RBP: 00007f7ad4796090 R08: 0000000000000003 R09: 0000000000000000
[  474.025377][T11226] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  474.025387][T11226] R13: 00007f7ad67c6038 R14: 00007f7ad67c5fa0 R15: 00007fff0d9f2f38
[  474.025415][T11226]  </TASK>
[  474.457452][   T43] usb 2-1: USB disconnect, device number 94
[  474.748834][ T5632] usb 3-1: USB disconnect, device number 119
[  474.910449][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'.
[  475.141564][ T5632] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  475.292323][ T5632] usb 3-1: Using ep0 maxpacket: 16
[  475.294672][ T5632] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  475.294696][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.313205][ T5632] usb 3-1: config 0 descriptor??
[  475.356155][ T5632] gspca_main: sonixj-2.14.0 probing 0471:0327
[  476.151440][ T5703] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  476.480321][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'.
[  476.575766][T11277] IPVS: Error connecting to the multicast addr
[  476.931664][T10580] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  477.018698][T11230] Invalid source name
[  477.018719][T11230] UBIFS error (pid: 11230): cannot open "/dev/sg0", error -22
[  477.025882][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.026524][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.027957][T11230] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1786'.
[  477.084957][T10580] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  477.084991][T10580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.114966][T10580] usb 4-1: config 0 descriptor??
[  477.362409][ T5632] gspca_sonixj: i2c_w8 err -110
[  477.381440][ T5632] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  477.424368][ T5768] usb 3-1: USB disconnect, device number 120
[  477.560582][T10580] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID vf0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  477.824408][ T5632] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  477.957721][ T5830] usb 4-1: USB disconnect, device number 122
[  477.971470][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  477.980837][ T5632] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  477.980897][ T5632] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  477.980928][ T5632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  477.980955][ T5632] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  477.980982][ T5632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  477.981007][ T5632] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  477.981051][ T5632] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  477.981076][ T5632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.096771][T11306] FAULT_INJECTION: forcing a failure.
[  478.096771][T11306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.096815][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.0.1813 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  478.096845][T11306] Tainted: [L]=SOFTLOCKUP
[  478.096853][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  478.096866][T11306] Call Trace:
[  478.096875][T11306]  <TASK>
[  478.096884][T11306]  dump_stack_lvl+0xe8/0x150
[  478.096920][T11306]  should_fail_ex+0x467/0x600
[  478.096955][T11306]  _copy_from_user+0x2d/0xb0
[  478.096977][T11306]  input_event_from_user+0xb1/0x290
[  478.097005][T11306]  ? __pfx_input_event_from_user+0x10/0x10
[  478.097038][T11306]  ? rt_spin_unlock+0x163/0x200
[  478.097071][T11306]  evdev_write+0x2ca/0x4c0
[  478.097094][T11306]  ? __lock_acquire+0x6df/0x2e40
[  478.097121][T11306]  ? __pfx_evdev_write+0x10/0x10
[  478.097146][T11306]  ? bpf_lsm_file_permission+0x9/0x20
[  478.097181][T11306]  ? security_file_permission+0x68/0x220
[  478.097209][T11306]  ? rw_verify_area+0x209/0x4d0
[  478.097237][T11306]  ? __pfx_evdev_write+0x10/0x10
[  478.097258][T11306]  vfs_write+0x29f/0xbb0
[  478.097294][T11306]  ? __pfx_vfs_write+0x10/0x10
[  478.097322][T11306]  ? __fget_files+0x2a/0x420
[  478.097348][T11306]  ? __fget_files+0x2a/0x420
[  478.097369][T11306]  ? __fget_files+0x3a8/0x420
[  478.097399][T11306]  ? __fget_files+0x2a/0x420
[  478.097431][T11306]  ksys_write+0x156/0x270
[  478.097460][T11306]  ? __pfx_ksys_write+0x10/0x10
[  478.097496][T11306]  do_syscall_64+0x17b/0x530
[  478.097519][T11306]  ? irqentry_exit+0x10f/0x8f0
[  478.097539][T11306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.097562][T11306]  ? clear_bhb_loop+0x40/0x90
[  478.097589][T11306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.097612][T11306] RIP: 0033:0x7fd19b7cde59
[  478.097633][T11306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.097652][T11306] RSP: 002b:00007fd199a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  478.097675][T11306] RAX: ffffffffffffffda RBX: 00007fd19ba55fa0 RCX: 00007fd19b7cde59
[  478.097692][T11306] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  478.097707][T11306] RBP: 00007fd199a26090 R08: 0000000000000000 R09: 0000000000000000
[  478.097721][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  478.097734][T11306] R13: 00007fd19ba56038 R14: 00007fd19ba55fa0 R15: 00007ffc56753678
[  478.097770][T11306]  </TASK>
[  478.509890][ T5632] usb 2-1: GET_CAPABILITIES returned 0
[  478.509926][ T5632] usbtmc 2-1:16.0: can't read capabilities
[  478.538066][T11308] tipc: Started in network mode
[  478.538097][T11308] tipc: Node identity ac14140f, cluster identity 4711
[  478.611671][T11308] tipc: New replicast peer: 255.255.255.255
[  478.619862][T11311] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1815'.
[  478.722908][   T43] usb 2-1: USB disconnect, device number 96
[  478.914627][T11308] tipc: Enabled bearer <udp:syz2>, priority 10
[  479.023160][T11318] syzkaller1: entered allmulticast mode
[  479.523091][ T5830] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  479.602930][T11343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294949504 (8589899008 ns) > initial count (973042162 ns). Using initial count to start timer.
[  479.692774][   T43] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  479.748674][ T5830] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  479.804386][ T5701] tipc: Node number set to 2886997007
[  479.861595][   T43] usb 2-1: Using ep0 maxpacket: 32
[  479.864030][   T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  479.864058][   T43] usb 2-1: config 0 has no interface number 0
[  479.867167][   T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  479.867194][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.867213][   T43] usb 2-1: Product: syz
[  479.867253][   T43] usb 2-1: Manufacturer: syz
[  479.867267][   T43] usb 2-1: SerialNumber: syz
[  480.022734][   T43] usb 2-1: config 0 descriptor??
[  480.046780][   T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  480.491617][T10580] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  480.535853][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  480.627101][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  480.630578][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101
[  480.667646][T10580] usb 3-1: too many configurations: 24, using maximum allowed: 8
[  480.857096][T10580] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  480.857532][T10580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.857556][T10580] usb 3-1: Product: syz
[  480.857572][T10580] usb 3-1: Manufacturer: syz
[  480.857587][T10580] usb 3-1: SerialNumber: syz
[  481.245224][T10580] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  481.245348][T10580] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  481.245371][T10580] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  481.333706][T10580] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  481.358252][T10580] usb 3-1: USB disconnect, device number 121
[  481.547877][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  481.551039][   T43] usb 2-1: USB disconnect, device number 97
[  481.578898][   T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  481.604516][   T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  481.611485][   T43] quatech2 2-1:0.51: device disconnected
[  481.691765][ T5701] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  481.843960][ T5701] usb 4-1: Using ep0 maxpacket: 8
[  481.846474][ T5701] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11
[  481.846511][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0
[  481.846551][ T5701] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  481.846569][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.853957][ T5701] usb 4-1: config 0 descriptor??
[  482.347069][T11381] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in;
[  482.347069][T11381]    program syz.1.1840 not setting count and/or reply_len properly
[  482.477225][T11365] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  482.477252][T11365] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  482.517813][ T5701] usbhid 4-1:0.0: can't add hid device: -71
[  482.517948][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  482.540955][ T5701] usb 4-1: USB disconnect, device number 123
[  482.663444][   T43] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  482.771969][ T5632] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  482.802275][   T43] usb 2-1: device descriptor read/64, error -71
[  482.922116][ T5632] usb 3-1: Using ep0 maxpacket: 8
[  482.924500][ T5632] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  482.926974][ T5632] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  482.926997][ T5632] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  482.927012][ T5632] usb 3-1: Product: syz
[  482.927022][ T5632] usb 3-1: Manufacturer: syz
[  482.927033][ T5632] usb 3-1: SerialNumber: syz
[  483.041966][   T43] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  483.172111][   T43] usb 2-1: device descriptor read/64, error -71
[  483.214426][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  483.262816][ T5632] usb 3-1: palm_os_3_probe - error -71 getting connection information
[  483.262897][ T5632] visor 3-1:1.0: probe with driver visor failed with error -71
[  483.270283][ T5632] usb 3-1: USB disconnect, device number 122
[  483.293580][   T43] usb usb2-port1: attempt power cycle
[  483.632234][   T43] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  483.654691][   T43] usb 2-1: device descriptor read/8, error -71
[  483.905222][   T43] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  483.925145][   T43] usb 2-1: device descriptor read/8, error -71
[  483.976762][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.977531][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.032504][   T43] usb usb2-port1: unable to enumerate USB device
[  484.222103][ T5768] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  484.372080][ T5768] usb 3-1: Using ep0 maxpacket: 8
[  484.374579][ T5768] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  484.374605][ T5768] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 128, setting to 64
[  484.374625][ T5768] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  484.377283][ T5768] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  484.377316][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.377336][ T5768] usb 3-1: Product: syz
[  484.377350][ T5768] usb 3-1: Manufacturer: syz
[  484.377372][ T5768] usb 3-1: SerialNumber: syz
[  484.404058][T11415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  484.425062][ T5768] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  484.440747][ T5768] usbtest 3-1:1.0: couldn't get endpoints, -22
[  484.440986][ T5768] usbtest 3-1:1.0: probe with driver usbtest failed with error -22
[  484.665828][ T5632] usb 3-1: USB disconnect, device number 123
[  484.779088][T11419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.072235][ T5768] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  485.236846][ T5768] usb 4-1: unable to get BOS descriptor or descriptor too short
[  485.252132][ T5768] usb 4-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40
[  485.252166][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.252187][ T5768] usb 4-1: Product: syz
[  485.252202][ T5768] usb 4-1: Manufacturer: syz
[  485.252218][ T5768] usb 4-1: SerialNumber: syz
[  485.598672][ T5768] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  485.599195][ T5768] usb 4-1: 2:1 : bogus bTerminalLink 3
[  485.685021][ T5768] usb 4-1: USB disconnect, device number 124
[  485.787146][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.792356][ T5632] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  485.973520][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  485.975430][ T5632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  485.979739][ T5632] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  485.979771][ T5632] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  485.979797][ T5632] usb 2-1: Product: syz
[  485.979807][ T5632] usb 2-1: Manufacturer: syz
[  485.979818][ T5632] usb 2-1: SerialNumber: syz
[  486.197509][T11445] netlink: 'syz.3.1864': attribute type 2 has an invalid length.
[  486.197530][T11445] netlink: 'syz.3.1864': attribute type 8 has an invalid length.
[  486.197545][T11445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1864'.
[  486.298398][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  486.362735][ T5632] usb 2-1: palm_os_3_probe - error -110 getting connection information
[  486.362865][ T5632] visor 2-1:1.0: probe with driver visor failed with error -110
[  486.468880][T11457] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1868'.
[  486.536446][ T5768] usb 2-1: USB disconnect, device number 102
[  486.839871][T11468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  486.862384][   T43] usb 4-1: new low-speed USB device number 125 using dummy_hcd
[  486.946269][T11468] kvm: pic: non byte read
[  486.957613][T11468] kvm: pic: level sensitive irq not supported
[  486.957833][T11468] kvm: pic: non byte read
[  486.958274][T11468] kvm: pic: level sensitive irq not supported
[  486.958420][T11468] kvm: pic: non byte read
[  486.958692][T11468] kvm: pic: level sensitive irq not supported
[  486.958833][T11468] kvm: pic: non byte read
[  486.959118][T11468] kvm: pic: level sensitive irq not supported
[  486.997708][T11468] kvm: pic: non byte read
[  486.998053][T11468] kvm: pic: level sensitive irq not supported
[  486.998113][T11468] kvm: pic: non byte read
[  486.998443][T11468] kvm: pic: level sensitive irq not supported
[  486.998504][T11468] kvm: pic: non byte read
[  486.998845][T11468] kvm: pic: level sensitive irq not supported
[  486.998904][T11468] kvm: pic: non byte read
[  487.052445][   T43] usb 4-1: Invalid ep0 maxpacket: 64
[  487.202480][   T43] usb 4-1: new low-speed USB device number 126 using dummy_hcd
[  487.362418][ T5632] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  487.382964][   T43] usb 4-1: Invalid ep0 maxpacket: 64
[  487.383501][   T43] usb usb4-port1: attempt power cycle
[  487.512445][ T5632] usb 3-1: Using ep0 maxpacket: 32
[  487.519871][ T5632] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  487.519906][ T5632] usb 3-1: config 1 interface 0 has no altsetting 0
[  487.547548][ T5632] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40
[  487.547579][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.547599][ T5632] usb 3-1: Product: syz
[  487.547620][ T5632] usb 3-1: Manufacturer: syz
[  487.547631][ T5632] usb 3-1: SerialNumber: syz
[  487.622514][ T5768] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  487.753109][   T43] usb 4-1: new low-speed USB device number 127 using dummy_hcd
[  487.773091][ T5768] usb 2-1: Using ep0 maxpacket: 16
[  487.775890][   T43] usb 4-1: Invalid ep0 maxpacket: 64
[  487.791715][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.791751][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.791777][ T5768] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  487.791823][ T5768] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  487.791849][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.850278][ T5768] usb 2-1: config 0 descriptor??
[  487.902621][   T43] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  487.934795][   T43] usb 4-1: Invalid ep0 maxpacket: 64
[  487.935695][   T43] usb usb4-port1: unable to enumerate USB device
[  487.951257][ T5632] usbhid 3-1:1.0: can't add hid device: -71
[  487.951384][ T5632] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  487.977899][ T5632] usb 3-1: USB disconnect, device number 124
[  488.420946][ T5768] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  488.420987][ T5768] microsoft 0003:045E:07DA.001B: no inputs found
[  488.421002][ T5768] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway
[  488.740226][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.797931][ T5632] usb 2-1: USB disconnect, device number 103
[  488.848526][T11489] kAFS: No cell specified
[  489.492863][T11502] new mount options do not match the existing superblock, will be ignored
[  489.497352][T11502] netlink: 'syz.1.1884': attribute type 12 has an invalid length.
[  489.712717][ T5768] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  489.790085][T11509] kAFS: No cell specified
[  489.872735][ T5768] usb 3-1: Using ep0 maxpacket: 8
[  489.877300][ T5768] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  489.877337][ T5768] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  489.877364][ T5768] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  489.877389][ T5768] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  489.877434][ T5768] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  489.877457][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.002789][ T5632] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  490.165847][ T5768] usb 3-1: GET_CAPABILITIES returned 0
[  490.165905][ T5768] usbtmc 3-1:16.0: can't read capabilities
[  490.174525][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  490.194996][ T5632] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  490.195056][ T5632] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  490.195086][ T5632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  490.195113][ T5632] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  490.195159][ T5632] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  490.195184][ T5632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.292549][ T5632] usbtmc 2-1:16.0: bulk endpoints not found
[  490.393246][ T5701] usb 3-1: USB disconnect, device number 125
[  490.942841][T10580] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  491.064152][T11521] FAULT_INJECTION: forcing a failure.
[  491.064152][T11521] name failslab, interval 1, probability 0, space 0, times 0
[  491.064183][T11521] CPU: 1 UID: 0 PID: 11521 Comm: syz.2.1892 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  491.064205][T11521] Tainted: [L]=SOFTLOCKUP
[  491.064211][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  491.064222][T11521] Call Trace:
[  491.064228][T11521]  <TASK>
[  491.064235][T11521]  dump_stack_lvl+0xe8/0x150
[  491.064262][T11521]  should_fail_ex+0x467/0x600
[  491.064288][T11521]  should_failslab+0xa8/0x100
[  491.064303][T11521]  ? mas_alloc_nodes+0x291/0x350
[  491.064320][T11521]  kmem_cache_alloc_noprof+0x9e/0x680
[  491.064346][T11521]  ? mas_alloc_nodes+0x291/0x350
[  491.064365][T11521]  mas_alloc_nodes+0x291/0x350
[  491.064384][T11521]  mas_preallocate+0x437/0x850
[  491.064404][T11521]  ? __pfx_mas_preallocate+0x10/0x10
[  491.064426][T11521]  ? anon_vma_name+0x61/0x210
[  491.064453][T11521]  ? __mas_set_range+0x11a/0x3a0
[  491.064475][T11521]  __split_vma+0x460/0xbd0
[  491.064504][T11521]  ? __pfx___split_vma+0x10/0x10
[  491.064532][T11521]  ? mas_find+0x6ef/0xca0
[  491.064551][T11521]  vms_gather_munmap_vmas+0x4e3/0x1370
[  491.064579][T11521]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  491.064602][T11521]  ? mas_walk+0x372/0x480
[  491.064633][T11521]  mmap_region+0x91a/0x2230
[  491.064658][T11521]  ? __lock_acquire+0x6df/0x2e40
[  491.064677][T11521]  ? __pfx_mmap_region+0x10/0x10
[  491.064693][T11521]  ? __lock_acquire+0x6df/0x2e40
[  491.064712][T11521]  ? __lock_acquire+0x6df/0x2e40
[  491.064731][T11521]  ? do_raw_spin_lock+0x12b/0x2f0
[  491.064796][T11521]  ? __lock_acquire+0x6df/0x2e40
[  491.064833][T11521]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  491.064867][T11521]  ? mm_get_unmapped_area_vmflags+0xd9/0x110
[  491.064889][T11521]  ? cap_mmap_addr+0xaf/0x100
[  491.064909][T11521]  ? bpf_lsm_mmap_addr+0x9/0x50
[  491.064938][T11521]  ? security_mmap_addr+0x64/0x200
[  491.064958][T11521]  ? shmem_mapping+0xd/0x50
[  491.064976][T11521]  ? memfd_check_seals_mmap+0x18c/0x210
[  491.064995][T11521]  do_mmap+0xc1e/0x10b0
[  491.065021][T11521]  ? __pfx_do_mmap+0x10/0x10
[  491.065042][T11521]  ? rwbase_write_lock+0x550/0x720
[  491.065069][T11521]  vm_mmap_pgoff+0x275/0x4e0
[  491.065094][T11521]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  491.065113][T11521]  ? __fget_files+0x2a/0x420
[  491.065134][T11521]  ? __fget_files+0x3a8/0x420
[  491.065171][T11521]  ? __fget_files+0x2a/0x420
[  491.065198][T11521]  ksys_mmap_pgoff+0x4a6/0x720
[  491.065237][T11521]  do_syscall_64+0x17b/0x530
[  491.065267][T11521]  ? irqentry_exit+0x10f/0x8f0
[  491.065284][T11521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.065301][T11521]  ? clear_bhb_loop+0x40/0x90
[  491.065321][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.065340][T11521] RIP: 0033:0x7f432454de59
[  491.065355][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.065369][T11521] RSP: 002b:00007f43227a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  491.065386][T11521] RAX: ffffffffffffffda RBX: 00007f43247d5fa0 RCX: 00007f432454de59
[  491.065399][T11521] RDX: 0000000000000000 RSI: 0000000000007000 RDI: 0000200000000000
[  491.065409][T11521] RBP: 00007f43227a6090 R08: 0000000000000003 R09: 0000000000000000
[  491.065419][T11521] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  491.065429][T11521] R13: 00007f43247d6038 R14: 00007f43247d5fa0 R15: 00007ffe916732f8
[  491.065453][T11521]  </TASK>
[  491.122957][T10580] usb 4-1: Using ep0 maxpacket: 16
[  491.181268][T10580] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  491.181302][T10580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.461000][T10580] usb 4-1: config 0 descriptor??
[  491.476351][T10580] gspca_main: sonixj-2.14.0 probing 0471:0327
[  491.728429][T11523] Unsupported ieee802154 address type: 0
[  492.076672][T11526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294949504 (8589899008 ns) > initial count (973042162 ns). Using initial count to start timer.
[  492.845529][ T5632] usb 2-1: USB disconnect, device number 104
[  492.864108][T10580] gspca_sonixj: reg_w1 err -110
[  492.893350][T10580] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  493.233175][ T5632] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[  493.387609][ T5632] usb 2-1: not running at top speed; connect to a high speed hub
[  493.397637][ T5632] usb 2-1: config 3 has an invalid interface number: 190 but max is 2
[  493.397669][ T5632] usb 2-1: config 3 has an invalid interface number: 62 but max is 2
[  493.397691][ T5632] usb 2-1: config 3 has an invalid interface number: 87 but max is 2
[  493.397714][ T5632] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  493.397735][ T5632] usb 2-1: config 3 has no interface number 0
[  493.397753][ T5632] usb 2-1: config 3 has no interface number 1
[  493.397772][ T5632] usb 2-1: config 3 has no interface number 2
[  493.397847][ T5632] usb 2-1: config 3 interface 190 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  493.397890][ T5632] usb 2-1: config 3 interface 62 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[  493.397930][ T5632] usb 2-1: config 3 interface 87 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  493.397956][ T5632] usb 2-1: config 3 interface 87 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  493.397986][ T5632] usb 2-1: config 3 interface 190 has no altsetting 0
[  493.398006][ T5632] usb 2-1: config 3 interface 62 has no altsetting 0
[  493.398027][ T5632] usb 2-1: config 3 interface 87 has no altsetting 0
[  493.402126][ T5632] usb 2-1: Dual-Role OTG device on HNP port
[  493.402423][ T5632] usb 2-1: New USB device found, idVendor=0846, idProduct=1100, bcdDevice=d4.21
[  493.402444][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.402459][ T5632] usb 2-1: Product: 䆖㩽�汹䅒呥�⺥ⱅ皽䳕�褷㬷�溵뫶ਙ緸ꄋ彪�툣鵀邽鵽�哑�른��嵭㰗适�쨟‘Ⲏ�廽ৄ饸ꥀ斦抿ྫ旬ᴬ㑾ꌪㅌ�륞ệᠶ�쌎ឆ�攡�ޡ뭨�^ḿ䩊쌴髿꒖⒲⬎䷂냭垦엸䢖䎆瞧Ꭹ勭⭥먑￭锬ꋨꡟ⇠侊줰ἵﶟ稨
[  493.402484][ T5632] usb 2-1: Manufacturer: �
[  493.402495][ T5632] usb 2-1: SerialNumber: syz
[  493.683738][T11533] kAFS: No cell specified
[  493.771954][ T5703] usb 4-1: USB disconnect, device number 3
[  493.882039][ T5632] cp210x 2-1:3.190: cp210x converter detected
[  493.932337][ T5632] cp210x 2-1:3.190: failed to get vendor val 0x370b size 1: -71
[  493.932361][ T5632] cp210x 2-1:3.190: querying part number failed
[  493.954416][ T5632] usb 2-1: cp210x converter now attached to ttyUSB0
[  493.986762][ T5632] cp210x 2-1:3.62: cp210x converter detected
[  493.988534][ T5632] cp210x 2-1:3.62: failed to get vendor val 0x370b size 1: -71
[  493.988555][ T5632] cp210x 2-1:3.62: querying part number failed
[  494.017803][ T5632] usb 2-1: cp210x converter now attached to ttyUSB1
[  494.038419][ T5632] cp210x 2-1:3.87: cp210x converter detected
[  494.041004][ T5632] cp210x 2-1:3.87: failed to get vendor val 0x370b size 1: -71
[  494.041035][ T5632] cp210x 2-1:3.87: querying part number failed
[  494.053972][ T5632] usb 2-1: cp210x converter now attached to ttyUSB2
[  494.075276][ T5632] usb 2-1: USB disconnect, device number 105
[  494.119084][T11539] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=16515334 (33030668 ns) > initial count (1544 ns). Using initial count to start timer.
[  494.120830][ T5632] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  494.121646][ T5632] cp210x 2-1:3.190: device disconnected
[  494.186424][ T5632] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  494.188415][ T5632] cp210x 2-1:3.62: device disconnected
[  494.210553][ T5632] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2
[  494.211744][ T5632] cp210x 2-1:3.87: device disconnected
[  494.294047][ T5703] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  494.447116][ T5703] usb 4-1: Using ep0 maxpacket: 32
[  494.449452][ T5703] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  494.449481][ T5703] usb 4-1: config 0 has no interface number 0
[  494.451960][ T5703] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  494.451991][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.452021][ T5703] usb 4-1: Product: syz
[  494.452038][ T5703] usb 4-1: Manufacturer: syz
[  494.452055][ T5703] usb 4-1: SerialNumber: syz
[  494.458888][ T5703] usb 4-1: config 0 descriptor??
[  494.465255][ T5703] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  494.945267][ T5632] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  495.093356][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  495.101995][ T5632] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  495.102019][ T5632] usb 2-1: config 2 has no interface number 0
[  495.102056][ T5632] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid maxpacket 56961, setting to 1024
[  495.102286][ T5632] usb 2-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[  495.102309][ T5632] usb 2-1: config 2 interface 241 has no altsetting 0
[  495.159458][ T5632] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  495.159688][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.159706][ T5632] usb 2-1: Product: syz
[  495.159719][ T5632] usb 2-1: Manufacturer: syz
[  495.159731][ T5632] usb 2-1: SerialNumber: syz
[  495.226302][T11548] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  495.240829][ T5632] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  495.285102][ T5632] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  495.388002][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'.
[  495.437359][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.438448][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.464113][   T43] usb 2-1: USB disconnect, device number 106
[  495.531035][   T43] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  495.547860][   T43] ti_usb_3410_5052 2-1:2.241: device disconnected
[  495.693431][ T5632] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  495.843375][ T5632] usb 3-1: Using ep0 maxpacket: 32
[  495.845949][ T5632] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  495.848595][ T5632] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  495.848629][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  495.848689][ T5632] usb 3-1: Product: syz
[  495.848700][ T5632] usb 3-1: Manufacturer: syz
[  495.848711][ T5632] usb 3-1: SerialNumber: syz
[  495.872461][ T5632] usb 3-1: config 0 descriptor??
[  495.889230][T11552] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  495.921684][ T5632] hub 3-1:0.0: bad descriptor, ignoring hub
[  495.921863][ T5632] hub 3-1:0.0: probe with driver hub failed with error -5
[  496.224035][ T5632] usb 3-1: USB disconnect, device number 126
[  496.583587][ T5632] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  496.736141][ T5632] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  496.736165][ T5632] usb 3-1: config 220 has an invalid descriptor of length 48, skipping remainder of the config
[  496.736180][ T5632] usb 3-1: config 220 has no interface number 2
[  496.736434][ T5632] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  496.736457][ T5632] usb 3-1: config 220 interface 0 has no altsetting 0
[  496.736471][ T5632] usb 3-1: config 220 interface 76 has no altsetting 0
[  496.736485][ T5632] usb 3-1: config 220 interface 1 has no altsetting 0
[  496.739957][ T5632] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  496.739980][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.740187][ T5632] usb 3-1: Product: syz
[  496.740211][ T5632] usb 3-1: Manufacturer: syz
[  496.740222][ T5632] usb 3-1: SerialNumber: syz
[  496.958924][T11560] kAFS: No cell specified
[  497.158593][ T5632] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  497.158871][ T5632] uvcvideo 3-1:220.0: No valid video chain found.
[  497.158942][ T5632] usb 3-1: selecting invalid altsetting 0
[  497.373090][ T5632] usb 3-1: selecting invalid altsetting 0
[  497.373136][ T5632] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  497.488198][ T5632] usb 3-1: USB disconnect, device number 127
[  497.712253][ T5703] usb 4-1: qt2_attach - failed to power on unit: -71
[  497.712635][ T5703] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  497.785338][ T5703] usb 4-1: USB disconnect, device number 4
[  498.145635][T11583] kAFS: No cell specified
[  498.225689][T10580] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  498.395255][T10580] usb 3-1: Using ep0 maxpacket: 8
[  498.397791][T10580] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  498.418287][T10580] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  498.418321][T10580] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  498.418346][T10580] usb 3-1: Product: syz
[  498.418361][T10580] usb 3-1: Manufacturer: syz
[  498.418378][T10580] usb 3-1: SerialNumber: syz
[  498.682682][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  498.794710][T10580] usb 3-1: palm_os_3_probe - error -110 getting connection information
[  498.794786][T10580] visor 3-1:1.0: probe with driver visor failed with error -110
[  498.871710][ T5768] usb 3-1: USB disconnect, device number 2
[  499.173930][ T5703] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  499.326247][ T5703] usb 4-1: Using ep0 maxpacket: 32
[  499.337908][ T5703] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  499.337936][ T5703] usb 4-1: config 0 has no interface number 0
[  499.357521][ T5703] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  499.357555][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.357579][ T5703] usb 4-1: Product: syz
[  499.357595][ T5703] usb 4-1: Manufacturer: syz
[  499.357611][ T5703] usb 4-1: SerialNumber: syz
[  499.391701][ T5703] usb 4-1: config 0 descriptor??
[  499.412328][ T5703] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  499.641738][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'.
[  499.641766][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'.
[  499.913894][ T5768] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  500.093853][ T5768] usb 3-1: Using ep0 maxpacket: 32
[  500.097263][ T5768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.097308][ T5768] usb 3-1: config 0 interface 0 has no altsetting 0
[  500.100743][ T5768] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  500.100779][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.100804][ T5768] usb 3-1: Product: syz
[  500.100820][ T5768] usb 3-1: Manufacturer: syz
[  500.100837][ T5768] usb 3-1: SerialNumber: syz
[  500.165561][ T5768] usb 3-1: config 0 descriptor??
[  500.389782][ T5768] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  500.391657][ T5768] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  500.391773][ T5768] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  500.436507][ T5768] usb 3-1: USB disconnect, device number 3
[  500.635031][T11620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  500.635129][T11620] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  501.193954][ T5768] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  501.348935][ T5768] usb 2-1: Using ep0 maxpacket: 8
[  501.352065][ T5768] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  501.379833][ T5768] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  501.379866][ T5768] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  501.379888][ T5768] usb 2-1: Product: syz
[  501.379904][ T5768] usb 2-1: Manufacturer: syz
[  501.379920][ T5768] usb 2-1: SerialNumber: syz
[  501.633786][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  501.744689][ T5768] usb 2-1: palm_os_3_probe - error -71 getting connection information
[  501.744805][ T5768] visor 2-1:1.0: probe with driver visor failed with error -71
[  501.787461][ T5768] usb 2-1: USB disconnect, device number 107
[  502.375767][T11644] netlink: 'syz.2.1939': attribute type 10 has an invalid length.
[  502.709728][ T5703] usb 4-1: qt2_attach - failed to power on unit: -71
[  502.710110][ T5703] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  502.756242][ T5703] usb 4-1: USB disconnect, device number 5
[  502.982339][T11659] netlink: 'syz.3.1944': attribute type 21 has an invalid length.
[  503.259397][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'.
[  503.752924][T11680] netlink: 'syz.2.1951': attribute type 4 has an invalid length.
[  503.864336][T10580] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  503.984338][ T5703] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  504.024296][T10580] usb 4-1: Using ep0 maxpacket: 8
[  504.027843][T10580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  504.031941][T10580] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  504.031977][T10580] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  504.032004][T10580] usb 4-1: Product: syz
[  504.032022][T10580] usb 4-1: Manufacturer: syz
[  504.032040][T10580] usb 4-1: SerialNumber: syz
[  504.144614][ T5703] usb 2-1: Using ep0 maxpacket: 32
[  504.147202][ T5703] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  504.147232][ T5703] usb 2-1: config 0 has no interface number 0
[  504.150869][ T5703] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  504.150901][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.150925][ T5703] usb 2-1: Product: syz
[  504.150941][ T5703] usb 2-1: Manufacturer: syz
[  504.150958][ T5703] usb 2-1: SerialNumber: syz
[  504.213579][ T5703] usb 2-1: config 0 descriptor??
[  504.235658][ T5703] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  504.411983][T10580] usb 4-1: palm_os_3_probe - error -71 getting connection information
[  504.412090][T10580] visor 4-1:1.0: probe with driver visor failed with error -71
[  504.443284][T10580] usb 4-1: USB disconnect, device number 6
[  505.584496][ T5830] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  505.744441][ T5830] usb 4-1: Using ep0 maxpacket: 8
[  505.758471][ T5830] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  505.758497][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.758512][ T5830] usb 4-1: Product: syz
[  505.758524][ T5830] usb 4-1: Manufacturer: syz
[  505.758535][ T5830] usb 4-1: SerialNumber: syz
[  505.818127][ T5830] usb 4-1: config 0 descriptor??
[  505.860381][T11721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294949504 (8589899008 ns) > initial count (973042162 ns). Using initial count to start timer.
[  505.889244][ T5830] gspca_main: se401-2.14.0 probing 047d:5003
[  506.251304][ T5830] gspca_se401: Bayer format not supported!
[  506.771320][T11733] input: syz1 as /devices/virtual/input/input29
[  506.802370][T11734] CUSE: unknown device info ""
[  506.802386][T11734] CUSE: unknown device info "Ö"
[  506.802395][T11734] CUSE: unknown device info ""
[  506.802402][T11734] CUSE: unknown device info ""
[  506.802410][T11734] CUSE: unknown device info "ðÿÿÿ"
[  506.802790][T11734] CUSE: unknown device info ""
[  506.802801][T11734] CUSE: unknown device info ""
[  506.802811][T11734] CUSE: unknown device info ""
[  506.802820][T11734] CUSE: unknown device info ""
[  506.802829][T11734] CUSE: unknown device info "r"
[  506.802837][T11734] CUSE: unknown device info ""
[  506.802846][T11734] CUSE: unknown device info "#Û"
[  506.802855][T11734] CUSE: unknown device info "ÿÿÿÿ"
[  506.802863][T11734] CUSE: unknown device info ""
[  506.802871][T11734] CUSE: unknown device info "ÿ"
[  506.802881][T11734] CUSE: DEVNAME unspecified
[  507.053911][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  507.071629][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  507.742366][ T5703] usb 2-1: qt2_attach - failed to power on unit: -71
[  507.742661][ T5703] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  507.792637][ T5703] usb 2-1: USB disconnect, device number 108
[  508.103510][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'.
[  508.745145][T11767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294949504 (8589899008 ns) > initial count (973042162 ns). Using initial count to start timer.
[  508.905019][ T5632] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  509.055038][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  509.057496][ T5632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  509.061108][ T5632] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  509.061140][ T5632] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  509.061157][ T5632] usb 2-1: Product: syz
[  509.061170][ T5632] usb 2-1: Manufacturer: syz
[  509.061184][ T5632] usb 2-1: SerialNumber: syz
[  509.288588][ T5703] usb 4-1: USB disconnect, device number 7
[  509.372379][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  509.473305][ T5632] usb 2-1: palm_os_3_probe - error -110 getting connection information
[  509.473383][ T5632] visor 2-1:1.0: probe with driver visor failed with error -110
[  509.522190][ T5703] usb 2-1: USB disconnect, device number 109
[  509.790858][T11782] FAULT_INJECTION: forcing a failure.
[  509.790858][T11782] name failslab, interval 1, probability 0, space 0, times 0
[  509.790889][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.2.1985 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  509.790921][T11782] Tainted: [L]=SOFTLOCKUP
[  509.790927][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  509.790938][T11782] Call Trace:
[  509.790944][T11782]  <TASK>
[  509.790952][T11782]  dump_stack_lvl+0xe8/0x150
[  509.790978][T11782]  should_fail_ex+0x467/0x600
[  509.791003][T11782]  should_failslab+0xa8/0x100
[  509.791018][T11782]  ? anon_vma_clone+0x3d4/0xa10
[  509.791040][T11782]  kmem_cache_alloc_noprof+0x9e/0x680
[  509.791063][T11782]  ? anon_vma_clone+0x3d4/0xa10
[  509.791089][T11782]  anon_vma_clone+0x3d4/0xa10
[  509.791119][T11782]  __split_vma+0x53d/0xbd0
[  509.791146][T11782]  ? __pfx___split_vma+0x10/0x10
[  509.791174][T11782]  ? mas_find+0x6ef/0xca0
[  509.791193][T11782]  vms_gather_munmap_vmas+0x4e3/0x1370
[  509.791221][T11782]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  509.791243][T11782]  ? mas_walk+0x372/0x480
[  509.791273][T11782]  mmap_region+0x91a/0x2230
[  509.791297][T11782]  ? __lock_acquire+0x6df/0x2e40
[  509.791316][T11782]  ? __pfx_mmap_region+0x10/0x10
[  509.791332][T11782]  ? __lock_acquire+0x6df/0x2e40
[  509.791351][T11782]  ? __lock_acquire+0x6df/0x2e40
[  509.791370][T11782]  ? do_raw_spin_lock+0x12b/0x2f0
[  509.791438][T11782]  ? __lock_acquire+0x6df/0x2e40
[  509.791469][T11782]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  509.791503][T11782]  ? mm_get_unmapped_area_vmflags+0xd9/0x110
[  509.791525][T11782]  ? cap_mmap_addr+0xaf/0x100
[  509.791545][T11782]  ? bpf_lsm_mmap_addr+0x9/0x50
[  509.791570][T11782]  ? security_mmap_addr+0x64/0x200
[  509.791590][T11782]  ? shmem_mapping+0xd/0x50
[  509.791608][T11782]  ? memfd_check_seals_mmap+0x18c/0x210
[  509.791627][T11782]  do_mmap+0xc1e/0x10b0
[  509.791654][T11782]  ? __pfx_do_mmap+0x10/0x10
[  509.791674][T11782]  ? rwbase_write_lock+0x550/0x720
[  509.791702][T11782]  vm_mmap_pgoff+0x275/0x4e0
[  509.791731][T11782]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  509.791750][T11782]  ? __fget_files+0x2a/0x420
[  509.791770][T11782]  ? __fget_files+0x3a8/0x420
[  509.791786][T11782]  ? __fget_files+0x2a/0x420
[  509.791805][T11782]  ksys_mmap_pgoff+0x4a6/0x720
[  509.791832][T11782]  do_syscall_64+0x17b/0x530
[  509.791848][T11782]  ? irqentry_exit+0x10f/0x8f0
[  509.791863][T11782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.791880][T11782]  ? clear_bhb_loop+0x40/0x90
[  509.791905][T11782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.791922][T11782] RIP: 0033:0x7f432454de59
[  509.791937][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.791952][T11782] RSP: 002b:00007f43227a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  509.791969][T11782] RAX: ffffffffffffffda RBX: 00007f43247d5fa0 RCX: 00007f432454de59
[  509.791982][T11782] RDX: 0000000000000000 RSI: 0000000000007000 RDI: 0000200000000000
[  509.791992][T11782] RBP: 00007f43227a6090 R08: 0000000000000003 R09: 0000000000000000
[  509.792002][T11782] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  509.792012][T11782] R13: 00007f43247d6038 R14: 00007f43247d5fa0 R15: 00007ffe916732f8
[  509.792037][T11782]  </TASK>
[  509.819435][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  509.976808][ T5830] usb 4-1: Using ep0 maxpacket: 32
[  510.000588][ T5830] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  510.000670][ T5830] usb 4-1: config 0 has no interface number 0
[  510.043160][ T5830] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  510.043256][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.043311][ T5830] usb 4-1: Product: syz
[  510.043353][ T5830] usb 4-1: Manufacturer: syz
[  510.043397][ T5830] usb 4-1: SerialNumber: syz
[  510.189016][ T5830] usb 4-1: config 0 descriptor??
[  510.216986][ T5830] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  510.325303][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'.
[  510.745868][ T5830] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  510.789324][T11785] sctp: [Deprecated]: syz.0.1984 (pid 11785) Use of struct sctp_assoc_value in delayed_ack socket option.
[  510.789324][T11785] Use struct sctp_sack_info instead
[  510.864700][ T5830] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  511.539996][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  511.540817][ T5768] usb 4-1: USB disconnect, device number 8
[  511.597504][ T5768] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  511.631364][ T5768] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  511.657592][ T5768] quatech2 4-1:0.51: device disconnected
[  511.933857][ T5830] libceph: connect (1)[c::]:6789 error -101
[  511.934677][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  511.988555][ T5830] libceph: connect (1)[c::]:6789 error -101
[  511.988729][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  512.249413][ T5830] libceph: connect (1)[c::]:6789 error -101
[  512.276820][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  512.394430][T11817] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1995'.
[  512.655792][ T5702] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  512.806793][ T5830] libceph: connect (1)[c::]:6789 error -101
[  512.809153][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  512.831688][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.831758][ T5702] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  512.831787][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.846416][ T5702] usb 2-1: config 0 descriptor??
[  513.119158][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'.
[  513.435345][   T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  513.473396][ T5702] pwc: Askey VC010 type 2 USB webcam detected.
[  513.474094][ T5702] pwc: send_video_command error -71
[  513.474152][ T5702] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  513.474290][ T5702] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  513.506842][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  513.512158][ T5702] usb 2-1: USB disconnect, device number 110
[  513.597396][   T43] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  513.597434][   T43] usb 3-1: config 0 has no interface number 0
[  513.597458][   T43] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  513.597487][   T43] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  513.597511][   T43] usb 3-1: config 0 interface 255 has no altsetting 0
[  513.597536][   T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  513.597570][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.603668][   T43] usb 3-1: config 0 descriptor??
[  513.655444][ T5830] usb 4-1: Using ep0 maxpacket: 32
[  513.670397][ T5830] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  513.670480][ T5830] usb 4-1: config 0 has no interface number 0
[  513.705461][   T43] cp210x 3-1:0.255: cp210x converter detected
[  513.710149][ T5830] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  513.710182][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.710204][ T5830] usb 4-1: Product: syz
[  513.710221][ T5830] usb 4-1: Manufacturer: syz
[  513.710238][ T5830] usb 4-1: SerialNumber: syz
[  513.724890][ T5830] usb 4-1: config 0 descriptor??
[  513.764337][ T5830] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  514.054961][T11835] sg_write: data in/out 430556/144 bytes for SCSI command 0x0-- guessing data in;
[  514.054961][T11835]    program syz.2.2003 not setting count and/or reply_len properly
[  514.254695][   T37] audit: type=1326 audit(1784238303.009:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11841 comm="syz.1.2005" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ccd64de59 code=0x0
[  514.389078][ T5830] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  514.451949][   T43] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -71
[  514.452177][ T5830] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  514.517420][   T43] usb 3-1: cp210x converter now attached to ttyUSB2
[  514.538796][   T43] usb 3-1: USB disconnect, device number 4
[  514.558357][   T43] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2
[  514.594202][   T43] cp210x 3-1:0.255: device disconnected
[  514.606536][ T5632] libceph: connect (1)[c::]:6789 error -101
[  514.687516][T11807] ceph: No mds server is up or the cluster is laggy
[  514.763350][ T5632] libceph: mon0 (1)[c::]:6789 connect error
[  515.196030][   T43] usb 4-1: USB disconnect, device number 9
[  515.199337][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108
[  515.243254][   T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  515.484176][   T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  515.485104][   T43] quatech2 4-1:0.51: device disconnected
[  515.495550][ T5768] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  515.685683][ T5768] usb 3-1: Using ep0 maxpacket: 8
[  515.690355][ T5768] usb 3-1: config 0 interface 0 has no altsetting 0
[  515.690401][ T5768] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  515.690426][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.729030][ T5768] usb 3-1: config 0 descriptor??
[  516.035698][ T5632] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  516.257117][ T5632] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  516.257155][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.257181][ T5632] usb 2-1: Product: syz
[  516.257199][ T5632] usb 2-1: Manufacturer: syz
[  516.257218][ T5632] usb 2-1: SerialNumber: syz
[  516.437357][ T5632] usb 2-1: config 0 descriptor??
[  516.512420][T11859] block nbd2: shutting down sockets
[  516.579810][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.583503][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.860516][T11856] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  516.860750][T11856] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  516.960888][ T5768] usbhid 3-1:0.0: can't add hid device: -71
[  516.961021][ T5768] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  516.986703][ T5768] usb 3-1: USB disconnect, device number 5
[  518.005880][ T5768] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  518.155842][ T5768] usb 3-1: Using ep0 maxpacket: 16
[  518.158386][ T5768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  518.165623][ T5768] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  518.167424][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.167452][ T5768] usb 3-1: Product: syz
[  518.167469][ T5768] usb 3-1: Manufacturer: syz
[  518.167485][ T5768] usb 3-1: SerialNumber: syz
[  518.224804][ T5768] usb 3-1: config 0 descriptor??
[  518.236904][ T5768] mcba_usb 3-1:0.0: Can't find endpoints
[  518.436246][ T5702] usb 3-1: USB disconnect, device number 6
[  518.461129][ T5632] usb 2-1: f81604_read: reg: 200f failed: -EPROTO
[  518.498471][ T5632] usb 2-1: USB disconnect, device number 111
[  518.539239][ T5632] usb 2-1: f81604_read: reg: 100f failed: -ENODEV
[  518.680712][ T5252] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[  518.730492][ T5632] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[  518.796189][ T5768] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  518.957126][ T5768] usb 4-1: no configurations
[  518.957151][ T5768] usb 4-1: can't read configurations, error -22
[  519.091872][ T5768] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  519.143567][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2030'.
[  519.246893][ T5768] usb 4-1: no configurations
[  519.246908][ T5768] usb 4-1: can't read configurations, error -22
[  519.247267][ T5768] usb usb4-port1: attempt power cycle
[  519.589540][T11935] FAULT_INJECTION: forcing a failure.
[  519.589540][T11935] name failslab, interval 1, probability 0, space 0, times 0
[  519.589570][T11935] CPU: 1 UID: 0 PID: 11935 Comm: syz.2.2035 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  519.589645][T11935] Tainted: [L]=SOFTLOCKUP
[  519.589651][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  519.589661][T11935] Call Trace:
[  519.589668][T11935]  <TASK>
[  519.589675][T11935]  dump_stack_lvl+0xe8/0x150
[  519.589702][T11935]  should_fail_ex+0x467/0x600
[  519.589727][T11935]  should_failslab+0xa8/0x100
[  519.589745][T11935]  __kmalloc_cache_noprof+0xa1/0x670
[  519.589776][T11935]  ? alloc_fs_context+0x66/0xd00
[  519.589797][T11935]  ? alloc_fs_context+0x66/0xd00
[  519.589820][T11935]  ? __get_fs_type+0x21/0x280
[  519.589843][T11935]  alloc_fs_context+0x66/0xd00
[  519.589862][T11935]  ? __get_fs_type+0x267/0x280
[  519.589881][T11935]  ? __get_fs_type+0x21/0x280
[  519.589905][T11935]  do_new_mount+0x17f/0xdc0
[  519.589920][T11935]  ? cap_capable+0x123/0x460
[  519.589941][T11935]  ? __pfx_do_new_mount+0x10/0x10
[  519.589958][T11935]  ? ns_capable+0x89/0xe0
[  519.589977][T11935]  ? path_mount+0x647/0x1050
[  519.589994][T11935]  ? user_path_at+0xd4/0x160
[  519.590014][T11935]  __se_sys_mount+0x31d/0x420
[  519.590035][T11935]  ? __pfx___se_sys_mount+0x10/0x10
[  519.590055][T11935]  ? __x64_sys_mount+0x20/0xc0
[  519.590073][T11935]  do_syscall_64+0x17b/0x530
[  519.590090][T11935]  ? irqentry_exit+0x10f/0x8f0
[  519.590105][T11935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.590128][T11935]  ? clear_bhb_loop+0x40/0x90
[  519.590148][T11935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.590165][T11935] RIP: 0033:0x7f432454de59
[  519.590180][T11935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.590194][T11935] RSP: 002b:00007f43227a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  519.590211][T11935] RAX: ffffffffffffffda RBX: 00007f43247d5fa0 RCX: 00007f432454de59
[  519.590223][T11935] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  519.590234][T11935] RBP: 00007f43227a6090 R08: 0000200000000140 R09: 0000000000000000
[  519.590245][T11935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  519.590255][T11935] R13: 00007f43247d6038 R14: 00007f43247d5fa0 R15: 00007ffe916732f8
[  519.590279][T11935]  </TASK>
[  519.607740][ T5768] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  519.686021][ T5768] usb 4-1: no configurations
[  519.686074][ T5768] usb 4-1: can't read configurations, error -22
[  519.877470][ T5768] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  519.900210][ T5768] usb 4-1: no configurations
[  519.900231][ T5768] usb 4-1: can't read configurations, error -22
[  519.911581][ T5768] usb usb4-port1: unable to enumerate USB device
[  519.942906][T11937] openvswitch: netlink: Multiple metadata blocks provided
[  521.166228][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  521.277191][T11950] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.2040'.
[  521.395015][T11952] FAULT_INJECTION: forcing a failure.
[  521.395015][T11952] name failslab, interval 1, probability 0, space 0, times 0
[  521.395057][T11952] CPU: 0 UID: 0 PID: 11952 Comm: syz.1.2041 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  521.395087][T11952] Tainted: [L]=SOFTLOCKUP
[  521.395096][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  521.395110][T11952] Call Trace:
[  521.395119][T11952]  <TASK>
[  521.395129][T11952]  dump_stack_lvl+0xe8/0x150
[  521.395165][T11952]  should_fail_ex+0x467/0x600
[  521.395200][T11952]  should_failslab+0xa8/0x100
[  521.395221][T11952]  ? security_inode_alloc+0x39/0x2d0
[  521.395254][T11952]  kmem_cache_alloc_noprof+0x9e/0x680
[  521.395286][T11952]  ? security_inode_alloc+0x39/0x2d0
[  521.395326][T11952]  security_inode_alloc+0x39/0x2d0
[  521.395361][T11952]  inode_init_always_gfp+0x983/0xd40
[  521.395420][T11952]  alloc_inode+0x82/0x1b0
[  521.395457][T11952]  alloc_anon_inode+0x1e/0x340
[  521.395485][T11952]  anon_inode_make_secure_inode+0x7b/0x180
[  521.395523][T11952]  ? __pfx_anon_inode_make_secure_inode+0x10/0x10
[  521.395577][T11952]  __anon_inode_getfile+0xce/0x210
[  521.395614][T11952]  io_uring_create+0x57f/0x990
[  521.395644][T11952]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  521.395678][T11952]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  521.395709][T11952]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  521.395759][T11952]  ? __pfx_ksys_write+0x10/0x10
[  521.395795][T11952]  do_syscall_64+0x17b/0x530
[  521.395818][T11952]  ? irqentry_exit+0x10f/0x8f0
[  521.395839][T11952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.395863][T11952]  ? clear_bhb_loop+0x40/0x90
[  521.395891][T11952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.395914][T11952] RIP: 0033:0x7f0ccd64de59
[  521.395934][T11952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.395954][T11952] RSP: 002b:00007f0ccb8a5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  521.395986][T11952] RAX: ffffffffffffffda RBX: 0000200000000788 RCX: 00007f0ccd64de59
[  521.396002][T11952] RDX: 0000200000000808 RSI: 0000200000000788 RDI: 00000000000003c9
[  521.396017][T11952] RBP: 0000200000000780 R08: 0000000000000000 R09: 0000000000000000
[  521.396031][T11952] R10: 0000200000000810 R11: 0000000000000206 R12: 0000200000000808
[  521.396047][T11952] R13: 0000200000000810 R14: 00007f0ccb8a5fd8 R15: 0000000000000000
[  521.396078][T11952]  </TASK>
[  522.306873][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'.
[  522.359365][T11976] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2052'.
[  522.527334][  T823] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  522.527400][  T823] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  522.539243][  T823] usb 1-1: USB disconnect, device number 102
[  522.546465][ T5632] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  522.728311][ T5632] usb 3-1: not running at top speed; connect to a high speed hub
[  522.729596][ T5632] usb 3-1: config 8 has an invalid interface number: 130 but max is 0
[  522.729624][ T5632] usb 3-1: config 8 has no interface number 0
[  522.729675][ T5632] usb 3-1: config 8 interface 130 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  522.729705][ T5632] usb 3-1: config 8 interface 130 has no altsetting 0
[  522.732927][ T5632] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=8c.18
[  522.732959][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.732982][ T5632] usb 3-1: Product: syz
[  522.732998][ T5632] usb 3-1: Manufacturer: syz
[  522.733014][ T5632] usb 3-1: SerialNumber: syz
[  522.813784][T11980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  522.830346][ T5632] kvaser_usb 3-1:8.130: error -ENODEV: Cannot get usb endpoint(s)
[  522.996460][  T823] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  523.019391][ T5601] usb 3-1: USB disconnect, device number 7
[  523.165391][  T823] usb 1-1: Using ep0 maxpacket: 32
[  523.175135][  T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.175172][  T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.175202][  T823] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  523.175220][  T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.197907][  T823] usb 1-1: config 0 descriptor??
[  523.670360][  T823] savu 0003:1E7D:2D5A.001C: item fetching failed at offset 5/8
[  523.674511][  T823] savu 0003:1E7D:2D5A.001C: parse failed
[  523.674571][  T823] savu 0003:1E7D:2D5A.001C: probe with driver savu failed with error -22
[  523.797209][T11984] ./bus: Can't lookup blockdev
[  523.902250][ T5601] usb 1-1: USB disconnect, device number 103
[  524.046528][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  524.185904][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'.
[  524.497948][T11997] syzkaller1: entered promiscuous mode
[  524.497976][T11997] syzkaller1: entered allmulticast mode
[  524.538258][T12000] pimreg: entered allmulticast mode
[  525.576708][ T5702] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  525.655170][T12023] overlayfs: missing 'workdir'
[  525.742822][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.742884][ T5702] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  525.742910][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.779441][ T5702] usb 3-1: config 0 descriptor??
[  525.786112][ T5702] pwc: Askey VC010 type 2 USB webcam detected.
[  525.992042][ T5702] pwc: send_video_command error -71
[  525.992071][ T5702] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  525.992186][ T5702] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  526.022269][ T5702] usb 3-1: USB disconnect, device number 8
[  526.436797][  T823] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  526.506799][ T5702] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  526.666151][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.666221][ T5702] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  526.666253][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.711312][ T5702] usb 3-1: config 0 descriptor??
[  526.729882][ T5702] pwc: Askey VC010 type 2 USB webcam detected.
[  527.148837][ T5702] pwc: recv_control_msg error -32 req 02 val 2b00
[  527.178235][ T5702] pwc: recv_control_msg error -32 req 02 val 2700
[  527.179516][ T5702] pwc: recv_control_msg error -32 req 02 val 2c00
[  527.194641][ T5702] pwc: recv_control_msg error -32 req 04 val 1000
[  527.203764][ T5702] pwc: recv_control_msg error -32 req 04 val 1300
[  527.217664][ T5702] pwc: recv_control_msg error -32 req 04 val 1400
[  527.222507][ T5702] pwc: recv_control_msg error -32 req 02 val 2000
[  527.239933][ T5702] pwc: recv_control_msg error -32 req 02 val 2100
[  527.241279][ T5702] pwc: recv_control_msg error -32 req 04 val 1500
[  527.244117][ T5702] pwc: recv_control_msg error -32 req 02 val 2500
[  527.267409][ T5702] pwc: recv_control_msg error -32 req 02 val 2400
[  527.294862][ T5702] pwc: recv_control_msg error -32 req 02 val 2600
[  527.406997][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  527.559177][ T5702] pwc: recv_control_msg error -71 req 02 val 2800
[  527.561757][ T5702] pwc: recv_control_msg error -71 req 04 val 1100
[  527.562264][ T5702] pwc: recv_control_msg error -71 req 04 val 1200
[  527.566048][ T5702] pwc: Registered as video103.
[  527.630241][ T5702] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30
[  527.767349][ T5702] usb 3-1: USB disconnect, device number 9
[  528.211704][T12046] FAULT_INJECTION: forcing a failure.
[  528.211704][T12046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.211747][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.3.2076 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  528.211780][T12046] Tainted: [L]=SOFTLOCKUP
[  528.211789][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  528.211803][T12046] Call Trace:
[  528.211813][T12046]  <TASK>
[  528.211823][T12046]  dump_stack_lvl+0xe8/0x150
[  528.211865][T12046]  should_fail_ex+0x467/0x600
[  528.211902][T12046]  _copy_from_user+0x2d/0xb0
[  528.211924][T12046]  csum_and_copy_from_iter_full+0x210/0x1fb0
[  528.211982][T12046]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  528.212026][T12046]  ? rcu_is_watching+0x15/0xb0
[  528.212055][T12046]  ? trace_kmalloc+0x2a/0xf0
[  528.212094][T12046]  ip_generic_getfrag+0x149/0x2d0
[  528.212130][T12046]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  528.212159][T12046]  ? raw6_getfrag+0x116/0x3a0
[  528.212187][T12046]  ? __alloc_skb+0x4cc/0x7a0
[  528.212218][T12046]  ? skb_put+0x112/0x210
[  528.212251][T12046]  __ip6_append_data+0x3b26/0x40c0
[  528.212309][T12046]  ? __pfx_raw6_getfrag+0x10/0x10
[  528.212361][T12046]  ? __pfx___ip6_append_data+0x10/0x10
[  528.212397][T12046]  ? ip6_setup_cork+0x547/0xf60
[  528.212434][T12046]  ? ip6_append_data+0x1b6/0x280
[  528.212472][T12046]  ip6_append_data+0x108/0x280
[  528.212511][T12046]  ? __pfx_raw6_getfrag+0x10/0x10
[  528.212540][T12046]  rawv6_sendmsg+0x1298/0x18c0
[  528.212581][T12046]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  528.212618][T12046]  ? lock_acquire+0x115/0x350
[  528.212674][T12046]  ? is_bpf_text_address+0x26/0x2b0
[  528.212708][T12046]  ? sock_rps_record_flow+0x19/0x350
[  528.212741][T12046]  ? inet_sendmsg+0x298/0x320
[  528.212769][T12046]  ? arch_stack_walk+0xfb/0x150
[  528.212806][T12046]  ? __pfx_inet_sendmsg+0x10/0x10
[  528.212836][T12046]  sock_sendmsg_nosec+0x10e/0x180
[  528.212867][T12046]  sock_write_iter+0x2e4/0x3f0
[  528.212894][T12046]  ? __pfx_sock_write_iter+0x10/0x10
[  528.212940][T12046]  do_iter_readv_writev+0x624/0x8d0
[  528.212974][T12046]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  528.213011][T12046]  ? bpf_lsm_file_permission+0x9/0x20
[  528.213046][T12046]  ? security_file_permission+0x68/0x220
[  528.213075][T12046]  ? rw_verify_area+0x209/0x4d0
[  528.213107][T12046]  vfs_writev+0x34c/0x990
[  528.213144][T12046]  ? do_raw_spin_lock+0x12b/0x2f0
[  528.213185][T12046]  ? __pfx_vfs_writev+0x10/0x10
[  528.213236][T12046]  ? __fget_files+0x2a/0x420
[  528.213264][T12046]  ? __fget_files+0x3a8/0x420
[  528.213287][T12046]  ? __fget_files+0x2a/0x420
[  528.213321][T12046]  do_writev+0x15a/0x2e0
[  528.213359][T12046]  ? __pfx_do_writev+0x10/0x10
[  528.213404][T12046]  do_syscall_64+0x17b/0x530
[  528.213428][T12046]  ? irqentry_exit+0x10f/0x8f0
[  528.213450][T12046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.213475][T12046]  ? clear_bhb_loop+0x40/0x90
[  528.213504][T12046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.213529][T12046] RIP: 0033:0x7f7ad653de59
[  528.213551][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.213570][T12046] RSP: 002b:00007f7ad4775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  528.213603][T12046] RAX: ffffffffffffffda RBX: 00007f7ad67c6090 RCX: 00007f7ad653de59
[  528.213620][T12046] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  528.213635][T12046] RBP: 00007f7ad4775090 R08: 0000000000000000 R09: 0000000000000000
[  528.213649][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.213664][T12046] R13: 00007f7ad67c6128 R14: 00007f7ad67c6090 R15: 00007fff0d9f2f38
[  528.213700][T12046]  </TASK>
[  529.227261][ T5632] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  529.284831][T12054] 9p: Bad value for 'rfdno'
[  529.381953][ T5632] usb 1-1: Using ep0 maxpacket: 8
[  529.384517][ T5632] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  529.402505][ T5632] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  529.402537][ T5632] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  529.402557][ T5632] usb 1-1: Product: syz
[  529.402571][ T5632] usb 1-1: Manufacturer: syz
[  529.402585][ T5632] usb 1-1: SerialNumber: syz
[  529.437118][ T5830] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  529.617429][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.617528][ T5830] usb 4-1: config 0 has no interfaces?
[  529.617563][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  529.617589][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.666243][ T5830] usb 4-1: config 0 descriptor??
[  529.691430][ T5604] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  529.775192][ T5632] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  529.775303][ T5632] visor 1-1:1.0: probe with driver visor failed with error -110
[  529.924891][ T5601] usb 1-1: USB disconnect, device number 104
[  530.029940][ T5632] usb 4-1: USB disconnect, device number 14
[  530.256301][T12034] kexec: Could not allocate control_code_buffer
[  530.271852][ T5768] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  530.419717][ T5768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.419777][ T5768] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  530.419808][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.451458][ T5768] usb 3-1: config 0 descriptor??
[  530.503536][T12064] netlink: 1239 bytes leftover after parsing attributes in process `syz.1.2083'.
[  530.869084][ T5830] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  530.873633][ T5768] usb 3-1: string descriptor 0 read error: -71
[  530.899083][ T5768] pwc: Askey VC010 type 2 USB webcam detected.
[  530.900196][ T5768] pwc: send_video_command error -71
[  530.900212][ T5768] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  530.900328][ T5768] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  530.911156][ T5768] usb 3-1: USB disconnect, device number 10
[  531.017353][ T5830] usb 1-1: Using ep0 maxpacket: 8
[  531.020181][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.020219][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  531.020265][ T5830] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  531.020299][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.078647][ T5830] usb 1-1: config 0 descriptor??
[  531.494791][ T5830] usbhid 1-1:0.0: can't add hid device: -71
[  531.494926][ T5830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  531.520359][T12081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2091'.
[  531.520391][T12081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2091'.
[  531.520410][T12081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2091'.
[  531.526584][ T5830] usb 1-1: USB disconnect, device number 105
[  531.809577][  T823] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  531.837431][ T5632] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  531.947435][  T823] usb 3-1: device descriptor read/64, error -71
[  531.987395][ T5632] usb 2-1: Using ep0 maxpacket: 16
[  531.990242][ T5632] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  531.990278][ T5632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.996261][ T5632] usb 2-1: config 0 descriptor??
[  532.059455][ T5632] gspca_main: sonixj-2.14.0 probing 0471:0327
[  532.185020][T12094] netlink: 1243 bytes leftover after parsing attributes in process `syz.0.2094'.
[  532.197881][  T823] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  532.339834][  T823] usb 3-1: device descriptor read/64, error -71
[  532.449357][  T823] usb usb3-port1: attempt power cycle
[  532.787561][  T823] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  532.810396][  T823] usb 3-1: device descriptor read/8, error -71
[  532.817507][ T5830] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  532.979842][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.979902][ T5830] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  532.979965][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.986449][ T5830] usb 4-1: config 0 descriptor??
[  533.078479][  T823] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  533.104216][  T823] usb 3-1: device descriptor read/8, error -71
[  533.117575][ T5632] gspca_sonixj: reg_w1 err -71
[  533.143043][ T5632] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  533.170458][ T5632] usb 2-1: USB disconnect, device number 113
[  533.208379][  T823] usb usb3-port1: unable to enumerate USB device
[  533.424369][ T5830] usb 4-1: string descriptor 0 read error: -71
[  533.429992][ T5830] pwc: Askey VC010 type 2 USB webcam detected.
[  533.443695][ T5830] pwc: send_video_command error -71
[  533.443714][ T5830] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  533.443839][ T5830] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  533.471952][ T5830] usb 4-1: USB disconnect, device number 15
[  533.823210][T12109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  534.290232][T12112] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  534.290232][T12112] The task syz.3.2100 (12112) triggered the difference, watch for misbehavior.
[  535.317811][ T5702] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  535.469365][ T5702] usb 4-1: Using ep0 maxpacket: 32
[  535.480822][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short
[  535.484574][ T5702] usb 4-1: config 5 has an invalid interface number: 18 but max is 0
[  535.484611][ T5702] usb 4-1: config 5 has no interface number 0
[  535.484653][ T5702] usb 4-1: config 5 interface 18 has no altsetting 0
[  535.532724][ T5702] usb 4-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=3f.ae
[  535.532758][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.532781][ T5702] usb 4-1: Product: syz
[  535.532796][ T5702] usb 4-1: Manufacturer: syz
[  535.532812][ T5702] usb 4-1: SerialNumber: syz
[  535.574855][ T5702] r8152-cfgselector 4-1: Unknown version 0x0000
[  535.789131][ T5702] r8152 4-1:5.18: Expected endpoints are not found
[  535.810946][ T5702] r8152-cfgselector 4-1: USB disconnect, device number 16
[  536.407852][ T5702] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  536.557869][ T5702] usb 2-1: Using ep0 maxpacket: 32
[  536.570536][ T5702] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  536.570568][ T5702] usb 2-1: config 0 has no interface number 0
[  536.575625][ T5702] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  536.575659][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.575686][ T5702] usb 2-1: Product: syz
[  536.575714][ T5702] usb 2-1: Manufacturer: syz
[  536.575730][ T5702] usb 2-1: SerialNumber: syz
[  536.644772][ T5702] usb 2-1: config 0 descriptor??
[  536.666261][ T5702] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  537.034221][ T5702] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  537.137408][ T5702] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  537.786431][ T5632] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  537.845873][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  537.846708][  T823] usb 2-1: USB disconnect, device number 114
[  537.936960][  T823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  538.002028][ T5632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.002063][ T5632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.002104][ T5632] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  538.002129][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.051301][ T5632] usb 1-1: config 0 descriptor??
[  538.074501][  T823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  538.077085][  T823] quatech2 2-1:0.51: device disconnected
[  538.465157][ T5632] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0
[  538.465196][ T5632] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0
[  538.465234][ T5632] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0
[  538.465264][ T5632] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0
[  538.465294][ T5632] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0
[  538.511921][ T5632] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  538.663565][ T5632] playstation 0003:054C:0DF2.001D: Invalid byte count transferred, expected 20 got 0
[  538.663606][ T5632] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense pairing info: -22
[  538.663663][ T5632] playstation 0003:054C:0DF2.001D: Failed to get MAC address from DualSense
[  538.663681][ T5632] playstation 0003:054C:0DF2.001D: Failed to create dualsense.
[  538.707001][ T5632] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -22
[  538.725865][T12203] netlink: 'syz.3.2127': attribute type 23 has an invalid length.
[  539.028347][ T5632] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  539.084462][T12203] tipc: Started in network mode
[  539.084486][T12203] tipc: Node identity 2007ff, cluster identity 4711
[  539.084502][T12203] tipc: Node number set to 2099199
[  539.189794][ T5632] usb 2-1: Using ep0 maxpacket: 8
[  539.207544][ T5632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  539.221468][ T5632] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  539.221502][ T5632] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  539.221526][ T5632] usb 2-1: Product: syz
[  539.221543][ T5632] usb 2-1: Manufacturer: syz
[  539.221559][ T5632] usb 2-1: SerialNumber: syz
[  539.260381][T12213] CIFS: VFS: UNC: missing delimiter between hostname and share name
[  539.260562][T12213] CIFS: VFS: Malformed UNC in devname
[  539.483543][ T5604] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  539.565297][ T5632] usb 2-1: palm_os_3_probe - error -71 getting connection information
[  539.565408][ T5632] visor 2-1:1.0: probe with driver visor failed with error -71
[  539.592409][ T5632] usb 2-1: USB disconnect, device number 115
[  540.008567][ T5702] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  540.098337][ T5632] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  540.140377][ T5702] usb 3-1: device descriptor read/64, error -71
[  540.248467][ T5632] usb 4-1: Using ep0 maxpacket: 16
[  540.255696][ T5632] usb 4-1: config 1 has an invalid interface number: 19 but max is 0
[  540.255725][ T5632] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  540.255740][ T5632] usb 4-1: config 1 has no interface number 0
[  540.255772][ T5632] usb 4-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  540.255793][ T5632] usb 4-1: config 1 interface 19 has no altsetting 0
[  540.259649][ T5632] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9
[  540.259736][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.259797][ T5632] usb 4-1: Product: syz
[  540.259822][ T5632] usb 4-1: Manufacturer: syz
[  540.259838][ T5632] usb 4-1: SerialNumber: syz
[  540.365739][ T5632] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  540.384589][ T5702] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  540.508391][ T5702] usb 3-1: device descriptor read/64, error -71
[  540.546654][ T5601] usb 4-1: USB disconnect, device number 17
[  540.556537][ T9699] usb 4-1: Failed to submit usb control message: -71
[  540.556586][ T9699] usb 4-1: unable to send the bmi data to the device: -71
[  540.556607][ T9699] usb 4-1: unable to get target info from device
[  540.556635][ T9699] usb 4-1: could not get target info (-71)
[  540.590041][ T9699] usb 4-1: could not probe fw (-71)
[  540.619402][ T5702] usb usb3-port1: attempt power cycle
[  540.631195][ T5703] usb 1-1: USB disconnect, device number 106
[  540.968376][ T5632] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  540.998382][ T5702] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  541.020383][ T5702] usb 3-1: device descriptor read/8, error -71
[  541.118958][ T5632] usb 2-1: Using ep0 maxpacket: 32
[  541.127410][ T5632] usb 2-1: unable to get BOS descriptor or descriptor too short
[  541.138783][ T5632] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 229, changing to 11
[  541.138870][ T5632] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  541.138901][ T5632] usb 2-1: config 1 interface 0 has no altsetting 0
[  541.168812][ T5632] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  541.168943][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.169005][ T5632] usb 2-1: Product: syz
[  541.169046][ T5632] usb 2-1: Manufacturer: syz
[  541.169090][ T5632] usb 2-1: SerialNumber: syz
[  541.298535][ T5702] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  541.321484][ T5702] usb 3-1: device descriptor read/8, error -71
[  541.434407][ T5702] usb usb3-port1: unable to enumerate USB device
[  541.486593][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.515273][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.534896][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.535403][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.568597][ T5768] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  541.611807][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'.
[  541.848112][ T5768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  541.879967][ T5768] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  541.880012][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.952542][ T5768] usb 1-1: config 0 descriptor??
[  542.356646][T12239] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  542.368378][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  542.419570][ T5632] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input31
[  542.444380][ T4942] bcm5974 2-1:1.0: could not read from device
[  542.497402][ T5632] usb 2-1: USB disconnect, device number 116
[  542.722001][T12248] FAULT_INJECTION: forcing a failure.
[  542.722001][T12248] name failslab, interval 1, probability 0, space 0, times 0
[  542.722047][T12248] CPU: 0 UID: 0 PID: 12248 Comm: syz.1.2142 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  542.722083][T12248] Tainted: [L]=SOFTLOCKUP
[  542.722093][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  542.722108][T12248] Call Trace:
[  542.722118][T12248]  <TASK>
[  542.722130][T12248]  dump_stack_lvl+0xe8/0x150
[  542.722170][T12248]  should_fail_ex+0x467/0x600
[  542.722207][T12248]  ? __d_alloc+0x37/0x6f0
[  542.722238][T12248]  should_failslab+0xa8/0x100
[  542.722269][T12248]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[  542.722305][T12248]  ? lockdep_hardirqs_on+0x7a/0x110
[  542.722333][T12248]  ? __d_alloc+0x37/0x6f0
[  542.722369][T12248]  __d_alloc+0x37/0x6f0
[  542.722405][T12248]  d_alloc_pseudo+0x21/0xc0
[  542.722437][T12248]  alloc_path_pseudo+0x107/0x220
[  542.722482][T12248]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  542.722534][T12248]  alloc_file_pseudo+0xa8/0x1e0
[  542.722578][T12248]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  542.722633][T12248]  __anon_inode_getfile+0x129/0x210
[  542.722676][T12248]  io_uring_create+0x57f/0x990
[  542.722709][T12248]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  542.722750][T12248]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  542.722787][T12248]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  542.722853][T12248]  ? __pfx_ksys_write+0x10/0x10
[  542.722895][T12248]  do_syscall_64+0x17b/0x530
[  542.722919][T12248]  ? irqentry_exit+0x10f/0x8f0
[  542.722942][T12248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.722969][T12248]  ? clear_bhb_loop+0x40/0x90
[  542.723001][T12248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.723029][T12248] RIP: 0033:0x7f0ccd64de59
[  542.723053][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.723075][T12248] RSP: 002b:00007f0ccb8a5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  542.723102][T12248] RAX: ffffffffffffffda RBX: 0000200000000788 RCX: 00007f0ccd64de59
[  542.723121][T12248] RDX: 0000200000000808 RSI: 0000200000000788 RDI: 00000000000003c9
[  542.723138][T12248] RBP: 0000200000000780 R08: 0000000000000000 R09: 0000000000000000
[  542.723155][T12248] R10: 0000200000000810 R11: 0000000000000206 R12: 0000200000000808
[  542.723171][T12248] R13: 0000200000000810 R14: 00007f0ccb8a5fd8 R15: 0000000000000000
[  542.723207][T12248]  </TASK>
[  542.999457][ T5768] asus 0003:0B05:1ABE.001E: unknown main item tag 0x0
[  542.999503][ T5768] asus 0003:0B05:1ABE.001E: unknown main item tag 0x0
[  542.999531][ T5768] asus 0003:0B05:1ABE.001E: unknown main item tag 0x0
[  542.999560][ T5768] asus 0003:0B05:1ABE.001E: unknown main item tag 0x0
[  542.999699][ T5768] asus 0003:0B05:1ABE.001E: unknown main item tag 0x0
[  543.003150][ T5768] asus 0003:0B05:1ABE.001E: ignoring exceeding usage max
[  543.005069][ T5768] asus 0003:0B05:1ABE.001E: unexpected long global item
[  543.006088][ T5768] asus 0003:0B05:1ABE.001E: Asus hid parse failed: -22
[  543.006224][ T5768] asus 0003:0B05:1ABE.001E: probe with driver asus failed with error -22
[  543.117264][ T5632] usb 1-1: USB disconnect, device number 107
[  543.538683][ T5702] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  543.691507][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short
[  543.692950][T12264] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  543.693991][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.694010][ T5702] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  543.694046][ T5702] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  543.694073][ T5702] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  543.694103][ T5702] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  543.694122][ T5702] usb 3-1: config 1 interface 1 has no altsetting 0
[  543.739503][ T5702] usb 3-1: string descriptor 0 read error: -22
[  543.739920][ T5702] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  543.739948][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.224653][ T5702] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  544.224695][ T5702] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  544.224720][ T5702] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  544.257619][ T5768] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  544.348048][ T5702] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  544.385495][ T5702] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  544.415763][ T5702] usb 3-1: USB disconnect, device number 19
[  544.418667][ T5768] usb 4-1: Using ep0 maxpacket: 32
[  544.437915][ T5768] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  544.437948][ T5768] usb 4-1: config 0 has no interface number 0
[  544.461653][ T5768] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  544.461686][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.461708][ T5768] usb 4-1: Product: syz
[  544.461723][ T5768] usb 4-1: Manufacturer: syz
[  544.461738][ T5768] usb 4-1: SerialNumber: syz
[  544.529205][ T5768] usb 4-1: config 0 descriptor??
[  544.553084][ T5768] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  544.576534][T12278] netlink: 'syz.0.2155': attribute type 23 has an invalid length.
[  544.649833][ T5601] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  544.823696][ T5601] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  544.841823][ T5601] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  544.841854][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.841879][ T5601] usb 2-1: Product: syz
[  544.841905][ T5601] usb 2-1: Manufacturer: syz
[  544.841920][ T5601] usb 2-1: SerialNumber: syz
[  544.951349][ T5768] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  545.007626][ T5768] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  545.154483][ T5601] usb 2-1: Cannot retrieve CPort count: -71
[  545.154526][ T5601] usb 2-1: Cannot retrieve CPort count: -71
[  545.154608][ T5601] es2_ap_driver 2-1:246.0: probe with driver es2_ap_driver failed with error -71
[  545.225781][ T5601] usb 2-1: USB disconnect, device number 117
[  545.271359][ T5817] udevd[5817]: setting owner of /dev/bus/usb/002/117 to uid=0, gid=0 failed: No such file or directory
[  545.338525][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  545.346800][ T5768] usb 4-1: USB disconnect, device number 18
[  545.429720][ T5768] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  545.495061][ T5768] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  545.496594][ T5768] quatech2 4-1:0.51: device disconnected
[  545.988920][ T5768] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  546.058424][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.060698][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.149002][ T5601] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  546.149339][ T5768] usb 3-1: Using ep0 maxpacket: 32
[  546.152207][ T5768] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  546.152236][ T5768] usb 3-1: config 0 has no interface number 0
[  546.152344][ T5768] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  546.152371][ T5768] usb 3-1: config 0 interface 89 has no altsetting 0
[  546.204755][ T5768] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  546.205018][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.205052][ T5768] usb 3-1: Product: syz
[  546.205069][ T5768] usb 3-1: Manufacturer: syz
[  546.205086][ T5768] usb 3-1: SerialNumber: syz
[  546.258199][ T5768] usb 3-1: config 0 descriptor??
[  546.289147][ T5768] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  546.289267][ T5768] em28xx 3-1:0.89: Video interface 89 found:
[  546.489968][T12304] jfs: Unknown parameter 'discardpe'
[  546.599831][ T5768] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  546.663377][ T5768] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  546.663471][ T5768] em28xx 3-1:0.89: board has no eeprom
[  546.719610][ T5768] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  546.719634][ T5768] em28xx 3-1:0.89: analog set to bulk mode.
[  546.719981][   T43] em28xx 3-1:0.89: Registering V4L2 extension
[  546.766228][ T5768] usb 3-1: USB disconnect, device number 20
[  546.783892][ T5768] em28xx 3-1:0.89: Disconnecting em28xx
[  546.852955][   T43] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  546.852983][   T43] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  546.852999][   T43] em28xx 3-1:0.89: No AC97 audio processor
[  546.902748][T12315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'.
[  546.993986][   T43] usb 3-1: Decoder not found
[  546.994011][   T43] em28xx 3-1:0.89: failed to create media graph
[  546.994111][   T43] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  547.130229][   T43] INFO: trying to register non-static key.
[  547.130316][   T43] The code is fine but needs lockdep annotation, or maybe
[  547.130329][   T43] you didn't initialize this object before use?
[  547.130373][   T43] turning off the locking correctness validator.
[  547.130423][   T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  547.130464][   T43] Tainted: [L]=SOFTLOCKUP
[  547.130474][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  547.130498][   T43] Workqueue: events request_module_async
[  547.130528][   T43] Call Trace:
[  547.130536][   T43]  <TASK>
[  547.130547][   T43]  dump_stack_lvl+0xe8/0x150
[  547.130579][   T43]  assign_lock_key+0x133/0x150
[  547.130605][   T43]  register_lock_class+0xcc/0x2e0
[  547.130642][   T43]  __lock_acquire+0xaf/0x2e40
[  547.130664][   T43]  ? ret_from_fork_asm+0x1a/0x30
[  547.130698][   T43]  ? stack_trace_save+0xa9/0x100
[  547.130729][   T43]  ? __pfx_stack_trace_save+0x10/0x10
[  547.130766][   T43]  lock_acquire+0x115/0x350
[  547.130801][   T43]  ? __wake_up_common_lock+0x2f/0x1f0
[  547.130839][   T43]  rt_spin_lock+0x83/0x400
[  547.130866][   T43]  ? __wake_up_common_lock+0x2f/0x1f0
[  547.130899][   T43]  ? __pfx_rt_spin_lock+0x10/0x10
[  547.130934][   T43]  __wake_up_common_lock+0x2f/0x1f0
[  547.130969][   T43]  __vb2_queue_cancel+0x2de/0xdc0
[  547.131002][   T43]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  547.131024][   T43]  ? lockdep_hardirqs_on+0x7a/0x110
[  547.131046][   T43]  ? __vb2_cleanup_fileio+0x134/0x1f0
[  547.131082][   T43]  vb2_core_queue_release+0x2f/0x150
[  547.131119][   T43]  vb2_video_unregister_device+0x15b/0x200
[  547.131156][   T43]  em28xx_v4l2_init+0x1c60/0x3140
[  547.131188][   T43]  em28xx_init_extension+0x120/0x1d0
[  547.131223][   T43]  ? process_one_work+0x7fd/0x1480
[  547.131247][   T43]  process_one_work+0xaaf/0x1480
[  547.131269][   T43]  ? irqentry_exit+0x218/0x8f0
[  547.131300][   T43]  ? __pfx_process_one_work+0x10/0x10
[  547.131321][   T43]  ? do_raw_spin_lock+0x12b/0x2f0
[  547.131354][   T43]  ? assign_work+0x3cf/0x5d0
[  547.131380][   T43]  worker_thread+0xb05/0x10d0
[  547.131416][   T43]  kthread+0x388/0x470
[  547.131454][   T43]  ? __pfx_worker_thread+0x10/0x10
[  547.131478][   T43]  ? __pfx_kthread+0x10/0x10
[  547.131508][   T43]  ret_from_fork+0x514/0xb70
[  547.131541][   T43]  ? __pfx_ret_from_fork+0x10/0x10
[  547.131572][   T43]  ? __switch_to+0xc89/0x1420
[  547.131599][   T43]  ? __pfx_kthread+0x10/0x10
[  547.131629][   T43]  ret_from_fork_asm+0x1a/0x30
[  547.131668][   T43]  </TASK>
[  547.133963][   T43] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  547.134139][   T43] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  547.134169][   T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  547.134201][   T43] Tainted: [L]=SOFTLOCKUP
[  547.134210][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  547.134224][   T43] Workqueue: events request_module_async
[  547.134251][   T43] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0
[  547.134288][   T43] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc
[  547.134309][   T43] RSP: 0018:ffffc90000b47908 EFLAGS: 00010246
[  547.134329][   T43] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  547.134344][   T43] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff
[  547.134361][   T43] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  547.134376][   T43] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88806342db14
[  547.134394][   T43] R13: ffff88806342dc28 R14: 0000000000000000 R15: 0000000000000000
[  547.134410][   T43] FS:  0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
[  547.134430][   T43] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  547.134455][   T43] CR2: 00007f0cce4056b8 CR3: 0000000058d48000 CR4: 00000000003526f0
[  547.134476][   T43] Call Trace:
[  547.134485][   T43]  <TASK>
[  547.134498][   T43]  __vb2_queue_cancel+0x2de/0xdc0
[  547.134532][   T43]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  547.134555][   T43]  ? lockdep_hardirqs_on+0x7a/0x110
[  547.134576][   T43]  ? __vb2_cleanup_fileio+0x134/0x1f0
[  547.134613][   T43]  vb2_core_queue_release+0x2f/0x150
[  547.134650][   T43]  vb2_video_unregister_device+0x15b/0x200
[  547.134688][   T43]  em28xx_v4l2_init+0x1c60/0x3140
[  547.134722][   T43]  em28xx_init_extension+0x120/0x1d0
[  547.134760][   T43]  ? process_one_work+0x7fd/0x1480
[  547.134784][   T43]  process_one_work+0xaaf/0x1480
[  547.134806][   T43]  ? irqentry_exit+0x218/0x8f0
[  547.134837][   T43]  ? __pfx_process_one_work+0x10/0x10
[  547.134859][   T43]  ? do_raw_spin_lock+0x12b/0x2f0
[  547.134893][   T43]  ? assign_work+0x3cf/0x5d0
[  547.134917][   T43]  worker_thread+0xb05/0x10d0
[  547.134953][   T43]  kthread+0x388/0x470
[  547.134981][   T43]  ? __pfx_worker_thread+0x10/0x10
[  547.135005][   T43]  ? __pfx_kthread+0x10/0x10
[  547.135035][   T43]  ret_from_fork+0x514/0xb70
[  547.135067][   T43]  ? __pfx_ret_from_fork+0x10/0x10
[  547.135094][   T43]  ? __switch_to+0xc89/0x1420
[  547.135122][   T43]  ? __pfx_kthread+0x10/0x10
[  547.135153][   T43]  ret_from_fork_asm+0x1a/0x30
[  547.135192][   T43]  </TASK>
[  547.135210][   T43] Modules linked in:
[  547.135252][   T43] ---[ end trace 0000000000000000 ]---
[  547.135355][   T43] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0
[  547.137153][ T5588] ------------[ cut here ]------------
[  547.137164][ T5588] mas->ld_seq != lock_sequence(map)
[  547.137181][ T5588] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: syz-executor/5588
[  547.137215][ T5588] Modules linked in:
[  547.137235][ T5588] CPU: 1 UID: 0 PID: 5588 Comm: syz-executor Tainted: G      D      L      syzkaller #0 PREEMPT_{RT,(full)} 
[  547.137267][ T5588] Tainted: [D]=DIE, [L]=SOFTLOCKUP
[  547.137276][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  547.137289][ T5588] RIP: 0010:mas_find+0xa02/0xca0
[  547.137311][ T5588] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55
[  547.137330][ T5588] RSP: 0018:ffffc9000512f738 EFLAGS: 00010293
[  547.137350][ T5588] RAX: ffffffff8b48c241 RBX: 1ffff92000a25f19 RCX: ffff888011763e80
[  547.137368][ T5588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  547.137381][ T5588] RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000
[  547.137395][ T5588] R10: 0000000000000100 R11: 00000000fffffffb R12: 00000000ffffffff
[  547.137409][ T5588] R13: ffffc9000512f8d4 R14: ffffc9000512f880 R15: ffffc9000512f8c8
[  547.137425][ T5588] FS:  0000555559f99500(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
[  547.137452][ T5588] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  547.137468][ T5588] CR2: 00007f0cce4056b8 CR3: 0000000058d48000 CR4: 00000000003526f0
[  547.137489][ T5588] Call Trace:
[  547.137498][ T5588]  <TASK>
[  547.137507][ T5588]  ? up_write+0x5a/0x190
[  547.137538][ T5588]  dup_mmap+0xf92/0x1d30
[  547.137578][ T5588]  ? __pfx_dup_mmap+0x10/0x10
[  547.137616][ T5588]  ? lock_acquire+0x115/0x350
[  547.137659][ T5588]  copy_mm+0x11a/0x480
[  547.137684][ T5588]  ? copy_process+0xd3c/0x43f0
[  547.137706][ T5588]  copy_process+0x1e7d/0x43f0
[  547.137733][ T5588]  ? copy_process+0xd3c/0x43f0
[  547.137763][ T5588]  ? __pfx_copy_process+0x10/0x10
[  547.137794][ T5588]  kernel_clone+0x2d7/0x940
[  547.137819][ T5588]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  547.137840][ T5588]  ? __pfx_kernel_clone+0x10/0x10
[  547.137873][ T5588]  __x64_sys_clone+0x1b6/0x230
[  547.137900][ T5588]  ? __pfx___x64_sys_clone+0x10/0x10
[  547.137936][ T5588]  ? do_user_addr_fault+0xc4a/0x1340
[  547.137971][ T5588]  do_syscall_64+0x17b/0x530
[  547.137993][ T5588]  ? irqentry_exit+0x10f/0x8f0
[  547.138014][ T5588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.138038][ T5588]  ? clear_bhb_loop+0x40/0x90
[  547.138064][ T5588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.138087][ T5588] RIP: 0033:0x7f0ccd6768d2
[  547.138106][ T5588] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  547.138127][ T5588] RSP: 002b:00007ffc4c9664a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  547.138149][ T5588] RAX: ffffffffffffffda RBX: 00007ffc4c9664a0 RCX: 00007f0ccd6768d2
[  547.138165][ T5588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  547.138216][ T5588] RBP: 00007ffc4c96662c R08: 0000000000000000 R09: 0000000000000001
[  547.138232][ T5588] R10: 0000555559f997d0 R11: 0000000000000246 R12: 0000000000000001
[  547.138247][ T5588] R13: 00000000000927c0 R14: 00000000000856d4 R15: 00007ffc4c966680
[  547.138290][ T5588]  </TASK>
[  547.138301][ T5588] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  547.138915][ T5588] Kernel Offset: disabled