last executing test programs:

3m47.775873483s ago: executing program 2 (id=616):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd1000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil})
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)

3m45.236851771s ago: executing program 2 (id=635):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0xae, {0x6000, 0x800c000}}, "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", "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"})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2000000000af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m43.69935201s ago: executing program 2 (id=641):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r0, 0x80000000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0d00000001000900"})

3m43.559917017s ago: executing program 2 (id=642):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1, 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)

3m43.440611046s ago: executing program 2 (id=644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b400000000034000480300001800d00010073796e70726f7879000000001c000280050002008100000008000340000000fcffffff40000700000900010073797a3000000100"/198], 0xd0}}, 0x4000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd2a, 0x80000000, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x76}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (rerun: 64)

3m42.900201499s ago: executing program 2 (id=651):
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
close(r1)
r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x0, 0x0)
read$FUSE(r6, &(0x7f0000003440)={0x2020}, 0x2020)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="20000d000000401a59f887b4825099eac4b3078ab1f5908c0008fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe)
write$UHID_INPUT(r8, &(0x7f0000000580)={0xf, {"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", 0x1000}}, 0x1006)
syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x0, 0x4, 0xf3, {0xf3, 0x22, "cba4496eae96f0f416910fd507e97829bdcab5b1813720e9f190d0d8e414be862e59264bbb7c8bad6e8bfd880396ff3b9b5e33bcee6b52147ff8a7214ae8cf7822a886cbd0db2567246e82046bef8edbbac86e86090fd5304bdbbb370d2075e8ced2eb36dc5d5af2e41607a51da94d6a6fd06ab9437e4e75576b7c7954b7fabb0ffdb791489cfc37e2c09ce96467508461071e8d78f8bca607fed143eda8794f8ee9c0e8daa91d7c3a8c14a43d5489a641f35b2c7ecfb3b218f7e0e4fbd47298e36f9129936af103e88bce0ea06a02f3040a761453cc1ba907665f5b2518badd9fed22760e127cd8bf197e474ba78bf37a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "a4bfb45c6df8711bf229479e05dda56f0a4ccd079674a254f75ba8ea1be36b55aeeecd243c06cfe3295841208f100a4eccf567da00d1a748ca180eb09e61e91bff67c290fcb1faf586f715e6c267ba10de2567dbebe4be83e7e0f02a7fdb28bfea56413079177821ea85ada8009a8ad932c69035ba41ec90879fea585b3a8ceda2e5573f4c639b80dd2a77b3965c4b33698897351aa1d6b1592d747064"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a000000ab00dd69000000000000005e4b57c4e1621005564b7331254774"], &(0x7f0000000000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xa7, 0x1, {0x22, 0x5f8}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0xe9, "32426411bc228cfddba34f23962366c6a70ceda103f8027612307e9d6835ebb346074c991cc9d171ddc35d516b910d7e1f99c0b62fb9cf728c168bdbef02e82cae0374bd8478633008c832dd28558bb28439992e7218b301e751068001f14ba74f635981d1abc32457610e9f55aa17b5f911a417b6179b117155c84ffa9bbc7888ab7085c79e48e9803e566489a62a7cd6fa3c342cc7571a686f437748d708c84b56708fc14c3d220d7b94ba6fa45f5a341c564f168b7e8f1e9337b172b74fa97e91e99334391c4cde8ae27b9e98842947e79a4438af6bd0f2d76adb81aaa82dc5a16f746bf117edb7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xc4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x1, 0x3d, "240633c4c5ca381b8d970335f6af4ce4ca89d819869e845bd6ce03bf0b18cbea43ba258927703dbc60babcad0069d66e56965745d4d9d6bd155f16f488"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}})
r10 = syz_open_dev$sg(&(0x7f0000000740), 0x7, 0x4d181)
ioctl$SG_GET_TIMEOUT(r10, 0x2202, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)

3m42.564352235s ago: executing program 32 (id=651):
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
close(r1)
r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x0, 0x0)
read$FUSE(r6, &(0x7f0000003440)={0x2020}, 0x2020)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="20000d000000401a59f887b4825099eac4b3078ab1f5908c0008fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe)
write$UHID_INPUT(r8, &(0x7f0000000580)={0xf, {"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", 0x1000}}, 0x1006)
syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x0, 0x4, 0xf3, {0xf3, 0x22, "cba4496eae96f0f416910fd507e97829bdcab5b1813720e9f190d0d8e414be862e59264bbb7c8bad6e8bfd880396ff3b9b5e33bcee6b52147ff8a7214ae8cf7822a886cbd0db2567246e82046bef8edbbac86e86090fd5304bdbbb370d2075e8ced2eb36dc5d5af2e41607a51da94d6a6fd06ab9437e4e75576b7c7954b7fabb0ffdb791489cfc37e2c09ce96467508461071e8d78f8bca607fed143eda8794f8ee9c0e8daa91d7c3a8c14a43d5489a641f35b2c7ecfb3b218f7e0e4fbd47298e36f9129936af103e88bce0ea06a02f3040a761453cc1ba907665f5b2518badd9fed22760e127cd8bf197e474ba78bf37a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "a4bfb45c6df8711bf229479e05dda56f0a4ccd079674a254f75ba8ea1be36b55aeeecd243c06cfe3295841208f100a4eccf567da00d1a748ca180eb09e61e91bff67c290fcb1faf586f715e6c267ba10de2567dbebe4be83e7e0f02a7fdb28bfea56413079177821ea85ada8009a8ad932c69035ba41ec90879fea585b3a8ceda2e5573f4c639b80dd2a77b3965c4b33698897351aa1d6b1592d747064"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="00221a000000ab00dd69000000000000005e4b57c4e1621005564b7331254774"], &(0x7f0000000000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xa7, 0x1, {0x22, 0x5f8}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0xe9, "32426411bc228cfddba34f23962366c6a70ceda103f8027612307e9d6835ebb346074c991cc9d171ddc35d516b910d7e1f99c0b62fb9cf728c168bdbef02e82cae0374bd8478633008c832dd28558bb28439992e7218b301e751068001f14ba74f635981d1abc32457610e9f55aa17b5f911a417b6179b117155c84ffa9bbc7888ab7085c79e48e9803e566489a62a7cd6fa3c342cc7571a686f437748d708c84b56708fc14c3d220d7b94ba6fa45f5a341c564f168b7e8f1e9337b172b74fa97e91e99334391c4cde8ae27b9e98842947e79a4438af6bd0f2d76adb81aaa82dc5a16f746bf117edb7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xc4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x1, 0x3d, "240633c4c5ca381b8d970335f6af4ce4ca89d819869e845bd6ce03bf0b18cbea43ba258927703dbc60babcad0069d66e56965745d4d9d6bd155f16f488"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}})
r10 = syz_open_dev$sg(&(0x7f0000000740), 0x7, 0x4d181)
ioctl$SG_GET_TIMEOUT(r10, 0x2202, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)

2m39.83752655s ago: executing program 0 (id=1156):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001d80b11c049cf41fb8fea5a0e9fe44252e3b12ed5665bd5ee465a5ea1c"], 0x28}], 0x1}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x0, 0x19, {0x19, 0x4cd16230f7a4bf99, "c8d485279e41f6bc2c8622c2b78f44a614a9e6917abce6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000100)=0xc)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001a00130429bd700000000000000000000000000000000000000000002001000000ffffffffffffff80000000000000004e2400000a0000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x2}]}, 0x10)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m38.10786143s ago: executing program 0 (id=1166):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x800)
sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)={0x338, 0x41, 0x2, 0x70bd29, 0x25dfdbfd, {0x6}, [@generic="2106f52752cd61c675a0b7a4e3616e66efaf0327ef999c92cd32d66fbb77146bba0596592601767c0878eb3a4aaa645e983a1f929e6d58331aba101f46df0a4ca6801e6079ede935a9b8bdac4748eec3a0b228f33c415d439f20c9641158984e0a21a00b8b01dc8f69789a700e99bf401e45e537c27c162deb69", @typed={0x8, 0xd0, 0x0, 0x0, @u32=0x846}, @nested={0xba, 0x0, 0x0, 0x1, [@nested={0x4, 0x6f}, @generic="03a2a3ab5c005759941cd372b3619ceaad811af4f50cc4bef0dd575fb6808ce12892660adff510c7d0f2c4db0693452b6c6dbc0679a9da3a044a47f9305f13351f6006788abf4e240b78a9f10b6b898ce684f99d30d40af7e241a1eeaafe1b0031c4550cb64bbfc08b6a3ed41533c5c784e1f3b8162f7c4a920bfd42db842d326f002cab9abe97267df82b7be0b39404f14e89564a906f936c6a", @typed={0x8, 0x12c, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x55}, @nested={0x4, 0xd9}, @typed={0x6, 0x6a, 0x0, 0x0, @str='\xff\xff'}]}, @nested={0x8, 0x46, 0x0, 0x1, [@typed={0x4, 0x21}]}, @generic="920a61fd3711aae302263a664e16161020a39a792bb8f6d65e481a5cd0687a9dc130b5b59288a067429e4c3d08ae09c5afdf32e5a280915c07a7b734f8bfeef4d169faaf7b85c77597c3fb262e991f7e351585f0fd5a762d7bd3341f6ebe184804a069f39c385f5347ae65443b870e2ab6723bb6305925041494376d9c6420cb2f45573b3eeb1914ebded461c606b68bdd9bf4ddb619e842fd649d470028466142a94a396bebf9db15ba91b2df75f1a3a793ef15db5f69bed1b6e8340db8b43bb950479f1e6f9e2574c039347a44eff61de4e497d6c1", @generic="88adc7942aefcd9da96858fb908372cc1a7c0c93462cc8b3ea51acc22c054bc8c4a03528a2ebc5703246ea9f8bcc4e0db9b6508452bf62a0f61cba96851bcb830eb23c43dd7f8fab90b234396cd73cbb960a9673fd54e435c7cdd9", @nested={0xac, 0x3c, 0x0, 0x1, [@typed={0x5, 0x10, 0x0, 0x0, @str='\x00'}, @generic="e088038a56f0df943740", @generic="2ad03ccada356cde84192ee8e0dc701fccf0d80c3e106428e37a90be09c83a466cceee1809ac820286221e000aa8da62da09202745d9209240883312454af10981260c2f159dea18e82ec3da4d69ed2a2e8521e39117b4411bac8ce88613d592e3a4cbfe5af253afa0459e3dd3047cb0b8eeac6d51e9cd91312a6ce100f9ee6ca37a709a91dc7b0b15cfec19810e1cb2b9e2b445172e"]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004010)
connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @multicast, 'macvlan1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @link_local, 'veth1\x00'}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newae={0x74, 0x1e, 0x10, 0x70bd28, 0x25dfdbfe, {{@in=@multicast1, 0x4d5, 0x2, 0x6c}, @in6=@private1, 0x8, 0x3507}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd29, 0x70bd27, 0x70bd2c, 0x6, [0x6, 0x1]}}, @etimer_thresh={0x8, 0xc, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000ad160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c00000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e4000000", @ANYRESHEX=r9, @ANYBLOB="07002abd5248ff9d324a49524a2b6023dbdf", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) (async)
r11 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"])
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x200)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003f000701feffffff00000000017c000004004280040601030400d8fc23a30080f4722685af34d0840d49e9f55bca1477f2e44619cdcb15b5697ff3b66f7f9c7b126e7cf83e79d45e62ba8bd567fb347ecc1ca73cc0a8cec9b089ea3f95bc7bcce03248d552f092b9c16a42ccb1a0b293828715628006a04bc22a50c9cbc71a63ff1e2f9cfa30ae366ab5d1e229b3e53132c40b02391f9141"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003f000701feffffff00000000017c000004004280040601030400d8fc23a30080f4722685af34d0840d49e9f55bca1477f2e44619cdcb15b5697ff3b66f7f9c7b126e7cf83e79d45e62ba8bd567fb347ecc1ca73cc0a8cec9b089ea3f95bc7bcce03248d552f092b9c16a42ccb1a0b293828715628006a04bc22a50c9cbc71a63ff1e2f9cfa30ae366ab5d1e229b3e53132c40b02391f9141"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r7) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xffffffffffffff6f, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000225bd7000fddbdf250100000000000000014100000300000000000000000069f57564703a73797a3100800000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040)

2m35.091401764s ago: executing program 0 (id=1181):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/45, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d"], 0x144}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x0, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
personality(0xbe4e602dc9e6c1d3)
uname(&(0x7f0000000040)=""/138)
syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="d4a8d33c786151f879db042d48f6ffcb2d3f1924446e5b4df534dd446e1c0d431a8bcd0f2460a5d74b52e10604570e0e907c3a35f917b818586777416971cef42e1d4401fe1d41d1cfec637e30591bfe3ddf8d92561f5f947b902a452ef31591f1f17725f3f5167c487142406fdf7bfe867d39322028f5922c359bf1cc6d82f64b3144e2ca32c16e0e55a83be2c270eceb80251808298504d3cc4f85fe2fc6799135f23c7bc05114e09014cecf2a262b265f9d721f21732c595f1b1f794ceb4b9dab44d965918be3b93d7ae5112ba73e9a2ea61d11dd94f5d50b5a5b52128b8bec4d569f39", 0xe5}, {&(0x7f0000000000)="33dd67f0f21bce56c6f6a999964995c20f44cfd852f53755de1eb571c46153be9ee0c714185caed99677f6799b58", 0x2e}, {&(0x7f0000000280)="9eb2379d", 0x4}], 0x3)

2m33.344281692s ago: executing program 0 (id=1190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000f5ffffff000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00"], 0xa0}}, 0x0)

2m33.263941374s ago: executing program 0 (id=1191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0c009900000000000000000044005e8008000500feffffff080007003501000008200900000000001000010000000000d4000000100000000800070000000000080001002072000027ff070000000000"], 0x6c}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x206, 0x8401)
r3 = dup(r2)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000380)={0xfffffffd, "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"})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r7=>0x0})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={<r8=>0x0, 0x40}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x9, 0x3ff, 0x800a, 0x0, 0xa227, 0x8, 0x1, 0x4, r8}, 0x20)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fbc2df2583c88882184cc42b", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)

2m33.244742181s ago: executing program 0 (id=1192):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffffff00"/31, 0x1f)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@sr0, r1, &(0x7f0000000180))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r4, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r6=>0x0], &(0x7f0000000340)=[<r7=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r7, r6], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r9 = inotify_init1(0x0)
inotify_add_watch(r9, &(0x7f0000000440)='.\x00', 0x12000021)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff)
r11 = dup2(r8, r2)
setitimer(0x1, 0x0, 0x0)
r12 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88a83)
ioctl$NBD_CLEAR_SOCK(r12, 0xab04)
close_range(r8, r8, 0x2)
fstatfs(r11, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)

2m18.176521945s ago: executing program 33 (id=1192):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffffff00"/31, 0x1f)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@sr0, r1, &(0x7f0000000180))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r4, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r6=>0x0], &(0x7f0000000340)=[<r7=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r7, r6], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r9 = inotify_init1(0x0)
inotify_add_watch(r9, &(0x7f0000000440)='.\x00', 0x12000021)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff)
r11 = dup2(r8, r2)
setitimer(0x1, 0x0, 0x0)
r12 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88a83)
ioctl$NBD_CLEAR_SOCK(r12, 0xab04)
close_range(r8, r8, 0x2)
fstatfs(r11, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)

3.839488459s ago: executing program 5 (id=2113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4db}], 0x7, 0x0, 0x0)

3.742544033s ago: executing program 5 (id=2114):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x9, 0x0, 0x1, 0x8, 0x2, 0x2000, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1000006, 0x1, 0x2000008], 0x8000000, 0x4e100})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.587877984s ago: executing program 5 (id=2117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

3.224173182s ago: executing program 5 (id=2119):
syz_usb_connect(0x0, 0x24, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0xe6, 0xf6, 0x52}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_ep_read(r0, 0x9, 0xa6, &(0x7f0000000000)=""/166)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
setfsuid(r2)
syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x0, 0x4, 0x9}, {0x9, 0x5, 0x4, 0x2, 0x8, 0xcc, 0x5, 0x8}, {0x9, 0x5, 0x1d50a7ec33b46f4f, 0x3, 0x3ff, 0x5, 0x7, 0x9}}}}}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0x24, {0x24, 0xd, "f3283947a2aabeda80b3bbf441aac2f02fbf569a32c41ad3368121c445c7adbff262"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000500)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xb, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x0, 0xf0f, 0x8}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0xfd, "45852411", "93351585"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x10, 0xf, 0x7, 0x0, 0x5, 0xfffc}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x13, 0x4, "7cdd31fa"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000006c0)={0x20, 0x0, 0x4}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x6d}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "b974"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @random="b63e1cbcabdb"}, &(0x7f0000000880)={0x40, 0x17, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "b90d"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x51}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x59)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000402505a8a440000102030109021b000101a6203cff4229157f0904000501070103000905010200020708062b5507535285d357b13c8a8b6333d9acc95c39bfd949054d0a79c97ecfeabfb100f38026dddfef384eaf73d2739da7a7b221bc5ba3ec8c8ba8c648bab30729bd73b28ee42d2f1bf6ef920ee1f4e6dc9decdbb39748fe4fe9ce1a67efd526a1c8c7aed50b344d043887adcce13426f110402d029be1dfe10ba6"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xf8, 0x2, 0x82, 0x10}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5f, 0x48}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x86, &(0x7f0000000200)=@string={0x86, 0x3, "b31446ebf580a150ee414294ab38c1b62a0d40e4bc90808b8f1a19fd1c357057c811385bb3d0e6a5a55be566898545f51619f4900db2922bf704536c08da5e2710cb5d0a582ae01e716a3a25256c50aac2c262e47773d7400a19de2feb4aab92583420a568a2de6df270f32be910ccb5dba6ec6ba830a161bc044784e492701cccd49b0d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}]})

1.779818511s ago: executing program 5 (id=2134):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="d0498c1f5cfe29877510d5834bbbf43490e0b4764b4576fd2c73a296db94365bf7ecc25712b0d58462e46c835224b24c83e7e6a3bca257f008f64d3635bc46a510bb5eb5c241df835fab5a6f91f493bc2780c274e39fdbfffeed12870388cdfadf5735c1709fa0c6d48be2301aa2d7eb89dd6bb9ac662aed66769698095a5d5fe4366fb461b8d02e4ac72b10e7abb38fcbd50587b00d3c10445a1aacffac6fef05e42f7484f9cbc119c08d45cea4cf27cb5b42125bf01bc7c38ffa9e4882dd1046052cafa96ec8f54cfe4fe2dacef210bb69f43a8d37a08e34f3f39f8c7f99", 0xdf}, {&(0x7f0000001500)="938c67b39de7a2fa88bd850175e7394f5315ba0f8f19872daf6a5e293672695345da61829d899681b8cd3b0c7828b650c483edff5b4178ded6ae3a71f13760522ea897850498d87783a4d359a8d6162617f25316ec371bfe1179cf", 0x5b}], 0x3}, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000014c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001480)=0x752})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.779576395s ago: executing program 1 (id=2135):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x20000040}}], 0x1, 0x24004c00)

1.735761977s ago: executing program 1 (id=2136):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001380)=""/4092, 0xfffffffffffffe78, 0x0, 0x3, 0x2}}, 0x48)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11)
r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x204000, 0x0)
ioctl$TCSETA(r0, 0x8910, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3500, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="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", 0x3ec}], 0x1)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'])
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x2272, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7], 0x74a)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r11, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$inet6(r12, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000017c0)="01e266b8f3d6a1d424d03661a7d99521f0f5cca9f580cc80f8a6cf1876e772e4da0705073e6b5acfff207dcce84b0aba22a2f8fd78210c187f117f7d50508d2e7f3d5ec1c36aa8f4e0e1e6c531e6192cf6d9ada9805013fc4088ee6d9b210dcd82267add95d086c54f7877a65e23920de3c7e15cda66bd201aa82a61f35880d272053c2d6f298507681273b0df5f6d72e690951a5a9a7c6356ae246fd4df086a0a37", 0xa2}], 0x1}}], 0x1, 0x1)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f00000008c0)="b58a244982799e73c1792fe439960b6fb98e65d220265daa3734eb2f1be0fce37ba5cec3f8c09511d2c4aaaf36e73888333f1af3cba1", 0x36)
bind$can_raw(r3, &(0x7f0000000880)={0x1d, r11}, 0x10)
ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000840)=0xe4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x20)

1.475572538s ago: executing program 5 (id=2139):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001d80b11c049cf41fb8fea5a0e9fe44252e3b12ed5665bd5ee465a5ea1c"], 0x28}], 0x1}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x0, 0x19, {0x19, 0x4cd16230f7a4bf99, "c8d485279e41f6bc2c8622c2b78f44a614a9e6917abce6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000100)=0xc)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001a00130429bd7000000000000000000000000000000000000000000020010000000000000000000000000008000000004e2400000a0000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x2}]}, 0x10)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.279848036s ago: executing program 1 (id=2143):
add_key$user(0x0, 0x0, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152", 0xc8, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501)
dup3(r0, r0, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006600"], 0x1c}}, 0x0)

1.153143599s ago: executing program 4 (id=2144):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x20000040}}], 0x1, 0x24004c00)

1.0245317s ago: executing program 1 (id=2145):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc02063a1, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x80000001)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f71100ff000008009e"], 0x44}}, 0x28000)

849.222555ms ago: executing program 1 (id=2146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00"], 0xa0}}, 0x0)

841.743012ms ago: executing program 4 (id=2147):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) (async)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async)
io_setup(0x1, &(0x7f0000000b80)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fa, @mcast2, 0x6}, {0xa, 0x4e20, 0x8001, @remote, 0x31}, r6, 0xf}}, 0x48) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

679.962785ms ago: executing program 1 (id=2148):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

669.070963ms ago: executing program 3 (id=2149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a0103000000000000ffff050000000900010073797a30"], 0xa0}}, 0x0)

651.976369ms ago: executing program 4 (id=2150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000070a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800)

491.908914ms ago: executing program 3 (id=2151):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)={0x18, 0x3f, 0x711, 0x70bd23, 0x40000, {0x3}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4008014)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250800000018000480130001"], 0x2c}}, 0x26008890)
r3 = timerfd_create(0x0, 0x0) (async)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) (async)
close(0x3) (async)
timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) (async)
readv(r3, &(0x7f0000002500)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) (async)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x4800) (async)
recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0)

491.469306ms ago: executing program 4 (id=2152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x0, 0x0)

395.852076ms ago: executing program 3 (id=2153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000100000000010000000900010073797a30000000000900020073790800004000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0x104}}, 0x48880)

330.75585ms ago: executing program 4 (id=2154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xca, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={<r4=>0x0}, &(0x7f0000000300)=0xc)
getresgid(&(0x7f0000000340), &(0x7f0000000380)=<r5=>0x0, &(0x7f00000003c0))
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=<r6=>0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, 0x1})
openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {0x0}], 0x2}, 0x101}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x266e}], 0x6, 0x40010020, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4})
socket$phonet(0x23, 0x2, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, <r11=>0x0}, &(0x7f0000000480)=0xc)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$netlink(r3, &(0x7f0000000500)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000780)={0xcc, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x12, 0x109, 0x0, 0x1, [@nested={0x4, 0x130}, @nested={0x4, 0x90}, @generic="d832cf78789a"]}, @nested={0x28, 0x82, 0x0, 0x1, [@typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xf9, 0x0, 0x0, @u32=0xffffffff}]}, @typed={0xd, 0x145, 0x0, 0x0, @str='netdevsim'}, @typed={0xc, 0x141, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x58, 0x11e, 0x0, 0x1, [@generic="c9c7e59f2795ff8e104817491e2dafc1f448455eec8b3581d0a3a1f984711d905cd12f92765f52bf5ac3b67c661c0d2af8deb275e117721c02734960c6c485679b5d94188b7eec4a4dcb349644cbf7d8e01d4969"]}, @typed={0xc, 0x10b, 0x0, 0x0, @u64=0x1}]}, 0xcc}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x60, 0x800}, 0x0)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)

206.061204ms ago: executing program 3 (id=2155):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc02063a1, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x80000001)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f72000ff000008009e"], 0x44}}, 0x28000)

171.306503ms ago: executing program 3 (id=2156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000040a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00"], 0xa0}}, 0x0)

80.147084ms ago: executing program 3 (id=2157):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x492402, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000037a693792639d228000020000040000000000900000000000000"])
r4 = socket$inet(0xa, 0x801, 0x101)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESOCT=r1], 0x84}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x2, 0x6)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000f80)="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", 0x20b}], 0x2}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000140)=0x5, 0x4)
recvmsg(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
get_robust_list(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffe, 0x0, 0x0, 0xa, 0x120}, {0x20000000, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x6, 0x0, 0xa78a}, 0xfffffffe, 0x10000, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x2, @in=@private=0xa010102, 0x0, 0x0, 0x3, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8b04, 0x0)
listen(r4, 0x88)
accept4(r4, 0x0, 0x0, 0x80000)

0s ago: executing program 4 (id=2158):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

kernel console output (not intermixed with test programs):

r 5
[  341.964919][ T5865] usb usb6-port1: unable to enumerate USB device
[  342.209553][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.220074][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.229983][ T1041] bond0 (unregistering): Released all slaves
[  342.385343][T10727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'.
[  342.410103][ T1041] tipc: Left network mode
[  342.645063][ T5183] Bluetooth: hci5: command tx timeout
[  343.080515][ T1041] hsr_slave_0: left promiscuous mode
[  343.125183][ T1041] hsr_slave_1: left promiscuous mode
[  343.147586][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.168010][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.192860][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.202564][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.240261][ T1041] veth1_vlan: left promiscuous mode
[  343.254402][ T1041] veth0_vlan: left promiscuous mode
[  343.299336][T10753] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1769'.
[  343.406123][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1770'.
[  343.418579][T10755] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1770'.
[  343.848773][ T1041] team0 (unregistering): Port device team_slave_1 removed
[  343.958987][ T1041] team0 (unregistering): Port device team_slave_0 removed
[  344.343557][ T5991] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  344.523342][ T5991] usb 5-1: config 0 interface 0 has no altsetting 0
[  344.529996][ T5991] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  344.578490][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.629407][ T5991] usb 5-1: config 0 descriptor??
[  344.724390][ T5183] Bluetooth: hci5: command tx timeout
[  344.809667][T10704] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  344.851536][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.878441][T10704] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  344.893620][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.949320][T10704] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  344.969772][T10704] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  345.056836][T10784] netlink: 'syz.5.1777': attribute type 83 has an invalid length.
[  345.060635][ T1041] IPVS: stop unused estimator thread 0...
[  345.165141][T10704] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.185995][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  345.201788][T10704] 8021q: adding VLAN 0 to HW filter on device team0
[  345.223950][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.231098][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.240911][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.248083][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.318764][ T5991] usbhid 5-1:0.0: can't add hid device: -71
[  345.325630][ T5991] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  345.353341][   T24] usb 2-1: Using ep0 maxpacket: 8
[  345.363748][ T5991] usb 5-1: USB disconnect, device number 75
[  345.365177][ T7889] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  345.387613][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.413898][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  345.433664][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 29728, setting to 1024
[  345.446349][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  345.472970][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  345.499825][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  345.510277][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.543532][ T7889] usb 6-1: Using ep0 maxpacket: 8
[  345.552804][ T7889] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  345.562401][ T7889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.570600][ T7889] usb 6-1: Product: syz
[  345.575399][ T7889] usb 6-1: Manufacturer: syz
[  345.580012][ T7889] usb 6-1: SerialNumber: syz
[  345.596144][ T7889] usb 6-1: config 0 descriptor??
[  345.662549][T10704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.711631][T10704] veth0_vlan: entered promiscuous mode
[  345.728275][T10704] veth1_vlan: entered promiscuous mode
[  345.735233][   T24] usb 2-1: GET_CAPABILITIES returned 0
[  345.740768][   T24] usbtmc 2-1:16.0: can't read capabilities
[  345.771867][T10704] veth0_macvtap: entered promiscuous mode
[  345.784039][T10704] veth1_macvtap: entered promiscuous mode
[  345.804555][T10704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.820843][T10704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.847365][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.872399][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.911363][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.920522][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.969892][ T5954] usb 2-1: USB disconnect, device number 6
[  346.037715][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.047885][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.086932][T10064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.095616][T10064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.113433][   T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  346.272860][   T24] usb 5-1: Using ep0 maxpacket: 32
[  346.279875][   T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  346.288338][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  346.299419][   T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  346.310508][   T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  346.324116][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  346.333371][   T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  346.343298][   T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  346.351735][   T24] usb 5-1: Product: syz
[  346.355947][   T24] usb 5-1: Manufacturer: syz
[  346.360545][   T24] usb 5-1: SerialNumber: syz
[  346.368281][   T24] usb 5-1: config 0 descriptor??
[  346.376618][   T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  346.388129][   T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  346.403258][  T983] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  346.574609][  T983] usb 4-1: Using ep0 maxpacket: 16
[  346.588388][  T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  346.611975][  T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  346.624283][  T983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  346.638383][  T983] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  346.651886][  T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.656643][   T24] usb 5-1: USB disconnect, device number 76
[  346.685051][  T983] usb 4-1: config 0 descriptor??
[  346.693356][T10803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  346.705069][   T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  346.737862][T10810] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1780'.
[  346.802926][ T5183] Bluetooth: hci5: command tx timeout
[  347.118674][  T983] hid (null): unknown global tag 0xd
[  347.129425][T10784] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  347.148413][ T7889] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  347.160107][ T7889] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  347.172791][   T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  347.175547][  T983] shield 0003:0955:7214.0029: unknown global tag 0xd
[  347.191860][  T983] shield 0003:0955:7214.0029: item 0 0 1 13 parsing failed
[  347.203765][ T7889] usb 6-1: USB disconnect, device number 41
[  347.223446][  T983] shield 0003:0955:7214.0029: Parse failed
[  347.229326][  T983] shield 0003:0955:7214.0029: probe with driver shield failed with error -22
[  347.325776][  T983] usb 4-1: USB disconnect, device number 18
[  347.336744][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  347.349878][   T24] usb 5-1: config 3 has an invalid interface number: 8 but max is 3
[  347.358847][   T24] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  347.371656][   T24] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4
[  347.380674][   T24] usb 5-1: config 3 has no interface number 0
[  347.387265][   T24] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11
[  347.398621][   T24] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  347.411546][   T24] usb 5-1: config 3 interface 8 has no altsetting 0
[  347.420188][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  347.429435][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.437598][   T24] usb 5-1: Product: syz
[  347.441860][   T24] usb 5-1: Manufacturer: syz
[  347.446799][   T24] usb 5-1: SerialNumber: syz
[  347.723631][   T24] appledisplay 5-1:3.8: Error while getting initial brightness: -71
[  347.746466][   T24] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71
[  347.747331][T10820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  347.810181][   T24] usb 5-1: USB disconnect, device number 77
[  348.122518][ T5918] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  348.208380][T10828] FAULT_INJECTION: forcing a failure.
[  348.208380][T10828] name failslab, interval 1, probability 0, space 0, times 0
[  348.221648][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.1.1787 Not tainted syzkaller #0 PREEMPT(full) 
[  348.221671][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  348.221687][T10828] Call Trace:
[  348.221695][T10828]  <TASK>
[  348.221704][T10828]  dump_stack_lvl+0x189/0x250
[  348.221727][T10828]  ? __pfx____ratelimit+0x10/0x10
[  348.221754][T10828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.221773][T10828]  ? __pfx__printk+0x10/0x10
[  348.221805][T10828]  ? __pfx___might_resched+0x10/0x10
[  348.221833][T10828]  should_fail_ex+0x414/0x560
[  348.221860][T10828]  should_failslab+0xa8/0x100
[  348.221885][T10828]  __kmalloc_noprof+0xcb/0x7f0
[  348.221904][T10828]  ? kfree+0x4d/0x6d0
[  348.221919][T10828]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  348.221955][T10828]  tomoyo_realpath_from_path+0xe3/0x5d0
[  348.221987][T10828]  ? tomoyo_domain+0xd9/0x130
[  348.222018][T10828]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  348.222043][T10828]  tomoyo_path_number_perm+0x1e8/0x5a0
[  348.222071][T10828]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  348.222139][T10828]  ? __fget_files+0x2a/0x420
[  348.222170][T10828]  ? __fget_files+0x3a0/0x420
[  348.222196][T10828]  ? __fget_files+0x2a/0x420
[  348.222226][T10828]  security_file_ioctl+0xcb/0x2d0
[  348.222253][T10828]  __se_sys_ioctl+0x47/0x170
[  348.222276][T10828]  do_syscall_64+0xfa/0xfa0
[  348.222305][T10828]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.222333][T10828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.222353][T10828]  ? clear_bhb_loop+0x60/0xb0
[  348.222381][T10828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.222405][T10828] RIP: 0033:0x7ff0bb98eba9
[  348.222422][T10828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.222439][T10828] RSP: 002b:00007ff0bc900038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.222461][T10828] RAX: ffffffffffffffda RBX: 00007ff0bbbd5fa0 RCX: 00007ff0bb98eba9
[  348.222476][T10828] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  348.222489][T10828] RBP: 00007ff0bc900090 R08: 0000000000000000 R09: 0000000000000000
[  348.222501][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.222513][T10828] R13: 00007ff0bbbd6038 R14: 00007ff0bbbd5fa0 R15: 00007ffe05890d48
[  348.222548][T10828]  </TASK>
[  348.285144][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.312853][T10828] ERROR: Out of memory at tomoyo_realpath_from_path.
[  348.327013][ T5918] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  348.480672][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.491364][ T5918] usb 6-1: config 0 descriptor??
[  348.500110][ T5918] pwc: Askey VC010 type 2 USB webcam detected.
[  348.569403][T10838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1791'.
[  348.628204][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  348.637656][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1792'.
[  348.853764][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.866205][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.882976][ T5183] Bluetooth: hci5: command tx timeout
[  348.906010][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00
[  348.913672][ T5918] pwc: recv_control_msg error -32 req 02 val 2700
[  348.920565][ T5918] pwc: recv_control_msg error -32 req 02 val 2c00
[  348.928675][ T5918] pwc: recv_control_msg error -32 req 04 val 1000
[  348.935702][ T5918] pwc: recv_control_msg error -32 req 04 val 1300
[  348.982380][ T5991] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  349.082386][  T983] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  349.132665][ T5991] usb 2-1: Using ep0 maxpacket: 32
[  349.141218][ T5991] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[  349.149436][ T5991] usb 2-1: config 0 has no interface number 0
[  349.155707][ T5991] usb 2-1: config 0 interface 207 has no altsetting 0
[  349.165016][ T5918] pwc: recv_control_msg error -71 req 02 val 2000
[  349.173763][ T5991] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45
[  349.185602][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.193819][ T5918] pwc: recv_control_msg error -71 req 02 val 2100
[  349.200436][ T5991] usb 2-1: Product: syz
[  349.208044][ T5918] pwc: recv_control_msg error -71 req 04 val 1500
[  349.214898][ T5991] usb 2-1: Manufacturer: syz
[  349.219635][ T5918] pwc: recv_control_msg error -71 req 02 val 2500
[  349.226710][ T5991] usb 2-1: SerialNumber: syz
[  349.232741][ T5918] pwc: recv_control_msg error -71 req 02 val 2400
[  349.236977][  T983] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  349.241129][ T5991] usb 2-1: config 0 descriptor??
[  349.255886][ T5918] pwc: recv_control_msg error -71 req 02 val 2600
[  349.266181][  T983] usb 5-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  349.266802][ T5918] pwc: recv_control_msg error -71 req 02 val 2900
[  349.294696][ T5991] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  349.308913][ T5918] pwc: recv_control_msg error -71 req 02 val 2800
[  349.309740][  T983] usb 5-1: config 0 interface 0 has no altsetting 0
[  349.316077][ T5918] pwc: recv_control_msg error -71 req 04 val 1100
[  349.329930][ T5918] pwc: recv_control_msg error -71 req 04 val 1200
[  349.333583][  T983] usb 5-1: New USB device found, idVendor=24b8, idProduct=0040, bcdDevice= 0.00
[  349.348722][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.350778][T10850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  349.369251][ T5918] pwc: Registered as video103.
[  349.370965][  T983] usb 5-1: config 0 descriptor??
[  349.388037][T10847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  349.395775][T10847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  349.402661][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52
[  349.452949][ T5918] usb 6-1: USB disconnect, device number 42
[  349.524805][ T5991] gspca_zc3xx: reg_w_i err -71
[  349.529664][ T5991] gspca_zc3xx 2-1:0.207: probe with driver gspca_zc3xx failed with error -71
[  349.562564][ T5991] usb 2-1: USB disconnect, device number 7
[  349.751353][T10858] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  349.840871][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'.
[  349.932228][ T5988] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  350.024958][T10846] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  350.092137][ T5988] usb 4-1: Using ep0 maxpacket: 16
[  350.116223][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  350.157762][ T5988] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  350.181663][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.201784][ T5988] usb 4-1: config 0 descriptor??
[  350.248168][T10866] FAULT_INJECTION: forcing a failure.
[  350.248168][T10866] name failslab, interval 1, probability 0, space 0, times 0
[  350.261185][T10866] CPU: 1 UID: 0 PID: 10866 Comm: syz.5.1803 Not tainted syzkaller #0 PREEMPT(full) 
[  350.261210][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  350.261226][T10866] Call Trace:
[  350.261235][T10866]  <TASK>
[  350.261243][T10866]  dump_stack_lvl+0x189/0x250
[  350.261268][T10866]  ? __pfx____ratelimit+0x10/0x10
[  350.261296][T10866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.261315][T10866]  ? __pfx__printk+0x10/0x10
[  350.261348][T10866]  ? __pfx___might_resched+0x10/0x10
[  350.261370][T10866]  ? fs_reclaim_acquire+0x7d/0x100
[  350.261399][T10866]  should_fail_ex+0x414/0x560
[  350.261428][T10866]  should_failslab+0xa8/0x100
[  350.261453][T10866]  __kmalloc_noprof+0xcb/0x7f0
[  350.261473][T10866]  ? tomoyo_encode+0x28b/0x550
[  350.261509][T10866]  tomoyo_encode+0x28b/0x550
[  350.261543][T10866]  tomoyo_realpath_from_path+0x58d/0x5d0
[  350.261583][T10866]  ? tomoyo_domain+0xd9/0x130
[  350.261607][T10866]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  350.261631][T10866]  tomoyo_path_number_perm+0x1e8/0x5a0
[  350.261658][T10866]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  350.261681][T10866]  ? kvm_sched_clock_read+0x11/0x20
[  350.261708][T10866]  ? sched_clock+0x3f/0x60
[  350.261726][T10866]  ? sched_clock_cpu+0x74/0x430
[  350.261753][T10866]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  350.261810][T10866]  ? __fget_files+0x2a/0x420
[  350.261842][T10866]  ? __fget_files+0x3a0/0x420
[  350.261866][T10866]  ? __fget_files+0x2a/0x420
[  350.261896][T10866]  security_file_ioctl+0xcb/0x2d0
[  350.261923][T10866]  __se_sys_ioctl+0x47/0x170
[  350.261947][T10866]  do_syscall_64+0xfa/0xfa0
[  350.261976][T10866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.261995][T10866]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  350.262015][T10866]  ? clear_bhb_loop+0x60/0xb0
[  350.262038][T10866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.262056][T10866] RIP: 0033:0x7fce8138eba9
[  350.262075][T10866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.262093][T10866] RSP: 002b:00007fce82200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  350.262113][T10866] RAX: ffffffffffffffda RBX: 00007fce815d5fa0 RCX: 00007fce8138eba9
[  350.262129][T10866] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  350.262141][T10866] RBP: 00007fce82200090 R08: 0000000000000000 R09: 0000000000000000
[  350.262153][T10866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.262165][T10866] R13: 00007fce815d6038 R14: 00007fce815d5fa0 R15: 00007fff2a0e4f08
[  350.262198][T10866]  </TASK>
[  350.520946][T10866] ERROR: Out of memory at tomoyo_realpath_from_path.
[  350.550367][  T983] usb 5-1: string descriptor 0 read error: -71
[  350.568188][  T983] usbhid 5-1:0.0: can't add hid device: -71
[  350.575174][  T983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  350.587441][  T983] usb 5-1: USB disconnect, device number 78
[  350.672183][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  350.730587][ T5988] uclogic 0003:5543:0781.002A: item fetching failed at offset 1/5
[  350.738862][ T5988] uclogic 0003:5543:0781.002A: parse failed
[  350.746548][ T5988] uclogic 0003:5543:0781.002A: probe with driver uclogic failed with error -22
[  350.824983][ T5918] usb 2-1: config index 0 descriptor too short (expected 65069, got 45)
[  350.833796][ T5918] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  350.846889][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.857226][ T5918] usb 2-1: config 0 has no interfaces?
[  350.862763][ T5918] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  350.871788][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.884548][ T5918] usb 2-1: config 0 descriptor??
[  351.076348][ T5918] usb 4-1: USB disconnect, device number 19
[  351.137622][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.209660][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.227140][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.250118][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.261113][ T5988] usb 2-1: USB disconnect, device number 8
[  351.330453][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'.
[  351.339800][T10877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1805'.
[  351.465150][T10881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  351.910153][T10901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1814'.
[  351.951840][ T7889] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  352.125525][ T7889] usb 5-1: unable to get BOS descriptor or descriptor too short
[  352.134303][ T7889] usb 5-1: not running at top speed; connect to a high speed hub
[  352.152432][ T7889] usb 5-1: config 0 has an invalid interface number: 202 but max is 0
[  352.161542][ T7889] usb 5-1: config 0 has no interface number 0
[  352.176481][ T7889] usb 5-1: config 0 interface 202 has no altsetting 0
[  352.187609][ T7889] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c2.6c
[  352.197574][ T7889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.207496][ T7889] usb 5-1: Product: syz
[  352.211650][ T7889] usb 5-1: Manufacturer: syz
[  352.217314][ T7889] usb 5-1: SerialNumber: syz
[  352.226019][ T7889] usb 5-1: config 0 descriptor??
[  352.243123][   T25] block nbd0: Possible stuck request ffff888025860000: control (read@0,1024B). Runtime 150 seconds
[  352.254738][   T25] block nbd0: Possible stuck request ffff8880258601c0: control (read@1024,1024B). Runtime 150 seconds
[  352.266146][   T25] block nbd0: Possible stuck request ffff888025860380: control (read@2048,1024B). Runtime 150 seconds
[  352.278096][   T25] block nbd0: Possible stuck request ffff888025860540: control (read@3072,1024B). Runtime 150 seconds
[  352.449481][ T7889] ttusb_dec_send_command: command bulk message failed: error -22
[  352.461233][ T7889] ttusb-dec 5-1:0.202: probe with driver ttusb-dec failed with error -22
[  352.485636][ T7889] usb 5-1: USB disconnect, device number 79
[  352.532259][  T983] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  352.582732][T10918] netlink: zone id is out of range
[  352.591143][T10918] netlink: zone id is out of range
[  352.702959][  T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.712877][  T983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  352.725752][  T983] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  352.735530][  T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.748430][  T983] usb 6-1: config 0 descriptor??
[  353.190968][  T983] usbhid 6-1:0.0: can't add hid device: -71
[  353.215327][  T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  353.236530][  T983] usb 6-1: USB disconnect, device number 43
[  353.271011][T10931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  353.279836][    T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  353.452032][    T9] usb 5-1: Using ep0 maxpacket: 8
[  353.460584][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  353.471215][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  353.483280][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  353.494429][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  353.504139][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  353.514576][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  353.524784][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  353.536906][    T9] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  353.546333][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.554959][    T9] usb 5-1: Product: syz
[  353.559222][    T9] usb 5-1: Manufacturer: syz
[  353.563859][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  353.571672][    T9] usb 5-1: SerialNumber: syz
[  353.578229][    T9] usb 5-1: config 0 descriptor??
[  353.584098][T10924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  353.595546][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  353.669673][ T6698] udevd[6698]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  353.692195][ T5988] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  353.711548][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  353.724273][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0
[  353.745928][ T5918] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  353.758509][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.769155][ T5918] usb 4-1: Product: syz
[  353.775476][ T5918] usb 4-1: Manufacturer: syz
[  353.780087][ T5918] usb 4-1: SerialNumber: syz
[  353.786740][ T5918] usb 4-1: config 0 descriptor??
[  353.796691][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.800076][ T5918] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  353.806773][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.821678][   T24] usb 5-1: USB disconnect, device number 80
[  353.863917][ T5988] usb 2-1: Using ep0 maxpacket: 16
[  353.870762][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  353.883611][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  353.894874][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  353.907895][ T5988] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  353.917565][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.928596][ T5988] usb 2-1: config 0 descriptor??
[  353.934662][T10937] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  353.999555][ T5918] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  354.010443][ T5918] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  354.352767][ T5988] hid (null): unknown global tag 0xd
[  354.364140][ T5988] shield 0003:0955:7214.002B: unknown global tag 0xd
[  354.370859][ T5988] shield 0003:0955:7214.002B: item 0 0 1 13 parsing failed
[  354.393095][ T5988] shield 0003:0955:7214.002B: Parse failed
[  354.411855][ T5988] shield 0003:0955:7214.002B: probe with driver shield failed with error -22
[  354.502369][T10945] FAULT_INJECTION: forcing a failure.
[  354.502369][T10945] name failslab, interval 1, probability 0, space 0, times 0
[  354.517317][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.4.1832 Not tainted syzkaller #0 PREEMPT(full) 
[  354.517332][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  354.517340][T10945] Call Trace:
[  354.517345][T10945]  <TASK>
[  354.517349][T10945]  dump_stack_lvl+0x189/0x250
[  354.517364][T10945]  ? __pfx____ratelimit+0x10/0x10
[  354.517380][T10945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.517390][T10945]  ? __pfx__printk+0x10/0x10
[  354.517408][T10945]  ? __pfx___might_resched+0x10/0x10
[  354.517420][T10945]  ? fs_reclaim_acquire+0x7d/0x100
[  354.517441][T10945]  should_fail_ex+0x414/0x560
[  354.517457][T10945]  should_failslab+0xa8/0x100
[  354.517470][T10945]  kmem_cache_alloc_node_noprof+0x77/0x710
[  354.517482][T10945]  ? dup_task_struct+0x52/0x830
[  354.517502][T10945]  dup_task_struct+0x52/0x830
[  354.517514][T10945]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.517531][T10945]  copy_process+0x54b/0x3c00
[  354.517560][T10945]  ? __pfx_copy_process+0x10/0x10
[  354.517579][T10945]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  354.517595][T10945]  vhost_task_create+0x1c4/0x290
[  354.517609][T10945]  ? arch_stack_walk+0xfc/0x150
[  354.517623][T10945]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  354.517639][T10945]  ? __pfx_vhost_task_create+0x10/0x10
[  354.517658][T10945]  ? __pfx_vhost_task_fn+0x10/0x10
[  354.517682][T10945]  kvm_mmu_post_init_vm+0x14c/0x300
[  354.517695][T10945]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  354.517710][T10945]  ? __mutex_trylock_common+0x153/0x260
[  354.517726][T10945]  ? __pfx___mutex_trylock_common+0x10/0x10
[  354.517739][T10945]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  354.517752][T10945]  ? rcu_is_watching+0x15/0xb0
[  354.517765][T10945]  ? trace_contention_end+0x39/0x120
[  354.517778][T10945]  ? look_up_lock_class+0x74/0x170
[  354.517794][T10945]  ? register_lock_class+0x51/0x320
[  354.517808][T10945]  ? __lock_acquire+0xab9/0xd20
[  354.517835][T10945]  kvm_vcpu_ioctl+0x95c/0xe90
[  354.517849][T10945]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  354.517872][T10945]  ? __fget_files+0x2a/0x420
[  354.517888][T10945]  ? __fget_files+0x3a0/0x420
[  354.517900][T10945]  ? __fget_files+0x2a/0x420
[  354.517915][T10945]  ? bpf_lsm_file_ioctl+0x9/0x20
[  354.517931][T10945]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  354.517942][T10945]  __se_sys_ioctl+0xfc/0x170
[  354.517954][T10945]  do_syscall_64+0xfa/0xfa0
[  354.517969][T10945]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.517983][T10945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.517994][T10945]  ? clear_bhb_loop+0x60/0xb0
[  354.518006][T10945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.518016][T10945] RIP: 0033:0x7f543018eba9
[  354.518026][T10945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.518036][T10945] RSP: 002b:00007f5431026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  354.518048][T10945] RAX: ffffffffffffffda RBX: 00007f54303d5fa0 RCX: 00007f543018eba9
[  354.518056][T10945] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  354.518062][T10945] RBP: 00007f5431026090 R08: 0000000000000000 R09: 0000000000000000
[  354.518069][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.518075][T10945] R13: 00007f54303d6038 R14: 00007f54303d5fa0 R15: 00007fffbb687638
[  354.518093][T10945]  </TASK>
[  354.842370][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.873111][ T5988] usb 2-1: USB disconnect, device number 9
[  355.241284][  T983] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  355.393266][  T983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.407540][  T983] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  355.417038][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.433863][  T983] usb 5-1: config 0 descriptor??
[  355.443451][  T983] pwc: Askey VC010 type 2 USB webcam detected.
[  355.848261][  T983] pwc: recv_control_msg error -32 req 02 val 2b00
[  355.866634][  T983] pwc: recv_control_msg error -32 req 02 val 2700
[  355.879508][  T983] pwc: recv_control_msg error -32 req 02 val 2c00
[  355.895317][  T983] pwc: recv_control_msg error -32 req 04 val 1000
[  356.109089][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1834'.
[  356.123712][  T983] pwc: recv_control_msg error -32 req 04 val 1400
[  356.287405][T10973] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1842'.
[  356.390504][    T9] usb 4-1: USB disconnect, device number 20
[  357.754029][T11000] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1852'.
[  357.840873][    T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  358.030265][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.052222][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'.
[  358.055454][  T983] pwc: recv_control_msg error -71 req 02 val 2100
[  358.068095][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  358.074138][T11008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1856'.
[  358.080805][  T983] pwc: recv_control_msg error -71 req 04 val 1500
[  358.101067][    T9] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  358.112241][  T983] pwc: recv_control_msg error -71 req 02 val 2500
[  358.124558][  T983] pwc: recv_control_msg error -71 req 02 val 2400
[  358.132052][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.147416][  T983] pwc: recv_control_msg error -71 req 02 val 2600
[  358.161400][    T9] usb 6-1: config 0 descriptor??
[  358.171253][  T983] pwc: recv_control_msg error -71 req 02 val 2900
[  358.195760][  T983] pwc: recv_control_msg error -71 req 02 val 2800
[  358.217634][  T983] pwc: recv_control_msg error -71 req 04 val 1100
[  358.239409][  T983] pwc: recv_control_msg error -71 req 04 val 1200
[  358.284851][  T983] pwc: Registered as video103.
[  358.318262][  T983] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53
[  358.367024][  T983] usb 5-1: USB disconnect, device number 81
[  358.410115][    T9] Bluetooth: Can't get state to change to load ram patch err
[  358.454204][    T9] Bluetooth: Loading patch file failed
[  358.473572][    T9] ath3k 6-1:0.0: probe with driver ath3k failed with error -71
[  358.494327][    T9] usb 6-1: USB disconnect, device number 44
[  358.666390][T11019] netlink: 'syz.4.1860': attribute type 4 has an invalid length.
[  358.695806][T11019] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1860'.
[  358.860703][T11024] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1864'.
[  358.882637][T11021] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1863'.
[  359.543743][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'.
[  359.594827][T11048] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1874'.
[  359.802442][ T5918] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  359.851134][T11056] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1877'.
[  359.930828][ T5988] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  359.979450][ T5918] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  359.988761][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.997498][ T5918] usb 5-1: Product: syz
[  360.008923][ T5918] usb 5-1: Manufacturer: syz
[  360.014742][ T5918] usb 5-1: SerialNumber: syz
[  360.028113][ T5918] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  360.055582][   T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  360.083272][ T5988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.100730][ T5988] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  360.114558][ T5988] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  360.139302][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.172195][ T5988] usb 2-1: config 0 descriptor??
[  360.416616][ T5988] Bluetooth: Can't get state to change to load ram patch err
[  360.436680][   T30] audit: type=1326 audit(1757507895.002:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.3.1883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6096f8eba9 code=0x0
[  360.439114][ T5988] Bluetooth: Loading patch file failed
[  360.522392][ T5918] usb 5-1: USB disconnect, device number 82
[  360.544963][ T5988] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[  360.558995][ T5988] usb 2-1: USB disconnect, device number 10
[  360.850479][    T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  361.002537][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.013012][    T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  361.022115][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.037095][    T9] usb 6-1: config 0 descriptor??
[  361.060755][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  361.121678][   T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  361.128886][   T24] ath9k_htc: Failed to initialize the device
[  361.136551][ T5918] usb 5-1: ath9k_htc: USB layer deinitialized
[  361.464927][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  361.472362][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  361.479307][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  361.486937][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  361.494941][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  361.530272][ T5918] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  361.540431][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  361.680675][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  361.687525][ T5918] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25
[  361.696614][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  361.702206][ T5918] usb 5-1: can't read configurations, error -22
[  361.710237][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  361.721240][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  361.732299][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  361.745161][ T5901] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  361.754271][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.766001][ T5901] usb 4-1: config 0 descriptor??
[  361.772121][T11083] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  361.830406][ T5918] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  361.912429][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  361.922282][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  361.935546][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  361.944903][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  361.957616][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  361.964675][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  361.973370][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  361.980889][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  361.987667][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  361.996293][    T9] pwc: Registered as video103.
[  362.000616][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  362.010451][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54
[  362.022152][ T5918] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25
[  362.039632][ T5918] usb 5-1: can't read configurations, error -22
[  362.048686][ T5918] usb usb5-port1: attempt power cycle
[  362.049621][    T9] usb 6-1: USB disconnect, device number 45
[  362.180100][ T5988] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  362.188986][ T5901] hid (null): unknown global tag 0xd
[  362.197537][ T5901] shield 0003:0955:7214.002C: unknown global tag 0xd
[  362.204297][ T5901] shield 0003:0955:7214.002C: item 0 0 1 13 parsing failed
[  362.214014][ T5901] shield 0003:0955:7214.002C: Parse failed
[  362.219903][ T5901] shield 0003:0955:7214.002C: probe with driver shield failed with error -22
[  362.340084][ T5988] usb 2-1: Using ep0 maxpacket: 32
[  362.346663][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.357745][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.367547][ T5988] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  362.376702][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.386363][ T5988] usb 2-1: config 0 descriptor??
[  362.391550][ T5918] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  362.412723][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  362.413063][    T9] usb 4-1: USB disconnect, device number 21
[  362.420568][ T5918] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25
[  362.450036][ T5918] usb 5-1: can't read configurations, error -22
[  362.508081][T11090] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1891'.
[  362.583526][ T5918] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  362.598290][T11092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  362.621184][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  362.627626][ T5918] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25
[  362.636714][ T5918] usb 5-1: can't read configurations, error -22
[  362.643654][ T5918] usb usb5-port1: unable to enumerate USB device
[  362.834768][ T5988] isku 0003:1E7D:319C.002D: ignoring exceeding usage max
[  362.846957][ T5988] isku 0003:1E7D:319C.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  362.977946][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'.
[  362.987400][T11103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1895'.
[  363.160069][ T5988] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  363.279989][   T24] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  363.311542][ T5988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  363.322568][ T5988] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  363.335981][ T5988] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  363.346957][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.371038][ T5988] usb 6-1: config 0 descriptor??
[  363.433489][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.444351][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  363.457306][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  363.466480][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.487375][   T24] usb 4-1: config 0 descriptor??
[  363.590057][ T5988] Bluetooth: Can't get state to change to load ram patch err
[  363.597498][ T5988] Bluetooth: Loading patch file failed
[  363.626578][ T5988] ath3k 6-1:0.0: probe with driver ath3k failed with error -71
[  363.657761][ T5988] usb 6-1: USB disconnect, device number 46
[  363.701696][   T24] usb 4-1: string descriptor 0 read error: -71
[  363.732977][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55
[  363.764419][   T24] bcm5974 4-1:0.0: could not read from device
[  363.795458][ T5218] bcm5974 4-1:0.0: could not read from device
[  363.805605][   T24] input: failed to attach handler mousedev to device input55, error: -5
[  363.821881][ T5218] bcm5974 4-1:0.0: could not read from device
[  363.838539][   T24] usb 4-1: USB disconnect, device number 22
[  363.848553][ T5218] bcm5974 4-1:0.0: could not read from device
[  363.886734][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.911041][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.180588][ T7889] usb 2-1: USB disconnect, device number 11
[  364.245020][T11117] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1901'.
[  364.423415][T11121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  364.569664][    T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  364.759725][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.779684][    T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  364.799153][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'.
[  364.816589][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.826538][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1907'.
[  364.842482][T11137] unsupported nlmsg_type 40
[  364.850604][    T9] usb 5-1: config 0 descriptor??
[  364.878171][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  365.109832][   T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  365.221977][T11149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1912'.
[  365.281211][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  365.288435][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  365.298155][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  365.307231][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.322108][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  365.322128][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  365.337859][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  365.340648][   T24] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  365.353605][ T5918] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  365.375535][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.391413][   T24] usb 6-1: config 0 descriptor??
[  365.410476][   T30] audit: type=1326 audit(1757507899.983:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.437703][   T30] audit: type=1326 audit(1757507899.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.467498][   T30] audit: type=1326 audit(1757507899.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.496733][ T5988] IPVS: starting estimator thread 0...
[  365.496901][   T30] audit: type=1326 audit(1757507899.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.526937][   T30] audit: type=1326 audit(1757507899.983:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.576840][   T30] audit: type=1326 audit(1757507899.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.604989][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.609247][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  365.619063][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  365.627688][   T30] audit: type=1326 audit(1757507899.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.657458][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  365.664929][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  365.671968][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  365.678935][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  365.688448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  365.691267][T11155] IPVS: using max 26 ests per chain, 62400 per kthread
[  365.704725][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  365.714945][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1914'.
[  365.727449][   T30] audit: type=1326 audit(1757507899.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.754419][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  365.770542][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  365.778221][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  365.779510][   T24] Bluetooth: Can't get state to change to load ram patch err
[  365.785205][   T30] audit: type=1326 audit(1757507899.983:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.815074][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  365.830839][    T9] pwc: Registered as video103.
[  365.832740][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  365.848549][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56
[  365.875406][   T30] audit: type=1326 audit(1757507900.063:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  365.902078][   T24] Bluetooth: Loading patch file failed
[  365.913335][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.926575][   T24] ath3k 6-1:0.0: probe with driver ath3k failed with error -71
[  365.934635][    T9] usb 5-1: USB disconnect, device number 87
[  365.959321][ T5918] usb 4-1: config 0 descriptor??
[  365.964779][   T24] usb 6-1: USB disconnect, device number 47
[  365.976434][   T30] audit: type=1326 audit(1757507900.063:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  366.018022][   T30] audit: type=1326 audit(1757507900.123:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff0bb98eba9 code=0x7ffc0000
[  366.183048][ T5918] usb 4-1: string descriptor 0 read error: -71
[  366.200833][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57
[  366.214562][ T5218] bcm5974 4-1:0.0: could not read from device
[  366.226169][ T5218] bcm5974 4-1:0.0: could not read from device
[  366.251793][ T5918] bcm5974 4-1:0.0: could not read from device
[  366.265149][ T5218] bcm5974 4-1:0.0: could not read from device
[  366.274128][ T5918] input: failed to attach handler mousedev to device input57, error: -5
[  366.298560][ T5218] bcm5974 4-1:0.0: could not read from device
[  366.317345][ T5918] usb 4-1: USB disconnect, device number 23
[  366.336428][ T5218] bcm5974 4-1:0.0: could not read from device
[  366.372267][ T6689] bcm5974 4-1:0.0: could not read from device
[  366.749082][T11173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1921'.
[  366.859324][ T5918] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  367.039457][ T5918] usb 2-1: Invalid ep0 maxpacket: 64
[  367.119090][T11181] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1925'.
[  367.189399][ T5918] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  367.212194][ T5988] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  367.232398][T11186] netlink: 'syz.4.1926': attribute type 2 has an invalid length.
[  367.325226][T11188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  367.349417][ T5918] usb 2-1: Invalid ep0 maxpacket: 64
[  367.359363][ T5988] usb 4-1: device descriptor read/64, error -71
[  367.365804][ T5918] usb usb2-port1: attempt power cycle
[  367.518568][T11197] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1930'.
[  367.600026][ T5988] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  367.709312][    T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  367.719512][ T5918] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  367.739333][ T5988] usb 4-1: device descriptor read/64, error -71
[  367.747757][ T5918] usb 2-1: Invalid ep0 maxpacket: 64
[  367.839344][    T9] usb 5-1: device descriptor read/64, error -71
[  367.849932][ T5988] usb usb4-port1: attempt power cycle
[  367.879149][ T5918] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  367.902097][ T5918] usb 2-1: Invalid ep0 maxpacket: 64
[  367.907582][ T5918] usb usb2-port1: unable to enumerate USB device
[  368.099115][    T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  368.189092][ T5988] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  368.209764][ T5988] usb 4-1: device descriptor read/8, error -71
[  368.240425][    T9] usb 5-1: device descriptor read/64, error -71
[  368.349536][    T9] usb usb5-port1: attempt power cycle
[  368.449131][ T5988] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  368.479752][ T5988] usb 4-1: device descriptor read/8, error -71
[  368.589588][ T5988] usb usb4-port1: unable to enumerate USB device
[  368.685926][T11211] usb usb9: usbfs: process 11211 (syz.5.1934) did not claim interface 9 before use
[  368.695827][    T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  368.719747][    T9] usb 5-1: device descriptor read/8, error -71
[  368.846666][T11215] __nla_validate_parse: 1 callbacks suppressed
[  368.846685][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'.
[  368.863685][T11215] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1935'.
[  368.924612][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.935180][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.969086][    T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  368.989472][    T9] usb 5-1: device descriptor read/8, error -71
[  369.109567][    T9] usb usb5-port1: unable to enumerate USB device
[  369.169688][ T7889] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  369.328885][ T7889] usb 6-1: Using ep0 maxpacket: 8
[  369.335436][ T7889] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  369.343783][ T7889] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.354638][ T7889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  369.365610][ T7889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  369.376061][ T7889] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.390327][ T7889] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  369.399476][ T7889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.616021][ T7889] usb 6-1: usb_control_msg returned -32
[  369.625983][ T7889] usbtmc 6-1:16.0: can't read capabilities
[  369.977127][T11218] usbtmc 6-1:16.0: usb_control_msg returned -32
[  370.014170][T11229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1940'.
[  370.018253][ T7889] usb 6-1: USB disconnect, device number 48
[  370.123615][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'.
[  370.368675][ T5988] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  370.530154][ T5988] usb 2-1: Using ep0 maxpacket: 8
[  370.539676][   T30] kauditd_printk_skb: 163 callbacks suppressed
[  370.539692][   T30] audit: type=1326 audit(1757507905.104:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce8138eba9 code=0x7ffc0000
[  370.540550][ T5988] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  370.578533][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.587262][ T5988] usb 2-1: Product: syz
[  370.594194][ T5988] usb 2-1: Manufacturer: syz
[  370.601756][ T5988] usb 2-1: SerialNumber: syz
[  370.619541][ T5988] usb 2-1: config 0 descriptor??
[  370.834431][ T5988] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  370.898759][ T5901] usb 5-1: new low-speed USB device number 92 using dummy_hcd
[  371.029503][ T5918] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  371.060041][ T5901] usb 5-1: LPM exit latency is zeroed, disabling LPM.
[  371.067824][ T5901] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt
[  371.078199][ T5901] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt
[  371.088149][ T5901] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.101769][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0
[  371.111368][ T5901] usb 5-1: string descriptor 0 read error: -22
[  371.118265][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  371.127937][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.138782][T11237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  371.146048][T11237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  371.155674][ T5901] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  371.188773][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  371.195419][ T5918] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2
[  371.198677][ T7889] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  371.204523][ T5918] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  371.223635][ T5918] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  371.233515][ T5918] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  371.242607][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.260674][ T5988] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  371.279332][ T5988] usb 2-1: USB disconnect, device number 16
[  371.358214][ T5865] usb 5-1: USB disconnect, device number 92
[  371.370515][ T7889] usb 4-1: Using ep0 maxpacket: 16
[  371.385011][ T7889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  371.397746][ T7889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  371.409729][ T7889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  371.424102][ T7889] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  371.433412][ T7889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.444288][ T7889] usb 4-1: config 0 descriptor??
[  371.450297][T11245] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  371.460583][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.470936][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.481043][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.492152][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.504980][ T5918] usb 6-1: string descriptor 0 read error: -71
[  371.537666][ T5918] usb 6-1: USB disconnect, device number 49
[  371.869375][ T7889] hid (null): unknown global tag 0xd
[  371.890755][ T7889] shield 0003:0955:7214.002E: unknown global tag 0xd
[  371.897490][ T7889] shield 0003:0955:7214.002E: item 0 0 1 13 parsing failed
[  371.915616][ T7889] shield 0003:0955:7214.002E: Parse failed
[  371.951761][ T7889] shield 0003:0955:7214.002E: probe with driver shield failed with error -22
[  372.077736][  T983] usb 4-1: USB disconnect, device number 28
[  372.238473][   T43] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  372.246460][ T5918] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  372.288370][ T7889] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  372.401093][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.411407][ T5918] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  372.420911][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.428445][ T7889] usb 6-1: device descriptor read/64, error -71
[  372.436992][ T5918] usb 2-1: config 0 descriptor??
[  372.443120][   T43] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  372.456275][ T5918] pwc: Askey VC010 type 2 USB webcam detected.
[  372.462528][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.470843][   T43] usb 5-1: Product: syz
[  372.475037][   T43] usb 5-1: Manufacturer: syz
[  372.479786][   T43] usb 5-1: SerialNumber: syz
[  372.492798][   T43] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  372.511005][ T5901] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  372.678386][ T7889] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  372.737687][    T9] usb 5-1: USB disconnect, device number 93
[  372.818478][ T7889] usb 6-1: device descriptor read/64, error -71
[  372.860292][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00
[  372.861292][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.875668][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.886015][ T5918] pwc: recv_control_msg error -32 req 02 val 2700
[  372.893242][ T5918] pwc: recv_control_msg error -32 req 02 val 2c00
[  372.898272][  T983] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  372.904607][ T5918] pwc: recv_control_msg error -32 req 04 val 1000
[  372.928701][ T7889] usb usb6-port1: attempt power cycle
[  373.050780][  T983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.061766][  T983] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  373.070848][  T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.081740][  T983] usb 4-1: config 0 descriptor??
[  373.091719][  T983] pwc: Askey VC010 type 2 USB webcam detected.
[  373.116366][ T5918] pwc: recv_control_msg error -71 req 04 val 1400
[  373.124777][ T5918] pwc: recv_control_msg error -71 req 02 val 2000
[  373.133015][ T5918] pwc: recv_control_msg error -71 req 02 val 2100
[  373.140409][ T5918] pwc: recv_control_msg error -71 req 04 val 1500
[  373.147192][ T5918] pwc: recv_control_msg error -71 req 02 val 2500
[  373.154659][ T5918] pwc: recv_control_msg error -71 req 02 val 2400
[  373.163468][ T5918] pwc: recv_control_msg error -71 req 02 val 2600
[  373.170398][ T5918] pwc: recv_control_msg error -71 req 02 val 2900
[  373.177154][ T5918] pwc: recv_control_msg error -71 req 02 val 2800
[  373.184180][ T5918] pwc: recv_control_msg error -71 req 04 val 1100
[  373.191142][ T5918] pwc: recv_control_msg error -71 req 04 val 1200
[  373.203083][ T5918] pwc: Registered as video103.
[  373.213276][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58
[  373.228066][ T5918] usb 2-1: USB disconnect, device number 17
[  373.269008][ T7889] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  373.303235][ T7889] usb 6-1: device descriptor read/8, error -71
[  373.568281][ T7889] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  373.588758][ T7889] usb 6-1: device descriptor read/8, error -71
[  373.598634][ T5901] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  373.605683][ T5901] ath9k_htc: Failed to initialize the device
[  373.613963][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  373.701745][ T7889] usb usb6-port1: unable to enumerate USB device
[  373.711254][  T983] pwc: recv_control_msg error -71 req 02 val 2700
[  373.736527][  T983] pwc: recv_control_msg error -71 req 02 val 2c00
[  373.743936][  T983] pwc: recv_control_msg error -71 req 04 val 1000
[  373.756505][  T983] pwc: recv_control_msg error -71 req 04 val 1300
[  373.766798][  T983] pwc: recv_control_msg error -71 req 04 val 1400
[  373.767484][T11271] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.782833][  T983] pwc: recv_control_msg error -71 req 02 val 2000
[  373.791601][T11271] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.792521][  T983] pwc: recv_control_msg error -71 req 02 val 2100
[  373.798799][T11271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.804168][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'.
[  373.806767][  T983] pwc: recv_control_msg error -71 req 04 val 1500
[  373.829540][  T983] pwc: recv_control_msg error -71 req 02 val 2500
[  373.836253][  T983] pwc: recv_control_msg error -71 req 02 val 2400
[  373.844181][  T983] pwc: recv_control_msg error -71 req 02 val 2600
[  373.851144][  T983] pwc: recv_control_msg error -71 req 02 val 2900
[  373.861593][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1956'.
[  373.871953][  T983] pwc: recv_control_msg error -71 req 02 val 2800
[  373.876166][T11271] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  373.879884][  T983] pwc: recv_control_msg error -71 req 04 val 1100
[  373.884935][T11271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  373.891864][  T983] pwc: recv_control_msg error -71 req 04 val 1200
[  373.907336][T11271] vhci_hcd vhci_hcd.0: Device attached
[  373.914973][  T983] pwc: Registered as video103.
[  373.925865][  T983] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59
[  373.950972][  T983] usb 4-1: USB disconnect, device number 29
[  374.156599][ T7889] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  374.189646][ T5901] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  374.361566][ T5901] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 114
[  374.364870][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'.
[  374.370560][ T5901] usb 5-1: can't read configurations, error -22
[  374.379609][T11277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1957'.
[  374.471401][   T43] IPVS: starting estimator thread 0...
[  374.521078][ T5901] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  374.584436][T11285] IPVS: using max 51 ests per chain, 122400 per kthread
[  374.698277][ T5901] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 114
[  374.707535][ T5901] usb 5-1: can't read configurations, error -22
[  374.714387][ T5901] usb usb5-port1: attempt power cycle
[  374.947710][  T983] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  375.076159][ T5901] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  375.099207][ T5901] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 114
[  375.107845][ T5901] usb 5-1: can't read configurations, error -22
[  375.121423][  T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.132563][  T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.143741][  T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  375.154667][  T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  375.164425][  T983] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  375.178686][  T983] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  375.200350][  T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  375.219622][  T983] usb 4-1: SerialNumber: syz
[  375.238233][T11293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  375.247174][ T5901] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  375.249075][  T983] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  375.281837][  T983] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[  375.299087][ T5901] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 114
[  375.309628][ T5901] usb 5-1: can't read configurations, error -22
[  375.316470][ T5901] usb usb5-port1: unable to enumerate USB device
[  375.468753][T11293] autofs: Bad value for 'fd'
[  375.600249][  T983] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  375.760743][  T983] usb 2-1: device descriptor read/64, error -71
[  375.961731][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1971'.
[  375.961731][T11311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1971'.
[  376.022633][ T5954] usb 4-1: USB disconnect, device number 30
[  376.038531][  T983] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  376.177804][  T983] usb 2-1: device descriptor read/64, error -71
[  376.295447][  T983] usb usb2-port1: attempt power cycle
[  376.412739][    T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  376.420383][ T5954] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  376.583886][    T9] usb 6-1: Using ep0 maxpacket: 8
[  376.593195][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.604562][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  376.611345][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  376.620944][ T5954] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  376.630203][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.641593][    T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  376.651524][ T5954] usb 4-1: config 0 descriptor??
[  376.656493][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.664743][  T983] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  376.672692][    T9] usb 6-1: Product: syz
[  376.679420][    T9] usb 6-1: Manufacturer: syz
[  376.684250][    T9] usb 6-1: SerialNumber: syz
[  376.691309][  T983] usb 2-1: device descriptor read/8, error -71
[  376.697793][    T9] usb 6-1: config 0 descriptor??
[  376.706033][    T9] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  376.895595][ T5954] Bluetooth: Can't get state to change to load ram patch err
[  376.903261][ T5954] Bluetooth: Loading patch file failed
[  376.908850][ T5954] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  376.921463][    T9] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  376.933960][ T5954] usb 4-1: USB disconnect, device number 31
[  376.942537][    T9] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  376.955828][  T983] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  376.986858][  T983] usb 2-1: device descriptor read/8, error -71
[  376.988684][T11273] vhci_hcd: connection reset by peer
[  377.007953][   T72] vhci_hcd: stop threads
[  377.017137][   T72] vhci_hcd: release socket
[  377.023845][   T72] vhci_hcd: disconnect device
[  377.100636][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'.
[  377.108488][  T983] usb usb2-port1: unable to enumerate USB device
[  377.109740][T11321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1975'.
[  377.760044][ T5901] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  377.922381][ T5901] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.932885][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0
[  377.939509][ T5901] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  377.948796][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.959695][ T5901] usb 5-1: config 0 descriptor??
[  378.414845][ T5901] magicmouse 0003:05AC:0269.002F: unknown main item tag 0x3
[  378.422295][ T5901] magicmouse 0003:05AC:0269.002F: unknown main item tag 0x7
[  378.439540][ T5901] magicmouse 0003:05AC:0269.002F: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0
[  378.584343][T11349] can0: slcan on ttyprintk.
[  378.626400][ T5901] usb 5-1: USB disconnect, device number 98
[  378.691025][T11350] can0 (unregistered): slcan off ttyprintk.
[  378.744734][  T983] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  378.803233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.810486][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.915026][  T983] usb 4-1: Using ep0 maxpacket: 16
[  378.928603][  T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  378.942568][  T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  378.983179][  T983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  378.998249][  T983] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  379.007985][  T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.033128][  T983] usb 4-1: config 0 descriptor??
[  379.042443][T11347] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  379.412475][   T43] usb 6-1: USB disconnect, device number 54
[  379.505051][  T983] hid (null): unknown global tag 0xd
[  379.551452][  T983] shield 0003:0955:7214.0030: unknown global tag 0xd
[  379.591706][  T983] shield 0003:0955:7214.0030: item 0 0 1 13 parsing failed
[  379.614928][  T983] shield 0003:0955:7214.0030: Parse failed
[  379.627982][  T983] shield 0003:0955:7214.0030: probe with driver shield failed with error -22
[  379.642136][ T7889] vhci_hcd: vhci_device speed not set
[  379.731009][ T5954] usb 4-1: USB disconnect, device number 32
[  379.920670][   T43] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  380.072501][   T43] usb 6-1: device descriptor read/64, error -71
[  380.356286][   T43] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  380.396170][T11420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  380.476124][ T5954] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  380.519285][   T43] usb 6-1: device descriptor read/64, error -71
[  380.544995][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'.
[  380.554159][T11427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2000'.
[  380.630345][ T5954] usb 5-1: device descriptor read/64, error -71
[  380.652347][   T43] usb usb6-port1: attempt power cycle
[  380.893224][ T5954] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  380.946812][ T5988] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  381.021493][   T43] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  381.032162][ T5954] usb 5-1: device descriptor read/64, error -71
[  381.043290][   T43] usb 6-1: device descriptor read/8, error -71
[  381.109930][ T5988] usb 4-1: Using ep0 maxpacket: 16
[  381.116977][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.125962][ T5988] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  381.139112][ T5988] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.147609][ T5988] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40
[  381.156736][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.160898][ T5954] usb usb5-port1: attempt power cycle
[  381.164955][ T5988] usb 4-1: Product: syz
[  381.174968][ T5988] usb 4-1: Manufacturer: syz
[  381.179569][ T5988] usb 4-1: SerialNumber: syz
[  381.310266][   T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  381.332234][   T43] usb 6-1: device descriptor read/8, error -71
[  381.411974][ T5988] usbhid 4-1:1.0: can't add hid device: -71
[  381.418184][ T5988] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  381.433263][ T5988] usb 4-1: USB disconnect, device number 33
[  381.449583][   T43] usb usb6-port1: unable to enumerate USB device
[  381.534805][ T5954] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  381.558625][ T5954] usb 5-1: device descriptor read/8, error -71
[  381.823455][ T5954] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  381.859396][ T5954] usb 5-1: device descriptor read/8, error -71
[  381.898344][ T7889] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  381.976626][ T5954] usb usb5-port1: unable to enumerate USB device
[  382.069387][ T7889] usb 2-1: Using ep0 maxpacket: 16
[  382.075759][ T7889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  382.087291][ T7889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  382.098972][ T7889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  382.111790][ T7889] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  382.120839][ T7889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.130854][ T7889] usb 2-1: config 0 descriptor??
[  382.136650][T11436] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  382.577240][ T7889] hid (null): unknown global tag 0xd
[  382.585871][ T7889] shield 0003:0955:7214.0031: unknown global tag 0xd
[  382.592561][ T7889] shield 0003:0955:7214.0031: item 0 0 1 13 parsing failed
[  382.600747][ T7889] shield 0003:0955:7214.0031: Parse failed
[  382.606615][ T7889] shield 0003:0955:7214.0031: probe with driver shield failed with error -22
[  382.801220][ T7889] usb 2-1: USB disconnect, device number 22
[  382.904261][   T25] block nbd0: Possible stuck request ffff888025860000: control (read@0,1024B). Runtime 180 seconds
[  382.915422][   T25] block nbd0: Possible stuck request ffff8880258601c0: control (read@1024,1024B). Runtime 180 seconds
[  382.926904][   T25] block nbd0: Possible stuck request ffff888025860380: control (read@2048,1024B). Runtime 180 seconds
[  382.937926][   T25] block nbd0: Possible stuck request ffff888025860540: control (read@3072,1024B). Runtime 180 seconds
[  383.224319][   T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  383.384741][   T24] usb 4-1: Using ep0 maxpacket: 8
[  383.392269][   T24] usb 4-1: config 0 has an invalid interface number: 56 but max is 0
[  383.400909][   T24] usb 4-1: config 0 has no interface number 0
[  383.415031][   T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[  383.432626][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.444294][T11448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  383.453542][   T24] usb 4-1: Product: syz
[  383.457978][   T24] usb 4-1: Manufacturer: syz
[  383.463868][   T24] usb 4-1: SerialNumber: syz
[  383.496229][   T24] usb 4-1: config 0 descriptor??
[  383.544023][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2010'.
[  383.722992][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  383.744076][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2013'.
[  383.753807][   T24] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  384.023933][   T24] peak_usb 4-1:0.56 can0: sending command failure: -22
[  384.030938][   T24] peak_usb 4-1:0.56 can0: sending command failure: -22
[  384.039922][   T24] peak_usb 4-1:0.56 can0: sending command failure: -22
[  384.094037][   T24] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22
[  384.251069][   T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  384.258710][ T5988] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  384.411353][   T43] usb 6-1: device descriptor read/64, error -71
[  384.443572][ T5988] usb 5-1: Using ep0 maxpacket: 16
[  384.451034][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  384.462483][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  384.473557][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  384.486441][ T5988] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  384.495482][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.506258][ T5988] usb 5-1: config 0 descriptor??
[  384.512251][T11465] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  384.678634][   T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  384.828332][   T43] usb 6-1: device descriptor read/64, error -71
[  384.947026][   T43] usb usb6-port1: attempt power cycle
[  384.957680][ T5988] hid (null): unknown global tag 0xd
[  384.973289][ T5988] shield 0003:0955:7214.0032: unknown global tag 0xd
[  384.982139][ T5988] shield 0003:0955:7214.0032: item 0 0 1 13 parsing failed
[  384.990298][ T5988] shield 0003:0955:7214.0032: Parse failed
[  384.996348][ T5988] shield 0003:0955:7214.0032: probe with driver shield failed with error -22
[  385.153800][T11481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  385.178959][ T5988] usb 5-1: USB disconnect, device number 103
[  385.330854][   T43] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  385.353579][   T43] usb 6-1: device descriptor read/8, error -71
[  385.609102][   T43] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  385.634122][   T43] usb 6-1: device descriptor read/8, error -71
[  385.748291][   T43] usb usb6-port1: unable to enumerate USB device
[  386.036653][ T5954] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  386.196989][ T5954] usb 5-1: Using ep0 maxpacket: 8
[  386.200237][ T5988] usb 4-1: USB disconnect, device number 34
[  386.206459][ T5954] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  386.228370][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.243978][ T5954] usb 5-1: Product: syz
[  386.248199][ T5954] usb 5-1: Manufacturer: syz
[  386.253974][ T5954] usb 5-1: SerialNumber: syz
[  386.287426][ T5954] usb 5-1: config 0 descriptor??
[  386.293061][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'.
[  386.307115][ T5954] ipw 5-1:0.0: IPWireless converter converter detected
[  386.311967][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2025'.
[  386.577872][   T30] audit: type=1800 audit(1757507920.322:189): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2030" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  386.701018][T11505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  386.764247][ T5988] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  386.927514][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.937692][ T5988] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  386.946679][ T5988] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  386.955718][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.965834][ T5988] usb 4-1: config 0 descriptor??
[  387.041832][ T5918] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  387.202347][ T5988] Bluetooth: Can't get state to change to load ram patch err
[  387.209747][ T5988] Bluetooth: Loading patch file failed
[  387.232060][ T5988] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  387.242371][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  387.254063][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  387.254602][T11510] netlink: 'syz.5.2033': attribute type 12 has an invalid length.
[  387.265384][ T5988] usb 4-1: USB disconnect, device number 35
[  387.271386][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  387.292644][T11510] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2033'.
[  387.297323][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  387.315633][ T5918] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  387.325904][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.338204][ T5918] usb 2-1: config 0 descriptor??
[  387.345761][T11508] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  387.777460][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'.
[  387.788328][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2035'.
[  387.789216][ T5918] hid (null): unknown global tag 0xd
[  387.809041][ T5918] shield 0003:0955:7214.0033: unknown global tag 0xd
[  387.820333][ T5918] shield 0003:0955:7214.0033: item 0 0 1 13 parsing failed
[  387.828366][ T5918] shield 0003:0955:7214.0033: Parse failed
[  387.834868][ T5918] shield 0003:0955:7214.0033: probe with driver shield failed with error -22
[  387.947783][T11518] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2037'.
[  388.022437][    T9] usb 2-1: USB disconnect, device number 23
[  388.303724][ T5918] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  388.474680][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  388.484328][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  388.493896][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.508374][ T5918] usb 4-1: config 0 descriptor??
[  388.650212][T11531] 9pnet_fd: p9_fd_create_tcp (11531): problem connecting socket to 127.0.0.1
[  388.710150][   T43] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  388.759802][T11535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'.
[  388.808886][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'.
[  388.819190][T11537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2046'.
[  388.859656][   T43] usb 6-1: device descriptor read/64, error -71
[  388.872534][T11540] virtiofs: Unknown parameter 'always'
[  388.875393][T11539] virtiofs: Unknown parameter 'always'
[  388.963882][ T5918] magicmouse 0003:05AC:0269.0034: reserved main item tag 0xd
[  388.971411][ T5918] magicmouse 0003:05AC:0269.0034: item fetching failed at offset 4/5
[  388.981481][ T5918] magicmouse 0003:05AC:0269.0034: magicmouse hid parse failed
[  388.991030][ T5918] magicmouse 0003:05AC:0269.0034: probe with driver magicmouse failed with error -22
[  389.006844][ T7889] usb 5-1: USB disconnect, device number 104
[  389.027072][ T7889] ipw 5-1:0.0: device disconnected
[  389.128496][   T43] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  389.180034][ T5936] usb 4-1: USB disconnect, device number 36
[  389.287361][   T43] usb 6-1: device descriptor read/64, error -71
[  389.405125][ T5918] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  389.413061][   T43] usb usb6-port1: attempt power cycle
[  389.554895][ T7889] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  389.565890][ T5918] usb 2-1: device descriptor read/64, error -71
[  389.715079][ T7889] usb 5-1: Using ep0 maxpacket: 16
[  389.721631][ T7889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  389.733142][ T7889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  389.744513][ T7889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  389.762180][ T7889] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  389.772160][ T7889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.784300][ T7889] usb 5-1: config 0 descriptor??
[  389.800616][   T43] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  389.801110][T11553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  389.835683][ T5918] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  389.844113][   T43] usb 6-1: device descriptor read/8, error -71
[  389.983293][ T5918] usb 2-1: device descriptor read/64, error -71
[  390.100474][ T5918] usb usb2-port1: attempt power cycle
[  390.132919][   T43] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  390.141166][T11564] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2056'.
[  390.166317][   T43] usb 6-1: device descriptor read/8, error -71
[  390.279995][ T7889] hid (null): unknown global tag 0xd
[  390.297904][ T7889] shield 0003:0955:7214.0035: unknown global tag 0xd
[  390.305326][   T43] usb usb6-port1: unable to enumerate USB device
[  390.305534][ T7889] shield 0003:0955:7214.0035: item 0 0 1 13 parsing failed
[  390.324929][ T7889] shield 0003:0955:7214.0035: Parse failed
[  390.330874][ T7889] shield 0003:0955:7214.0035: probe with driver shield failed with error -22
[  390.463596][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  390.486682][ T5918] usb 2-1: device descriptor read/8, error -71
[  390.511252][ T7889] usb 5-1: USB disconnect, device number 105
[  390.645473][   T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  390.752337][ T5918] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  390.774512][ T5918] usb 2-1: device descriptor read/8, error -71
[  390.816512][   T43] usb 4-1: Using ep0 maxpacket: 16
[  390.822880][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.833223][   T43] usb 4-1: config 0 interface 0 has no altsetting 0
[  390.842210][   T43] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  390.852294][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.860783][   T43] usb 4-1: Product: syz
[  390.864941][   T43] usb 4-1: Manufacturer: syz
[  390.869517][   T43] usb 4-1: SerialNumber: syz
[  390.876600][   T43] usb 4-1: config 0 descriptor??
[  390.902493][ T5918] usb usb2-port1: unable to enumerate USB device
[  391.323166][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.334415][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.344400][   T43] usb 4-1: USB disconnect, device number 37
[  391.642779][T11592] netlink: 'syz.4.2068': attribute type 1 has an invalid length.
[  391.852866][T11601] mkiss: ax0: crc mode is auto.
[  391.982097][ T5183] Bluetooth: hci4: command 0x0406 tx timeout
[  392.087644][T11612] __nla_validate_parse: 3 callbacks suppressed
[  392.087657][T11612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2076'.
[  392.324426][   T43] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  392.463747][   T43] usb 5-1: device descriptor read/64, error -71
[  392.475942][ T5901] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  392.496968][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.507736][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.517559][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.527840][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.554115][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.564087][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.578267][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.593470][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.601928][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.612194][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.658289][T11631] block nbd5: Attempted send on invalid socket
[  392.665095][T11631] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.675567][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  392.680565][T11631] block nbd5: Attempted send on invalid socket
[  392.682183][ T5901] usb 4-1: no configurations
[  392.691761][ T5901] usb 4-1: can't read configurations, error -22
[  392.698488][T11631] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.710827][T11631] Invalid source name
[  392.715203][T11631] UBIFS error (pid: 11631): cannot open "usrquo ", error -22
[  392.720149][ T7889] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  392.741547][   T43] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  392.837504][ T5901] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  392.870922][ T7889] usb 2-1: device descriptor read/64, error -71
[  392.880582][   T43] usb 5-1: device descriptor read/64, error -71
[  392.998259][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  393.003572][   T43] usb usb5-port1: attempt power cycle
[  393.009754][ T5901] usb 4-1: no configurations
[  393.014373][ T5901] usb 4-1: can't read configurations, error -22
[  393.021716][ T5901] usb usb4-port1: attempt power cycle
[  393.126283][ T7889] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  393.265274][ T7889] usb 2-1: device descriptor read/64, error -71
[  393.383474][ T7889] usb usb2-port1: attempt power cycle
[  393.393631][   T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  393.401352][ T5901] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  393.438443][   T43] usb 5-1: device descriptor read/8, error -71
[  393.445221][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  393.455974][ T5901] usb 4-1: no configurations
[  393.465687][ T5901] usb 4-1: can't read configurations, error -22
[  393.607599][ T5901] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  393.642305][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  393.647859][ T5901] usb 4-1: no configurations
[  393.652635][ T5901] usb 4-1: can't read configurations, error -22
[  393.659101][ T5901] usb usb4-port1: unable to enumerate USB device
[  393.714749][   T43] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  393.736332][   T43] usb 5-1: device descriptor read/8, error -71
[  393.746478][ T7889] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  393.770622][ T7889] usb 2-1: device descriptor read/8, error -71
[  393.832153][    T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  393.853765][   T43] usb usb5-port1: unable to enumerate USB device
[  393.970996][    T9] usb 6-1: device descriptor read/64, error -71
[  394.024451][ T7889] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  394.046262][ T7889] usb 2-1: device descriptor read/8, error -71
[  394.164124][ T7889] usb usb2-port1: unable to enumerate USB device
[  394.227760][    T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  394.367787][    T9] usb 6-1: device descriptor read/64, error -71
[  394.495430][    T9] usb usb6-port1: attempt power cycle
[  394.858593][    T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  394.883657][    T9] usb 6-1: device descriptor read/8, error -71
[  395.137258][    T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  395.165562][T11639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  395.175211][    T9] usb 6-1: device descriptor read/8, error -71
[  395.299074][    T9] usb usb6-port1: unable to enumerate USB device
[  395.322892][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'.
[  395.332290][T11644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2087'.
[  395.649834][    T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  395.731505][T11657] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2092'.
[  395.810584][    T9] usb 5-1: Using ep0 maxpacket: 16
[  395.818250][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  395.838110][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  395.850020][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  395.866808][    T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  395.869319][T11665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  395.876436][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.902238][    T9] usb 5-1: config 0 descriptor??
[  395.909815][T11646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  396.069358][   T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  396.237989][   T43] usb 4-1: Using ep0 maxpacket: 16
[  396.245232][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.256309][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.259431][ T7889] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  396.266136][   T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  396.266184][   T43] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  396.266209][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.271714][   T43] usb 4-1: config 0 descriptor??
[  396.348663][    T9] hid (null): unknown global tag 0xd
[  396.361188][    T9] shield 0003:0955:7214.0036: unknown global tag 0xd
[  396.367979][    T9] shield 0003:0955:7214.0036: item 0 0 1 13 parsing failed
[  396.376198][    T9] shield 0003:0955:7214.0036: Parse failed
[  396.384603][    T9] shield 0003:0955:7214.0036: probe with driver shield failed with error -22
[  396.441090][ T7889] usb 2-1: Using ep0 maxpacket: 8
[  396.447191][ T7889] usb 2-1: no configurations
[  396.452344][ T7889] usb 2-1: can't read configurations, error -22
[  396.574268][ T5901] usb 5-1: USB disconnect, device number 110
[  396.601547][ T7889] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  396.762026][ T7889] usb 2-1: Using ep0 maxpacket: 8
[  396.768662][ T7889] usb 2-1: no configurations
[  396.773632][ T7889] usb 2-1: can't read configurations, error -22
[  396.780981][ T7889] usb usb2-port1: attempt power cycle
[  396.834975][T11670] kvm: kvm [11669]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0xc1) = 0x800
[  396.844503][T11670] kvm: kvm [11669]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0xc2) = 0x800
[  396.968236][   T43] hid-multitouch 0003:0457:07DA.0037: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0
[  397.049383][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2099'.
[  397.059969][T11677] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2099'.
[  397.121897][T11679] dlm: non-version read from control device 8224
[  397.146994][ T7889] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  397.187169][ T7889] usb 2-1: Using ep0 maxpacket: 8
[  397.217498][ T7889] usb 2-1: no configurations
[  397.232771][ T7889] usb 2-1: can't read configurations, error -22
[  397.245326][   T43] usb 4-1: USB disconnect, device number 42
[  397.324396][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.343221][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.382252][ T7889] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  397.404997][ T7889] usb 2-1: Using ep0 maxpacket: 8
[  397.415947][ T7889] usb 2-1: no configurations
[  397.420552][ T7889] usb 2-1: can't read configurations, error -22
[  397.443327][ T7889] usb usb2-port1: unable to enumerate USB device
[  397.451895][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2105'.
[  397.513113][T11693] FAULT_INJECTION: forcing a failure.
[  397.513113][T11693] name failslab, interval 1, probability 0, space 0, times 0
[  397.525920][T11693] CPU: 1 UID: 0 PID: 11693 Comm: syz.5.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  397.525941][T11693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  397.525954][T11693] Call Trace:
[  397.525960][T11693]  <TASK>
[  397.525964][T11693]  dump_stack_lvl+0x189/0x250
[  397.525980][T11693]  ? __pfx____ratelimit+0x10/0x10
[  397.525996][T11693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.526006][T11693]  ? __pfx__printk+0x10/0x10
[  397.526024][T11693]  ? __pfx___might_resched+0x10/0x10
[  397.526039][T11693]  should_fail_ex+0x414/0x560
[  397.526055][T11693]  should_failslab+0xa8/0x100
[  397.526069][T11693]  __kmalloc_noprof+0xcb/0x7f0
[  397.526080][T11693]  ? kfree+0x4d/0x6d0
[  397.526087][T11693]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  397.526107][T11693]  tomoyo_realpath_from_path+0xe3/0x5d0
[  397.526123][T11693]  ? tomoyo_domain+0xd9/0x130
[  397.526136][T11693]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  397.526149][T11693]  tomoyo_path_number_perm+0x1e8/0x5a0
[  397.526163][T11693]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  397.526197][T11693]  ? __fget_files+0x2a/0x420
[  397.526213][T11693]  ? __fget_files+0x3a0/0x420
[  397.526226][T11693]  ? __fget_files+0x2a/0x420
[  397.526241][T11693]  security_file_ioctl+0xcb/0x2d0
[  397.526255][T11693]  __se_sys_ioctl+0x47/0x170
[  397.526267][T11693]  do_syscall_64+0xfa/0xfa0
[  397.526282][T11693]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.526297][T11693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.526310][T11693]  ? clear_bhb_loop+0x60/0xb0
[  397.526322][T11693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.526332][T11693] RIP: 0033:0x7fce8138eba9
[  397.526343][T11693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.526351][T11693] RSP: 002b:00007fce82200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.526364][T11693] RAX: ffffffffffffffda RBX: 00007fce815d5fa0 RCX: 00007fce8138eba9
[  397.526372][T11693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  397.526378][T11693] RBP: 00007fce82200090 R08: 0000000000000000 R09: 0000000000000000
[  397.526384][T11693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.526391][T11693] R13: 00007fce815d6038 R14: 00007fce815d5fa0 R15: 00007fff2a0e4f08
[  397.526408][T11693]  </TASK>
[  397.526413][T11693] ERROR: Out of memory at tomoyo_realpath_from_path.
[  397.762811][ T5901] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  397.912083][ T5901] usb 5-1: device descriptor read/64, error -71
[  398.009183][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2109'.
[  398.018747][T11700] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2109'.
[  398.173576][ T5901] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  398.237909][T11704] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2111'.
[  398.335183][ T5901] usb 5-1: device descriptor read/64, error -71
[  398.465377][ T5901] usb usb5-port1: attempt power cycle
[  398.632000][T11720] FAULT_INJECTION: forcing a failure.
[  398.632000][T11720] name failslab, interval 1, probability 0, space 0, times 0
[  398.645087][T11720] CPU: 0 UID: 0 PID: 11720 Comm: syz.5.2117 Not tainted syzkaller #0 PREEMPT(full) 
[  398.645109][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  398.645120][T11720] Call Trace:
[  398.645129][T11720]  <TASK>
[  398.645137][T11720]  dump_stack_lvl+0x189/0x250
[  398.645158][T11720]  ? __pfx____ratelimit+0x10/0x10
[  398.645185][T11720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.645213][T11720]  ? __pfx__printk+0x10/0x10
[  398.645244][T11720]  ? __pfx___might_resched+0x10/0x10
[  398.645264][T11720]  ? fs_reclaim_acquire+0x7d/0x100
[  398.645282][T11720]  should_fail_ex+0x414/0x560
[  398.645297][T11720]  should_failslab+0xa8/0x100
[  398.645311][T11720]  __kmalloc_noprof+0xcb/0x7f0
[  398.645322][T11720]  ? tomoyo_encode+0x28b/0x550
[  398.645341][T11720]  tomoyo_encode+0x28b/0x550
[  398.645359][T11720]  tomoyo_realpath_from_path+0x58d/0x5d0
[  398.645375][T11720]  ? tomoyo_domain+0xd9/0x130
[  398.645388][T11720]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  398.645401][T11720]  tomoyo_path_number_perm+0x1e8/0x5a0
[  398.645415][T11720]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  398.645449][T11720]  ? __fget_files+0x2a/0x420
[  398.645466][T11720]  ? __fget_files+0x3a0/0x420
[  398.645478][T11720]  ? __fget_files+0x2a/0x420
[  398.645494][T11720]  security_file_ioctl+0xcb/0x2d0
[  398.645507][T11720]  __se_sys_ioctl+0x47/0x170
[  398.645520][T11720]  do_syscall_64+0xfa/0xfa0
[  398.645535][T11720]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.645550][T11720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.645560][T11720]  ? clear_bhb_loop+0x60/0xb0
[  398.645573][T11720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.645583][T11720] RIP: 0033:0x7fce8138eba9
[  398.645593][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.645602][T11720] RSP: 002b:00007fce82200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  398.645615][T11720] RAX: ffffffffffffffda RBX: 00007fce815d5fa0 RCX: 00007fce8138eba9
[  398.645623][T11720] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  398.645629][T11720] RBP: 00007fce82200090 R08: 0000000000000000 R09: 0000000000000000
[  398.645635][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.645642][T11720] R13: 00007fce815d6038 R14: 00007fce815d5fa0 R15: 00007fff2a0e4f08
[  398.645659][T11720]  </TASK>
[  398.645719][T11720] ERROR: Out of memory at tomoyo_realpath_from_path.
[  398.868604][ T5901] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  398.923748][ T5901] usb 5-1: device descriptor read/8, error -71
[  399.009674][ T7889] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  399.179823][ T7889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.190063][ T7889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  399.199114][ T7889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.200027][ T5901] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  399.209800][ T7889] usb 4-1: config 0 descriptor??
[  399.224218][ T7889] pwc: Askey VC010 type 2 USB webcam detected.
[  399.242990][   T43] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  399.251584][ T5901] usb 5-1: device descriptor read/8, error -71
[  399.326986][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'.
[  399.337074][T11729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2121'.
[  399.371900][ T5901] usb usb5-port1: unable to enumerate USB device
[  399.436935][   T43] usb 6-1: config 0 has an invalid interface number: 222 but max is 0
[  399.445219][   T43] usb 6-1: config 0 has no interface number 0
[  399.454892][   T43] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  399.464087][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.472343][   T43] usb 6-1: Product: syz
[  399.476556][   T43] usb 6-1: Manufacturer: syz
[  399.481791][   T43] usb 6-1: SerialNumber: syz
[  399.489613][   T43] usb 6-1: config 0 descriptor??
[  399.599860][T11738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'.
[  399.664577][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.675614][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.684861][ T7889] pwc: recv_control_msg error -32 req 02 val 2b00
[  399.702735][ T7889] pwc: recv_control_msg error -32 req 02 val 2700
[  399.710061][ T7889] pwc: recv_control_msg error -32 req 02 val 2c00
[  399.717409][ T7889] pwc: recv_control_msg error -32 req 04 val 1000
[  399.719932][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.725197][ T7889] pwc: recv_control_msg error -32 req 04 val 1300
[  399.747915][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.764817][   T43] usb 6-1: USB disconnect, device number 71
[  399.805525][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'.
[  400.004134][ T7889] pwc: recv_control_msg error -71 req 02 val 2000
[  400.011052][ T7889] pwc: recv_control_msg error -71 req 02 val 2100
[  400.032692][ T7889] pwc: recv_control_msg error -71 req 04 val 1500
[  400.041633][ T7889] pwc: recv_control_msg error -71 req 02 val 2500
[  400.053703][ T7889] pwc: recv_control_msg error -71 req 02 val 2400
[  400.064480][ T7889] pwc: recv_control_msg error -71 req 02 val 2600
[  400.075093][ T7889] pwc: recv_control_msg error -71 req 02 val 2900
[  400.084460][ T7889] pwc: recv_control_msg error -71 req 02 val 2800
[  400.094255][ T7889] pwc: recv_control_msg error -71 req 04 val 1100
[  400.105616][ T7889] pwc: recv_control_msg error -71 req 04 val 1200
[  400.122830][ T7889] pwc: Registered as video103.
[  400.139905][ T7889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[  400.179478][ T7889] usb 4-1: USB disconnect, device number 43
[  400.332162][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'.
[  400.439079][T11769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  400.474751][T11772] can0: slcan on ttyprintk.
[  400.481701][T11772] ceph: Path missing in source
[  400.617418][T11775] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2137'.
[  400.799114][T11771] can0 (unregistered): slcan off ttyprintk.
[  400.946020][T11793] input input62: cannot allocate more than FF_MAX_EFFECTS effects
[  400.950896][T11788] FAULT_INJECTION: forcing a failure.
[  400.950896][T11788] name failslab, interval 1, probability 0, space 0, times 0
[  400.972307][T11788] CPU: 1 UID: 0 PID: 11788 Comm: syz.3.2141 Not tainted syzkaller #0 PREEMPT(full) 
[  400.972332][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  400.972345][T11788] Call Trace:
[  400.972353][T11788]  <TASK>
[  400.972362][T11788]  dump_stack_lvl+0x189/0x250
[  400.972385][T11788]  ? __pfx____ratelimit+0x10/0x10
[  400.972415][T11788]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.972435][T11788]  ? __pfx__printk+0x10/0x10
[  400.972471][T11788]  ? __pfx___might_resched+0x10/0x10
[  400.972492][T11788]  ? fs_reclaim_acquire+0x7d/0x100
[  400.972521][T11788]  should_fail_ex+0x414/0x560
[  400.972551][T11788]  should_failslab+0xa8/0x100
[  400.972577][T11788]  kmem_cache_alloc_node_noprof+0x77/0x710
[  400.972599][T11788]  ? dup_task_struct+0x52/0x830
[  400.972631][T11788]  dup_task_struct+0x52/0x830
[  400.972656][T11788]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.972689][T11788]  copy_process+0x54b/0x3c00
[  400.972744][T11788]  ? __pfx_copy_process+0x10/0x10
[  400.972782][T11788]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  400.972814][T11788]  vhost_task_create+0x1c4/0x290
[  400.972840][T11788]  ? arch_stack_walk+0xfc/0x150
[  400.972867][T11788]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  400.972897][T11788]  ? __pfx_vhost_task_create+0x10/0x10
[  400.972935][T11788]  ? __pfx_vhost_task_fn+0x10/0x10
[  400.972983][T11788]  kvm_mmu_post_init_vm+0x14c/0x300
[  400.973007][T11788]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  400.973036][T11788]  ? __mutex_trylock_common+0x153/0x260
[  400.973066][T11788]  ? __pfx___mutex_trylock_common+0x10/0x10
[  400.973093][T11788]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  400.973117][T11788]  ? rcu_is_watching+0x15/0xb0
[  400.973141][T11788]  ? trace_contention_end+0x39/0x120
[  400.973166][T11788]  ? look_up_lock_class+0x74/0x170
[  400.973197][T11788]  ? register_lock_class+0x51/0x320
[  400.973225][T11788]  ? __lock_acquire+0xab9/0xd20
[  400.973286][T11788]  kvm_vcpu_ioctl+0x95c/0xe90
[  400.973314][T11788]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  400.973358][T11788]  ? __fget_files+0x2a/0x420
[  400.973389][T11788]  ? __fget_files+0x3a0/0x420
[  400.973412][T11788]  ? __fget_files+0x2a/0x420
[  400.973442][T11788]  ? bpf_lsm_file_ioctl+0x9/0x20
[  400.973471][T11788]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  400.973490][T11788]  __se_sys_ioctl+0xfc/0x170
[  400.973513][T11788]  do_syscall_64+0xfa/0xfa0
[  400.973541][T11788]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.973570][T11788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.973589][T11788]  ? clear_bhb_loop+0x60/0xb0
[  400.973613][T11788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.973632][T11788] RIP: 0033:0x7f6096f8eba9
[  400.973650][T11788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.973668][T11788] RSP: 002b:00007f6097f00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  400.973689][T11788] RAX: ffffffffffffffda RBX: 00007f60971d5fa0 RCX: 00007f6096f8eba9
[  400.973705][T11788] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  400.973717][T11788] RBP: 00007f6097f00090 R08: 0000000000000000 R09: 0000000000000000
[  400.973730][T11788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.973742][T11788] R13: 00007f60971d6038 R14: 00007f60971d5fa0 R15: 00007ffe963e8158
[  400.973779][T11788]  </TASK>
[  401.028579][ T7889] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  401.566279][ T7889] usb 6-1: Using ep0 maxpacket: 16
[  401.575801][ T7889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  401.595944][ T7889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024
[  401.614777][ T7889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  401.638066][ T7889] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  401.681042][ T7889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.708888][ T7889] usb 6-1: config 0 descriptor??
[  401.726597][T11781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  401.734263][  T983] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  401.922976][  T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.955548][  T983] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  401.975941][  T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.002298][  T983] usb 2-1: config 0 descriptor??
[  402.013886][  T983] pwc: Askey VC010 type 2 USB webcam detected.
[  402.192885][ T7889] hid (null): unknown global tag 0xd
[  402.214474][ T7889] shield 0003:0955:7214.0038: unknown global tag 0xd
[  402.233429][ T7889] shield 0003:0955:7214.0038: item 0 0 1 13 parsing failed
[  402.242982][ T7889] shield 0003:0955:7214.0038: Parse failed
[  402.268552][ T7889] shield 0003:0955:7214.0038: probe with driver shield failed with error -22
[  402.279280][T11842] FAULT_INJECTION: forcing a failure.
[  402.279280][T11842] name failslab, interval 1, probability 0, space 0, times 0
[  402.314736][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.4.2158 Not tainted syzkaller #0 PREEMPT(full) 
[  402.314760][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  402.314772][T11842] Call Trace:
[  402.314781][T11842]  <TASK>
[  402.314793][T11842]  dump_stack_lvl+0x189/0x250
[  402.314817][T11842]  ? __pfx____ratelimit+0x10/0x10
[  402.314846][T11842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.314874][T11842]  ? __pfx__printk+0x10/0x10
[  402.314907][T11842]  ? __pfx___might_resched+0x10/0x10
[  402.314929][T11842]  ? fs_reclaim_acquire+0x7d/0x100
[  402.314959][T11842]  should_fail_ex+0x414/0x560
[  402.314989][T11842]  should_failslab+0xa8/0x100
[  402.315014][T11842]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  402.315037][T11842]  ? __get_vm_area_node+0x13f/0x300
[  402.315064][T11842]  __get_vm_area_node+0x13f/0x300
[  402.315092][T11842]  __vmalloc_node_range_noprof+0x301/0x12f0
[  402.315114][T11842]  ? copy_process+0x54b/0x3c00
[  402.315138][T11842]  ? percpu_ref_get_many+0x19/0x140
[  402.315171][T11842]  ? percpu_ref_get_many+0x19/0x140
[  402.315203][T11842]  ? __memcg_slab_post_alloc_hook+0x518/0x7d0
[  402.315230][T11842]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  402.315256][T11842]  ? memcpy_and_pad+0x48/0x80
[  402.315282][T11842]  __vmalloc_node_noprof+0xc2/0x110
[  402.315304][T11842]  ? copy_process+0x54b/0x3c00
[  402.315325][T11842]  ? copy_process+0x54b/0x3c00
[  402.315353][T11842]  dup_task_struct+0x3d5/0x830
[  402.315378][T11842]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.315411][T11842]  copy_process+0x54b/0x3c00
[  402.315468][T11842]  ? __pfx_copy_process+0x10/0x10
[  402.315505][T11842]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  402.315536][T11842]  vhost_task_create+0x1c4/0x290
[  402.315562][T11842]  ? arch_stack_walk+0xfc/0x150
[  402.315588][T11842]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  402.315620][T11842]  ? __pfx_vhost_task_create+0x10/0x10
[  402.315658][T11842]  ? __pfx_vhost_task_fn+0x10/0x10
[  402.315708][T11842]  kvm_mmu_post_init_vm+0x14c/0x300
[  402.315731][T11842]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  402.315758][T11842]  ? __mutex_trylock_common+0x153/0x260
[  402.315787][T11842]  ? __pfx___mutex_trylock_common+0x10/0x10
[  402.315813][T11842]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  402.315837][T11842]  ? rcu_is_watching+0x15/0xb0
[  402.315867][T11842]  ? trace_contention_end+0x39/0x120
[  402.315894][T11842]  ? look_up_lock_class+0x74/0x170
[  402.315925][T11842]  ? register_lock_class+0x51/0x320
[  402.315955][T11842]  ? __lock_acquire+0xab9/0xd20
[  402.316006][T11842]  kvm_vcpu_ioctl+0x95c/0xe90
[  402.316031][T11842]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  402.316074][T11842]  ? __fget_files+0x2a/0x420
[  402.316104][T11842]  ? __fget_files+0x3a0/0x420
[  402.316127][T11842]  ? __fget_files+0x2a/0x420
[  402.316156][T11842]  ? bpf_lsm_file_ioctl+0x9/0x20
[  402.316185][T11842]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  402.316205][T11842]  __se_sys_ioctl+0xfc/0x170
[  402.316229][T11842]  do_syscall_64+0xfa/0xfa0
[  402.316256][T11842]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.316285][T11842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.316304][T11842]  ? clear_bhb_loop+0x60/0xb0
[  402.316328][T11842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.316347][T11842] RIP: 0033:0x7f543018eba9
[  402.316365][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.316382][T11842] RSP: 002b:00007f5431026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.316404][T11842] RAX: ffffffffffffffda RBX: 00007f54303d5fa0 RCX: 00007f543018eba9
[  402.316417][T11842] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  402.316429][T11842] RBP: 00007f5431026090 R08: 0000000000000000 R09: 0000000000000000
[  402.316440][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.316452][T11842] R13: 00007f54303d6038 R14: 00007f54303d5fa0 R15: 00007fffbb687638
[  402.316486][T11842]  </TASK>
[  402.316519][T11842] syz.4.2158: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  402.712280][  T983] pwc: recv_control_msg error -32 req 02 val 2b00
[  402.734954][ T5901] usb 6-1: USB disconnect, device number 72
[  402.750317][T11842] ,cpuset=/,mems_allowed=0-1
[  402.754968][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.4.2158 Not tainted syzkaller #0 PREEMPT(full) 
[  402.754992][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  402.755005][T11842] Call Trace:
[  402.755013][T11842]  <TASK>
[  402.755022][T11842]  dump_stack_lvl+0x189/0x250
[  402.755049][T11842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.755069][T11842]  ? __pfx__printk+0x10/0x10
[  402.755099][T11842]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.755128][T11842]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.755158][T11842]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  402.755189][T11842]  warn_alloc+0x214/0x310
[  402.755218][T11842]  ? __pfx_warn_alloc+0x10/0x10
[  402.755251][T11842]  ? __get_vm_area_node+0x2b5/0x300
[  402.755280][T11842]  __vmalloc_node_range_noprof+0x326/0x12f0
[  402.755304][T11842]  ? percpu_ref_get_many+0x19/0x140
[  402.755333][T11842]  ? percpu_ref_get_many+0x19/0x140
[  402.755364][T11842]  ? __memcg_slab_post_alloc_hook+0x518/0x7d0
[  402.755389][T11842]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  402.755414][T11842]  ? memcpy_and_pad+0x48/0x80
[  402.755441][T11842]  __vmalloc_node_noprof+0xc2/0x110
[  402.755461][T11842]  ? copy_process+0x54b/0x3c00
[  402.755484][T11842]  ? copy_process+0x54b/0x3c00
[  402.755512][T11842]  dup_task_struct+0x3d5/0x830
[  402.755537][T11842]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.755571][T11842]  copy_process+0x54b/0x3c00
[  402.755621][T11842]  ? __pfx_copy_process+0x10/0x10
[  402.755656][T11842]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  402.755683][T11842]  vhost_task_create+0x1c4/0x290
[  402.755709][T11842]  ? arch_stack_walk+0xfc/0x150
[  402.755735][T11842]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  402.755765][T11842]  ? __pfx_vhost_task_create+0x10/0x10
[  402.755800][T11842]  ? __pfx_vhost_task_fn+0x10/0x10
[  402.755856][T11842]  kvm_mmu_post_init_vm+0x14c/0x300
[  402.755880][T11842]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  402.755908][T11842]  ? __mutex_trylock_common+0x153/0x260
[  402.755937][T11842]  ? __pfx___mutex_trylock_common+0x10/0x10
[  402.755963][T11842]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  402.755987][T11842]  ? rcu_is_watching+0x15/0xb0
[  402.756012][T11842]  ? trace_contention_end+0x39/0x120
[  402.756036][T11842]  ? look_up_lock_class+0x74/0x170
[  402.756066][T11842]  ? register_lock_class+0x51/0x320
[  402.756093][T11842]  ? __lock_acquire+0xab9/0xd20
[  402.756144][T11842]  kvm_vcpu_ioctl+0x95c/0xe90
[  402.756168][T11842]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  402.756210][T11842]  ? __fget_files+0x2a/0x420
[  402.756238][T11842]  ? __fget_files+0x3a0/0x420
[  402.756262][T11842]  ? __fget_files+0x2a/0x420
[  402.756291][T11842]  ? bpf_lsm_file_ioctl+0x9/0x20
[  402.756320][T11842]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  402.756339][T11842]  __se_sys_ioctl+0xfc/0x170
[  402.756364][T11842]  do_syscall_64+0xfa/0xfa0
[  402.756390][T11842]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.756418][T11842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.756439][T11842]  ? clear_bhb_loop+0x60/0xb0
[  402.756462][T11842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.756481][T11842] RIP: 0033:0x7f543018eba9
[  402.756499][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.756517][T11842] RSP: 002b:00007f5431026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.756537][T11842] RAX: ffffffffffffffda RBX: 00007f54303d5fa0 RCX: 00007f543018eba9
[  402.756552][T11842] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  402.756565][T11842] RBP: 00007f5431026090 R08: 0000000000000000 R09: 0000000000000000
[  402.756578][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.756590][T11842] R13: 00007f54303d6038 R14: 00007f54303d5fa0 R15: 00007fffbb687638
[  402.756626][T11842]  </TASK>
[  402.756642][T11842] Mem-Info:
[  402.765365][   T31] INFO: task syz.0.1192:9214 blocked for more than 143 seconds.
[  402.775089][  T983] pwc: recv_control_msg error -32 req 02 val 2700
[  402.853675][   T31]       Not tainted syzkaller #0
[  402.869385][T11842] active_anon:23383 inactive_anon:0 isolated_anon:0
[  402.869385][T11842]  active_file:15961 inactive_file:40082 isolated_file:0
[  402.869385][T11842]  unevictable:768 dirty:71 writeback:0
[  402.869385][T11842]  slab_reclaimable:11233 slab_unreclaimable:97080
[  402.869385][T11842]  mapped:31557 shmem:17740 pagetables:1516
[  402.869385][T11842]  sec_pagetables:0 bounce:0
[  402.869385][T11842]  kernel_misc_reclaimable:0
[  402.869385][T11842]  free:1288499 free_pcp:17515 free_cma:0
[  402.920324][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.936533][T11842] Node 0 active_anon:93132kB inactive_anon:0kB active_file:63760kB inactive_file:160132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126056kB dirty:284kB writeback:0kB shmem:69424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12800kB pagetables:5928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.955898][   T31] task:syz.0.1192      state:D
[  402.963718][T11842] Node 1 active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.966733][   T31]  stack:26952 pid:9214  tgid:9213  ppid:5861   task_flags:0x400140 flags:0x00004004
[  402.972249][  T983] pwc: recv_control_msg error -32 req 02 val 2c00
[  402.976480][   T31] Call Trace:
[  402.997128][  T983] pwc: recv_control_msg error -32 req 04 val 1000
[  403.003002][   T31]  <TASK>
[  403.021523][T11842] Node 0 
[  403.026902][   T31]  __schedule+0x1798/0x4cc0
[  403.035160][  T983] pwc: recv_control_msg error -32 req 04 val 1300
[  403.036048][   T31]  ? vfs_open+0x3b/0x340
[  403.044519][T11842] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.047594][   T31]  ? __lock_acquire+0xab9/0xd20
[  403.057065][T11842] lowmem_reserve[]:
[  403.057955][   T31]  ? __lock_acquire+0xab9/0xd20
[  403.062184][T11842]  0
[  403.082203][   T31]  ? __pfx___schedule+0x10/0x10
[  403.095000][T11842]  2495
[  403.099299][   T31]  ? schedule+0x91/0x360
[  403.108987][T11842]  2496
[  403.119667][   T31]  schedule+0x165/0x360
[  403.123391][T11842]  2496
[  403.131644][   T31]  schedule_preempt_disabled+0x13/0x30
[  403.133611][T11842]  2496
[  403.137714][   T31]  __mutex_lock+0x7e6/0x1350
[  403.211593][T11842] 
[  403.242733][   T31]  ? __mutex_lock+0x5bb/0x1350
[  403.242765][   T31]  ? bdev_open+0xe0/0xd30
[  403.254087][T11842] Node 0 
[  403.277786][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  403.277815][   T31]  ? wait_on_inode+0xc0/0x230
[  403.277858][   T31]  ? disk_block_events+0xab/0x120
[  403.277881][   T31]  ? bdev_open+0xaf/0xd30
[  403.277914][   T31]  bdev_open+0xe0/0xd30
[  403.277956][   T31]  blkdev_open+0x457/0x600
[  403.277983][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  403.278003][   T31]  do_dentry_open+0x953/0x13f0
[  403.288988][  T983] pwc: recv_control_msg error -71 req 02 val 2000
[  403.300407][   T31]  vfs_open+0x3b/0x340
[  403.309017][  T983] pwc: recv_control_msg error -71 req 02 val 2100
[  403.309641][T11842] DMA32 free:1254704kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93084kB inactive_anon:0kB active_file:63760kB inactive_file:159060kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2555356kB mlocked:0kB bounce:0kB free_pcp:38408kB local_pcp:19072kB free_cma:0kB
[  403.320567][  T983] pwc: recv_control_msg error -71 req 04 val 1500
[  403.325841][T11842] lowmem_reserve[]:
[  403.355200][   T31]  ? path_openat+0x2ecd/0x3830
[  403.375667][T11842]  0
[  403.381089][  T983] pwc: recv_control_msg error -71 req 02 val 2500
[  403.382894][T11842]  0
[  403.387997][   T31]  path_openat+0x2ee5/0x3830
[  403.389575][T11842]  1
[  403.392368][  T983] pwc: recv_control_msg error -71 req 02 val 2400
[  403.398904][T11842]  1
[  403.400748][   T31]  ? __pfx_path_openat+0x10/0x10
[  403.408164][T11842]  1
[  403.412372][  T983] pwc: recv_control_msg error -71 req 02 val 2600
[  403.449131][T11842] 
[  403.449144][T11842] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1072kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  403.449220][T11842] lowmem_reserve[]: 0 0 0 0 0
[  403.454333][   T31]  do_filp_open+0x1fa/0x410
[  403.485487][T11842] 
[  403.509182][   T31]  ? __lock_acquire+0xab9/0xd20
[  403.541485][T11842] Node 1 
[  403.542557][  T983] pwc: recv_control_msg error -71 req 02 val 2900
[  403.551882][T11842] Normal free:3883928kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32152kB local_pcp:23436kB free_cma:0kB
[  403.563583][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  403.569108][T11842] lowmem_reserve[]:
[  403.602108][  T983] pwc: recv_control_msg error -71 req 02 val 2800
[  403.603970][T11842]  0
[  403.608811][   T31]  ? _raw_spin_unlock+0x28/0x50
[  403.611769][T11842]  0
[  403.615771][  T983] pwc: recv_control_msg error -71 req 04 val 1100
[  403.622443][T11842]  0
[  403.625532][   T31]  ? alloc_fd+0x64c/0x6c0
[  403.657464][T11842]  0
[  403.662235][  T983] pwc: recv_control_msg error -71 req 04 val 1200
[  403.664310][   T31]  do_sys_openat2+0x121/0x1c0
[  403.697113][T11842]  0
[  403.699719][  T983] pwc: Registered as video103.
[  403.717145][T11842] 
[  403.717157][T11842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  403.723552][  T983] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63
[  403.753643][T11842] Node 0 DMA32: 11*4kB (ME) 268*8kB (UM) 241*16kB (UME) 195*32kB (UME) 74*64kB (UM) 51*128kB (UME) 27*256kB (M) 21*512kB (UME) 15*1024kB (UM) 5*2048kB (UM) 290*4096kB (UM) = 1254652kB
[  403.754372][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  403.784012][  T983] usb 2-1: USB disconnect, device number 36
[  403.795936][T11842] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  403.806416][   T31]  ? rcu_is_watching+0x15/0xb0
[  403.815743][   T31]  __x64_sys_openat+0x138/0x170
[  403.820715][   T31]  do_syscall_64+0xfa/0xfa0
[  403.825611][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.829917][T11842] Node 1 Normal: 208*4kB (UME) 61*8kB (UME) 43*16kB (UME) 202*32kB (UME) 70*64kB (UME) 16*128kB (UME) 5*256kB (UM) 4*512kB (ME) 3*1024kB (ME) 2*2048kB (UE) 942*4096kB (M) = 3883928kB
[  403.834425][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.859319][   T31]  ? clear_bhb_loop+0x60/0xb0
[  403.859853][T11842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.874978][T11842] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  403.876963][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.891035][   T31] RIP: 0033:0x7f48f958d510
[  403.895721][   T31] RSP: 002b:00007f48fa44fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  403.904260][   T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48f958d510
[  403.909721][T11842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.912362][   T31] RDX: 0000000000000000 RSI: 00007f48fa44fc10 RDI: 00000000ffffff9c
[  403.930053][   T31] RBP: 00007f48fa44fc10 R08: 0000000000000000 R09: 002364626e2f7665
[  403.939317][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  403.945234][T11842] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  403.952735][   T31] R13: 00007f48f97d6038 R14: 00007f48f97d5fa0 R15: 00007fff799b7f28
[  403.962876][T11842] 73776 total pagecache pages
[  403.964917][   T31]  </TASK>
[  403.969507][T11842] 0 pages in swap cache
[  403.976011][   T31] INFO: task syz.0.1192:9215 blocked for more than 144 seconds.
[  403.976598][T11842] Free swap  = 124996kB
[  403.986258][   T31]       Not tainted syzkaller #0
[  403.998327][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.007329][   T31] task:syz.0.1192      state:D stack:28296 pid:9215  tgid:9213  ppid:5861   task_flags:0x400040 flags:0x00004004
[  404.015798][T11842] Total swap = 124996kB
[  404.023561][T11842] 2097051 pages RAM
[  404.027480][   T31] Call Trace:
[  404.027480][T11842] 0 pages HighMem/MovableOnly
[  404.027493][T11842] 426314 pages reserved
[  404.030760][   T31]  <TASK>
[  404.030775][   T31]  __schedule+0x1798/0x4cc0
[  404.035784][T11842] 0 pages cma reserved
[  404.041733][   T31]  ? __mutex_trylock_common+0x153/0x260
[  404.058022][   T31]  ? __lock_acquire+0xab9/0xd20
[  404.062964][   T31]  ? __lock_acquire+0xab9/0xd20
[  404.068191][   T31]  ? __pfx___schedule+0x10/0x10
[  404.073089][   T31]  ? schedule+0x91/0x360
[  404.085138][   T31]  schedule+0x165/0x360
[  404.090137][   T31]  schedule_preempt_disabled+0x13/0x30
[  404.101533][   T31]  __mutex_lock+0x7e6/0x1350
[  404.106226][   T31]  ? __mutex_lock+0x5bb/0x1350
[  404.111484][   T31]  ? bdev_open+0xe0/0xd30
[  404.115941][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  404.121833][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  404.127507][   T31]  ? wait_on_inode+0xc0/0x230
[  404.132583][   T31]  ? disk_block_events+0xab/0x120
[  404.137618][   T31]  ? bdev_open+0xbe/0xd30
[  404.142036][   T31]  bdev_open+0xe0/0xd30
[  404.146383][   T31]  blkdev_open+0x457/0x600
[  404.151248][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  404.156322][   T31]  do_dentry_open+0x953/0x13f0
[  404.161130][   T31]  vfs_open+0x3b/0x340
[  404.165319][   T31]  ? path_openat+0x2ecd/0x3830
[  404.170199][   T31]  path_openat+0x2ee5/0x3830
[  404.175073][   T31]  ? __pfx_path_openat+0x10/0x10
[  404.180034][   T31]  do_filp_open+0x1fa/0x410
[  404.184612][   T31]  ? __lock_acquire+0xab9/0xd20
[  404.189477][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  404.194675][   T31]  ? _raw_spin_unlock+0x28/0x50
[  404.199546][   T31]  ? alloc_fd+0x64c/0x6c0
[  404.203908][   T31]  do_sys_openat2+0x121/0x1c0
[  404.208879][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  404.214571][   T31]  ? exc_page_fault+0x82/0x100
[  404.219434][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  404.224739][   T31]  __x64_sys_openat+0x138/0x170
[  404.229702][   T31]  do_syscall_64+0xfa/0xfa0
[  404.234231][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.239525][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.245600][   T31]  ? clear_bhb_loop+0x60/0xb0
[  404.250369][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.256267][   T31] RIP: 0033:0x7f48f958d510
[  404.261052][   T31] RSP: 002b:00007f48fa42eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  404.269535][   T31] RAX: ffffffffffffffda RBX: 0000000000088a83 RCX: 00007f48f958d510
[  404.277513][   T31] RDX: 0000000000088a83 RSI: 00007f48fa42ec10 RDI: 00000000ffffff9c
[  404.285547][   T31] RBP: 00007f48fa42ec10 R08: 0000000000000000 R09: 002364626e2f7665
[  404.293857][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  404.301954][   T31] R13: 00007f48f97d6128 R14: 00007f48f97d6090 R15: 00007fff799b7f28
[  404.309947][   T31]  </TASK>
[  404.313061][   T31] 
[  404.313061][   T31] Showing all locks held in the system:
[  404.358060][   T31] 1 lock held by khungtaskd/31:
[  404.362927][   T31]  #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  404.373464][   T31] 3 locks held by kworker/0:2/983:
[  404.378848][   T31]  #0: ffff8880206de548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  404.390240][   T31]  #1: ffffc90003a97ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  404.402302][   T31]  #2: ffff8880283e4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  404.411391][   T31] 2 locks held by getty/5630:
[  404.416055][   T31]  #0: ffff88814d68e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  404.425960][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  404.436295][   T31] 1 lock held by udevd/6126:
[  404.441464][   T31]  #0: ffff888143392358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  404.450818][   T31] 1 lock held by syz.0.1192/9214:
[  404.455849][   T31]  #0: ffff888143392358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  404.465212][   T31] 1 lock held by syz.0.1192/9215:
[  404.470237][   T31]  #0: ffff888143392358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  404.479869][   T31] 1 lock held by syz.4.2158/11842:
[  404.485249][   T31]  #0: ffffffff8e541ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  404.495270][   T31] 
[  404.497596][   T31] =============================================
[  404.497596][   T31] 
[  404.507101][   T31] NMI backtrace for cpu 1
[  404.507117][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  404.507139][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  404.507151][   T31] Call Trace:
[  404.507159][   T31]  <TASK>
[  404.507168][   T31]  dump_stack_lvl+0x189/0x250
[  404.507192][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.507211][   T31]  ? __pfx__printk+0x10/0x10
[  404.507252][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  404.507280][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  404.507307][   T31]  ? __pfx__printk+0x10/0x10
[  404.507340][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  404.507364][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  404.507392][   T31]  watchdog+0xf60/0xfa0
[  404.507418][   T31]  ? watchdog+0x1e2/0xfa0
[  404.507445][   T31]  kthread+0x711/0x8a0
[  404.507477][   T31]  ? __pfx_watchdog+0x10/0x10
[  404.507496][   T31]  ? __pfx_kthread+0x10/0x10
[  404.507527][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  404.507553][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.507579][   T31]  ? __pfx_kthread+0x10/0x10
[  404.507605][   T31]  ret_from_fork+0x47c/0x820
[  404.507631][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  404.507667][   T31]  ? __switch_to_asm+0x39/0x70
[  404.507688][   T31]  ? __switch_to_asm+0x33/0x70
[  404.507707][   T31]  ? __pfx_kthread+0x10/0x10
[  404.507737][   T31]  ret_from_fork_asm+0x1a/0x30
[  404.507775][   T31]  </TASK>
[  404.507783][   T31] Sending NMI from CPU 1 to CPUs 0:
[  404.655018][    C0] NMI backtrace for cpu 0
[  404.655034][    C0] CPU: 0 UID: 0 PID: 3484 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  404.655054][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  404.655078][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  404.655107][    C0] RIP: 0010:unwind_next_frame+0x1831/0x2390
[  404.655132][    C0] Code: 58 80 3c 28 00 74 05 e8 6d ef af 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 53 ef af 00 4d 8b 6e 08 <4d> 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 36
[  404.655148][    C0] RSP: 0018:ffffc9000c4d6f98 EFLAGS: 00000246
[  404.655163][    C0] RAX: 1ffff9200189ae0e RBX: ffffffff90773701 RCX: 0000000000000001
[  404.655176][    C0] RDX: ffffc9000c4d70a8 RSI: dffffc0000000000 RDI: ffffc9000c4d7070
[  404.655190][    C0] RBP: dffffc0000000000 R08: ffffc9000c4d7c50 R09: 0000000000000000
[  404.655202][    C0] R10: ffffc9000c4d70b8 R11: fffff5200189ae19 R12: ffffc9000c4d7c60
[  404.655216][    C0] R13: ffffc9000c4d0000 R14: ffffc9000c4d7068 R15: ffffffff8173fd35
[  404.655230][    C0] FS:  0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000
[  404.655245][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  404.655258][    C0] CR2: 000055f4f0796500 CR3: 000000007ad94000 CR4: 00000000003526f0
[  404.655274][    C0] Call Trace:
[  404.655280][    C0]  <TASK>
[  404.655291][    C0]  ? unwind_next_frame+0xa5/0x2390
[  404.655313][    C0]  ? process_scheduled_works+0xae1/0x17b0
[  404.655336][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  404.655362][    C0]  arch_stack_walk+0x11c/0x150
[  404.655388][    C0]  ? worker_thread+0x8a0/0xda0
[  404.655410][    C0]  stack_trace_save+0x9c/0xe0
[  404.655433][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  404.655463][    C0]  kasan_save_track+0x3e/0x80
[  404.655479][    C0]  ? kasan_save_track+0x3e/0x80
[  404.655495][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  404.655512][    C0]  ? __kmalloc_noprof+0x411/0x7f0
[  404.655529][    C0]  ? ieee802_11_parse_elems_full+0x152/0x2ab0
[  404.655553][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0
[  404.655573][    C0]  ? ieee80211_iface_work+0x85f/0x12d0
[  404.655594][    C0]  ? cfg80211_wiphy_work+0x2bb/0x470
[  404.655621][    C0]  ? process_scheduled_works+0xae1/0x17b0
[  404.655663][    C0]  __kasan_kmalloc+0x93/0xb0
[  404.655682][    C0]  __kmalloc_noprof+0x411/0x7f0
[  404.655700][    C0]  ? ieee802_11_parse_elems_full+0x152/0x2ab0
[  404.655727][    C0]  ieee802_11_parse_elems_full+0x152/0x2ab0
[  404.655751][    C0]  ? unwind_next_frame+0xa5/0x2390
[  404.655776][    C0]  ? unwind_next_frame+0xa5/0x2390
[  404.655798][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  404.655820][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  404.655844][    C0]  ? arch_stack_walk+0x11c/0x150
[  404.655869][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  404.655891][    C0]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  404.655926][    C0]  ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0
[  404.655957][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  404.655982][    C0]  ? __lock_acquire+0xab9/0xd20
[  404.656017][    C0]  ieee80211_iface_work+0x85f/0x12d0
[  404.656044][    C0]  cfg80211_wiphy_work+0x2bb/0x470
[  404.656069][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  404.656090][    C0]  process_scheduled_works+0xae1/0x17b0
[  404.656122][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  404.656150][    C0]  worker_thread+0x8a0/0xda0
[  404.656182][    C0]  kthread+0x711/0x8a0
[  404.656207][    C0]  ? __pfx_worker_thread+0x10/0x10
[  404.656227][    C0]  ? __pfx_kthread+0x10/0x10
[  404.656252][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  404.656276][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.656299][    C0]  ? __pfx_kthread+0x10/0x10
[  404.656324][    C0]  ret_from_fork+0x47c/0x820
[  404.656346][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  404.656368][    C0]  ? __switch_to_asm+0x39/0x70
[  404.656386][    C0]  ? __switch_to_asm+0x33/0x70
[  404.656402][    C0]  ? __pfx_kthread+0x10/0x10
[  404.656426][    C0]  ret_from_fork_asm+0x1a/0x30
[  404.656452][    C0]  </TASK>
[  404.658454][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  405.047865][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  405.056950][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  405.066982][   T31] Call Trace:
[  405.070241][   T31]  <TASK>
[  405.073154][   T31]  dump_stack_lvl+0x99/0x250
[  405.077725][   T31]  ? __asan_memcpy+0x40/0x70
[  405.082303][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.087486][   T31]  ? __pfx__printk+0x10/0x10
[  405.092068][   T31]  vpanic+0x237/0x6d0
[  405.096034][   T31]  ? __pfx_vpanic+0x10/0x10
[  405.100517][   T31]  ? preempt_schedule_common+0x83/0xd0
[  405.105959][   T31]  panic+0xb9/0xc0
[  405.109657][   T31]  ? __pfx_panic+0x10/0x10
[  405.114052][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  405.119406][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  405.125546][   T31]  watchdog+0xf9f/0xfa0
[  405.129689][   T31]  ? watchdog+0x1e2/0xfa0
[  405.133997][   T31]  kthread+0x711/0x8a0
[  405.138050][   T31]  ? __pfx_watchdog+0x10/0x10
[  405.142704][   T31]  ? __pfx_kthread+0x10/0x10
[  405.147274][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.152452][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.157630][   T31]  ? __pfx_kthread+0x10/0x10
[  405.162201][   T31]  ret_from_fork+0x47c/0x820
[  405.166771][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  405.171867][   T31]  ? __switch_to_asm+0x39/0x70
[  405.176609][   T31]  ? __switch_to_asm+0x33/0x70
[  405.181350][   T31]  ? __pfx_kthread+0x10/0x10
[  405.185919][   T31]  ret_from_fork_asm+0x1a/0x30
[  405.190669][   T31]  </TASK>
[  405.193924][   T31] Kernel Offset: disabled
[  405.198234][   T31] Rebooting in 86400 seconds..