last executing test programs:

2m28.524370875s ago: executing program 2 (id=1039):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0xabf34bdd027fea1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f00000000c0)=0x6)

2m28.395906652s ago: executing program 2 (id=1040):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x4, 0x84, "bb0dcc87", "9a428076"}}, 0x0}, 0x0)

2m27.781425308s ago: executing program 2 (id=1044):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'s526\x00', [0x6, 0x7, 0xd, 0x7f, 0x10002, 0x8009, 0xc, 0x2, 0x61, 0x2b, 0x6b5e, 0x2, 0x3e, 0x403, 0x800, 0x10, 0x405, 0x1a449, 0x3, 0x40400003, 0x89, 0xfffffffb, 0xa, 0x9, 0x6, 0x4, 0x2a, 0x6, 0x8, 0x8, 0x7]})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0xe, 0x4, "32be0167"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x75, {0x75, 0x11, "008b5b94891cc30fe8671d9af9ca3a923f9c041ee66200ce03cc88bff909d6bd5009b91d318c3108fda6b98c96539dfe9813c07aa0fb9cfcb3ba644b41e0db36eb2adf420d7c0ab935664bb310f496dd0a0501bca11225c0ca2821443757ede427c555f14069fa6db7262fe3c5e7b348b01b6a"}}, &(0x7f0000000240)={0x0, 0x3, 0x89, @string={0x89, 0x3, "1472a4463f618f86756bcf3bc2340e20b8b21653b4100cb7658b210136cb48f8ee14a4eaa32d24a9267f5f4d10c70cd6f2886bc1e911eda72e726d97e308539f0cdb4770fcb3e27c89c3440deb87f3b8500d7cc6bd8407ec4c106c951b5de0af3a62b33b32b926d99e3a8a7a41840342d15e35ac2879487023c3cdff70d25ffb1f649978dc049b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x15, 0x45, "43c08080d6856d300ac12016449967e7c7db66b0061db47e4075fdf1aae1f0a293ebf18b9460d8b551c365619f4779fab26e498dd44e022115896e9c329cbc473c9c7e20b5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x81, 0x2, '=\v'}, &(0x7f0000000480)={0x20, 0x82, 0x3, "1afac8"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "9f5002"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "311d9943"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "b37d20"}})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xff, 0xff}}}}}]}}]}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r2)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2m27.119785162s ago: executing program 2 (id=1049):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (fail_nth: 31)

2m26.967829737s ago: executing program 2 (id=1052):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010040000000000000000a"], 0x30}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x94, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x44001}}], 0x1, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c0000000906010110000000000000000a0000085c0008800c00078005000700880000000c000780050003005a0000001c0007801800018014000240000000000000000000000000000000000c00078008000b400000000b0c00078005001500080000000c000780060004404e2200002c000880100007800900120073797a05000000000c000780080006400000e5750c000780a4d40540ce210000"], 0x9c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x80800)
setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000240)=0x825f, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200080, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f74066030940e00ed0000a35b878f7cbaf280917ac54f56435f855c30303e00006136303035002c757365725f69643d395bd5101919", @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',default_permissions,allow_other,allow_other,default_permissions,dont_appraise,\x00'])
ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f00000004c0)={0x0, 0x1, 0x8, 0x6, 0x410c, 0x2})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000000)=r1)

2m26.63275886s ago: executing program 2 (id=1054):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @mpls={[{0x6, 0x0, 0x1}, {0x7}, {0x7, 0x0, 0x1}], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x64)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

2m11.324212461s ago: executing program 32 (id=1054):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @mpls={[{0x6, 0x0, 0x1}, {0x7}, {0x7, 0x0, 0x1}], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x64)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

2m8.679891092s ago: executing program 1 (id=1121):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000020)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4109, 0x100d)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={<r1=>0x0, 0x3}, &(0x7f0000000180)=0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x6b}, 0x8)

2m8.582487032s ago: executing program 1 (id=1123):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xf}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

2m8.530984983s ago: executing program 1 (id=1124):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0xffffffff}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x80, {0x6, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xf, 0x0, 0x8, 0xffffffff, 0x82c, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x40, 0x4000003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_perm_addr})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4001040000299301596a"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0x5, 0x4, "edde24dc"}, 0x0, 0x0})
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010000004082059a0040000102030109021f0001010390e60904000001010320cd09050903ff0302270504258100"], 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f00000010c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a90500000000746400010053469a680000e5c064", 0x14}], 0x1}}], 0x1, 0x44884)
ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f00000007c0))

2m5.12631808s ago: executing program 1 (id=1126):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2310c1b, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000800)="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", 0xa81}], 0x1, 0x0, 0x0, 0x4040000}, 0x4044054)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0xc010)
shutdown(r7, 0x1)
getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
write$apparmor_exec(r6, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002600)={0x0, &(0x7f00000022c0)=[@code={0xa, 0xa4, {"48b800000000010000000f23d80f21f835400000000f23f8440f20c0350f000000440f22c00f20d835200000000f22d8b8010000000f01c1c7442400c0000000c744240200000000ff1c24460f21cb48b800000000008000000f23c00f21f835020004000f23f8c4427922b31dfe0000c7442400a6000000c74424025b000000c7442406000000000f011c24b9f60900000f32"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x3ff, 0x894, 0x1, 0x9717}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2, 0x3, 0x200, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x79, 0x3, 0xb8c4, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xfccc, 0x4, 0x2}}, @in_dx={0x69, 0x20, {0xb0c0, 0x1}}, @nested_load_syzos={0x136, 0xa8, {0x2, 0x2, [@nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x230, 0xa0e7}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xec, 0x6, 0x90, 0x1}}]}}, @wr_drn={0x68, 0x20, {0x2, 0x43d}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x7b28, 0x3, 0xffffffffffffffff}}, @nested_vmresume={0x130, 0x18}], 0x30c})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2125088, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000080)='\x00\x00\x00X', 0x4}, {&(0x7f0000000740)="cc53", 0x2}], 0x3)

2m4.105665372s ago: executing program 1 (id=1131):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x41000000)

2m3.393098504s ago: executing program 1 (id=1133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc14f500004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m2.848218772s ago: executing program 33 (id=1133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc14f500004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

6.515684481s ago: executing program 3 (id=1727):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x5, 0x4)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf})
syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000180)=0x8000)

5.837506621s ago: executing program 3 (id=1733):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x40, 0x3, 0x8, 0x8, 0x3fd, "aa00000000000000001000", "70c61e30", "00036700", "9eb8014c", ["ca8f0bb3cc011df0709091ac", "dfb69244f60e7039ec5717b1", "08d2449e16ee22f6557f62ac", "470bf631e12ed6432e1d2745"]})

5.700285498s ago: executing program 3 (id=1734):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, 0x0, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0000101, 0x0, 0x800005}]})
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

5.618368248s ago: executing program 3 (id=1735):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xfe, 0xfb}, {0xb, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xff, 0x14, 0x20, 0x0, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffffd8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.291628205s ago: executing program 3 (id=1738):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.197930756s ago: executing program 3 (id=1740):
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0x1, 0x48799ed0e120a0f7})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r3, 0x0, &(0x7f0000000080)={0x3c, 0xe56, 0xb716}, 0x0)
waitid$P_PIDFD(0x3, r3, 0x0, 0x8, &(0x7f0000000240))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000005, 0x8, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x6, 0xa04d, 0x5, 0xc00000, 0x3, 0xa], 0x10000, 0x212})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$igmp(0x2, 0x3, 0x2)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000100)=0x1)
socket$l2tp6(0xa, 0x2, 0x73)
close(0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x1000, 0x4)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x4000, r7})
syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a, r8}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

4.684491605s ago: executing program 0 (id=1742):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="66baf80cb82616ff8aef66bafc0c66b8080066ef2e36430f78f80f32c4a1a564660000617b2c06b8010000000f01c144a70f011c132e0f01c5420fe96ec6", 0x3e}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x33, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}})
ioctl$KVM_RUN(r2, 0xae80, 0x11000000)

3.72548653s ago: executing program 0 (id=1750):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1100}]}}}], 0x18}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
accept(0xffffffffffffffff, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000380)=0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0x8, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x9, 0x7c25, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x40, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0x4000a8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0xfffffffc, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x7, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0xfffffffd, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0x4b564d01, 0x1bf7}}], 0x20})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x300000000000000)

3.22317971s ago: executing program 5 (id=1744):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28a02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x15, 0x0, 0x2, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x2, 0xcaa})

2.923744363s ago: executing program 5 (id=1745):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r2, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x337, 0xc000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x5000000})

2.812169786s ago: executing program 5 (id=1746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x21, 0x0, 0xe703}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000040)

2.722927911s ago: executing program 5 (id=1747):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r1=>0x0, 0x3, 0x5}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r1, 0x1ff}, 0x8)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000400000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0)

2.591744397s ago: executing program 0 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c00)={0xb8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x46, 0xf, [@tim={0x5, 0x3, {0x7, 0x4, 0x24}}, @random={0x1, 0x3b, "841bb5deded8e4401d1feeeaed09a759d78ab4ab5a9450214d628352a2f0f3980e3a3d98624e30a98403f1936ed3a10f7e71c3974682b96f65d67a"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb8}, 0x1, 0x1000000}, 0x0)

2.537918895s ago: executing program 0 (id=1749):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e)
r2 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x40)
ptrace(0x4207, r2)
ptrace(0x4208, r2)
ptrace(0x4207, r2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {<r3=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
getgroups(0x6, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xee01, <r4=>0xee00, 0x0, 0x0])
r5 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000d00)=0xe8)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r8, r8)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r9, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4)
fcntl$getownex(r0, 0x10, &(0x7f0000000d40)={0x0, <r10=>0x0})
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r11, &(0x7f0000008340)={0x2020, 0x0, 0x0, <r12=>0x0}, 0x2020)
syz_fuse_handle_req(r11, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0xffffffffffffffff, {0x3, 0x3, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0xe, r12, 0x0, 0xc000, '\x00', 0x9, 0x81, 0x1, 0x3, {0x1, 0x400006}, {0x4000000000006, 0xb}, {0x2000001, 0xc}, {0x4, 0xa00}, 0x2, 0x3, 0xffc, 0x3}}}})
r13 = getgid()
r14 = accept$inet6(0xffffffffffffffff, &(0x7f0000000d80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000dc0)=0x1c)
r15 = fcntl$getown(r0, 0x9)
r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r16, &(0x7f000000a400)={0x2020, 0x0, 0x0, <r17=>0x0}, 0x2020)
syz_fuse_handle_req(r16, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x3, 0x1, 0x0, 0x3, 0xffffffff, 0x0, {0x5, 0x6, 0x6, 0x40000000006, 0xffffffffffffffff, 0x2006, 0x0, 0x290, 0xfffffffc, 0x2000, 0x2, r17, 0x0, 0x104, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(r1, &(0x7f0000000e80)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)="260bee1d4298bc378d66ecdf6954f9131174e00b9b74f866", 0x18}, {&(0x7f0000000300)="81b5484b4c577539aa0cbc55460c497b00a815fb08d6bd7b4956e6a3c4300a83f2023a4708f95991fa7b0dd16bd56b91e4ab4b0f9e1f5d2568fe9c8184e019327825f5cb93ab56f07dc591de9d749dd1f43f4f245e79193e322c32f734a1fb60eb87b655f454acd2e03e6cff9c83517ce05aeba1a372a906f5c998842dd6b51a219a2ab7b806d82feb918cf78f3e3dfa04bb1e55d373be739408f2ee159ff59d5f5ea8542f1428aad279439863cb90f068912fddb5169f220332f7a77bdb8ce5f49b373749080a2d8c9108", 0xcb}, {&(0x7f0000000400)="28eb2975fc08400815e1d61b6151ac99e18b8e4091cfa91e7febf93d149f718ee3f1928e2729d3a5ad577b5fba", 0x2d}, {&(0x7f0000000440)="c567ccbd4618f8a9212ad6cc01aaa93263b189a986cd3e12e9a85ac96e3d965123dca08ddfb120b9dc31e43d37e2053e28fd0d08f9cb1d9a59c5501a7b8ca5a78e6e06b5498d3f223c28d08da6f775ed871a7c14017cad99af98abd27a4370", 0x5f}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x20000000}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)="89b91b0794b0a794011641df6bda977e3df7e76a61e2082b81c1d2ca162741b50674a99f414ed380586f4965790023a65f", 0x31}, {&(0x7f00000006c0)="db276b82e6829d4203e1b81e281a4f70c1a2c75b611fd0aee106f1d841e4926512bd40f59996f16a1d9d7bfa40c7a9a10f0e8ac89021510737fefe2a9d1c496a8afa0ad685259e8b9515fbeff7ee2682649965ae8edadf28b788fe2de86efd3760049ddd266b5f7b5b4b92064474a36c4b9c24eb2952bf3764cc8718869efb192d1081a0449b559910e1143a7056a9ecf784ce47d3e6d7bcf6610088544e89ab3f045c86787f7a3e2c8eb86e166e137ebf60b33ddafc484056aa22a9dc2f6ad533afde052df73561fab30c9be4bd9e1973673a5d6ade165c0bd3a6e44a23bc6703", 0xe1}, {&(0x7f00000007c0)="2864e4a6f82e4de8353855a9ec5d5ebbdf4df61197f755c2e1cd640389d680030c2cf07d0f6026984ae5d36e4bfd87921c72a455801db8213269a52495ba5b1729b397b52438a6ab844c7ab93d695f6b8e", 0x51}, {&(0x7f0000000840)="900e342e6ae0", 0x6}, {&(0x7f0000000880)="4e26d5d9bcbeaa68b3cdfe418bae1239c80d28bbc622a11a1041ffdcb298b4ce04422cd2f273a28f168487a9e22e0802be6c3629467edd0950ae6fbe80ca8bbf9c8d79d30e618cee4d998143492a7c3993f3997d477809554f104f751e9a196db07f1f4e2667021be1166b16d8fac3", 0x6f}, {&(0x7f0000000900)="30d6a68e3f9ce00d78707463411bfa5547e0077237709b69a30df62d357ca1cf36ded3a3f9289747bcbea9a30f7336e6617f539b231d82fb501a6277e255dc4a6a97ae08b5b1564a72b27eb204197c23493ec16f7e12e3688e1219324f45c3851e5ce58036985195fb4e35d273737666c37a9cca0a02d94f42da4e7039d43d4f5c2d6a930390bcb7e4a36bb6dc9b4594e12c6077d72dd2c33aa2147fe0ec43ce7f45232237aa8c5a2d2b266c8a3aa54af4aa58082683d22e6a192c235a57955fa34ca2a054a881efc66b3b4741c643b306cd1ab19c7a844bee376821d99a4a651d9a2416988bec78369d8cb3b576436978bf1bd20e1f", 0xf6}, {&(0x7f0000000a00)="3d9ba0ffb2d35e", 0x7}, {&(0x7f0000000a40)="4e1f8a190efed914105ac70ca61d9b3622ea8b2fe751ed14e1afde3fe67e99a03ed703f7b3f042080f5b46fd4214", 0x2e}], 0x8, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="417eb947571092841e0a509ea30db6e7b162c2e912ed35446ac461e0c6fc7265ccb9fd458602c629358d45bd7cee66fe24c8b31691467ae9a4ec79b9ec4f45dbaed4d1a191f9d6dea9bd9a6597b57493218f78c112118b31dda4ec1df815a23afa01742e22710fcf8395a508061708b66c46dbab36a03297d124a412ff95b887c13867664ead89443bf361d4be51b915b2ac89", 0x93}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}], 0x78}}], 0x3, 0x40)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040)

2.271717026s ago: executing program 5 (id=1752):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r0, &(0x7f0000000000)="1546b2000000002000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0, 0x5})

2.214022531s ago: executing program 5 (id=1753):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x5, 0x4, {0x4, 0x1, "c0d5"}}, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e00)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.820607664s ago: executing program 4 (id=1754):
io_setup(0x5, &(0x7f0000000100)=<r0=>0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/config\x00') (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
io_submit(r0, 0x4, &(0x7f0000000480)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8, r3, 0x0, 0x0, 0xe8e6, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x100, r2, &(0x7f00000001c0)="2378ba024047be51094030c4506ab808", 0x10, 0x6, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f00000002c0)="c2e195065bc7c821aabbeba17d0e7152e59d83c8cd1daaf3efedace9502764697e51e2941671478b41c0a51b805aed81705f16f5d22137ed9735e4d0ae8019e9fc60785c0dddeec7a665eaafee4f485b9aa8edc567a03aae79395a33542b06017d0b5ee29fea0323546f4d", 0x6b, 0x5, 0x0, 0x7, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x200, r4, &(0x7f0000000400)="419a62720ccbf35e04a56453a9a38a867203c4a190d2f0c1e144d9f018f3", 0x1e, 0xd69, 0x0, 0x1, r2}]) (async, rerun: 32)
r5 = socket(0xa, 0x3, 0xff) (rerun: 32)
setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000140)=0xf8, 0x4) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64)
r6 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x80)
ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f00000016c0)={0x15, &(0x7f0000000380)=[{0x2c, '\x00', @buffer={"b48b7d503f76e799be8974c2c73ffcdfda9a8a8cb79235fbf5f960de73a432ce", 0x20}, 0x2}]}) (async, rerun: 64)
r7 = socket(0xa, 0x3, 0xff) (rerun: 64)
setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 64)
sendto$inet6(r7, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) (async, rerun: 64)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) (async)
recvmmsg(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r9, 0xc0506107, &(0x7f0000000100)) (async)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1.531840193s ago: executing program 0 (id=1755):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x181040, 0x2a)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)={0x200000, 0x0, 0x8}, 0x18)
r1 = openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x40442, 0xd1)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, &(0x7f0000002240)="2d12", 0x2, 0x4004085, 0x0, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080029bd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b003e000000080001007063690011000200303030303a30303a31302e300000000008000b0009000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x808)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x14, r7, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x8000)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r2], 0x24}}, 0x884)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="7641be778d6400222d553342b17882aaa7b0dbfe2a87d05f1d5abdaa4929be8081429b7966eb3c9cbae6085f909c29fff6cfcb2a63d021a7c30b1a7a1f04db7b1493654044fff888ee8882aa9010af5b402a3822d20d9535cbee0660766f", @ANYRES32=r5, @ANYRESHEX=r5], 0x103c}, 0x1, 0x0, 0x0, 0x29014}, 0x800)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40", 0x19}], 0x1)
sendmsg$nl_generic(r3, 0x0, 0x20000000)

1.206446814s ago: executing program 4 (id=1756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x300, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)

1.131959218s ago: executing program 4 (id=1757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 15)
setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)

943.893282ms ago: executing program 4 (id=1758):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x3, 0x1, 0xa}}}, 0x7)

898.363435ms ago: executing program 4 (id=1759):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x13, r3, 0x0, r2})
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080))
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', <r7=>0x0, 0x700, 0x7800, 0x86f, 0x37, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x67, 0x0, 0x88, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@noop, @ra={0x94, 0x4}, @noop, @noop, @generic={0x94, 0x8, "7ff900814beb"}]}}}}})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r10, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r14=>0x0, 0x700, 0x40, 0xbc1a, 0x101, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0xa1, [@multicast2, @empty]}, @generic={0x89, 0xb, "c40df69aa0852f623b"}, @end, @cipso={0x86, 0x4f, 0x3, [{0x7, 0x11, "547b92b6011be7e15334e320d66027"}, {0x6, 0x6, "bcba069d"}, {0x2, 0xf, "1bca1b8fda06888bff1efa7232"}, {0x0, 0x9, "535cf3ea5d5688"}, {0x2, 0x2}, {0x1, 0xe, "ee9ce8be5c63af88f20943b7"}, {0x7, 0xa, "0404b9419abe45d3"}]}, @rr={0x7, 0x13, 0xfe, [@multicast1, @remote, @private=0xa010101, @empty]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040011}, 0x20048003)

492.944113ms ago: executing program 4 (id=1760):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000240)=""/166, &(0x7f0000000300)=0xa6)
connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x3}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4f21, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
shutdown(r4, 0x2)
splice(r4, 0x0, r3, 0x0, 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 0 (id=1761):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d40102030109021200010c0190060904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0})
r1 = socket$alg(0x26, 0x5, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000780)={0x14, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000740)={0x0, 0x3, 0xffffffffffffffba, @string={0x6, 0x3, "639e18b1"}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000240)={0x20, 0x2e, 0x88, "e12bed2b1d9d02aef337c9f42c76620c68612fc3c8972cc100de8d5a334d943f0a8ca58807a4b81d7a497a495df111f9056a311f63a7ecfcf8d227defdf94e91394372f028caca0b4df42f114cd66c03b76584d6fe2aaf989e8dee110e992a67cef676677668185f1069f88dfc5de1ab15b7948fb283c3e087aeae3e7122d689d2765acfb7eb2528"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0})
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r2, &(0x7f0000000000)=""/80, 0x50)
getdents(r2, &(0x7f0000000200)=""/251, 0xfb)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r5, 0x8918, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x808)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0x0, "3258ae1e10006c5d354000"})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="38c9", 0x2}], 0x1)
write$cgroup_int(r2, &(0x7f00000001c0)=0x400, 0x12)
syz_usb_control_io$hid(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  353.481855][T10600] Call Trace:
[  353.481860][T10600]  <TASK>
[  353.481868][T10600]  dump_stack_lvl+0xe8/0x150
[  353.481886][T10600]  should_fail_ex+0x46b/0x600
[  353.481904][T10600]  should_failslab+0xa8/0x100
[  353.481921][T10600]  __kmalloc_cache_noprof+0x84/0x690
[  353.481937][T10600]  ? ovl_init_fs_context+0x13c/0x570
[  353.481952][T10600]  ovl_init_fs_context+0x13c/0x570
[  353.481967][T10600]  alloc_fs_context+0x9d5/0xd50
[  353.481987][T10600]  do_new_mount+0x187/0xd30
[  353.481998][T10600]  ? apparmor_capable+0x126/0x170
[  353.482014][T10600]  ? security_capable+0x7e/0x2c0
[  353.482031][T10600]  ? __pfx_do_new_mount+0x10/0x10
[  353.482043][T10600]  ? ns_capable+0x89/0xe0
[  353.482055][T10600]  ? path_mount+0x690/0x10e0
[  353.482066][T10600]  ? user_path_at+0xd4/0x160
[  353.482082][T10600]  ? user_path_at+0xd4/0x160
[  353.482096][T10600]  __se_sys_mount+0x31d/0x420
[  353.482111][T10600]  ? __pfx___se_sys_mount+0x10/0x10
[  353.482133][T10600]  ? __x64_sys_mount+0x20/0xc0
[  353.482144][T10600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.482156][T10600]  do_syscall_64+0x15f/0xf80
[  353.482171][T10600]  ? trace_irq_disable+0x3b/0x140
[  353.482184][T10600]  ? clear_bhb_loop+0x40/0x90
[  353.482197][T10600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.482208][T10600] RIP: 0033:0x7fa8cbaac819
[  353.482219][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.482228][T10600] RSP: 002b:00007fa8c9cfe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  353.482241][T10600] RAX: ffffffffffffffda RBX: 00007fa8cbd25fa0 RCX: 00007fa8cbaac819
[  353.482249][T10600] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000
[  353.482256][T10600] RBP: 00007fa8c9cfe090 R08: 0000200000000200 R09: 0000000000000000
[  353.482263][T10600] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000002
[  353.482270][T10600] R13: 00007fa8cbd26038 R14: 00007fa8cbd25fa0 R15: 00007ffc0e31edf8
[  353.482286][T10600]  </TASK>
[  353.654110][T10573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  353.654287][T10573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  354.082679][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.094140][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.702891][ T8127] cdc_subset 6-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 7e:44:d4:c9:50:79
[  354.825155][T10614] netlink: 'syz.3.1427': attribute type 83 has an invalid length.
[  355.656177][  T818] usb 6-1: USB disconnect, device number 8
[  355.759796][  T818] cdc_subset 6-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device
[  356.426838][T10632] netlink: 'syz.5.1429': attribute type 29 has an invalid length.
[  356.474301][ T8127] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  356.600658][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2023
[  356.607583][T10643] netlink: 'syz.5.1432': attribute type 29 has an invalid length.
[  356.607603][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1432'.
[  356.646344][ T8127] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  356.646372][ T8127] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  356.646392][ T8127] usb 5-1: Manufacturer: syz
[  356.666885][T10647] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1432'.
[  356.690594][ T8127] usb 5-1: config 0 descriptor??
[  356.929676][ T8127] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  356.987155][ T8127] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  357.018628][ T8127] usb 5-1: USB disconnect, device number 23
[  357.113348][ T5811] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  357.233414][   T32] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  357.338393][ T5811] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  357.338425][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.338447][ T5811] usb 6-1: Product: syz
[  357.338461][ T5811] usb 6-1: Manufacturer: syz
[  357.338475][ T5811] usb 6-1: SerialNumber: syz
[  357.410782][   T32] usb 1-1: Using ep0 maxpacket: 8
[  357.421053][   T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  357.421083][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.421103][   T32] usb 1-1: Product: syz
[  357.421117][   T32] usb 1-1: Manufacturer: syz
[  357.421131][   T32] usb 1-1: SerialNumber: syz
[  357.429884][   T32] usb 1-1: config 0 descriptor??
[  357.778106][   T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  357.809600][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  357.809660][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  357.979779][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.991956][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.005401][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.020869][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.032063][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.048186][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.063535][ T8127] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  358.237813][ T8127] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  358.237840][ T8127] usb 5-1: config 1 has no interface number 0
[  358.238093][ T8127] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  358.238122][ T8127] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  358.238143][ T8127] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.259696][ T8127] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  358.259724][ T8127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.259744][ T8127] usb 5-1: Product: syz
[  358.260185][ T8127] usb 5-1: Manufacturer: syz
[  358.260201][ T8127] usb 5-1: SerialNumber: syz
[  358.293285][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.296490][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.303675][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.311628][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.392671][T10670] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  358.604587][T10670] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  358.629430][T10675] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1440'.
[  358.769336][   T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  358.787948][   T32] usb 1-1: USB disconnect, device number 88
[  358.806607][ T8127] usb 5-1: Incompatible driver and firmware versions
[  359.050722][T10682] : entered promiscuous mode
[  359.583382][   T32] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  359.958595][   T32] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  359.958625][   T32] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  359.958645][   T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  359.958693][   T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  359.958719][   T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  359.962843][   T32] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  359.962870][   T32] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  359.962890][   T32] usb 1-1: Product: syz
[  359.962906][   T32] usb 1-1: Manufacturer: syz
[  360.103265][   T32] cdc_wdm 1-1:1.0: skipping garbage
[  360.103286][   T32] cdc_wdm 1-1:1.0: skipping garbage
[  360.176620][   T32] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  360.176643][   T32] cdc_wdm 1-1:1.0: Unknown control protocol
[  360.497511][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  360.537169][   T32] usb 1-1: USB disconnect, device number 89
[  361.340860][   T32] usb 5-1: USB disconnect, device number 24
[  362.042177][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.042764][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.051867][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO
[  362.052347][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  362.052815][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  362.052866][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  362.054032][ T5811] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  362.292407][ T5811] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  362.343244][ T5811] usb 6-1: USB disconnect, device number 9
[  362.563395][ T8127] usb 1-1: new low-speed USB device number 90 using dummy_hcd
[  362.867622][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  362.867664][ T8127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  362.867706][ T8127] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  362.867729][ T8127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.920191][ T8127] usb 1-1: config 0 descriptor??
[  362.977578][ T5140] Bluetooth: hci3: Malformed LE Event: 0x0b
[  363.253417][  T818] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  363.331268][ T8127] kye 0003:0458:5005.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  363.332026][ T8127] hid_parser_main: 28 callbacks suppressed
[  363.332043][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332073][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332101][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332128][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332153][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332180][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332208][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332235][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332260][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.332285][ T8127] kye 0003:0458:5005.000E: unknown main item tag 0x0
[  363.419632][  T818] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  363.419665][  T818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64
[  363.419703][  T818] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  363.419727][  T818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.423454][   T32] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  363.474390][ T8127] kye 0003:0458:5005.000E: hidraw0: USB HID v0.0b Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0
[  363.474423][ T8127] kye 0003:0458:5005.000E: tablet-enabling feature report not found
[  363.474439][ T8127] kye 0003:0458:5005.000E: tablet enabling failed
[  363.509784][  T818] usb 5-1: config 0 descriptor??
[  363.560158][ T5830] usb 1-1: USB disconnect, device number 90
[  363.579030][   T32] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  363.579047][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.579058][   T32] usb 6-1: Product: syz
[  363.579066][   T32] usb 6-1: Manufacturer: syz
[  363.579074][   T32] usb 6-1: SerialNumber: syz
[  363.723439][  T818] ath6kl: Failed to submit usb control message: -71
[  363.723563][  T818] ath6kl: unable to send the bmi data to the device: -71
[  363.723588][  T818] ath6kl: Unable to send get target info: -71
[  363.786415][  T818] ath6kl: Failed to init ath6kl core: -71
[  363.789476][  T818] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  363.827549][  T818] usb 5-1: USB disconnect, device number 25
[  364.062300][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  364.062355][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  364.087451][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'.
[  364.226128][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.227197][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.609705][ T5830] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[  364.767537][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short
[  364.768045][ T5830] usb 1-1: not running at top speed; connect to a high speed hub
[  364.769209][ T5830] usb 1-1: config 61 has an invalid interface number: 37 but max is 0
[  364.769233][ T5830] usb 1-1: config 61 has no interface number 0
[  364.769251][ T5830] usb 1-1: config 61 interface 37 has no altsetting 0
[  364.773085][ T5830] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  364.773102][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.773113][ T5830] usb 1-1: Product: syz
[  364.773121][ T5830] usb 1-1: Manufacturer: syz
[  364.775732][ T5830] usb 1-1: SerialNumber: syz
[  365.100217][ T5830] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  365.102824][ T5830] gp8psk: usb in 128 operation failed.
[  365.104146][ T5830] gp8psk: usb in 137 operation failed.
[  365.104162][ T5830] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  365.104199][ T5830] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  365.151618][ T5830] usb 1-1: USB disconnect, device number 91
[  365.219905][T10744] netlink: 'syz.0.1466': attribute type 10 has an invalid length.
[  365.224734][T10744] netlink: 'syz.0.1466': attribute type 21 has an invalid length.
[  365.225159][T10744] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1466'.
[  365.225195][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'.
[  365.593406][ T5830] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  365.700740][T10751] FAULT_INJECTION: forcing a failure.
[  365.700740][T10751] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  365.700782][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.3.1468 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  365.700808][T10751] Tainted: [L]=SOFTLOCKUP
[  365.700816][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.700831][T10751] Call Trace:
[  365.700839][T10751]  <TASK>
[  365.700849][T10751]  dump_stack_lvl+0xe8/0x150
[  365.700877][T10751]  should_fail_ex+0x46b/0x600
[  365.700904][T10751]  prepare_alloc_pages+0x22a/0x6b0
[  365.700941][T10751]  __alloc_frozen_pages_noprof+0x12f/0x380
[  365.700973][T10751]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  365.701002][T10751]  ? __alloc_frozen_pages_noprof+0x1de/0x380
[  365.701034][T10751]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  365.701068][T10751]  ? __pfx_policy_nodemask+0x10/0x10
[  365.701101][T10751]  __alloc_pages_noprof+0x10/0x100
[  365.701131][T10751]  alloc_pages_bulk_noprof+0x6c0/0x8c0
[  365.701167][T10751]  ? alloc_pages_noprof+0x161/0x2f0
[  365.701201][T10751]  __kasan_populate_vmalloc+0xc1/0x1d0
[  365.701230][T10751]  ? rt_spin_unlock+0x160/0x200
[  365.701253][T10751]  alloc_vmap_area+0xd47/0x1480
[  365.701290][T10751]  ? __pfx_alloc_vmap_area+0x10/0x10
[  365.701317][T10751]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  365.701344][T10751]  ? __get_vm_area_node+0x171/0x350
[  365.701366][T10751]  ? copy_process+0x89b/0x4460
[  365.701386][T10751]  __get_vm_area_node+0x226/0x350
[  365.701414][T10751]  __vmalloc_node_range_noprof+0x36a/0x1750
[  365.701439][T10751]  ? copy_process+0x89b/0x4460
[  365.701456][T10751]  ? percpu_ref_get_many+0x19/0x140
[  365.701521][T10751]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.701551][T10751]  ? rcu_is_watching+0x15/0xb0
[  365.701577][T10751]  ? memcpy_and_pad+0x48/0x80
[  365.701607][T10751]  __vmalloc_node_noprof+0xc2/0x100
[  365.701632][T10751]  ? copy_process+0x89b/0x4460
[  365.701650][T10751]  ? copy_process+0x89b/0x4460
[  365.701672][T10751]  dup_task_struct+0x298/0x840
[  365.701691][T10751]  ? rt_spin_unlock+0x160/0x200
[  365.701713][T10751]  copy_process+0x89b/0x4460
[  365.701763][T10751]  ? __pfx_copy_process+0x10/0x10
[  365.701795][T10751]  vhost_task_create+0x1f9/0x380
[  365.701822][T10751]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  365.701848][T10751]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  365.701873][T10751]  ? __pfx_vhost_task_create+0x10/0x10
[  365.701906][T10751]  ? __pfx_vhost_task_fn+0x10/0x10
[  365.701935][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.701961][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.701987][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.702012][T10751]  ? mutex_lock_nested+0x152/0x1d0
[  365.702031][T10751]  ? kvm_mmu_post_init_vm+0x8f/0x2d0
[  365.702062][T10751]  kvm_mmu_post_init_vm+0x147/0x2d0
[  365.702091][T10751]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  365.702137][T10751]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  365.702169][T10751]  ? do_raw_spin_lock+0x12b/0x2f0
[  365.702202][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.702226][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.702250][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.702275][T10751]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  365.702302][T10751]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  365.702324][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.702350][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.702374][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.702399][T10751]  ? rt_write_unlock+0x190/0x230
[  365.702423][T10751]  kvm_vcpu_ioctl+0xa65/0xfe0
[  365.702455][T10751]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.702508][T10751]  ? __fget_files+0x2a/0x420
[  365.702533][T10751]  ? __fget_files+0x2a/0x420
[  365.702555][T10751]  ? __fget_files+0x3a6/0x420
[  365.702576][T10751]  ? __fget_files+0x2a/0x420
[  365.702601][T10751]  ? bpf_lsm_file_ioctl+0x9/0x20
[  365.702624][T10751]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.702649][T10751]  __se_sys_ioctl+0xff/0x170
[  365.702677][T10751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.702698][T10751]  do_syscall_64+0x15f/0xf80
[  365.702723][T10751]  ? trace_irq_disable+0x3b/0x140
[  365.702744][T10751]  ? clear_bhb_loop+0x40/0x90
[  365.702769][T10751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.702794][T10751] RIP: 0033:0x7f80d173c819
[  365.702813][T10751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.702830][T10751] RSP: 002b:00007f80cf96d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.702851][T10751] RAX: ffffffffffffffda RBX: 00007f80d19b6090 RCX: 00007f80d173c819
[  365.702865][T10751] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  365.702878][T10751] RBP: 00007f80cf96d090 R08: 0000000000000000 R09: 0000000000000000
[  365.702890][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.702902][T10751] R13: 00007f80d19b6128 R14: 00007f80d19b6090 R15: 00007ffce7ca1408
[  365.702934][T10751]  </TASK>
[  365.746628][ T5830] usb 1-1: Using ep0 maxpacket: 32
[  365.751198][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short
[  365.756194][ T5830] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7
[  365.777071][ T5830] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  365.777099][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.777172][ T5830] usb 1-1: Product: syz
[  365.777187][ T5830] usb 1-1: Manufacturer: syz
[  365.777201][ T5830] usb 1-1: SerialNumber: syz
[  365.799886][T10751] syz.3.1468: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  365.800158][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.3.1468 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  365.800184][T10751] Tainted: [L]=SOFTLOCKUP
[  365.800191][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.800202][T10751] Call Trace:
[  365.800210][T10751]  <TASK>
[  365.800219][T10751]  dump_stack_lvl+0xe8/0x150
[  365.800249][T10751]  warn_alloc+0x263/0x3e0
[  365.800278][T10751]  ? kasan_quarantine_put+0xbb/0x1f0
[  365.800306][T10751]  ? __pfx_warn_alloc+0x10/0x10
[  365.800341][T10751]  ? __get_vm_area_node+0x23f/0x350
[  365.800362][T10751]  ? __get_vm_area_node+0x171/0x350
[  365.800385][T10751]  ? copy_process+0x89b/0x4460
[  365.800406][T10751]  ? __get_vm_area_node+0x23f/0x350
[  365.800437][T10751]  __vmalloc_node_range_noprof+0x38f/0x1750
[  365.800460][T10751]  ? percpu_ref_get_many+0x19/0x140
[  365.800515][T10751]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.800543][T10751]  ? rcu_is_watching+0x15/0xb0
[  365.800569][T10751]  ? memcpy_and_pad+0x48/0x80
[  365.800599][T10751]  __vmalloc_node_noprof+0xc2/0x100
[  365.800624][T10751]  ? copy_process+0x89b/0x4460
[  365.800641][T10751]  ? copy_process+0x89b/0x4460
[  365.800663][T10751]  dup_task_struct+0x298/0x840
[  365.800681][T10751]  ? rt_spin_unlock+0x160/0x200
[  365.800704][T10751]  copy_process+0x89b/0x4460
[  365.800751][T10751]  ? __pfx_copy_process+0x10/0x10
[  365.800782][T10751]  vhost_task_create+0x1f9/0x380
[  365.800806][T10751]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  365.800832][T10751]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  365.800859][T10751]  ? __pfx_vhost_task_create+0x10/0x10
[  365.800890][T10751]  ? __pfx_vhost_task_fn+0x10/0x10
[  365.800917][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.800942][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.800966][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.800990][T10751]  ? mutex_lock_nested+0x152/0x1d0
[  365.801007][T10751]  ? kvm_mmu_post_init_vm+0x8f/0x2d0
[  365.801037][T10751]  kvm_mmu_post_init_vm+0x147/0x2d0
[  365.801065][T10751]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  365.801108][T10751]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  365.801139][T10751]  ? do_raw_spin_lock+0x12b/0x2f0
[  365.801172][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.801195][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.801219][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.801243][T10751]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  365.801269][T10751]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  365.801290][T10751]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  365.801314][T10751]  ? lockdep_hardirqs_on+0x7a/0x110
[  365.801342][T10751]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  365.801367][T10751]  ? rt_write_unlock+0x190/0x230
[  365.801390][T10751]  kvm_vcpu_ioctl+0xa65/0xfe0
[  365.801420][T10751]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.801463][T10751]  ? __fget_files+0x2a/0x420
[  365.801487][T10751]  ? __fget_files+0x2a/0x420
[  365.801508][T10751]  ? __fget_files+0x3a6/0x420
[  365.801527][T10751]  ? __fget_files+0x2a/0x420
[  365.801552][T10751]  ? bpf_lsm_file_ioctl+0x9/0x20
[  365.801573][T10751]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.801597][T10751]  __se_sys_ioctl+0xff/0x170
[  365.801623][T10751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.801643][T10751]  do_syscall_64+0x15f/0xf80
[  365.801665][T10751]  ? trace_irq_disable+0x3b/0x140
[  365.801687][T10751]  ? clear_bhb_loop+0x40/0x90
[  365.801710][T10751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.801729][T10751] RIP: 0033:0x7f80d173c819
[  365.801747][T10751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.801762][T10751] RSP: 002b:00007f80cf96d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.801781][T10751] RAX: ffffffffffffffda RBX: 00007f80d19b6090 RCX: 00007f80d173c819
[  365.801795][T10751] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  365.801807][T10751] RBP: 00007f80cf96d090 R08: 0000000000000000 R09: 0000000000000000
[  365.801819][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.801830][T10751] R13: 00007f80d19b6128 R14: 00007f80d19b6090 R15: 00007ffce7ca1408
[  365.801859][T10751]  </TASK>
[  365.803001][T10751] Mem-Info:
[  365.803012][T10751] active_anon:7276 inactive_anon:0 isolated_anon:0
[  365.803012][T10751]  active_file:14161 inactive_file:40117 isolated_file:0
[  365.803012][T10751]  unevictable:768 dirty:70 writeback:0
[  365.803012][T10751]  slab_reclaimable:12562 slab_unreclaimable:102393
[  365.803012][T10751]  mapped:30618 shmem:1370 pagetables:1566
[  365.803012][T10751]  sec_pagetables:0 bounce:0
[  365.803012][T10751]  kernel_misc_reclaimable:0
[  365.803012][T10751]  free:1311477 free_pcp:5361 free_cma:0
[  365.803063][T10751] Node 0 active_anon:29104kB inactive_anon:0kB active_file:56644kB inactive_file:160260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122472kB dirty:280kB writeback:0kB shmem:3944kB kernel_stack:13504kB pagetables:6116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  365.807025][T10751] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  365.807081][T10751] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  365.807837][T10751] lowmem_reserve[]: 0 2499 2500 2500 2500
[  365.807873][T10751] Node 0 DMA32 free:1290964kB boost:0kB min:3920kB low:6448kB high:8976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29104kB inactive_anon:0kB active_file:56644kB inactive_file:160260kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2559328kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:16608kB free_cma:0kB
[  365.809023][T10751] lowmem_reserve[]: 0 0 1 1 1
[  365.809267][T10751] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1592kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  365.809327][T10751] lowmem_reserve[]: 0 0 0 0 0
[  365.810207][T10751] Node 1 Normal free:3939584kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  365.810264][T10751] lowmem_reserve[]: 0 0 0 0 0
[  365.810295][T10751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  365.834956][T10751] Node 0 DMA32: 207*4kB (ME) 1177*8kB (UME) 1113*16kB (UM) 124*32kB (UME) 165*64kB (UME) 133*128kB (UME) 108*256kB (UME) 37*512kB (UME) 11*1024kB (UME) 7*2048kB (UME) 283*4096kB (M) = 1290964kB
[  365.835205][T10751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  365.835358][T10751] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939584kB
[  365.835712][T10751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.835729][T10751] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  365.835745][T10751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.835761][T10751] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  365.835922][T10751] 55644 total pagecache pages
[  365.836014][T10751] 0 pages in swap cache
[  365.836022][T10751] Free swap  = 124996kB
[  365.836029][T10751] Total swap = 124996kB
[  365.836037][T10751] 2097051 pages RAM
[  365.836045][T10751] 0 pages HighMem/MovableOnly
[  365.836051][T10751] 425207 pages reserved
[  365.836058][T10751] 0 pages cma reserved
[  365.933030][ T5830] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  366.092044][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO
[  366.092551][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  366.093792][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  366.093882][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  366.097795][   T32] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  366.141369][   T32] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  366.318730][   T32] usb 6-1: USB disconnect, device number 10
[  366.834156][ T5830] usb 1-1: USB disconnect, device number 92
[  367.228570][T10761] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  367.228593][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'.
[  367.228617][T10761] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1472'.
[  367.228633][T10761] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  367.335322][T10765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'.
[  367.373507][   T32] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  367.399564][T10767] binder: Bad value for 'max'
[  367.462984][T10770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.476431][T10770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.526413][   T32] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  367.526471][   T32] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  367.526495][   T32] usb 6-1: config 0 interface 0 has no altsetting 0
[  367.530670][   T32] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  367.530698][   T32] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  367.530719][   T32] usb 6-1: Product: syz
[  367.530734][   T32] usb 6-1: Manufacturer: syz
[  367.530749][   T32] usb 6-1: SerialNumber: syz
[  367.556674][   T32] usb 6-1: config 0 descriptor??
[  367.570475][   T32] hub 6-1:0.0: bad descriptor, ignoring hub
[  367.570511][   T32] hub 6-1:0.0: probe with driver hub failed with error -5
[  367.604835][   T32] usb 6-1: selecting invalid altsetting 0
[  367.654055][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.656022][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.053892][   T32] usb 6-1: USB disconnect, device number 11
[  368.304822][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.305479][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.703781][ T8127] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[  368.727473][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'.
[  368.909068][ T8127] usb 1-1: unable to get BOS descriptor or descriptor too short
[  368.910992][ T8127] usb 1-1: not running at top speed; connect to a high speed hub
[  368.921013][ T8127] usb 1-1: config 1 has an invalid interface number: 116 but max is 0
[  368.921040][ T8127] usb 1-1: config 1 has no interface number 0
[  368.921082][ T8127] usb 1-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  368.921105][ T8127] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[  368.921132][ T8127] usb 1-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81
[  368.921156][ T8127] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64
[  368.921182][ T8127] usb 1-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  368.921208][ T8127] usb 1-1: config 1 interface 116 has no altsetting 0
[  368.974260][ T8127] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  368.974290][ T8127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.974310][ T8127] usb 1-1: Product: syz
[  368.974325][ T8127] usb 1-1: Manufacturer: syz
[  368.974339][ T8127] usb 1-1: SerialNumber: syz
[  369.002074][T10786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  369.002389][T10786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  369.222233][ T8127] ums-usbat 1-1:1.116: USB Mass Storage device detected
[  369.375747][ T8127] ums-usbat 1-1:1.116: probe with driver ums-usbat failed with error -5
[  369.401418][ T8127] usb 1-1: USB disconnect, device number 93
[  369.896109][T10808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.896702][T10808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.957957][   T37] audit: type=1326 audit(1776293609.390:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.3.1489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80d173c819 code=0x0
[  371.297706][ T5140] Bluetooth: hci0: command 0x0406 tx timeout
[  371.447023][ T8127] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  371.627494][ T8127] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  371.627525][ T8127] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  371.627539][ T8127] usb 6-1: Manufacturer: syz
[  371.631125][ T8127] usb 6-1: config 0 descriptor??
[  371.853544][    T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  371.905036][ T8127] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  371.925129][ T8127] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  371.939691][ T8127] usb 6-1: USB disconnect, device number 12
[  372.003863][    T9] usb 1-1: Using ep0 maxpacket: 16
[  372.025585][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  372.037741][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  372.037771][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.037791][    T9] usb 1-1: Product: syz
[  372.037806][    T9] usb 1-1: Manufacturer: syz
[  372.037820][    T9] usb 1-1: SerialNumber: syz
[  372.165925][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'.
[  372.497581][  T818] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  372.647494][  T818] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  372.647523][  T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.647542][  T818] usb 5-1: Product: syz
[  372.647549][  T818] usb 5-1: Manufacturer: syz
[  372.647558][  T818] usb 5-1: SerialNumber: syz
[  372.834692][ T5940] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  372.981459][T10832] binder: 10831:10832 ioctl c0306201 2000000001c0 returned -14
[  372.993375][ T5940] usb 6-1: Using ep0 maxpacket: 16
[  372.995787][ T5940] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  373.000958][ T5940] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  373.000984][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.001004][ T5940] usb 6-1: Product: syz
[  373.001019][ T5940] usb 6-1: Manufacturer: syz
[  373.001033][ T5940] usb 6-1: SerialNumber: syz
[  373.006241][    T9] usb 1-1: reset high-speed USB device number 94 using dummy_hcd
[  373.056079][ T5940] r8152-cfgselector 6-1: Unknown version 0x0000
[  373.056104][ T5940] r8152-cfgselector 6-1: config 0 descriptor??
[  373.104488][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  373.104547][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  373.114467][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.116305][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.124493][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.125349][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.220358][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.221259][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.296896][ T5940] r8152-cfgselector 6-1: Needed 2 retries to read version
[  373.348491][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  373.408336][    T9] usb 1-1: device firmware changed
[  373.434842][    T9] usb 1-1: USB disconnect, device number 94
[  373.671093][T10827] block nbd5: shutting down sockets
[  373.730687][    T9] r8152-cfgselector 6-1: USB disconnect, device number 13
[  374.178990][ T5811] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  374.323434][ T5811] usb 1-1: Using ep0 maxpacket: 32
[  374.672865][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.711566][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.135661][   T32] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  375.164328][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  375.164785][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  375.165249][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  375.165300][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  375.166025][  T818] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  375.235970][  T818] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  375.269351][  T818] usb 5-1: USB disconnect, device number 26
[  375.283272][   T32] usb 6-1: Using ep0 maxpacket: 32
[  375.285899][   T32] usb 6-1: unable to get BOS descriptor or descriptor too short
[  375.288281][   T32] usb 6-1: string descriptor 0 read error: -22
[  375.288453][   T32] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  375.288477][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.405908][   T32] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  375.561061][   T32] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  375.562663][   T32] usb 6-1: 0:3 : does not exist
[  375.562685][   T32] usb 6-1: 0:4 : does not exist
[  375.562701][   T32] usb 6-1: 0:5 : does not exist
[  375.562716][   T32] usb 6-1: 0:6 : does not exist
[  375.562730][   T32] usb 6-1: 0:7 : does not exist
[  375.562745][   T32] usb 6-1: 0:8 : does not exist
[  375.562761][   T32] usb 6-1: 0:9 : does not exist
[  375.562776][   T32] usb 6-1: 0:10 : does not exist
[  375.562792][   T32] usb 6-1: 0:11 : does not exist
[  375.562808][   T32] usb 6-1: 0:12 : does not exist
[  375.562824][   T32] usb 6-1: 0:13 : does not exist
[  375.562839][   T32] usb 6-1: 0:14 : does not exist
[  375.562854][   T32] usb 6-1: 0:15 : does not exist
[  375.562869][   T32] usb 6-1: 0:16 : does not exist
[  375.562884][   T32] usb 6-1: 0:17 : does not exist
[  375.562900][   T32] usb 6-1: 0:18 : does not exist
[  375.562915][   T32] usb 6-1: 0:19 : does not exist
[  375.562931][   T32] usb 6-1: 0:20 : does not exist
[  375.562946][   T32] usb 6-1: 0:21 : does not exist
[  375.562961][   T32] usb 6-1: 0:22 : does not exist
[  375.562977][   T32] usb 6-1: 0:23 : does not exist
[  375.562993][   T32] usb 6-1: 0:24 : does not exist
[  375.563009][   T32] usb 6-1: 0:25 : does not exist
[  375.563022][   T32] usb 6-1: 0:26 : does not exist
[  375.563035][   T32] usb 6-1: 0:27 : does not exist
[  375.563048][   T32] usb 6-1: 0:28 : does not exist
[  375.563062][   T32] usb 6-1: 0:29 : does not exist
[  375.563077][   T32] usb 6-1: 0:30 : does not exist
[  375.563092][   T32] usb 6-1: 0:31 : does not exist
[  375.563107][   T32] usb 6-1: 0:32 : does not exist
[  375.563122][   T32] usb 6-1: 0:33 : does not exist
[  375.584137][   T32] usb 6-1: 0:34 : does not exist
[  375.584158][   T32] usb 6-1: 0:35 : does not exist
[  375.584173][   T32] usb 6-1: 0:36 : does not exist
[  375.584187][   T32] usb 6-1: 0:37 : does not exist
[  375.584202][   T32] usb 6-1: 0:38 : does not exist
[  375.584218][   T32] usb 6-1: 0:39 : does not exist
[  375.584233][   T32] usb 6-1: 0:40 : does not exist
[  375.584247][   T32] usb 6-1: 0:41 : does not exist
[  375.584271][   T32] usb 6-1: 0:42 : does not exist
[  375.584287][   T32] usb 6-1: 0:43 : does not exist
[  375.584302][   T32] usb 6-1: 0:44 : does not exist
[  375.584317][   T32] usb 6-1: 0:45 : does not exist
[  375.584332][   T32] usb 6-1: 0:46 : does not exist
[  375.584347][   T32] usb 6-1: 0:47 : does not exist
[  375.584361][   T32] usb 6-1: 0:48 : does not exist
[  375.584377][   T32] usb 6-1: 0:49 : does not exist
[  375.584392][   T32] usb 6-1: 0:50 : does not exist
[  375.584406][   T32] usb 6-1: 0:51 : does not exist
[  375.584421][   T32] usb 6-1: 0:52 : does not exist
[  375.584436][   T32] usb 6-1: 0:53 : does not exist
[  375.584452][   T32] usb 6-1: 0:54 : does not exist
[  375.584467][   T32] usb 6-1: 0:55 : does not exist
[  375.584482][   T32] usb 6-1: 0:56 : does not exist
[  375.584497][   T32] usb 6-1: 0:57 : does not exist
[  375.584513][   T32] usb 6-1: 0:58 : does not exist
[  375.584528][   T32] usb 6-1: 0:59 : does not exist
[  375.584542][   T32] usb 6-1: 0:60 : does not exist
[  375.584558][   T32] usb 6-1: 0:61 : does not exist
[  375.584572][   T32] usb 6-1: 0:62 : does not exist
[  375.584587][   T32] usb 6-1: 0:63 : does not exist
[  375.584602][   T32] usb 6-1: 0:64 : does not exist
[  375.584618][   T32] usb 6-1: 0:65 : does not exist
[  375.584633][   T32] usb 6-1: 0:66 : does not exist
[  375.584648][   T32] usb 6-1: 0:67 : does not exist
[  375.584663][   T32] usb 6-1: 0:68 : does not exist
[  375.584678][   T32] usb 6-1: 0:69 : does not exist
[  375.584692][   T32] usb 6-1: 0:70 : does not exist
[  375.584707][   T32] usb 6-1: 0:71 : does not exist
[  375.584723][   T32] usb 6-1: 0:72 : does not exist
[  375.584738][   T32] usb 6-1: 0:73 : does not exist
[  375.584770][   T32] usb 6-1: 0:74 : does not exist
[  375.673631][   T32] usb 6-1: 0:75 : does not exist
[  375.673653][   T32] usb 6-1: 0:76 : does not exist
[  375.673669][   T32] usb 6-1: 0:77 : does not exist
[  375.673686][   T32] usb 6-1: 0:78 : does not exist
[  375.673702][   T32] usb 6-1: 0:79 : does not exist
[  375.673717][   T32] usb 6-1: 0:80 : does not exist
[  375.673732][   T32] usb 6-1: 0:81 : does not exist
[  375.673748][   T32] usb 6-1: 0:82 : does not exist
[  375.673763][   T32] usb 6-1: 0:83 : does not exist
[  375.673779][   T32] usb 6-1: 0:84 : does not exist
[  375.673794][   T32] usb 6-1: 0:85 : does not exist
[  375.673810][   T32] usb 6-1: 0:86 : does not exist
[  375.673827][   T32] usb 6-1: 0:87 : does not exist
[  375.673843][   T32] usb 6-1: 0:88 : does not exist
[  375.673858][   T32] usb 6-1: 0:89 : does not exist
[  375.673874][   T32] usb 6-1: 0:90 : does not exist
[  375.673890][   T32] usb 6-1: 0:91 : does not exist
[  375.673921][   T32] usb 6-1: 0:92 : does not exist
[  375.673937][   T32] usb 6-1: 0:93 : does not exist
[  375.673952][   T32] usb 6-1: 0:94 : does not exist
[  375.673968][   T32] usb 6-1: 0:95 : does not exist
[  375.673984][   T32] usb 6-1: 0:96 : does not exist
[  375.673999][   T32] usb 6-1: 0:97 : does not exist
[  375.674015][   T32] usb 6-1: 0:98 : does not exist
[  375.674030][   T32] usb 6-1: 0:99 : does not exist
[  375.674046][   T32] usb 6-1: 0:100 : does not exist
[  375.674062][   T32] usb 6-1: 0:101 : does not exist
[  375.674078][   T32] usb 6-1: 0:102 : does not exist
[  375.674093][   T32] usb 6-1: 0:103 : does not exist
[  375.674109][   T32] usb 6-1: 0:104 : does not exist
[  375.674123][   T32] usb 6-1: 0:105 : does not exist
[  375.674138][   T32] usb 6-1: 0:106 : does not exist
[  375.674153][   T32] usb 6-1: 0:107 : does not exist
[  375.674168][   T32] usb 6-1: 0:108 : does not exist
[  375.674181][   T32] usb 6-1: 0:109 : does not exist
[  375.674194][   T32] usb 6-1: 0:110 : does not exist
[  375.674208][   T32] usb 6-1: 0:111 : does not exist
[  375.674222][   T32] usb 6-1: 0:112 : does not exist
[  375.674238][   T32] usb 6-1: 0:113 : does not exist
[  375.674253][   T32] usb 6-1: 0:114 : does not exist
[  375.674277][   T32] usb 6-1: 0:115 : does not exist
[  375.674292][   T32] usb 6-1: 0:116 : does not exist
[  375.674309][   T32] usb 6-1: 0:117 : does not exist
[  375.674325][   T32] usb 6-1: 0:118 : does not exist
[  375.674341][   T32] usb 6-1: 0:119 : does not exist
[  375.674357][   T32] usb 6-1: 0:120 : does not exist
[  375.674373][   T32] usb 6-1: 0:121 : does not exist
[  375.674390][   T32] usb 6-1: 0:122 : does not exist
[  375.674405][   T32] usb 6-1: 0:123 : does not exist
[  375.674421][   T32] usb 6-1: 0:124 : does not exist
[  375.674434][   T32] usb 6-1: 0:125 : does not exist
[  375.674449][   T32] usb 6-1: 0:126 : does not exist
[  375.674465][   T32] usb 6-1: 0:127 : does not exist
[  375.674480][   T32] usb 6-1: 0:128 : does not exist
[  375.674495][   T32] usb 6-1: 0:129 : does not exist
[  375.674509][   T32] usb 6-1: 0:130 : does not exist
[  375.674525][   T32] usb 6-1: 0:131 : does not exist
[  375.674538][   T32] usb 6-1: 0:132 : does not exist
[  375.674553][   T32] usb 6-1: 0:133 : does not exist
[  375.674569][   T32] usb 6-1: 0:134 : does not exist
[  375.674584][   T32] usb 6-1: 0:135 : does not exist
[  375.674599][   T32] usb 6-1: 0:136 : does not exist
[  375.674614][   T32] usb 6-1: 0:137 : does not exist
[  375.674630][   T32] usb 6-1: 0:138 : does not exist
[  375.674645][   T32] usb 6-1: 0:139 : does not exist
[  375.674660][   T32] usb 6-1: 0:140 : does not exist
[  375.674675][   T32] usb 6-1: 0:141 : does not exist
[  375.674691][   T32] usb 6-1: 0:142 : does not exist
[  375.674706][   T32] usb 6-1: 0:143 : does not exist
[  375.674722][   T32] usb 6-1: 0:144 : does not exist
[  375.674737][   T32] usb 6-1: 0:145 : does not exist
[  375.674753][   T32] usb 6-1: 0:146 : does not exist
[  375.674770][   T32] usb 6-1: 0:147 : does not exist
[  375.674786][   T32] usb 6-1: 0:148 : does not exist
[  375.674802][   T32] usb 6-1: 0:149 : does not exist
[  375.674819][   T32] usb 6-1: 0:150 : does not exist
[  375.674835][   T32] usb 6-1: 0:151 : does not exist
[  375.674851][   T32] usb 6-1: 0:152 : does not exist
[  375.674865][   T32] usb 6-1: 0:153 : does not exist
[  375.674881][   T32] usb 6-1: 0:154 : does not exist
[  375.674896][   T32] usb 6-1: 0:155 : does not exist
[  375.674911][   T32] usb 6-1: 0:156 : does not exist
[  375.674927][   T32] usb 6-1: 0:157 : does not exist
[  375.674942][   T32] usb 6-1: 0:158 : does not exist
[  375.674956][   T32] usb 6-1: 0:159 : does not exist
[  375.674971][   T32] usb 6-1: 0:160 : does not exist
[  375.674987][   T32] usb 6-1: 0:161 : does not exist
[  375.675002][   T32] usb 6-1: 0:162 : does not exist
[  375.675019][   T32] usb 6-1: 0:163 : does not exist
[  375.675033][   T32] usb 6-1: 0:164 : does not exist
[  375.675048][   T32] usb 6-1: 0:165 : does not exist
[  375.675063][   T32] usb 6-1: 0:166 : does not exist
[  375.810797][   T32] usb 6-1: 0:167 : does not exist
[  375.810820][   T32] usb 6-1: 0:168 : does not exist
[  375.810838][   T32] usb 6-1: 0:169 : does not exist
[  375.810856][   T32] usb 6-1: 0:170 : does not exist
[  375.810888][   T32] usb 6-1: 0:171 : does not exist
[  375.810905][   T32] usb 6-1: 0:172 : does not exist
[  375.810922][   T32] usb 6-1: 0:173 : does not exist
[  375.810938][   T32] usb 6-1: 0:174 : does not exist
[  375.810954][   T32] usb 6-1: 0:175 : does not exist
[  375.810970][   T32] usb 6-1: 0:176 : does not exist
[  375.810986][   T32] usb 6-1: 0:177 : does not exist
[  375.811001][   T32] usb 6-1: 0:178 : does not exist
[  375.811016][   T32] usb 6-1: 0:179 : does not exist
[  375.811031][   T32] usb 6-1: 0:180 : does not exist
[  375.811048][   T32] usb 6-1: 0:181 : does not exist
[  375.811064][   T32] usb 6-1: 0:182 : does not exist
[  375.811080][   T32] usb 6-1: 0:183 : does not exist
[  375.811096][   T32] usb 6-1: 0:184 : does not exist
[  375.811111][   T32] usb 6-1: 0:185 : does not exist
[  375.811127][   T32] usb 6-1: 0:186 : does not exist
[  375.811143][   T32] usb 6-1: 0:187 : does not exist
[  375.811157][   T32] usb 6-1: 0:188 : does not exist
[  375.811172][   T32] usb 6-1: 0:189 : does not exist
[  375.811187][   T32] usb 6-1: 0:190 : does not exist
[  375.811203][   T32] usb 6-1: 0:191 : does not exist
[  375.811220][   T32] usb 6-1: 0:192 : does not exist
[  375.811242][   T32] usb 6-1: 0:193 : does not exist
[  375.811259][   T32] usb 6-1: 0:194 : does not exist
[  375.811274][   T32] usb 6-1: 0:195 : does not exist
[  375.811290][   T32] usb 6-1: 0:196 : does not exist
[  375.811306][   T32] usb 6-1: 0:197 : does not exist
[  375.811322][   T32] usb 6-1: 0:198 : does not exist
[  375.811339][   T32] usb 6-1: 0:199 : does not exist
[  375.811355][   T32] usb 6-1: 0:200 : does not exist
[  375.811372][   T32] usb 6-1: 0:201 : does not exist
[  375.811387][   T32] usb 6-1: 0:202 : does not exist
[  375.811402][   T32] usb 6-1: 0:203 : does not exist
[  375.811418][   T32] usb 6-1: 0:204 : does not exist
[  375.811433][   T32] usb 6-1: 0:205 : does not exist
[  375.811448][   T32] usb 6-1: 0:206 : does not exist
[  375.811464][   T32] usb 6-1: 0:207 : does not exist
[  375.811480][   T32] usb 6-1: 0:208 : does not exist
[  375.811497][   T32] usb 6-1: 0:209 : does not exist
[  375.811512][   T32] usb 6-1: 0:210 : does not exist
[  375.811529][   T32] usb 6-1: 0:211 : does not exist
[  375.811545][   T32] usb 6-1: 0:212 : does not exist
[  375.811561][   T32] usb 6-1: 0:213 : does not exist
[  375.811577][   T32] usb 6-1: 0:214 : does not exist
[  375.811592][   T32] usb 6-1: 0:215 : does not exist
[  375.811608][   T32] usb 6-1: 0:216 : does not exist
[  375.811623][   T32] usb 6-1: 0:217 : does not exist
[  375.811638][   T32] usb 6-1: 0:218 : does not exist
[  375.811653][   T32] usb 6-1: 0:219 : does not exist
[  375.811668][   T32] usb 6-1: 0:220 : does not exist
[  375.811684][   T32] usb 6-1: 0:221 : does not exist
[  375.811700][   T32] usb 6-1: 0:222 : does not exist
[  375.811716][   T32] usb 6-1: 0:223 : does not exist
[  375.811732][   T32] usb 6-1: 0:224 : does not exist
[  375.811747][   T32] usb 6-1: 0:225 : does not exist
[  375.811763][   T32] usb 6-1: 0:226 : does not exist
[  375.811778][   T32] usb 6-1: 0:227 : does not exist
[  375.811794][   T32] usb 6-1: 0:228 : does not exist
[  375.811810][   T32] usb 6-1: 0:229 : does not exist
[  375.811826][   T32] usb 6-1: 0:230 : does not exist
[  375.811842][   T32] usb 6-1: 0:231 : does not exist
[  375.811859][   T32] usb 6-1: 0:232 : does not exist
[  375.811875][   T32] usb 6-1: 0:233 : does not exist
[  375.811891][   T32] usb 6-1: 0:234 : does not exist
[  375.811907][   T32] usb 6-1: 0:235 : does not exist
[  375.811923][   T32] usb 6-1: 0:236 : does not exist
[  375.811939][   T32] usb 6-1: 0:237 : does not exist
[  375.811955][   T32] usb 6-1: 0:238 : does not exist
[  375.811971][   T32] usb 6-1: 0:239 : does not exist
[  375.811987][   T32] usb 6-1: 0:240 : does not exist
[  375.812002][   T32] usb 6-1: 0:241 : does not exist
[  375.812018][   T32] usb 6-1: 0:242 : does not exist
[  375.812034][   T32] usb 6-1: 0:243 : does not exist
[  375.812049][   T32] usb 6-1: 0:244 : does not exist
[  375.812065][   T32] usb 6-1: 0:245 : does not exist
[  375.812080][   T32] usb 6-1: 0:246 : does not exist
[  375.812096][   T32] usb 6-1: 0:247 : does not exist
[  375.812112][   T32] usb 6-1: 0:248 : does not exist
[  375.812128][   T32] usb 6-1: 0:249 : does not exist
[  375.812144][   T32] usb 6-1: 0:250 : does not exist
[  375.812161][   T32] usb 6-1: 0:251 : does not exist
[  375.812177][   T32] usb 6-1: 0:252 : does not exist
[  375.913269][   T32] usb 6-1: 0:253 : does not exist
[  375.913291][   T32] usb 6-1: 0:254 : does not exist
[  375.913307][   T32] usb 6-1: 0:255 : does not exist
[  375.981962][   T32] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  375.982034][   T32] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  376.016805][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.017599][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.068031][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.137068][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.047969][   T32] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  377.110783][   T32] usb 6-1: USB disconnect, device number 14
[  377.161718][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  377.310517][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short
[  377.311297][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -71
[  377.311318][ T5811] usb 1-1: can't read configurations, error -71
[  377.363590][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'.
[  377.723652][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  377.889341][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  377.889371][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.889390][ T5940] usb 5-1: Product: syz
[  377.889405][ T5940] usb 5-1: Manufacturer: syz
[  377.889420][ T5940] usb 5-1: SerialNumber: syz
[  378.340965][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  378.341025][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  378.424617][ T5811] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  378.571382][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  378.571451][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  378.580046][ T5811] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  378.580073][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.580143][ T5811] usb 1-1: Product: syz
[  378.580157][ T5811] usb 1-1: Manufacturer: syz
[  378.580172][ T5811] usb 1-1: SerialNumber: syz
[  378.865605][T10901] Bluetooth: MGMT ver 1.23
[  379.072252][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  379.072314][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  379.830880][   T37] audit: type=1800 audit(1776293619.260:18): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  380.044811][T10933] netlink: 10916 bytes leftover after parsing attributes in process `syz.3.1532'.
[  380.044835][T10933] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  380.055306][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.056187][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.059179][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.060121][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.372539][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  380.376319][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  380.377563][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  380.378164][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  380.382317][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  380.411615][ T5940] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  380.451503][ T5940] usb 5-1: USB disconnect, device number 27
[  380.573345][ T5911] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  380.736007][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short
[  380.748466][ T5911] usb 6-1: string descriptor 0 read error: -22
[  380.748621][ T5911] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  380.748645][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.922156][T10901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.923003][T10901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.160796][T10946] loop4: detected capacity change from 0 to 524287936
[  381.193801][ T5911] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  381.194352][ T5911] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  381.428240][ T5911] usb 6-1: USB disconnect, device number 15
[  382.161739][T10959] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  382.224696][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  382.233498][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  382.234783][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  382.234827][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  382.235500][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  382.330558][ T5811] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  382.332936][T10963] openvswitch: netlink: Missing valid actions attribute.
[  382.332966][T10963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.429048][ T5811] usb 1-1: USB disconnect, device number 96
[  382.613324][ T5940] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  382.773374][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  382.775724][ T5940] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  382.775751][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.781602][ T5940] usb 5-1: config 0 descriptor??
[  382.795903][ T5940] gspca_main: sonixj-2.14.0 probing 0471:0327
[  382.926151][ T5811] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  383.059418][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1546'.
[  383.059503][T10977] block nbd0: not configured, cannot reconfigure
[  383.083440][ T5811] usb 1-1: Using ep0 maxpacket: 32
[  383.090049][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short
[  383.091176][ T5811] usb 1-1: config 3 has an invalid interface number: 44 but max is 0
[  383.091201][ T5811] usb 1-1: config 3 has no interface number 0
[  383.091233][ T5811] usb 1-1: config 3 interface 44 has no altsetting 0
[  383.105873][ T5811] usb 1-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=e8.de
[  383.105900][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.105920][ T5811] usb 1-1: Product: syz
[  383.105984][ T5811] usb 1-1: Manufacturer: syz
[  383.105999][ T5811] usb 1-1: SerialNumber: syz
[  383.201883][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.207278][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.216951][T10979] binder: 10978:10979 ioctl c018620c 200000000280 returned -1
[  383.220829][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.221721][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.358334][T10966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.360351][T10966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.397168][ T5811] uvcvideo 1-1:3.44: Found UVC 0.00 device syz (0408:4035)
[  383.397187][ T5811] uvcvideo 1-1:3.44: Forcing UVC version to 1.0a
[  383.397200][ T5811] uvcvideo 1-1:3.44: No valid video chain found.
[  383.402192][ T5811] usb 1-1: USB disconnect, device number 97
[  383.559912][T10982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  383.663935][T10984] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1549'.
[  383.940356][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.940922][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.543443][ T5811] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  384.703392][ T5811] usb 6-1: Using ep0 maxpacket: 16
[  384.709781][ T5811] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.709831][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  384.710081][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  384.710094][ T5811] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  384.710108][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  384.734967][ T5811] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  384.735003][ T5811] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  384.735173][ T5811] usb 6-1: Manufacturer: syz
[  384.747388][ T5811] usb 6-1: config 0 descriptor??
[  385.033498][ T5811] rc_core: IR keymap rc-hauppauge not found
[  385.033518][ T5811] Registered IR keymap rc-empty
[  385.033756][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.053527][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.090976][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  385.107313][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37
[  385.195192][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.196819][T11014] Invalid ELF header magic: != ELF
[  385.214833][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.244129][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.266482][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.295846][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.313624][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.343474][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.375351][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.393721][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.414087][ T5811] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  385.448808][ T5811] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  385.452762][ T5811] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  385.490689][ T5811] usb 6-1: USB disconnect, device number 16
[  385.823064][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'.
[  385.824095][T11024] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  385.865820][ T5940] gspca_sonixj: reg_w1 err -71
[  385.865884][ T5940] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  385.893341][ T5940] usb 5-1: USB disconnect, device number 28
[  386.113358][ T8127] usb 1-1: new low-speed USB device number 98 using dummy_hcd
[  386.267609][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  386.267644][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  386.267672][ T8127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  386.267715][ T8127] usb 1-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00
[  386.267740][ T8127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.287706][ T8127] usb 1-1: config 0 descriptor??
[  386.323612][T11024] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  386.341905][T11035] netlink: 'syz.5.1565': attribute type 4 has an invalid length.
[  386.481892][T11039] FAULT_INJECTION: forcing a failure.
[  386.481892][T11039] name failslab, interval 1, probability 0, space 0, times 0
[  386.482645][T11039] CPU: 0 UID: 0 PID: 11039 Comm: syz.5.1567 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  386.482672][T11039] Tainted: [L]=SOFTLOCKUP
[  386.482679][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  386.482690][T11039] Call Trace:
[  386.482698][T11039]  <TASK>
[  386.482706][T11039]  dump_stack_lvl+0xe8/0x150
[  386.482732][T11039]  should_fail_ex+0x46b/0x600
[  386.482761][T11039]  should_failslab+0xa8/0x100
[  386.482790][T11039]  kmem_cache_alloc_noprof+0x87/0x680
[  386.482815][T11039]  ? __kernfs_new_node+0xea/0x980
[  386.482841][T11039]  __kernfs_new_node+0xea/0x980
[  386.482875][T11039]  ? __pfx___kernfs_new_node+0x10/0x10
[  386.482899][T11039]  ? kernfs_root+0x1c/0x230
[  386.482932][T11039]  ? kernfs_root+0x1c/0x230
[  386.482953][T11039]  ? kernfs_root+0x1c/0x230
[  386.482972][T11039]  ? kernfs_root+0x1c/0x230
[  386.482998][T11039]  kernfs_new_node+0x102/0x210
[  386.483027][T11039]  kernfs_create_link+0xa7/0x200
[  386.483049][T11039]  sysfs_do_create_link_sd+0x83/0x110
[  386.483074][T11039]  software_node_notify+0xeb/0x1b0
[  386.483099][T11039]  device_add+0x431/0xbb0
[  386.483126][T11039]  iommu_mock_device_add+0x94/0x1f0
[  386.483156][T11039]  ? iommufd_test+0x368a/0x6160
[  386.483177][T11039]  iommufd_test+0x36a1/0x6160
[  386.483205][T11039]  ? __lock_acquire+0x6b5/0x2cf0
[  386.483227][T11039]  ? __pfx_iommufd_test+0x10/0x10
[  386.483252][T11039]  ? tomoyo_path_number_perm+0x219/0x630
[  386.483281][T11039]  ? tomoyo_path_number_perm+0x219/0x630
[  386.483311][T11039]  ? __might_fault+0xaf/0x130
[  386.483338][T11039]  ? __might_fault+0xaf/0x130
[  386.483381][T11039]  iommufd_fops_ioctl+0x4b8/0x5d0
[  386.483414][T11039]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  386.483443][T11039]  ? __fget_files+0x2a/0x420
[  386.483472][T11039]  ? __fget_files+0x2a/0x420
[  386.483495][T11039]  ? bpf_lsm_file_ioctl+0x9/0x20
[  386.483517][T11039]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  386.483540][T11039]  __se_sys_ioctl+0xff/0x170
[  386.483566][T11039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.483586][T11039]  do_syscall_64+0x15f/0xf80
[  386.483609][T11039]  ? trace_irq_disable+0x3b/0x140
[  386.483632][T11039]  ? clear_bhb_loop+0x40/0x90
[  386.483656][T11039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.483673][T11039] RIP: 0033:0x7fc6006cc819
[  386.483692][T11039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.483707][T11039] RSP: 002b:00007fc5fe926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  386.483727][T11039] RAX: ffffffffffffffda RBX: 00007fc600945fa0 RCX: 00007fc6006cc819
[  386.483741][T11039] RDX: 0000200000000740 RSI: 0000000000003ba0 RDI: 0000000000000003
[  386.483753][T11039] RBP: 00007fc5fe926090 R08: 0000000000000000 R09: 0000000000000000
[  386.483765][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  386.483776][T11039] R13: 00007fc600946038 R14: 00007fc600945fa0 R15: 00007ffe12cb1408
[  386.483805][T11039]  </TASK>
[  386.561566][T11039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  386.792782][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'.
[  386.799270][ T8127] hid (null): unknown global tag 0xe
[  386.858296][ T8127] hid_parser_main: 31 callbacks suppressed
[  386.858310][ T8127] logitech-djreceiver 0003:046D:C713.000F: unknown main item tag 0x3
[  386.858329][ T8127] logitech-djreceiver 0003:046D:C713.000F: unknown global tag 0xe
[  386.858338][ T8127] logitech-djreceiver 0003:046D:C713.000F: item 0 1 1 14 parsing failed
[  386.865017][ T8127] logitech-djreceiver 0003:046D:C713.000F: logi_dj_probe: parse failed
[  386.865090][ T8127] logitech-djreceiver 0003:046D:C713.000F: probe with driver logitech-djreceiver failed with error -22
[  387.195806][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'.
[  387.196663][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'.
[  387.197050][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'.
[  387.353327][  T818] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  387.436061][T11059] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  387.436072][T11059] overlayfs: missing 'lowerdir'
[  387.473464][ T8127] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  387.508562][  T818] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  387.508590][  T818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.508610][  T818] usb 6-1: Product: syz
[  387.508624][  T818] usb 6-1: Manufacturer: syz
[  387.508640][  T818] usb 6-1: SerialNumber: syz
[  387.606941][ T5911] usb 1-1: USB disconnect, device number 98
[  387.663686][ T8127] usb 5-1: Using ep0 maxpacket: 8
[  387.666355][ T8127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  387.690307][ T8127] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  387.690338][ T8127] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  387.690358][ T8127] usb 5-1: Product: syz
[  387.690374][ T8127] usb 5-1: Manufacturer: syz
[  387.690388][ T8127] usb 5-1: SerialNumber: syz
[  387.786653][T11068] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1577'.
[  387.789670][T11067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1578'.
[  387.969148][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  387.969203][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  388.063082][ T8127] usb 5-1: Invalid connection information received from device
[  388.273428][ T5911] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  388.396279][ T5940] usb 5-1: USB disconnect, device number 29
[  388.423357][ T5911] usb 1-1: Using ep0 maxpacket: 32
[  388.425636][ T5911] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  388.425657][ T5911] usb 1-1: config 0 has no interface number 0
[  388.425682][ T5911] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64
[  388.427765][ T5911] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  388.427798][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.427810][ T5911] usb 1-1: Product: syz
[  388.427853][ T5911] usb 1-1: Manufacturer: syz
[  388.427862][ T5911] usb 1-1: SerialNumber: syz
[  388.495988][ T5911] usb 1-1: config 0 descriptor??
[  388.514486][ T5911] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  388.514572][ T5911] em28xx 1-1:0.132: Video interface 132 found:
[  388.590730][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1583'.
[  388.635025][T11084] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1584'.
[  388.689772][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.690548][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.693593][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.694129][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.908612][ T5911] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  389.024126][T11089] netlink: 'syz.4.1586': attribute type 10 has an invalid length.
[  389.169753][ T5911] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0)
[  389.169846][ T5911] em28xx 1-1:0.132: board has no eeprom
[  389.338054][T11094] sg_write: data in/out 393189/204 bytes for SCSI command 0x0-- guessing data in;
[  389.338054][T11094]    program syz.4.1588 not setting count and/or reply_len properly
[  389.375981][T11090] vlan1: entered promiscuous mode
[  389.376179][T11090] vlan1: entered allmulticast mode
[  389.376193][T11090] veth0_vlan: entered allmulticast mode
[  389.378686][T11095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1580'.
[  389.463302][ T5911] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  389.463348][ T5911] em28xx 1-1:0.132: analog set to bulk mode.
[  389.494535][ T5830] em28xx 1-1:0.132: Registering V4L2 extension
[  389.578964][ T5911] usb 1-1: USB disconnect, device number 99
[  389.595856][ T5911] em28xx 1-1:0.132: Disconnecting em28xx
[  389.730209][ T5830] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  389.730289][ T5830] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  389.730304][ T5830] em28xx 1-1:0.132: No AC97 audio processor
[  389.884398][ T5830] usb 1-1: Decoder not found
[  389.884477][ T5830] em28xx 1-1:0.132: failed to create media graph
[  389.884554][ T5830] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  389.989569][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  390.007430][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  390.010942][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  390.010995][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  390.048790][  T818] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  390.060127][ T5830] em28xx 1-1:0.132: Remote control support is not available for this card.
[  390.061430][ T5911] em28xx 1-1:0.132: Closing input extension
[  390.122512][  T818] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  390.155743][  T818] usb 6-1: USB disconnect, device number 17
[  390.312916][T11119] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1594'.
[  390.526349][ T5911] em28xx 1-1:0.132: Freeing device
[  390.686042][ T5940] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  390.848360][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 45, changing to 7
[  390.848397][ T5940] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7
[  390.863996][ T5940] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40
[  390.864026][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.864046][ T5940] usb 5-1: Product: ï“¿
[  390.864060][ T5940] usb 5-1: Manufacturer: К
[  390.864075][ T5940] usb 5-1: SerialNumber: syz
[  390.902287][ T5940] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  391.043296][ T5911] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  391.150310][   T37] audit: type=1326 audit(1776293630.580:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.4.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f363c02c819 code=0x0
[  391.197245][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short
[  391.198586][ T5911] usb 6-1: config 179 has an invalid interface number: 156 but max is 0
[  391.198611][ T5911] usb 6-1: config 179 has no interface number 0
[  391.198642][ T5911] usb 6-1: config 179 interface 156 has no altsetting 0
[  391.202902][ T5911] usb 6-1: string descriptor 0 read error: -22
[  391.203094][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=74.98
[  391.213328][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.279931][ T5911] lan78xx 6-1:179.156 (unnamed net_device) (uninitialized): USB bus speed not supported
[  391.281603][ T5911] lan78xx 6-1:179.156: probe with driver lan78xx failed with error -5
[  391.402149][T11140] Invalid logical block size (768)
[  391.461954][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.465543][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.487240][T11131] 9p: Unknown access argument Š: -22
[  391.515669][ T8127] usb 6-1: USB disconnect, device number 18
[  392.195383][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.196605][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.233640][ T8127] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[  392.403388][ T5911] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  392.417810][ T8127] usb 1-1: unable to get BOS descriptor or descriptor too short
[  392.418414][ T8127] usb 1-1: not running at top speed; connect to a high speed hub
[  392.419428][ T8127] usb 1-1: config 15 has an invalid interface number: 131 but max is 0
[  392.419452][ T8127] usb 1-1: config 15 has no interface number 0
[  392.419484][ T8127] usb 1-1: config 15 interface 131 has no altsetting 0
[  392.464670][ T8127] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30
[  392.464700][ T8127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.464774][ T8127] usb 1-1: Product: syz
[  392.464790][ T8127] usb 1-1: Manufacturer: syz
[  392.464805][ T8127] usb 1-1: SerialNumber: syz
[  392.533457][ T5911] usb 6-1: device descriptor read/64, error -71
[  392.688532][ T8127] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  392.688619][ T8127] gspca_mr97310a: reg write [21] error -22
[  392.688669][ T8127] mr97310a 1-1:15.131: probe with driver mr97310a failed with error -22
[  392.713992][ T8127] usb 1-1: USB disconnect, device number 100
[  392.775647][ T5911] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  392.904144][ T5911] usb 6-1: device descriptor read/64, error -71
[  392.974526][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.975205][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.013748][ T5911] usb usb6-port1: attempt power cycle
[  393.036579][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'.
[  393.363069][ T5911] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  393.388366][T11162] netlink: 'syz.0.1611': attribute type 29 has an invalid length.
[  393.388778][ T5911] usb 6-1: device descriptor read/8, error -71
[  393.414504][T11162] netlink: 'syz.0.1611': attribute type 29 has an invalid length.
[  393.417187][T11162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1611'.
[  393.491153][ T5940] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  393.609338][ T5940] usb 5-1: USB disconnect, device number 30
[  393.639093][ T5911] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  393.659395][ T5911] usb 6-1: device descriptor read/8, error -71
[  393.679660][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  393.775139][ T5911] usb usb6-port1: unable to enumerate USB device
[  393.852906][T11164] netlink: 'syz.4.1612': attribute type 29 has an invalid length.
[  394.183493][ T5940] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  394.337633][T11169] fuse: Invalid rootmode
[  394.347218][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short
[  394.355490][ T5940] usb 5-1: not running at top speed; connect to a high speed hub
[  394.357076][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  394.361521][ T5940] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  394.361549][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.361570][ T5940] usb 5-1: Product: syz
[  394.361585][ T5940] usb 5-1: Manufacturer: syz
[  394.361595][ T5940] usb 5-1: SerialNumber: syz
[  394.623496][T11164] netlink: 'syz.4.1612': attribute type 29 has an invalid length.
[  394.624288][T11164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1612'.
[  394.906776][T11175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.907424][T11175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.394334][ T5830] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  395.414998][T11186] openvswitch: netlink: Message has 4 unknown bytes.
[  395.415025][T11186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.550920][ T5830] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  395.550952][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.550972][ T5830] usb 1-1: Product: syz
[  395.550980][ T5830] usb 1-1: Manufacturer: syz
[  395.550988][ T5830] usb 1-1: SerialNumber: syz
[  395.693470][ T5911] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  395.823313][ T5911] usb 6-1: device descriptor read/64, error -71
[  395.998216][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  395.998267][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  396.063342][ T5911] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  396.193446][ T5911] usb 6-1: device descriptor read/64, error -71
[  396.305801][ T5911] usb usb6-port1: attempt power cycle
[  396.649401][ T5940] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  396.650548][ T5940] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  396.690127][ T5940] usb 5-1: 2:1: cannot set freq 13115191 to ep 0x82
[  396.693886][ T5911] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  396.715412][ T5911] usb 6-1: device descriptor read/8, error -71
[  396.808320][ T5940] usb 5-1: USB disconnect, device number 31
[  396.994121][ T5911] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  397.013760][ T5911] usb 6-1: device descriptor read/8, error -71
[  397.021390][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  397.154679][ T5911] usb usb6-port1: unable to enumerate USB device
[  397.235738][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.238905][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.245983][T11204] program syz.4.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  397.260803][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1624'.
[  397.369199][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369213][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369313][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369322][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369427][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369435][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369530][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369539][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369623][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369633][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369728][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369736][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369843][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369852][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.369940][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.369948][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.370036][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.370045][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.370150][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.370159][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.370247][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.370256][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.370352][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.370361][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.371472][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.371483][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.371586][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.371595][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.371692][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.371701][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.371812][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.371822][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.371912][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.371921][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372015][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372024][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372121][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372130][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372217][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372226][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372315][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372325][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372432][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372441][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372527][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372537][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372625][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372633][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372721][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372730][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372823][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372832][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.372913][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.372922][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.373010][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.373020][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.373108][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.373116][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.376113][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.376125][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.382220][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.382231][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.390443][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.390455][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.392033][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.392044][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.394737][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.394749][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.396691][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.396702][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.400201][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.400212][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.401834][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.405232][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.410898][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.410910][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.414500][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.417411][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.419726][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.419736][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.421012][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.421022][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.424646][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.424657][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.425180][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.425244][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.427136][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.427147][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.429810][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.429821][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.449110][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.449122][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.449286][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.449294][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.449448][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.449457][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.449599][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.449607][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.449906][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.449914][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.450226][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.450236][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.451511][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.451521][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.452316][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.452334][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.453897][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.453908][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.466049][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.466060][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.468277][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.468288][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.469889][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.469899][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.472772][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.472783][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.474458][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.474469][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.488311][T11209] binder: BINDER_SET_CONTEXT_MGR already set
[  397.488540][T11209] binder: 11207:11209 ioctl 4018620d 200000000100 returned -16
[  397.625343][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  398.017920][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  398.020107][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  398.027768][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  398.027819][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  398.028949][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  398.156225][ T5830] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  398.188923][ T5830] usb 1-1: USB disconnect, device number 101
[  398.272052][T11217] program syz.3.1628 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.753463][ T5940] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  398.918794][ T5940] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  398.918881][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.918901][ T5940] usb 6-1: Product: syz
[  398.918916][ T5940] usb 6-1: Manufacturer: syz
[  398.918931][ T5940] usb 6-1: SerialNumber: syz
[  398.957014][ T5940] usb 6-1: config 0 descriptor??
[  399.170447][ T5940] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  399.980234][T11251] netlink: 'syz.3.1638': attribute type 1 has an invalid length.
[  400.083300][ T8127] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[  400.203942][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.227239][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.309046][ T8127] usb 1-1: unable to get BOS descriptor or descriptor too short
[  400.310904][ T8127] usb 1-1: not running at top speed; connect to a high speed hub
[  400.341627][ T8127] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  400.341660][ T8127] usb 1-1: config 1 interface 0 has no altsetting 0
[  400.375261][ T8127] usb 1-1: string descriptor 0 read error: -22
[  400.375457][ T8127] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40
[  400.375483][ T8127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.415124][T11248] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  400.806996][T11256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1640'.
[  400.807022][T11256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1640'.
[  400.807038][T11256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1640'.
[  401.063603][ T5940] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  401.150929][ T5940] usb 6-1: USB disconnect, device number 27
[  401.193746][ T8127] usbhid 1-1:1.0: can't add hid device: -71
[  401.193870][ T8127] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  401.224964][ T8127] usb 1-1: USB disconnect, device number 102
[  402.808324][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'.
[  402.958896][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.960936][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.965934][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.966504][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.360504][   T60] Bluetooth: hci0: ACL packet for unknown connection handle 3472
[  403.384088][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.384411][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.544363][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1650'.
[  404.297427][T11319] kvm: user requested TSC rate below hardware speed
[  404.892757][T11333] loop4: detected capacity change from 0 to 1
[  404.957880][T11333] Dev loop4: unable to read RDB block 1
[  404.957923][T11333]  loop4: unable to read partition table
[  404.958124][T11333] loop4: partition table beyond EOD, truncated
[  404.958172][T11333] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  404.992757][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  405.159175][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  405.159206][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.159226][    T9] usb 5-1: Product: syz
[  405.159241][    T9] usb 5-1: Manufacturer: syz
[  405.159255][    T9] usb 5-1: SerialNumber: syz
[  405.348692][T11339] 9p: Bad value for 'rfdno'
[  405.623909][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  405.624149][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  406.254075][T11356] binder: 11355:11356 ioctl 80585882 200000000180 returned -22
[  406.510602][T11363] new mount options do not match the existing superblock, will be ignored
[  406.566549][T11363] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  406.577608][T11368] FAULT_INJECTION: forcing a failure.
[  406.577608][T11368] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  406.577643][T11368] CPU: 1 UID: 0 PID: 11368 Comm: syz.0.1678 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  406.577669][T11368] Tainted: [L]=SOFTLOCKUP
[  406.577676][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  406.577687][T11368] Call Trace:
[  406.577696][T11368]  <TASK>
[  406.577703][T11368]  dump_stack_lvl+0xe8/0x150
[  406.577729][T11368]  should_fail_ex+0x46b/0x600
[  406.577754][T11368]  prepare_alloc_pages+0x22a/0x6b0
[  406.577790][T11368]  __alloc_frozen_pages_noprof+0x12f/0x380
[  406.577822][T11368]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  406.577864][T11368]  __alloc_pages_noprof+0x10/0x100
[  406.577892][T11368]  alloc_pages_bulk_noprof+0x6c0/0x8c0
[  406.577925][T11368]  ? copy_splice_read+0x16f/0xab0
[  406.577953][T11368]  copy_splice_read+0x19f/0xab0
[  406.577983][T11368]  ? __pfx_copy_splice_read+0x10/0x10
[  406.578003][T11368]  ? rcu_is_watching+0x15/0xb0
[  406.578031][T11368]  ? look_up_lock_class+0x57/0x110
[  406.578055][T11368]  ? register_lock_class+0x31/0x2e0
[  406.578081][T11368]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  406.578113][T11368]  ? alloc_pipe_info+0x373/0x4d0
[  406.578140][T11368]  ? __pfx_copy_splice_read+0x10/0x10
[  406.578162][T11368]  splice_direct_to_actor+0x483/0xc80
[  406.578201][T11368]  ? __pfx_direct_splice_actor+0x10/0x10
[  406.578231][T11368]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  406.578264][T11368]  do_splice_direct+0x19b/0x2a0
[  406.578290][T11368]  ? __pfx_do_splice_direct+0x10/0x10
[  406.578314][T11368]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  406.578342][T11368]  ? rw_verify_area+0x25b/0x4e0
[  406.578370][T11368]  do_sendfile+0x547/0x7e0
[  406.578391][T11368]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  406.578423][T11368]  ? __pfx_do_sendfile+0x10/0x10
[  406.578452][T11368]  __se_sys_sendfile64+0x144/0x1a0
[  406.578474][T11368]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  406.578501][T11368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.578520][T11368]  do_syscall_64+0x15f/0xf80
[  406.578548][T11368]  ? trace_irq_disable+0x3b/0x140
[  406.578570][T11368]  ? clear_bhb_loop+0x40/0x90
[  406.578593][T11368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.578612][T11368] RIP: 0033:0x7fa8cbaac819
[  406.578630][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.578646][T11368] RSP: 002b:00007fa8c9cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  406.578667][T11368] RAX: ffffffffffffffda RBX: 00007fa8cbd25fa0 RCX: 00007fa8cbaac819
[  406.578681][T11368] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  406.578693][T11368] RBP: 00007fa8c9cfe090 R08: 0000000000000000 R09: 0000000000000000
[  406.578705][T11368] R10: 0001200000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.578718][T11368] R13: 00007fa8cbd26038 R14: 00007fa8cbd25fa0 R15: 00007ffc0e31edf8
[  406.578748][T11368]  </TASK>
[  406.722668][ T5911] kernel write not supported for file /input/event2 (pid: 5911 comm: kworker/1:5)
[  406.771006][ T1462] Bluetooth: hci5: Frame reassembly failed (-84)
[  407.213685][ T8127] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  407.375720][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.375741][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.375753][ T8127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  407.375813][ T8127] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  407.375827][ T8127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.381068][ T8127] usb 1-1: config 0 descriptor??
[  407.393288][ T5830] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  407.565377][ T5830] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  407.565407][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.570726][ T5830] usb 6-1: config 0 descriptor??
[  407.640200][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  407.640747][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  407.671504][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  407.671547][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  407.678526][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  407.726070][    T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  407.752217][    T9] usb 5-1: USB disconnect, device number 33
[  407.782062][T11381] netlink: 'syz.5.1683': attribute type 13 has an invalid length.
[  407.814459][T11381] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.819778][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819811][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819833][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819857][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819882][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819905][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819930][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819954][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.819979][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.820002][ T8127] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  407.896261][ T8127] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  408.007825][ T5830] usb 6-1: Cannot read MAC address
[  408.008206][ T5830] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  408.035191][ T5830] usb 6-1: USB disconnect, device number 28
[  408.082235][    T9] usb 1-1: USB disconnect, device number 103
[  408.217162][T11384] netlink: 'syz.4.1684': attribute type 7 has an invalid length.
[  408.622927][T11390] FAULT_INJECTION: forcing a failure.
[  408.622927][T11390] name failslab, interval 1, probability 0, space 0, times 0
[  408.622964][T11390] CPU: 1 UID: 0 PID: 11390 Comm: syz.0.1686 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  408.622989][T11390] Tainted: [L]=SOFTLOCKUP
[  408.622996][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  408.623008][T11390] Call Trace:
[  408.623015][T11390]  <TASK>
[  408.623023][T11390]  dump_stack_lvl+0xe8/0x150
[  408.623058][T11390]  should_fail_ex+0x46b/0x600
[  408.623083][T11390]  should_failslab+0xa8/0x100
[  408.623111][T11390]  __kmalloc_cache_noprof+0x84/0x690
[  408.623136][T11390]  ? alloc_super+0x5b/0xac0
[  408.623156][T11390]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  408.623180][T11390]  alloc_super+0x5b/0xac0
[  408.623204][T11390]  ? rt_spin_unlock+0x160/0x200
[  408.623226][T11390]  sget_fc+0x329/0xa40
[  408.623251][T11390]  ? __pfx_set_anon_super_fc+0x10/0x10
[  408.623274][T11390]  ? __pfx_ovl_fill_super+0x10/0x10
[  408.623296][T11390]  get_tree_nodev+0x2a/0x150
[  408.623323][T11390]  vfs_get_tree+0x92/0x2a0
[  408.623351][T11390]  do_new_mount+0x341/0xd30
[  408.623370][T11390]  ? apparmor_capable+0x126/0x170
[  408.623399][T11390]  ? __pfx_do_new_mount+0x10/0x10
[  408.623418][T11390]  ? ns_capable+0x89/0xe0
[  408.623439][T11390]  ? path_mount+0x690/0x10e0
[  408.623458][T11390]  ? user_path_at+0xd4/0x160
[  408.623485][T11390]  ? user_path_at+0xd4/0x160
[  408.623510][T11390]  __se_sys_mount+0x31d/0x420
[  408.623538][T11390]  ? __pfx___se_sys_mount+0x10/0x10
[  408.623566][T11390]  ? __x64_sys_mount+0x20/0xc0
[  408.623585][T11390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.623606][T11390]  do_syscall_64+0x15f/0xf80
[  408.623629][T11390]  ? trace_irq_disable+0x3b/0x140
[  408.623650][T11390]  ? clear_bhb_loop+0x40/0x90
[  408.623671][T11390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.623689][T11390] RIP: 0033:0x7fa8cbaac819
[  408.623707][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.623723][T11390] RSP: 002b:00007fa8c9cfe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  408.623743][T11390] RAX: ffffffffffffffda RBX: 00007fa8cbd25fa0 RCX: 00007fa8cbaac819
[  408.623758][T11390] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  408.623772][T11390] RBP: 00007fa8c9cfe090 R08: 0000200000000400 R09: 0000000000000000
[  408.623785][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  408.623796][T11390] R13: 00007fa8cbd26038 R14: 00007fa8cbd25fa0 R15: 00007ffc0e31edf8
[  408.623824][T11390]  </TASK>
[  408.823276][   T60] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  408.823360][ T5140] Bluetooth: hci5: command 0x1003 tx timeout
[  409.238460][T11403] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1692'.
[  409.697610][T11423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1700'.
[  409.698631][T11423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1700'.
[  409.699071][T11423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1700'.
[  409.770631][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.771228][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.864339][ T5830] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  409.978002][T11429] new mount options do not match the existing superblock, will be ignored
[  409.978778][T11429] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  410.020204][ T5830] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  410.020231][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.020251][ T5830] usb 5-1: Product: syz
[  410.020265][ T5830] usb 5-1: Manufacturer: syz
[  410.020279][ T5830] usb 5-1: SerialNumber: syz
[  410.029161][ T8127] kernel write not supported for file /input/event2 (pid: 8127 comm: kworker/0:8)
[  410.060386][  T151] Bluetooth: hci5: Frame reassembly failed (-84)
[  410.509774][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  410.509816][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  410.523348][ T5940] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  410.689962][T11438] block device autoloading is deprecated and will be removed.
[  410.703481][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  410.703533][ T5940] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  410.703556][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.710947][ T5940] usb 1-1: config 0 descriptor??
[  410.722925][ T5940] pwc: Askey VC010 type 2 USB webcam detected.
[  410.870312][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.871185][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.119876][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00
[  411.120746][ T5940] pwc: recv_control_msg error -32 req 02 val 2700
[  411.121364][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00
[  411.322664][ T5940] pwc: recv_control_msg error -32 req 04 val 1300
[  411.327039][ T5940] pwc: recv_control_msg error -32 req 04 val 1400
[  411.338525][ T5940] pwc: recv_control_msg error -32 req 02 val 2000
[  411.340606][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.341564][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.344022][ T5940] pwc: recv_control_msg error -32 req 02 val 2100
[  411.576823][ T5940] pwc: recv_control_msg error -71 req 02 val 2500
[  411.577275][ T5940] pwc: recv_control_msg error -71 req 02 val 2400
[  411.577738][ T5940] pwc: recv_control_msg error -71 req 02 val 2600
[  411.578179][ T5940] pwc: recv_control_msg error -71 req 02 val 2900
[  411.579665][ T5940] pwc: recv_control_msg error -71 req 02 val 2800
[  411.580273][ T5940] pwc: recv_control_msg error -71 req 04 val 1100
[  411.580823][ T5940] pwc: recv_control_msg error -71 req 04 val 1200
[  411.619467][ T5940] pwc: Registered as video103.
[  411.631552][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38
[  411.678797][ T5940] usb 1-1: USB disconnect, device number 104
[  411.727204][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  411.939709][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  411.941680][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  411.941736][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  411.942534][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  411.976217][ T5830] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  412.004286][ T5830] usb 5-1: USB disconnect, device number 34
[  412.093439][   T60] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  412.435067][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'.
[  412.482083][T11458] binder: 11457:11458 ioctl c0306201 2000000003c0 returned -14
[  412.482425][T11458] binder: 11457:11458 unknown command 1078485782
[  412.482444][T11458] binder: 11457:11458 ioctl c0306201 200000000240 returned -22
[  412.505571][T11459] tracefs: Unknown parameter 'sëÿ'
[  413.305304][T11486] new mount options do not match the existing superblock, will be ignored
[  413.306419][T11486] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  413.378854][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  413.379261][  T818] kernel write not supported for file /input/event2 (pid: 818 comm: kworker/1:2)
[  413.380554][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  413.380639][ T4026] Bluetooth: hci5: Frame reassembly failed (-84)
[  413.602885][T11491] FAULT_INJECTION: forcing a failure.
[  413.602885][T11491] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  413.602907][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.5.1724 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  413.602923][T11491] Tainted: [L]=SOFTLOCKUP
[  413.602927][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  413.602934][T11491] Call Trace:
[  413.602938][T11491]  <TASK>
[  413.602943][T11491]  dump_stack_lvl+0xe8/0x150
[  413.602961][T11491]  should_fail_ex+0x46b/0x600
[  413.602976][T11491]  prepare_alloc_pages+0x22a/0x6b0
[  413.602996][T11491]  __alloc_frozen_pages_noprof+0x12f/0x380
[  413.603014][T11491]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  413.603038][T11491]  __alloc_pages_noprof+0x10/0x100
[  413.603055][T11491]  alloc_pages_bulk_noprof+0x6c0/0x8c0
[  413.603075][T11491]  ? copy_splice_read+0x16f/0xab0
[  413.603090][T11491]  copy_splice_read+0x19f/0xab0
[  413.603108][T11491]  ? __pfx_copy_splice_read+0x10/0x10
[  413.603120][T11491]  ? rcu_is_watching+0x15/0xb0
[  413.603153][T11491]  ? look_up_lock_class+0x57/0x110
[  413.603178][T11491]  ? register_lock_class+0x31/0x2e0
[  413.603202][T11491]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  413.603233][T11491]  ? alloc_pipe_info+0x373/0x4d0
[  413.603259][T11491]  ? __pfx_copy_splice_read+0x10/0x10
[  413.603279][T11491]  splice_direct_to_actor+0x483/0xc80
[  413.603312][T11491]  ? __pfx_direct_splice_actor+0x10/0x10
[  413.603342][T11491]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  413.603374][T11491]  do_splice_direct+0x19b/0x2a0
[  413.603398][T11491]  ? __pfx_do_splice_direct+0x10/0x10
[  413.603422][T11491]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  413.603451][T11491]  ? rw_verify_area+0x25b/0x4e0
[  413.603468][T11491]  do_sendfile+0x547/0x7e0
[  413.603480][T11491]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  413.603498][T11491]  ? __pfx_do_sendfile+0x10/0x10
[  413.603515][T11491]  __se_sys_sendfile64+0x144/0x1a0
[  413.603527][T11491]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  413.603542][T11491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.603554][T11491]  do_syscall_64+0x15f/0xf80
[  413.603567][T11491]  ? trace_irq_disable+0x3b/0x140
[  413.603579][T11491]  ? clear_bhb_loop+0x40/0x90
[  413.603593][T11491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.603604][T11491] RIP: 0033:0x7fc6006cc819
[  413.603615][T11491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.603624][T11491] RSP: 002b:00007fc5fe926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  413.603637][T11491] RAX: ffffffffffffffda RBX: 00007fc600945fa0 RCX: 00007fc6006cc819
[  413.603645][T11491] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  413.603652][T11491] RBP: 00007fc5fe926090 R08: 0000000000000000 R09: 0000000000000000
[  413.603659][T11491] R10: 0001200000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.603672][T11491] R13: 00007fc600946038 R14: 00007fc600945fa0 R15: 00007ffe12cb1408
[  413.603688][T11491]  </TASK>
[  413.799421][T11494] libceph: resolve '400' (ret=-3): failed
[  413.878528][T11497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.879058][T11497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.212209][T11506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1731'.
[  415.105928][  T818] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  415.233388][  T818] usb 5-1: device descriptor read/64, error -71
[  415.373325][   T60] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  415.473299][  T818] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  415.603312][  T818] usb 5-1: device descriptor read/64, error -71
[  415.685448][ T5940] usb 4-1: USB disconnect, device number 17
[  415.714139][  T818] usb usb5-port1: attempt power cycle
[  415.981902][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  415.992827][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  416.001157][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  416.019487][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  416.021829][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  416.102033][  T818] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  416.162218][  T818] usb 5-1: device descriptor read/8, error -71
[  416.413052][  T818] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  416.413283][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  416.434139][  T818] usb 5-1: device descriptor read/8, error -71
[  416.554220][  T818] usb usb5-port1: unable to enumerate USB device
[  416.772772][T11538] chnl_net:caif_netlink_parms(): no params data found
[  417.179743][T11538] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.179865][T11538] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.179992][T11538] bridge_slave_0: entered allmulticast mode
[  417.181713][T11538] bridge_slave_0: entered promiscuous mode
[  417.314071][T11538] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.314146][T11538] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.314309][T11538] bridge_slave_1: entered allmulticast mode
[  417.315970][T11538] bridge_slave_1: entered promiscuous mode
[  417.378227][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.395483][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.466374][T11557] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  417.575629][T11538] team0: Port device team_slave_0 added
[  417.578902][T11538] team0: Port device team_slave_1 added
[  417.640244][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.640260][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.640287][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.642337][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.642351][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.642376][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.807155][T11538] hsr_slave_0: entered promiscuous mode
[  417.807920][T11538] hsr_slave_1: entered promiscuous mode
[  417.811455][T11538] debugfs: 'hsr0' already exists in 'hsr'
[  417.811470][T11538] Cannot create hsr debugfs directory
[  418.255074][ T5833] Bluetooth: hci5: command tx timeout
[  418.276411][T11577] netlink: 'syz.0.1749': attribute type 21 has an invalid length.
[  418.393342][ T5911] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  418.490000][T11538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.570369][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  418.570401][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.570421][ T5911] usb 6-1: Product: syz
[  418.570436][ T5911] usb 6-1: Manufacturer: syz
[  418.570451][ T5911] usb 6-1: SerialNumber: syz
[  418.627257][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1749'.
[  418.928191][T11538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.007009][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  419.007069][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  419.278750][T11590] FAULT_INJECTION: forcing a failure.
[  419.278750][T11590] name failslab, interval 1, probability 0, space 0, times 0
[  419.278772][T11590] CPU: 1 UID: 0 PID: 11590 Comm: syz.4.1757 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  419.278787][T11590] Tainted: [L]=SOFTLOCKUP
[  419.278791][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  419.278798][T11590] Call Trace:
[  419.278803][T11590]  <TASK>
[  419.278808][T11590]  dump_stack_lvl+0xe8/0x150
[  419.278828][T11590]  should_fail_ex+0x46b/0x600
[  419.278843][T11590]  should_failslab+0xa8/0x100
[  419.278860][T11590]  __kmalloc_node_track_caller_noprof+0xe2/0x7e0
[  419.278879][T11590]  ? vfs_parse_monolithic_sep+0x21d/0x360
[  419.278905][T11590]  kmemdup_nul+0x36/0xf0
[  419.278923][T11590]  vfs_parse_monolithic_sep+0x21d/0x360
[  419.278938][T11590]  ? __pfx_ovl_next_opt+0x10/0x10
[  419.278952][T11590]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  419.278970][T11590]  ? alloc_fs_context+0x9e9/0xd50
[  419.278989][T11590]  do_new_mount+0x304/0xd30
[  419.279000][T11590]  ? apparmor_capable+0x126/0x170
[  419.279016][T11590]  ? security_capable+0x7e/0x2c0
[  419.279033][T11590]  ? __pfx_do_new_mount+0x10/0x10
[  419.279044][T11590]  ? ns_capable+0x89/0xe0
[  419.279056][T11590]  ? path_mount+0x690/0x10e0
[  419.279067][T11590]  ? user_path_at+0xd4/0x160
[  419.279086][T11590]  ? user_path_at+0xd4/0x160
[  419.279101][T11590]  __se_sys_mount+0x31d/0x420
[  419.279116][T11590]  ? __pfx___se_sys_mount+0x10/0x10
[  419.279131][T11590]  ? __x64_sys_mount+0x20/0xc0
[  419.279142][T11590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.279154][T11590]  do_syscall_64+0x15f/0xf80
[  419.279169][T11590]  ? trace_irq_disable+0x3b/0x140
[  419.279181][T11590]  ? clear_bhb_loop+0x40/0x90
[  419.279194][T11590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.279206][T11590] RIP: 0033:0x7f363c02c819
[  419.279217][T11590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.279226][T11590] RSP: 002b:00007f363a286028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  419.279238][T11590] RAX: ffffffffffffffda RBX: 00007f363c2a5fa0 RCX: 00007f363c02c819
[  419.279246][T11590] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000
[  419.279254][T11590] RBP: 00007f363a286090 R08: 0000200000000200 R09: 0000000000000000
[  419.279261][T11590] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000002
[  419.279268][T11590] R13: 00007f363c2a6038 R14: 00007f363c2a5fa0 R15: 00007ffe365bc4b8
[  419.279283][T11590]  </TASK>
[  419.552075][T11594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.701290][T11538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.107474][T11538] batman_adv: batadv0: Removing interface: netdevsim0
[  420.148857][T11538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.164757][ T6114] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  420.313337][ T6114] usb 5-1: Using ep0 maxpacket: 32
[  420.320713][ T6114] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  420.320749][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.320768][ T6114] usb 5-1: Product: syz
[  420.320826][ T6114] usb 5-1: Manufacturer: syz
[  420.320841][ T6114] usb 5-1: SerialNumber: syz
[  420.335016][ T5833] Bluetooth: hci5: command tx timeout
[  420.386336][ T6114] usb 5-1: config 0 descriptor??
[  420.406744][ T6114] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  420.633323][    T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  420.795435][    T9] usb 1-1: Using ep0 maxpacket: 16
[  420.813760][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  420.833890][    T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  420.833919][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.833940][    T9] usb 1-1: Product: syz
[  420.833954][    T9] usb 1-1: Manufacturer: syz
[  420.833970][    T9] usb 1-1: SerialNumber: syz
[  420.850110][T11538] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  420.910545][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  420.918413][T11538] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  420.952587][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  420.957506][T11538] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  421.005013][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  421.007250][T11538] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  421.048657][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  421.056258][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  421.056908][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  421.057517][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  421.057568][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  421.112441][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  421.152150][ T5911] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  421.181089][ T5911] usb 6-1: USB disconnect, device number 29
[  421.382698][   T38] INFO: task syz-executor:5826 blocked for more than 143 seconds.
[  421.382721][   T38]       Tainted: G             L      syzkaller #0
[  421.382730][ [  421.382730][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  421.382738][   T38] task:syz-executor    state:D stack:22080 pid:5826  tgid:5826  ppid:1      task_flags:0x400140 flags:0x00080002
[  421.382783][   T38] Call Trace:
[  421.382844][   T38]  <TASK>
[  421.382856][   T38]  __schedule+0x169e/0x54f0
[  421.382891][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  421.382914][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  421.382934][   T38]  ? rt_spin_lock+0x1e0/0x400
[  421.382995][   T38]  ? __pfx___schedule+0x10/0x10
[  421.383021][   T38]  ? schedule+0x90/0x360
[  421.383041][   T38]  schedule+0x164/0x360
[  421.383061][   T38]  fuse_chan_wait_aborted+0x15b/0x250
[  421.383088][   T38]  ? __pfx_fuse_chan_wait_aborted+0x10/0x10
[  421.383241][   T38]  ? __pfx_autoremove_wake_function+0x10/0x10
[  421.383267][   T38]  ? __pfx_fuse_chan_abort+0x10/0x10
[  421.383347][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.383371][   T38]  fuse_conn_destroy+0x1e7/0x3e0
[  421.383393][   T38]  ? __pfx_fuse_conn_destroy+0x10/0x10
[  421.383421][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  421.383446][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  421.383523][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  421.383557][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  421.383587][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  421.383613][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  421.383687][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  421.383716][   T38]  fuse_kill_sb_anon+0x1ef/0x270
[  421.383746][   T38]  deactivate_locked_super+0xbc/0x130
[  421.383773][   T38]  cleanup_mnt+0x437/0x4d0
[  421.383848][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[  421.383878][   T38]  task_work_run+0x1d9/0x270
[  421.383907][   T38]  ? __pfx_task_work_run+0x10/0x10
[  421.383939][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.384011][   T38]  exit_to_user_mode_loop+0xed/0x480
[  421.384035][   T38]  ? rcu_is_watching+0x15/0xb0
[  421.384061][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.384082][   T38]  do_syscall_64+0x33e/0xf80
[  421.384108][   T38]  ? trace_irq_disable+0x3b/0x140
[  421.384175][   T38]  ? clear_bhb_loop+0x40/0x90
[  421.384199][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.384218][   T38] RIP: 0033:0x7f82ac55da57
[  421.384236][   T38] RSP: 002b:00007ffe602883d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  421.384256][   T38] RAX: 0000000000000000 RBX: 00007f82ac5f2048 RCX: 00007f82ac55da57
[  421.384271][   T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60288490
[  421.387110][   T38] RBP: 00007ffe60288490 R08: 00007ffe60289490 R09: 00000000ffffffff
[  421.387176][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe60289520
[  421.387190][   T38] R13: 00007f82ac5f2048 R14: 0000000000042c50 R15: 00007ffe60289560
[  421.387221][   T38]  </TASK>
[  421.387337][   T38] 
[  421.387337][   T38] Showing all locks held in the system:
[  421.387347][   T38] 4 locks held by kworker/0:0/9:
[  421.387358][   T38]  #0: ffff888021a94938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[  421.387421][   T38]  #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[  421.387517][   T38]  #2: ffff88802acaa210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  421.387564][   T38]  #3: ffff88803852e210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  421.387661][   T38] 4 locks held by pr/legacy/17:
[  421.387672][   T38]  #0: ffffffff8e3ba3a0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  421.387720][   T38]  #1: ffffffff8e2a1c98 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  421.387816][   T38]  #2: ffffffff9a0291d8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90
[  421.387867][   T38]  #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  421.387915][   T38] 1 lock held by khungtaskd/38:
[  421.387974][   T38]  #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  421.388047][   T38] 1 lock held by klogd/5180:
[  421.388058][   T38]  #0: ffffffff8e3ba298 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610
[  421.388157][   T38] 2 locks held by getty/5580:
[  421.388168][   T38]  #0: ffff88802c0540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  421.388215][   T38]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  421.388315][   T38] 4 locks held by udevd/5822:
[  421.388326][   T38]  #0: ffff888035e19b80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20
[  421.388378][   T38]  #1: ffff888037883878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  421.388486][   T38]  #2: ffff888027d181e8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  421.388540][   T38]  #3: ffff88805d970210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  421.388634][   T38] 1 lock held by syz-executor/5826:
[  421.388645][   T38]  #0: ffff88805d9680d0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  421.388697][   T38] 3 locks held by kworker/1:4/5830:
[  421.388708][   T38]  #0: ffff88813ff5f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[  421.388801][   T38]  #1: ffffc90004bafc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[  421.388847][   T38]  #2: ffff88805a3d1260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0
[  421.390977][   T38] 3 locks held by kworker/1:5/5911:
[  421.390991][   T38]  #0: ffff888021a94938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[  421.391041][   T38]  #1: ffffc90004f2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[  421.391222][   T38]  #2: ffff88802ae04210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  421.391321][   T38] 4 locks held by udevd/5969:
[  421.391332][   T38]  #0: ffff88806bb1f720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20
[  421.391384][   T38]  #1: ffff8880385ac478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  421.391725][   T38]  #2: ffff888040bc14b8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  421.391832][   T38]  #3: ffff88803852e210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  421.391878][   T38] 5 locks held by kworker/1:7/6114:
[  421.391890][   T38]  #0: ffff888021a94938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[  421.391985][   T38]  #1: ffffc900057b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[  421.392030][   T38]  #2: ffff88802ae12210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  421.392755][   T38]  #3: ffff88805d970210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  421.392808][   T38]  #4: ffff888032f5a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  421.394022][   T38] 1 lock held by syz-executor/11538:
[  421.394049][   T38]  #0: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30
[  421.394104][   T38] 1 lock held by syz.0.1761/11606:
[  421.394116][   T38]  #0: ffff8880388cf328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  421.394421][   T38] 
[  421.394427][   T38] =============================================
[  421.394427][   T38] 
[  421.395467][   T38] NMI backtrace for cpu 0
[  421.395486][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  421.395512][   T38] Tainted: [L]=SOFTLOCKUP
[  421.395519][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  421.395529][   T38] Call Trace:
[  421.395537][   T38]  <TASK>
[  421.395545][   T38]  dump_stack_lvl+0xe8/0x150
[  421.395569][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  421.395593][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  421.395615][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  421.395637][   T38]  sys_info+0x135/0x170
[  421.395663][   T38]  watchdog+0xfd3/0x1030
[  421.395690][   T38]  ? watchdog+0x1c9/0x1030
[  421.395715][   T38]  kthread+0x388/0x470
[  421.395739][   T38]  ? __pfx_watchdog+0x10/0x10
[  421.395757][   T38]  ? __pfx_kthread+0x10/0x10
[  421.395782][   T38]  ret_from_fork+0x514/0xb70
[  421.395804][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  421.395824][   T38]  ? __switch_to+0xc79/0x1410
[  421.395852][   T38]  ? __pfx_kthread+0x10/0x10
[  421.395876][   T38]  ret_from_fork_asm+0x1a/0x30
[  421.395912][   T38]  </TASK>
[  421.395937][   T38] Sending NMI from CPU 0 to CPUs 1:
[  421.395968][    C1] NMI backtrace for cpu 1
[  421.395983][    C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  421.396005][    C1] Tainted: [L]=SOFTLOCKUP
[  421.396011][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  421.396021][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  421.396050][    C1] Code: e8 7e 3b 7e fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 99 e7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a c4 fd 05 cc 44 89 f9 80 e1 07
[  421.396063][    C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202
[  421.396077][    C1] RAX: 1ffffffff3405200 RBX: 00000000000003fd RCX: 0000000000000000
[  421.396089][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[  421.396099][    C1] RBP: ffffffff9a029490 R08: 0000000000000000 R09: 0000000000000000
[  421.396110][    C1] R10: dffffc0000000000 R11: ffffffff8546b2d0 R12: dffffc0000000000
[  421.396122][    C1] R13: 0000000000000000 R14: ffffffff9a029200 R15: 0000000000000000
[  421.396133][    C1] FS:  0000000000000000(0000) GS:ffff888125b68000(0000) knlGS:0000000000000000
[  421.396146][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  421.396157][    C1] CR2: 00007fa8c9cdcff8 CR3: 000000003f072000 CR4: 00000000003526f0
[  421.396172][    C1] Call Trace:
[  421.396178][    C1]  <TASK>
[  421.396186][    C1]  wait_for_lsr+0x1aa/0x2f0
[  421.396210][    C1]  serial8250_console_write+0x120d/0x1b90
[  421.396238][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  421.396259][    C1]  ? console_flush_one_record+0xfa/0xb90
[  421.396281][    C1]  ? console_flush_one_record+0x48f/0xb90
[  421.396301][    C1]  console_flush_one_record+0x68b/0xb90
[  421.396322][    C1]  ? console_flush_one_record+0xfa/0xb90
[  421.396343][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[  421.396362][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  421.396385][    C1]  legacy_kthread_func+0x1b6/0x250
[  421.396404][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[  421.396423][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  421.396442][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  421.396463][    C1]  kthread+0x388/0x470
[  421.396482][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[  421.396499][    C1]  ? __pfx_kthread+0x10/0x10
[  421.396518][    C1]  ret_from_fork+0x514/0xb70
[  421.396536][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  421.396552][    C1]  ? __switch_to+0xc79/0x1410
[  421.396573][    C1]  ? __pfx_kthread+0x10/0x10
[  421.396593][    C1]  ret_from_fork_asm+0x1a/0x30
[  421.396618][    C1]  </TASK>
[  421.398653][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  421.398671][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  421.398698][   T38] Tainted: [L]=SOFTLOCKUP
[  421.398709][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  421.398720][   T38] Call Trace:
[  421.398729][   T38]  <TASK>
[  421.398737][   T38]  vpanic+0x56c/0xa60
[  421.398763][   T38]  ? __pfx___schedule+0x10/0x10
[  421.398786][   T38]  ? __pfx_vpanic+0x10/0x10
[  421.398817][   T38]  panic+0xc5/0xd0
[  421.398838][   T38]  ? __pfx_panic+0x10/0x10
[  421.398861][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  421.398893][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  421.398917][   T38]  watchdog+0x102c/0x1030
[  421.398944][   T38]  ? watchdog+0x1c9/0x1030
[  421.398970][   T38]  kthread+0x388/0x470
[  421.398993][   T38]  ? __pfx_watchdog+0x10/0x10
[  421.399011][   T38]  ? __pfx_kthread+0x10/0x10
[  421.399037][   T38]  ret_from_fork+0x514/0xb70
[  421.399061][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  421.399081][   T38]  ? __switch_to+0xc79/0x1410
[  421.399109][   T38]  ? __pfx_kthread+0x10/0x10
[  421.399133][   T38]  ret_from_fork_asm+0x1a/0x30
[  421.399168][   T38]  </TASK>
[  421.399839][   T38] Kernel Offset: disabled