last executing test programs:

11m19.713867043s ago: executing program 3 (id=856):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000600)="9302d3cd06ca39072be5dd2da61640f7cc093a880c2c27cabd15bc19ce66157d444fc8b31002a6b1c3f895eed681a2098083d1f261504be0c7e4fc37bfe21008b8ebf5f3481d7e72a270b3d5d4d874b3bf4d8c8acf7b6d7d555eb6c47460756544e27266014df08774eae00445e5d917fbe8f882bed2755b3d22b9fdfb098ba2418a3ad1d0f555848c740298f527e4233143613b7fb7c28f5f156b1719688558746535d101000000010000001da5d99f4b903a835c3228582da5544275caa67eaf77bb05dde815dfded6b86ba0f4000000000000000000", 0xd7}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000000240)}}], 0x2, 0x4840)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c)

11m19.46043521s ago: executing program 3 (id=860):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x6e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000)

11m19.269621945s ago: executing program 3 (id=862):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}], 0x0, 0x300000000000000, 0x0})

11m19.172134631s ago: executing program 3 (id=863):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc0205649, &(0x7f0000000000))
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x26)
ioctl$TCSETS2(r0, 0x5435, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
syz_io_uring_setup(0x588b, &(0x7f0000000040)={0x0, 0xd9a1, 0x10000, 0x2, 0x1e6}, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r5, 0xffff, &(0x7f00000001c0))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munmap(&(0x7f00009cb000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90b, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4000010, r4, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'netpci0\x00', @local})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r7}, 0x0)

11m19.034195125s ago: executing program 3 (id=864):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x7e1d40, 0x0)
close_range(r0, r0, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11m17.474565637s ago: executing program 3 (id=870):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x30, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) (async)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x7, 0x2001, 0x3, 0x7, 0xc5, "cf055a01839d7539e996b68bb1c8e98c069ea1", 0xe, 0xfffffffe}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})

11m17.176206003s ago: executing program 32 (id=870):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x30, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) (async)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x7, 0x2001, 0x3, 0x7, 0xc5, "cf055a01839d7539e996b68bb1c8e98c069ea1", 0xe, 0xfffffffe}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})

10m27.036128403s ago: executing program 4 (id=1302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

10m26.974529516s ago: executing program 4 (id=1305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

10m26.815298083s ago: executing program 4 (id=1308):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x4e21, 0x1, @loopback={0xfec0ffffffffffff}, 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000580)=ANY=[], 0x18}, 0x8050)

10m26.625020102s ago: executing program 4 (id=1312):
socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048010)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

10m26.590368017s ago: executing program 4 (id=1313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0)

10m26.238485676s ago: executing program 4 (id=1322):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4)
recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/81, 0x51}, 0x13c3}], 0x1, 0x0, 0x0)

10m25.885881711s ago: executing program 33 (id=1322):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4)
recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/81, 0x51}, 0x13c3}], 0x1, 0x0, 0x0)

5m43.254494042s ago: executing program 0 (id=3362):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x1a, 0x4, 0x5) (async)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000140)) (async)
r3 = getpid() (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x3}}, 0x20)
dup(r1) (async)
wait4(r3, &(0x7f0000000000), 0x20000000, 0x0) (async)
io_setup(0x8f0, &(0x7f0000002400)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x106, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])

5m42.988222545s ago: executing program 0 (id=3364):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xfffffffffd110f4f, 0xe, 0x285, 0xf7b, 0x6, 0x0, 0x0, 0x21, 0x5}}, 0x50)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m42.911580135s ago: executing program 0 (id=3365):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = syz_open_dev$video(&(0x7f00000000c0), 0x3e3, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc0405668, &(0x7f0000000000))
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
shutdown(r5, 0x1)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x5411, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x6, 'syz1\x00', @null, 0xb4, 0x5, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000740)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})

5m41.998325861s ago: executing program 0 (id=3372):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f804090581037d0795118287b9e06c24cbdee26b4e64"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xe0, 0x5, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0x99}}, [{{0x9, 0x5, 0x82, 0x2, 0x5b7, 0x0, 0x0, 0xf9}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x7, 0x5, 0x4, 0x8, 0x93}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x8)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x100035ab, 0x4)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0xb)
write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'm\x00'}, 0x8)
writev(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="e9", 0x1}], 0x2)
open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x109002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats})
umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8)

5m40.084407201s ago: executing program 0 (id=3390):
clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c731ccd10ce45abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad2", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x0, 0x5, 0x7, 0xbed8, 0x7, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r2, r3, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x800, 0x36)
statx(r4, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x6000, 0x100, &(0x7f0000000240))
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x2, {0x5, 0x1, 0x34, 0x8, 0x8, 0xffff672b, {0x4, 0x3, 0x101, 0xffff, 0xffffffffffffffff, 0x8, 0x7, 0xce90cbb, 0x80000000, 0xc000, 0x3, r2, r3, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

5m39.606258113s ago: executing program 0 (id=3396):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000140)="82651600", 0x4)

5m39.400098697s ago: executing program 34 (id=3396):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
write(r0, &(0x7f0000000140)="82651600", 0x4)

5m32.166583068s ago: executing program 2 (id=3440):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2d, 0xd, 0x0, 0xc, r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0x9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x7, 0x6})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5m31.919665945s ago: executing program 2 (id=3442):
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_submit(0x0, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}])
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="010003", 0x3}], 0x1}}], 0x1, 0x20008000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m31.732933558s ago: executing program 2 (id=3444):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000480)="660f388173ab0fc76fb4360fc9bb35cc00000f01c5ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
syz_clone(0x5611, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)

5m31.594705168s ago: executing program 2 (id=3445):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f804090581037d0795118287b9e06c24cbdee26b4e64"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xe0, 0x5, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0x99}}, [{{0x9, 0x5, 0x82, 0x2, 0x5b7, 0x0, 0x0, 0xf9}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x7, 0x5, 0x4, 0x8, 0x93}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x8)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x100035ab, 0x4)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0xb)
write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'm\x00'}, 0x8)
writev(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="e9", 0x1}], 0x2)
open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x109002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats})
umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8)

5m29.465916165s ago: executing program 2 (id=3452):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
syz_usb_ep_read(r0, 0xf, 0xfffffe4b, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x4, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000005c0)={&(0x7f0000000540)=[{0x8, 0x2800, 0x1f, &(0x7f0000000300)="9d7a38b7fe78ace5189a20367e8aa0c63e881d552a41d30f893868f9eb12ea"}, {0x8052, 0xa201, 0x3a, &(0x7f0000000340)="720fae1bd886c0f71f72d4574bf65bd6b5fd16f4be215a5e0752a8f9afceae90b0c3c747f3dcfe5df9c27cc60673770e078c59458d71c5cb4f55"}, {0xc8d, 0x2001, 0xc6, &(0x7f0000000380)="209201655263a21a43cc2e33bcdb6472744309e14277ca9f57894c2a2f3d2f3f0bc93fbd1ef7333597b2679f5562342cf327927c51df73ce95443ea8e0ad064afccb8a7230fb636b5743cc21287d52abb7f72de720c52d5c6a908b69356be336c5a0277c278da004c4e466a4bd97a50be6d33c8e6d9e0fa72b01c548516b8fe52aea35fa5a9541d03f1ced9ca4b80f6e9bb5efeae305dfdb1008e42c88f0a0ee1103ed750b9ea289b16130d621c581464e5c9d00b2a48579e45fe038641e7450b0007faf825a"}, {0x6, 0x10, 0x4a, &(0x7f0000000480)="67324e897698b4c4fb8f039f33b6338deb3418442991ddbe8cfd20ab080c18c99749aaa39830be3b3344909014dfe2cba8730ee068312dfe7f52e3561f6bb6f5980629662763339937fa"}, {0x2383, 0x2601, 0x26, &(0x7f0000000500)="62e432e2baa1836eac9a81be42decf3c3a21bd000dcf54f4b2ffebf3cea7f64408f45c06ff71"}], 0x5})
syz_usb_connect$uac3(0x6, 0xd7, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xc, 0xc0, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x25, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x48, 0x9}, [@selector_unit={0xb, 0x24, 0xc, 0xee, 0x6, "380c4f9c761c"}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x304, 0x2, 0x2, 0x7, 0xdf53, 0xfff7, 0x8, 0x8000}, @power_domain={0xc, 0x24, 0x10, 0x80, 0x0, 0x7, 0x5, "772a1e"}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x402, 0x1, 0x7, 0x401, 0x401, 0x80, 0x8, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x7, 0x41, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc0, 0x9, 0x8, {0xa, 0x25, 0x25, 0x43, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x1, 0x5e, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x4, 0x4, {0xa, 0x25, 0x25, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x5, 0xff, 0x40, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xa8, &(0x7f00000001c0)=@string={0xa8, 0x3, "c02e035e2f4206a55288421e4953a24c7567f43badde2d227237ff77b80c42616fd363215d6da5966397a0d7038448f0cd09c7dc7820eea177054f29ab8781a3682b30b01f287bc6716415582f2eae9b2f52012d0c776e8d97af617e5cc65227bccf277347acb4ee284435c548a58904c33250e4888cebb87e7f711154f25d17e74640d157461ef3581796774ba24f5e997541d5fd871d39065dfba9340b1479353897a4a614"}}]})

5m28.734309546s ago: executing program 2 (id=3456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x13108}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f0000003dc0)=""/4067, 0xfe3}, {&(0x7f0000000640)=""/261, 0x105}], 0x5}, 0x20102)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

5m28.365051974s ago: executing program 35 (id=3456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x13108}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f0000003dc0)=""/4067, 0xfe3}, {&(0x7f0000000640)=""/261, 0x105}], 0x5}, 0x20102)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

4.933204172s ago: executing program 5 (id=5534):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)=@svm={0x3, 0x1, 0x1080, {0xeeee8000}, {"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"}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0x105b)

4.292255837s ago: executing program 7 (id=5543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
readv(r1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x101, 0x0, 0x2, 0x9, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.158470168s ago: executing program 7 (id=5545):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500), r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)

4.13280528s ago: executing program 5 (id=5546):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12)

3.984208172s ago: executing program 7 (id=5547):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00')
pread64(r0, &(0x7f0000000600)=""/202, 0xca, 0x4000000000003)

3.852486851s ago: executing program 7 (id=5548):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x4020940d, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x82, @empty, 0x1}, 0x1c)
listen(r0, 0x0)

3.802400807s ago: executing program 5 (id=5549):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
gettid()
rt_sigprocmask(0x2000000, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)

3.66838653s ago: executing program 7 (id=5550):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x4, 0x4)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x120)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)

3.517089395s ago: executing program 7 (id=5551):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0)

2.984670427s ago: executing program 6 (id=5554):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)=@svm={0x3, 0x1, 0x1080, {0xeeee8000}, {"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"}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0x105b)

2.922480888s ago: executing program 1 (id=5555):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x441, 0x8000022, r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0)

2.62392974s ago: executing program 5 (id=5556):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xc0}}], 0x20, 0x4048800}, 0x0)

2.347735878s ago: executing program 1 (id=5557):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12)

2.105269748s ago: executing program 1 (id=5558):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

2.036172771s ago: executing program 6 (id=5559):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/245, 0xf5}, {&(0x7f0000001f00)=""/4082, 0xff2}, {&(0x7f0000000140)=""/268, 0x10c}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000001000)=""/151, 0x97}, {&(0x7f0000000080)=""/134, 0x86}, {&(0x7f0000000640)=""/139, 0x8b}], 0x8}, 0x10001}], 0x1, 0x10120, 0x0)

1.844340503s ago: executing program 1 (id=5560):
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
socket$unix(0x1, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(r2, 0x40140921, 0x200000000005)

1.844173881s ago: executing program 6 (id=5561):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400)

1.638734218s ago: executing program 6 (id=5562):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)

1.477797324s ago: executing program 6 (id=5563):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.348357104s ago: executing program 5 (id=5564):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock2(&(0x7f00007ab000/0x4000)=nil, 0x4000, 0x1)

878.67393ms ago: executing program 1 (id=5565):
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12)

347.880597ms ago: executing program 6 (id=5566):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)=@svm={0x3, 0x1, 0x1080, {0xeeee8000}, {"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"}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0x105b)

347.669532ms ago: executing program 1 (id=5567):
msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x8, 0x0)
msgget(0x0, 0x21a)
msgctl$IPC_RMID(0x0, 0x0)

0s ago: executing program 5 (id=5568):
r0 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x600})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000529000/0x4000)=nil, &(0x7f0000983000/0x3000)=nil, 0x4000, 0x2})

kernel console output (not intermixed with test programs):

nterval 0, changing to 7
[  829.938598][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  829.948665][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  829.961696][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  829.970779][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.985091][   T10] usb 6-1: config 0 descriptor??
[  830.074607][    T9] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  830.086813][    T9] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  830.099274][    T9] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  830.110100][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.121271][  T802] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[  830.271290][  T802] usb 8-1: device descriptor read/64, error -71
[  830.361474][T20431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  830.379884][T20431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.392781][    T9] usb 2-1: string descriptor 0 read error: -71
[  830.395953][  T802] usb usb8-port1: attempt power cycle
[  830.417924][   T10] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd
[  830.432642][   T10] hid_parser_main: 130 callbacks suppressed
[  830.432667][   T10] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  830.485629][   T10] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  830.511391][   T10] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  830.529039][   T10] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  830.538669][   T10] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  830.549090][    T9] usb 2-1: USB disconnect, device number 70
[  830.598711][   T10] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  830.674679][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  830.707528][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.752492][  T802] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[  830.803374][  T802] usb 8-1: device descriptor read/8, error -71
[  830.814017][    T9] usb 6-1: USB disconnect, device number 46
[  831.009036][T20462] dvmrp0: entered allmulticast mode
[  831.062785][  T802] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[  831.092085][  T802] usb 8-1: device descriptor read/8, error -71
[  831.202534][  T802] usb usb8-port1: unable to enumerate USB device
[  831.221343][    T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[  831.383221][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  831.394900][    T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  831.406820][    T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  831.422622][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  831.432215][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.440390][    T9] usb 6-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  831.460067][    T9] usb 6-1: Manufacturer: ю
[  831.465702][    T9] usb 6-1: SerialNumber: ࠧ
[  831.477422][T20457] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  831.707535][    T9] cdc_ncm 6-1:1.0: bind() failure
[  831.727472][    T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  831.734819][    T9] cdc_ncm 6-1:1.1: bind() failure
[  831.755443][    T9] usb 6-1: USB disconnect, device number 47
[  832.009786][T20478] FAULT_INJECTION: forcing a failure.
[  832.009786][T20478] name failslab, interval 1, probability 0, space 0, times 0
[  832.027833][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.6.4550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  832.027871][T20478] Tainted: [L]=SOFTLOCKUP
[  832.027880][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  832.027894][T20478] Call Trace:
[  832.027903][T20478]  <TASK>
[  832.027913][T20478]  dump_stack_lvl+0xe8/0x150
[  832.027953][T20478]  should_fail_ex+0x412/0x560
[  832.027985][T20478]  should_failslab+0xa8/0x100
[  832.028011][T20478]  __kmalloc_cache_noprof+0x88/0x660
[  832.028047][T20478]  ? vhost_task_create+0x123/0x380
[  832.028082][T20478]  vhost_task_create+0x123/0x380
[  832.028109][T20478]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  832.028134][T20478]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  832.028160][T20478]  ? __pfx_vhost_task_create+0x10/0x10
[  832.028197][T20478]  ? __pfx_vhost_task_fn+0x10/0x10
[  832.028234][T20478]  ? __lock_acquire+0x6b5/0x2cf0
[  832.028274][T20478]  kvm_mmu_post_init_vm+0x14c/0x300
[  832.028305][T20478]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  832.028352][T20478]  ? __mutex_trylock_common+0x158/0x260
[  832.028380][T20478]  ? __pfx___mutex_trylock_common+0x10/0x10
[  832.028411][T20478]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  832.028440][T20478]  ? register_lock_class+0x31/0x2e0
[  832.028476][T20478]  ? __lock_acquire+0x6b5/0x2cf0
[  832.028517][T20478]  ? kasan_quarantine_put+0xbb/0x1f0
[  832.028552][T20478]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  832.028586][T20478]  ? do_raw_write_lock+0x11d/0x260
[  832.028631][T20478]  kvm_vcpu_ioctl+0xa62/0xfd0
[  832.028663][T20478]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  832.028685][T20478]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  832.028731][T20478]  ? __fget_files+0x2a/0x420
[  832.028763][T20478]  ? __fget_files+0x2a/0x420
[  832.028791][T20478]  ? __fget_files+0x3a0/0x420
[  832.028818][T20478]  ? __fget_files+0x2a/0x420
[  832.028851][T20478]  ? bpf_lsm_file_ioctl+0x9/0x20
[  832.028874][T20478]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  832.028899][T20478]  __se_sys_ioctl+0xfc/0x170
[  832.028926][T20478]  do_syscall_64+0x14d/0xf80
[  832.028945][T20478]  ? trace_irq_disable+0x3b/0x150
[  832.028970][T20478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.028993][T20478]  ? clear_bhb_loop+0x40/0x90
[  832.029021][T20478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.029043][T20478] RIP: 0033:0x7fb59299c799
[  832.029064][T20478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.029084][T20478] RSP: 002b:00007fb593770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  832.029107][T20478] RAX: ffffffffffffffda RBX: 00007fb592c16090 RCX: 00007fb59299c799
[  832.029124][T20478] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  832.029137][T20478] RBP: 00007fb593770090 R08: 0000000000000000 R09: 0000000000000000
[  832.029151][T20478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.029165][T20478] R13: 00007fb592c16128 R14: 00007fb592c16090 R15: 00007ffdbcfe9b18
[  832.029201][T20478]  </TASK>
[  832.694556][T20487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.711511][T20487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.747981][T20487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4552'.
[  832.881372][   T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  832.911483][    T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  832.995246][T20493] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4554'.
[  833.043365][T20493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  833.052990][   T10] usb 2-1: Using ep0 maxpacket: 8
[  833.068529][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  833.080960][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  833.087697][T20493] bond_slave_0: left promiscuous mode
[  833.095177][    T9] usb 6-1: device descriptor read/64, error -71
[  833.112320][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  833.134773][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  833.148791][   T10] usb 2-1: SerialNumber: syz
[  833.196799][T20493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  833.212553][T20493] bond_slave_1: left promiscuous mode
[  833.245540][T20493] bond0 (unregistering): Released all slaves
[  833.368682][    T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  833.511277][    T9] usb 6-1: device descriptor read/64, error -71
[  833.623013][    T9] usb usb6-port1: attempt power cycle
[  833.811397][  T802] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  833.981773][  T802] usb 7-1: Using ep0 maxpacket: 16
[  833.991393][    T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  833.996540][  T802] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  834.021963][    T9] usb 6-1: device descriptor read/8, error -71
[  834.026675][  T802] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  834.041239][  T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  834.055832][  T802] usb 7-1: Product: syz
[  834.071228][  T802] usb 7-1: Manufacturer: syz
[  834.076266][  T802] usb 7-1: SerialNumber: syz
[  834.086020][  T802] usb 7-1: config 0 descriptor??
[  834.281629][    T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  834.308290][T16562] usb 7-1: USB disconnect, device number 69
[  834.322735][    T9] usb 6-1: device descriptor read/8, error -71
[  834.451638][    T9] usb usb6-port1: unable to enumerate USB device
[  834.911312][  T987] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[  835.007453][   T10] usb 2-1: bad CDC descriptors
[  835.027950][   T10] usb 2-1: USB disconnect, device number 71
[  835.062851][  T987] usb 8-1: Using ep0 maxpacket: 32
[  835.070463][  T987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  835.081043][  T987] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  835.091899][  T987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.103572][T20515] FAULT_INJECTION: forcing a failure.
[  835.103572][T20515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  835.116873][T20515] CPU: 1 UID: 0 PID: 20515 Comm: syz.1.4563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  835.116907][T20515] Tainted: [L]=SOFTLOCKUP
[  835.116916][T20515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  835.116929][T20515] Call Trace:
[  835.116939][T20515]  <TASK>
[  835.116948][T20515]  dump_stack_lvl+0xe8/0x150
[  835.116986][T20515]  should_fail_ex+0x412/0x560
[  835.117016][T20515]  _copy_from_user+0x2d/0xb0
[  835.117044][T20515]  ucma_create_id+0xe9/0x380
[  835.117074][T20515]  ? __pfx_ucma_create_id+0x10/0x10
[  835.117115][T20515]  ucma_write+0x24e/0x2f0
[  835.117152][T20515]  ? __pfx_ucma_write+0x10/0x10
[  835.117175][T20515]  ? security_file_permission+0x75/0x260
[  835.117204][T20515]  ? rw_verify_area+0x255/0x4d0
[  835.117240][T20515]  vfs_writev+0x4bd/0x990
[  835.117268][T20515]  ? __pfx_ucma_write+0x10/0x10
[  835.117295][T20515]  ? __pfx_vfs_writev+0x10/0x10
[  835.117335][T20515]  ? __fget_files+0x2a/0x420
[  835.117367][T20515]  ? __fget_files+0x3a0/0x420
[  835.117395][T20515]  ? __fget_files+0x2a/0x420
[  835.117430][T20515]  do_writev+0x154/0x2e0
[  835.117459][T20515]  ? __pfx_do_writev+0x10/0x10
[  835.117497][T20515]  do_syscall_64+0x14d/0xf80
[  835.117517][T20515]  ? trace_irq_disable+0x3b/0x150
[  835.117542][T20515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.117565][T20515]  ? clear_bhb_loop+0x40/0x90
[  835.117591][T20515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.117613][T20515] RIP: 0033:0x7fc8d279c799
[  835.117635][T20515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.117654][T20515] RSP: 002b:00007fc8d3608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  835.117677][T20515] RAX: ffffffffffffffda RBX: 00007fc8d2a15fa0 RCX: 00007fc8d279c799
[  835.117693][T20515] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c
[  835.117706][T20515] RBP: 00007fc8d3608090 R08: 0000000000000000 R09: 0000000000000000
[  835.117719][T20515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  835.117732][T20515] R13: 00007fc8d2a16038 R14: 00007fc8d2a15fa0 R15: 00007ffc73288e08
[  835.117763][T20515]  </TASK>
[  835.121518][    T9] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  835.348126][  T987] usb 8-1: config 0 descriptor??
[  835.356187][  T987] hub 8-1:0.0: bad descriptor, ignoring hub
[  835.362239][  T987] hub 8-1:0.0: probe with driver hub failed with error -5
[  835.371450][  T987] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  835.448129][T20517] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.4564'.
[  835.521253][    T9] usb 7-1: Using ep0 maxpacket: 16
[  835.528966][    T9] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  835.539545][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  835.551324][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  835.562824][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  835.576871][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  835.586973][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.595214][    T9] usb 7-1: Product: syz
[  835.599645][    T9] usb 7-1: Manufacturer: syz
[  835.604473][    T9] usb 7-1: SerialNumber: syz
[  835.613836][    T9] usb 7-1: config 0 descriptor??
[  835.763922][T20522] fuse: Bad value for 'fd'
[  835.814679][  T802] usb 8-1: USB disconnect, device number 73
[  835.864193][    T9] appledisplay 7-1:0.0: Error while getting initial brightness: -71
[  835.878354][T20524] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4567'.
[  835.887564][    T9] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71
[  835.911401][    T9] usb 7-1: USB disconnect, device number 70
[  835.954301][T20524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.990512][T20524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  836.006819][T20524] bond0 (unregistering): Released all slaves
[  836.211272][  T802] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  836.373620][  T802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.384867][  T802] usb 2-1: config 0 has no interfaces?
[  836.392011][  T802] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  836.411311][  T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.448804][  T802] usb 2-1: config 0 descriptor??
[  836.832568][T20547] fuse: Bad value for 'fd'
[  837.016505][T20553] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4578'.
[  837.048049][T20553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  837.061451][T20553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  837.077635][T20553] bond0 (unregistering): Released all slaves
[  837.181269][    T9] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  837.257468][T20559] fuse: Unknown parameter 'group_i00000000000000000000'
[  837.350381][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  837.364707][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  837.377756][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  837.395153][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  837.404618][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.418109][    T9] usb 7-1: config 0 descriptor??
[  837.857656][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  837.870746][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  837.883718][    T9] usb 7-1: USB disconnect, device number 71
[  838.052929][T20578] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  838.446044][T20584] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4591'.
[  838.457761][T20582] fuse: Unknown parameter 'group_id00000000000000000000'
[  838.903253][ T5835] usb 7-1: new full-speed USB device number 72 using dummy_hcd
[  838.971586][  T802] usb 2-1: USB disconnect, device number 72
[  839.083768][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  839.105913][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  839.127257][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  839.156691][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  839.174401][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.196031][ T5835] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  839.230505][ T5835] usb 7-1: Manufacturer: ю
[  839.236685][ T5835] usb 7-1: SerialNumber: ࠧ
[  839.255665][T20590] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  839.384347][T20611] fuse: Unknown parameter 'group_id00000000000000000000'
[  839.436311][T20613] netlink: 'syz.7.4604': attribute type 4 has an invalid length.
[  839.486640][ T5835] cdc_ncm 7-1:1.0: bind() failure
[  839.536477][ T5835] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  839.567798][ T5835] cdc_ncm 7-1:1.1: bind() failure
[  839.594979][ T5835] usb 7-1: USB disconnect, device number 72
[  840.095302][T20640] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4615'.
[  840.108619][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4615'.
[  840.118866][T20640] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4615'.
[  840.128999][T20640] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4615'.
[  840.141427][    T9] usb 6-1: new low-speed USB device number 52 using dummy_hcd
[  840.242678][   T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  840.281304][    T9] usb 6-1: device descriptor read/64, error -71
[  840.401313][   T10] usb 2-1: Using ep0 maxpacket: 32
[  840.413747][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  840.431943][   T10] usb 2-1: config 0 has no interface number 0
[  840.446992][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  840.464349][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.472956][   T10] usb 2-1: Product: syz
[  840.477284][   T10] usb 2-1: Manufacturer: syz
[  840.482639][   T10] usb 2-1: SerialNumber: syz
[  840.492278][   T10] usb 2-1: config 0 descriptor??
[  840.505854][   T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  840.515098][   T10] usb 2-1: selecting invalid altsetting 1
[  840.520907][   T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  840.532262][    T9] usb 6-1: new low-speed USB device number 53 using dummy_hcd
[  840.586980][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  840.602841][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  840.611930][   T10] usb 2-1: media controller created
[  840.639392][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  840.681431][    T9] usb 6-1: device descriptor read/64, error -71
[  840.803182][    T9] usb usb6-port1: attempt power cycle
[  841.161320][    T9] usb 6-1: new low-speed USB device number 54 using dummy_hcd
[  841.203396][    T9] usb 6-1: device descriptor read/8, error -71
[  841.421751][  T987] usb 8-1: new full-speed USB device number 74 using dummy_hcd
[  841.461580][    T9] usb 6-1: new low-speed USB device number 55 using dummy_hcd
[  841.502283][    T9] usb 6-1: device descriptor read/8, error -71
[  841.583601][  T987] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  841.598364][  T987] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  841.611906][  T987] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  841.623203][    T9] usb usb6-port1: unable to enumerate USB device
[  841.634408][  T987] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  841.643906][  T987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.652873][  T987] usb 8-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  841.679074][  T987] usb 8-1: Manufacturer: ю
[  841.686315][  T987] usb 8-1: SerialNumber: ࠧ
[  841.711755][T20668] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  841.742831][   T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  841.757863][   T10] zl10353_read_register: readreg error (reg=127, ret==-110)
[  841.861903][T20676] MTD: Couldn't look up 'net/igmp6': -2
[  841.948992][  T987] cdc_ncm 8-1:1.0: bind() failure
[  841.966322][  T987] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  841.973385][  T987] cdc_ncm 8-1:1.1: bind() failure
[  841.990223][  T987] usb 8-1: USB disconnect, device number 74
[  842.128042][T20685] FAULT_INJECTION: forcing a failure.
[  842.128042][T20685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.141575][T20685] CPU: 0 UID: 0 PID: 20685 Comm: syz.6.4630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  842.141608][T20685] Tainted: [L]=SOFTLOCKUP
[  842.141616][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  842.141628][T20685] Call Trace:
[  842.141636][T20685]  <TASK>
[  842.141645][T20685]  dump_stack_lvl+0xe8/0x150
[  842.141681][T20685]  should_fail_ex+0x412/0x560
[  842.141709][T20685]  _copy_from_user+0x2d/0xb0
[  842.141735][T20685]  sk_setsockopt+0x2b3/0x2e80
[  842.141776][T20685]  ? __pfx_sk_setsockopt+0x10/0x10
[  842.141810][T20685]  ? aa_sk_perm+0x6d5/0x900
[  842.141845][T20685]  ? __pfx_aa_sk_perm+0x10/0x10
[  842.141875][T20685]  ? __fget_files+0x2a/0x420
[  842.141902][T20685]  ? aa_sock_opt_perm+0xff/0x1a0
[  842.141935][T20685]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  842.141971][T20685]  do_sock_setsockopt+0x11b/0x1b0
[  842.142005][T20685]  __x64_sys_setsockopt+0x13d/0x1b0
[  842.142047][T20685]  do_syscall_64+0x14d/0xf80
[  842.142061][T20685]  ? trace_irq_disable+0x3b/0x150
[  842.142081][T20685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.142097][T20685]  ? clear_bhb_loop+0x40/0x90
[  842.142116][T20685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.142132][T20685] RIP: 0033:0x7fb59299c799
[  842.142148][T20685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.142162][T20685] RSP: 002b:00007fb593791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  842.142179][T20685] RAX: ffffffffffffffda RBX: 00007fb592c15fa0 RCX: 00007fb59299c799
[  842.142191][T20685] RDX: 0000000000000035 RSI: 0000000000000001 RDI: 0000000000000003
[  842.142200][T20685] RBP: 00007fb593791090 R08: 0000000000000004 R09: 0000000000000000
[  842.142210][T20685] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  842.142220][T20685] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007ffdbcfe9b18
[  842.142243][T20685]  </TASK>
[  843.002744][  T987] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  843.172148][  T987] usb 7-1: Using ep0 maxpacket: 32
[  843.183517][  T987] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.203251][  T987] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  843.230059][ T5904] usb 2-1: USB disconnect, device number 73
[  843.244438][  T987] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  843.258534][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.289862][  T987] usb 7-1: Product: syz
[  843.304609][  T987] usb 7-1: Manufacturer: syz
[  843.314730][  T987] usb 7-1: SerialNumber: syz
[  843.332492][  T987] usb 7-1: config 0 descriptor??
[  843.351299][   T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  843.385272][T20707] loop6: detected capacity change from 0 to 2640
[  843.405120][T20707] buffer_io_error: 11 callbacks suppressed
[  843.405139][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.419545][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.436850][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.455496][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.463806][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.472076][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.491349][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.501696][   T10] usb 6-1: Using ep0 maxpacket: 32
[  843.509262][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.511423][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.529612][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  843.535427][T20707] ldm_validate_partition_table(): Disk read failed.
[  843.557470][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  843.573106][  T987] usb 7-1: USB disconnect, device number 73
[  843.580206][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.581447][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.612424][   T10] usb 6-1: Product: syz
[  843.621040][T20707] Buffer I/O error on dev loop6, logical block 0, async page read
[  843.622919][   T10] usb 6-1: Manufacturer: syz
[  843.634257][   T10] usb 6-1: SerialNumber: syz
[  843.651740][T20707] Dev loop6: unable to read RDB block 0
[  843.655114][   T10] usb 6-1: config 0 descriptor??
[  843.671445][T20707]  loop6: unable to read partition table
[  843.683630][T20707] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  843.871105][  T987] usb 6-1: USB disconnect, device number 56
[  844.219196][T20726] XFS (nbd6): SB validate failed with error -5.
[  844.601923][T20742] FAULT_INJECTION: forcing a failure.
[  844.601923][T20742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  844.616607][T20742] CPU: 0 UID: 0 PID: 20742 Comm: syz.1.4649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  844.616643][T20742] Tainted: [L]=SOFTLOCKUP
[  844.616656][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  844.616669][T20742] Call Trace:
[  844.616678][T20742]  <TASK>
[  844.616688][T20742]  dump_stack_lvl+0xe8/0x150
[  844.616727][T20742]  should_fail_ex+0x412/0x560
[  844.616757][T20742]  _copy_from_user+0x2d/0xb0
[  844.616784][T20742]  ___sys_sendmsg+0x1c6/0x360
[  844.616821][T20742]  ? __pfx____sys_sendmsg+0x10/0x10
[  844.616849][T20742]  ? kstrtouint+0x6e/0xe0
[  844.616907][T20742]  ? __fget_files+0x2a/0x420
[  844.616936][T20742]  ? __fget_files+0x3a0/0x420
[  844.616974][T20742]  __sys_sendmmsg+0x27c/0x4e0
[  844.617002][T20742]  ? __pfx___sys_sendmmsg+0x10/0x10
[  844.617022][T20742]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  844.617070][T20742]  ? ksys_write+0x242/0x270
[  844.617094][T20742]  ? __pfx_ksys_write+0x10/0x10
[  844.617122][T20742]  __x64_sys_sendmmsg+0xa0/0xc0
[  844.617146][T20742]  do_syscall_64+0x14d/0xf80
[  844.617165][T20742]  ? trace_irq_disable+0x3b/0x150
[  844.617192][T20742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.617214][T20742]  ? clear_bhb_loop+0x40/0x90
[  844.617240][T20742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.617261][T20742] RIP: 0033:0x7fc8d279c799
[  844.617283][T20742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.617301][T20742] RSP: 002b:00007fc8d3608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  844.617325][T20742] RAX: ffffffffffffffda RBX: 00007fc8d2a15fa0 RCX: 00007fc8d279c799
[  844.617342][T20742] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  844.617358][T20742] RBP: 00007fc8d3608090 R08: 0000000000000000 R09: 0000000000000000
[  844.617371][T20742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  844.617383][T20742] R13: 00007fc8d2a16038 R14: 00007fc8d2a15fa0 R15: 00007ffc73288e08
[  844.617414][T20742]  </TASK>
[  844.800495][T20746] FAULT_INJECTION: forcing a failure.
[  844.800495][T20746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  844.898647][T20746] CPU: 1 UID: 0 PID: 20746 Comm: syz.5.4651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  844.898681][T20746] Tainted: [L]=SOFTLOCKUP
[  844.898689][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  844.898701][T20746] Call Trace:
[  844.898709][T20746]  <TASK>
[  844.898719][T20746]  dump_stack_lvl+0xe8/0x150
[  844.898754][T20746]  should_fail_ex+0x412/0x560
[  844.898781][T20746]  _copy_from_user+0x2d/0xb0
[  844.898805][T20746]  do_sock_getsockopt+0x165/0x3f0
[  844.898840][T20746]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  844.898879][T20746]  ? __fget_files+0x3a0/0x420
[  844.898905][T20746]  ? __fget_files+0x2a/0x420
[  844.898937][T20746]  __x64_sys_getsockopt+0x1a4/0x240
[  844.898975][T20746]  do_syscall_64+0x14d/0xf80
[  844.898993][T20746]  ? trace_irq_disable+0x3b/0x150
[  844.899016][T20746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.899036][T20746]  ? clear_bhb_loop+0x40/0x90
[  844.899059][T20746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.899079][T20746] RIP: 0033:0x7f9ab579c799
[  844.899098][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.899116][T20746] RSP: 002b:00007f9ab665d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  844.899137][T20746] RAX: ffffffffffffffda RBX: 00007f9ab5a16090 RCX: 00007f9ab579c799
[  844.899152][T20746] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  844.899164][T20746] RBP: 00007f9ab665d090 R08: 00002000000002c0 R09: 0000000000000000
[  844.899177][T20746] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  844.899190][T20746] R13: 00007f9ab5a16128 R14: 00007f9ab5a16090 R15: 00007fff1ba3a9a8
[  844.899222][T20746]  </TASK>
[  845.691334][ T5835] usb 7-1: new full-speed USB device number 74 using dummy_hcd
[  845.853076][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  845.872036][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  845.885779][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  845.910190][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  845.919611][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.927920][ T5835] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  845.951382][ T5835] usb 7-1: Manufacturer: ю
[  845.958238][ T5835] usb 7-1: SerialNumber: ࠧ
[  845.963065][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  845.983770][T20758] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  846.144504][   T24] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  846.152865][   T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  846.166427][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  846.185941][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  846.204217][   T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  846.214643][ T5835] cdc_ncm 7-1:1.0: bind() failure
[  846.220206][   T24] usb 2-1: Product: syz
[  846.239708][ T5835] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  846.246912][   T24] usb 2-1: Manufacturer: syz
[  846.251913][   T24] usb 2-1: SerialNumber: syz
[  846.256798][ T5835] cdc_ncm 7-1:1.1: bind() failure
[  846.266129][   T24] usb 2-1: config 0 descriptor??
[  846.275872][   T24] hub 2-1:0.0: bad descriptor, ignoring hub
[  846.283468][   T24] hub 2-1:0.0: probe with driver hub failed with error -5
[  846.295550][ T5835] usb 7-1: USB disconnect, device number 74
[  846.309383][   T24] usb 2-1: selecting invalid altsetting 0
[  846.431744][  T802] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[  846.583921][  T802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  846.596019][  T802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.606151][  T802] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  846.619944][  T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.635157][  T802] usb 6-1: config 0 descriptor??
[  847.074585][  T802] elan 0003:04F3:0755.002C: unknown main item tag 0x0
[  847.107841][  T802] elan 0003:04F3:0755.002C: unknown main item tag 0x0
[  847.124677][  T802] elan 0003:04F3:0755.002C: unknown main item tag 0x0
[  847.141122][  T802] elan 0003:04F3:0755.002C: unknown main item tag 0x0
[  847.165631][  T802] elan 0003:04F3:0755.002C: unknown main item tag 0x0
[  847.191827][  T802] elan 0003:04F3:0755.002C: failed to start in urb: -90
[  847.217011][  T802] elan 0003:04F3:0755.002C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  847.307349][  T802] usb 6-1: USB disconnect, device number 57
[  847.363728][T20795] fido_id[20795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  847.453152][   T30] audit: type=1326 audit(1773685582.287:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.7.4669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x0
[  848.021101][T20799] rose6: entered promiscuous mode
[  848.239520][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4672'.
[  848.794246][  T987] usb 2-1: USB disconnect, device number 74
[  848.961419][ T5835] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[  849.144100][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  849.169287][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  849.187844][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 65530, setting to 64
[  849.199596][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  849.227075][ T5835] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  849.242906][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  849.255119][ T5835] usb 6-1: Product: syz
[  849.263620][ T5835] usb 6-1: Manufacturer: syz
[  849.271033][ T5835] usb 6-1: SerialNumber: syz
[  849.283809][ T5835] usb 6-1: config 0 descriptor??
[  849.294748][T20828] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  849.535957][ T5835] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  849.556881][ T5835] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  849.746562][ T5835] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  849.763319][ T5835] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  849.789197][ T5835] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  849.957088][ T5835] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  849.992143][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  849.998854][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.007442][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.014190][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.020861][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.027557][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.034231][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.040899][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.047583][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.061954][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.069118][ T5835] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  850.077954][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.085487][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.092391][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.098983][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.105629][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.112264][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.119261][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.126031][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.132663][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.139353][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.146002][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.152699][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.160183][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.166814][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.173438][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.180021][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.186721][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.193363][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.200002][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.206677][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.213354][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.219962][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.226622][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.233238][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.239818][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.246535][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.253156][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.259750][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.267276][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.273960][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.280575][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.287197][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.293820][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.300416][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.307370][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.313994][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.320604][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.327230][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.333927][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.340535][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.347150][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.353793][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.360387][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.367927][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.374597][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.381227][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.387806][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.394440][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.401037][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.407657][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.414279][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.420876][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.427594][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.434228][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.440923][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.447580][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.454222][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.460807][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.468260][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.474941][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.481610][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.488627][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.495296][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.501966][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.508910][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.515766][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.522444][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.529137][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.536065][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.543202][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.550955][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.557730][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.564661][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.571937][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.578631][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.585327][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.592028][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.599717][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.606440][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.613199][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.619881][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.627268][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.634147][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.640818][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.647500][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.654167][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.660990][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.670814][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.677790][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.684478][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.691221][    C1] radio-si470x 6-1:0.0: non-zero urb status (-71)
[  850.698334][ T5835] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  850.712544][ T5835] usb 6-1: USB disconnect, device number 58
[  850.848335][T20851] fuse: Bad value for 'fd'
[  850.858804][T20853] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4692'.
[  851.302149][  T987] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[  851.337127][T20864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4697'.
[  851.473700][  T987] usb 7-1: Using ep0 maxpacket: 8
[  851.495165][  T987] usb 7-1: config 190 has an invalid interface number: 221 but max is 0
[  851.511742][  T987] usb 7-1: config 190 has no interface number 0
[  851.522558][  T987] usb 7-1: config 190 interface 221 has no altsetting 0
[  851.540292][  T987] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=9b.e9
[  851.552282][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.579341][  T987] usb 7-1: Product: syz
[  851.586057][  T987] usb 7-1: Manufacturer: syz
[  851.596045][  T987] usb 7-1: SerialNumber: syz
[  851.818636][   T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  851.836945][  T987] usb 7-1: bad CDC descriptors
[  851.848072][  T987] option 7-1:190.221: GSM modem (1-port) converter detected
[  851.879028][  T987] usb 7-1: USB disconnect, device number 75
[  851.896219][  T987] option 7-1:190.221: device disconnected
[  851.991305][   T10] usb 6-1: Using ep0 maxpacket: 32
[  852.000268][   T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  852.008865][   T10] usb 6-1: config 0 has no interface number 0
[  852.024393][   T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  852.047654][   T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  852.062442][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.082560][   T10] usb 6-1: Product: syz
[  852.087561][   T10] usb 6-1: Manufacturer: syz
[  852.092350][   T10] usb 6-1: SerialNumber: syz
[  852.112302][   T10] usb 6-1: config 0 descriptor??
[  852.135423][   T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  852.161233][   T10] em28xx 6-1:0.132: Video interface 132 found:
[  852.383044][   T10] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  852.641375][ T5840] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  852.655297][T20870] openvswitch: netlink: Flow actions attr not present in new flow.
[  853.190947][   T10] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  853.212521][   T10] em28xx 6-1:0.132: failed to read eeprom (err=-5)
[  853.224414][   T10] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  853.302244][   T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  853.323860][   T10] em28xx 6-1:0.132: analog set to bulk mode.
[  853.352762][T20874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4700'.
[  853.369726][  T987] em28xx 6-1:0.132: Registering V4L2 extension
[  853.380402][   T10] usb 6-1: USB disconnect, device number 59
[  853.409729][   T10] em28xx 6-1:0.132: Disconnecting em28xx
[  853.708877][  T987] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  853.730940][  T987] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  853.754965][  T987] em28xx 6-1:0.132: No AC97 audio processor
[  853.782434][  T987] usb 6-1: Decoder not found
[  853.794678][  T987] em28xx 6-1:0.132: failed to create media graph
[  853.812678][  T987] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  853.829449][  T987] em28xx 6-1:0.132: Remote control support is not available for this card.
[  853.852581][   T10] em28xx 6-1:0.132: Closing input extension
[  853.876368][   T10] em28xx 6-1:0.132: Freeing device
[  854.419681][   T30] audit: type=1326 audit(1773685589.257:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.7.4707" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f382239c799 code=0x0
[  854.593946][T20898] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4708'.
[  854.919710][T20909] fuse: Bad value for 'fd'
[  855.781284][ T5835] usb 7-1: new full-speed USB device number 76 using dummy_hcd
[  855.944070][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  855.969159][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  855.980430][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  855.999093][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  856.034426][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.060638][ T5835] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  856.113870][ T5835] usb 7-1: Manufacturer: ю
[  856.126348][ T5835] usb 7-1: SerialNumber: ࠧ
[  856.150055][T20955] fuse: Bad value for 'fd'
[  856.178736][T20938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  856.438292][ T5835] cdc_ncm 7-1:1.0: bind() failure
[  856.462325][ T5835] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  856.471649][ T5835] cdc_ncm 7-1:1.1: bind() failure
[  856.501262][  T987] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  856.509962][ T5835] usb 7-1: USB disconnect, device number 76
[  856.652202][  T987] usb 6-1: Using ep0 maxpacket: 16
[  856.659896][  T987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  856.670446][  T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  856.681601][  T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  856.692665][  T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  856.703174][  T987] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  856.719362][  T987] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  856.728746][  T987] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  856.736859][  T987] usb 6-1: Manufacturer: syz
[  856.746647][  T987] usb 6-1: config 0 descriptor??
[  857.021343][  T987] rc_core: IR keymap rc-hauppauge not found
[  857.027389][  T987] Registered IR keymap rc-empty
[  857.034866][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.061410][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.082686][  T987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  857.098065][  T987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input98
[  857.114087][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.141398][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.159698][T20959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.161928][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.178130][T20959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.191549][T20959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.204365][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.217478][T20959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.241423][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.256128][T20959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.281347][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.311694][T20959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.324531][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.350871][T20959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.362223][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.370422][T20959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.391477][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.431406][  T987] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  857.468133][  T987] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  857.493519][  T987] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  857.561955][T20985] fuse: Invalid rootmode
[  858.052496][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4735'.
[  858.102794][T20996] overlayfs: failed to clone upperpath
[  858.259650][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4740'.
[  858.282059][ T5835] usb 6-1: USB disconnect, device number 60
[  858.402821][T21010] fuse: Invalid rootmode
[  858.900390][T21028] FAULT_INJECTION: forcing a failure.
[  858.900390][T21028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  858.914917][T21027] fuse: Invalid rootmode
[  858.931307][T21028] CPU: 0 UID: 0 PID: 21028 Comm: syz.6.4748 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  858.931346][T21028] Tainted: [L]=SOFTLOCKUP
[  858.931356][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  858.931376][T21028] Call Trace:
[  858.931386][T21028]  <TASK>
[  858.931398][T21028]  dump_stack_lvl+0xe8/0x150
[  858.931440][T21028]  should_fail_ex+0x412/0x560
[  858.931475][T21028]  _copy_to_user+0x31/0xb0
[  858.931508][T21028]  simple_read_from_buffer+0xe1/0x170
[  858.931547][T21028]  proc_fail_nth_read+0x1bb/0x230
[  858.931585][T21028]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  858.931621][T21028]  ? rw_verify_area+0x2a6/0x4d0
[  858.931658][T21028]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  858.931692][T21028]  vfs_read+0x20c/0xa70
[  858.931728][T21028]  ? fdget_pos+0x246/0x320
[  858.931759][T21028]  ? ksys_write+0x1e6/0x270
[  858.931785][T21028]  ? __pfx___mutex_lock+0x10/0x10
[  858.931811][T21028]  ? __pfx_vfs_read+0x10/0x10
[  858.931851][T21028]  ? __fget_files+0x2a/0x420
[  858.931887][T21028]  ? __fget_files+0x3a0/0x420
[  858.931918][T21028]  ? __fget_files+0x2a/0x420
[  858.931960][T21028]  ksys_read+0x150/0x270
[  858.931986][T21028]  ? __pfx_ksys_read+0x10/0x10
[  858.932022][T21028]  do_syscall_64+0x14d/0xf80
[  858.932044][T21028]  ? trace_irq_disable+0x3b/0x150
[  858.932073][T21028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.932099][T21028]  ? clear_bhb_loop+0x40/0x90
[  858.932130][T21028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.932154][T21028] RIP: 0033:0x7fb59295cfce
[  858.932178][T21028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  858.932207][T21028] RSP: 002b:00007fb593790fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  858.932233][T21028] RAX: ffffffffffffffda RBX: 00007fb5937916c0 RCX: 00007fb59295cfce
[  858.932252][T21028] RDX: 000000000000000f RSI: 00007fb5937910a0 RDI: 0000000000000003
[  858.932267][T21028] RBP: 00007fb593791090 R08: 0000000000000000 R09: 0000000000000000
[  858.932282][T21028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  858.932296][T21028] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007ffdbcfe9b18
[  858.932330][T21028]  </TASK>
[  859.308462][T21032] FAULT_INJECTION: forcing a failure.
[  859.308462][T21032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  859.324212][T21032] CPU: 0 UID: 0 PID: 21032 Comm: syz.5.4752 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  859.324242][T21032] Tainted: [L]=SOFTLOCKUP
[  859.324250][T21032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  859.324263][T21032] Call Trace:
[  859.324272][T21032]  <TASK>
[  859.324283][T21032]  dump_stack_lvl+0xe8/0x150
[  859.324320][T21032]  should_fail_ex+0x412/0x560
[  859.324326][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  859.324350][T21032]  _copy_from_user+0x2d/0xb0
[  859.324428][T21032]  ucma_create_id+0xe9/0x380
[  859.324538][T21032]  ? __pfx_ucma_create_id+0x10/0x10
[  859.324660][T21032]  ucma_write+0x24e/0x2f0
[  859.324733][T21032]  ? __pfx_ucma_write+0x10/0x10
[  859.324795][T21032]  ? security_file_permission+0x75/0x260
[  859.324875][T21032]  ? rw_verify_area+0x255/0x4d0
[  859.324969][T21032]  vfs_writev+0x4bd/0x990
[  859.325042][T21032]  ? __pfx_ucma_write+0x10/0x10
[  859.325122][T21032]  ? __pfx_vfs_writev+0x10/0x10
[  859.325243][T21032]  ? __fget_files+0x2a/0x420
[  859.325334][T21032]  ? __fget_files+0x3a0/0x420
[  859.325405][T21032]  ? __fget_files+0x2a/0x420
[  859.325500][T21032]  do_writev+0x154/0x2e0
[  859.325573][T21032]  ? __pfx_do_writev+0x10/0x10
[  859.325654][T21032]  do_syscall_64+0x14d/0xf80
[  859.325672][T21032]  ? trace_irq_disable+0x3b/0x150
[  859.325738][T21032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.325792][T21032]  ? clear_bhb_loop+0x40/0x90
[  859.325883][T21032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.325956][T21032] RIP: 0033:0x7f9ab579c799
[  859.326016][T21032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.326068][T21032] RSP: 002b:00007f9ab667e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  859.326131][T21032] RAX: ffffffffffffffda RBX: 00007f9ab5a15fa0 RCX: 00007f9ab579c799
[  859.326182][T21032] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b
[  859.326222][T21032] RBP: 00007f9ab667e090 R08: 0000000000000000 R09: 0000000000000000
[  859.326254][T21032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  859.326293][T21032] R13: 00007f9ab5a16038 R14: 00007f9ab5a15fa0 R15: 00007fff1ba3a9a8
[  859.326378][T21032]  </TASK>
[  859.564912][T21036] fuse: Unknown parameter 'user_i00000000000000000000'
[  859.916565][T21053] fuse: Bad value for 'rootmode'
[  860.226105][T21066] fuse: Unknown parameter 'user_i00000000000000000000'
[  860.842248][T21090] fuse: Unknown parameter 'user_i00000000000000000000'
[  861.223161][ T5840] Bluetooth: hci4: Unable to find connection with handle 0x00c9
[  863.177515][T21125] FAULT_INJECTION: forcing a failure.
[  863.177515][T21125] name failslab, interval 1, probability 0, space 0, times 0
[  863.191413][T21125] CPU: 1 UID: 0 PID: 21125 Comm: syz.5.4784 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.191446][T21125] Tainted: [L]=SOFTLOCKUP
[  863.191454][T21125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  863.191466][T21125] Call Trace:
[  863.191474][T21125]  <TASK>
[  863.191484][T21125]  dump_stack_lvl+0xe8/0x150
[  863.191520][T21125]  should_fail_ex+0x412/0x560
[  863.191547][T21125]  should_failslab+0xa8/0x100
[  863.191572][T21125]  __kvmalloc_node_noprof+0x178/0x8a0
[  863.191595][T21125]  ? fuse_readdir+0x1931/0x3250
[  863.191630][T21125]  fuse_readdir+0x1931/0x3250
[  863.191662][T21125]  ? __lock_acquire+0x6b5/0x2cf0
[  863.191706][T21125]  ? __lock_acquire+0x6b5/0x2cf0
[  863.191740][T21125]  ? look_up_lock_class+0x57/0x110
[  863.191780][T21125]  ? __lock_acquire+0x6b5/0x2cf0
[  863.191825][T21125]  ? __pfx_fuse_readdir+0x10/0x10
[  863.191864][T21125]  ? aa_file_perm+0x192/0x15e0
[  863.191897][T21125]  ? look_up_lock_class+0x57/0x110
[  863.191930][T21125]  ? register_lock_class+0x31/0x2e0
[  863.191962][T21125]  ? aa_file_perm+0x50e/0x15e0
[  863.191988][T21125]  ? __lock_acquire+0x6b5/0x2cf0
[  863.192013][T21125]  ? trace_contention_end+0x3d/0x150
[  863.192032][T21125]  ? __mutex_lock+0x320/0x1420
[  863.192068][T21125]  ? iterate_dir+0x292/0x570
[  863.192084][T21125]  ? down_read_killable+0x1bb/0x340
[  863.192105][T21125]  iterate_dir+0x399/0x570
[  863.192125][T21125]  __se_sys_getdents64+0xf1/0x280
[  863.192145][T21125]  ? __pfx___se_sys_getdents64+0x10/0x10
[  863.192161][T21125]  ? ksys_write+0x242/0x270
[  863.192174][T21125]  ? __pfx_filldir64+0x10/0x10
[  863.192192][T21125]  ? __pfx_ksys_write+0x10/0x10
[  863.192215][T21125]  do_syscall_64+0x14d/0xf80
[  863.192229][T21125]  ? trace_irq_disable+0x3b/0x150
[  863.192248][T21125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.192265][T21125]  ? clear_bhb_loop+0x40/0x90
[  863.192284][T21125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.192302][T21125] RIP: 0033:0x7f9ab579c799
[  863.192319][T21125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.192333][T21125] RSP: 002b:00007f9ab665d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  863.192350][T21125] RAX: ffffffffffffffda RBX: 00007f9ab5a16090 RCX: 00007f9ab579c799
[  863.192362][T21125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  863.192371][T21125] RBP: 00007f9ab665d090 R08: 0000000000000000 R09: 0000000000000000
[  863.192381][T21125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.192390][T21125] R13: 00007f9ab5a16128 R14: 00007f9ab5a16090 R15: 00007fff1ba3a9a8
[  863.192415][T21125]  </TASK>
[  863.819907][T21091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  864.038749][T21127] fuse: Unknown parameter 'user_id00000000000000000000'
[  864.119862][T21129] Bluetooth: hci0: Opcode 0x080f failed: -22
[  864.436967][T21145] FAULT_INJECTION: forcing a failure.
[  864.436967][T21145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  864.450272][T21145] CPU: 1 UID: 0 PID: 21145 Comm: syz.5.4793 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  864.450307][T21145] Tainted: [L]=SOFTLOCKUP
[  864.450316][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  864.450329][T21145] Call Trace:
[  864.450338][T21145]  <TASK>
[  864.450347][T21145]  dump_stack_lvl+0xe8/0x150
[  864.450384][T21145]  should_fail_ex+0x412/0x560
[  864.450413][T21145]  _copy_from_user+0x2d/0xb0
[  864.450440][T21145]  get_timespec64+0x96/0x1b0
[  864.450471][T21145]  ? __pfx_get_timespec64+0x10/0x10
[  864.450512][T21145]  __x64_sys_recvmmsg+0x14b/0x250
[  864.450539][T21145]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  864.450573][T21145]  do_syscall_64+0x14d/0xf80
[  864.450592][T21145]  ? trace_irq_disable+0x3b/0x150
[  864.450616][T21145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.450637][T21145]  ? clear_bhb_loop+0x40/0x90
[  864.450663][T21145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.450684][T21145] RIP: 0033:0x7f9ab579c799
[  864.450705][T21145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.450724][T21145] RSP: 002b:00007f9ab667e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  864.450746][T21145] RAX: ffffffffffffffda RBX: 00007f9ab5a15fa0 RCX: 00007f9ab579c799
[  864.450762][T21145] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  864.450776][T21145] RBP: 00007f9ab667e090 R08: 0000200000003700 R09: 0000000000000000
[  864.450791][T21145] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  864.450804][T21145] R13: 00007f9ab5a16038 R14: 00007f9ab5a15fa0 R15: 00007fff1ba3a9a8
[  864.450838][T21145]  </TASK>
[  864.461955][  T987] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[  864.771301][  T987] usb 7-1: device descriptor read/64, error -71
[  864.795951][T21151] netlink: 'syz.5.4796': attribute type 4 has an invalid length.
[  864.804081][T21151] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4796'.
[  864.847462][T21153] fuse: Unknown parameter 'user_id00000000000000000000'
[  865.011267][  T987] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[  865.162662][  T987] usb 7-1: device descriptor read/64, error -71
[  865.281923][  T987] usb usb7-port1: attempt power cycle
[  865.471933][T21186] fuse: Unknown parameter 'user_id00000000000000000000'
[  865.631321][  T987] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[  865.653334][  T987] usb 7-1: device descriptor read/8, error -71
[  865.901452][  T987] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[  865.931944][  T987] usb 7-1: device descriptor read/8, error -71
[  866.052220][  T987] usb usb7-port1: unable to enumerate USB device
[  866.273968][T21207] fuse: Unknown parameter '�'
[  866.891341][   T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  867.051295][   T24] usb 6-1: Using ep0 maxpacket: 32
[  867.058406][   T24] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  867.067814][   T24] usb 6-1: config 0 has no interface number 0
[  867.074673][   T24] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  867.087414][   T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  867.097013][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.106101][   T24] usb 6-1: Product: syz
[  867.110375][   T24] usb 6-1: Manufacturer: syz
[  867.115154][   T24] usb 6-1: SerialNumber: syz
[  867.122565][   T24] usb 6-1: config 0 descriptor??
[  867.129677][T21220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  867.351878][T21220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  867.404908][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4828'.
[  867.420071][T21238] overlayfs: failed to clone upperpath
[  867.967705][T21244] FAULT_INJECTION: forcing a failure.
[  867.967705][T21244] name failslab, interval 1, probability 0, space 0, times 0
[  867.987225][T21244] CPU: 1 UID: 0 PID: 21244 Comm: syz.6.4832 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.987261][T21244] Tainted: [L]=SOFTLOCKUP
[  867.987271][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  867.987284][T21244] Call Trace:
[  867.987294][T21244]  <TASK>
[  867.987304][T21244]  dump_stack_lvl+0xe8/0x150
[  867.987345][T21244]  should_fail_ex+0x412/0x560
[  867.987374][T21244]  should_failslab+0xa8/0x100
[  867.987397][T21244]  ? prepare_creds+0x30/0x820
[  867.987426][T21244]  kmem_cache_alloc_noprof+0x87/0x650
[  867.987456][T21244]  ? __pfx___mutex_lock+0x10/0x10
[  867.987487][T21244]  prepare_creds+0x30/0x820
[  867.987519][T21244]  prepare_exec_creds+0x18/0x220
[  867.987555][T21244]  bprm_execve+0xe2/0x1470
[  867.987588][T21244]  ? put_arg_page+0x11d/0x180
[  867.987626][T21244]  ? copy_string_kernel+0x4d3/0x540
[  867.987666][T21244]  ? __pfx_bprm_execve+0x10/0x10
[  867.987702][T21244]  ? count+0x1e0/0x230
[  867.987725][T21244]  do_execveat_common+0x50d/0x690
[  867.987757][T21244]  __x64_sys_execve+0x97/0xc0
[  867.987792][T21244]  do_syscall_64+0x14d/0xf80
[  867.987811][T21244]  ? trace_irq_disable+0x3b/0x150
[  867.987836][T21244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.987859][T21244]  ? clear_bhb_loop+0x40/0x90
[  867.987886][T21244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.987909][T21244] RIP: 0033:0x7fb59299c799
[  867.987929][T21244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.987948][T21244] RSP: 002b:00007fb593791028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  867.987972][T21244] RAX: ffffffffffffffda RBX: 00007fb592c15fa0 RCX: 00007fb59299c799
[  867.987988][T21244] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180
[  867.988003][T21244] RBP: 00007fb593791090 R08: 0000000000000000 R09: 0000000000000000
[  867.988017][T21244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  867.988030][T21244] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007ffdbcfe9b18
[  867.988065][T21244]  </TASK>
[  868.299066][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4834'.
[  868.305734][T21252] fuse: Unknown parameter ''
[  868.316468][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4834'.
[  868.357182][T21254] /dev/nullb0: Can't open blockdev
[  868.494193][   T24] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  868.530076][   T24] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  868.571820][   T24] asix 6-1:0.188: probe with driver asix failed with error -61
[  868.918631][T21273] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4838'.
[  869.744019][   T24] usb 6-1: USB disconnect, device number 61
[  869.785167][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4851'.
[  870.155610][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  870.681454][ T7122] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[  870.721669][   T24] usb 7-1: new full-speed USB device number 81 using dummy_hcd
[  870.814433][T21340] openvswitch: netlink: IP tunnel dst address not specified
[  870.823749][T21342] overlayfs: failed to clone upperpath
[  870.843855][ T7122] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  870.874167][ T7122] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  870.894052][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  870.901364][ T7122] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  870.919026][   T24] usb 7-1: not running at top speed; connect to a high speed hub
[  870.934577][ T7122] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  870.949217][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  870.955415][ T7122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.961926][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  870.992261][ T7122] usb 6-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  870.996303][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64
[  871.017836][ T7122] usb 6-1: Manufacturer: ю
[  871.034760][ T7122] usb 6-1: SerialNumber: ࠧ
[  871.053723][T21334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  871.061277][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  871.081662][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5
[  871.094836][T21347] fuse: Unknown parameter 'user_i00000000000000000000'
[  871.105364][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 11776, setting to 64
[  871.133729][   T24] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  871.150724][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.169445][   T24] usb 7-1: Product: syz
[  871.179420][   T24] usb 7-1: Manufacturer: syz
[  871.189935][   T24] usb 7-1: SerialNumber: syz
[  871.207279][   T24] usb 7-1: config 0 descriptor??
[  871.214159][T21336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  871.222990][T21336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  871.235335][   T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  871.296652][ T7122] cdc_ncm 6-1:1.0: bind() failure
[  871.310378][ T7122] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  871.317932][ T7122] cdc_ncm 6-1:1.1: bind() failure
[  871.335966][ T7122] usb 6-1: USB disconnect, device number 62
[  871.446483][    T9] usb 7-1: USB disconnect, device number 81
[  871.858002][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4875'.
[  871.967734][T21374] fuse: Unknown parameter 'user_i00000000000000000000'
[  872.230605][T21380] fuse: Unknown parameter '0x0000000000000005'
[  872.617049][T21395] netlink: 'syz.7.4884': attribute type 10 has an invalid length.
[  872.811304][ T7122] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[  872.963163][ T7122] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  872.974971][ T7122] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  872.987494][ T7122] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  873.003121][ T7122] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  873.014711][ T7122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.024498][ T7122] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  873.044284][ T7122] usb 7-1: Manufacturer: ю
[  873.048985][ T7122] usb 7-1: SerialNumber: ࠧ
[  873.059691][T21397] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  873.139381][T21402] fuse: Unknown parameter 'user_i00000000000000000000'
[  873.297998][ T7122] cdc_ncm 7-1:1.0: bind() failure
[  873.315356][ T7122] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  873.322326][ T7122] cdc_ncm 7-1:1.1: bind() failure
[  873.335742][ T7122] usb 7-1: USB disconnect, device number 82
[  873.383337][T21410] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  873.554199][T21413] overlayfs: failed to clone upperpath
[  873.633903][   T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  873.801261][   T24] usb 6-1: Using ep0 maxpacket: 16
[  873.811986][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.822553][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  873.833626][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.846378][   T24] usb 6-1: config 0 descriptor??
[  873.867506][   T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input99
[  874.189281][T21429] fuse: Unknown parameter 'user_id00000000000000000000'
[  874.691318][   T24] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[  874.701667][ T5187] bcm5974 6-1:0.0: could not read from device
[  874.717830][T13021] usb 6-1: USB disconnect, device number 63
[  874.736087][ T5187] bcm5974 6-1:0.0: could not read from device
[  874.764248][T10368] bcm5974 6-1:0.0: could not read from device
[  874.813569][ T5187] bcm5974 6-1:0.0: could not read from device
[  874.897150][   T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  874.923719][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.955687][   T24] usb 7-1: Product: syz
[  874.965526][T21454] fuse: Unknown parameter 'user_id00000000000000000000'
[  874.980695][   T24] usb 7-1: Manufacturer: syz
[  874.997769][   T24] usb 7-1: SerialNumber: syz
[  875.376143][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4911'.
[  875.439915][T21470] overlay: Unknown parameter 'hash'
[  875.575167][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  875.590770][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  875.650089][T21479] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4916'.
[  875.713881][T21481] fuse: Unknown parameter 'user_id00000000000000000000'
[  875.981587][ T7122] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[  876.143347][ T7122] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  876.154464][ T7122] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  876.166587][ T7122] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  876.180052][ T7122] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  876.189242][ T7122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.197570][ T7122] usb 6-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  876.216699][ T7122] usb 6-1: Manufacturer: ю
[  876.223145][ T7122] usb 6-1: SerialNumber: ࠧ
[  876.237133][T21483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  876.457060][ T7122] cdc_ncm 6-1:1.0: bind() failure
[  876.470543][ T7122] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  876.478195][ T7122] cdc_ncm 6-1:1.1: bind() failure
[  876.490174][ T7122] usb 6-1: USB disconnect, device number 64
[  876.633405][T21509] fuse: Bad value for 'user_id'
[  876.642108][T21509] fuse: Bad value for 'user_id'
[  877.235310][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO
[  877.247930][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  877.260929][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  877.274033][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  877.285092][   T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  877.297905][   T24] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  877.317113][   T24] usb 7-1: USB disconnect, device number 83
[  877.361330][ T7122] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[  877.513046][ T7122] usb 6-1: not running at top speed; connect to a high speed hub
[  877.522078][ T7122] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1136, setting to 64
[  877.533291][ T7122] usb 6-1: config 1 interface 0 has no altsetting 0
[  877.543231][ T7122] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  877.553672][ T7122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.567160][ T7122] usb 6-1: Product: ⠊
[  877.571571][ T7122] usb 6-1: Manufacturer: О
[  877.576209][ T7122] usb 6-1: SerialNumber: ᐄ
[  877.586144][T21524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  877.830245][ T7122] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  877.879844][ T7122] usb 6-1: USB disconnect, device number 65
[  877.954541][T21536] overlayfs: failed to clone upperpath
[  878.109323][T21542] overlayfs: failed to clone upperpath
[  878.361272][  T802] usb 7-1: new full-speed USB device number 84 using dummy_hcd
[  878.565811][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  878.567525][  T802] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  878.601203][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  878.613737][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  878.614240][  T802] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  878.637490][T21554] overlayfs: missing 'workdir'
[  878.651670][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  878.662564][  T802] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  878.663638][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  878.735108][  T802] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  878.746571][  T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.761236][  T802] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  878.780571][  T802] usb 7-1: Manufacturer: ю
[  878.785579][  T802] usb 7-1: SerialNumber: ࠧ
[  878.798659][T21545] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  879.043568][  T802] cdc_ncm 7-1:1.0: bind() failure
[  879.100191][  T802] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  879.118931][  T802] cdc_ncm 7-1:1.1: bind() failure
[  879.148919][  T802] usb 7-1: USB disconnect, device number 84
[  879.356648][ T1324] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.396454][T21552] chnl_net:caif_netlink_parms(): no params data found
[  879.540836][ T1324] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.615922][ T1324] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.698676][T21552] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.721531][T21552] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.734694][T21552] bridge_slave_0: entered allmulticast mode
[  879.755574][T21552] bridge_slave_0: entered promiscuous mode
[  879.795211][T21552] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.824316][T21552] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.844930][T21552] bridge_slave_1: entered allmulticast mode
[  879.870782][T21552] bridge_slave_1: entered promiscuous mode
[  879.899349][ T1324] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.166261][T21552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.204880][T21552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.467230][T21552] team0: Port device team_slave_0 added
[  880.502954][T21552] team0: Port device team_slave_1 added
[  880.781658][ T5840] Bluetooth: hci3: command tx timeout
[  880.857734][T21552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.877177][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.913328][T21552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.929980][T21552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.937328][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.964675][T21552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.091351][  T802] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  881.115653][T21552] hsr_slave_0: entered promiscuous mode
[  881.123075][T21552] hsr_slave_1: entered promiscuous mode
[  881.149199][ T1324] bridge_slave_1: left allmulticast mode
[  881.155548][ T1324] bridge_slave_1: left promiscuous mode
[  881.161948][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.172530][ T1324] bridge_slave_0: left allmulticast mode
[  881.179006][ T1324] bridge_slave_0: left promiscuous mode
[  881.185139][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.196736][ T1324] dvmrp0: left allmulticast mode
[  881.211293][   T24] usb 7-1: new full-speed USB device number 85 using dummy_hcd
[  881.241374][  T802] usb 6-1: Using ep0 maxpacket: 8
[  881.255324][  T802] usb 6-1: unable to get BOS descriptor or descriptor too short
[  881.268383][  T802] usb 6-1: config 4 interface 0 has no altsetting 0
[  881.277746][  T802] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  881.288645][  T802] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  881.297164][  T802] usb 6-1: Manufacturer: င
[  881.302446][  T802] usb 6-1: SerialNumber: 큧靖냉㑉驸ࢠЌ䌰纯Ṩ띋褬㣏읗傄佡겟㐢ﮔ룋哝飥摦䷵㲿숺澶螶뉆●쯭驚ಅ醐쩱樛톭쁆ꭹ䒯㶀霷삊嗙ώ㟝䬽솥꾳䇫⽃몃䦧鍷篷톟靖坨㵵ᯎ륈䗎뒇鉻녺㚪퇫אַꞮ⒩ྠ㊼㙊ꍫળḨ墎붜︬
[  881.365367][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  881.376794][   T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  881.388717][   T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  881.403357][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  881.412862][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.420952][   T24] usb 7-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  881.442931][   T24] usb 7-1: Manufacturer: ю
[  881.447583][   T24] usb 7-1: SerialNumber: ࠧ
[  881.460736][T21603] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  881.558784][  T802] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  881.603098][  T802] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  881.615425][  T802] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  881.622835][  T802] usb 6-1: media controller created
[  881.646127][  T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  881.672502][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  881.697111][   T24] cdc_ncm 7-1:1.0: bind() failure
[  881.699654][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  881.723880][   T24] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  881.733660][  T802] zl10353_read_register: readreg error (reg=127, ret==0)
[  881.740993][   T24] cdc_ncm 7-1:1.1: bind() failure
[  881.745019][ T1324] bond0 (unregistering): Released all slaves
[  881.763252][   T24] usb 7-1: USB disconnect, device number 85
[  881.860993][  T802] usb 6-1: USB disconnect, device number 66
[  881.875780][ T1324] : left promiscuous mode
[  881.888225][T10214] udevd[10214]: setting mode of /dev/bus/usb/006/066 to 020664 failed: No such file or directory
[  881.900787][T10214] udevd[10214]: setting owner of /dev/bus/usb/006/066 to uid=0, gid=0 failed: No such file or directory
[  882.376541][T21612] netlink: 'syz.6.4959': attribute type 3 has an invalid length.
[  882.452620][    T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  882.618965][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  882.649857][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  882.677373][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.740904][    T9] usb 6-1: config 0 descriptor??
[  882.863221][ T5840] Bluetooth: hci3: command tx timeout
[  882.979835][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  883.008517][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  883.056433][    T9] usb 6-1: USB disconnect, device number 67
[  883.083771][ T1324] hsr_slave_0: left promiscuous mode
[  883.106495][ T1324] hsr_slave_1: left promiscuous mode
[  883.131736][ T1324] veth0_macvtap: left promiscuous mode
[  883.137618][ T1324] veth1_vlan: left promiscuous mode
[  883.148263][ T1324] veth0_vlan: left promiscuous mode
[  883.329543][ T1324] pim6reg (unregistering): left allmulticast mode
[  883.506780][    T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  883.693415][    T9] usb 6-1: Using ep0 maxpacket: 32
[  883.708131][ T1324] team0 (unregistering): Port device team_slave_1 removed
[  883.719641][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.741326][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  883.754553][ T1324] team0 (unregistering): Port device team_slave_0 removed
[  883.761879][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.785968][    T9] usb 6-1: config 0 descriptor??
[  883.800799][    T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  883.837673][    T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  884.225255][T21630] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  884.521487][T21630] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  884.626928][T21644] FAULT_INJECTION: forcing a failure.
[  884.626928][T21644] name failslab, interval 1, probability 0, space 0, times 0
[  884.646024][T21644] CPU: 0 UID: 0 PID: 21644 Comm: syz.6.4964 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  884.646060][T21644] Tainted: [L]=SOFTLOCKUP
[  884.646067][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  884.646077][T21644] Call Trace:
[  884.646085][T21644]  <TASK>
[  884.646093][T21644]  dump_stack_lvl+0xe8/0x150
[  884.646128][T21644]  should_fail_ex+0x412/0x560
[  884.646152][T21644]  should_failslab+0xa8/0x100
[  884.646174][T21644]  __kmalloc_noprof+0xe8/0x760
[  884.646204][T21644]  ? kernfs_fop_write_iter+0x158/0x540
[  884.646228][T21644]  kernfs_fop_write_iter+0x158/0x540
[  884.646251][T21644]  vfs_write+0x61d/0xb90
[  884.646275][T21644]  ? __pfx_vfs_write+0x10/0x10
[  884.646312][T21644]  ? __fget_files+0x2a/0x420
[  884.646346][T21644]  ksys_write+0x150/0x270
[  884.646366][T21644]  ? __pfx_ksys_write+0x10/0x10
[  884.646395][T21644]  do_syscall_64+0x14d/0xf80
[  884.646414][T21644]  ? trace_irq_disable+0x3b/0x150
[  884.646438][T21644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.646457][T21644]  ? clear_bhb_loop+0x40/0x90
[  884.646480][T21644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.646498][T21644] RIP: 0033:0x7fb59299c799
[  884.646516][T21644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.646548][T21644] RSP: 002b:00007fb593791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  884.646569][T21644] RAX: ffffffffffffffda RBX: 00007fb592c15fa0 RCX: 00007fb59299c799
[  884.646583][T21644] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005
[  884.646595][T21644] RBP: 00007fb593791090 R08: 0000000000000000 R09: 0000000000000000
[  884.646607][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.646619][T21644] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007ffdbcfe9b18
[  884.646651][T21644]  </TASK>
[  884.952168][ T5840] Bluetooth: hci3: command tx timeout
[  885.204892][T21630] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  885.229812][T21552] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  885.257127][T21552] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  885.287136][T21552] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  885.394106][T21630] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  885.426797][T21552] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  885.527703][  T987] usb 6-1: USB disconnect, device number 68
[  885.554308][  T987] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  885.827199][T21670] FAULT_INJECTION: forcing a failure.
[  885.827199][T21670] name failslab, interval 1, probability 0, space 0, times 0
[  885.853481][T21670] CPU: 0 UID: 0 PID: 21670 Comm: syz.5.4966 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  885.853514][T21670] Tainted: [L]=SOFTLOCKUP
[  885.853521][T21670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  885.853533][T21670] Call Trace:
[  885.853540][T21670]  <TASK>
[  885.853548][T21670]  dump_stack_lvl+0xe8/0x150
[  885.853583][T21670]  should_fail_ex+0x412/0x560
[  885.853608][T21670]  should_failslab+0xa8/0x100
[  885.853629][T21670]  __kmalloc_node_noprof+0xf0/0x7c0
[  885.853657][T21670]  ? __get_vm_area_node+0x28f/0x300
[  885.853683][T21670]  ? __vmalloc_node_range_noprof+0x5ef/0x1750
[  885.853714][T21670]  __vmalloc_node_range_noprof+0x5ef/0x1750
[  885.853767][T21670]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  885.853796][T21670]  ? rcu_is_watching+0x15/0xb0
[  885.853817][T21670]  ? memcpy_and_pad+0x48/0x80
[  885.853846][T21670]  __vmalloc_node_noprof+0xc2/0x100
[  885.853873][T21670]  ? copy_process+0x89b/0x4430
[  885.853900][T21670]  ? copy_process+0x89b/0x4430
[  885.853930][T21670]  dup_task_struct+0x298/0x840
[  885.853964][T21670]  copy_process+0x89b/0x4430
[  885.854029][T21670]  ? __pfx_copy_process+0x10/0x10
[  885.854062][T21670]  ? mutex_init_lockdep+0xdf/0x110
[  885.854083][T21670]  vhost_task_create+0x1f9/0x380
[  885.854105][T21670]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  885.854125][T21670]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  885.854146][T21670]  ? __pfx_vhost_task_create+0x10/0x10
[  885.854175][T21670]  ? __pfx_vhost_task_fn+0x10/0x10
[  885.854205][T21670]  ? __lock_acquire+0x6b5/0x2cf0
[  885.854238][T21670]  kvm_mmu_post_init_vm+0x14c/0x300
[  885.854265][T21670]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  885.854297][T21670]  ? __mutex_trylock_common+0x158/0x260
[  885.854323][T21670]  ? __pfx___mutex_trylock_common+0x10/0x10
[  885.854348][T21670]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  885.854374][T21670]  ? register_lock_class+0x31/0x2e0
[  885.854409][T21670]  ? __lock_acquire+0x6b5/0x2cf0
[  885.854447][T21670]  ? kasan_quarantine_put+0xbb/0x1f0
[  885.854480][T21670]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  885.854517][T21670]  ? do_raw_write_lock+0x11d/0x260
[  885.854559][T21670]  kvm_vcpu_ioctl+0xa62/0xfd0
[  885.854588][T21670]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  885.854609][T21670]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  885.854653][T21670]  ? __fget_files+0x2a/0x420
[  885.854684][T21670]  ? __fget_files+0x2a/0x420
[  885.854710][T21670]  ? __fget_files+0x3a0/0x420
[  885.854737][T21670]  ? __fget_files+0x2a/0x420
[  885.854767][T21670]  ? bpf_lsm_file_ioctl+0x9/0x20
[  885.854790][T21670]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  885.854814][T21670]  __se_sys_ioctl+0xfc/0x170
[  885.854840][T21670]  do_syscall_64+0x14d/0xf80
[  885.854858][T21670]  ? trace_irq_disable+0x3b/0x150
[  885.854883][T21670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.854903][T21670]  ? clear_bhb_loop+0x40/0x90
[  885.854929][T21670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.854951][T21670] RIP: 0033:0x7f9ab579c799
[  885.854972][T21670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.854999][T21670] RSP: 002b:00007f9ab665c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  885.855023][T21670] RAX: ffffffffffffffda RBX: 00007f9ab5a16090 RCX: 00007f9ab579c799
[  885.855039][T21670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  885.855052][T21670] RBP: 00007f9ab665c090 R08: 0000000000000000 R09: 0000000000000000
[  885.855066][T21670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.855079][T21670] R13: 00007f9ab5a16128 R14: 00007f9ab5a16090 R15: 00007fff1ba3a9a8
[  885.855115][T21670]  </TASK>
[  885.857554][T21670] warn_alloc: 1 callbacks suppressed
[  885.857571][T21670] syz.5.4966: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  886.271761][T21670] CPU: 1 UID: 0 PID: 21670 Comm: syz.5.4966 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  886.271796][T21670] Tainted: [L]=SOFTLOCKUP
[  886.271804][T21670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  886.271816][T21670] Call Trace:
[  886.271825][T21670]  <TASK>
[  886.271834][T21670]  dump_stack_lvl+0xe8/0x150
[  886.271868][T21670]  warn_alloc+0x249/0x340
[  886.271886][T21670]  ? dump_stack_lvl+0x137/0x150
[  886.271928][T21670]  ? __pfx_warn_alloc+0x10/0x10
[  886.271947][T21670]  ? rcu_is_watching+0x15/0xb0
[  886.271969][T21670]  ? trace_kmalloc+0x2a/0x110
[  886.272000][T21670]  ? __kmalloc_node_noprof+0x4fe/0x7c0
[  886.272026][T21670]  ? __get_vm_area_node+0x28f/0x300
[  886.272052][T21670]  ? __vmalloc_node_range_noprof+0x5ef/0x1750
[  886.272085][T21670]  __vmalloc_node_range_noprof+0xa06/0x1750
[  886.272143][T21670]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  886.272176][T21670]  ? rcu_is_watching+0x15/0xb0
[  886.272197][T21670]  ? memcpy_and_pad+0x48/0x80
[  886.272231][T21670]  __vmalloc_node_noprof+0xc2/0x100
[  886.272262][T21670]  ? copy_process+0x89b/0x4430
[  886.272290][T21670]  ? copy_process+0x89b/0x4430
[  886.272320][T21670]  dup_task_struct+0x298/0x840
[  886.272357][T21670]  copy_process+0x89b/0x4430
[  886.272416][T21670]  ? __pfx_copy_process+0x10/0x10
[  886.272455][T21670]  ? mutex_init_lockdep+0xdf/0x110
[  886.272479][T21670]  vhost_task_create+0x1f9/0x380
[  886.272501][T21670]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  886.272521][T21670]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  886.272543][T21670]  ? __pfx_vhost_task_create+0x10/0x10
[  886.272572][T21670]  ? __pfx_vhost_task_fn+0x10/0x10
[  886.272601][T21670]  ? __lock_acquire+0x6b5/0x2cf0
[  886.272637][T21670]  kvm_mmu_post_init_vm+0x14c/0x300
[  886.272664][T21670]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  886.272697][T21670]  ? __mutex_trylock_common+0x158/0x260
[  886.272721][T21670]  ? __pfx___mutex_trylock_common+0x10/0x10
[  886.272744][T21670]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  886.272769][T21670]  ? register_lock_class+0x31/0x2e0
[  886.272806][T21670]  ? __lock_acquire+0x6b5/0x2cf0
[  886.272842][T21670]  ? kasan_quarantine_put+0xbb/0x1f0
[  886.272874][T21670]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  886.272916][T21670]  ? do_raw_write_lock+0x11d/0x260
[  886.272951][T21670]  kvm_vcpu_ioctl+0xa62/0xfd0
[  886.272976][T21670]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  886.272994][T21670]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  886.273030][T21670]  ? __fget_files+0x2a/0x420
[  886.273058][T21670]  ? __fget_files+0x2a/0x420
[  886.273081][T21670]  ? __fget_files+0x3a0/0x420
[  886.273102][T21670]  ? __fget_files+0x2a/0x420
[  886.273128][T21670]  ? bpf_lsm_file_ioctl+0x9/0x20
[  886.273148][T21670]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  886.273170][T21670]  __se_sys_ioctl+0xfc/0x170
[  886.273192][T21670]  do_syscall_64+0x14d/0xf80
[  886.273209][T21670]  ? trace_irq_disable+0x3b/0x150
[  886.273232][T21670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.273253][T21670]  ? clear_bhb_loop+0x40/0x90
[  886.273277][T21670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.273296][T21670] RIP: 0033:0x7f9ab579c799
[  886.273315][T21670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  886.273332][T21670] RSP: 002b:00007f9ab665c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  886.273352][T21670] RAX: ffffffffffffffda RBX: 00007f9ab5a16090 RCX: 00007f9ab579c799
[  886.273366][T21670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  886.273377][T21670] RBP: 00007f9ab665c090 R08: 0000000000000000 R09: 0000000000000000
[  886.273389][T21670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  886.273400][T21670] R13: 00007f9ab5a16128 R14: 00007f9ab5a16090 R15: 00007fff1ba3a9a8
[  886.273433][T21670]  </TASK>
[  886.274074][T21670] Mem-Info:
[  886.444452][ T3502] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.505967][T21670] active_anon:24370 inactive_anon:0 isolated_anon:0
[  886.505967][T21670]  active_file:15039 inactive_file:4625 isolated_file:0
[  886.505967][T21670]  unevictable:768 dirty:59 writeback:0
[  886.505967][T21670]  slab_reclaimable:12572 slab_unreclaimable:102633
[  886.505967][T21670]  mapped:26981 shmem:17812 pagetables:1939
[  886.505967][T21670]  sec_pagetables:0 bounce:0
[  886.505967][T21670]  kernel_misc_reclaimable:0
[  886.505967][T21670]  free:1322295 free_pcp:11987 free_cma:0
[  886.767405][T21552] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.776229][T21670] Node 0 active_anon:97380kB inactive_anon:0kB active_file:60156kB inactive_file:18368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107924kB dirty:236kB writeback:0kB shmem:69712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:7508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  886.812757][T21670] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  886.844248][T21670] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[  886.889484][ T1156] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  886.891458][T21670] lowmem_reserve[]: 0 2480 2482 2482 2482
[  886.905945][T21670] Node 0 DMA32 free:1338196kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97396kB inactive_anon:0kB active_file:60156kB inactive_file:18368kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2540324kB mlocked:0kB bounce:0kB free_pcp:39748kB local_pcp:21076kB free_cma:0kB
[  886.965275][T21670] lowmem_reserve[]: 0 0 1 1 1
[  886.966565][ T1043] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  886.970285][T21670] Node 0 
[  887.021607][ T5840] Bluetooth: hci3: command tx timeout
[  887.033225][T21670] Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1432kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  887.065449][T21670] lowmem_reserve[]: 0 0 0 0 0
[  887.070257][T21670] Node 1 Normal free:3935764kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7420kB local_pcp:2692kB free_cma:0kB
[  887.073540][ T1156] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.104054][T21670] lowmem_reserve[]: 0 0 0 0 0
[  887.118172][T21670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  887.133639][T21670] Node 0 DMA32: 7195*4kB (UM) 4667*8kB (UM) 2649*16kB (UME) 985*32kB (UME) 324*64kB (UME) 264*128kB (UME) 199*256kB (UM) 230*512kB (UM) 130*1024kB (UME) 17*2048kB (UM) 197*4096kB (UM) = 1338100kB
[  887.155205][T21670] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  887.178536][T21670] Node 1 Normal: 13*4kB (UM) 18*8kB (UM) 7*16kB (UM) 7*32kB (UM) 12*64kB (UM) 14*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 958*4096kB (UM) = 3935764kB
[  887.206072][T21670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  887.228644][T21552] 8021q: adding VLAN 0 to HW filter on device team0
[  887.231913][T21670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  887.270057][T21670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  887.295924][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.303282][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.317357][T21670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  887.337900][T21670] 37472 total pagecache pages
[  887.343099][T21670] 0 pages in swap cache
[  887.347600][T21670] Free swap  = 124996kB
[  887.355398][T21670] Total swap = 124996kB
[  887.359798][T21670] 2097051 pages RAM
[  887.364038][T21670] 0 pages HighMem/MovableOnly
[  887.369329][T21670] 429997 pages reserved
[  887.375638][T21670] 0 pages cma reserved
[  887.398309][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.405573][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.491217][  T987] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  887.663986][  T987] usb 7-1: unable to get BOS descriptor or descriptor too short
[  887.682886][  T987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  887.703565][  T987] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  887.741001][  T987] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  887.757034][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.776224][  T987] usb 7-1: Product: syz
[  887.785648][  T987] usb 7-1: Manufacturer: syz
[  887.795795][  T987] usb 7-1: SerialNumber: syz
[  887.882463][T21690] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  887.899766][T21690] overlayfs: failed to set xattr on upper
[  887.913872][T21690] overlayfs: ...falling back to redirect_dir=nofollow.
[  887.936162][T21690] overlayfs: ...falling back to index=off.
[  887.945505][T21552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  887.954483][T21691] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4972'.
[  887.957785][T21690] overlayfs: ...falling back to uuid=null.
[  887.985730][T21691] hsr_slave_0: left promiscuous mode
[  887.985770][T21690] overlayfs: ...falling back to xino=off.
[  887.999844][T21691] hsr_slave_1: left promiscuous mode
[  888.040714][  T987] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  888.072282][  T987] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22
[  888.220743][T21552] veth0_vlan: entered promiscuous mode
[  888.257667][T21552] veth1_vlan: entered promiscuous mode
[  888.294776][  T987] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22
[  888.327487][  T987] usb 7-1: USB disconnect, device number 86
[  888.389581][T21552] veth0_macvtap: entered promiscuous mode
[  888.400663][T11512] udevd[11512]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  888.426968][T21552] veth1_macvtap: entered promiscuous mode
[  888.467093][T21552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  888.493923][T21552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.514442][T21498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  888.525001][T21498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  888.539756][T21498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  888.553007][T21498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.810895][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.822098][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.874452][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.885470][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.233667][T21711] netlink: 'syz.5.4978': attribute type 11 has an invalid length.
[  889.244544][T21711] nftables ruleset with unbound chain
[  889.940572][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4988'.
[  890.105063][T21749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  890.180447][T21752] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.4992'.
[  890.202363][  T987] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  890.290839][T21758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4993'.
[  890.302350][T21758] openvswitch: netlink: Flow key attr not present in new flow.
[  890.386052][  T987] usb 6-1: Using ep0 maxpacket: 32
[  890.402350][  T987] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  890.414238][T21760] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  890.431821][  T987] usb 6-1: config 0 has no interface number 0
[  890.438086][  T987] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  890.471694][  T987] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  890.481067][  T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.489690][  T987] usb 6-1: Product: syz
[  890.499502][  T987] usb 6-1: Manufacturer: syz
[  890.504536][  T987] usb 6-1: SerialNumber: syz
[  890.513406][  T987] usb 6-1: config 0 descriptor??
[  890.523633][  T987] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  890.534539][  T987] em28xx 6-1:0.132: Video interface 132 found: isoc
[  890.783497][  T987] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  890.874991][  T987] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  890.901436][  T987] em28xx 6-1:0.132: board has no eeprom
[  890.971215][  T987] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  890.988574][  T987] em28xx 6-1:0.132: analog set to isoc mode.
[  890.995194][T16562] em28xx 6-1:0.132: Registering V4L2 extension
[  891.016628][  T987] usb 6-1: USB disconnect, device number 69
[  891.043141][   T24] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  891.085574][  T987] em28xx 6-1:0.132: Disconnecting em28xx
[  891.208987][T16562] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  891.218899][T16562] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  891.226754][T16562] em28xx 6-1:0.132: No AC97 audio processor
[  891.232887][   T24] usb 7-1: Using ep0 maxpacket: 32
[  891.240746][   T24] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  891.264719][   T24] usb 7-1: config 0 has no interface number 0
[  891.271207][T16562] usb 6-1: Decoder not found
[  891.277777][   T24] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  891.282327][T16562] em28xx 6-1:0.132: failed to create media graph
[  891.303178][   T24] usb 7-1: config 0 interface 85 has no altsetting 0
[  891.310280][T16562] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  891.324461][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  891.339634][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.348799][T16562] em28xx 6-1:0.132: Remote control support is not available for this card.
[  891.367376][   T24] usb 7-1: Product: syz
[  891.368301][  T987] em28xx 6-1:0.132: Closing input extension
[  891.385762][   T24] usb 7-1: Manufacturer: syz
[  891.395921][   T24] usb 7-1: SerialNumber: syz
[  891.413558][  T987] em28xx 6-1:0.132: Freeing device
[  891.425923][   T24] usb 7-1: config 0 descriptor??
[  892.071296][  T987] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  892.199420][   T24] appletouch 7-1:0.85: Geyser mode initialized.
[  892.207793][   T24] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input100
[  892.220095][    C1] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  892.221474][  T987] usb 2-1: Using ep0 maxpacket: 32
[  892.238882][  T987] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  892.247937][  T987] usb 2-1: config 0 has no interface number 0
[  892.255550][  T987] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  892.274723][  T987] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  892.289123][  T987] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  892.300837][  T987] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  892.312141][  T987] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  892.324418][  T987] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  892.335185][  T987] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  892.346271][  T987] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  892.356546][  T987] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  892.394355][  T987] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  892.421214][  T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.425560][   T24] usb 7-1: USB disconnect, device number 87
[  892.430077][  T987] usb 2-1: Product: syz
[  892.440414][  T987] usb 2-1: Manufacturer: syz
[  892.446504][  T987] usb 2-1: SerialNumber: syz
[  892.458977][  T987] usb 2-1: config 0 descriptor??
[  892.469830][T21796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  892.507688][   T24] appletouch 7-1:0.85: input: appletouch disconnected
[  892.512656][  T987] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  892.538425][  T987] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[  892.729220][T21796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.739336][T21796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.748311][   T24] usb 2-1: USB disconnect, device number 75
[  892.901270][  T987] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  893.051329][  T987] usb 6-1: Using ep0 maxpacket: 32
[  893.062462][  T987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.073939][  T987] usb 6-1: config 0 has no interfaces?
[  893.082275][  T987] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  893.092276][  T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.106932][  T987] usb 6-1: Product: syz
[  893.111371][  T987] usb 6-1: Manufacturer: syz
[  893.116281][  T987] usb 6-1: SerialNumber: syz
[  893.123991][  T987] usb 6-1: config 0 descriptor??
[  893.197961][T21806] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  893.208864][T21806] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  893.220807][T21806] overlayfs: failed to get uuid (411/file0, err=-13); falling back to uuid=null.
[  893.333298][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.348439][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.571281][  T987] usb 7-1: new low-speed USB device number 88 using dummy_hcd
[  893.735189][  T987] usb 7-1: No LPM exit latency info found, disabling LPM.
[  893.759311][  T987] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 423, setting to 0
[  893.788684][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5008'.
[  893.802657][  T987] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0
[  894.687706][T21854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  895.239062][T21868] 9p: Bad value for 'rfdno'
[  895.469603][T21875] overlayfs: failed to clone upperpath
[  895.731975][    T9] usb 6-1: USB disconnect, device number 70
[  896.350377][  T987] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  896.372066][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.404504][  T987] usb 7-1: Product: Ⰱ
[  896.421965][  T987] usb 7-1: Manufacturer: ဇ
[  896.460118][  T987] usb 7-1: can't set config #1, error -71
[  896.484874][  T987] usb 7-1: USB disconnect, device number 88
[  896.750927][T21905] overlayfs: overlapping lowerdir path
[  897.835515][T21937] sd 0:0:1:0: PR command failed: 1026
[  897.867655][T21937] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  897.889402][T21937] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  898.479524][T21969] overlayfs: failed to clone upperpath
[  899.152176][T21991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  902.450138][T22124] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  902.484966][T22124] overlayfs: missing 'lowerdir'
[  909.860604][   T30] audit: type=1326 audit(1773685644.697:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.5.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab579c799 code=0x7ffc0000
[  909.910926][   T30] audit: type=1326 audit(1773685644.697:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.5.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab579c799 code=0x7ffc0000
[  909.981270][   T30] audit: type=1326 audit(1773685644.727:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.5.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f9ab579c799 code=0x7ffc0000
[  910.038292][   T30] audit: type=1326 audit(1773685644.727:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.5.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab579c799 code=0x7ffc0000
[  910.127300][T22334] futex_wake_op: syz.7.5213 tries to shift op by -1; fix this program
[  910.953976][T22363] futex_wake_op: syz.6.5224 tries to shift op by -1; fix this program
[  913.243355][T22437] futex_wake_op: syz.5.5255 tries to shift op by -1; fix this program
[  913.598723][T22458] syzkaller0: entered promiscuous mode
[  913.617165][T22458] syzkaller0: entered allmulticast mode
[  916.875079][T22526] overlayfs: failed to resolve './file0': -2
[  917.460420][T22556] overlayfs: failed to resolve './file0': -2
[  917.850251][T22577] overlayfs: failed to resolve './file0': -2
[  918.308879][T22603] overlayfs: failed to resolve './file0': -2
[  918.848014][T22619] block device autoloading is deprecated and will be removed.
[  918.858391][T22619] md: invalid raid superblock magic on ram32
[  918.868315][T22619] md: ram32 does not have a valid v0.0 superblock, not importing!
[  918.873787][T22633] overlayfs: failed to resolve './file0': -2
[  918.877097][T22619] md: md_import_device returned -22
[  919.313443][T22654] overlayfs: failed to resolve './file0': -2
[  919.785728][T22677] overlayfs: failed to resolve './file0': -2
[  920.200214][T22701] overlayfs: failed to clone upperpath
[  920.272609][T22704] overlayfs: failed to resolve './file0': -2
[  920.685277][T22728] overlayfs: failed to resolve './file0': -2
[  921.067440][   T30] audit: type=1800 audit(1773685655.907:405): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5386" name="bus" dev="overlay" ino=2727 res=0 errno=0
[  921.221024][T22756] overlayfs: failed to resolve './file1': -2
[  921.624261][T22776] overlayfs: failed to resolve './cgroup': -2
[  921.690420][T22781] overlayfs: failed to resolve './file1': -2
[  921.966898][T22785] md: invalid raid superblock magic on ram32
[  921.975998][T22785] md: ram32 does not have a valid v0.0 superblock, not importing!
[  921.988664][T22785] md: md_import_device returned -22
[  922.554949][T22808] overlayfs: failed to resolve './file1': -2
[  927.717721][   T30] audit: type=1326 audit(1773685662.557:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  927.758667][   T30] audit: type=1326 audit(1773685662.557:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  927.811190][   T30] audit: type=1326 audit(1773685662.587:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b8e75cfce code=0x7ffc0000
[  927.871736][   T30] audit: type=1326 audit(1773685662.587:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  927.912291][   T30] audit: type=1326 audit(1773685662.587:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  927.963523][   T30] audit: type=1326 audit(1773685662.587:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  928.019180][   T30] audit: type=1326 audit(1773685662.587:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.1.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e79c799 code=0x7ffc0000
[  931.597844][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  934.695472][   T30] audit: type=1326 audit(1773685669.537:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  934.771252][   T30] audit: type=1326 audit(1773685669.537:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  934.834178][   T30] audit: type=1326 audit(1773685669.557:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  934.858492][   T30] audit: type=1326 audit(1773685669.557:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  934.921264][   T30] audit: type=1326 audit(1773685669.557:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  934.993318][   T30] audit: type=1326 audit(1773685669.557:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  935.071693][   T30] audit: type=1326 audit(1773685669.557:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  935.176902][   T30] audit: type=1326 audit(1773685669.567:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  935.239666][   T30] audit: type=1326 audit(1773685669.567:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.7.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f382239c799 code=0x7ffc0000
[  935.506411][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  935.526527][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  935.536848][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  935.545451][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  935.553927][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  936.348950][   T30] audit: type=1326 audit(1773685671.187:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59299c799 code=0x7ffc0000
[  936.375741][   T36] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.643138][   T36] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.794366][   T36] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.928723][   T36] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.053481][T23168] chnl_net:caif_netlink_parms(): no params data found
[  937.337762][T23168] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.345692][T23168] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.353749][T23168] bridge_slave_0: entered allmulticast mode
[  937.363663][T23168] bridge_slave_0: entered promiscuous mode
[  937.403572][T23168] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.412059][T23168] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.419615][T23168] bridge_slave_1: entered allmulticast mode
[  937.430437][T23168] bridge_slave_1: entered promiscuous mode
[  937.620807][T23168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  937.648173][T23168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  937.662316][ T5152] Bluetooth: hci0: command tx timeout
[  937.911203][T23168] team0: Port device team_slave_0 added
[  938.216178][T23211] 
[  938.218641][T23211] ======================================================
[  938.225770][T23211] WARNING: possible circular locking dependency detected
[  938.232902][T23211] syzkaller #0 Tainted: G             L     
[  938.238916][T23211] ------------------------------------------------------
[  938.246021][T23211] syz.5.5568/23211 is trying to acquire lock:
[  938.252121][T23211] ffff888070c85ab8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130
[  938.261133][T23211] 
[  938.261133][T23211] but task is already holding lock:
[  938.268534][T23211] ffff88807c95f370 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660
[  938.278350][T23211] 
[  938.278350][T23211] which lock already depends on the new lock.
[  938.278350][T23211] 
[  938.288776][T23211] 
[  938.288776][T23211] the existing dependency chain (in reverse order) is:
[  938.297808][T23211] 
[  938.297808][T23211] -> #1 (&ctx->map_changing_lock){++++}-{4:4}:
[  938.306233][T23211]        down_write+0x96/0x200
[  938.311016][T23211]        mremap_userfaultfd_prep+0x117/0x190
[  938.317025][T23211]        move_vma+0xc31/0x1800
[  938.321912][T23211]        mremap_to+0x788/0x850
[  938.326712][T23211]        __se_sys_mremap+0xd37/0xfc0
[  938.332020][T23211]        do_syscall_64+0x14d/0xf80
[  938.337150][T23211]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.343600][T23211] 
[  938.343600][T23211] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[  938.351194][T23211]        __lock_acquire+0x15a5/0x2cf0
[  938.356598][T23211]        lock_acquire+0xf0/0x2e0
[  938.361570][T23211]        __might_fault+0xcb/0x130
[  938.366631][T23211]        userfaultfd_ioctl+0x2c01/0x4c70
[  938.372326][T23211]        __se_sys_ioctl+0xfc/0x170
[  938.377456][T23211]        do_syscall_64+0x14d/0xf80
[  938.382587][T23211]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.389048][T23211] 
[  938.389048][T23211] other info that might help us debug this:
[  938.389048][T23211] 
[  938.399294][T23211]  Possible unsafe locking scenario:
[  938.399294][T23211] 
[  938.406760][T23211]        CPU0                    CPU1
[  938.412210][T23211]        ----                    ----
[  938.417608][T23211]   rlock(&ctx->map_changing_lock);
[  938.422920][T23211]                                lock(&mm->mmap_lock);
[  938.429806][T23211]                                lock(&ctx->map_changing_lock);
[  938.437460][T23211]   rlock(&mm->mmap_lock);
[  938.441898][T23211] 
[  938.441898][T23211]  *** DEADLOCK ***
[  938.441898][T23211] 
[  938.450059][T23211] 2 locks held by syz.5.5568/23211:
[  938.455271][T23211]  #0: ffff88802a2481c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  938.464601][T23211]  #1: ffff88807c95f370 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660
[  938.474815][T23211] 
[  938.474815][T23211] stack backtrace:
[  938.480726][T23211] CPU: 0 UID: 0 PID: 23211 Comm: syz.5.5568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  938.480753][T23211] Tainted: [L]=SOFTLOCKUP
[  938.480760][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  938.480771][T23211] Call Trace:
[  938.480779][T23211]  <TASK>
[  938.480787][T23211]  dump_stack_lvl+0xe8/0x150
[  938.480818][T23211]  print_circular_bug+0x2e1/0x300
[  938.480841][T23211]  check_noncircular+0x12e/0x150
[  938.480863][T23211]  __lock_acquire+0x15a5/0x2cf0
[  938.480892][T23211]  ? __kernel_text_address+0xd/0x30
[  938.480917][T23211]  ? arch_stack_walk+0xfb/0x150
[  938.480937][T23211]  lock_acquire+0xf0/0x2e0
[  938.480962][T23211]  ? __might_fault+0xaf/0x130
[  938.480989][T23211]  ? __might_fault+0xaf/0x130
[  938.481013][T23211]  __might_fault+0xcb/0x130
[  938.481036][T23211]  ? __might_fault+0xaf/0x130
[  938.481061][T23211]  userfaultfd_ioctl+0x2c01/0x4c70
[  938.481086][T23211]  ? __kasan_slab_free+0x5c/0x80
[  938.481104][T23211]  ? kfree+0x1c5/0x650
[  938.481136][T23211]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  938.481172][T23211]  ? kasan_quarantine_put+0xbb/0x1f0
[  938.481201][T23211]  ? tomoyo_path_number_perm+0x219/0x630
[  938.481226][T23211]  ? tomoyo_path_number_perm+0x219/0x630
[  938.481248][T23211]  ? do_vfs_ioctl+0x1166/0x1530
[  938.481266][T23211]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  938.481288][T23211]  ? do_futex+0x333/0x420
[  938.481318][T23211]  ? __fget_files+0x2a/0x420
[  938.481343][T23211]  ? __fget_files+0x2a/0x420
[  938.481364][T23211]  ? __fget_files+0x3a0/0x420
[  938.481386][T23211]  ? __fget_files+0x2a/0x420
[  938.481410][T23211]  ? bpf_lsm_file_ioctl+0x9/0x20
[  938.481428][T23211]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  938.481452][T23211]  __se_sys_ioctl+0xfc/0x170
[  938.481470][T23211]  do_syscall_64+0x14d/0xf80
[  938.481486][T23211]  ? trace_irq_disable+0x3b/0x150
[  938.481506][T23211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.481524][T23211]  ? clear_bhb_loop+0x40/0x90
[  938.481550][T23211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.481567][T23211] RIP: 0033:0x7f9ab579c799
[  938.481585][T23211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  938.481601][T23211] RSP: 002b:00007f9ab667e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  938.481627][T23211] RAX: ffffffffffffffda RBX: 00007f9ab5a15fa0 RCX: 00007f9ab579c799
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  938.481641][T23211] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003
[  938.481653][T23211] RBP: 00007f9ab5832c99 R08: 0000000000000000 R09: 0000000000000000
[  938.481665][T23211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  938.481676][T23211] R13: 00007f9ab5a16038 R14: 00007f9ab5a15fa0 R15: 00007fff1ba3a9a8
[  938.481696][T23211]  </TASK>
[  939.052804][T23168] team0: Port device team_slave_1 added
[  939.141536][   T36] tipc: Left network mode
[  939.634046][   T36] hsr_slave_0: left promiscuous mode
[  939.646595][   T36] hsr_slave_1: left promiscuous mode
[  939.685387][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  939.702640][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  939.737822][   T36] veth1_macvtap: left promiscuous mode
[  939.747560][   T36] veth0_macvtap: left allmulticast mode
[  939.769645][   T36] veth0_macvtap: left promiscuous mode
[  939.775654][   T36] veth1_vlan: left promiscuous mode
[  939.781004][   T36] veth0_vlan: left promiscuous mode
[  939.983255][   T36] pim6reg (unregistering): left allmulticast mode
[  940.098236][   T36] team0 (unregistering): Port device team_slave_1 removed
[  940.113191][   T36] team0 (unregistering): Port device team_slave_0 removed
[  940.782125][   T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.879292][   T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.912159][   T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.989513][   T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.118012][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.157723][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.192631][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.240546][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.358357][   T36] bridge_slave_1: left allmulticast mode
[  941.365703][   T36] bridge_slave_1: left promiscuous mode
[  941.371646][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.380293][   T36] bridge_slave_0: left allmulticast mode
[  941.387549][   T36] bridge_slave_0: left promiscuous mode
[  941.397458][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.407757][   T36] dvmrp0: left allmulticast mode
[  941.413037][   T36] bridge_slave_1: left allmulticast mode
[  941.418737][   T36] bridge_slave_1: left promiscuous mode
[  941.425070][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.436432][   T36] bridge_slave_0: left allmulticast mode
[  941.442196][   T36] bridge_slave_0: left promiscuous mode
[  941.447946][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.458040][   T36] bridge_slave_1: left allmulticast mode
[  941.463877][   T36] bridge_slave_1: left promiscuous mode
[  941.469654][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.478518][   T36] bridge_slave_0: left allmulticast mode
[  941.485852][   T36] bridge_slave_0: left promiscuous mode
[  941.492333][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.752618][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.765665][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.775472][   T36] bond0 (unregistering): Released all slaves
[  941.839776][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.850389][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.860608][   T36] bond0 (unregistering): Released all slaves
[  941.947623][   T36] tipc: Disabling bearer <udp:syz2>
[  941.962664][   T36] tipc: Left network mode
[  942.356874][   T36] hsr_slave_0: left promiscuous mode
[  942.363117][   T36] hsr_slave_1: left promiscuous mode
[  942.369111][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.377287][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.385527][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.395105][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.406686][   T36] hsr_slave_0: left promiscuous mode
[  942.412850][   T36] hsr_slave_1: left promiscuous mode
[  942.419175][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.428867][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.437005][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.445784][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.460140][   T36] veth1_macvtap: left promiscuous mode
[  942.466650][   T36] veth0_macvtap: left promiscuous mode
[  942.475380][   T36] veth1_macvtap: left promiscuous mode
[  942.481643][   T36] veth0_macvtap: left promiscuous mode
[  942.487264][   T36] veth1_vlan: left promiscuous mode
[  942.492957][   T36] veth0_vlan: left promiscuous mode
[  942.651317][   T36] pim6reg (unregistering): left allmulticast mode
[  942.719323][   T36] team0 (unregistering): Port device team_slave_1 removed
[  942.747037][   T36] team0 (unregistering): Port device team_slave_0 removed
[  942.876421][   T36] team0 (unregistering): Port device team_slave_1 removed
[  942.890387][   T36] team0 (unregistering): Port device team_slave_0 removed
[  942.969193][   T36] team0 (unregistering): Port device team_slave_1 removed
[  942.980864][   T36] team0 (unregistering): Port device team_slave_0 removed