last executing test programs:

8m50.307349025s ago: executing program 4 (id=202):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a80), 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)={0x2, {{0xa, 0x4620, 0x407, @mcast2, 0x7f}}}, 0x90)
sysfs$3(0x3)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r0, {0x8}}, './sys/bus/pci/rescan\x00'})
writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0}], 0x2)
unshare(0x20000)
execveat(0xffffffffffffffff, &(0x7f0000000e40)='\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000ec0)='./security\x00', &(0x7f0000000f00)='securityfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./security/ima/policy\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000fc0)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000001040)='sysfs\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000001100)='1', 0x1)

8m46.961249708s ago: executing program 4 (id=206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000)

8m46.639645189s ago: executing program 4 (id=212):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r1, &(0x7f00000005c0)='naa', 0x3)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f8, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
write(r1, &(0x7f0000000600)='NULL', 0x4)
close(r1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x200)
ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000300)=@usbdevfs_connect)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b)

8m45.42994183s ago: executing program 4 (id=218):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @random='\x004\x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{<r2=>0x0, 0x9, 0x8001, 0x7, 0x7, 0x2, 0x7, 0x4, 0x7, 0x8, 0x0, 0x0, 0x96, 0xfffffffffffeffff, 0x9}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000006c0)={{r2, 0x8, 0x101, 0x0, 0x9, 0x3fa, 0x3, 0x200, 0x1000000, 0x0, 0xb, 0x200, 0x2, 0x7, 0x7}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffe})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000300)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x100)
openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0x80340, 0x0)

8m43.460565702s ago: executing program 4 (id=223):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)

8m42.006694943s ago: executing program 0 (id=226):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_MPATH(r2, 0x0, 0x20)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea)
socket(0x80000000000000a, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x6)

8m41.757136615s ago: executing program 4 (id=229):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314050025bd7000fbdbdf250900020073797a30000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x800)

8m41.179230732s ago: executing program 0 (id=233):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000', @ANYBLOB=',group_i', @ANYRESDEC=0x0])
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xff, 0x8, 0x2}})
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x36b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x115}, &(0x7f0000000100), &(0x7f0000000280), 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r4)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e94, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367, 0x0, r3}}], 0x1, 0x0, 0x0)
r5 = getpgrp(0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00')
r7 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x9000000d})
r8 = syz_pidfd_open(r5, 0x0)
setns(r8, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000440)={0x6, 0xfb, 0x40000}, 0x20)
dup(r2)

8m40.692700846s ago: executing program 0 (id=235):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r5, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, &(0x7f0000019480)=0xde)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1})
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

8m39.248321581s ago: executing program 0 (id=239):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000280)="0b0000000100", 0x6)

8m38.627749221s ago: executing program 0 (id=242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)

8m35.763756363s ago: executing program 0 (id=245):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x5244, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x3008, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='\b', 0x1}], 0x1}}], 0x3, 0x4000001)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)

8m26.118164203s ago: executing program 32 (id=229):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314050025bd7000fbdbdf250900020073797a30000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x800)

8m20.691782611s ago: executing program 33 (id=245):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x5244, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x3008, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='\b', 0x1}], 0x1}}], 0x3, 0x4000001)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)

7m38.311089786s ago: executing program 7 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x100800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./security/apparmor/.replace\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000004680)={0x15, 0xe, &(0x7f0000004740)=ANY=[@ANYBLOB="b7000000f8000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0bf0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000054c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005500), 0xfffffffffffffe8a, 0x10, &(0x7f0000005540), 0xfffffffffffffd27}, 0x48)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000440)='./file0\x00')
syz_fuse_handle_req(r1, &(0x7f0000000480)="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", 0x2000, &(0x7f0000002480)={&(0x7f0000002500)={0x50, 0x0, 0x4, {0x7, 0x2d, 0x0, 0x1000, 0x3, 0x5, 0x7, 0x742, 0x0, 0x0, 0x4, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000002580)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004580)={&(0x7f0000004600)={0x50, 0xffffffffffffff8c, 0xffffffffffffffff, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getresuid(0x0, 0x0, 0x0)
ioctl(r0, 0x200, &(0x7f0000000100)="9115e2e5ab610e93566067596ddc5a7b25e9758f7190ed26425fb7557e47beb82b8ca87d43df2b277855bfd13fc4a494685b12c934afae58e5f40d3d27cc98cdc3c1b0f965fb693f651e10b2c2654ecfd214391af4e22ba08ce9c487162c601b532b4b2dd679ae49332de773293f9161ed")
mount$tmpfs(0x0, &(0x7f00000068c0)='./security\x00', &(0x7f0000007e40), 0x20814, &(0x7f0000007e80)={[{@usrquota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x32, 0x39, 0x25, 0x65]}}, {@inode32}, {@huge_always}], [{@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}]})
setxattr$incfs_id(&(0x7f0000000180)='./security/apparmor/.replace\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2)
sendmmsg$alg(r0, &(0x7f0000007e00)=[{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f00000056c0)="cc133abd642d70574703c9a21df2d0a0b2df06a4029523191ad6edae26f4e4114cf3148e5becc34c683c06e7366d837b2ad84d49ba3ca301a5b8291f85f9ab3726e62fd5cbd2bd1699768b14a8b128ff0dcf9d855e0b04f53a02f3971412c6de649885ebec8c9852949c880daab62e199103a58d0b00f8ae746c0eb65a2a3b46e5efb04081fbebd5d8d5cd89c7718b7bb31369ab8cc31df05db4b157d63c1bfe0e798245d8a69a5dcd09b9f4a6408866dd9707ea445ef164b232c502", 0xbc}, {&(0x7f0000005780)="f608d58c914fc03bc7e2fde66257553dd335f7eb71c954e2de5c27bf5d3fc4e69937e3e1aaa134c4302c95b77456a041c1ca26e80cb72e065e085f4c51c2341584b591b004f5fe163e5d3c1b946b61ba2899278f5fa6d9bce2e8352a0c01d4474ee771973131aa1366f945fe6503e6c523d6f1877dea6eb6f7fc1695ebdb43abab47c2a5110a6b3509fd0ef88e3e95ac6d9d74b501ea05edb2f9c51617fd6c383e2c6eebf0b0aa39da6fe84c27c4fb86f01ef5f972c8721de01310df8a67b858206e14f80437427220557b5b3c80e08855d769ad409b04e23e21b7fe25083d3f038763aff4acd3e3aeaa6f25052964ab3a8ffe71", 0xf4}, {&(0x7f0000005880)="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", 0x1000}, {&(0x7f0000006880)="abf929918a4aaf30dd9a5e26311546b4982a23ad", 0x14}, {&(0x7f00000068c0)}, {&(0x7f0000006900)="18f8daec8df3906bf1ef8dbd9c00bb0a5a2ce78ba24ae06e9775feedda1d76cc46cb252612d1107f315300a5357bac7a2c65b10b911aa3e23334ca46ee4239db2a95c91aa75371e8a06e2feb0760730da53e55a026950aa18ff6977f71f9405b31722669eae13a52e623ae5df26b65c9e9ff92428c", 0x75}, {&(0x7f0000006980)="9d13c01e299b972a06d81e58bbea856d656f02e8972f8cf58c1e3196feff76157f6164558f439fd4d603e484d530f067a88e42d9d1440982303e0bbac6dcdfa5142c6b0907c7fd4d63213b78fd51336b5193d5e5b26a99", 0x57}, {&(0x7f0000006a00)="2ded3c34c27f07159fbf86bab5b60a2ec506cae62209f94f987f2fec7afb360e9b66f871bbdaba7dc6c7072149bede736f49234677b16fda5e0c96396f377eb0eef61ede72a93c4779f33043d2f939b7206730e3d38b7fed0662b02392078159d80e30f5ba45c8d192261a18f6c921de3841022c37bd8b2b42586c5d4b081154d658eb619e5f5b9ed9cbf35e07b977c85ca5d1f4f9e99556ceb98772972c7dcb12468ccc848b37fd408976b0e450109dcc47f251828a766b578d0f5c6a522be1e6db3d8e2c20d450113cc680c7478cbece8e2fbc8ba5c46c6d7e27e396bb", 0xde}], 0x8, &(0x7f0000006b40)=[@assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10}], 0x30}, {0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000006b80)="13fe1cab5f7e9ba3c0b7edb9ba37aa27ddff2839fcc399dd3f76422ad8b58d49d878191aac03d57c7c3d3b7350f4cd1f945ba0ae03dd814ed636c97cc9e29a85e32b5723cabe568d7892d0e73053bf220f807e2a09d601174014557fec642bdb1c14d7ca4dd522e4b149f8bb2e82bc5c876589e139d8bb1984fcbca5cf24b451199a307f3ce5ff5b0e627e2eccfac5bed043e6f4d36300eb41634b7ccd904fe85b75cbaf6962e65f53ffefb263905f9444a9d7fe3fdef7a3f124189c4bb5df38a27504222a11b5c2a95e629634b6bf41b246", 0xd2}, {&(0x7f0000006c80)="94e7f4fc8e2eae77cd8f043b199c3a8e6d85e15ef424395e1a9b5cebde77683ec72dae36850f99fa24dd3fb98fbeec1bcb6ca146dbf1da", 0x37}, {&(0x7f0000006cc0)="2df03d9ab3d56657bafb7ca173271fa6ad0f752fb52e88", 0x17}, {&(0x7f0000006d00)="3d76b9405717f29f68bbb8ef8307b901526d2cdaf98210f9659fa930331b8c089d13a821de0f068febf255702edf910575e3045382e79407c1ea17b53cb52f047d4817fff47acb9ba2cf8c815804e7eb7c2f1bc427d154dcb75104dd6fe756807c6d777f89a27a1820bc7a3d1a586fa432a8f6", 0x73}, {&(0x7f0000006d80)="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", 0x1000}], 0x5, &(0x7f0000007dc0)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x80}], 0x30, 0x80}], 0x2, 0x8011)
write(r0, &(0x7f0000000300)="04080076657273696f6e000205003f0004080070726f66696c6500070504002f3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52)
sendto$unix(r0, &(0x7f0000005580)="8b00461f90b9127154d28d6e1f90eff8b3c74848d7756eae83f69720a58172bba1c4901454b7f9b8b3c5abcf5d5e04d1753737178d78e6a614954ecb3ab1ba12ab545f005508404b5e13ee6575b249a1fa5c17a814a0456f73cc8f7f241c341a125ac606d92d26ed34653ad2065546fc055e96205eca808e0da6efb35a68484b8d4ebc983daf54e28f17cb3ab8690f33b3a70f52dfbe9c43a94de4", 0x9b, 0x40, &(0x7f0000005640)=@file={0x0, './file0\x00'}, 0x6e)

7m37.999420374s ago: executing program 7 (id=433):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x8014)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r5, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, &(0x7f0000019480)=0xde)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1})
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

7m35.188976877s ago: executing program 7 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c000100480000"], 0xf0}}, 0x0)

7m34.642365333s ago: executing program 7 (id=443):
syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmsg(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2)

7m33.480719457s ago: executing program 7 (id=448):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
io_setup(0x6, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004)
ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9)
listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0)

7m29.828380277s ago: executing program 7 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)

7m29.173442315s ago: executing program 34 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)

18.232428094s ago: executing program 6 (id=1855):
close(0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x18104)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xc3ecff0, 0x2, 0x0, 0x9}})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

18.122926655s ago: executing program 8 (id=1857):
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x513501, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0)
read$FUSE(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x98, 0x0, 0x1, 0x700, 0x0, 0x0, {0x5}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xc9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x40001}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x13}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xc6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000500)={<r1=>0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000540)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000580)={r1, 0x101}, &(0x7f00000005c0)=0x8)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000841000/0x3000)=nil)

16.782956197s ago: executing program 8 (id=1860):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000005}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x4, &(0x7f0000000340))
io_setup(0x6, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
futex$unlock_wake_list32(0x0, 0x681, 0x0, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)=0x3, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)=""/139, &(0x7f0000000740)=0x8b)
r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000002980)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000029c0)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000002a00)='./sys_sec\x00', &(0x7f0000002a40)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002a80)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r1, &(0x7f0000002ac0)=""/9, 0xfffffd87)
write$tun(r1, &(0x7f0000002b80)=ANY=[], 0xffe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002c00))

14.496088895s ago: executing program 6 (id=1864):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[{0xc8, 0x84, 0x2, "262a1e5665cfb6fc3f6a427885df23977a90937861b6af881e462e397d96899758c29683e87e2f2e688cc4a1e82fea63d869531c45a4c7d3d4b18aafa78a647b8e4e3da91138321653ae3c17299123b56de3226098375291da13087c45666994fdc9f8645dea8947f6b41a92446518a9169e03f27323a7708a7514fc54ab128eb3e84d4a45b7c880c75bace9533c557d3d38ed454801d900c3ded9575a56a2a016aa89e06aecf89020433a51fec4a3d0d9aae0"}, {0x48, 0x119, 0x10, "4913b308639d2bc9d9b5976c80b5010a6a546b3e5f9618b138d7075d47dbdab4bf029a3b1c30a7b6780a018eb47abd5934fc2a"}], 0x110}}, {{&(0x7f0000000a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000fc0)=[{0x10, 0x108, 0x81}], 0x10}}, {{0x0, 0x0, &(0x7f0000003100)=[{0x0}], 0x1, &(0x7f0000003140)=[{0x10, 0x112, 0x2}], 0x10}}, {{&(0x7f00000031c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xff, 0x4, "8405966df88797a2c6f1d2f211bb465674e2eef887c40f0a22dac6d3f6e1795fada09aa18d42ff3a4a927b90f885acf984ff930b6b6f2201342e97ed6d0101", 0x18}, 0x80, &(0x7f0000003880), 0x0, &(0x7f0000003900)=[{0x38, 0x117, 0x9, "51e16548e30e2c981035ea834416d55279ca0698ee4c4ded8ba435aa05552199247dc1c3cdcd"}, {0x58, 0x103, 0x2b, "2806d437a79e8968478c2752fed3c2db76b68c5708b75bfc6c573de3e24375f735279d8d3c83d00d1148e735d9bd29eff08ef302ecbab76b428cd8969ee7a1356c14e188a6d01a54"}, {0x10, 0x113, 0xb787}, {0x10, 0x3a, 0x9}], 0xb0}}, {{&(0x7f0000003b00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-asm,sha512-arm64)\x00'}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="c65ab67578c4b2c2f1e527a516d5957db072f6c96269a5a2bd303971a9d0bc02a0a3a5d99c9562035a70e7566f13bb6825294bfa68fe0401a14ac893fadae81ef379a0ea8fff74cd242919dca51058c1c749578278bf15a5e011338bdc4ee12585a84742025768231ae33bc300416f3d16cd7fd53d871c50e1f33daa14835434f66708babc43ccbbe09a86bac3", 0x8d}], 0x1, &(0x7f0000003c80)=[{0xa8, 0x115, 0x3, "4163d7809ab87e471eb3c677b0171637da6c2ee8dcf195d4626d4809c32f2092a79492a0cb0d9b1879d527ee3c7fcf87c89a4785017cb573c7db7bc06430855f1326206dc04f31627e3d891273b9a8bb268725eb291ad9dbd122e0bd4938debbfa57ba6ca0e413118eb8a16d9a9a336948e6f520396c9aee0b2ff84d98fd9320f5b90571b4bdf3bf5551735e5dfb6ef68969"}, {0xe8, 0x114, 0x2b5, "c4122bbd678e220cd035eb142b126864aa011cc8daa9306dbf0b638cb0fb72e31e482f0466f93a5854ac4309bac81a3f761f8854850b2ffe1a8e6c979237988d0eae61541f36e596da823ac8240bc19d703f6b5818b126be7a82e8098d3013484a32be678acd54ed3fac200a1e4b398cee0f55df052c3c486d5b6ed53b3a4a8eea48ed43dc29f8d144a316186eb577930e0cd49c33db887594cb78d285d393f1e9dcb7cb5fd614b0695a7a6e4a0ae64402e9bc83ca6e4967673220d30a369e7afc7b974487724f2418b60bc4dd53041a9b"}], 0x190}}, {{&(0x7f0000004200)=@can, 0x80, &(0x7f00000042c0)}}], 0x6, 0x4005)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8)

14.002072169s ago: executing program 2 (id=1865):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525"], 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

13.543673238s ago: executing program 5 (id=1866):
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0xe2, 0x0, 0x7fc000fd}]})
read$FUSE(0xffffffffffffffff, 0x0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580))

12.4037094s ago: executing program 2 (id=1867):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=""/264)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x40e02, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740), 0xc)
ioctl$sock_bt_hci(r4, 0x400448ca, 0x0)
sync_file_range(r2, 0x40, 0x39, 0x4)
bind$bt_hci(r4, &(0x7f0000000780)={0x1f, 0x0, 0x1}, 0x6)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f00000007c0), 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000800)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000840)={0x0, 0x2710}, 0x8)
writev(r6, &(0x7f0000000880)=[{&(0x7f00000008c0)='?', 0x20000081}], 0x2)
write$rfkill(r3, &(0x7f0000000900)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1d, &(0x7f0000000940)={@mcast1}, 0x14)

11.337477198s ago: executing program 6 (id=1868):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x12402)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000900)=0x3)
read(r3, 0x0, 0x0)
write(r2, &(0x7f0000000840)='prev_state.function ==x', 0x17)
write$P9_RVERSION(r2, &(0x7f0000000880)=ANY=[@ANYBLOB='0\x00'], 0x15)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000940)='./trace/set_event\x00', &(0x7f0000000340)='jfs\x00', 0x8001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/set_event\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='*:mod:', 0x6)
r5 = syz_open_pts(r1, 0x200)
r6 = dup3(r5, r1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r8 = io_uring_setup(0x1, &(0x7f0000000540)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r8, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000640)={&(0x7f0000000680), 0x1000}, &(0x7f00000006c0)={&(0x7f0000000700), 0x1000, 0x1}}, 0x1)

11.285789206s ago: executing program 8 (id=1869):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100088b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)

11.201779289s ago: executing program 1 (id=1870):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000006c0)=@req3={0xfffffffc, 0xe014, 0xf, 0x3ff, 0x1, 0x6, 0x8000}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

11.199836011s ago: executing program 3 (id=1871):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/../file0\x00', 0x1ff)

11.157043092s ago: executing program 5 (id=1872):
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000841000/0x3000)=nil)

10.014363486s ago: executing program 8 (id=1873):
syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x4)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000280)={0x7e9a, 0x29, {<r2=>0x0}, {}, 0x2, 0x3})
sched_setattr(0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt(r4, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c)
setsockopt(r4, 0x0, 0x489, &(0x7f0000000400), 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)="41610d85413954ac69bbba7dad57abb74484e8629d8511133e61f6bcac0d8582e5ccb71d5b5fe570bd7049b185d518dccf3fb6027fe974f1b71dc6c184d6ea5e89a93a95408d99694755803633682699b99863b2365592cace052fa3f8acf859242528e7da185b943a7b8e2ad99d1564bc16390d339bc694ba82853f4506967f78e87991fc7e66216a44b33d2acc9da106c44b68d7093abe5366c280073b6425b219e48ae5142a2ed531d29d1e43d3f62fb349bf6e1b84a2807ae5c51801001cb34d6d37d5604754e4a21c122924f0", &(0x7f0000000400)="c3c366c06249e168700dfdb7de2b78ab416dba7b71b21606ad56d8932c200f8b96c106e56fb9b560973121886c73e1926420f75ec01e14610ea3b0789a958c4bfaff974997dc10f3e7415a4b25ae27e9cf7c650757f4138133c3a02bd861d6e8727054536ced2ce1d530f8cbf4601a0bbec06db6776a6b37524fa8a33e00000000c400ee92f2bc6600e21e2491d2e3ace8a1a4b47dfd27b0646b7bd4d912950fc3", 0x6, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r5=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000180)={0x200, 0x3, 0x3})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
socket$nl_route(0x10, 0x3, 0x0)

9.937293619s ago: executing program 1 (id=1874):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

9.920545569s ago: executing program 3 (id=1875):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x1d, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x33d53}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)

9.896886547s ago: executing program 5 (id=1876):
close(0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x18104)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xc3ecff0, 0x2, 0x0, 0x9}})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

9.820849625s ago: executing program 6 (id=1877):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000f80)=ANY=[], 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f00000009c0)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r\n\r\n', 0x31, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x2000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x1, 0x802)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000321414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x41, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x1})
openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r5, 0x2001, 0x5c57, 0xc, 0x0, 0xfff8)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x10, "d51b8ccc6c8101c87e942b1abedc5b36"}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

9.548564984s ago: executing program 2 (id=1878):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x100082}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
cachestat(r0, &(0x7f0000000100)={0xaf, 0x1}, &(0x7f0000000200), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0x7, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

9.475243002s ago: executing program 1 (id=1879):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000f80)=ANY=[], 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f00000009c0)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r\n\r\n', 0x31, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x2000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

9.428450206s ago: executing program 3 (id=1880):
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1801)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x1f0b, &(0x7f00000001c0)={0x0, 0x9bfe, 0x40, 0x1, 0x241}, &(0x7f0000000240), &(0x7f00000003c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x200020, &(0x7f0000000400)='/dev/sequencer2\x00')
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x204, 0x2)
mmap(&(0x7f00000a5000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r1, 0x108000)

7.376589566s ago: executing program 5 (id=1881):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[{0xc8, 0x84, 0x2, "262a1e5665cfb6fc3f6a427885df23977a90937861b6af881e462e397d96899758c29683e87e2f2e688cc4a1e82fea63d869531c45a4c7d3d4b18aafa78a647b8e4e3da91138321653ae3c17299123b56de3226098375291da13087c45666994fdc9f8645dea8947f6b41a92446518a9169e03f27323a7708a7514fc54ab128eb3e84d4a45b7c880c75bace9533c557d3d38ed454801d900c3ded9575a56a2a016aa89e06aecf89020433a51fec4a3d0d9aae0"}, {0x48, 0x119, 0x10, "4913b308639d2bc9d9b5976c80b5010a6a546b3e5f9618b138d7075d47dbdab4bf029a3b1c30a7b6780a018eb47abd5934fc2a"}], 0x110}}, {{&(0x7f0000000a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000fc0)=[{0x10, 0x108, 0x81}], 0x10}}, {{0x0, 0x0, &(0x7f0000003100)=[{0x0}], 0x1, &(0x7f0000003140)=[{0x10, 0x112, 0x2}], 0x10}}, {{&(0x7f00000031c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xff, 0x4, "8405966df88797a2c6f1d2f211bb465674e2eef887c40f0a22dac6d3f6e1795fada09aa18d42ff3a4a927b90f885acf984ff930b6b6f2201342e97ed6d0101", 0x18}, 0x80, &(0x7f0000003880), 0x0, &(0x7f0000003900)=[{0x38, 0x117, 0x9, "51e16548e30e2c981035ea834416d55279ca0698ee4c4ded8ba435aa05552199247dc1c3cdcd"}, {0x58, 0x103, 0x2b, "2806d437a79e8968478c2752fed3c2db76b68c5708b75bfc6c573de3e24375f735279d8d3c83d00d1148e735d9bd29eff08ef302ecbab76b428cd8969ee7a1356c14e188a6d01a54"}, {0x10, 0x113, 0xb787}, {0x10, 0x3a, 0x9}], 0xb0}}, {{&(0x7f0000003b00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-asm,sha512-arm64)\x00'}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="c65ab67578c4b2c2f1e527a516d5957db072f6c96269a5a2bd303971a9d0bc02a0a3a5d99c9562035a70e7566f13bb6825294bfa68fe0401a14ac893fadae81ef379a0ea8fff74cd242919dca51058c1c749578278bf15a5e011338bdc4ee12585a84742025768231ae33bc300416f3d16cd7fd53d871c50e1f33daa14835434f66708babc43ccbbe09a86bac3", 0x8d}], 0x1, &(0x7f0000003c80)=[{0xa8, 0x115, 0x3, "4163d7809ab87e471eb3c677b0171637da6c2ee8dcf195d4626d4809c32f2092a79492a0cb0d9b1879d527ee3c7fcf87c89a4785017cb573c7db7bc06430855f1326206dc04f31627e3d891273b9a8bb268725eb291ad9dbd122e0bd4938debbfa57ba6ca0e413118eb8a16d9a9a336948e6f520396c9aee0b2ff84d98fd9320f5b90571b4bdf3bf5551735e5dfb6ef68969"}, {0xe8, 0x114, 0x2b5, "c4122bbd678e220cd035eb142b126864aa011cc8daa9306dbf0b638cb0fb72e31e482f0466f93a5854ac4309bac81a3f761f8854850b2ffe1a8e6c979237988d0eae61541f36e596da823ac8240bc19d703f6b5818b126be7a82e8098d3013484a32be678acd54ed3fac200a1e4b398cee0f55df052c3c486d5b6ed53b3a4a8eea48ed43dc29f8d144a316186eb577930e0cd49c33db887594cb78d285d393f1e9dcb7cb5fd614b0695a7a6e4a0ae64402e9bc83ca6e4967673220d30a369e7afc7b974487724f2418b60bc4dd53041a9b"}], 0x190}}, {{&(0x7f0000004200)=@can, 0x80, &(0x7f00000042c0)}}], 0x6, 0x4005)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8)

6.46948336s ago: executing program 2 (id=1882):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000f80)=ANY=[], 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f00000009c0)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r\n\r\n', 0x31, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x2000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x1, 0x802)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000321414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x41, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x1})
openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r6, 0x2001, 0x5c57, 0xc, 0x0, 0xfff8)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x10, "d51b8ccc6c8101c87e942b1abedc5b36"}})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

5.968793648s ago: executing program 1 (id=1883):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000005}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x4, &(0x7f0000000340))
io_setup(0x6, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
futex$unlock_wake_list32(0x0, 0x681, 0x0, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)=0x3, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)=""/139, &(0x7f0000000740)=0x8b)
r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000002980)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000029c0)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000002a00)='./sys_sec\x00', &(0x7f0000002a40)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002a80)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r1, &(0x7f0000002ac0)=""/9, 0xfffffd87)
write$tun(r1, &(0x7f0000002b80)=ANY=[], 0xffe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002c00))

5.953187098s ago: executing program 3 (id=1884):
socket(0xa, 0x3, 0x3a)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r3, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/11, 0xb}], 0x1, &(0x7f00000003c0)=""/162, 0xa2}, 0x5fc}, {{&(0x7f0000000540), 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1, &(0x7f0000000680)=""/63, 0x3f}, 0x5}, {{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/86, 0x56}], 0x2, &(0x7f0000000880)=""/246, 0xf6}, 0x9c3}, {{&(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/76, 0x4c}, {&(0x7f0000000b40)=""/170, 0xaa}, {&(0x7f0000000c00)=""/123, 0x7b}], 0x3, &(0x7f0000000cc0)=""/82, 0x52}, 0xfffffffd}, {{&(0x7f0000000d40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003840)=[{0x0}, {&(0x7f0000002540)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000003640)=""/50, 0x32}, {&(0x7f0000003680)=""/17, 0x11}, {&(0x7f00000036c0)=""/88, 0x58}, {&(0x7f0000003740)=""/200, 0xc8}], 0x8, &(0x7f00000038c0)=""/132, 0x84}, 0x9}], 0x5, 0x123, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)

1.684519678s ago: executing program 3 (id=1885):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100088b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)

1.66575918s ago: executing program 2 (id=1886):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000006c0)=@req3={0xfffffffc, 0xe014, 0xf, 0x3ff, 0x1, 0x6, 0x8000}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

1.599260304s ago: executing program 5 (id=1887):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/../file0\x00', 0x1ff)

1.556718012s ago: executing program 1 (id=1888):
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000841000/0x3000)=nil)

1.49987969s ago: executing program 6 (id=1889):
r0 = io_uring_setup(0x1, &(0x7f0000000540)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000640)={&(0x7f0000000680), 0x1000}, &(0x7f00000006c0)={&(0x7f0000000700), 0x1000, 0x1}}, 0x1)

1.343071853s ago: executing program 8 (id=1890):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1)
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=0x8)

970.30034ms ago: executing program 2 (id=1891):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

336.842631ms ago: executing program 3 (id=1892):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x65)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2082)
statx(0xffffffffffffff9c, &(0x7f0000002780)='./file0/file0\x00', 0x4800, 0x100, 0x0)
write$FUSE_INIT(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x842, 0x145)
io_uring_setup(0x143, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000002880)="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", 0x2000, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000140)={{}, 0x1, 0x65, 0x1}, 0x18)
close(0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0)

148.288832ms ago: executing program 5 (id=1893):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000019080)=[{{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x8014)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd2, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7a"}, &(0x7f0000019480)=0xda)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1})
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0)

137.260071ms ago: executing program 6 (id=1894):
close(0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x18104)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xc3ecff0, 0x2, 0x0, 0x9}})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

131.164685ms ago: executing program 1 (id=1895):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000f80)=ANY=[], 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f00000009c0)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r\n\r\n', 0x31, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x2000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

0s ago: executing program 8 (id=1896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)

kernel console output (not intermixed with test programs):

[  347.653344][ T8983] ima: policy update failed
[  347.664844][   T31] audit: type=1802 audit(1791711985.054:22): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.815" res=0 errno=0
[  347.701537][ T8986] jffs2: notice: (8986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  348.476558][   T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  348.709548][   T25] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  348.713081][   T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  348.713123][   T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  348.723984][   T25] usb 9-1: string descriptor 0 read error: -22
[  348.724135][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.780028][   T25] etas_es58x 9-1:1.0: Starting (null) (null) (Serial Number (null))
[  348.784221][   T25] etas_es58x 9-1:1.0: could not retrieve the product info string
[  349.010000][ T9009] binder: 9004:9009 ioctl c0709411 200000000200 returned -22
[  349.029358][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'.
[  349.379009][ T5749] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  350.127521][ T5749] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  350.366644][ T5749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.366713][ T5749] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  350.366755][ T5749] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  350.366798][ T5749] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  351.520157][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  351.520256][ T5749] usb 4-1: Product: syz
[  351.520368][ T5749] usb 4-1: Manufacturer: syz
[  352.839233][ T5749] usb 4-1: can't set config #1, error -71
[  352.859331][ T5749] usb 4-1: USB disconnect, device number 11
[  354.139659][ T1604] usb 9-1: USB disconnect, device number 2
[  354.164892][ T1604] etas_es58x 9-1:1.0: Disconnecting (null) (null)
[  354.572655][ T9057] jffs2: notice: (9057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  354.605789][ T9050] ima: policy update failed
[  354.605959][   T31] audit: type=1802 audit(1791711992.014:23): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.834" res=0 errno=0
[  354.774777][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'.
[  354.870983][ T9067] binder: 9066:9067 ioctl c0709411 200000000200 returned -22
[  355.119996][ T9064] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input14
[  355.166773][ T9080] binder: 9078:9080 ioctl c018620c 200000000200 returned -1
[  355.205392][ T5749] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  355.367333][ T5749] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  355.368666][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.368730][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  355.368770][ T5749] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  355.368812][ T5749] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  355.372158][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  355.372196][ T5749] usb 3-1: Product: syz
[  355.372222][ T5749] usb 3-1: Manufacturer: syz
[  355.454051][ T5749] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  355.470868][ T5749] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  355.472632][ T5749] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  355.812271][ T5749] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  356.024143][ T5342] usb 3-1: USB disconnect, device number 10
[  356.038326][ T5749] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  356.096205][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  356.096310][ T5749] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  356.264345][ T5749] usb 2-1: string descriptor 0 read error: -22
[  356.274370][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.549483][ T5342] garmin_gps 3-1:1.0: device disconnected
[  356.569881][ T5749] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null))
[  356.570025][ T5749] etas_es58x 2-1:1.0: could not retrieve the product info string
[  358.831951][ T5342] usb 2-1: USB disconnect, device number 8
[  358.852915][ T5342] etas_es58x 2-1:1.0: Disconnecting (null) (null)
[  358.876939][ T9122] jffs2: notice: (9122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  358.939070][ T9129] binder: 9125:9129 ioctl c0709411 200000000200 returned -22
[  359.003031][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'.
[  359.319861][ T9137] ima: policy update failed
[  359.320029][   T31] audit: type=1802 audit(1791711996.724:24): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.856" res=0 errno=0
[  360.752517][ T9144] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15
[  362.060162][ T9168] jffs2: notice: (9168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  362.192147][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  362.280894][ T9180] binder: 9179:9180 ioctl c0709411 200000000200 returned -22
[  362.425590][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  362.592983][    T9] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  362.599656][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  362.599697][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  362.622667][    T9] usb 6-1: string descriptor 0 read error: -22
[  362.622820][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.019589][    T9] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null))
[  364.019782][    T9] etas_es58x 6-1:1.0: could not retrieve the product info string
[  365.781325][ T9201] team0: Device wg0 is of different type
[  365.852566][ T9203] ima: policy update failed
[  365.854243][   T31] audit: type=1802 audit(1791712003.254:25): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.880" res=0 errno=0
[  365.882225][    T9] usb 6-1: USB disconnect, device number 8
[  365.914161][    T9] etas_es58x 6-1:1.0: Disconnecting (null) (null)
[  365.959057][ T9199] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16
[  366.315879][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'.
[  366.689610][ T9230] binder: 9228:9230 ioctl c0709411 200000000200 returned -22
[  369.510845][ T5342] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  369.583814][ T9279] CIFS mount error: No usable UNC path provided in device string!
[  369.583814][ T9279] 
[  369.583996][ T9279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  369.588680][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'.
[  369.645040][ T5342] usb 4-1: device descriptor read/64, error -71
[  369.884999][ T5342] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  369.974202][ T9283] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17
[  370.020133][ T5342] usb 4-1: device descriptor read/64, error -71
[  370.125381][ T5342] usb usb4-port1: attempt power cycle
[  370.176871][ T9293] ima: policy update failed
[  370.177047][   T31] audit: type=1802 audit(1791712007.584:26): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.900" res=0 errno=0
[  370.476693][ T5342] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  370.495688][ T5342] usb 4-1: device descriptor read/8, error -71
[  370.675177][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  370.740114][ T9307] binder: 9305:9307 ioctl c0709411 0 returned -22
[  370.753450][ T5342] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  370.776246][ T5342] usb 4-1: device descriptor read/8, error -71
[  370.802580][ T9309] team0: Device wg0 is of different type
[  370.837664][    T9] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  370.839415][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  370.839464][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  370.881080][    T9] usb 2-1: string descriptor 0 read error: -22
[  370.881200][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.899787][ T5342] usb usb4-port1: unable to enumerate USB device
[  370.916226][    T9] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null))
[  370.916445][    T9] etas_es58x 2-1:1.0: could not retrieve the product info string
[  374.361506][    T9] usb 2-1: USB disconnect, device number 9
[  374.364464][    T9] etas_es58x 2-1:1.0: Disconnecting (null) (null)
[  375.533635][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'.
[  375.583227][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'.
[  376.101241][ T9364] ima: policy update failed
[  376.101407][   T31] audit: type=1802 audit(1791712013.504:27): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.918" res=0 errno=0
[  376.246330][ T9360] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input18
[  377.003624][ T9387] syzkaller0: entered promiscuous mode
[  377.003689][ T9387] syzkaller0: entered allmulticast mode
[  377.126390][    T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  377.265591][    T9] usb 2-1: device descriptor read/64, error -71
[  377.516655][    T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  377.566245][ T1604] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  377.655356][    T9] usb 2-1: device descriptor read/64, error -71
[  377.716397][ T1604] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  377.719479][ T1604] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  377.719523][ T1604] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  377.743086][ T1604] usb 9-1: string descriptor 0 read error: -22
[  377.743235][ T1604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.774622][    T9] usb usb2-port1: attempt power cycle
[  377.782947][ T1604] etas_es58x 9-1:1.0: Starting (null) (null) (Serial Number (null))
[  377.783130][ T1604] etas_es58x 9-1:1.0: could not retrieve the product info string
[  377.950918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  377.950997][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.151634][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  378.175427][    T9] usb 2-1: device descriptor read/8, error -71
[  378.474784][    T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  378.559674][    T9] usb 2-1: device descriptor read/8, error -71
[  378.674410][    T9] usb usb2-port1: unable to enumerate USB device
[  380.466863][ T9415] fuse: Unknown parameter '00000000000000000000'
[  381.885943][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  382.295552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  382.705205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  383.993413][   T30] usb 9-1: USB disconnect, device number 3
[  383.997055][   T30] etas_es58x 9-1:1.0: Disconnecting (null) (null)
[  384.627638][ T9445] ima: policy update failed
[  384.628976][   T31] audit: type=1802 audit(1791712022.034:28): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.934" res=0 errno=0
[  385.329637][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'.
[  385.329712][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'.
[  385.332958][ T9477] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  385.425127][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  385.555779][    T9] usb 3-1: device descriptor read/64, error -71
[  385.826033][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  385.987616][    T9] usb 3-1: device descriptor read/64, error -71
[  386.108586][    T9] usb usb3-port1: attempt power cycle
[  386.636480][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  386.669713][    T9] usb 3-1: device descriptor read/8, error -71
[  386.905264][    T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  386.925770][    T9] usb 3-1: device descriptor read/8, error -71
[  387.036325][    T9] usb usb3-port1: unable to enumerate USB device
[  387.342957][ T9484] loop6: detected capacity change from 0 to 32768
[  387.367865][ T9484] OCFS2: ERROR (device loop6): ocfs2_validate_inode_block: Invalid dinode 65: extent list l_count is zero
[  387.367906][ T9484] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  387.367923][ T9484] OCFS2: File system is now read-only.
[  387.367944][ T9484] (syz.6.945,9484,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  387.368058][ T9484] (syz.6.945,9484,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  387.368128][ T9484] (syz.6.945,9484,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  387.368170][ T9484] (syz.6.945,9484,1):ocfs2_initialize_super:2194 ERROR: status = -30
[  387.368316][ T9484] (syz.6.945,9484,1):ocfs2_fill_super:1177 ERROR: status = -30
[  388.553785][ T9525] ima: policy update failed
[  388.554297][   T31] audit: type=1802 audit(1791712025.954:29): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.954" res=0 errno=0
[  389.083142][ T5632] Bluetooth: hci1: link tx timeout
[  389.083167][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.130889][ T5632] Bluetooth: hci1: link tx timeout
[  389.130911][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.131062][ T5632] Bluetooth: hci1: link tx timeout
[  389.131504][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.131635][ T5632] Bluetooth: hci1: link tx timeout
[  389.131655][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.131775][ T5632] Bluetooth: hci1: link tx timeout
[  389.131793][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.131915][ T5632] Bluetooth: hci1: link tx timeout
[  389.131934][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.132068][ T5632] Bluetooth: hci1: link tx timeout
[  389.132086][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.132208][ T5632] Bluetooth: hci1: link tx timeout
[  389.132227][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.132352][ T5632] Bluetooth: hci1: link tx timeout
[  389.132371][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.132498][ T5632] Bluetooth: hci1: link tx timeout
[  389.132516][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.133380][ T5632] Bluetooth: hci1: link tx timeout
[  389.133400][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.133537][ T5632] Bluetooth: hci1: link tx timeout
[  389.133556][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.137287][ T5632] Bluetooth: hci1: link tx timeout
[  389.137307][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.137596][ T5632] Bluetooth: hci1: link tx timeout
[  389.137615][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.137746][ T5632] Bluetooth: hci1: link tx timeout
[  389.137764][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.138048][ T5632] Bluetooth: hci1: link tx timeout
[  389.138068][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.138255][ T5632] Bluetooth: hci1: link tx timeout
[  389.138274][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.139149][ T5632] Bluetooth: hci1: link tx timeout
[  389.139169][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.139300][ T5632] Bluetooth: hci1: link tx timeout
[  389.139318][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.139456][ T5632] Bluetooth: hci1: link tx timeout
[  389.139475][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.139609][ T5632] Bluetooth: hci1: link tx timeout
[  389.139627][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.141856][ T5632] Bluetooth: hci1: link tx timeout
[  389.141877][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.142004][ T5632] Bluetooth: hci1: link tx timeout
[  389.142024][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.144540][ T5632] Bluetooth: hci1: link tx timeout
[  389.144560][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.144694][ T5632] Bluetooth: hci1: link tx timeout
[  389.144712][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.144839][ T5632] Bluetooth: hci1: link tx timeout
[  389.144858][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.145289][ T5632] Bluetooth: hci1: link tx timeout
[  389.145308][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.145452][ T5632] Bluetooth: hci1: link tx timeout
[  389.145471][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.146858][ T5632] Bluetooth: hci1: link tx timeout
[  389.146877][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.149560][ T5632] Bluetooth: hci1: link tx timeout
[  389.149580][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.153958][ T5632] Bluetooth: hci1: link tx timeout
[  389.153978][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.154108][ T5632] Bluetooth: hci1: link tx timeout
[  389.154127][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.154254][ T5632] Bluetooth: hci1: link tx timeout
[  389.154272][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.154398][ T5632] Bluetooth: hci1: link tx timeout
[  389.154417][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.154553][ T5632] Bluetooth: hci1: link tx timeout
[  389.154572][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.154698][ T5632] Bluetooth: hci1: link tx timeout
[  389.154716][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.157729][ T5632] Bluetooth: hci1: link tx timeout
[  389.157749][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.159332][ T5632] Bluetooth: hci1: link tx timeout
[  389.159352][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.159522][ T5632] Bluetooth: hci1: link tx timeout
[  389.159541][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.159670][ T5632] Bluetooth: hci1: link tx timeout
[  389.159689][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.159815][ T5632] Bluetooth: hci1: link tx timeout
[  389.159834][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.159998][ T5632] Bluetooth: hci1: link tx timeout
[  389.160017][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.160144][ T5632] Bluetooth: hci1: link tx timeout
[  389.160163][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.160390][ T5632] Bluetooth: hci1: link tx timeout
[  389.160409][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.160551][ T5632] Bluetooth: hci1: link tx timeout
[  389.160569][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.160700][ T5632] Bluetooth: hci1: link tx timeout
[  389.160719][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.160890][ T5632] Bluetooth: hci1: link tx timeout
[  389.160910][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.161047][ T5632] Bluetooth: hci1: link tx timeout
[  389.161066][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.162761][ T5632] Bluetooth: hci1: link tx timeout
[  389.162781][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.170424][ T5632] Bluetooth: hci1: link tx timeout
[  389.170491][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.171846][ T5632] Bluetooth: hci1: link tx timeout
[  389.171867][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.172002][ T5632] Bluetooth: hci1: link tx timeout
[  389.172022][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.173580][ T5632] Bluetooth: hci1: link tx timeout
[  389.173600][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.174702][ T5632] Bluetooth: hci1: link tx timeout
[  389.174722][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.174886][ T5632] Bluetooth: hci1: link tx timeout
[  389.174940][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179186][ T5632] Bluetooth: hci1: link tx timeout
[  389.179207][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179332][ T5632] Bluetooth: hci1: link tx timeout
[  389.179351][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179482][ T5632] Bluetooth: hci1: link tx timeout
[  389.179501][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179654][ T5632] Bluetooth: hci1: link tx timeout
[  389.179673][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179826][ T5632] Bluetooth: hci1: link tx timeout
[  389.179845][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.179970][ T5632] Bluetooth: hci1: link tx timeout
[  389.179990][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.181351][ T5632] Bluetooth: hci1: link tx timeout
[  389.181370][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.181542][ T5632] Bluetooth: hci1: link tx timeout
[  389.181561][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.181688][ T5632] Bluetooth: hci1: link tx timeout
[  389.181707][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.182510][ T5632] Bluetooth: hci1: link tx timeout
[  389.182530][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.183409][ T5632] Bluetooth: hci1: link tx timeout
[  389.183476][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.183671][ T5632] Bluetooth: hci1: link tx timeout
[  389.183690][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.186735][ T5632] Bluetooth: hci1: link tx timeout
[  389.186755][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.188032][ T5632] Bluetooth: hci1: link tx timeout
[  389.188057][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.189183][ T5632] Bluetooth: hci1: link tx timeout
[  389.189202][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.190262][ T5632] Bluetooth: hci1: link tx timeout
[  389.190298][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.190438][ T5632] Bluetooth: hci1: link tx timeout
[  389.190462][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.193050][ T5632] Bluetooth: hci1: link tx timeout
[  389.193071][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.196680][ T5632] Bluetooth: hci1: link tx timeout
[  389.196701][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.196859][ T5632] Bluetooth: hci1: link tx timeout
[  389.196878][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.197889][ T5632] Bluetooth: hci1: link tx timeout
[  389.197908][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.199781][ T5632] Bluetooth: hci1: link tx timeout
[  389.199802][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.200678][ T5632] Bluetooth: hci1: link tx timeout
[  389.200698][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.201800][ T5632] Bluetooth: hci1: link tx timeout
[  389.201820][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.201951][ T5632] Bluetooth: hci1: link tx timeout
[  389.201970][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.202100][ T5632] Bluetooth: hci1: link tx timeout
[  389.202118][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.203059][ T5632] Bluetooth: hci1: link tx timeout
[  389.203079][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.203219][ T5632] Bluetooth: hci1: link tx timeout
[  389.203238][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.204096][ T5632] Bluetooth: hci1: link tx timeout
[  389.204116][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.205241][ T5632] Bluetooth: hci1: link tx timeout
[  389.205260][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.211043][ T5632] Bluetooth: hci1: link tx timeout
[  389.211063][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.214803][ T5632] Bluetooth: hci1: link tx timeout
[  389.214823][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.218047][ T5632] Bluetooth: hci1: link tx timeout
[  389.218067][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.225984][ T5632] Bluetooth: hci1: link tx timeout
[  389.226004][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.254960][ T5632] Bluetooth: hci1: link tx timeout
[  389.254981][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.274196][ T5632] Bluetooth: hci1: link tx timeout
[  389.274217][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.275453][ T5632] Bluetooth: hci1: link tx timeout
[  389.275473][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.275779][ T5632] Bluetooth: hci1: link tx timeout
[  389.275799][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.276888][ T5632] Bluetooth: hci1: link tx timeout
[  389.276908][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.277774][ T5632] Bluetooth: hci1: link tx timeout
[  389.277795][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.280001][ T5632] Bluetooth: hci1: link tx timeout
[  389.280022][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.280185][ T5632] Bluetooth: hci1: link tx timeout
[  389.280204][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.281299][ T5632] Bluetooth: hci1: link tx timeout
[  389.281319][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.282177][ T5632] Bluetooth: hci1: link tx timeout
[  389.282197][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.282871][ T5632] Bluetooth: hci1: link tx timeout
[  389.282891][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.286591][ T5632] Bluetooth: hci1: link tx timeout
[  389.286612][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.291867][ T5632] Bluetooth: hci1: link tx timeout
[  389.291888][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.292555][ T5632] Bluetooth: hci1: link tx timeout
[  389.293934][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.296247][ T5632] Bluetooth: hci1: link tx timeout
[  389.296266][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  389.301116][ T5632] Bluetooth: hci1: link tx timeout
[  389.301137][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  391.151260][ T5632] Bluetooth: hci1: command 0x0406 tx timeout
[  393.702658][ T9581] netlink: 'syz.5.969': attribute type 1 has an invalid length.
[  393.710901][ T9579] syzkaller1: entered promiscuous mode
[  393.710929][ T9579] syzkaller1: entered allmulticast mode
[  393.731710][ T9581] bridge0: port 3(syz_tun) entered blocking state
[  393.733171][ T9581] bridge0: port 3(syz_tun) entered disabled state
[  393.733464][ T9581] syz_tun: entered allmulticast mode
[  393.768050][ T9581] syz_tun: entered promiscuous mode
[  393.772710][ T9581] bridge0: port 3(syz_tun) entered blocking state
[  393.772833][ T9581] bridge0: port 3(syz_tun) entered forwarding state
[  393.917717][ T9584] bridge0: port 4(ip6gretap0) entered blocking state
[  393.918021][ T9584] bridge0: port 4(ip6gretap0) entered disabled state
[  393.918180][ T9584] ip6gretap0: entered allmulticast mode
[  394.008660][ T9584] ip6gretap0: entered promiscuous mode
[  394.009311][ T9584] bridge0: port 4(ip6gretap0) entered blocking state
[  394.009426][ T9584] bridge0: port 4(ip6gretap0) entered forwarding state
[  394.210726][ T9586] binder: 9585:9586 ioctl c0709411 200000000200 returned -22
[  394.265947][   T30] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  394.470421][   T30] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  394.472402][   T30] usb 7-1: config 0 has no interfaces?
[  394.497557][   T30] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  394.497597][   T30] usb 7-1: Product: syz
[  394.497625][   T30] usb 7-1: Manufacturer: syz
[  394.497651][   T30] usb 7-1: SerialNumber: syz
[  394.513263][   T30] usb 7-1: config 0 descriptor??
[  394.720608][   T30] usb 7-1: USB disconnect, device number 4
[  395.387466][ T9603] loop8: detected capacity change from 0 to 32768
[  395.436939][ T9603] OCFS2: ERROR (device loop8): ocfs2_validate_inode_block: Invalid dinode 65: extent list l_count is zero
[  395.436977][ T9603] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  395.436995][ T9603] OCFS2: File system is now read-only.
[  395.437009][ T9603] (syz.8.978,9603,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  395.437121][ T9603] (syz.8.978,9603,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  395.437163][ T9603] (syz.8.978,9603,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  395.437204][ T9603] (syz.8.978,9603,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  395.437363][ T9603] (syz.8.978,9603,0):ocfs2_fill_super:1177 ERROR: status = -30
[  397.565618][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  397.625400][ T9626] netlink: 'syz.6.988': attribute type 1 has an invalid length.
[  397.627106][ T9626] bridge0: port 3(ip6gretap0) entered blocking state
[  397.627294][ T9626] bridge0: port 3(ip6gretap0) entered disabled state
[  397.627474][ T9626] ip6gretap0: entered allmulticast mode
[  397.631603][ T9626] ip6gretap0: entered promiscuous mode
[  397.632318][ T9626] bridge0: port 3(ip6gretap0) entered blocking state
[  397.632431][ T9626] bridge0: port 3(ip6gretap0) entered forwarding state
[  397.735755][    T9] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  397.739077][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.739143][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.800237][    T9] as10x_usb: device has been detected
[  397.801090][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  397.843936][    T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  397.885336][    T9] as10x_usb: error during firmware upload part1
[  397.885979][    T9] Registered device Abilis Systems DVB-Titan
[  399.094984][ T5342] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  399.273441][ T5342] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  399.301954][ T5342] usb 3-1: config 0 has no interfaces?
[  399.425495][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  399.426734][ T5342] usb 3-1: Product: syz
[  399.427690][ T5342] usb 3-1: Manufacturer: syz
[  399.428417][ T5342] usb 3-1: SerialNumber: syz
[  399.752940][ T5342] usb 3-1: config 0 descriptor??
[  400.104064][ T5342] usb 3-1: USB disconnect, device number 15
[  400.401896][ T5342] usb 6-1: USB disconnect, device number 9
[  400.462880][ T5342] Unregistered device Abilis Systems DVB-Titan
[  400.469287][ T5342] as10x_usb: device has been disconnected
[  401.570678][ T9676] comedi comedi0: adq12b: a I/O base address must be specified
[  403.592991][ T9684] No source specified
[  403.861917][ T9680] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19
[  404.905520][   T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  405.078087][   T25] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  405.080023][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  405.080090][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.133432][ T9725] libceph: resolve '1' (ret=-3): failed
[  405.151250][   T25] as10x_usb: device has been detected
[  405.161003][   T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  405.204061][   T25] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  405.235062][   T25] as10x_usb: error during firmware upload part1
[  405.241519][   T25] Registered device Abilis Systems DVB-Titan
[  405.415141][   T30] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  405.598808][   T30] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  405.616310][   T30] usb 6-1: config 0 has no interfaces?
[  405.648251][   T30] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  405.648310][   T30] usb 6-1: Product: syz
[  405.648356][   T30] usb 6-1: Manufacturer: syz
[  405.648429][   T30] usb 6-1: SerialNumber: syz
[  405.823139][   T30] usb 6-1: config 0 descriptor??
[  406.230702][   T30] usb 6-1: USB disconnect, device number 10
[  406.542574][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'.
[  407.070985][ T9750] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input20
[  407.701442][    C0] vcan0: j1939_tp_rxtimer: 0xffff888052266400: rx timeout, send abort
[  407.900271][   T30] usb 7-1: USB disconnect, device number 5
[  407.986845][   T30] Unregistered device Abilis Systems DVB-Titan
[  407.990521][   T30] as10x_usb: device has been disconnected
[  408.114263][ T9767] fuse: Unknown parameter '00000000000000000000'
[  408.203405][    C0] vcan0: j1939_tp_rxtimer: 0xffff888052266400: abort rx timeout. Force session deactivation
[  408.744981][ T9776] syzkaller1: entered promiscuous mode
[  408.745016][ T9776] syzkaller1: entered allmulticast mode
[  411.391703][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  412.595095][ T5799] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  412.620159][ T9817] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'.
[  412.676555][ T5342] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  412.789101][ T5799] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  412.805672][ T5799] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.805711][ T5799] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  412.812192][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.812232][ T5799] usb 9-1: Product: syz
[  412.812253][ T5799] usb 9-1: Manufacturer: syz
[  412.812277][ T5799] usb 9-1: SerialNumber: syz
[  412.843257][ T5342] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  412.867515][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.887373][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  412.887414][ T5342] usb 4-1: Product: syz
[  412.887440][ T5342] usb 4-1: Manufacturer: syz
[  412.887468][ T5342] usb 4-1: SerialNumber: syz
[  412.924725][ T5342] usb 4-1: config 0 descriptor??
[  412.933779][ T5799] usb 9-1: config 0 descriptor??
[  413.190109][ T9819] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21
[  413.191916][ T5342] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  413.293088][ T5342] usb 4-1: USB disconnect, device number 16
[  413.430271][ T9810] udevd[9810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  413.929013][ T9832] binder: 9831:9832 ioctl c0709411 200000000200 returned -22
[  414.262088][ T5342] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  414.361411][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  414.415728][ T5342] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  414.417135][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  414.417199][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.463241][ T5342] as10x_usb: device has been detected
[  414.467910][ T5342] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  414.523336][ T5342] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  414.564612][ T5342] as10x_usb: error during firmware upload part1
[  414.569349][ T5342] Registered device Abilis Systems DVB-Titan
[  414.672299][ T9862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1062'.
[  415.110668][   T30] usb 9-1: USB disconnect, device number 4
[  415.178616][ T9863] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input22
[  415.411976][ T9872] binder: 9871:9872 ioctl c0709411 200000000200 returned -22
[  418.129879][ T5342] usb 4-1: USB disconnect, device number 17
[  418.251433][ T5342] Unregistered device Abilis Systems DVB-Titan
[  418.267811][ T5342] as10x_usb: device has been disconnected
[  418.391435][ T9891] jffs2: notice: (9891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  418.895989][ T5342] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  419.084123][ T9912] comedi comedi0: adq12b: a I/O base address must be specified
[  419.210233][ T5342] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  419.345077][ T5342] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  419.345143][ T5342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.854077][ T5342] as10x_usb: device has been detected
[  419.855119][ T5342] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  419.871966][ T5342] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  419.887340][ T5342] as10x_usb: error during firmware upload part1
[  419.887966][ T5342] Registered device Abilis Systems DVB-Titan
[  420.022804][ T9921] binder: 9918:9921 ioctl c0709411 200000000200 returned -22
[  420.217170][ T9929] team0: Device wg0 is of different type
[  420.294169][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'.
[  420.693407][ T9933] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23
[  424.488623][ T5342] usb 9-1: USB disconnect, device number 5
[  424.566477][ T5342] Unregistered device Abilis Systems DVB-Titan
[  424.574193][ T5342] as10x_usb: device has been disconnected
[  424.747492][ T9980] comedi comedi0: adq12b: a I/O base address must be specified
[  424.749148][ T9979] binder: 9975:9979 ioctl c0709411 200000000200 returned -22
[  424.918341][   T25] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  425.087140][   T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  425.093297][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.152757][   T25] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  425.153172][   T25] usb 4-1: Product: syz
[  425.153223][   T25] usb 4-1: Manufacturer: syz
[  425.153349][   T25] usb 4-1: SerialNumber: syz
[  425.251102][   T25] usb 4-1: config 0 descriptor??
[  427.352990][   T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  427.377140][   T25] usb 4-1: USB disconnect, device number 18
[  427.467896][ T9810] udevd[9810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.474785][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  427.510884][ T9993] team0: Device wg0 is of different type
[  430.385080][ T5622] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  430.771456][ T5622] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  431.042055][ T5622] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.105059][ T5622] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  431.150558][ T5622] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  432.750042][ T5622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  432.750100][ T5622] usb 9-1: Product: syz
[  432.750146][ T5622] usb 9-1: Manufacturer: syz
[  433.839494][ T5622] usb 9-1: can't set config #1, error -71
[  433.854134][ T5622] usb 9-1: USB disconnect, device number 6
[  433.966168][T10042] ima: policy update failed
[  433.966347][   T31] audit: type=1802 audit(1791712071.374:30): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1114" res=0 errno=0
[  434.015046][    T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  434.165919][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  434.168024][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.168087][    T9] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  434.168138][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  434.172434][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  434.172474][    T9] usb 6-1: Product: syz
[  434.172502][    T9] usb 6-1: Manufacturer: syz
[  434.172530][    T9] usb 6-1: SerialNumber: syz
[  434.242102][    T9] usb 6-1: config 0 descriptor??
[  434.306930][    T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  434.469214][    T9] usb 6-1: USB disconnect, device number 11
[  434.628671][ T9810] udevd[9810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  434.776738][T10061] jffs2: notice: (10061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  436.874148][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'.
[  437.289573][T10074] team0: Device wg0 is of different type
[  438.597878][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  438.747289][    T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  438.751429][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.751645][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  438.751703][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.759920][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  438.759981][    T9] usb 7-1: Product: syz
[  438.760007][    T9] usb 7-1: Manufacturer: syz
[  438.777351][T10100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  438.830619][    T9] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  438.956598][    T9] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  439.376073][    T9] usb 7-1: USB disconnect, device number 6
[  439.406375][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  439.406466][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  439.884036][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  439.961427][    T9] garmin_gps 7-1:1.0: device disconnected
[  441.446642][T10101] ima: policy update failed
[  441.448140][   T31] audit: type=1802 audit(1791712078.854:31): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1132" res=0 errno=0
[  441.936019][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1143'.
[  442.249261][T10142] jffs2: notice: (10142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  443.635094][T10157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1146'.
[  444.375120][   T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  445.181217][   T25] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  445.665909][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  445.666049][   T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  445.666096][   T25] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  447.238176][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  447.259446][   T25] usb 6-1: can't set config #1, error -71
[  447.275096][   T25] usb 6-1: USB disconnect, device number 12
[  447.469784][T10163] ima: policy update failed
[  447.485778][   T31] audit: type=1802 audit(1791712084.874:32): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1150" res=0 errno=0
[  447.663178][T10197] syzkaller1: entered promiscuous mode
[  447.663204][T10197] syzkaller1: entered allmulticast mode
[  449.395078][T10238] netlink: 'syz.1.1162': attribute type 2 has an invalid length.
[  449.775162][T10247] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1164'.
[  450.185972][ T5799] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  450.368981][ T5799] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  450.420996][ T5799] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.421202][ T5799] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  450.421302][ T5799] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  450.506242][ T5342] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  450.584009][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  450.584062][ T5799] usb 7-1: Product: syz
[  450.584177][ T5799] usb 7-1: Manufacturer: syz
[  450.898416][T10254] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  450.943146][ T5342] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  451.033841][ T5799] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  451.079735][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  451.079804][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.417901][ T5799] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  451.784236][ T5799] usb 7-1: USB disconnect, device number 7
[  451.899574][ T5342] as10x_usb: device has been detected
[  451.900413][ T5342] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  451.928165][ T5799] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  451.928934][ T5799] garmin_gps 7-1:1.0: device disconnected
[  451.987257][ T5342] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  452.031297][ T5342] as10x_usb: error during firmware upload part1
[  452.031939][ T5342] Registered device Abilis Systems DVB-Titan
[  452.492544][T10273] syzkaller1: entered promiscuous mode
[  452.492578][T10273] syzkaller1: entered allmulticast mode
[  452.524999][   T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  452.592379][T10282] comedi comedi0: adq12b: a I/O base address must be specified
[  452.676131][   T25] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  452.679225][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.679291][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.760183][   T25] as10x_usb: device has been detected
[  452.761084][   T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  452.807459][   T25] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  452.847648][   T25] as10x_usb: error during firmware upload part1
[  452.849512][   T25] Registered device Abilis Systems DVB-Titan
[  453.612282][T10317] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1180'.
[  454.828539][ T5342] usb 4-1: USB disconnect, device number 19
[  454.904047][ T5342] Unregistered device Abilis Systems DVB-Titan
[  454.929938][ T5342] as10x_usb: device has been disconnected
[  455.181740][T10334] netlink: 'syz.5.1182': attribute type 2 has an invalid length.
[  455.235698][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  455.398410][    T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  455.441544][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.441814][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  455.441908][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.578626][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  455.578680][    T9] usb 7-1: Product: syz
[  455.578726][    T9] usb 7-1: Manufacturer: syz
[  457.312213][T10329] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  457.343413][    T9] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  457.350163][    T9] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  457.552668][    T9] usb 7-1: USB disconnect, device number 8
[  457.591337][ T5342] usb 2-1: USB disconnect, device number 14
[  457.597972][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  457.611513][    T9] garmin_gps 7-1:1.0: device disconnected
[  457.725881][ T5342] Unregistered device Abilis Systems DVB-Titan
[  457.731398][ T5342] as10x_usb: device has been disconnected
[  457.968844][T10352] jffs2: notice: (10352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  458.591606][T10355] syzkaller1: entered promiscuous mode
[  458.591639][T10355] syzkaller1: entered allmulticast mode
[  458.824675][T10359] comedi comedi0: adq12b: a I/O base address must be specified
[  459.244471][T10366] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24
[  459.457300][ T5342] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  460.213242][ T5342] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  460.223559][ T5342] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.223624][ T5342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.382038][ T5342] as10x_usb: device has been detected
[  460.423236][ T5342] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  460.559306][ T5342] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  460.690454][ T5342] as10x_usb: error during firmware upload part1
[  460.691096][ T5342] Registered device Abilis Systems DVB-Titan
[  461.003271][T10414] netlink: 'syz.5.1201': attribute type 2 has an invalid length.
[  461.484989][   T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  461.571711][T10431] jffs2: notice: (10431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  461.834207][   T25] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  461.914447][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.925487][   T25] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  461.927048][   T25] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  462.147867][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  462.147910][   T25] usb 7-1: Product: syz
[  462.147937][   T25] usb 7-1: Manufacturer: syz
[  462.179272][T10419] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  462.184261][   T25] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  462.208478][   T25] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  462.404380][ T5342] usb 9-1: USB disconnect, device number 7
[  462.418066][   T25] usb 7-1: USB disconnect, device number 9
[  462.450665][   T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  462.453432][   T25] garmin_gps 7-1:1.0: device disconnected
[  462.552838][T10437] comedi comedi0: adq12b: a I/O base address must be specified
[  462.573691][ T5342] Unregistered device Abilis Systems DVB-Titan
[  462.608157][ T5342] as10x_usb: device has been disconnected
[  464.302628][T10461] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input25
[  465.177048][T10482] netlink: 'syz.2.1220': attribute type 2 has an invalid length.
[  465.356760][T10489] comedi comedi0: adq12b: a I/O base address must be specified
[  465.964989][   T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  466.127163][   T30] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  466.129375][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  466.129440][   T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  466.129490][   T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  466.133676][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  466.133715][   T30] usb 6-1: Product: syz
[  466.133742][   T30] usb 6-1: Manufacturer: syz
[  466.152964][T10498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  466.164863][   T30] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  466.183645][   T30] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  466.378929][ T5622] usb 6-1: USB disconnect, device number 13
[  466.426313][ T5622] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  466.429440][ T5622] garmin_gps 6-1:1.0: device disconnected
[  467.286987][T10531] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26
[  468.840061][T10543] comedi comedi0: adq12b: a I/O base address must be specified
[  469.223771][T10555] netlink: 'syz.2.1245': attribute type 2 has an invalid length.
[  469.324993][ T5799] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  469.488935][ T5799] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  469.490836][ T5799] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  469.490879][ T5799] usb 9-1: config 0 interface 0 has no altsetting 0
[  469.525692][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  469.525734][ T5799] usb 9-1: Product: syz
[  469.525762][ T5799] usb 9-1: Manufacturer: syz
[  469.525789][ T5799] usb 9-1: SerialNumber: syz
[  469.534770][ T5799] usb 9-1: config 0 descriptor??
[  469.635395][ T5799] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  469.730376][T10261] udevd[10261]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  469.794850][ T5799] usb 9-1: USB disconnect, device number 8
[  471.295052][ T5799] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  471.484932][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  471.626357][ T5799] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  471.627785][ T5799] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.627850][ T5799] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  471.627896][ T5799] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  471.630208][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  471.630248][ T5799] usb 9-1: Product: syz
[  471.630276][ T5799] usb 9-1: Manufacturer: syz
[  471.695782][T10581] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  471.727829][ T5799] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[  471.750662][ T5799] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  471.940383][ T5799] usb 9-1: USB disconnect, device number 9
[  471.971023][ T5799] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  471.971619][ T5799] garmin_gps 9-1:1.0: device disconnected
[  472.044242][T10600] comedi comedi0: adq12b: a I/O base address must be specified
[  472.543838][T10605] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input27
[  475.446021][T10621] netlink: 'syz.3.1263': attribute type 2 has an invalid length.
[  476.296054][   T25] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  476.745788][   T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  476.749275][   T25] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  476.749317][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  476.785083][   T25] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  476.785122][   T25] usb 2-1: Product: syz
[  476.785149][   T25] usb 2-1: Manufacturer: syz
[  476.785176][   T25] usb 2-1: SerialNumber: syz
[  476.845598][   T25] usb 2-1: config 0 descriptor??
[  477.418150][   T25] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  477.429903][   T25] usb 2-1: USB disconnect, device number 15
[  477.520824][T10261] udevd[10261]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.015913][ T5622] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  478.167033][ T5622] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  478.170782][ T5622] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  478.170954][ T5622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.401953][ T5622] as10x_usb: device has been detected
[  478.426530][ T5622] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  478.919584][ T5622] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  479.316977][T10671] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input28
[  479.506059][ T5622] as10x_usb: error during firmware upload part1
[  479.547670][ T5622] Registered device Abilis Systems DVB-Titan
[  481.400681][T10685] netlink: 'syz.2.1283': attribute type 2 has an invalid length.
[  481.643902][ T5622] usb 7-1: USB disconnect, device number 10
[  481.694072][ T5622] Unregistered device Abilis Systems DVB-Titan
[  481.697752][ T5622] as10x_usb: device has been disconnected
[  483.583534][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'.
[  483.583672][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'.
[  483.588891][T10716] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  484.030961][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'.
[  484.115056][   T25] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  484.265871][   T25] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  484.267303][   T25] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  484.267346][   T25] usb 9-1: config 0 interface 0 has no altsetting 0
[  484.270046][   T25] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  484.270090][   T25] usb 9-1: Product: syz
[  484.270117][   T25] usb 9-1: Manufacturer: syz
[  484.270144][   T25] usb 9-1: SerialNumber: syz
[  484.281209][   T25] usb 9-1: config 0 descriptor??
[  487.394470][   T25] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  487.400984][   T25] usb 9-1: USB disconnect, device number 10
[  487.440290][T10261] udevd[10261]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.790692][T10754] netlink: 'syz.2.1305': attribute type 2 has an invalid length.
[  488.165239][   T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  488.456960][   T25] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  488.459395][   T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.459461][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.535207][   T25] as10x_usb: device has been detected
[  488.537790][   T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  488.587651][ T5799] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  488.591865][   T25] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  488.644851][   T25] as10x_usb: error during firmware upload part1
[  488.646180][   T25] Registered device Abilis Systems DVB-Titan
[  488.747659][ T5799] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  488.748952][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.749027][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.802120][ T5799] as10x_usb: device has been detected
[  488.802958][ T5799] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  488.893747][ T5799] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  489.062733][ T5799] as10x_usb: error during firmware upload part1
[  489.080320][ T5799] Registered device Abilis Systems DVB-Titan
[  490.393280][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  490.591647][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1306'.
[  490.795470][ T5622] usb 9-1: USB disconnect, device number 11
[  490.887000][ T5622] Unregistered device Abilis Systems DVB-Titan
[  490.899324][ T5622] as10x_usb: device has been disconnected
[  491.465879][   T25] usb 4-1: USB disconnect, device number 20
[  491.954269][   T25] Unregistered device Abilis Systems DVB-Titan
[  492.120971][   T25] as10x_usb: device has been disconnected
[  492.175040][    T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  492.478522][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  492.497881][    T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  492.497927][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  492.563560][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  492.563617][    T9] usb 6-1: Product: syz
[  492.563643][    T9] usb 6-1: Manufacturer: syz
[  492.563671][    T9] usb 6-1: SerialNumber: syz
[  492.574925][    T9] usb 6-1: config 0 descriptor??
[  492.610074][    T9] usb 6-1: selecting invalid altsetting 0
[  494.308383][    T9] usb 6-1: USB disconnect, device number 14
[  496.492556][T10190] udevd[10190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  496.595134][T10845] netlink: 'syz.6.1320': attribute type 2 has an invalid length.
[  496.753761][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1323'.
[  498.695274][    T9] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  498.993674][    T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  499.004143][    T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  499.004189][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  499.023401][    T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  499.023443][    T9] usb 9-1: Product: syz
[  499.023471][    T9] usb 9-1: Manufacturer: syz
[  499.023505][    T9] usb 9-1: SerialNumber: syz
[  499.055695][    T9] usb 9-1: config 0 descriptor??
[  499.062084][    T9] usb 9-1: selecting invalid altsetting 0
[  499.529177][    T9] usb 9-1: USB disconnect, device number 12
[  500.381976][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1339'.
[  500.829371][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  500.829448][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  501.168768][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  501.168826][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'.
[  503.292691][T10948] fuse: Unknown parameter '00000000000000000000'
[  504.546376][    T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  504.906860][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  504.908279][    T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  504.908324][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  504.912457][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  504.912504][    T9] usb 6-1: Product: syz
[  504.912531][    T9] usb 6-1: Manufacturer: syz
[  504.912559][    T9] usb 6-1: SerialNumber: syz
[  504.918641][    T9] usb 6-1: config 0 descriptor??
[  504.926580][    T9] usb 6-1: selecting invalid altsetting 0
[  505.201302][   T30] usb 6-1: USB disconnect, device number 15
[  505.547216][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'.
[  505.547275][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'.
[  505.600677][T10984] comedi comedi2: comedi_test: 320 microvolt, 1616 microsecond waveform attached
[  505.759521][T10975] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input29
[  508.193937][T11022] fuse: Unknown parameter '00000000000000000000'
[  508.295872][T11025] binder: 11024:11025 ioctl c0709411 200000000200 returned -22
[  508.408410][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  508.815233][    T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  508.897149][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.897203][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  508.961938][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.961979][    T9] usb 7-1: Product: syz
[  508.962006][    T9] usb 7-1: Manufacturer: syz
[  508.962034][    T9] usb 7-1: SerialNumber: syz
[  509.194135][    T9] usb 7-1: config 0 descriptor??
[  509.339741][T11038] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  509.819045][T11042] lo speed is unknown, defaulting to 1000
[  509.838730][T11042] dummy0 speed is unknown, defaulting to 1000
[  511.318028][T11053] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input30
[  511.521973][    T9] usb 7-1: USB disconnect, device number 11
[  511.665243][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b77400: rx timeout, send abort
[  512.165304][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030b77400: abort rx timeout. Force session deactivation
[  512.512552][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'.
[  512.755730][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  513.030526][T11089] fuse: Unknown parameter '00000000000000000000'
[  515.024993][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  515.160061][T11110] lo speed is unknown, defaulting to 1000
[  515.166590][T11110] dummy0 speed is unknown, defaulting to 1000
[  515.177655][    T9] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  515.178982][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  515.179052][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.241094][    T9] as10x_usb: device has been detected
[  515.241927][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  515.265134][    T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  515.272493][    T9] as10x_usb: error during firmware upload part1
[  515.273160][    T9] Registered device Abilis Systems DVB-Titan
[  516.057288][T11123] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input31
[  518.010356][    T9] usb 2-1: USB disconnect, device number 16
[  518.059004][T11149] fuse: Unknown parameter '00000000000000000000'
[  518.112882][    T9] Unregistered device Abilis Systems DVB-Titan
[  518.123819][    T9] as10x_usb: device has been disconnected
[  518.321567][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880367c9c00: rx timeout, send abort
[  518.821634][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880367c9c00: abort rx timeout. Force session deactivation
[  521.905641][T11185] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input32
[  524.407119][ T5799] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  524.716524][ T5799] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  524.833738][ T5799] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.833806][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.907851][ T5799] as10x_usb: device has been detected
[  524.910353][ T5799] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  524.940190][ T5799] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  524.955779][ T5799] as10x_usb: error during firmware upload part1
[  524.962279][ T5799] Registered device Abilis Systems DVB-Titan
[  525.292453][T11236] fuse: Unknown parameter '00000000000000000000'
[  526.317910][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053a19000: rx timeout, send abort
[  526.817983][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053a19000: abort rx timeout. Force session deactivation
[  527.943519][ T5622] usb 7-1: USB disconnect, device number 12
[  528.028070][ T5622] Unregistered device Abilis Systems DVB-Titan
[  528.035796][ T5622] as10x_usb: device has been disconnected
[  529.373450][T11276] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input33
[  532.775215][ T1604] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  533.045821][ T1604] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  533.047169][ T1604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.047235][ T1604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.106332][ T1604] as10x_usb: device has been detected
[  533.107177][ T1604] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  533.151075][ T1604] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  533.182155][ T1604] as10x_usb: error during firmware upload part1
[  533.182783][ T1604] Registered device Abilis Systems DVB-Titan
[  533.635999][ T5632] Bluetooth: hci1: command 0x0406 tx timeout
[  534.164955][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  534.328380][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  534.330803][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  534.332979][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.333026][    T9] usb 4-1: Product: syz
[  534.333080][    T9] usb 4-1: Manufacturer: syz
[  534.333109][    T9] usb 4-1: SerialNumber: syz
[  534.381451][    T9] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  534.381718][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87
[  534.381805][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7
[  534.394304][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  534.394407][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82
[  534.394502][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  534.402295][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  534.402397][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85
[  534.402501][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5
[  534.412949][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  534.421208][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83
[  534.428052][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  534.430357][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3
[  534.430453][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4
[  534.430546][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86
[  534.430638][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  534.446944][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  534.592160][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033ad3800: rx timeout, send abort
[  535.092217][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033ad3800: abort rx timeout. Force session deactivation
[  535.959725][    T9] usb 4-1: USB disconnect, device number 21
[  536.396284][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  536.515957][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  536.539331][    T9] keyspan 4-1:1.0: device disconnected
[  536.579558][ T1604] usb 2-1: USB disconnect, device number 17
[  536.779785][ T1604] Unregistered device Abilis Systems DVB-Titan
[  536.802266][ T1604] as10x_usb: device has been disconnected
[  537.244240][T11390] team0: Device wg0 is of different type
[  537.966496][ T5799] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  538.335778][ T5799] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  538.337126][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  538.337189][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.405604][ T5799] as10x_usb: device has been detected
[  538.406431][ T5799] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  538.462755][ T5799] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  538.509601][ T5799] as10x_usb: error during firmware upload part1
[  538.510072][ T5799] Registered device Abilis Systems DVB-Titan
[  541.575565][T11462] team0: Device wg0 is of different type
[  541.611828][T11464] fuse: Unknown parameter '00000000000000000000'
[  542.398005][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e3c00: rx timeout, send abort
[  542.898081][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e3c00: abort rx timeout. Force session deactivation
[  544.394884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  545.106123][T11493] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  545.603164][T11503] jffs2: notice: (11503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  546.051579][T11503] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  547.486660][ T1604] usb 4-1: USB disconnect, device number 22
[  547.670948][ T1604] Unregistered device Abilis Systems DVB-Titan
[  547.694382][ T1604] as10x_usb: device has been disconnected
[  548.141888][T11542] fuse: Unknown parameter '00000000000000000000'
[  550.965365][ T1604] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  551.115729][ T1604] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  551.117241][ T1604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.117280][ T1604] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  551.120001][ T1604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.120045][ T1604] usb 3-1: Product: syz
[  551.120072][ T1604] usb 3-1: Manufacturer: syz
[  551.120099][ T1604] usb 3-1: SerialNumber: syz
[  551.123685][ T1604] usb 3-1: config 0 descriptor??
[  551.201485][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880537e5800: rx timeout, send abort
[  551.701560][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880537e5800: abort rx timeout. Force session deactivation
[  554.474409][ T5765] usb 3-1: USB disconnect, device number 16
[  554.885359][T11626] loop5: detected capacity change from 0 to 32768
[  554.904331][T11626] OCFS2: ERROR (device loop5): ocfs2_validate_inode_block: Invalid dinode 65: extent list l_count is zero
[  554.904369][T11626] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  554.904388][T11626] OCFS2: File system is now read-only.
[  554.904402][T11626] (syz.5.1518,11626,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  554.904512][T11626] (syz.5.1518,11626,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  554.904555][T11626] (syz.5.1518,11626,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  554.904597][T11626] (syz.5.1518,11626,1):ocfs2_initialize_super:2194 ERROR: status = -30
[  554.904742][T11626] (syz.5.1518,11626,1):ocfs2_fill_super:1177 ERROR: status = -30
[  555.134342][T11658] netlink: 'syz.3.1531': attribute type 2 has an invalid length.
[  557.549312][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802e0f3000: rx timeout, send abort
[  558.049386][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802e0f3000: abort rx timeout. Force session deactivation
[  558.085181][ T5799] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  558.113544][T11702] netlink: 'syz.6.1546': attribute type 2 has an invalid length.
[  558.326927][ T5799] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  558.331937][ T5799] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.331976][ T5799] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  558.366912][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.366951][ T5799] usb 9-1: Product: syz
[  558.366979][ T5799] usb 9-1: Manufacturer: syz
[  558.367006][ T5799] usb 9-1: SerialNumber: syz
[  558.371463][ T5799] usb 9-1: config 0 descriptor??
[  558.787126][T11718] binder: 11717:11718 ioctl c0709411 200000000200 returned -22
[  559.204517][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'.
[  559.219810][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'.
[  560.783033][T11758] binder: 11757:11758 ioctl c0709411 200000000200 returned -22
[  560.919998][    T9] usb 9-1: USB disconnect, device number 13
[  562.268391][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  562.268469][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  562.636638][T11786] netlink: 'syz.2.1569': attribute type 2 has an invalid length.
[  562.863418][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'.
[  562.901400][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053b39400: rx timeout, send abort
[  563.401476][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053b39400: abort rx timeout. Force session deactivation
[  564.503316][T11821] virtio-fs: tag </dev/nullb0> not found
[  569.414699][T11841] ima: policy update failed
[  569.657479][   T31] audit: type=1802 audit(1791712206.824:33): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1580" res=0 errno=0
[  570.431265][T11862] binder: 11861:11862 ioctl c0709411 200000000200 returned -22
[  572.352189][T11888] netlink: 'syz.1.1592': attribute type 2 has an invalid length.
[  572.865144][ T5622] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  573.018846][ T5622] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  573.020216][ T5622] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  573.020281][ T5622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.146994][ T5622] as10x_usb: device has been detected
[  573.147868][ T5622] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  573.692812][ T5622] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  574.359108][ T5622] as10x_usb: error during firmware upload part1
[  574.374953][ T5622] Registered device Abilis Systems DVB-Titan
[  576.376683][T11919] ima: policy update failed
[  576.376862][   T31] audit: type=1802 audit(1791712213.784:34): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1600" res=0 errno=0
[  576.674033][ T5622] usb 9-1: USB disconnect, device number 14
[  576.759393][T11936] binder: 11935:11936 ioctl c0709411 200000000200 returned -22
[  576.774050][ T5622] Unregistered device Abilis Systems DVB-Titan
[  576.789008][ T5622] as10x_usb: device has been disconnected
[  581.379157][T11976] fuse: Unknown parameter '00000000000000000000'
[  582.803282][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1618'.
[  582.803341][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1618'.
[  582.919728][T12006] netlink: 'syz.1.1617': attribute type 2 has an invalid length.
[  583.498858][T12020] netlink: 'syz.3.1619': attribute type 1 has an invalid length.
[  583.611622][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'.
[  583.953884][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'.
[  585.765095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  586.693390][T12038] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1625'.
[  586.934937][   T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  587.103324][   T30] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  587.124960][   T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  587.125004][   T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  587.207861][   T30] usb 7-1: string descriptor 0 read error: -22
[  587.208024][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.249532][   T30] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null))
[  587.250203][   T30] etas_es58x 7-1:1.0: could not retrieve the product info string
[  591.083917][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'.
[  591.083962][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1633'.
[  591.152995][ T5622] usb 7-1: USB disconnect, device number 13
[  591.166010][ T5765] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  591.201039][ T5622] etas_es58x 7-1:1.0: Disconnecting (null) (null)
[  591.328626][ T5765] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  591.330564][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.330602][ T5765] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  591.343975][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.344013][ T5765] usb 2-1: Product: syz
[  591.344039][ T5765] usb 2-1: Manufacturer: syz
[  591.344066][ T5765] usb 2-1: SerialNumber: syz
[  591.362263][ T5765] usb 2-1: config 0 descriptor??
[  591.636060][T12077] fuse: Unknown parameter '00000000000000000000'
[  591.895561][ T5622] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  592.096237][ T5622] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  592.097797][ T5622] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.097849][ T5622] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.099856][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  592.099896][ T5622] usb 7-1: Product: syz
[  592.099923][ T5622] usb 7-1: Manufacturer: syz
[  592.117224][ T5622] navman 7-1:1.0: navman converter detected
[  592.121610][ T5622] usb 7-1: navman converter now attached to ttyUSB0
[  592.596698][T12082] jffs2: notice: (12082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  593.482967][T12071] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90
[  593.502725][ T1604] usb 7-1: USB disconnect, device number 14
[  593.516513][ T1604] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  593.517161][ T1604] navman 7-1:1.0: device disconnected
[  594.794102][ T1604] usb 2-1: USB disconnect, device number 18
[  594.811600][T12113] FAULT_INJECTION: forcing a failure.
[  594.811600][T12113] name failslab, interval 1, probability 0, space 0, times 0
[  594.811651][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.1.1644 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  594.811707][T12113] Tainted: [L]=SOFTLOCKUP
[  594.811721][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  594.811745][T12113] Call Trace:
[  594.811757][T12113]  <TASK>
[  594.811772][T12113]  dump_stack_lvl+0x100/0x190
[  594.811832][T12113]  should_fail_ex.cold+0x5/0xa
[  594.811877][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.811931][T12113]  should_failslab+0xc2/0x120
[  594.811980][T12113]  __kmalloc_cache_noprof+0x91/0x6d0
[  594.812047][T12113]  ? snd_seq_oss_timer_new+0x43/0x230
[  594.812112][T12113]  snd_seq_oss_timer_new+0x43/0x230
[  594.812165][T12113]  snd_seq_oss_open+0x4fc/0xa10
[  594.812227][T12113]  odev_open+0x6f/0x90
[  594.812277][T12113]  ? __pfx_odev_open+0x10/0x10
[  594.812323][T12113]  soundcore_open+0x2e3/0x5a0
[  594.812377][T12113]  ? __pfx_soundcore_open+0x10/0x10
[  594.812426][T12113]  chrdev_open+0x234/0x6a0
[  594.812470][T12113]  ? __pfx_apparmor_file_open+0x10/0x10
[  594.812524][T12113]  ? __pfx_chrdev_open+0x10/0x10
[  594.812572][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.812620][T12113]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  594.812692][T12113]  do_dentry_open+0x6ab/0x14d0
[  594.812730][T12113]  ? __pfx_chrdev_open+0x10/0x10
[  594.812780][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.812834][T12113]  vfs_open+0x82/0x3f0
[  594.812883][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.812937][T12113]  path_openat+0x19fa/0x2440
[  594.812993][T12113]  ? __pfx_path_openat+0x10/0x10
[  594.813063][T12113]  do_file_open+0x20e/0x430
[  594.813114][T12113]  ? __pfx_do_file_open+0x10/0x10
[  594.813197][T12113]  ? _raw_spin_unlock+0x28/0x50
[  594.813254][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.813301][T12113]  ? alloc_fd+0x471/0x7a0
[  594.813364][T12113]  do_sys_openat2+0x10f/0x1e0
[  594.813417][T12113]  ? __pfx_do_sys_openat2+0x10/0x10
[  594.813488][T12113]  __x64_sys_openat+0x12d/0x210
[  594.813542][T12113]  ? __pfx___x64_sys_openat+0x10/0x10
[  594.813606][T12113]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.813662][T12113]  do_syscall_64+0x123/0x790
[  594.813705][T12113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.813746][T12113] RIP: 0033:0x7f0fb3f9e1d9
[  594.813777][T12113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.813816][T12113] RSP: 002b:00007f0fb4dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  594.813854][T12113] RAX: ffffffffffffffda RBX: 00007f0fb4225fa0 RCX: 00007f0fb3f9e1d9
[  594.813881][T12113] RDX: 0000000000080383 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  594.813908][T12113] RBP: 00007f0fb4035888 R08: 0000000000000000 R09: 0000000000000000
[  594.813933][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.813958][T12113] R13: 00007f0fb4226038 R14: 00007f0fb4225fa0 R15: 00007ffccd46b468
[  594.814011][T12113]  </TASK>
[  594.814112][T12113] ALSA: seq_oss: can't alloc timer
[  595.288359][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'.
[  595.288419][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1648'.
[  595.295654][   T30] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  595.302133][T12122] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1645'.
[  595.739120][   T30] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  595.754865][   T30] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  595.754906][   T30] usb 6-1: config 1 has no interface number 0
[  596.159394][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.159441][   T30] usb 6-1: Product: syz
[  596.159470][   T30] usb 6-1: Manufacturer: syz
[  596.159497][   T30] usb 6-1: SerialNumber: syz
[  596.400327][   T30] usb 6-1: 3:0 : does not exist
[  596.400362][   T30] usb 6-1: 3:0 : does not exist
[  597.388143][   T30] usb 6-1: USB disconnect, device number 16
[  597.452544][T12139] syz.6.1653 uses obsolete (PF_INET,SOCK_PACKET)
[  597.792765][   T31] audit: type=1800 audit(1791712235.174:35): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1652" name="(" dev="sda1" ino=2058 res=0 errno=0
[  597.872108][T12050] udevd[12050]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  598.664788][T12147] lo speed is unknown, defaulting to 1000
[  598.731875][T12147] dummy0 speed is unknown, defaulting to 1000
[  599.392280][T12173] jffs2: notice: (12173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  600.085007][   T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  600.256037][   T30] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  600.261536][   T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.261575][   T30] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  600.296664][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.296705][   T30] usb 6-1: Product: syz
[  600.296732][   T30] usb 6-1: Manufacturer: syz
[  600.296759][   T30] usb 6-1: SerialNumber: syz
[  600.331361][   T30] usb 6-1: config 0 descriptor??
[  600.608977][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'.
[  600.609036][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1663'.
[  601.795187][ T5799] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  601.968162][ T5799] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  601.972667][ T5799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.972705][ T5799] usb 7-1: config 0 has no interfaces?
[  602.013661][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.013700][ T5799] usb 7-1: Product: syz
[  602.013727][ T5799] usb 7-1: Manufacturer: syz
[  602.013754][ T5799] usb 7-1: SerialNumber: syz
[  602.096741][ T5799] usb 7-1: config 0 descriptor??
[  602.374458][T12205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1666'.
[  603.436273][   T30] usb 7-1: USB disconnect, device number 15
[  603.463013][ T1604] usb 6-1: USB disconnect, device number 17
[  603.925283][ T5622] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  604.081571][ T5622] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  604.082930][ T5622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  604.082997][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.272613][T12231] jffs2: notice: (12231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  604.861175][ T5622] as10x_usb: device has been detected
[  604.862006][ T5622] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  604.899339][ T5622] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  604.927378][ T5622] as10x_usb: error during firmware upload part1
[  604.933508][ T5622] Registered device Abilis Systems DVB-Titan
[  605.886270][T12244] lo speed is unknown, defaulting to 1000
[  605.888610][T12244] dummy0 speed is unknown, defaulting to 1000
[  608.909772][    T9] usb 4-1: USB disconnect, device number 23
[  609.238730][    T9] Unregistered device Abilis Systems DVB-Titan
[  609.280501][    T9] as10x_usb: device has been disconnected
[  609.430699][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'.
[  609.430758][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1680'.
[  609.593087][T12282] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1682'.
[  615.795027][T12213] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  615.938647][   T31] audit: type=1326 audit(1791712253.344:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  615.942972][   T31] audit: type=1326 audit(1791712253.344:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  615.943278][   T31] audit: type=1326 audit(1791712253.344:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  615.943582][   T31] audit: type=1326 audit(1791712253.344:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  615.943902][   T31] audit: type=1326 audit(1791712253.344:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  615.945746][T12213] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  615.947134][T12213] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  615.947185][T12213] usb 2-1: config 0 interface 0 has no altsetting 0
[  615.949851][T12213] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  615.949889][T12213] usb 2-1: Product: syz
[  615.949915][T12213] usb 2-1: Manufacturer: syz
[  615.949941][T12213] usb 2-1: SerialNumber: syz
[  616.001405][   T31] audit: type=1326 audit(1791712253.344:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  616.037013][T12213] usb 2-1: config 0 descriptor??
[  616.089431][T12213] usb 2-1: selecting invalid altsetting 0
[  616.172283][   T31] audit: type=1326 audit(1791712253.514:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  616.172986][   T31] audit: type=1326 audit(1791712253.574:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  616.173670][   T31] audit: type=1326 audit(1791712253.574:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.5.1692" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452d9e1d9 code=0x50000
[  616.394946][ T5799] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  616.423973][T12213] usb 2-1: USB disconnect, device number 19
[  616.544709][T12355] udevd[12355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  616.546174][ T5799] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  616.549277][ T5799] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.549342][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.690030][ T5799] as10x_usb: device has been detected
[  616.690883][ T5799] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  616.847541][ T5799] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  616.896561][ T5799] as10x_usb: error during firmware upload part1
[  616.905476][ T5799] Registered device Abilis Systems DVB-Titan
[  617.163868][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1698'.
[  617.163927][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1698'.
[  617.854463][T12374] lo speed is unknown, defaulting to 1000
[  617.883509][T12374] dummy0 speed is unknown, defaulting to 1000
[  618.540973][T12377] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1700'.
[  619.367374][T12385] Missing 'naa.' prefix
[  619.761820][T12395] jffs2: notice: (12395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  620.273272][T12395] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  620.461642][ T5622] usb 7-1: USB disconnect, device number 16
[  621.348047][ T5622] Unregistered device Abilis Systems DVB-Titan
[  621.779747][ T5622] as10x_usb: device has been disconnected
[  623.706844][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  623.706923][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  623.992857][T12446] FAULT_INJECTION: forcing a failure.
[  623.992857][T12446] name failslab, interval 1, probability 0, space 0, times 0
[  623.992912][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.8.1714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.992969][T12446] Tainted: [L]=SOFTLOCKUP
[  623.992988][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  623.993013][T12446] Call Trace:
[  623.993025][T12446]  <TASK>
[  623.993041][T12446]  dump_stack_lvl+0x100/0x190
[  623.993109][T12446]  should_fail_ex.cold+0x5/0xa
[  623.993156][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.993212][T12446]  should_failslab+0xc2/0x120
[  623.993270][T12446]  __kmalloc_cache_noprof+0x91/0x6d0
[  623.993331][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.993381][T12446]  ? uinput_open+0x48/0x180
[  623.993430][T12446]  uinput_open+0x48/0x180
[  623.993468][T12446]  ? __pfx_uinput_open+0x10/0x10
[  623.993506][T12446]  misc_open+0x26d/0x450
[  623.993571][T12446]  ? __pfx_misc_open+0x10/0x10
[  623.993635][T12446]  chrdev_open+0x234/0x6a0
[  623.993681][T12446]  ? __pfx_apparmor_file_open+0x10/0x10
[  623.993738][T12446]  ? __pfx_chrdev_open+0x10/0x10
[  623.993787][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.993836][T12446]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  623.993910][T12446]  do_dentry_open+0x6ab/0x14d0
[  623.993949][T12446]  ? __pfx_chrdev_open+0x10/0x10
[  623.993998][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.994062][T12446]  vfs_open+0x82/0x3f0
[  623.994110][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.994167][T12446]  path_openat+0x19fa/0x2440
[  623.994223][T12446]  ? __pfx_path_openat+0x10/0x10
[  623.994287][T12446]  do_file_open+0x20e/0x430
[  623.994339][T12446]  ? __pfx_do_file_open+0x10/0x10
[  623.994387][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.994436][T12446]  ? irqentry_exit+0x24d/0xa10
[  623.994507][T12446]  ? _raw_spin_unlock+0x28/0x50
[  623.994566][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.994614][T12446]  ? alloc_fd+0x471/0x7a0
[  623.994677][T12446]  do_sys_openat2+0x10f/0x1e0
[  623.994732][T12446]  ? __pfx_do_sys_openat2+0x10/0x10
[  623.994787][T12446]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  623.994846][T12446]  __x64_sys_openat+0x12d/0x210
[  623.994902][T12446]  ? __pfx___x64_sys_openat+0x10/0x10
[  623.994966][T12446]  ? srso_alias_return_thunk+0x5/0xfbef5
[  623.995024][T12446]  do_syscall_64+0x123/0x790
[  623.995073][T12446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.995114][T12446] RIP: 0033:0x7f881499e1d9
[  623.995145][T12446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.995186][T12446] RSP: 002b:00007f881593d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  623.995225][T12446] RAX: ffffffffffffffda RBX: 00007f8814c25fa0 RCX: 00007f881499e1d9
[  623.995252][T12446] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: ffffffffffffff9c
[  623.995281][T12446] RBP: 00007f8814a35888 R08: 0000000000000000 R09: 0000000000000000
[  623.995307][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  623.995332][T12446] R13: 00007f8814c26038 R14: 00007f8814c25fa0 R15: 00007ffc66ae8ae8
[  623.995385][T12446]  </TASK>
[  624.250597][T12448] ubi0: attaching mtd0
[  624.274094][T12448] ubi0: scanning is finished
[  624.274155][T12448] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  625.121372][T12448] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  625.209153][T12460] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1718'.
[  628.261022][T12467] jffs2: notice: (12467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  629.284531][ T5799] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  629.556786][ T5799] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  629.617531][ T5799] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[  629.617585][ T5799] usb 9-1: config 1 has no interface number 0
[  629.750068][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.750130][ T5799] usb 9-1: Product: syz
[  629.750176][ T5799] usb 9-1: Manufacturer: syz
[  629.750403][ T5799] usb 9-1: SerialNumber: syz
[  630.566490][ T5799] usb 9-1: 3:0 : does not exist
[  630.566517][ T5799] usb 9-1: 3:0 : does not exist
[  632.087522][ T5799] usb 9-1: USB disconnect, device number 15
[  632.209332][T12480] udevd[12480]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.588419][ T5621] Bluetooth: hci6: command 0x0406 tx timeout
[  634.693643][   T31] audit: type=1800 audit(1791712272.094:45): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1742" name="file1" dev="sda1" ino=2059 res=0 errno=0
[  634.904942][   T30] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  635.308430][   T30] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  635.451455][   T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.451525][   T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.614556][   T30] as10x_usb: device has been detected
[  635.616528][   T30] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  635.623191][   T30] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  635.629975][   T30] as10x_usb: error during firmware upload part1
[  635.632290][   T30] Registered device Abilis Systems DVB-Titan
[  637.827313][T12590] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.1744'.
[  637.896151][   T30] usb 9-1: USB disconnect, device number 16
[  638.748335][ T5621] Bluetooth: hci6: command 0x0406 tx timeout
[  638.857440][   T30] Unregistered device Abilis Systems DVB-Titan
[  638.891792][   T30] as10x_usb: device has been disconnected
[  639.393582][T12606] sg_write: data in/out 876556/136 bytes for SCSI command 0x0-- guessing data in;
[  639.393582][T12606]    program syz.8.1748 not setting count and/or reply_len properly
[  643.918699][T12633] lo speed is unknown, defaulting to 1000
[  643.938508][T12633] dummy0 speed is unknown, defaulting to 1000
[  644.899875][    T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  645.045766][    T9] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  645.046772][T12641] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1756'.
[  645.048116][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  645.048183][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.120787][    T9] as10x_usb: device has been detected
[  645.121430][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  645.911787][    T9] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  645.931513][    T9] as10x_usb: error during firmware upload part1
[  645.932237][    T9] Registered device Abilis Systems DVB-Titan
[  646.247070][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1758'.
[  646.247130][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1758'.
[  647.379950][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  648.667401][    T9] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  648.673952][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  648.674001][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.748812][    T9] as10x_usb: device has been detected
[  648.749675][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  648.832098][    T9] usb 3-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  648.871065][    T9] as10x_usb: error during firmware upload part1
[  648.873311][    T9] Registered device Abilis Systems DVB-Titan
[  648.910206][ T5799] usb 9-1: USB disconnect, device number 17
[  649.074423][ T5799] Unregistered device Abilis Systems DVB-Titan
[  649.234451][ T5799] as10x_usb: device has been disconnected
[  651.264912][ T5622] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  651.415617][ T5622] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  651.417248][ T5622] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.417315][ T5622] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  651.420019][ T5622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.420096][ T5622] usb 9-1: Product: syz
[  651.420123][ T5622] usb 9-1: Manufacturer: syz
[  651.420150][ T5622] usb 9-1: SerialNumber: syz
[  651.423648][ T5622] usb 9-1: config 0 descriptor??
[  651.557508][ T5622] usb 3-1: USB disconnect, device number 17
[  651.674492][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  651.674550][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1776'.
[  651.680217][ T5622] Unregistered device Abilis Systems DVB-Titan
[  651.696228][ T5622] as10x_usb: device has been disconnected
[  652.259710][ T5799] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  652.591965][ T5799] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  652.634883][ T5799] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.634949][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.713672][ T5799] as10x_usb: device has been detected
[  652.721888][ T5799] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  652.745393][ T5799] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  652.752086][ T5799] as10x_usb: error during firmware upload part1
[  652.752764][ T5799] Registered device Abilis Systems DVB-Titan
[  654.429833][T12213] usb 9-1: USB disconnect, device number 18
[  655.180997][T12733] loop2: detected capacity change from 0 to 32768
[  655.202257][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1793'.
[  655.202313][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1793'.
[  655.228481][T12733] OCFS2: ERROR (device loop2): ocfs2_validate_inode_block: Invalid dinode 65: extent list l_count is zero
[  655.228518][T12733] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  655.228535][T12733] OCFS2: File system is now read-only.
[  655.228550][T12733] (syz.2.1784,12733,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  655.228688][T12733] (syz.2.1784,12733,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  655.228733][T12733] (syz.2.1784,12733,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  655.228774][T12733] (syz.2.1784,12733,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  655.228917][T12733] (syz.2.1784,12733,0):ocfs2_fill_super:1177 ERROR: status = -30
[  655.228955][T12213] usb 2-1: USB disconnect, device number 20
[  655.233102][T12757] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  655.284901][ T5765] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  655.362742][T12213] Unregistered device Abilis Systems DVB-Titan
[  655.364666][T12213] as10x_usb: device has been disconnected
[  655.440689][ T5765] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  655.451885][ T5765] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  655.451971][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.536920][ T5765] as10x_usb: device has been detected
[  655.546879][ T5765] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  655.607981][ T5765] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  655.641211][ T5765] as10x_usb: error during firmware upload part1
[  655.653816][ T5765] Registered device Abilis Systems DVB-Titan
[  657.961079][   T31] audit: type=1400 audit(1791712295.364:46): apparmor="STATUS" operation="profile_load" profile="unconfined" name=2F3A22 pid=12790 comm="syz.1.1803"
[  658.148305][ T5765] usb 6-1: USB disconnect, device number 18
[  658.254007][ T5765] Unregistered device Abilis Systems DVB-Titan
[  658.268250][ T5765] as10x_usb: device has been disconnected
[  658.306432][ T5622] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  658.461804][ T5622] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  658.464153][ T5622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.464192][ T5622] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  658.501513][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.501554][ T5622] usb 4-1: Product: syz
[  658.501581][ T5622] usb 4-1: Manufacturer: syz
[  658.501601][ T5622] usb 4-1: SerialNumber: syz
[  658.778445][T12805] fuse: Unknown parameter '00000000000000000000'
[  659.060946][ T5622] usb 4-1: config 0 descriptor??
[  660.366250][T12826] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  660.541581][T12826] bond1: (slave bridge1): making interface the new active one
[  660.542342][T12826] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  660.595559][T12213] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  660.766295][T12213] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  660.774737][T12213] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[  660.774928][T12213] usb 3-1: config 1 has no interface number 0
[  660.848514][T12213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.848566][T12213] usb 3-1: Product: syz
[  660.848696][T12213] usb 3-1: Manufacturer: syz
[  660.848745][T12213] usb 3-1: SerialNumber: syz
[  660.966450][T12213] usb 3-1: 3:0 : does not exist
[  660.966486][T12213] usb 3-1: 3:0 : does not exist
[  661.412313][T12213] usb 4-1: USB disconnect, device number 24
[  661.452498][ T5799] usb 3-1: USB disconnect, device number 18
[  661.745706][ T5622] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  661.928303][ T5622] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  662.091594][ T5622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  662.091663][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.503007][ T5622] as10x_usb: device has been detected
[  662.503889][ T5622] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  662.603413][ T5622] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  662.618606][ T5622] as10x_usb: error during firmware upload part1
[  662.625515][ T5622] Registered device Abilis Systems DVB-Titan
[  662.708479][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'.
[  663.109651][T12866] syzkaller1: entered promiscuous mode
[  663.109685][T12866] syzkaller1: entered allmulticast mode
[  663.144459][T12869] fuse: Unknown parameter '00000000000000000000'
[  663.176816][   T31] audit: type=1800 audit(1791712300.584:47): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1822" name="file1" dev="sda1" ino=2059 res=0 errno=0
[  664.568551][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'.
[  666.036294][T12904] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  667.829973][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1835'.
[  668.137769][T12213] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  668.449113][T12213] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  668.483534][T12213] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  668.483656][T12213] usb 6-1: config 1 has no interface number 0
[  668.635800][T12213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.635867][T12213] usb 6-1: Product: syz
[  668.635967][T12213] usb 6-1: Manufacturer: syz
[  668.636014][T12213] usb 6-1: SerialNumber: syz
[  668.766420][T12213] usb 6-1: 3:0 : does not exist
[  668.766447][T12213] usb 6-1: 3:0 : does not exist
[  668.990700][T12213] usb 6-1: USB disconnect, device number 19
[  669.089077][T12652] udevd[12652]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.114173][T12940] syzkaller1: entered promiscuous mode
[  669.114202][T12940] syzkaller1: entered allmulticast mode
[  669.732732][T12951] jffs2: notice: (12951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  670.548760][T12213] usb 2-1: USB disconnect, device number 21
[  670.735277][T12958] FAULT_FLAG_ALLOW_RETRY missing 801
[  670.735304][T12958] CPU: 0 UID: 0 PID: 12958 Comm: syz.2.1847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  670.735345][T12958] Tainted: [L]=SOFTLOCKUP
[  670.735356][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  670.735375][T12958] Call Trace:
[  670.735388][T12958]  <TASK>
[  670.735404][T12958]  dump_stack_lvl+0x100/0x190
[  670.735453][T12958]  handle_userfault.cold+0x38/0x65
[  670.735499][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.735535][T12958]  ? do_raw_spin_unlock+0x145/0x1e0
[  670.735579][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.735615][T12958]  ? _raw_spin_unlock+0x28/0x50
[  670.735657][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.735693][T12958]  ? __free_frozen_pages+0x751/0x10f0
[  670.735734][T12958]  ? __pfx_handle_userfault+0x10/0x10
[  670.735798][T12958]  ? rcu_read_unlock+0x2d/0xb0
[  670.735839][T12958]  ? rcu_read_unlock+0x2d/0xb0
[  670.735879][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.735924][T12958]  do_anonymous_page+0x186d/0x2050
[  670.735976][T12958]  ? __pfx_do_anonymous_page+0x10/0x10
[  670.736017][T12958]  ? rcu_read_unlock+0x2d/0xb0
[  670.736076][T12958]  ? rcu_read_unlock+0x2d/0xb0
[  670.736126][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736163][T12958]  ? __pte_offset_map+0x179/0x310
[  670.736198][T12958]  __handle_mm_fault+0x1ff3/0x2f60
[  670.736248][T12958]  ? __pfx___handle_mm_fault+0x10/0x10
[  670.736288][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736324][T12958]  ? pte_offset_map_lock+0x174/0x320
[  670.736359][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736398][T12958]  ? find_held_lock+0x2b/0x80
[  670.736440][T12958]  ? find_held_lock+0x2b/0x80
[  670.736481][T12958]  ? follow_page_pte+0x536/0x1050
[  670.736535][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736584][T12958]  handle_mm_fault+0x363/0xa20
[  670.736632][T12958]  __get_user_pages+0x8ae/0x2c30
[  670.736679][T12958]  ? __pfx___get_user_pages+0x10/0x10
[  670.736718][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736760][T12958]  populate_vma_page_range+0x267/0x3f0
[  670.736797][T12958]  ? __pfx_populate_vma_page_range+0x10/0x10
[  670.736832][T12958]  ? __pfx___vma_start_write+0x10/0x10
[  670.736873][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.736915][T12958]  mprotect_fixup+0x925/0xe00
[  670.736965][T12958]  ? __pfx_mprotect_fixup+0x10/0x10
[  670.737042][T12958]  do_mprotect_pkey+0xa51/0xdd0
[  670.737096][T12958]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  670.737161][T12958]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.737242][T12958]  __x64_sys_mprotect+0x78/0xc0
[  670.737282][T12958]  ? lockdep_hardirqs_on+0x7d/0x110
[  670.737331][T12958]  do_syscall_64+0x123/0x790
[  670.737363][T12958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.737405][T12958] RIP: 0033:0x7fe396f9e1d9
[  670.737428][T12958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.737457][T12958] RSP: 002b:00007fe397e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  670.737486][T12958] RAX: ffffffffffffffda RBX: 00007fe397226090 RCX: 00007fe396f9e1d9
[  670.737506][T12958] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000
[  670.737525][T12958] RBP: 00007fe397035888 R08: 0000000000000000 R09: 0000000000000000
[  670.737543][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.737563][T12958] R13: 00007fe397226128 R14: 00007fe397226090 R15: 00007ffcf8fcbd18
[  670.737615][T12958]  </TASK>
[  671.015513][T12213] Unregistered device Abilis Systems DVB-Titan
[  671.116033][T12213] as10x_usb: device has been disconnected
[  673.953471][T12986] netlink: 'syz.3.1853': attribute type 1 has an invalid length.
[  677.319423][T13022] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1864'.
[  677.554066][T12213] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  679.608190][T12213] usb 2-1: device descriptor read/all, error -71
[  680.863880][T13046] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  680.863906][T13046] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  680.909600][T13046] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  680.909630][T13046] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  681.468712][ T5799] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  681.565311][ T1604] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  681.674268][ T5799] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  681.725589][ T5799] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  681.725744][ T5799] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  681.746219][ T1604] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  681.815888][ T1604] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.816028][ T1604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.908100][ T5799] usb 9-1: string descriptor 0 read error: -22
[  681.908807][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.151202][T13072] fuse: Unknown parameter '00000000000000000000'
[  682.564252][ T5799] etas_es58x 9-1:1.0: Starting (null) (null) (Serial Number (null))
[  682.597970][ T5799] etas_es58x 9-1:1.0: could not retrieve the product info string
[  682.836024][ T1604] as10x_usb: device has been detected
[  682.926717][ T1604] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  682.984246][ T1604] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  683.098343][   T30] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  683.690954][ T1604] as10x_usb: error during firmware upload part1
[  683.692421][ T1604] Registered device Abilis Systems DVB-Titan
[  683.806413][   T30] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  683.911427][   T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  683.911693][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.775505][   T30] as10x_usb: device has been detected
[  684.776363][   T30] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  684.868724][   T30] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  684.905645][   T30] as10x_usb: error during firmware upload part1
[  684.906274][   T30] Registered device Abilis Systems DVB-Titan
[  684.927298][   T30] usb 2-1: USB disconnect, device number 24
[  685.019183][   T30] Unregistered device Abilis Systems DVB-Titan
[  685.037898][   T30] as10x_usb: device has been disconnected
[  685.147136][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  685.147212][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  685.152455][T13094] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1881'.
[  685.970531][ T5622] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  688.836694][ T5622] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  689.140393][ T5622] usb 3-1: unable to read config index 0 descriptor/start: -71
[  689.140450][ T5622] usb 3-1: can't read configurations, error -71
[  689.260960][   T30] usb 7-1: USB disconnect, device number 17
[  689.324926][   T30] Unregistered device Abilis Systems DVB-Titan
[  689.371475][   T30] as10x_usb: device has been disconnected
[  689.451284][ T5799] usb 9-1: USB disconnect, device number 19
[  689.467601][ T5799] etas_es58x 9-1:1.0: Disconnecting (null) (null)
[  690.560268][T13121] gadgetfs: bound to dummy_udc driver
[  690.771314][T13129] input: syz0 as /devices/virtual/input/input34
[  690.795261][ T5765] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  690.795670][    C0] gadgetfs: connected
[  690.796843][ T5765] gadgetfs: disconnected
[  690.982504][    C0] gadgetfs: connected
[  691.014971][ T5765] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  691.021703][ T5765] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  691.021887][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.306439][    C0] gadgetfs: configuration #1
[  691.416980][T13129] gadgetfs: suspended from state 3
[  691.417150][T13129] gadgetfs: disconnected
[  691.539975][ T5765] usb 1-1: USB disconnect, device number 6
[  691.584000][T13138] ==================================================================
[  691.584031][T13138] BUG: KASAN: slab-use-after-free in __mutex_lock+0x18b2/0x1bd0
[  691.584081][T13138] Read of size 8 at addr ffff888052585050 by task syz.3.1892/13138
[  691.584113][T13138] 
[  691.584150][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.584205][T13138] Tainted: [L]=SOFTLOCKUP
[  691.584220][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  691.584244][T13138] Call Trace:
[  691.584256][T13138]  <TASK>
[  691.584271][T13138]  dump_stack_lvl+0x100/0x190
[  691.584326][T13138]  print_report+0x13d/0x4b0
[  691.584392][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.584439][T13138]  ? __virt_addr_valid+0x239/0x430
[  691.584506][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.584543][T13138]  kasan_report+0xdf/0x1c0
[  691.584591][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.584636][T13138]  __mutex_lock+0x18b2/0x1bd0
[  691.584673][T13138]  ? ep_open+0x4c/0x2c0
[  691.584735][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  691.584786][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  691.584843][T13138]  ? ep_open+0x4c/0x2c0
[  691.584897][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.584944][T13138]  ep_open+0x4c/0x2c0
[  691.585002][T13138]  do_dentry_open+0x6ab/0x14d0
[  691.585039][T13138]  ? __pfx_ep_open+0x10/0x10
[  691.585103][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.585154][T13138]  vfs_open+0x82/0x3f0
[  691.585201][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.585251][T13138]  path_openat+0x19fa/0x2440
[  691.585302][T13138]  ? __pfx_path_openat+0x10/0x10
[  691.585357][T13138]  do_file_open+0x20e/0x430
[  691.585404][T13138]  ? __pfx_do_file_open+0x10/0x10
[  691.585470][T13138]  ? _raw_spin_unlock+0x28/0x50
[  691.585524][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.585571][T13138]  ? alloc_fd+0x471/0x7a0
[  691.585623][T13138]  do_sys_openat2+0x10f/0x1e0
[  691.585674][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.585736][T13138]  __x64_sys_openat+0x12d/0x210
[  691.585788][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.585842][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  691.585900][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.585952][T13138]  do_syscall_64+0x123/0x790
[  691.585992][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.586033][T13138] RIP: 0033:0x7f7d76f9e1d9
[  691.586061][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.586106][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.586144][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  691.586171][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  691.586196][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  691.586221][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.586246][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  691.586288][T13138]  </TASK>
[  691.586301][T13138] 
[  691.586309][T13138] Allocated by task 13121:
[  691.586327][T13138]  kasan_save_stack+0x30/0x50
[  691.586364][T13138]  kasan_save_track+0x14/0x30
[  691.586401][T13138]  __kasan_kmalloc+0xaa/0xb0
[  691.586436][T13138]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  691.586491][T13138]  gadgetfs_bind+0x582/0x890
[  691.586543][T13138]  gadget_bind_driver+0x28c/0xbf0
[  691.586578][T13138]  really_probe+0x241/0xa60
[  691.586615][T13138]  __driver_probe_device+0x210/0x460
[  691.586653][T13138]  driver_probe_device+0x4a/0x140
[  691.586691][T13138]  __driver_attach+0x21f/0x5b0
[  691.586728][T13138]  bus_for_each_dev+0x13e/0x1d0
[  691.586781][T13138]  bus_add_driver+0x305/0x5b0
[  691.586838][T13138]  driver_register+0x1e2/0x360
[  691.586881][T13138]  usb_gadget_register_driver_owner+0x132/0x210
[  691.586919][T13138]  dev_config+0xdce/0x1610
[  691.586971][T13138]  vfs_write+0x2aa/0x1050
[  691.587001][T13138]  ksys_write+0x12a/0x250
[  691.587031][T13138]  do_syscall_64+0x123/0x790
[  691.587064][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.587106][T13138] 
[  691.587114][T13138] Freed by task 13129:
[  691.587130][T13138]  kasan_save_stack+0x30/0x50
[  691.587167][T13138]  kasan_save_track+0x14/0x30
[  691.587204][T13138]  kasan_save_free_info+0x3b/0x70
[  691.587258][T13138]  __kasan_slab_free+0x5f/0x80
[  691.587298][T13138]  kfree+0x22b/0x6d0
[  691.587345][T13138]  put_ep+0x117/0x150
[  691.587393][T13138]  destroy_ep_files+0x163/0x420
[  691.587444][T13138]  gadgetfs_unbind+0x139/0x260
[  691.587496][T13138]  gadget_unbind_driver+0x20c/0x4f0
[  691.587534][T13138]  device_remove+0xcb/0x180
[  691.587568][T13138]  device_release_driver_internal+0x44e/0x620
[  691.587612][T13138]  driver_detach+0xd8/0x1b0
[  691.587650][T13138]  bus_remove_driver+0x13b/0x2e0
[  691.587709][T13138]  driver_unregister+0x76/0xb0
[  691.587744][T13138]  usb_gadget_unregister_driver+0x49/0x70
[  691.587771][T13138]  dev_release+0x132/0x1b0
[  691.587808][T13138]  __fput+0x400/0xb60
[  691.587839][T13138]  fput_close_sync+0x118/0x250
[  691.587874][T13138]  __x64_sys_close+0x8b/0x120
[  691.587911][T13138]  do_syscall_64+0x123/0x790
[  691.587934][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.587967][T13138] 
[  691.587976][T13138] The buggy address belongs to the object at ffff888052585000
[  691.587976][T13138]  which belongs to the cache kmalloc-512 of size 512
[  691.588006][T13138] The buggy address is located 80 bytes inside of
[  691.588006][T13138]  freed 512-byte region [ffff888052585000, ffff888052585200)
[  691.588035][T13138] 
[  691.588042][T13138] The buggy address belongs to the physical page:
[  691.588053][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52584
[  691.588081][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  691.588104][T13138] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  691.588127][T13138] page_type: f5(slab)
[  691.588151][T13138] raw: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.588177][T13138] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.588203][T13138] head: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.588229][T13138] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.588255][T13138] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  691.588281][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  691.588297][T13138] page dumped because: kasan: bad access detected
[  691.588310][T13138] page_owner tracks the page as allocated
[  691.588319][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (syz-executor), ts 108331469890
[  691.588365][T13138]  post_alloc_hook+0xfd/0x120
[  691.588403][T13138]  get_page_from_freelist+0x110d/0x35d0
[  691.588445][T13138]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  691.588488][T13138]  new_slab+0xa9/0x6e0
[  691.588525][T13138]  refill_objects+0xe3/0x410
[  691.588565][T13138]  __pcs_replace_empty_main+0x35e/0x650
[  691.588606][T13138]  __kmalloc_noprof+0x67c/0x840
[  691.588631][T13138]  fib6_info_alloc+0x40/0x160
[  691.588660][T13138]  ip6_route_info_create+0x14c/0xad0
[  691.588690][T13138]  ip6_route_add+0x4b/0x1d0
[  691.588729][T13138]  addrconf_add_mroute+0x1de/0x350
[  691.588753][T13138]  addrconf_add_dev+0x14e/0x1a0
[  691.588781][T13138]  inet6_addr_add+0xfc/0x9a0
[  691.588812][T13138]  inet6_rtm_newaddr+0x147a/0x1bb0
[  691.588847][T13138]  rtnetlink_rcv_msg+0x95e/0xe90
[  691.588882][T13138]  netlink_rcv_skb+0x159/0x420
[  691.588911][T13138] page last free pid 1 tgid 1 ts 24621855733 stack trace:
[  691.588928][T13138]  free_pages_prepare+0x586/0xe00
[  691.588971][T13138]  __free_contig_range_common+0x14f/0x250
[  691.589017][T13138]  destroy_args+0xa8/0x7a0
[  691.589055][T13138]  debug_vm_pgtable+0x1d69/0x3490
[  691.589096][T13138]  do_one_initcall+0x11c/0x6f0
[  691.589121][T13138]  kernel_init_freeable+0x6ea/0x7b0
[  691.589157][T13138]  kernel_init+0x21/0x1e0
[  691.589187][T13138]  ret_from_fork+0x730/0xd60
[  691.589214][T13138]  ret_from_fork_asm+0x1a/0x30
[  691.589240][T13138] 
[  691.589246][T13138] Memory state around the buggy address:
[  691.589260][T13138]  ffff888052584f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.589280][T13138]  ffff888052584f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.589300][T13138] >ffff888052585000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.589315][T13138]                                                  ^
[  691.589331][T13138]  ffff888052585080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.589351][T13138]  ffff888052585100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.589366][T13138] ==================================================================
[  691.589624][T13138] Disabling lock debugging due to kernel taint
[  691.589640][T13138] ==================================================================
[  691.589655][T13138] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23a/0x260
[  691.589709][T13138] Read of size 4 at addr ffff88805258500c by task syz.3.1892/13138
[  691.589740][T13138] 
[  691.589758][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  691.589817][T13138] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  691.589833][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  691.589857][T13138] Call Trace:
[  691.589869][T13138]  <TASK>
[  691.589883][T13138]  dump_stack_lvl+0x100/0x190
[  691.589937][T13138]  print_report+0x13d/0x4b0
[  691.589997][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.590044][T13138]  ? __virt_addr_valid+0x239/0x430
[  691.590119][T13138]  ? do_raw_spin_lock+0x23a/0x260
[  691.590169][T13138]  kasan_report+0xdf/0x1c0
[  691.590226][T13138]  ? do_raw_spin_lock+0x23a/0x260
[  691.590283][T13138]  do_raw_spin_lock+0x23a/0x260
[  691.590333][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.590383][T13138]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  691.590433][T13138]  ? lock_acquire+0x31e/0x380
[  691.590475][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.590513][T13138]  ? _raw_spin_lock_irqsave+0x52/0x60
[  691.590573][T13138]  _raw_spin_lock_irqsave+0x42/0x60
[  691.590630][T13138]  ? __mutex_lock+0xcf8/0x1bd0
[  691.590668][T13138]  __mutex_lock+0xcf8/0x1bd0
[  691.590706][T13138]  ? ep_open+0x4c/0x2c0
[  691.590768][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  691.590818][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  691.590879][T13138]  ? ep_open+0x4c/0x2c0
[  691.590935][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.590983][T13138]  ep_open+0x4c/0x2c0
[  691.591039][T13138]  do_dentry_open+0x6ab/0x14d0
[  691.591076][T13138]  ? __pfx_ep_open+0x10/0x10
[  691.591139][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.591189][T13138]  vfs_open+0x82/0x3f0
[  691.591234][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.591285][T13138]  path_openat+0x19fa/0x2440
[  691.591336][T13138]  ? __pfx_path_openat+0x10/0x10
[  691.591390][T13138]  do_file_open+0x20e/0x430
[  691.591439][T13138]  ? __pfx_do_file_open+0x10/0x10
[  691.591505][T13138]  ? _raw_spin_unlock+0x28/0x50
[  691.591561][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.591609][T13138]  ? alloc_fd+0x471/0x7a0
[  691.591662][T13138]  do_sys_openat2+0x10f/0x1e0
[  691.591714][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.591777][T13138]  __x64_sys_openat+0x12d/0x210
[  691.591830][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.591886][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  691.591944][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.591996][T13138]  do_syscall_64+0x123/0x790
[  691.592036][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.592076][T13138] RIP: 0033:0x7f7d76f9e1d9
[  691.592111][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.592151][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.592188][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  691.592216][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  691.592243][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  691.592268][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.592293][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  691.592334][T13138]  </TASK>
[  691.592347][T13138] 
[  691.592355][T13138] Allocated by task 13121:
[  691.592373][T13138]  kasan_save_stack+0x30/0x50
[  691.592411][T13138]  kasan_save_track+0x14/0x30
[  691.592449][T13138]  __kasan_kmalloc+0xaa/0xb0
[  691.592484][T13138]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  691.592539][T13138]  gadgetfs_bind+0x582/0x890
[  691.592592][T13138]  gadget_bind_driver+0x28c/0xbf0
[  691.592627][T13138]  really_probe+0x241/0xa60
[  691.592664][T13138]  __driver_probe_device+0x210/0x460
[  691.592702][T13138]  driver_probe_device+0x4a/0x140
[  691.592740][T13138]  __driver_attach+0x21f/0x5b0
[  691.592776][T13138]  bus_for_each_dev+0x13e/0x1d0
[  691.592829][T13138]  bus_add_driver+0x305/0x5b0
[  691.592886][T13138]  driver_register+0x1e2/0x360
[  691.592929][T13138]  usb_gadget_register_driver_owner+0x132/0x210
[  691.592968][T13138]  dev_config+0xdce/0x1610
[  691.593021][T13138]  vfs_write+0x2aa/0x1050
[  691.593052][T13138]  ksys_write+0x12a/0x250
[  691.593089][T13138]  do_syscall_64+0x123/0x790
[  691.593123][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.593160][T13138] 
[  691.593167][T13138] Freed by task 13129:
[  691.593184][T13138]  kasan_save_stack+0x30/0x50
[  691.593221][T13138]  kasan_save_track+0x14/0x30
[  691.593258][T13138]  kasan_save_free_info+0x3b/0x70
[  691.593313][T13138]  __kasan_slab_free+0x5f/0x80
[  691.593353][T13138]  kfree+0x22b/0x6d0
[  691.593402][T13138]  put_ep+0x117/0x150
[  691.593451][T13138]  destroy_ep_files+0x163/0x420
[  691.593504][T13138]  gadgetfs_unbind+0x139/0x260
[  691.593557][T13138]  gadget_unbind_driver+0x20c/0x4f0
[  691.593595][T13138]  device_remove+0xcb/0x180
[  691.593630][T13138]  device_release_driver_internal+0x44e/0x620
[  691.593675][T13138]  driver_detach+0xd8/0x1b0
[  691.593715][T13138]  bus_remove_driver+0x13b/0x2e0
[  691.593775][T13138]  driver_unregister+0x76/0xb0
[  691.593818][T13138]  usb_gadget_unregister_driver+0x49/0x70
[  691.593856][T13138]  dev_release+0x132/0x1b0
[  691.593907][T13138]  __fput+0x400/0xb60
[  691.593950][T13138]  fput_close_sync+0x118/0x250
[  691.593998][T13138]  __x64_sys_close+0x8b/0x120
[  691.594047][T13138]  do_syscall_64+0x123/0x790
[  691.594084][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.594120][T13138] 
[  691.594128][T13138] The buggy address belongs to the object at ffff888052585000
[  691.594128][T13138]  which belongs to the cache kmalloc-512 of size 512
[  691.594157][T13138] The buggy address is located 12 bytes inside of
[  691.594157][T13138]  freed 512-byte region [ffff888052585000, ffff888052585200)
[  691.594195][T13138] 
[  691.594203][T13138] The buggy address belongs to the physical page:
[  691.594217][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52584
[  691.594250][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  691.594280][T13138] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  691.594311][T13138] page_type: f5(slab)
[  691.594342][T13138] raw: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.594378][T13138] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.594415][T13138] head: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.594451][T13138] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.594488][T13138] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  691.594524][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  691.594546][T13138] page dumped because: kasan: bad access detected
[  691.594563][T13138] page_owner tracks the page as allocated
[  691.594574][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (syz-executor), ts 108331469890
[  691.594637][T13138]  post_alloc_hook+0xfd/0x120
[  691.594688][T13138]  get_page_from_freelist+0x110d/0x35d0
[  691.594746][T13138]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  691.594807][T13138]  new_slab+0xa9/0x6e0
[  691.594860][T13138]  refill_objects+0xe3/0x410
[  691.594915][T13138]  __pcs_replace_empty_main+0x35e/0x650
[  691.594970][T13138]  __kmalloc_noprof+0x67c/0x840
[  691.595004][T13138]  fib6_info_alloc+0x40/0x160
[  691.595043][T13138]  ip6_route_info_create+0x14c/0xad0
[  691.595092][T13138]  ip6_route_add+0x4b/0x1d0
[  691.595146][T13138]  addrconf_add_mroute+0x1de/0x350
[  691.595180][T13138]  addrconf_add_dev+0x14e/0x1a0
[  691.595217][T13138]  inet6_addr_add+0xfc/0x9a0
[  691.595261][T13138]  inet6_rtm_newaddr+0x147a/0x1bb0
[  691.595309][T13138]  rtnetlink_rcv_msg+0x95e/0xe90
[  691.595358][T13138]  netlink_rcv_skb+0x159/0x420
[  691.595396][T13138] page last free pid 1 tgid 1 ts 24621855733 stack trace:
[  691.595420][T13138]  free_pages_prepare+0x586/0xe00
[  691.595471][T13138]  __free_contig_range_common+0x14f/0x250
[  691.595525][T13138]  destroy_args+0xa8/0x7a0
[  691.595578][T13138]  debug_vm_pgtable+0x1d69/0x3490
[  691.595629][T13138]  do_one_initcall+0x11c/0x6f0
[  691.595662][T13138]  kernel_init_freeable+0x6ea/0x7b0
[  691.595708][T13138]  kernel_init+0x21/0x1e0
[  691.595749][T13138]  ret_from_fork+0x730/0xd60
[  691.595784][T13138]  ret_from_fork_asm+0x1a/0x30
[  691.595820][T13138] 
[  691.595828][T13138] Memory state around the buggy address:
[  691.595847][T13138]  ffff888052584f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.595875][T13138]  ffff888052584f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.595903][T13138] >ffff888052585000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.595925][T13138]                       ^
[  691.595945][T13138]  ffff888052585080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.595973][T13138]  ffff888052585100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.595995][T13138] ==================================================================
[  691.596010][T13138] ==================================================================
[  691.596026][T13138] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x247/0x260
[  691.596087][T13138] Read of size 8 at addr ffff888052585018 by task syz.3.1892/13138
[  691.596119][T13138] 
[  691.596137][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  691.596198][T13138] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  691.596215][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  691.596239][T13138] Call Trace:
[  691.596252][T13138]  <TASK>
[  691.596266][T13138]  dump_stack_lvl+0x100/0x190
[  691.596321][T13138]  print_report+0x13d/0x4b0
[  691.596381][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.596431][T13138]  ? __virt_addr_valid+0x239/0x430
[  691.596500][T13138]  ? do_raw_spin_lock+0x247/0x260
[  691.596552][T13138]  kasan_report+0xdf/0x1c0
[  691.596601][T13138]  ? do_raw_spin_lock+0x247/0x260
[  691.596660][T13138]  do_raw_spin_lock+0x247/0x260
[  691.596710][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.596761][T13138]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  691.596813][T13138]  ? lock_acquire+0x31e/0x380
[  691.596855][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.596895][T13138]  ? _raw_spin_lock_irqsave+0x52/0x60
[  691.596958][T13138]  _raw_spin_lock_irqsave+0x42/0x60
[  691.597016][T13138]  ? __mutex_lock+0xcf8/0x1bd0
[  691.597055][T13138]  __mutex_lock+0xcf8/0x1bd0
[  691.597101][T13138]  ? ep_open+0x4c/0x2c0
[  691.597163][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  691.597215][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  691.597273][T13138]  ? ep_open+0x4c/0x2c0
[  691.597329][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.597378][T13138]  ep_open+0x4c/0x2c0
[  691.597449][T13138]  do_dentry_open+0x6ab/0x14d0
[  691.597486][T13138]  ? __pfx_ep_open+0x10/0x10
[  691.597544][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.597594][T13138]  vfs_open+0x82/0x3f0
[  691.597641][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.597694][T13138]  path_openat+0x19fa/0x2440
[  691.597746][T13138]  ? __pfx_path_openat+0x10/0x10
[  691.597802][T13138]  do_file_open+0x20e/0x430
[  691.597852][T13138]  ? __pfx_do_file_open+0x10/0x10
[  691.597918][T13138]  ? _raw_spin_unlock+0x28/0x50
[  691.597977][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.598026][T13138]  ? alloc_fd+0x471/0x7a0
[  691.598087][T13138]  do_sys_openat2+0x10f/0x1e0
[  691.598141][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.598204][T13138]  __x64_sys_openat+0x12d/0x210
[  691.598259][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.598316][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  691.598376][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.598431][T13138]  do_syscall_64+0x123/0x790
[  691.598471][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.598512][T13138] RIP: 0033:0x7f7d76f9e1d9
[  691.598542][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.598582][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.598619][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  691.598648][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  691.598675][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  691.598701][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.598727][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  691.598769][T13138]  </TASK>
[  691.598783][T13138] 
[  691.598791][T13138] Allocated by task 13121:
[  691.598809][T13138]  kasan_save_stack+0x30/0x50
[  691.598847][T13138]  kasan_save_track+0x14/0x30
[  691.598886][T13138]  __kasan_kmalloc+0xaa/0xb0
[  691.598921][T13138]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  691.598977][T13138]  gadgetfs_bind+0x582/0x890
[  691.599030][T13138]  gadget_bind_driver+0x28c/0xbf0
[  691.599066][T13138]  really_probe+0x241/0xa60
[  691.599108][T13138]  __driver_probe_device+0x210/0x460
[  691.599149][T13138]  driver_probe_device+0x4a/0x140
[  691.599189][T13138]  __driver_attach+0x21f/0x5b0
[  691.599228][T13138]  bus_for_each_dev+0x13e/0x1d0
[  691.599283][T13138]  bus_add_driver+0x305/0x5b0
[  691.599344][T13138]  driver_register+0x1e2/0x360
[  691.599388][T13138]  usb_gadget_register_driver_owner+0x132/0x210
[  691.599428][T13138]  dev_config+0xdce/0x1610
[  691.599484][T13138]  vfs_write+0x2aa/0x1050
[  691.599514][T13138]  ksys_write+0x12a/0x250
[  691.599547][T13138]  do_syscall_64+0x123/0x790
[  691.599580][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.599618][T13138] 
[  691.599628][T13138] Freed by task 13129:
[  691.599644][T13138]  kasan_save_stack+0x30/0x50
[  691.599683][T13138]  kasan_save_track+0x14/0x30
[  691.599721][T13138]  kasan_save_free_info+0x3b/0x70
[  691.599777][T13138]  __kasan_slab_free+0x5f/0x80
[  691.599818][T13138]  kfree+0x22b/0x6d0
[  691.599869][T13138]  put_ep+0x117/0x150
[  691.599919][T13138]  destroy_ep_files+0x163/0x420
[  691.599973][T13138]  gadgetfs_unbind+0x139/0x260
[  691.600026][T13138]  gadget_unbind_driver+0x20c/0x4f0
[  691.600065][T13138]  device_remove+0xcb/0x180
[  691.600104][T13138]  device_release_driver_internal+0x44e/0x620
[  691.600148][T13138]  driver_detach+0xd8/0x1b0
[  691.600188][T13138]  bus_remove_driver+0x13b/0x2e0
[  691.600249][T13138]  driver_unregister+0x76/0xb0
[  691.600293][T13138]  usb_gadget_unregister_driver+0x49/0x70
[  691.600332][T13138]  dev_release+0x132/0x1b0
[  691.600385][T13138]  __fput+0x400/0xb60
[  691.600429][T13138]  fput_close_sync+0x118/0x250
[  691.600478][T13138]  __x64_sys_close+0x8b/0x120
[  691.600529][T13138]  do_syscall_64+0x123/0x790
[  691.600562][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.600601][T13138] 
[  691.600609][T13138] The buggy address belongs to the object at ffff888052585000
[  691.600609][T13138]  which belongs to the cache kmalloc-512 of size 512
[  691.600640][T13138] The buggy address is located 24 bytes inside of
[  691.600640][T13138]  freed 512-byte region [ffff888052585000, ffff888052585200)
[  691.600678][T13138] 
[  691.600687][T13138] The buggy address belongs to the physical page:
[  691.600701][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52584
[  691.600733][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  691.600764][T13138] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  691.600795][T13138] page_type: f5(slab)
[  691.600825][T13138] raw: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.600860][T13138] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.600897][T13138] head: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.600933][T13138] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.600970][T13138] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  691.601007][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  691.601030][T13138] page dumped because: kasan: bad access detected
[  691.601047][T13138] page_owner tracks the page as allocated
[  691.601059][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (syz-executor), ts 108331469890
[  691.601129][T13138]  post_alloc_hook+0xfd/0x120
[  691.601180][T13138]  get_page_from_freelist+0x110d/0x35d0
[  691.601238][T13138]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  691.601299][T13138]  new_slab+0xa9/0x6e0
[  691.601352][T13138]  refill_objects+0xe3/0x410
[  691.601408][T13138]  __pcs_replace_empty_main+0x35e/0x650
[  691.601464][T13138]  __kmalloc_noprof+0x67c/0x840
[  691.601497][T13138]  fib6_info_alloc+0x40/0x160
[  691.601537][T13138]  ip6_route_info_create+0x14c/0xad0
[  691.601580][T13138]  ip6_route_add+0x4b/0x1d0
[  691.601634][T13138]  addrconf_add_mroute+0x1de/0x350
[  691.601669][T13138]  addrconf_add_dev+0x14e/0x1a0
[  691.601712][T13138]  inet6_addr_add+0xfc/0x9a0
[  691.601755][T13138]  inet6_rtm_newaddr+0x147a/0x1bb0
[  691.601804][T13138]  rtnetlink_rcv_msg+0x95e/0xe90
[  691.601853][T13138]  netlink_rcv_skb+0x159/0x420
[  691.601891][T13138] page last free pid 1 tgid 1 ts 24621855733 stack trace:
[  691.601915][T13138]  free_pages_prepare+0x586/0xe00
[  691.601968][T13138]  __free_contig_range_common+0x14f/0x250
[  691.602022][T13138]  destroy_args+0xa8/0x7a0
[  691.602072][T13138]  debug_vm_pgtable+0x1d69/0x3490
[  691.602132][T13138]  do_one_initcall+0x11c/0x6f0
[  691.602165][T13138]  kernel_init_freeable+0x6ea/0x7b0
[  691.602215][T13138]  kernel_init+0x21/0x1e0
[  691.602258][T13138]  ret_from_fork+0x730/0xd60
[  691.602294][T13138]  ret_from_fork_asm+0x1a/0x30
[  691.602330][T13138] 
[  691.602338][T13138] Memory state around the buggy address:
[  691.602357][T13138]  ffff888052584f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.602384][T13138]  ffff888052584f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.602412][T13138] >ffff888052585000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.602434][T13138]                             ^
[  691.602455][T13138]  ffff888052585080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.602482][T13138]  ffff888052585100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.602504][T13138] ==================================================================
[  691.602519][T13138] ==================================================================
[  691.602534][T13138] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x230/0x260
[  691.602586][T13138] Read of size 4 at addr ffff888052585010 by task syz.3.1892/13138
[  691.602616][T13138] 
[  691.602634][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  691.602694][T13138] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  691.602711][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  691.602735][T13138] Call Trace:
[  691.602747][T13138]  <TASK>
[  691.602761][T13138]  dump_stack_lvl+0x100/0x190
[  691.602816][T13138]  print_report+0x13d/0x4b0
[  691.602875][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.602924][T13138]  ? __virt_addr_valid+0x239/0x430
[  691.602991][T13138]  ? do_raw_spin_lock+0x230/0x260
[  691.603042][T13138]  kasan_report+0xdf/0x1c0
[  691.603098][T13138]  ? do_raw_spin_lock+0x230/0x260
[  691.603156][T13138]  do_raw_spin_lock+0x230/0x260
[  691.603206][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.603255][T13138]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  691.603306][T13138]  ? lock_acquire+0x31e/0x380
[  691.603349][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.603387][T13138]  ? _raw_spin_lock_irqsave+0x52/0x60
[  691.603447][T13138]  _raw_spin_lock_irqsave+0x42/0x60
[  691.603503][T13138]  ? __mutex_lock+0xcf8/0x1bd0
[  691.603541][T13138]  __mutex_lock+0xcf8/0x1bd0
[  691.603578][T13138]  ? ep_open+0x4c/0x2c0
[  691.603639][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  691.603690][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  691.603747][T13138]  ? ep_open+0x4c/0x2c0
[  691.603802][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.603851][T13138]  ep_open+0x4c/0x2c0
[  691.603910][T13138]  do_dentry_open+0x6ab/0x14d0
[  691.603948][T13138]  ? __pfx_ep_open+0x10/0x10
[  691.604009][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.604061][T13138]  vfs_open+0x82/0x3f0
[  691.604113][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.604167][T13138]  path_openat+0x19fa/0x2440
[  691.604219][T13138]  ? __pfx_path_openat+0x10/0x10
[  691.604275][T13138]  do_file_open+0x20e/0x430
[  691.604325][T13138]  ? __pfx_do_file_open+0x10/0x10
[  691.604391][T13138]  ? _raw_spin_unlock+0x28/0x50
[  691.604449][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.604499][T13138]  ? alloc_fd+0x471/0x7a0
[  691.604553][T13138]  do_sys_openat2+0x10f/0x1e0
[  691.604604][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.604665][T13138]  __x64_sys_openat+0x12d/0x210
[  691.604719][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.604774][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  691.604834][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.604888][T13138]  do_syscall_64+0x123/0x790
[  691.604927][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.604970][T13138] RIP: 0033:0x7f7d76f9e1d9
[  691.604999][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.605040][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.605084][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  691.605112][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  691.605139][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  691.605165][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.605191][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  691.605231][T13138]  </TASK>
[  691.605245][T13138] 
[  691.605253][T13138] Allocated by task 13121:
[  691.605271][T13138]  kasan_save_stack+0x30/0x50
[  691.605310][T13138]  kasan_save_track+0x14/0x30
[  691.605348][T13138]  __kasan_kmalloc+0xaa/0xb0
[  691.605384][T13138]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  691.605439][T13138]  gadgetfs_bind+0x582/0x890
[  691.605492][T13138]  gadget_bind_driver+0x28c/0xbf0
[  691.605529][T13138]  really_probe+0x241/0xa60
[  691.605565][T13138]  __driver_probe_device+0x210/0x460
[  691.605605][T13138]  driver_probe_device+0x4a/0x140
[  691.605645][T13138]  __driver_attach+0x21f/0x5b0
[  691.605683][T13138]  bus_for_each_dev+0x13e/0x1d0
[  691.605737][T13138]  bus_add_driver+0x305/0x5b0
[  691.605796][T13138]  driver_register+0x1e2/0x360
[  691.605839][T13138]  usb_gadget_register_driver_owner+0x132/0x210
[  691.605877][T13138]  dev_config+0xdce/0x1610
[  691.605931][T13138]  vfs_write+0x2aa/0x1050
[  691.605961][T13138]  ksys_write+0x12a/0x250
[  691.605992][T13138]  do_syscall_64+0x123/0x790
[  691.606026][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.606064][T13138] 
[  691.606073][T13138] Freed by task 13129:
[  691.606095][T13138]  kasan_save_stack+0x30/0x50
[  691.606133][T13138]  kasan_save_track+0x14/0x30
[  691.606171][T13138]  kasan_save_free_info+0x3b/0x70
[  691.606225][T13138]  __kasan_slab_free+0x5f/0x80
[  691.606266][T13138]  kfree+0x22b/0x6d0
[  691.606315][T13138]  put_ep+0x117/0x150
[  691.606365][T13138]  destroy_ep_files+0x163/0x420
[  691.606418][T13138]  gadgetfs_unbind+0x139/0x260
[  691.606472][T13138]  gadget_unbind_driver+0x20c/0x4f0
[  691.606512][T13138]  device_remove+0xcb/0x180
[  691.606547][T13138]  device_release_driver_internal+0x44e/0x620
[  691.606594][T13138]  driver_detach+0xd8/0x1b0
[  691.606635][T13138]  bus_remove_driver+0x13b/0x2e0
[  691.606697][T13138]  driver_unregister+0x76/0xb0
[  691.606742][T13138]  usb_gadget_unregister_driver+0x49/0x70
[  691.606780][T13138]  dev_release+0x132/0x1b0
[  691.606834][T13138]  __fput+0x400/0xb60
[  691.606878][T13138]  fput_close_sync+0x118/0x250
[  691.606928][T13138]  __x64_sys_close+0x8b/0x120
[  691.606980][T13138]  do_syscall_64+0x123/0x790
[  691.607013][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.607052][T13138] 
[  691.607060][T13138] The buggy address belongs to the object at ffff888052585000
[  691.607060][T13138]  which belongs to the cache kmalloc-512 of size 512
[  691.607097][T13138] The buggy address is located 16 bytes inside of
[  691.607097][T13138]  freed 512-byte region [ffff888052585000, ffff888052585200)
[  691.607136][T13138] 
[  691.607144][T13138] The buggy address belongs to the physical page:
[  691.607159][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52584
[  691.607193][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  691.607224][T13138] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  691.607256][T13138] page_type: f5(slab)
[  691.607288][T13138] raw: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.607324][T13138] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.607361][T13138] head: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.607395][T13138] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.607431][T13138] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  691.607468][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  691.607491][T13138] page dumped because: kasan: bad access detected
[  691.607509][T13138] page_owner tracks the page as allocated
[  691.607522][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (syz-executor), ts 108331469890
[  691.607587][T13138]  post_alloc_hook+0xfd/0x120
[  691.607643][T13138]  get_page_from_freelist+0x110d/0x35d0
[  691.607701][T13138]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  691.607762][T13138]  new_slab+0xa9/0x6e0
[  691.607815][T13138]  refill_objects+0xe3/0x410
[  691.607871][T13138]  __pcs_replace_empty_main+0x35e/0x650
[  691.607925][T13138]  __kmalloc_noprof+0x67c/0x840
[  691.607959][T13138]  fib6_info_alloc+0x40/0x160
[  691.607998][T13138]  ip6_route_info_create+0x14c/0xad0
[  691.608038][T13138]  ip6_route_add+0x4b/0x1d0
[  691.608097][T13138]  addrconf_add_mroute+0x1de/0x350
[  691.608130][T13138]  addrconf_add_dev+0x14e/0x1a0
[  691.608168][T13138]  inet6_addr_add+0xfc/0x9a0
[  691.608212][T13138]  inet6_rtm_newaddr+0x147a/0x1bb0
[  691.608261][T13138]  rtnetlink_rcv_msg+0x95e/0xe90
[  691.608310][T13138]  netlink_rcv_skb+0x159/0x420
[  691.608349][T13138] page last free pid 1 tgid 1 ts 24621855733 stack trace:
[  691.608374][T13138]  free_pages_prepare+0x586/0xe00
[  691.608425][T13138]  __free_contig_range_common+0x14f/0x250
[  691.608479][T13138]  destroy_args+0xa8/0x7a0
[  691.608530][T13138]  debug_vm_pgtable+0x1d69/0x3490
[  691.608584][T13138]  do_one_initcall+0x11c/0x6f0
[  691.608619][T13138]  kernel_init_freeable+0x6ea/0x7b0
[  691.608668][T13138]  kernel_init+0x21/0x1e0
[  691.608712][T13138]  ret_from_fork+0x730/0xd60
[  691.608748][T13138]  ret_from_fork_asm+0x1a/0x30
[  691.608784][T13138] 
[  691.608792][T13138] Memory state around the buggy address:
[  691.608811][T13138]  ffff888052584f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.608840][T13138]  ffff888052584f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.608868][T13138] >ffff888052585000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.608890][T13138]                          ^
[  691.608909][T13138]  ffff888052585080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.608937][T13138]  ffff888052585100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.608959][T13138] ==================================================================
[  691.608975][T13138] ==================================================================
[  691.608991][T13138] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260
[  691.609046][T13138] Write of size 4 at addr ffff888052585008 by task syz.3.1892/13138
[  691.609085][T13138] 
[  691.609103][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  691.609163][T13138] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  691.609180][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  691.609204][T13138] Call Trace:
[  691.609216][T13138]  <TASK>
[  691.609231][T13138]  dump_stack_lvl+0x100/0x190
[  691.609284][T13138]  print_report+0x13d/0x4b0
[  691.609344][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.609392][T13138]  ? __virt_addr_valid+0x239/0x430
[  691.609460][T13138]  ? do_raw_spin_lock+0x119/0x260
[  691.609510][T13138]  kasan_report+0xdf/0x1c0
[  691.609559][T13138]  ? do_raw_spin_lock+0x119/0x260
[  691.609616][T13138]  kasan_check_range+0x10f/0x1e0
[  691.609672][T13138]  do_raw_spin_lock+0x119/0x260
[  691.609723][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.609772][T13138]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  691.609822][T13138]  ? lock_acquire+0x31e/0x380
[  691.609863][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  691.609900][T13138]  ? _raw_spin_lock_irqsave+0x52/0x60
[  691.609962][T13138]  _raw_spin_lock_irqsave+0x42/0x60
[  691.610020][T13138]  ? __mutex_lock+0xcf8/0x1bd0
[  691.610060][T13138]  __mutex_lock+0xcf8/0x1bd0
[  691.610104][T13138]  ? ep_open+0x4c/0x2c0
[  691.610165][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  691.610216][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  691.610272][T13138]  ? ep_open+0x4c/0x2c0
[  691.610327][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.610376][T13138]  ep_open+0x4c/0x2c0
[  691.610435][T13138]  do_dentry_open+0x6ab/0x14d0
[  691.610472][T13138]  ? __pfx_ep_open+0x10/0x10
[  691.610532][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.610584][T13138]  vfs_open+0x82/0x3f0
[  691.610629][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.610681][T13138]  path_openat+0x19fa/0x2440
[  691.610732][T13138]  ? __pfx_path_openat+0x10/0x10
[  691.610787][T13138]  do_file_open+0x20e/0x430
[  691.610837][T13138]  ? __pfx_do_file_open+0x10/0x10
[  691.610906][T13138]  ? _raw_spin_unlock+0x28/0x50
[  691.610961][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.611010][T13138]  ? alloc_fd+0x471/0x7a0
[  691.611063][T13138]  do_sys_openat2+0x10f/0x1e0
[  691.611121][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.611183][T13138]  __x64_sys_openat+0x12d/0x210
[  691.611239][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  691.611294][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  691.611352][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  691.611405][T13138]  do_syscall_64+0x123/0x790
[  691.611444][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.611485][T13138] RIP: 0033:0x7f7d76f9e1d9
[  691.611514][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.611555][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.611592][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  691.611620][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  691.611647][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  691.611673][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.611699][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  691.611740][T13138]  </TASK>
[  691.611754][T13138] 
[  691.611763][T13138] Allocated by task 13121:
[  691.611781][T13138]  kasan_save_stack+0x30/0x50
[  691.611819][T13138]  kasan_save_track+0x14/0x30
[  691.611858][T13138]  __kasan_kmalloc+0xaa/0xb0
[  691.611896][T13138]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  691.611951][T13138]  gadgetfs_bind+0x582/0x890
[  691.612005][T13138]  gadget_bind_driver+0x28c/0xbf0
[  691.612042][T13138]  really_probe+0x241/0xa60
[  691.612088][T13138]  __driver_probe_device+0x210/0x460
[  691.612128][T13138]  driver_probe_device+0x4a/0x140
[  691.612167][T13138]  __driver_attach+0x21f/0x5b0
[  691.612209][T13138]  bus_for_each_dev+0x13e/0x1d0
[  691.612264][T13138]  bus_add_driver+0x305/0x5b0
[  691.612322][T13138]  driver_register+0x1e2/0x360
[  691.612365][T13138]  usb_gadget_register_driver_owner+0x132/0x210
[  691.612404][T13138]  dev_config+0xdce/0x1610
[  691.612457][T13138]  vfs_write+0x2aa/0x1050
[  691.612488][T13138]  ksys_write+0x12a/0x250
[  691.612520][T13138]  do_syscall_64+0x123/0x790
[  691.612552][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.612590][T13138] 
[  691.612598][T13138] Freed by task 13129:
[  691.612615][T13138]  kasan_save_stack+0x30/0x50
[  691.612653][T13138]  kasan_save_track+0x14/0x30
[  691.612691][T13138]  kasan_save_free_info+0x3b/0x70
[  691.612746][T13138]  __kasan_slab_free+0x5f/0x80
[  691.612785][T13138]  kfree+0x22b/0x6d0
[  691.612834][T13138]  put_ep+0x117/0x150
[  691.612882][T13138]  destroy_ep_files+0x163/0x420
[  691.612934][T13138]  gadgetfs_unbind+0x139/0x260
[  691.612989][T13138]  gadget_unbind_driver+0x20c/0x4f0
[  691.613028][T13138]  device_remove+0xcb/0x180
[  691.613063][T13138]  device_release_driver_internal+0x44e/0x620
[  691.613113][T13138]  driver_detach+0xd8/0x1b0
[  691.613153][T13138]  bus_remove_driver+0x13b/0x2e0
[  691.613213][T13138]  driver_unregister+0x76/0xb0
[  691.613257][T13138]  usb_gadget_unregister_driver+0x49/0x70
[  691.613295][T13138]  dev_release+0x132/0x1b0
[  691.613348][T13138]  __fput+0x400/0xb60
[  691.613393][T13138]  fput_close_sync+0x118/0x250
[  691.613443][T13138]  __x64_sys_close+0x8b/0x120
[  691.613495][T13138]  do_syscall_64+0x123/0x790
[  691.613529][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.613567][T13138] 
[  691.613576][T13138] The buggy address belongs to the object at ffff888052585000
[  691.613576][T13138]  which belongs to the cache kmalloc-512 of size 512
[  691.613607][T13138] The buggy address is located 8 bytes inside of
[  691.613607][T13138]  freed 512-byte region [ffff888052585000, ffff888052585200)
[  691.613646][T13138] 
[  691.613654][T13138] The buggy address belongs to the physical page:
[  691.613669][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52584
[  691.613703][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  691.613734][T13138] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  691.613766][T13138] page_type: f5(slab)
[  691.613797][T13138] raw: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.613833][T13138] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.613871][T13138] head: 00fff00000000040 ffff88801d034c80 dead000000000100 dead000000000122
[  691.613905][T13138] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  691.613942][T13138] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  691.613978][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  691.614000][T13138] page dumped because: kasan: bad access detected
[  691.614017][T13138] page_owner tracks the page as allocated
[  691.614030][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (syz-executor), ts 108331469890
[  691.614097][T13138]  post_alloc_hook+0xfd/0x120
[  691.614149][T13138]  get_page_from_freelist+0x110d/0x35d0
[  691.614208][T13138]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  691.614269][T13138]  new_slab+0xa9/0x6e0
[  691.614321][T13138]  refill_objects+0xe3/0x410
[  691.614377][T13138]  __pcs_replace_empty_main+0x35e/0x650
[  691.614433][T13138]  __kmalloc_noprof+0x67c/0x840
[  691.614466][T13138]  fib6_info_alloc+0x40/0x160
[  691.614508][T13138]  ip6_route_info_create+0x14c/0xad0
[  691.614549][T13138]  ip6_route_add+0x4b/0x1d0
[  691.614605][T13138]  addrconf_add_mroute+0x1de/0x350
[  691.614638][T13138]  addrconf_add_dev+0x14e/0x1a0
[  691.614678][T13138]  inet6_addr_add+0xfc/0x9a0
[  691.614722][T13138]  inet6_rtm_newaddr+0x147a/0x1bb0
[  691.614772][T13138]  rtnetlink_rcv_msg+0x95e/0xe90
[  691.614822][T13138]  netlink_rcv_skb+0x159/0x420
[  691.614861][T13138] page last free pid 1 tgid 1 ts 24621855733 stack trace:
[  691.614885][T13138]  free_pages_prepare+0x586/0xe00
[  691.614938][T13138]  __free_contig_range_common+0x14f/0x250
[  691.614993][T13138]  destroy_args+0xa8/0x7a0
[  691.615043][T13138]  debug_vm_pgtable+0x1d69/0x3490
[  691.615103][T13138]  do_one_initcall+0x11c/0x6f0
[  691.615138][T13138]  kernel_init_freeable+0x6ea/0x7b0
[  691.615186][T13138]  kernel_init+0x21/0x1e0
[  691.615229][T13138]  ret_from_fork+0x730/0xd60
[  691.615265][T13138]  ret_from_fork_asm+0x1a/0x30
[  691.615299][T13138] 
[  691.615308][T13138] Memory state around the buggy address:
[  691.615326][T13138]  ffff888052584f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.615352][T13138]  ffff888052584f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  691.615379][T13138] >ffff888052585000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.615401][T13138]                       ^
[  691.615419][T13138]  ffff888052585080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.615447][T13138]  ffff888052585100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  691.615468][T13138] ==================================================================
[  691.615486][T13138] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[  696.029934][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.1892 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  696.040890][T13138] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  696.046419][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  696.056467][T13138] Call Trace:
[  696.059735][T13138]  <TASK>
[  696.062654][T13138]  dump_stack_lvl+0x100/0x190
[  696.067346][T13138]  vpanic+0x553/0x970
[  696.071346][T13138]  ? __pfx_vpanic+0x10/0x10
[  696.075850][T13138]  ? do_raw_spin_lock+0x119/0x260
[  696.080900][T13138]  panic+0xd1/0xe0
[  696.084623][T13138]  ? __pfx_panic+0x10/0x10
[  696.089038][T13138]  ? end_report.part.0+0x23/0x90
[  696.094000][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.099637][T13138]  ? rcu_is_watching+0x13/0xc0
[  696.104413][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.110051][T13138]  ? lock_release+0x24d/0x310
[  696.114738][T13138]  end_report.part.0+0x68/0x90
[  696.119533][T13138]  kasan_report.cold+0xe/0x18
[  696.124226][T13138]  ? do_raw_spin_lock+0x119/0x260
[  696.129262][T13138]  kasan_check_range+0x10f/0x1e0
[  696.134213][T13138]  do_raw_spin_lock+0x119/0x260
[  696.139075][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.144719][T13138]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  696.150112][T13138]  ? lock_acquire+0x31e/0x380
[  696.154816][T13138]  ? __mutex_lock+0x18b2/0x1bd0
[  696.159666][T13138]  ? _raw_spin_lock_irqsave+0x52/0x60
[  696.165053][T13138]  _raw_spin_lock_irqsave+0x42/0x60
[  696.170285][T13138]  ? __mutex_lock+0xcf8/0x1bd0
[  696.175048][T13138]  __mutex_lock+0xcf8/0x1bd0
[  696.179641][T13138]  ? ep_open+0x4c/0x2c0
[  696.183812][T13138]  ? __pfx___mutex_lock+0x10/0x10
[  696.188860][T13138]  ? __pfx_apparmor_file_open+0x10/0x10
[  696.194422][T13138]  ? ep_open+0x4c/0x2c0
[  696.198587][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.204223][T13138]  ep_open+0x4c/0x2c0
[  696.208240][T13138]  do_dentry_open+0x6ab/0x14d0
[  696.213004][T13138]  ? __pfx_ep_open+0x10/0x10
[  696.217628][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.223268][T13138]  vfs_open+0x82/0x3f0
[  696.227342][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.232989][T13138]  path_openat+0x19fa/0x2440
[  696.237590][T13138]  ? __pfx_path_openat+0x10/0x10
[  696.242539][T13138]  do_file_open+0x20e/0x430
[  696.247052][T13138]  ? __pfx_do_file_open+0x10/0x10
[  696.252102][T13138]  ? _raw_spin_unlock+0x28/0x50
[  696.256969][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.262614][T13138]  ? alloc_fd+0x471/0x7a0
[  696.266955][T13138]  do_sys_openat2+0x10f/0x1e0
[  696.271652][T13138]  ? __pfx_do_sys_openat2+0x10/0x10
[  696.276866][T13138]  __x64_sys_openat+0x12d/0x210
[  696.281726][T13138]  ? __pfx___x64_sys_openat+0x10/0x10
[  696.287107][T13138]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  696.293101][T13138]  ? srso_alias_return_thunk+0x5/0xfbef5
[  696.298757][T13138]  do_syscall_64+0x123/0x790
[  696.303346][T13138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.309238][T13138] RIP: 0033:0x7f7d76f9e1d9
[  696.313649][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.333427][T13138] RSP: 002b:00007f7d77e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  696.341840][T13138] RAX: ffffffffffffffda RBX: 00007f7d77226270 RCX: 00007f7d76f9e1d9
[  696.349806][T13138] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  696.357771][T13138] RBP: 00007f7d77035888 R08: 0000000000000000 R09: 0000000000000000
[  696.365754][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.373722][T13138] R13: 00007f7d77226308 R14: 00007f7d77226270 R15: 00007fffe81c0df8
[  696.381697][T13138]  </TASK>
[  696.384944][T13138] Kernel Offset: disabled
[  696.389258][T13138] Rebooting in 86400 seconds..