last executing test programs:

4m20.829957579s ago: executing program 3 (id=114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r3, 0x9}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001340)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000002580)={@void, @void, @eth={@local, @random="4298a27c15af", @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0xd, 0x6, "944f7a", 0x14, 0x6, 0xff, @local, @private1, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x4, 0x0, 0x2}}}}}}}}, 0x4e)

4m20.466725131s ago: executing program 3 (id=117):
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040))
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r0, 0x180, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffcc, 0x4c}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xdc}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x24048804)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
setresgid(0x0, 0xee01, 0x0)
r3 = semget$private(0x0, 0x4, 0x29b)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r1, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x203}, {}], 0x2)
semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000003fc0)=""/62)
semctl$IPC_RMID(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7a92c06568ba207ae90800", @ANYRES16=r0, @ANYBLOB="08008000000000000000660000000c0099008e0000005200000008002600111700000800b70099000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x254, r0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="66be4358d23d"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xee15}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x200, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xfde8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xffffff01}, @NL80211_BAND_LC={0x8, 0x5, 0x10000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1478b0b01d77"}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x100}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffff00}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x94}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffb}, @NL80211_BAND_LC={0x8, 0x5, 0x7d8dcdf7}, @NL80211_BAND_LC={0x8, 0x5, 0xff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}]}, @NL80211_ATTR_MAC={0xa}]}, 0x254}, 0x1, 0x0, 0x0, 0x4040}, 0x4)

4m20.239931587s ago: executing program 3 (id=120):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000})
fallocate(r7, 0x0, 0x1, 0x280000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
read$FUSE(r0, 0x0, 0x0)
r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "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"}, 0x21b)
pwrite64(r8, &(0x7f0000000040)="0a1e", 0x2, 0x2)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
copy_file_range(r8, 0x0, r9, 0x0, 0x8001, 0x0)

4m19.896095998s ago: executing program 3 (id=121):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x4, 0xa100489, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x82100, 0x0)

4m18.977209635s ago: executing program 3 (id=122):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0xffff, 0x9, 0x2, 0x2}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0xffffffffffffffda, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x8}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x360, 0x0, 0xfffffffffffffff9, [{{0x3, 0x3, 0x7, 0x105, 0x100, 0x4, {0x2, 0x100000000, 0x6, 0x8000, 0x6, 0x5, 0xffffffe7, 0x400, 0x6, 0xa000, 0x5, r3, r4, 0xfff, 0x26}}, {0x1, 0xb9a8, 0x7, 0xa6, 'user_id'}}, {{0x2, 0x9, 0x9, 0x3, 0xb5, 0x40, {0x1, 0x6, 0x40, 0x9, 0x9, 0x8, 0x6, 0x6, 0x9, 0x2000, 0x9, r3, r4, 0x7, 0x1c000}}, {0x4, 0x4, 0x34, 0x0, ',@--\xe0\xf6,\xdf(s\xf2\xf7\x9b\x8c\x8a5\xb2\x1d3f\xe5]\xcf\xc1\xe3G\xbc2\xad\xd4yJ\xf6.\xd6=\xe3v\x00'/52}}, {{0x8000000000000000, 0x1, 0x100, 0x200006, 0x6, 0x2, {0x0, 0x3, 0x4454, 0x68e, 0xb0, 0x7, 0x6, 0x5, 0x8, 0x1000, 0x7ff, r3, r4, 0x7fff, 0x9}}, {0x1, 0x6, 0x8, 0x9b, 'group_id'}}, {{0x3, 0x3, 0x7, 0x8, 0x6, 0x1, {0x1, 0x94, 0x1, 0x8000000000000001, 0x3, 0x8, 0x2, 0x21, 0xfff, 0x2000, 0x3, r3, r4, 0x4, 0x8001}}, {0x6, 0x0, 0x1, 0x6, '^'}}, {{0x2, 0x0, 0x5, 0x90, 0xd9d3, 0x80000001, {0x0, 0x200000000002000, 0x1, 0x2, 0xd, 0x6, 0x7, 0xc5b, 0xfff, 0xf000, 0xfa5, r3, r4, 0x2, 0x3}}, {0x3, 0x2, 0x7, 0x3, '$[*.5|\''}}]}, 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0xc0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r7, 0x6f000)
write$binfmt_register(r6, &(0x7f0000000340)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x800, 0x3a, 'fd', 0x3a, '[', 0x3a, './file1', 0x3a, [0x50]}, 0x2b)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r11, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x7}, {}, @result={0xff, 0x6b79}}, {0x0, 0x0, 0x0, 0x0, @time, {0x4, 0x4}, {}, @result={0xc92c}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffa, {}, {}, @control}, {0x8, 0x9, 0x0, 0x0, @time, {0x80}, {0x0, 0x3}, @raw8={"c36b471862abd6a2d90b94d0"}}], 0x70)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r13, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc010)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
keyctl$update(0x2, r8, 0x0, 0x0)

4m18.038448222s ago: executing program 3 (id=128):
r0 = socket$kcm(0x10, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000049537efabc0000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc020000000000a0fe365b7d3247f80100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a0000000000000000000000000000000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000001100000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0xfffffffffffffffd)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
pipe2(&(0x7f0000000140)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000240)={0x3, 0x1fa})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="6d920f000000fedbdf2501000000f9ff0300", @ANYRES32=0x0, @ANYBLOB="556f23684097081015"], 0x1c}, 0x1, 0x0, 0x0, 0x4c891}, 0x880)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x4080, &(0x7f00000001c0)='grpquota')
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r8)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r10=>0x0})
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10)
fcntl$setown(r0, 0x8, r10)

4m2.144639119s ago: executing program 32 (id=128):
r0 = socket$kcm(0x10, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000049537efabc0000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc020000000000a0fe365b7d3247f80100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a0000000000000000000000000000000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000001100000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0xfffffffffffffffd)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
pipe2(&(0x7f0000000140)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000240)={0x3, 0x1fa})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="6d920f000000fedbdf2501000000f9ff0300", @ANYRES32=0x0, @ANYBLOB="556f23684097081015"], 0x1c}, 0x1, 0x0, 0x0, 0x4c891}, 0x880)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x4080, &(0x7f00000001c0)='grpquota')
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r8)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r10=>0x0})
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10)
fcntl$setown(r0, 0x8, r10)

1m31.81182627s ago: executing program 0 (id=995):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r1, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="136ae60494", 0x5}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000100000002000000991135b492a3789718ebf0dc380e987fc4401198ce01a640f220279368a5772bf36c76604cf097bd83cdf65681694de57938c0e51cf2efef666a58743e1663d4bd80bf0ae8aeea312da704111cf767e8559d604cffb336aa58c95ce59cf9da411db5e21440914dccaa2e49c022089f7ab9302125946b6475bdff61eac28636369d93dd216e5cc4a13d8b882fc711a9eddb5cbfac7df4d7a527ac9091b476"], 0x10}}], 0x1, 0x4000000)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00060008ac0f000110000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d50066802000328008004100b20000000800ca00ac1e000108003d00fcffffff04008a800800a18004000b80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x9, 0x9, 0x2}, {0xd97b, 0x18, 0xe3, 0x8}, {0x6, 0x7, 0xad, 0x7f13}, {0x2, 0x51, 0xb, 0x7}]})

1m31.753788475s ago: executing program 0 (id=997):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
r1 = getpid()
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201ff00151aee40f00a057a0000010203010902120001000000000904000000ff054900"], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="20141100000001"], 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\b\x00)'], 0x28}], 0x1}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

1m29.996003427s ago: executing program 0 (id=1008):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
pread64(r0, &(0x7f0000000180)=""/162, 0xa2, 0x7)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4f2b, 0x3, 0x5, 0x4, 0x5, 0xcc7, 0x7ff, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x100]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x24, 0x3)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000240))

1m27.370573824s ago: executing program 0 (id=1028):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x62, &(0x7f00000003c0)={&(0x7f0000000600)={0x48, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, 0x48}}, 0x800)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r3)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@mmap={0x6, 0x2, 0x4, 0x20, 0x800, {0x77359400}, {0x5, 0x0, 0xb4, 0x4, 0x98, 0x4, "4cf08da4"}, 0x2, 0x1, {}, 0xd, 0x0, r2})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r8)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty}}}, &(0x7f0000000000)=0x9c)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r6, @ANYBLOB="a6df309169e206df6fd0164e8ae5cf5b37fc9f594ae2ccbd79c84af4a0abff7a7a0c4c0a07f9df89ab5c484a2eabef27ac2be640d2f127eae9b7ebe46430ef72c4ea096fff67f120f83ba478143d42d11390ebb457529c5707eed7886ca317c420dc1b99724e1ee982ed61f724695fb10e05ce591fe6060ff01da4b6d544507a22d16c6f6c4f4a037ee6ca0e9abc0a575edf6dbd0490dbf53f5bad6a1bf515c7c96e2a2d141f6b137a34ac5bc651b614a25de6e56097b302552f134065bc13079151fd2c5e9cb002bce4b9e0e89611668f466cd5805f96bd454da0c6", @ANYRESHEX=r1], 0x30, 0xfffffffffffffffa)

1m26.934085786s ago: executing program 0 (id=1032):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe800000"], 0xffe)
r2 = socket(0xa, 0x3, 0x3a)
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406000005240004000d240f010900000000000000000424020a090581032000037fff0905820200000001000905030208e1"], 0x0)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000340)={0x1, 0x1, 0x4, 0x0, 0x8545}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe800000"], 0xffe) (async)
socket(0xa, 0x3, 0x3a) (async)
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406000005240004000d240f010900000000000000000424020a090581032000037fff0905820200000001000905030208e1"], 0x0) (async)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) (async)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000340)={0x1, 0x1, 0x4, 0x0, 0x8545}, 0xc) (async)

1m26.467774601s ago: executing program 0 (id=1036):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="69f78ceaa1659c2b"], 0x0, 0x0, 0x0, 0x0})

1m26.18873706s ago: executing program 33 (id=1036):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="69f78ceaa1659c2b"], 0x0, 0x0, 0x0, 0x0})

11.027266669s ago: executing program 1 (id=1504):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

9.338374632s ago: executing program 1 (id=1525):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140))
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x801, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)

9.092126677s ago: executing program 1 (id=1526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001600010a00000000000000000a0002"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYRES32=r4])
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044840}, 0x80)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r11=>0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000001c0)={r10, 0x0, r11, 0x5, 0x1, 0xffff, 0x69, 0x8, 0x4, 0xffffffff, 0x4, 0xa2})
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r8, 0x4010744d, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16, @ANYRES64=r3, @ANYBLOB="5ebde7647d978c6f92c2c6ed1f0708e42da0a896f47480cc81df9b68253adbd53f56db536a945fc8ca835275995588963b547c", @ANYRESDEC=r2, @ANYRESOCT=r8, @ANYRESOCT=r0, @ANYRES16=0x0], 0x0)

5.820006044s ago: executing program 1 (id=1538):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, 'f]'}, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c00)={0x20, 0x3ecfa3d79e1db1f9, 0x9f, {0x9f, 0x23, "e6cc8b23ac631d7affed2aab2ca4d58fccf9c78bbb7177ec3ac60e1e44fd37834cd57f3af8e076ace480a2099d5f2a625c3311e73224dcf29ad25b2b1dea8b4b17e205b4fd9de70cabd2abd6bf07b83122ddfe397f66d2079950daa9967072cc40170244c09c7622bf34a0ce939a92c8aada26737c961cf0529ce5d18b7b4f9de3e6c8b0de7779988e38785ac8fa1f692e177d98afc89163c1d77a8607"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000cc0)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x2, 0x9, 0x3, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8e, "c9a63d45543a3816eec3816d0df16f53"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x6, 0x4, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "11b4c0dc9a03e54f4307b4cd2c666c8b"}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x80, 0x4, "ac17b3cb", "aa375a48"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xfffffffffffffec7, 0x2a, 0x8, 0x2, 0x7, 0x5, 0x4a, 0x9}}}, &(0x7f00000012c0)={0x84, &(0x7f0000000e00)={0x0, 0x17, 0xf0, "5943b38c0d3d326d53cc7852d6ecab66244e3672e0b2c31dc5d99898ba2af3ea4d647d9dac58a6304f7f0f1b56ee62c2f14cefd24875cee9eb3d719a0a977e31df58c590d6bf481c5789380e2878ef753b6daf34f8ca83bba92d890142f81b6db08e1dc2fad604df754352a29d57164beec4f612cef493540ed810de2207051bac597448326d954d49c2ebc5c823d5b3bccb50e7042ffd1120b3044e3760da61ce3a3e14f284ad0e51f784f294f6a65aa8bdef158ccbe7738dabaf5259add11ff15ef6f350ba0bf8c7ff6be2025f5a90ac75f377e15dca8d61a43567349d74b21556a7ab6266c1e94764fe4b0f8ac282"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0x15}, &(0x7f0000001040)={0x40, 0x9, 0x1, 0xde}, &(0x7f0000001080)={0x40, 0xb, 0x2, "e584"}, &(0x7f00000010c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001100)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001140)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001180)={0x40, 0x19, 0x2, "6ec4"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x6}})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x3})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x23, 0x4, {0x4, 0x7, 'oC'}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000780)={0x20, 0xd, 0xfd, "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"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x2, 0x6, 0x7, 0x3, 0xfff7, 0x9, 0x6, 0x5d1, 0x400, 0xff, 0x8, 0x9}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2}, &(0x7f0000000a40)={0x20, 0x89, 0x2}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0x10, 0x2, "a1d3"}, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x0, 0x2, "b01a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x23, 0xbc, {0xbc, 0x7, "63b5346ed3b8e27df8ffe8faa814ece204e66279b2cdc28b233a903381b64eb8f15ae2c0e91c91c82275e9ebdc53e06a4d219175f93ba675b173779623eaf6b8bd2299df796c79d24e3d823b8d458d5f9a681e9a086264a3ff47757f17e5b1d0c10b555f8a7cd74d2c6b3904b1e2f172525cf77d14ed36121566f834564bf4d85fb2480f8a3fd10408c9a2e74ff37f02bd0ccec119d175925f1f4632d900fffa7490257c45a1e7ff1c24053061e12388c90ea989605af8752638"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x15, 0xd, "1e058be4af386a2129031adceb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "41ca"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "acf3"}, &(0x7f0000000440)={0x20, 0x83, 0x2, "dc70"}, &(0x7f0000000500)={0x20, 0x84, 0x2, 'm.'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "de410f"}})

3.074064245s ago: executing program 1 (id=1559):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x8, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xb000, 0x9}, @window={0x3, 0x199, 0x1}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f00000000c0)='\b', 0x1, 0x400b, 0x0, 0x0)

2.416002867s ago: executing program 5 (id=1567):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000200))
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
fchdir(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8001, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r7])
ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000080))

2.101922165s ago: executing program 1 (id=1568):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, 'f]'}, 0x0, 0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x3})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x23, 0x4, {0x4, 0x7, 'oC'}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000780)={0x20, 0xd, 0xfd, "ee49c82b37c6f198c42a792cac5d756c2068f5d6cd73756455a7dd49bab1e5fdc4c2498407ba80fb8aa2809fff8e7eca02eabfd88e749a7fa0f3ae253a9bfb604846b5e6089486eb93925d62da0d0f96be4a91f1be21656829758e0db6c2782fe4703b5a4d098534e99ab0590725fceb00f399173ddc5a75add3b25bbf2eddaf863c1a3b33949cfde1ff373bd3a8eacaae2c773d3fe330823311edbd94b6765431732b00c6861bb500e22c348e3e834b78b36199cf1b06efcbd442838dffcf684df504b95c384156f9fdb8dbec3eb79d0b9db4b7afd2995ca07b1bc1d5555e1722a8e806c7b514a11c2bfd5744cda5dba4f3f5ec89a21f9e6a0f69a1dd"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x2, 0x6, 0x7, 0x3, 0xfff7, 0x9, 0x6, 0x5d1, 0x400, 0xff, 0x8, 0x9}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2}, &(0x7f0000000a40)={0x20, 0x89, 0x2}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0x10, 0x2, "a1d3"}, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x0, 0x2, "b01a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x23, 0xbc, {0xbc, 0x7, "63b5346ed3b8e27df8ffe8faa814ece204e66279b2cdc28b233a903381b64eb8f15ae2c0e91c91c82275e9ebdc53e06a4d219175f93ba675b173779623eaf6b8bd2299df796c79d24e3d823b8d458d5f9a681e9a086264a3ff47757f17e5b1d0c10b555f8a7cd74d2c6b3904b1e2f172525cf77d14ed36121566f834564bf4d85fb2480f8a3fd10408c9a2e74ff37f02bd0ccec119d175925f1f4632d900fffa7490257c45a1e7ff1c24053061e12388c90ea989605af8752638"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x15, 0xd, "1e058be4af386a2129031adceb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "41ca"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "acf3"}, &(0x7f0000000440)={0x20, 0x83, 0x2, "dc70"}, &(0x7f0000000500)={0x20, 0x84, 0x2, 'm.'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "de410f"}})

1.984057828s ago: executing program 4 (id=1570):
r0 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001280)={&(0x7f0000000000)=[{0x0, 0x4c11, 0x1, &(0x7f0000001300)="e2"}], 0x1})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000003c0)='qnx4\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40}}], 0x1, 0x11)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xa)

1.92676251s ago: executing program 4 (id=1571):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

1.43180624s ago: executing program 5 (id=1573):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="300000001300010002000000f6dbdf2507000000130000000800ff00", @ANYRES32, @ANYBLOB='\b\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x30}], 0x1}, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x20, 0x2}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000280)='./file0\x00', 0x104)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
r3 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000440)=<r4=>0x0)
capset(&(0x7f0000000480)={0x20071026, r4}, &(0x7f00000004c0)={0x8, 0x4, 0x4, 0x3b, 0x60000000, 0x100})
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x2, 0xb, 0xf18, 0x7, 0x0, 0x67, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x2c}}, 0x80)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10400, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

1.367816268s ago: executing program 4 (id=1574):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060f57b13fbbc3fcdfe4000000010903b914a5d4fad2b966d51942f4518473fd01010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.108713324s ago: executing program 2 (id=1576):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3400, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

1.035954911s ago: executing program 2 (id=1577):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x1, 0x0, "18e889d54b38429faa8ff62438efed752e685d72d09382b392b049e339589830"})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x6, 0x10000, @empty, 0x4}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0)

984.851626ms ago: executing program 2 (id=1578):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x68, 0x40, 0x100, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x13a}, @nested={0x4c, 0x2, 0x0, 0x1, [@nested={0x47, 0x14, 0x0, 0x1, [@generic="1016094b3d01b80a56d9b4c089762922fc3766e802f5728f126e5b3e468935e869897c35de0f2c477b38d6fd3707476d19e8d865facd0a6d19fce88bfb591e3f5dbe06"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
ioctl$TIOCGSID(r0, 0x5429, 0x0)

875.966087ms ago: executing program 2 (id=1579):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
io_setup(0x5, &(0x7f0000000000))

840.996379ms ago: executing program 5 (id=1580):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
memfd_create(0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="3a000000000000e2000100c0"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

832.172759ms ago: executing program 2 (id=1581):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socket$nl_generic(0x10, 0x3, 0x10)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x4)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc0102030109022d00010b06800809045f40030a00004009050d02000202040c0905080c400001c60d090582"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
write$cgroup_pid(r7, &(0x7f0000000300)=r8, 0x12)
write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7)

752.060027ms ago: executing program 4 (id=1582):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

614.703686ms ago: executing program 5 (id=1583):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x580942, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'ni_labpc\x00', [0x13, 0x1, 0x6d, 0x1, 0x4, 0xe4, 0x7ff, 0x0, 0x4, 0x46, 0x6, 0xfffffffd, 0xfffffe00, 0x2, 0xb1, 0xe052, 0x7dd, 0x6, 0xfff, 0xfffffff6, 0x10, 0x3, 0x1, 0xfffffff8, 0xf15, 0x2, 0x3, 0xffff54c9, 0xa2, 0x8000, 0x7, 0x100]}) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_USERDATA={0x15, 0xd, 0x1, 0x0, "9ff1ec0faa2362d5d63da34526afeb7ca0"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xd4, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1dc}}, 0x0)
r3 = semget$private(0x0, 0xa, 0x3c8)
semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000080)) (async)
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback}, 0x1c) (async)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x2c) (async)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000300)=""/78) (async, rerun: 32)
semctl$IPC_RMID(r3, 0x0, 0x0) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3}) (async)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r5, 0x0, &(0x7f0000000100)='W', 0x1, 0x7a}) (async)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r5, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) (async)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r5, 0x0, &(0x7f0000000200)="0f", 0x1, 0x7}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x6, r5, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0x7fff}) (async, rerun: 32)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x9, 0x7, 0xa, 0x100, 0x7, 0x2, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x83, 0x40000003, 0x89, 0xa, 0x20f27, 0xfffe, 0x7, 0x8, 0x5, 0x8, 0x4, 0x7f, 0xfffffffc]}) (rerun: 32)

539.444244ms ago: executing program 5 (id=1584):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x6, @pix_mp={0x2, 0x100, 0x0, 0x8, 0x1, [{0x321, 0x100}, {0x3, 0x5}, {0x9}, {0xfffffffe, 0x2}, {0x4000053, 0xf86}, {0x5, 0xd}, {0x3fc, 0x80}, {0x1, 0xe69}], 0xe, 0x2, 0x6, 0x1, 0x4}})

424.229823ms ago: executing program 5 (id=1585):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x2000000)

162.194222ms ago: executing program 4 (id=1586):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880)
clock_settime(0xfffffffb, &(0x7f0000000140)={r2, r3+60000000})
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000001f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote, 0x2}}}, 0x90)

71.258037ms ago: executing program 2 (id=1587):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x600)

0s ago: executing program 4 (id=1588):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="300000001300010002000000f6dbdf2507000000130000000800ff00", @ANYRES32, @ANYBLOB='\b\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x30}], 0x1}, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x20, 0x2}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000280)='./file0\x00', 0x104)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
r3 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000440)=<r4=>0x0)
capset(&(0x7f0000000480)={0x20071026, r4}, &(0x7f00000004c0)={0x8, 0x4, 0x4, 0x3b, 0x60000000, 0x100})
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x2, 0xb, 0xf18, 0x7, 0x0, 0x67, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x2c}}, 0x80)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10400, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

kernel console output (not intermixed with test programs):

 usb 2-1: USB disconnect, device number 105
[  313.530057][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.548170][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.616194][ T9131] veth0_vlan: entered promiscuous mode
[  313.645668][ T9131] veth1_vlan: entered promiscuous mode
[  313.720485][ T9131] veth0_macvtap: entered promiscuous mode
[  313.732194][ T9131] veth1_macvtap: entered promiscuous mode
[  313.764054][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.778310][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.816568][ T7348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.826532][ T7348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.843893][ T7348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.866614][ T7348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.046384][ T6998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.075342][ T6998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.142419][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.172724][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.634925][ T5917] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  314.814485][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  314.825643][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.837742][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.849462][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  314.860500][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.878319][ T5917] usb 2-1: config 0 descriptor??
[  314.887798][ T5917] hub 2-1:0.0: USB hub found
[  314.962636][ T5943] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  315.087568][ T5917] hub 2-1:0.0: 1 port detected
[  315.112672][ T5943] usb 6-1: Using ep0 maxpacket: 32
[  315.119633][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.131046][ T5943] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  315.140833][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.153278][ T5943] usb 6-1: config 0 descriptor??
[  315.165177][ T5943] dvb-usb: found a 'TeVii S662' in warm state.
[  315.172014][ T5943] dw2102: su3000_power_ctrl: 1, initialized 0
[  315.179035][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  315.191001][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  315.205055][ T5943] dvbdev: DVB: registering new adapter (TeVii S662)
[  315.211951][ T5943] usb 6-1: media controller created
[  315.218281][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.228141][ T5943] dw2102: i2c transfer failed.
[  315.236311][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.243254][ T5943] dw2102: i2c transfer failed.
[  315.249072][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.255446][ T5943] dw2102: i2c transfer failed.
[  315.260621][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.267781][ T5943] dw2102: i2c transfer failed.
[  315.276018][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.281995][ T5943] dw2102: i2c transfer failed.
[  315.289540][ T5943] dvb-usb: bulk message failed: -22 (6/0)
[  315.298063][ T5943] dw2102: i2c transfer failed.
[  315.303363][ T5943] dvb-usb: MAC address: 02:02:02:02:02:02
[  315.324639][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.353423][ T5836] Bluetooth: hci1: command tx timeout
[  315.363133][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'.
[  315.376117][ T5943] dvb-usb: bulk message failed: -22 (3/0)
[  315.382281][ T5943] dw2102: command 0x0e transfer failed.
[  315.395588][ T5943] dvb-usb: bulk message failed: -22 (3/0)
[  315.402138][ T5943] dw2102: command 0x0e transfer failed.
[  315.598690][ T9355] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.1086'.
[  315.713628][ T5943] dvb-usb: bulk message failed: -22 (3/0)
[  315.725148][ T5943] dw2102: command 0x0e transfer failed.
[  315.734640][ T5943] dvb-usb: bulk message failed: -22 (3/0)
[  315.740422][ T5943] dw2102: command 0x0e transfer failed.
[  315.746628][ T5943] dvb-usb: bulk message failed: -22 (1/0)
[  315.752788][ T5943] dw2102: command 0x51 transfer failed.
[  315.758697][ T5943] dvb-usb: bulk message failed: -22 (5/0)
[  315.764851][ T5943] dw2102: i2c probe for address 0x68 failed.
[  315.771200][ T5943] dvb-usb: bulk message failed: -22 (5/0)
[  315.779081][ T5943] dw2102: i2c probe for address 0x69 failed.
[  315.785516][ T5943] dvb-usb: bulk message failed: -22 (5/0)
[  315.792111][ T5943] dw2102: i2c probe for address 0x6a failed.
[  315.801229][ T5943] dw2102: probing for demodulator failed. Is the external power switched on?
[  315.801839][ T9340] dvb-usb: bulk message failed: -22 (4/0)
[  315.810823][ T5943] dvb-usb: no frontend was attached by 'TeVii S662'
[  315.824015][ T9340] dw2102: i2c transfer failed.
[  315.904022][ T5943] rc_core: IR keymap rc-tt-1500 not found
[  315.909998][ T5943] Registered IR keymap rc-empty
[  315.918025][ T5943] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  315.932271][ T5943] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input44
[  315.949345][ T5943] dvb-usb: schedule remote query interval to 250 msecs.
[  315.956502][ T5943] dw2102: su3000_power_ctrl: 0, initialized 1
[  315.962861][ T5943] dvb-usb: TeVii S662 successfully initialized and connected.
[  315.974208][ T5943] usb 6-1: USB disconnect, device number 2
[  316.041835][ T5943] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  316.156002][ T5917] hub 2-1:0.0: hub_hub_status failed (err = -32)
[  316.163982][ T5917] hub 2-1:0.0: config failed, can't get hub status (err -32)
[  316.178411][ T5917] usbhid 2-1:0.0: can't add hid device: -32
[  316.185787][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  316.223836][ T5917] usb 2-1: USB disconnect, device number 106
[  316.662660][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  316.814699][ T5917] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  316.839852][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.867348][ T5917] usb 6-1: config 0 descriptor??
[  316.887472][ T5917] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  317.087257][ T5917] gspca_sn9c2028: read1 error 0
[  317.142678][  T981] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  317.302742][  T981] usb 2-1: Using ep0 maxpacket: 8
[  317.311974][  T981] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  317.322031][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.330246][  T981] usb 2-1: Product: syz
[  317.335164][  T981] usb 2-1: Manufacturer: syz
[  317.339960][  T981] usb 2-1: SerialNumber: syz
[  317.348663][  T981] usb 2-1: config 0 descriptor??
[  317.359575][  T981] gspca_main: se401-2.14.0 probing 047d:5003
[  317.585379][ T9385] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1097'.
[  317.596947][ T9385] ksmbd: Unknown IPC event: 3, ignore.
[  317.695790][ T5917] usb 6-1: USB disconnect, device number 3
[  317.759591][  T981] gspca_se401: Frame size: 0x2 1/4th janggu
[  317.779172][  T981] gspca_se401: Frame size: 0x127 bayer
[  317.790518][  T981] gspca_se401: Frame size: 256x0 bayer
[  317.797501][  T981] gspca_se401: Frame size: 2569x1025 bayer
[  317.804008][  T981] gspca_se401: Frame size: 0x4 bayer
[  317.809584][  T981] gspca_se401: Frame size: 0x0 1/16th janggu
[  317.817390][  T981] gspca_se401: Frame size: 0x0 1/16th janggu
[  317.968781][  T981] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45
[  318.018296][  T981] usb 2-1: USB disconnect, device number 107
[  318.398554][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'.
[  318.409555][ T9394] netlink: 'syz.5.1100': attribute type 10 has an invalid length.
[  318.418145][ T9394] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1100'.
[  318.755131][ T9404] FAULT_INJECTION: forcing a failure.
[  318.755131][ T9404] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  318.769837][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.2.1104 Not tainted syzkaller #0 PREEMPT(full) 
[  318.769881][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.769896][ T9404] Call Trace:
[  318.769905][ T9404]  <TASK>
[  318.769914][ T9404]  dump_stack_lvl+0x189/0x250
[  318.769949][ T9404]  ? __pfx____ratelimit+0x10/0x10
[  318.769981][ T9404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.770009][ T9404]  ? __pfx__printk+0x10/0x10
[  318.770035][ T9404]  ? __might_fault+0xb0/0x130
[  318.770079][ T9404]  should_fail_ex+0x414/0x560
[  318.770111][ T9404]  _copy_from_iter+0x1de/0x1790
[  318.770147][ T9404]  ? rcu_is_watching+0x15/0xb0
[  318.770184][ T9404]  ? __pfx__copy_from_iter+0x10/0x10
[  318.770373][ T9404]  ? __build_skb_around+0x22d/0x3f0
[  318.770419][ T9404]  ? netlink_sendmsg+0x642/0xb30
[  318.770446][ T9404]  ? skb_put+0x11b/0x210
[  318.770475][ T9404]  netlink_sendmsg+0x6b2/0xb30
[  318.770514][ T9404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.770570][ T9404]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.770606][ T9404]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.770627][ T9404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.770657][ T9404]  __sock_sendmsg+0x21c/0x270
[  318.770682][ T9404]  ____sys_sendmsg+0x505/0x870
[  318.770717][ T9404]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.770765][ T9404]  ? import_iovec+0x74/0xa0
[  318.770800][ T9404]  ___sys_sendmsg+0x21f/0x2a0
[  318.770831][ T9404]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.770900][ T9404]  ? __fget_files+0x2a/0x420
[  318.770925][ T9404]  ? __fget_files+0x3a0/0x420
[  318.770963][ T9404]  __x64_sys_sendmsg+0x19b/0x260
[  318.770995][ T9404]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.771035][ T9404]  ? __pfx_ksys_write+0x10/0x10
[  318.771059][ T9404]  ? do_syscall_64+0xbe/0xfa0
[  318.771083][ T9404]  do_syscall_64+0xfa/0xfa0
[  318.771103][ T9404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.771125][ T9404]  ? clear_bhb_loop+0x60/0xb0
[  318.771150][ T9404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.771171][ T9404] RIP: 0033:0x7f4b2a78f749
[  318.771192][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.771210][ T9404] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.771233][ T9404] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  318.771249][ T9404] RDX: 0000000020000000 RSI: 0000200000001e40 RDI: 0000000000000004
[  318.771263][ T9404] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  318.771277][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.771290][ T9404] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  318.771325][ T9404]  </TASK>
[  319.132670][ T5915] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  319.295385][ T5915] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[  319.304108][ T5915] usb 2-1: config 0 has no interface number 0
[  319.310238][ T5915] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  319.319630][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.330454][ T5915] usb 2-1: config 0 descriptor??
[  319.462625][ T5898] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  319.539528][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.548506][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.558205][ T5836] Bluetooth: hci2: adv larger than maximum supported
[  319.558232][ T5836] Bluetooth: hci2: Malformed LE Event: 0x0d
[  319.574828][ T5915] usb 2-1: string descriptor 0 read error: -71
[  319.585466][ T5915] usb-storage 2-1:0.168: USB Mass Storage device detected
[  319.606710][ T5915] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  319.617158][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.627605][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.637940][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.648498][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.661542][ T5898] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  319.666958][ T5915] usb 2-1: USB disconnect, device number 108
[  319.678607][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=255
[  319.687265][ T5898] usb 6-1: SerialNumber: syz
[  319.914069][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.923014][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.934516][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.944889][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.964844][ T5898] usb 6-1: cannot find UAC_HEADER
[  319.987116][ T5898] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  320.004137][ T5898] usb 6-1: USB disconnect, device number 4
[  320.026430][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  320.198001][ T9433] sit0: entered promiscuous mode
[  320.203374][ T9432] netlink: 'syz.2.1112': attribute type 4 has an invalid length.
[  320.216632][ T9433] netlink: 'syz.1.1113': attribute type 1 has an invalid length.
[  320.224572][ T9433] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1113'.
[  320.239205][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.250356][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.265630][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1112'.
[  320.459752][ T9443] 9pnet_fd: Insufficient options for proto=fd
[  320.868134][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.877672][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.955824][ T5915] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  321.022636][  T981] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  321.112945][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  321.123516][ T5915] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  321.133545][ T5915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.146570][ T5915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.159490][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.172841][  T981] usb 2-1: Using ep0 maxpacket: 32
[  321.179137][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.191269][ T5915] usb 6-1: Product: syz
[  321.196748][ T5915] usb 6-1: Manufacturer: syz
[  321.201692][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.213944][ T5915] usb 6-1: SerialNumber: syz
[  321.220395][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.232681][  T981] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  321.247843][  T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.263103][  T981] usb 2-1: config 0 descriptor??
[  321.274383][  T981] hub 2-1:0.0: USB hub found
[  321.474288][  T981] hub 2-1:0.0: 1 port detected
[  321.653495][ T5915] usb 6-1: 0:2 : does not exist
[  321.717673][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'.
[  322.091988][  T981] hub 2-1:0.0: activate --> -90
[  322.312590][ T9455] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  322.352592][ T9455] netlink: 'syz.1.1121': attribute type 6 has an invalid length.
[  322.395489][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  322.433505][ T5917] usb 2-1: USB disconnect, device number 109
[  322.441574][  T981] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  322.574858][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  322.581737][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  322.665957][ T9471] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1126'.
[  322.677716][ T9471] TCP: TCP_TX_DELAY enabled
[  322.812858][   T30] audit: type=1800 audit(2000000383.832:69): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1127" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  322.919571][ T5915] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  323.004852][ T5915] usb 6-1: USB disconnect, device number 5
[  323.202363][ T9478] overlayfs: missing 'lowerdir'
[  323.763049][ T6659] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  323.919804][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1133'.
[  323.929768][ T6659] usb 6-1: Using ep0 maxpacket: 8
[  323.955938][ T6659] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  323.966837][ T6659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.968252][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.986768][ T6659] usb 6-1: Product: syz
[  323.992102][ T6659] usb 6-1: Manufacturer: syz
[  323.997030][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028db2800: rx timeout, send abort
[  324.006828][ T6659] usb 6-1: SerialNumber: syz
[  324.015836][ T6659] usb 6-1: config 0 descriptor??
[  324.028621][ T6659] gspca_main: se401-2.14.0 probing 047d:5003
[  324.035601][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.428415][ T6659] gspca_se401: Frame size: 0x2 1/4th janggu
[  324.452666][ T6659] gspca_se401: Frame size: 0x127 bayer
[  324.492739][ T6659] gspca_se401: Frame size: 256x0 bayer
[  324.507606][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028db2800: abort rx timeout. Force session deactivation
[  324.539820][ T6659] gspca_se401: Frame size: 2569x1025 bayer
[  324.552753][ T6659] gspca_se401: Frame size: 0x4 bayer
[  324.558295][ T6659] gspca_se401: Frame size: 0x0 1/16th janggu
[  324.639684][ T6659] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46
[  324.692631][ T5917] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  324.695426][ T6659] usb 6-1: USB disconnect, device number 6
[  324.862669][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  324.881004][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  324.899894][ T9528] vxcan1: entered allmulticast mode
[  324.910370][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.925775][ T5917] usb 2-1: Product: syz
[  324.955474][ T5917] usb 2-1: Manufacturer: syz
[  324.960898][ T9528] cramfs: block size(65536) > page size(4096) not supported by filesystem
[  324.976121][ T5917] usb 2-1: SerialNumber: syz
[  324.986012][ T5917] usb 2-1: config 0 descriptor??
[  325.004152][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  325.013217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  325.269635][ T5917] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[  325.300003][ T5917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  325.345903][ T5917] usb 2-1: USB disconnect, device number 110
[  325.730384][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.744448][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.941244][ T9555] ubi0: attaching mtd0
[  325.947260][ T9555] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[  326.202070][ T9561] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  326.223148][ T9558] vivid-000: disconnect
[  326.255304][ T9561] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  326.432614][ T9561] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  326.502571][ T9561] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  326.527339][ T9561] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  326.716326][ T9561] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  326.900918][ T9556] vivid-000: reconnect
[  326.933818][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.970527][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.011225][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'.
[  328.232671][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  328.554235][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  328.571924][ T9596] Bluetooth: MGMT ver 1.23
[  328.678322][ T9598] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  328.685526][ T9598] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  328.694565][ T9598] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  328.705827][ T9598] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  328.714679][ T9598] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  328.722056][ T9598] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  328.745522][ T9598] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  328.752241][ T9598] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  328.759417][ T9598] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  328.768108][ T9598] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  328.775459][ T9598] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  328.782380][ T9598] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  328.789553][ T9598] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  328.805253][ T9598] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4)
[  328.824635][ T9598] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  328.842238][ T9598] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  328.861402][ T9598] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  328.879741][ T9598] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  328.895098][ T9598] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  328.901754][ T9598] comedi comedi3: 8255: I/O port conflict (0x1000,4)
[  328.915066][ T9598] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  328.921598][ T9598] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  328.931720][ T9598] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  328.956867][ T9600] netlink: 'syz.1.1151': attribute type 10 has an invalid length.
[  328.972669][ T9600] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  329.089111][ T9602] netlink: 'syz.1.1152': attribute type 10 has an invalid length.
[  329.102056][ T9604] FAULT_INJECTION: forcing a failure.
[  329.102056][ T9604] name failslab, interval 1, probability 0, space 0, times 0
[  329.115995][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.2.1160 Not tainted syzkaller #0 PREEMPT(full) 
[  329.116026][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  329.116040][ T9604] Call Trace:
[  329.116048][ T9604]  <TASK>
[  329.116057][ T9604]  dump_stack_lvl+0x189/0x250
[  329.116090][ T9604]  ? __pfx____ratelimit+0x10/0x10
[  329.116122][ T9604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.116147][ T9604]  ? __pfx__printk+0x10/0x10
[  329.116179][ T9604]  ? __pfx___might_resched+0x10/0x10
[  329.116202][ T9604]  ? fs_reclaim_acquire+0x7d/0x100
[  329.116230][ T9604]  should_fail_ex+0x414/0x560
[  329.116260][ T9604]  should_failslab+0xa8/0x100
[  329.116285][ T9604]  __kmalloc_cache_noprof+0x84/0x700
[  329.116306][ T9604]  ? refill_pi_state_cache+0x93/0x180
[  329.116339][ T9604]  refill_pi_state_cache+0x93/0x180
[  329.116367][ T9604]  futex_requeue+0x1a3/0x19a0
[  329.116406][ T9604]  ? __lock_acquire+0xab9/0xd20
[  329.116441][ T9604]  ? get_pid_task+0x20/0x1f0
[  329.116470][ T9604]  ? __pfx_futex_requeue+0x10/0x10
[  329.116509][ T9604]  ? rcu_read_lock_any_held+0xb3/0x120
[  329.116544][ T9604]  ? vfs_write+0x956/0xb30
[  329.116574][ T9604]  ? ksys_write+0x1cb/0x250
[  329.116596][ T9604]  do_futex+0x362/0x420
[  329.116620][ T9604]  ? __pfx_vfs_write+0x10/0x10
[  329.116642][ T9604]  ? __pfx_do_futex+0x10/0x10
[  329.116675][ T9604]  __se_sys_futex+0x36f/0x400
[  329.116700][ T9604]  ? fput+0xa0/0xd0
[  329.116726][ T9604]  ? ksys_write+0x22a/0x250
[  329.116745][ T9604]  ? __pfx___se_sys_futex+0x10/0x10
[  329.116770][ T9604]  ? __pfx_ksys_write+0x10/0x10
[  329.116794][ T9604]  ? __x64_sys_futex+0x21/0xf0
[  329.116835][ T9604]  do_syscall_64+0xfa/0xfa0
[  329.116855][ T9604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.116876][ T9604]  ? clear_bhb_loop+0x60/0xb0
[  329.116901][ T9604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.116921][ T9604] RIP: 0033:0x7f4b2a78f749
[  329.116945][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.116963][ T9604] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  329.116985][ T9604] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  329.117000][ T9604] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  329.117013][ T9604] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  329.117026][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.117039][ T9604] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  329.117073][ T9604]  </TASK>
[  329.125440][ T9602] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  329.506814][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.534218][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.312693][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  330.527667][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.546039][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.638484][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  331.216429][ T9637] bond0: entered promiscuous mode
[  331.233989][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'.
[  331.546637][ T9648] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  331.585903][ T9557] Set syz1 is full, maxelem 65536 reached
[  331.590378][ T9648] Error validating options; rc = [-22]
[  331.692661][  T981] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  331.875166][  T981] usb 2-1: Using ep0 maxpacket: 16
[  331.901725][  T981] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  331.932730][  T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.962605][  T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  331.975096][  T981] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  331.993396][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.022136][  T981] usb 2-1: Product: syz
[  332.032451][  T981] usb 2-1: Manufacturer: syz
[  332.037532][  T981] usb 2-1: SerialNumber: syz
[  332.212000][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.223311][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.392687][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  332.452827][ T6659] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  332.490711][  T981] usb 2-1: 0:2 : does not exist
[  332.623748][ T6659] usb 6-1: Using ep0 maxpacket: 8
[  332.636562][ T6659] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  332.658798][ T6659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.677417][ T6659] usb 6-1: Product: syz
[  332.687539][ T6659] usb 6-1: Manufacturer: syz
[  332.697659][ T6659] usb 6-1: SerialNumber: syz
[  332.712942][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  332.720559][ T6659] usb 6-1: config 0 descriptor??
[  332.738519][ T6659] gspca_main: se401-2.14.0 probing 047d:5003
[  332.909140][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  333.135348][ T6659] gspca_se401: Frame size: 0x2 1/4th janggu
[  333.141314][ T6659] gspca_se401: Frame size: 0x127 bayer
[  333.151028][ T6659] gspca_se401: Frame size: 256x0 bayer
[  333.156727][ T6659] gspca_se401: Frame size: 2569x1025 bayer
[  333.167245][ T6659] gspca_se401: Frame size: 0x4 bayer
[  333.173951][ T6659] gspca_se401: Frame size: 0x0 1/16th janggu
[  333.179993][ T6659] gspca_se401: Frame size: 0x0 1/16th janggu
[  333.353797][ T6659] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47
[  333.387610][ T6659] usb 6-1: USB disconnect, device number 7
[  333.639613][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.680098][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.700810][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.715621][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.760884][  T981] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  333.780728][ T9701] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  333.821203][  T981] usb 2-1: USB disconnect, device number 111
[  333.871262][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  334.010843][ T9711] FAULT_INJECTION: forcing a failure.
[  334.010843][ T9711] name failslab, interval 1, probability 0, space 0, times 0
[  334.025403][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.5.1180 Not tainted syzkaller #0 PREEMPT(full) 
[  334.025433][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  334.025446][ T9711] Call Trace:
[  334.025456][ T9711]  <TASK>
[  334.025465][ T9711]  dump_stack_lvl+0x189/0x250
[  334.025498][ T9711]  ? __pfx____ratelimit+0x10/0x10
[  334.025530][ T9711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.025556][ T9711]  ? __pfx__printk+0x10/0x10
[  334.025584][ T9711]  ? __lock_acquire+0xab9/0xd20
[  334.025616][ T9711]  should_fail_ex+0x414/0x560
[  334.025647][ T9711]  should_failslab+0xa8/0x100
[  334.025762][ T9711]  kmem_cache_alloc_noprof+0x88/0x700
[  334.025809][ T9711]  ? sctp_get_port_local+0x6d0/0x1700
[  334.025834][ T9711]  sctp_get_port_local+0x6d0/0x1700
[  334.025874][ T9711]  ? __pfx_sctp_get_port_local+0x10/0x10
[  334.025898][ T9711]  ? sctp_bind_addr_match+0x28b/0x2b0
[  334.025940][ T9711]  sctp_do_bind+0x4ef/0x9d0
[  334.025973][ T9711]  sctp_connect_new_asoc+0x25c/0x690
[  334.026008][ T9711]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  334.026037][ T9711]  ? __local_bh_enable_ip+0x12d/0x1c0
[  334.026069][ T9711]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  334.026092][ T9711]  ? security_sctp_bind_connect+0x7e/0x2e0
[  334.026122][ T9711]  sctp_sendmsg+0x155c/0x2840
[  334.026167][ T9711]  ? __pfx_sctp_sendmsg+0x10/0x10
[  334.026204][ T9711]  ? aa_sk_perm+0x81c/0x950
[  334.026241][ T9711]  ? __pfx_aa_sk_perm+0x10/0x10
[  334.026274][ T9711]  ? sock_rps_record_flow+0x19/0x410
[  334.026307][ T9711]  ? inet_sendmsg+0x2f4/0x370
[  334.026353][ T9711]  __sock_sendmsg+0x19c/0x270
[  334.026380][ T9711]  ____sys_sendmsg+0x505/0x870
[  334.026418][ T9711]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.026458][ T9711]  ? import_iovec+0x74/0xa0
[  334.026516][ T9711]  ___sys_sendmsg+0x21f/0x2a0
[  334.026549][ T9711]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.026624][ T9711]  ? __fget_files+0x2a/0x420
[  334.026652][ T9711]  ? __fget_files+0x3a0/0x420
[  334.026691][ T9711]  __x64_sys_sendmsg+0x19b/0x260
[  334.026726][ T9711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.026767][ T9711]  ? __pfx_ksys_write+0x10/0x10
[  334.026793][ T9711]  ? do_syscall_64+0xbe/0xfa0
[  334.026818][ T9711]  do_syscall_64+0xfa/0xfa0
[  334.026841][ T9711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.026863][ T9711]  ? clear_bhb_loop+0x60/0xb0
[  334.026889][ T9711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.026912][ T9711] RIP: 0033:0x7f93e6f8f749
[  334.026942][ T9711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.026962][ T9711] RSP: 002b:00007f93e7d52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.026986][ T9711] RAX: ffffffffffffffda RBX: 00007f93e71e5fa0 RCX: 00007f93e6f8f749
[  334.027003][ T9711] RDX: 0000000000008001 RSI: 0000200000000540 RDI: 0000000000000003
[  334.027016][ T9711] RBP: 00007f93e7d52090 R08: 0000000000000000 R09: 0000000000000000
[  334.027031][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.027044][ T9711] R13: 00007f93e71e6038 R14: 00007f93e71e5fa0 R15: 00007ffdde0e3d68
[  334.027081][ T9711]  </TASK>
[  334.446438][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.470681][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.485273][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.503297][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.662695][ T9727] FAULT_INJECTION: forcing a failure.
[  334.662695][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.682874][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT(full) 
[  334.682904][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  334.682917][ T9727] Call Trace:
[  334.682925][ T9727]  <TASK>
[  334.682934][ T9727]  dump_stack_lvl+0x189/0x250
[  334.682965][ T9727]  ? __pfx____ratelimit+0x10/0x10
[  334.682996][ T9727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.683023][ T9727]  ? __pfx__printk+0x10/0x10
[  334.683047][ T9727]  ? __might_fault+0xb0/0x130
[  334.683090][ T9727]  should_fail_ex+0x414/0x560
[  334.683120][ T9727]  _copy_from_iter+0x1de/0x1790
[  334.683154][ T9727]  ? rcu_is_watching+0x15/0xb0
[  334.683190][ T9727]  ? __pfx__copy_from_iter+0x10/0x10
[  334.683218][ T9727]  ? __build_skb_around+0x22d/0x3f0
[  334.683249][ T9727]  ? netlink_sendmsg+0x642/0xb30
[  334.683276][ T9727]  ? skb_put+0x11b/0x210
[  334.683305][ T9727]  netlink_sendmsg+0x6b2/0xb30
[  334.683344][ T9727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.683376][ T9727]  ? aa_sock_msg_perm+0xf1/0x1d0
[  334.683410][ T9727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  334.683430][ T9727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.683460][ T9727]  __sock_sendmsg+0x21c/0x270
[  334.683484][ T9727]  ____sys_sendmsg+0x505/0x870
[  334.683517][ T9727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.683554][ T9727]  ? import_iovec+0x74/0xa0
[  334.683597][ T9727]  ___sys_sendmsg+0x21f/0x2a0
[  334.683627][ T9727]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.683691][ T9727]  ? __fget_files+0x2a/0x420
[  334.683716][ T9727]  ? __fget_files+0x3a0/0x420
[  334.683750][ T9727]  __x64_sys_sendmsg+0x19b/0x260
[  334.683781][ T9727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.683830][ T9727]  ? __pfx_ksys_write+0x10/0x10
[  334.683854][ T9727]  ? do_syscall_64+0xbe/0xfa0
[  334.683876][ T9727]  do_syscall_64+0xfa/0xfa0
[  334.683895][ T9727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.683915][ T9727]  ? clear_bhb_loop+0x60/0xb0
[  334.683941][ T9727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.683961][ T9727] RIP: 0033:0x7f311318f749
[  334.683980][ T9727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.683996][ T9727] RSP: 002b:00007f3114071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.684018][ T9727] RAX: ffffffffffffffda RBX: 00007f31133e5fa0 RCX: 00007f311318f749
[  334.684034][ T9727] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  334.684047][ T9727] RBP: 00007f3114071090 R08: 0000000000000000 R09: 0000000000000000
[  334.684060][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.684072][ T9727] R13: 00007f31133e6038 R14: 00007f31133e5fa0 R15: 00007ffd1cde2e18
[  334.684106][ T9727]  </TASK>
[  334.702583][ T9725] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  334.983694][ T9725] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  335.148316][ T9732] overlayfs: failed to clone upperpath
[  335.194503][   T30] audit: type=1326 audit(2000000396.222:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.5.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e6f8f749 code=0x0
[  335.734239][ T5836] Bluetooth: hci1: unexpected event for opcode 0x040d
[  336.005033][ T6659] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  336.124657][   T30] audit: type=1326 audit(2000000397.152:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.4.1187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8992d8f749 code=0x0
[  336.177588][ T6659] usb 6-1: Using ep0 maxpacket: 16
[  336.195361][ T6659] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  336.203716][ T6659] usb 6-1: config 0 has no interface number 0
[  336.210023][ T6659] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  336.232857][   T43] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  336.243744][ T6659] usb 6-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 20544, setting to 1024
[  336.264037][ T6659] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  336.280139][ T6659] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  336.293110][ T6659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.302194][ T6659] usb 6-1: Product: syz
[  336.306998][ T6659] usb 6-1: Manufacturer: syz
[  336.312177][ T6659] usb 6-1: SerialNumber: syz
[  336.336125][ T6659] usb 6-1: config 0 descriptor??
[  336.351121][ T9739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  336.362179][ T9739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  336.413885][   T43] usb 2-1: Using ep0 maxpacket: 8
[  336.424556][   T43] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  336.452696][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.471059][   T43] usb 2-1: Product: syz
[  336.481154][   T43] usb 2-1: Manufacturer: syz
[  336.501393][   T43] usb 2-1: SerialNumber: syz
[  336.539685][   T43] usb 2-1: config 0 descriptor??
[  336.582212][ T9739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  336.597612][   T43] gspca_main: se401-2.14.0 probing 047d:5003
[  336.609976][ T9739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  336.713610][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  336.960411][   T43] gspca_se401: Frame size: 0x2 1/4th janggu
[  336.977867][   T43] gspca_se401: Frame size: 0x127 bayer
[  336.998748][   T43] gspca_se401: Frame size: 256x0 bayer
[  337.014550][   T43] gspca_se401: Frame size: 2569x1025 bayer
[  337.041655][   T43] gspca_se401: Frame size: 0x4 bayer
[  337.048898][   T43] gspca_se401: Frame size: 0x0 1/16th janggu
[  337.175144][   T43] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48
[  337.218298][   T43] usb 2-1: USB disconnect, device number 112
[  337.646653][ T6659] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  337.664799][ T6659] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  337.682842][ T6659] asix 6-1:0.251: probe with driver asix failed with error -71
[  337.704123][ T6659] usb 6-1: USB disconnect, device number 8
[  338.022671][   T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  338.080411][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'.
[  338.175224][   T10] usb 2-1: Using ep0 maxpacket: 16
[  338.202386][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  338.232100][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.255064][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  338.286011][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  338.305214][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.332618][   T10] usb 2-1: Product: syz
[  338.344723][   T10] usb 2-1: Manufacturer: syz
[  338.362553][   T10] usb 2-1: SerialNumber: syz
[  338.806891][   T10] usb 2-1: 0:2 : does not exist
[  339.097393][ T9768] program syz.2.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  339.117240][ T9768] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  339.140587][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.163682][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.552649][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  339.722688][ T5943] usb 6-1: Using ep0 maxpacket: 8
[  339.751529][ T5943] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  339.768472][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.781971][ T5943] usb 6-1: Product: syz
[  339.786570][ T5943] usb 6-1: Manufacturer: syz
[  339.791356][ T5943] usb 6-1: SerialNumber: syz
[  339.800740][ T5943] usb 6-1: config 0 descriptor??
[  339.815158][ T5943] gspca_main: se401-2.14.0 probing 047d:5003
[  340.051339][   T10] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  340.094116][   T10] usb 2-1: USB disconnect, device number 113
[  340.157463][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  340.218224][ T5943] gspca_se401: Frame size: 0x2 1/4th janggu
[  340.225265][ T5943] gspca_se401: Frame size: 0x127 bayer
[  340.230864][ T5943] gspca_se401: Frame size: 256x0 bayer
[  340.239489][ T5943] gspca_se401: Frame size: 2569x1025 bayer
[  340.248922][ T5943] gspca_se401: Frame size: 0x4 bayer
[  340.439189][ T5943] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49
[  340.464493][ T5943] usb 6-1: USB disconnect, device number 9
[  341.038856][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1205'.
[  341.081579][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1205'.
[  341.120957][ T9789] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  341.162913][ T9789] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  341.194773][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.239901][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.414286][ T5836] Bluetooth: hci1: unexpected event for opcode 0x1003
[  341.462723][   T10] usb 2-1: new low-speed USB device number 114 using dummy_hcd
[  341.640597][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  341.654731][   T10] usb 2-1: config 0 has no interface number 0
[  341.660926][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  341.679682][   T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  341.690785][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  341.700229][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.713870][   T10] usb 2-1: config 0 descriptor??
[  341.719815][ T9793] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  341.733636][   T10] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  341.914145][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.922738][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  341.933090][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.945098][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.949800][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.025333][ T5917] usb 2-1: USB disconnect, device number 114
[  342.081037][   T10] usb 6-1: Using ep0 maxpacket: 8
[  342.093085][   T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  342.102908][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.111109][   T10] usb 6-1: Product: syz
[  342.115657][   T10] usb 6-1: Manufacturer: syz
[  342.120295][   T10] usb 6-1: SerialNumber: syz
[  342.133255][   T10] usb 6-1: config 0 descriptor??
[  342.141905][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  342.547944][   T10] gspca_se401: Frame size: 0x2 1/4th janggu
[  342.560903][   T10] gspca_se401: Frame size: 0x127 bayer
[  342.578360][   T10] gspca_se401: Frame size: 256x0 bayer
[  342.588501][   T10] gspca_se401: Frame size: 2569x1025 bayer
[  342.603576][   T10] gspca_se401: Frame size: 0x4 bayer
[  342.676888][ T9822] syzkaller1: entered promiscuous mode
[  342.692621][ T9822] syzkaller1: entered allmulticast mode
[  342.713521][ T9822] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  342.713521][ T9822]    program syz.1.1216 not setting count and/or reply_len properly
[  342.756394][   T10] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50
[  342.792464][   T10] usb 6-1: USB disconnect, device number 10
[  342.965897][ T9829] overlayfs: failed to clone upperpath
[  343.113887][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  343.255408][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.264477][   T10] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  343.264769][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.367239][ T5917] IPVS: starting estimator thread 0...
[  343.458313][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.468780][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  343.478369][   T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  343.488265][ T9843] IPVS: using max 37 ests per chain, 88800 per kthread
[  343.496382][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.508828][   T10] usb 2-1: config 0 descriptor??
[  343.519670][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  343.527342][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  343.538560][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  343.548938][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  343.556236][   T10] usb 2-1: media controller created
[  343.563827][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  343.579728][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  343.585742][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  343.595829][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51
[  343.613587][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  343.620788][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  343.675333][ T5915] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  343.722360][ T9831] dvb-usb: bulk message failed: -22 (2/0)
[  343.730329][ T9831] dibusb: i2c wr: len=216 is too big!
[  343.730329][ T9831] 
[  343.741739][ T5898] usb 2-1: USB disconnect, device number 115
[  343.771552][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  343.835203][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.862019][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  343.880744][ T5915] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  343.890838][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.912221][ T5915] usb 6-1: config 0 descriptor??
[  343.927165][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  343.934107][ T5915] dvb-usb: bulk message failed: -22 (3/0)
[  343.951258][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  343.968041][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  343.968109][ T5915] usb 6-1: media controller created
[  343.969951][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  344.006802][ T5915] dvb-usb: bulk message failed: -22 (6/0)
[  344.016160][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.016492][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  344.032948][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.044594][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52
[  344.060398][ T5915] dvb-usb: schedule remote query interval to 150 msecs.
[  344.068267][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  344.126039][ T6659] usb 6-1: USB disconnect, device number 11
[  344.158024][ T6659] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  344.532802][ T5915] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  344.585386][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.597698][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.597949][ T9864] overlayfs: failed to clone upperpath
[  344.689360][ T5915] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  344.702227][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.714290][ T5915] usb 2-1: config 0 descriptor??
[  344.728284][ T5915] cp210x 2-1:0.0: cp210x converter detected
[  344.962687][   T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  345.130851][ T5915] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  345.152166][   T10] usb 6-1: config 0 has an invalid interface number: 175 but max is 0
[  345.167074][ T5915] usb 2-1: cp210x converter now attached to ttyUSB0
[  345.174033][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.188310][   T10] usb 6-1: config 0 has no interface number 0
[  345.202253][   T10] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  345.215277][   T10] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  345.229472][   T10] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  345.243458][   T10] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  345.277852][   T10] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  345.287285][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.298225][   T10] usb 6-1: Product: syz
[  345.302580][   T10] usb 6-1: Manufacturer: syz
[  345.307361][   T10] usb 6-1: SerialNumber: syz
[  345.317297][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.329108][   T10] usb 6-1: config 0 descriptor??
[  345.341254][   T10] symbolserial 6-1:0.175: symbol converter detected
[  345.351202][ T5915] usb 2-1: USB disconnect, device number 116
[  345.357305][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.380711][   T10] usb 6-1: symbol converter now attached to ttyUSB1
[  345.389044][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  345.432359][ T5915] cp210x 2-1:0.0: device disconnected
[  345.432643][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  345.447847][ T5836] Bluetooth: hci1: Injecting HCI hardware error event
[  345.458273][ T5845] Bluetooth: hci1: hardware error 0x00
[  345.530019][ T9875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1237'.
[  345.543268][ T5898] usb 6-1: USB disconnect, device number 12
[  345.571222][ T5898] symbol ttyUSB1: symbol converter now disconnected from ttyUSB1
[  345.586803][ T5898] symbolserial 6-1:0.175: device disconnected
[  346.182829][   T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  346.249083][ T9891] input: syz0 as /devices/virtual/input/input53
[  346.261234][ T9891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1245'.
[  346.271990][ T9891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1245'.
[  346.336619][   T10] usb 2-1: Using ep0 maxpacket: 8
[  346.344389][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  346.355685][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  346.366449][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  346.376975][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.390396][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.399949][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.403090][ T5898] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  346.592595][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  346.607157][ T5898] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  346.616678][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.624178][   T10] usb 2-1: usb_control_msg returned -32
[  346.626559][ T5898] usb 6-1: Product: syz
[  346.635074][ T5898] usb 6-1: Manufacturer: syz
[  346.639714][ T5898] usb 6-1: SerialNumber: syz
[  346.646480][   T10] usbtmc 2-1:16.0: can't read capabilities
[  346.653833][ T5898] usb 6-1: config 0 descriptor??
[  346.671481][ T5898] gspca_main: se401-2.14.0 probing 047d:5003
[  346.673112][   T10] usb 2-1: USB disconnect, device number 117
[  346.749464][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.758681][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.066033][ T5898] gspca_se401: Frame size: 0x2 bayer
[  347.071483][ T5898] gspca_se401: Frame size: 0x127 bayer
[  347.078074][ T5898] gspca_se401: Frame size: 256x0 bayer
[  347.083624][ T5898] gspca_se401: Frame size: 2569x1025 bayer
[  347.269658][ T5898] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54
[  347.304812][ T5898] usb 6-1: USB disconnect, device number 13
[  347.378321][ T9908] hugetlbfs: Unknown parameter 'grpquota_block_hardlimit'
[  347.388488][   T30] audit: type=1326 audit(2000000408.412:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.2.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2a78f749 code=0x0
[  347.423328][   T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  347.513655][ T5845] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  347.584890][   T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  347.594739][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.605621][   T10] usb 2-1: config 0 descriptor??
[  347.817439][   T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  348.033912][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.054486][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.076791][   T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  348.086957][   T10] [drm] Initialized udl on minor 2
[  348.235177][   T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  348.271464][   T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  348.290822][ T5917] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  348.301889][   T10] usb 2-1: USB disconnect, device number 118
[  348.311037][ T5917] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  348.390590][ T9920] FAULT_INJECTION: forcing a failure.
[  348.390590][ T9920] name failslab, interval 1, probability 0, space 0, times 0
[  348.412677][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.2.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  348.412711][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  348.412724][ T9920] Call Trace:
[  348.412733][ T9920]  <TASK>
[  348.412743][ T9920]  dump_stack_lvl+0x189/0x250
[  348.412775][ T9920]  ? __pfx____ratelimit+0x10/0x10
[  348.412805][ T9920]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.412830][ T9920]  ? __pfx__printk+0x10/0x10
[  348.412861][ T9920]  ? __pfx___might_resched+0x10/0x10
[  348.412891][ T9920]  should_fail_ex+0x414/0x560
[  348.412922][ T9920]  should_failslab+0xa8/0x100
[  348.412947][ T9920]  __kmalloc_noprof+0xdf/0x800
[  348.412966][ T9920]  ? ovl_lookup+0x5f7/0x1bc0
[  348.413002][ T9920]  ovl_lookup+0x5f7/0x1bc0
[  348.413044][ T9920]  ? __memcg_slab_post_alloc_hook+0x512/0x730
[  348.413094][ T9920]  ? __pfx_ovl_lookup+0x10/0x10
[  348.413121][ T9920]  ? do_raw_spin_lock+0x121/0x290
[  348.413163][ T9920]  ? do_raw_spin_unlock+0x122/0x240
[  348.413198][ T9920]  ? _raw_spin_unlock+0x28/0x50
[  348.413225][ T9920]  ? d_alloc+0x144/0x190
[  348.413257][ T9920]  lookup_one_qstr_excl+0x131/0x360
[  348.413291][ T9920]  do_rmdir+0x1ce/0x4a0
[  348.413319][ T9920]  ? __pfx_do_rmdir+0x10/0x10
[  348.413349][ T9920]  ? strncpy_from_user+0x150/0x2c0
[  348.413378][ T9920]  ? getname_flags+0x1e5/0x540
[  348.413405][ T9920]  __x64_sys_unlinkat+0xc2/0xf0
[  348.413430][ T9920]  do_syscall_64+0xfa/0xfa0
[  348.413451][ T9920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.413471][ T9920]  ? clear_bhb_loop+0x60/0xb0
[  348.413497][ T9920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.413516][ T9920] RIP: 0033:0x7f4b2a78f749
[  348.413535][ T9920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.413553][ T9920] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  348.413575][ T9920] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  348.413591][ T9920] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  348.413605][ T9920] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  348.413618][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.413631][ T9920] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  348.413666][ T9920]  </TASK>
[  348.899134][ T9928] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1259'.
[  349.019459][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.031422][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.102767][ T5898] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  349.255769][ T5898] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  349.265085][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.277060][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  349.282902][   T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  349.288607][ T5898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  349.306196][ T5898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.319944][ T5898] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  349.332353][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  349.341684][ T5898] usb 6-1: Product: syz
[  349.346132][ T5898] usb 6-1: Manufacturer: syz
[  349.356929][ T5898] cdc_wdm 6-1:1.0: skipping garbage
[  349.362206][ T5898] cdc_wdm 6-1:1.0: skipping garbage
[  349.371088][ T5898] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  349.377195][ T5898] cdc_wdm 6-1:1.0: Unknown control protocol
[  349.443415][   T10] usb 2-1: Using ep0 maxpacket: 8
[  349.453663][   T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  349.463139][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.471166][   T10] usb 2-1: Product: syz
[  349.475543][   T10] usb 2-1: Manufacturer: syz
[  349.480447][   T10] usb 2-1: SerialNumber: syz
[  349.488101][   T10] usb 2-1: config 0 descriptor??
[  349.501032][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  349.561564][ T5898] usb 6-1: USB disconnect, device number 14
[  349.902007][   T10] gspca_se401: Frame size: 0x2 bayer
[  349.907587][   T10] gspca_se401: Frame size: 0x127 bayer
[  349.913286][   T10] gspca_se401: Frame size: 256x0 bayer
[  349.919054][   T10] gspca_se401: Frame size: 2569x1025 bayer
[  350.106150][   T10] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55
[  350.136365][   T10] usb 2-1: USB disconnect, device number 119
[  350.500586][ T9942] FAULT_INJECTION: forcing a failure.
[  350.500586][ T9942] name failslab, interval 1, probability 0, space 0, times 0
[  350.513758][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.2.1264 Not tainted syzkaller #0 PREEMPT(full) 
[  350.513780][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  350.513790][ T9942] Call Trace:
[  350.513796][ T9942]  <TASK>
[  350.513802][ T9942]  dump_stack_lvl+0x189/0x250
[  350.513827][ T9942]  ? __pfx____ratelimit+0x10/0x10
[  350.513849][ T9942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.513867][ T9942]  ? __pfx__printk+0x10/0x10
[  350.513898][ T9942]  ? __pfx___might_resched+0x10/0x10
[  350.513915][ T9942]  ? fs_reclaim_acquire+0x7d/0x100
[  350.513934][ T9942]  should_fail_ex+0x414/0x560
[  350.513955][ T9942]  should_failslab+0xa8/0x100
[  350.513972][ T9942]  kmem_cache_alloc_noprof+0x88/0x700
[  350.513995][ T9942]  ? security_file_alloc+0x34/0x330
[  350.514017][ T9942]  security_file_alloc+0x34/0x330
[  350.514036][ T9942]  init_file+0x93/0x2f0
[  350.514056][ T9942]  alloc_empty_file+0x6e/0x1d0
[  350.514075][ T9942]  path_openat+0x106/0x3d90
[  350.514095][ T9942]  ? handle_mm_fault+0xdb/0x32a0
[  350.514123][ T9942]  ? __pfx_handle_mm_fault+0x10/0x10
[  350.514151][ T9942]  ? __up_read+0x25a/0x690
[  350.514171][ T9942]  ? __pfx_path_openat+0x10/0x10
[  350.514184][ T9942]  ? __pfx___up_read+0x10/0x10
[  350.514205][ T9942]  ? do_user_addr_fault+0xbbc/0x1380
[  350.514231][ T9942]  do_filp_open+0x1fa/0x410
[  350.514242][ T9942]  ? __lock_acquire+0xab9/0xd20
[  350.514260][ T9942]  ? __pfx_do_filp_open+0x10/0x10
[  350.514288][ T9942]  ? _raw_spin_unlock+0x28/0x50
[  350.514308][ T9942]  ? alloc_fd+0x64c/0x6c0
[  350.514333][ T9942]  do_sys_openat2+0x121/0x1c0
[  350.514355][ T9942]  ? __pfx_do_sys_openat2+0x10/0x10
[  350.514377][ T9942]  ? ksys_write+0x22a/0x250
[  350.514392][ T9942]  ? __pfx_ksys_write+0x10/0x10
[  350.514407][ T9942]  __x64_sys_openat+0x138/0x170
[  350.514431][ T9942]  do_syscall_64+0xfa/0xfa0
[  350.514451][ T9942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.514471][ T9942]  ? clear_bhb_loop+0x60/0xb0
[  350.514495][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.514516][ T9942] RIP: 0033:0x7f4b2a78f749
[  350.514534][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.514547][ T9942] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  350.514563][ T9942] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  350.514574][ T9942] RDX: 0000000000082040 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  350.514584][ T9942] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  350.514593][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.514601][ T9942] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  350.514625][ T9942]  </TASK>
[  351.385645][   T30] audit: type=1326 audit(2000000412.412:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e6f8f749 code=0x0
[  351.408407][   T30] audit: type=1326 audit(2000000412.412:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9954 comm="syz.1.1269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311318f749 code=0x0
[  351.647919][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1272'.
[  351.867071][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.879326][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.939901][   T30] audit: type=1326 audit(2000000412.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.5.1273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e6f8f749 code=0x0
[  352.032641][ T6659] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  352.186567][ T9980] input: syz0 as /devices/virtual/input/input56
[  352.197299][ T6659] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  352.218373][ T6659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.238714][ T6659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.249379][ T6659] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  352.266128][ T6659] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  352.277406][ T6659] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  352.285772][ T6659] usb 2-1: Manufacturer: syz
[  352.294988][ T6659] usb 2-1: config 0 descriptor??
[  352.512807][ T9984] FAULT_INJECTION: forcing a failure.
[  352.512807][ T9984] name failslab, interval 1, probability 0, space 0, times 0
[  352.512923][ T9984] CPU: 1 UID: 0 PID: 9984 Comm: syz.2.1280 Not tainted syzkaller #0 PREEMPT(full) 
[  352.512946][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.512958][ T9984] Call Trace:
[  352.512966][ T9984]  <TASK>
[  352.512975][ T9984]  dump_stack_lvl+0x189/0x250
[  352.513005][ T9984]  ? __pfx____ratelimit+0x10/0x10
[  352.513041][ T9984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.513067][ T9984]  ? __pfx__printk+0x10/0x10
[  352.513099][ T9984]  ? __pfx___might_resched+0x10/0x10
[  352.513124][ T9984]  ? fs_reclaim_acquire+0x7d/0x100
[  352.513152][ T9984]  should_fail_ex+0x414/0x560
[  352.513181][ T9984]  should_failslab+0xa8/0x100
[  352.513208][ T9984]  __kmalloc_cache_noprof+0x84/0x700
[  352.513230][ T9984]  ? drm_atomic_state_alloc+0xa9/0x100
[  352.513262][ T9984]  drm_atomic_state_alloc+0xa9/0x100
[  352.513288][ T9984]  drm_client_modeset_commit_atomic+0xe2/0x760
[  352.513317][ T9984]  ? trace_contention_end+0x39/0x120
[  352.513351][ T9984]  ? trace_contention_end+0x39/0x120
[  352.513381][ T9984]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  352.513432][ T9984]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  352.513467][ T9984]  drm_client_modeset_commit_locked+0xcb/0x4d0
[  352.513499][ T9984]  drm_fb_helper_pan_display+0x3e7/0xbd0
[  352.513538][ T9984]  fb_pan_display+0x39e/0x680
[  352.513572][ T9984]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  352.513600][ T9984]  bit_update_start+0x4c/0x1e0
[  352.513635][ T9984]  fbcon_switch+0x12d6/0x1c90
[  352.513681][ T9984]  ? __pfx_fbcon_switch+0x10/0x10
[  352.513729][ T9984]  ? __pfx_hide_cursor+0x10/0x10
[  352.513756][ T9984]  ? is_console_locked+0x9/0x20
[  352.513783][ T9984]  ? set_origin+0x346/0x480
[  352.513805][ T9984]  csi_J+0x6c4/0xe50
[  352.513835][ T9984]  do_con_write+0x417a/0x5210
[  352.513908][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.513924][ T9984]  ? __pfx_do_con_write+0x10/0x10
[  352.513948][ T9984]  ? __mutex_lock+0x335/0x1350
[  352.513975][ T9984]  ? n_tty_write+0xe30/0x1200
[  352.514011][ T9984]  ? n_tty_write+0x64e/0x1200
[  352.514038][ T9984]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  352.514063][ T9984]  ? __pfx___mutex_lock+0x10/0x10
[  352.514084][ T9984]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  352.514114][ T9984]  ? con_write+0x2e/0x40
[  352.514150][ T9984]  con_write+0x24/0x40
[  352.514181][ T9984]  n_tty_write+0xd27/0x1200
[  352.514252][ T9984]  ? __pfx_n_tty_write+0x10/0x10
[  352.514283][ T9984]  ? __pfx_woken_wake_function+0x10/0x10
[  352.514304][ T9984]  ? file_tty_write+0x328/0xa20
[  352.514326][ T9984]  ? rcu_is_watching+0x15/0xb0
[  352.514352][ T9984]  ? file_tty_write+0x328/0xa20
[  352.514374][ T9984]  ? kfree+0x4d/0x680
[  352.514406][ T9984]  ? __pfx_n_tty_write+0x10/0x10
[  352.514653][ T9984]  file_tty_write+0x559/0xa20
[  352.514703][ T9984]  vfs_write+0x5c9/0xb30
[  352.514731][ T9984]  ? __pfx_tty_write+0x10/0x10
[  352.514764][ T9984]  ? __pfx_vfs_write+0x10/0x10
[  352.514798][ T9984]  ? __fget_files+0x2a/0x420
[  352.514836][ T9984]  ksys_write+0x145/0x250
[  352.514860][ T9984]  ? __pfx_ksys_write+0x10/0x10
[  352.514895][ T9984]  ? do_syscall_64+0xbe/0xfa0
[  352.514919][ T9984]  do_syscall_64+0xfa/0xfa0
[  352.514939][ T9984]  ? irqentry_exit+0x10f/0x640
[  352.514956][ T9984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.514977][ T9984]  ? clear_bhb_loop+0x60/0xb0
[  352.515003][ T9984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.515023][ T9984] RIP: 0033:0x7f4b2a78f749
[  352.515028][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.515044][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.515061][ T9984] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  352.515082][ T9984] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  352.515097][ T9984] RDX: 0000000000001028 RSI: 0000200000002080 RDI: 0000000000000003
[  352.515110][ T9984] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  352.515121][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.515132][ T9984] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  352.515166][ T9984]  </TASK>
[  352.721944][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.722374][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.727188][ T6659] usbhid 2-1:0.0: can't add hid device: -71
[  352.727301][ T6659] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  352.746200][ T6659] usb 2-1: USB disconnect, device number 120
[  353.484579][T10004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1286'.
[  353.503784][T10000] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1286'.
[  353.519602][T10004] hpfs: Unknown parameter 'norecovery'
[  353.551096][T10006] FAULT_INJECTION: forcing a failure.
[  353.551096][T10006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.566746][T10006] CPU: 0 UID: 0 PID: 10006 Comm: syz.1.1289 Not tainted syzkaller #0 PREEMPT(full) 
[  353.566776][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.566788][T10006] Call Trace:
[  353.566797][T10006]  <TASK>
[  353.566805][T10006]  dump_stack_lvl+0x189/0x250
[  353.566837][T10006]  ? __pfx____ratelimit+0x10/0x10
[  353.566868][T10006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.566893][T10006]  ? __pfx__printk+0x10/0x10
[  353.566918][T10006]  ? __might_fault+0xb0/0x130
[  353.566960][T10006]  should_fail_ex+0x414/0x560
[  353.566990][T10006]  _copy_from_user+0x2d/0xb0
[  353.567022][T10006]  video_usercopy+0x346/0x1450
[  353.567058][T10006]  ? __pfx___video_do_ioctl+0x10/0x10
[  353.567098][T10006]  ? __pfx_video_usercopy+0x10/0x10
[  353.567139][T10006]  ? __fget_files+0x3a0/0x420
[  353.567170][T10006]  v4l2_ioctl+0x18d/0x1e0
[  353.567193][T10006]  ? __pfx_v4l2_ioctl+0x10/0x10
[  353.567216][T10006]  __se_sys_ioctl+0xfc/0x170
[  353.567250][T10006]  do_syscall_64+0xfa/0xfa0
[  353.567270][T10006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.567290][T10006]  ? clear_bhb_loop+0x60/0xb0
[  353.567316][T10006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.567335][T10006] RIP: 0033:0x7f311318f749
[  353.567354][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.567371][T10006] RSP: 002b:00007f3114071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  353.567393][T10006] RAX: ffffffffffffffda RBX: 00007f31133e5fa0 RCX: 00007f311318f749
[  353.567408][T10006] RDX: 00002000000000c0 RSI: 00000000c0945662 RDI: 0000000000000003
[  353.567422][T10006] RBP: 00007f3114071090 R08: 0000000000000000 R09: 0000000000000000
[  353.567434][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.567446][T10006] R13: 00007f31133e6038 R14: 00007f31133e5fa0 R15: 00007ffd1cde2e18
[  353.567480][T10006]  </TASK>
[  353.595240][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.692733][ T5915] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  353.789177][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.933196][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  353.938680][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.950186][ T5915] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  353.950254][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.960276][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.975886][ T5915] usb 6-1: Product: syz
[  353.992769][ T5915] usb 6-1: Manufacturer: syz
[  353.997717][ T5915] usb 6-1: SerialNumber: syz
[  354.014682][ T5915] usb 6-1: config 0 descriptor??
[  354.029290][ T5915] gspca_main: se401-2.14.0 probing 047d:5003
[  354.362637][   T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  354.429295][ T5915] gspca_se401: Frame size: 0x2 1/4th janggu
[  354.435833][ T5915] gspca_se401: Frame size: 0x127 bayer
[  354.441359][ T5915] gspca_se401: Frame size: 256x0 bayer
[  354.447272][ T5915] gspca_se401: Frame size: 2569x1025 bayer
[  354.453502][ T5915] gspca_se401: Frame size: 0x4 bayer
[  354.512607][   T43] usb 2-1: Using ep0 maxpacket: 16
[  354.519703][   T43] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  354.529172][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.540004][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  354.551988][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  354.563456][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.572002][   T43] usb 2-1: Product: syz
[  354.577013][   T43] usb 2-1: Manufacturer: syz
[  354.581662][   T43] usb 2-1: SerialNumber: syz
[  354.639605][ T5915] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57
[  354.675056][ T5915] usb 6-1: USB disconnect, device number 15
[  354.997151][   T43] usb 2-1: 0:2 : does not exist
[  355.013080][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  355.247636][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.261681][T10045] program syz.5.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  355.268244][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.650347][T10052] FAULT_INJECTION: forcing a failure.
[  355.650347][T10052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.664239][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.5.1308 Not tainted syzkaller #0 PREEMPT(full) 
[  355.664269][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  355.664283][T10052] Call Trace:
[  355.664292][T10052]  <TASK>
[  355.664301][T10052]  dump_stack_lvl+0x189/0x250
[  355.664332][T10052]  ? __pfx____ratelimit+0x10/0x10
[  355.664364][T10052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.664396][T10052]  ? __pfx__printk+0x10/0x10
[  355.664422][T10052]  ? __might_fault+0xb0/0x130
[  355.664464][T10052]  should_fail_ex+0x414/0x560
[  355.664495][T10052]  _copy_from_iter+0x1de/0x1790
[  355.664547][T10052]  ? __pfx__copy_from_iter+0x10/0x10
[  355.664573][T10052]  ? is_bpf_text_address+0x26/0x2b0
[  355.664599][T10052]  ? __lock_acquire+0xab9/0xd20
[  355.664631][T10052]  tun_get_user+0x219/0x3e90
[  355.664663][T10052]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  355.664697][T10052]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  355.664726][T10052]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  355.664754][T10052]  ? aa_file_perm+0x44c/0x1540
[  355.664775][T10052]  ? __pfx_tun_get_user+0x10/0x10
[  355.664803][T10052]  ? save_netdev_trace_buffer+0x4a0/0x5a0
[  355.664835][T10052]  ? ref_tracker_alloc+0x318/0x460
[  355.664859][T10052]  ? tun_get+0x157/0x2f0
[  355.664875][T10052]  ? tun_chr_write_iter+0x60/0x210
[  355.664894][T10052]  ? ksys_write+0x145/0x250
[  355.664913][T10052]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  355.664945][T10052]  ? tun_get+0x1c/0x2f0
[  355.664971][T10052]  ? tun_get+0x1c/0x2f0
[  355.664989][T10052]  ? tun_get+0x1c/0x2f0
[  355.665014][T10052]  tun_chr_write_iter+0x113/0x210
[  355.665037][T10052]  vfs_write+0x5c9/0xb30
[  355.665061][T10052]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  355.665083][T10052]  ? __pfx_vfs_write+0x10/0x10
[  355.665114][T10052]  ? __fget_files+0x2a/0x420
[  355.665150][T10052]  ksys_write+0x145/0x250
[  355.665173][T10052]  ? __pfx_ksys_write+0x10/0x10
[  355.665197][T10052]  ? do_syscall_64+0xbe/0xfa0
[  355.665220][T10052]  do_syscall_64+0xfa/0xfa0
[  355.665240][T10052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.665260][T10052]  ? clear_bhb_loop+0x60/0xb0
[  355.665285][T10052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.665305][T10052] RIP: 0033:0x7f93e6f8f749
[  355.665323][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.665341][T10052] RSP: 002b:00007f93e7d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.665364][T10052] RAX: ffffffffffffffda RBX: 00007f93e71e5fa0 RCX: 00007f93e6f8f749
[  355.665379][T10052] RDX: 0000000000000026 RSI: 0000200000000040 RDI: 0000000000000003
[  355.665392][T10052] RBP: 00007f93e7d52090 R08: 0000000000000000 R09: 0000000000000000
[  355.665405][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.665417][T10052] R13: 00007f93e71e6038 R14: 00007f93e71e5fa0 R15: 00007ffdde0e3d68
[  355.665451][T10052]  </TASK>
[  356.380926][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3d400: rx timeout, send abort
[  356.417458][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.419968][   T43] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  356.437304][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.452616][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  356.484494][   T43] usb 2-1: USB disconnect, device number 121
[  356.535822][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  356.629971][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.646077][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.659262][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'.
[  356.881215][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059845c00: rx timeout, send abort
[  356.889767][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3d400: abort rx timeout. Force session deactivation
[  357.242801][   T43] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  357.389681][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059845c00: abort rx timeout. Force session deactivation
[  357.400686][   T43] usb 2-1: Using ep0 maxpacket: 32
[  357.410789][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  357.424194][   T43] usb 2-1: unable to read config index 0 descriptor/start: -71
[  357.433141][   T43] usb 2-1: can't read configurations, error -71
[  358.252716][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  358.403493][   T10] usb 6-1: Using ep0 maxpacket: 8
[  358.418708][   T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  358.441710][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.462462][   T10] usb 6-1: Product: syz
[  358.469924][   T10] usb 6-1: Manufacturer: syz
[  358.477287][   T10] usb 6-1: SerialNumber: syz
[  358.482650][   T43] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  358.498942][   T10] usb 6-1: config 0 descriptor??
[  358.510689][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  358.511789][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.528732][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.634802][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.649327][   T43] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  358.665933][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.693206][   T43] usb 2-1: config 0 descriptor??
[  358.868259][T10109] tipc: Trying to set illegal importance in message
[  358.912615][   T10] gspca_se401: Frame size: 0x2 bayer
[  358.918169][   T10] gspca_se401: Frame size: 0x127 bayer
[  358.924591][   T10] gspca_se401: Frame size: 256x0 bayer
[  358.930554][   T10] gspca_se401: Frame size: 2569x1025 bayer
[  359.129843][   T10] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58
[  359.174413][   T10] usb 6-1: USB disconnect, device number 17
[  359.190700][   T43] hid_mf 0003:0079:1846.0017: unknown main item tag 0x0
[  359.199841][   T43] hid_mf 0003:0079:1846.0017: unknown main item tag 0x0
[  359.233549][   T43] hid_mf 0003:0079:1846.0017: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0
[  359.262670][   T43] hid_mf 0003:0079:1846.0017: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  359.351965][   T43] usb 2-1: USB disconnect, device number 123
[  360.183514][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1340'.
[  360.219355][T10131] bridge0: port 3(veth0_to_bridge) entered blocking state
[  360.227799][T10131] bridge0: port 3(veth0_to_bridge) entered disabled state
[  360.239553][T10131] veth0_to_bridge: entered allmulticast mode
[  360.249750][T10131] veth0_to_bridge: entered promiscuous mode
[  360.259944][T10131] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.273377][   T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  360.275627][T10131] bridge0: port 3(veth0_to_bridge) entered blocking state
[  360.288931][T10131] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  360.433368][   T43] usb 6-1: Using ep0 maxpacket: 8
[  360.458062][   T43] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  360.478142][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.486903][   T43] usb 6-1: Product: syz
[  360.492336][   T43] usb 6-1: Manufacturer: syz
[  360.497641][   T43] usb 6-1: SerialNumber: syz
[  360.513773][   T43] usb 6-1: config 0 descriptor??
[  360.525958][   T43] gspca_main: se401-2.14.0 probing 047d:5003
[  360.666716][T10146] syzkaller1: entered promiscuous mode
[  360.673085][T10146] syzkaller1: entered allmulticast mode
[  360.734445][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.763080][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.912967][T10152] FAULT_INJECTION: forcing a failure.
[  360.912967][T10152] name failslab, interval 1, probability 0, space 0, times 0
[  360.926405][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.1.1347 Not tainted syzkaller #0 PREEMPT(full) 
[  360.926437][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  360.926451][T10152] Call Trace:
[  360.926460][T10152]  <TASK>
[  360.926468][T10152]  dump_stack_lvl+0x189/0x250
[  360.926500][T10152]  ? __pfx____ratelimit+0x10/0x10
[  360.926531][T10152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.926558][T10152]  ? __pfx__printk+0x10/0x10
[  360.926591][T10152]  ? __pfx___might_resched+0x10/0x10
[  360.926618][T10152]  ? fs_reclaim_acquire+0x7d/0x100
[  360.926646][T10152]  should_fail_ex+0x414/0x560
[  360.926678][T10152]  should_failslab+0xa8/0x100
[  360.926697][T10152]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  360.926721][T10152]  ? __alloc_skb+0x112/0x2d0
[  360.926738][T10152]  ? netlink_autobind+0xdb/0x300
[  360.926763][T10152]  __alloc_skb+0x112/0x2d0
[  360.926784][T10152]  netlink_sendmsg+0x5c6/0xb30
[  360.926819][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.926842][T10152]  ? aa_sock_msg_perm+0xf1/0x1d0
[  360.926866][T10152]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  360.926881][T10152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.926902][T10152]  __sock_sendmsg+0x21c/0x270
[  360.926932][T10152]  ____sys_sendmsg+0x505/0x870
[  360.926956][T10152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.926983][T10152]  ? import_iovec+0x74/0xa0
[  360.927008][T10152]  ___sys_sendmsg+0x21f/0x2a0
[  360.927043][T10152]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.927109][T10152]  ? __fget_files+0x2a/0x420
[  360.927137][T10152]  ? __fget_files+0x3a0/0x420
[  360.927167][T10152]  __x64_sys_sendmsg+0x19b/0x260
[  360.927190][T10152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  360.927219][T10152]  ? __pfx_ksys_write+0x10/0x10
[  360.927236][T10152]  ? do_syscall_64+0xbe/0xfa0
[  360.927253][T10152]  do_syscall_64+0xfa/0xfa0
[  360.927268][T10152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.927282][T10152]  ? clear_bhb_loop+0x60/0xb0
[  360.927301][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.927316][T10152] RIP: 0033:0x7f311318f749
[  360.927330][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.927356][T10152] RSP: 002b:00007f3114071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.927373][T10152] RAX: ffffffffffffffda RBX: 00007f31133e5fa0 RCX: 00007f311318f749
[  360.927384][T10152] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  360.927393][T10152] RBP: 00007f3114071090 R08: 0000000000000000 R09: 0000000000000000
[  360.927402][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.927411][T10152] R13: 00007f31133e6038 R14: 00007f31133e5fa0 R15: 00007ffd1cde2e18
[  360.927435][T10152]  </TASK>
[  360.927593][   T43] gspca_se401: Frame size: 0x2 bayer
[  361.214956][   T43] gspca_se401: Frame size: 0x127 bayer
[  361.220798][   T43] gspca_se401: Frame size: 256x0 bayer
[  361.226958][   T43] gspca_se401: Frame size: 2569x1025 bayer
[  361.236913][   T43] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59
[  361.264514][   T43] usb 6-1: USB disconnect, device number 18
[  361.454828][   T10] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[  361.569010][T10171] /dev/sg0: Can't lookup blockdev
[  361.602709][   T10] usb 2-1: device descriptor read/64, error -71
[  361.842646][   T10] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[  361.972651][   T10] usb 2-1: device descriptor read/64, error -71
[  361.992615][   T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  362.083028][   T10] usb usb2-port1: attempt power cycle
[  362.154862][   T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  362.163777][   T43] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  362.174931][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  362.192456][   T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  362.203872][   T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8447, setting to 1024
[  362.218015][   T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  362.227704][   T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  362.236028][   T43] usb 6-1: Product: syz
[  362.241673][   T43] usb 6-1: Manufacturer: syz
[  362.258804][   T43] cdc_wdm 6-1:1.0: skipping garbage
[  362.264393][   T43] cdc_wdm 6-1:1.0: skipping garbage
[  362.272082][   T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  362.278308][   T43] cdc_wdm 6-1:1.0: Unknown control protocol
[  362.432690][   T10] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[  362.453493][   T10] usb 2-1: device descriptor read/8, error -71
[  362.692713][   T10] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  362.713527][   T10] usb 2-1: device descriptor read/8, error -71
[  362.728456][    C1] cdc_wdm 6-1:1.0: Unexpected error -71
[  362.735311][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.742283][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.748719][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.755370][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.761677][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.768396][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.774805][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.781796][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.788081][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.794795][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.803068][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.809893][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.818279][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.825128][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.831552][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  362.838176][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  362.844611][   T43] usb 6-1: USB disconnect, device number 19
[  362.845973][   T10] usb usb2-port1: unable to enumerate USB device
[  363.218610][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.229312][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.909778][T10226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.957540][T10226] syzkaller0: entered promiscuous mode
[  363.963239][T10226] syzkaller0: entered allmulticast mode
[  363.969499][T10226] tipc: Resetting bearer <eth:syzkaller0>
[  363.979999][T10225] tipc: Resetting bearer <eth:syzkaller0>
[  364.112636][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  364.277914][   T10] usb 6-1: Using ep0 maxpacket: 8
[  364.288916][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  364.299973][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.351625][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  364.379717][   T10] pvrusb2: **********
[  364.385657][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  364.411460][   T10] pvrusb2: Important functionality might not be entirely working.
[  364.431761][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  364.446855][   T10] pvrusb2: **********
[  364.560910][ T2345] pvrusb2: Invalid write control endpoint
[  364.746700][T10224] pvrusb2: Killing an I2C write to 6 that is too large (desired=8192 limit=61)
[  364.763322][ T2345] pvrusb2: Invalid write control endpoint
[  364.773745][   T43] usb 6-1: USB disconnect, device number 20
[  364.781107][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  364.792772][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  364.800947][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  364.819708][ T2345] pvrusb2: Device being rendered inoperable
[  364.845070][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  364.861925][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  365.001419][ T2345] pvrusb2: Attached sub-driver cx25840
[  365.015329][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  365.025790][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  365.616903][T10243] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1379'.
[  366.073604][ T6659] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  366.272598][ T6659] usb 6-1: Using ep0 maxpacket: 8
[  366.284577][ T6659] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  366.296115][ T6659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.309587][ T6659] usb 6-1: Product: syz
[  366.316777][ T6659] usb 6-1: Manufacturer: syz
[  366.321440][ T6659] usb 6-1: SerialNumber: syz
[  366.337464][ T6659] usb 6-1: config 0 descriptor??
[  366.349209][ T6659] gspca_main: se401-2.14.0 probing 047d:5003
[  366.536909][T10225] tipc: Disabling bearer <eth:syzkaller0>
[  366.555572][ T5917] tipc: Node number set to 1600066730
[  366.682343][T10251] FAULT_INJECTION: forcing a failure.
[  366.682343][T10251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.697792][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.1.1383 Not tainted syzkaller #0 PREEMPT(full) 
[  366.697823][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  366.697836][T10251] Call Trace:
[  366.697844][T10251]  <TASK>
[  366.697853][T10251]  dump_stack_lvl+0x189/0x250
[  366.697885][T10251]  ? __pfx____ratelimit+0x10/0x10
[  366.697915][T10251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.697938][T10251]  ? __pfx__printk+0x10/0x10
[  366.697963][T10251]  ? __might_fault+0xb0/0x130
[  366.698012][T10251]  should_fail_ex+0x414/0x560
[  366.698041][T10251]  _copy_from_iter+0x1de/0x1790
[  366.698074][T10251]  ? rcu_is_watching+0x15/0xb0
[  366.698109][T10251]  ? __pfx__copy_from_iter+0x10/0x10
[  366.698143][T10251]  ? __build_skb_around+0x22d/0x3f0
[  366.698173][T10251]  ? netlink_sendmsg+0x642/0xb30
[  366.698201][T10251]  ? skb_put+0x11b/0x210
[  366.698230][T10251]  netlink_sendmsg+0x6b2/0xb30
[  366.698268][T10251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.698300][T10251]  ? aa_sock_msg_perm+0xf1/0x1d0
[  366.698334][T10251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  366.698355][T10251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.698384][T10251]  __sock_sendmsg+0x21c/0x270
[  366.698408][T10251]  ____sys_sendmsg+0x505/0x870
[  366.698442][T10251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  366.698480][T10251]  ? import_iovec+0x74/0xa0
[  366.698514][T10251]  ___sys_sendmsg+0x21f/0x2a0
[  366.698543][T10251]  ? __pfx____sys_sendmsg+0x10/0x10
[  366.698606][T10251]  ? __fget_files+0x2a/0x420
[  366.698632][T10251]  ? __fget_files+0x3a0/0x420
[  366.698668][T10251]  __x64_sys_sendmsg+0x19b/0x260
[  366.698699][T10251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  366.698738][T10251]  ? __pfx_ksys_write+0x10/0x10
[  366.698762][T10251]  ? do_syscall_64+0xbe/0xfa0
[  366.698785][T10251]  do_syscall_64+0xfa/0xfa0
[  366.698805][T10251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.698825][T10251]  ? clear_bhb_loop+0x60/0xb0
[  366.698859][T10251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.698878][T10251] RIP: 0033:0x7f311318f749
[  366.698896][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.698912][T10251] RSP: 002b:00007f3114071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.698932][T10251] RAX: ffffffffffffffda RBX: 00007f31133e5fa0 RCX: 00007f311318f749
[  366.698947][T10251] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003
[  366.698960][T10251] RBP: 00007f3114071090 R08: 0000000000000000 R09: 0000000000000000
[  366.698972][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.698983][T10251] R13: 00007f31133e6038 R14: 00007f31133e5fa0 R15: 00007ffd1cde2e18
[  366.699057][T10251]  </TASK>
[  366.984442][ T6659] gspca_se401: Frame size: 0x2 1/4th janggu
[  366.990857][ T6659] gspca_se401: Frame size: 0x127 bayer
[  366.998209][ T6659] gspca_se401: Frame size: 256x0 bayer
[  367.004208][ T6659] gspca_se401: Frame size: 2569x1025 bayer
[  367.010370][ T6659] gspca_se401: Frame size: 0x4 bayer
[  367.188598][ T6659] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60
[  367.210110][ T6659] usb 6-1: USB disconnect, device number 21
[  367.282612][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  367.432926][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  367.446889][ T5917] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  367.461270][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.473613][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.487734][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.498236][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.518222][ T5917] usb 2-1: Product: syz
[  367.528404][ T5917] usb 2-1: Manufacturer: syz
[  367.538586][ T5917] usb 2-1: SerialNumber: syz
[  367.614505][T10267] Mount JFS Failure: -5
[  367.619207][T10267] jfs_mount failed w/return code = -5
[  367.651271][T10267] usb usb1: usbfs: process 10267 (syz.2.1390) did not claim interface 0 before use
[  367.763886][T10271] ISOFS: Unable to identify CD-ROM format.
[  367.845778][T10277] netlink: 'syz.4.1392': attribute type 7 has an invalid length.
[  367.860726][T10277] netlink: 'syz.4.1392': attribute type 5 has an invalid length.
[  367.870878][T10277] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1392'.
[  367.968901][T10282] FAULT_INJECTION: forcing a failure.
[  367.968901][T10282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.994388][ T5917] usb 2-1: 0:2 : does not exist
[  368.002926][T10282] CPU: 0 UID: 0 PID: 10282 Comm: syz.2.1396 Not tainted syzkaller #0 PREEMPT(full) 
[  368.002953][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  368.002966][T10282] Call Trace:
[  368.002974][T10282]  <TASK>
[  368.002983][T10282]  dump_stack_lvl+0x189/0x250
[  368.003013][T10282]  ? __pfx____ratelimit+0x10/0x10
[  368.003047][T10282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.003073][T10282]  ? __pfx__printk+0x10/0x10
[  368.003098][T10282]  ? __might_fault+0xb0/0x130
[  368.003140][T10282]  should_fail_ex+0x414/0x560
[  368.003179][T10282]  _copy_from_user+0x2d/0xb0
[  368.003212][T10282]  ___sys_sendmsg+0x158/0x2a0
[  368.003245][T10282]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.003310][T10282]  ? __fget_files+0x2a/0x420
[  368.003336][T10282]  ? __fget_files+0x3a0/0x420
[  368.003373][T10282]  __x64_sys_sendmsg+0x19b/0x260
[  368.003405][T10282]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  368.003444][T10282]  ? __pfx_ksys_write+0x10/0x10
[  368.003469][T10282]  ? do_syscall_64+0xbe/0xfa0
[  368.003492][T10282]  do_syscall_64+0xfa/0xfa0
[  368.003513][T10282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.003534][T10282]  ? clear_bhb_loop+0x60/0xb0
[  368.003559][T10282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.003580][T10282] RIP: 0033:0x7f4b2a78f749
[  368.003598][T10282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.003616][T10282] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.003638][T10282] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  368.003653][T10282] RDX: 0000000020008012 RSI: 0000200000000c40 RDI: 0000000000000004
[  368.003667][T10282] RBP: 00007f4b289f6090 R08: 0000000000000000 R09: 0000000000000000
[  368.003680][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.003692][T10282] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  368.003726][T10282]  </TASK>
[  368.311316][   T30] audit: type=1800 audit(2000000429.332:76): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1397" name="bus" dev="tmpfs" ino=2048 res=0 errno=0
[  368.711500][T10296] netlink: 'syz.2.1401': attribute type 2 has an invalid length.
[  368.779394][T10298] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1402'.
[  368.940707][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.952040][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.281697][ T5917] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  369.321738][ T5917] usb 2-1: USB disconnect, device number 2
[  369.925547][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.953075][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.989638][T10341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.587860][T10348] sock: sock_set_timeout: `syz.5.1421' (pid 10348) tries to set negative timeout
[  370.602256][T10348] sock: sock_set_timeout: `syz.5.1421' (pid 10348) tries to set negative timeout
[  370.984748][T10369] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  370.989328][T10369] 
@0Ù: renamed from bond_slave_1 (while UP)
[  371.043010][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  371.242726][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  371.264769][   T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  371.273676][   T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  371.284036][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  371.293268][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  371.320968][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  371.336012][   T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  371.345445][   T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  371.359611][   T10] usb 6-1: Product: syz
[  371.366446][   T10] usb 6-1: Manufacturer: syz
[  371.381915][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  371.389643][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  371.395185][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  371.403103][   T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  371.409065][   T10] cdc_wdm 6-1:1.0: Unknown control protocol
[  371.420021][ T5917] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  371.440025][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.458894][ T5917] usb 2-1: Product: syz
[  371.466198][ T5917] usb 2-1: Manufacturer: syz
[  371.470955][ T5917] usb 2-1: SerialNumber: syz
[  371.493538][ T5917] usb 2-1: config 0 descriptor??
[  371.502387][ T5917] gspca_main: se401-2.14.0 probing 047d:5003
[  371.868536][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.881037][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.903951][ T5917] gspca_se401: Frame size: 0x2 bayer
[  371.909433][ T5917] gspca_se401: Frame size: 0x127 bayer
[  371.916380][ T5917] gspca_se401: Frame size: 256x0 bayer
[  372.118492][ T5917] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input61
[  372.144398][ T5917] usb 2-1: USB disconnect, device number 3
[  372.223937][   T10] usb 6-1: USB disconnect, device number 22
[  372.719800][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.739152][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.922009][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  373.032025][   T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  373.072410][   T10] usb 2-1: Using ep0 maxpacket: 8
[  373.083376][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  373.095079][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  373.105400][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  373.118649][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  373.129151][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  373.144930][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  373.154504][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.192184][   T43] usb 6-1: Using ep0 maxpacket: 32
[  373.199537][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  373.207105][   T43] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  373.218855][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.231530][   T43] usb 6-1: config 0 descriptor??
[  373.337081][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.346963][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.368306][   T10] usb 2-1: usb_control_msg returned -32
[  373.374272][   T10] usbtmc 2-1:16.0: can't read capabilities
[  373.727741][T10412] usbtmc 2-1:16.0: stb usb_control_msg returned -32
[  373.741818][ T6659] usb 2-1: USB disconnect, device number 4
[  374.050580][   T43] usbhid 6-1:0.0: can't add hid device: -71
[  374.057522][   T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  374.070742][   T43] usb 6-1: USB disconnect, device number 23
[  374.256237][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.274052][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.651071][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  374.823491][   T10] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48
[  374.837238][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.849402][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  374.896501][   T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  374.910001][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.919369][   T10] usb 2-1: Product: syz
[  374.924009][   T10] usb 2-1: Manufacturer: syz
[  374.928678][   T10] usb 2-1: SerialNumber: syz
[  374.958392][   T10] usb 2-1: config 0 descriptor??
[  374.972894][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[  375.022805][   T10] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  375.040092][T10456] bridge0: port 3(wlan0) entered blocking state
[  375.046728][T10456] bridge0: port 3(wlan0) entered disabled state
[  375.061078][T10456] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  375.074744][T10456] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  375.119258][T10456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1458'.
[  375.144766][T10456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1458'.
[  375.172220][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.184165][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.201958][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.222538][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.242753][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.257066][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.269733][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.296098][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.312777][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.324239][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.397481][ T5943] usb 2-1: USB disconnect, device number 5
[  375.528616][T10459] netlink: 'syz.2.1459': attribute type 30 has an invalid length.
[  375.701232][   T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  375.744253][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'.
[  375.787963][T10466] fuse: Bad value for 'fd'
[  375.870712][   T43] usb 6-1: Using ep0 maxpacket: 8
[  375.884318][   T43] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  375.910635][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.919206][   T43] usb 6-1: Product: syz
[  375.929907][   T43] usb 6-1: Manufacturer: syz
[  375.935134][   T43] usb 6-1: SerialNumber: syz
[  375.944479][   T43] usb 6-1: config 0 descriptor??
[  375.953735][   T43] gspca_main: se401-2.14.0 probing 047d:5003
[  376.250819][ T6659] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  376.359772][   T43] gspca_se401: Frame size: 0x2 bayer
[  376.366805][   T43] gspca_se401: Frame size: 0x127 bayer
[  376.373308][   T43] gspca_se401: Frame size: 256x0 bayer
[  376.379365][   T43] gspca_se401: Frame size: 2569x1025 bayer
[  376.400269][ T6659] usb 2-1: device descriptor read/64, error -71
[  376.497947][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.508127][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.576344][   T43] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62
[  376.606161][   T43] usb 6-1: USB disconnect, device number 24
[  376.661406][ T6659] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  376.810120][ T6659] usb 2-1: device descriptor read/64, error -71
[  376.908870][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'.
[  376.918598][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'.
[  376.930590][ T6659] usb usb2-port1: attempt power cycle
[  377.090522][T10488] netlink: 'syz.2.1470': attribute type 16 has an invalid length.
[  377.098404][T10488] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1470'.
[  377.171680][T10491] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1471'.
[  377.279723][ T6659] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  377.315727][ T6659] usb 2-1: device descriptor read/8, error -71
[  377.384489][T10497] tmpfs: Unknown parameter 'fd'
[  377.491142][T10502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  377.552704][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.563910][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.579749][ T6659] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  377.600333][ T6659] usb 2-1: device descriptor read/8, error -71
[  377.709912][ T6659] usb usb2-port1: unable to enumerate USB device
[  378.136195][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.152048][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.539202][ T5915] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  378.689222][ T5915] usb 6-1: Using ep0 maxpacket: 32
[  378.696601][ T5915] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  378.705405][ T5915] usb 6-1: config 0 has no interface number 0
[  378.712155][ T5915] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  378.723720][ T5915] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  378.737183][ T5915] usb 6-1: config 0 interface 85 has no altsetting 0
[  378.743257][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.747236][ T5915] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  378.753430][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.766788][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.778510][ T5915] usb 6-1: Product: syz
[  378.783178][ T5915] usb 6-1: Manufacturer: syz
[  378.787820][ T5915] usb 6-1: SerialNumber: syz
[  378.798736][ T5915] usb 6-1: config 0 descriptor??
[  379.191296][   T71] nci: nci_rx_work: unknown MT 0x6
[  379.563931][T10530] usb usb1: check_ctrlrecip: process 10530 (syz.2.1484) requesting ep 01 but needs 81
[  379.574123][T10530] usb usb1: usbfs: process 10530 (syz.2.1484) did not claim interface 0 before use
[  380.138929][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.154232][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.527790][T10548] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1490'.
[  380.549110][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.558255][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.792325][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.839397][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.304181][T10568] random: crng reseeded on system resumption
[  381.526312][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.538754][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.699344][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.713520][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.740286][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.751693][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.963993][T10584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1503'.
[  381.974692][T10584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1503'.
[  382.277243][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  382.319606][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'.
[  382.428400][   T10] usb 2-1: Using ep0 maxpacket: 8
[  382.440084][   T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  382.462987][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  382.467176][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.482477][   T10] usb 2-1: Product: syz
[  382.486750][   T10] usb 2-1: Manufacturer: syz
[  382.493910][   T10] usb 2-1: SerialNumber: syz
[  382.505690][   T10] usb 2-1: config 0 descriptor??
[  382.528020][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  382.566259][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.578159][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.621762][T10604] netlink: 'syz.5.1513': attribute type 64 has an invalid length.
[  382.630003][T10604] netlink: 'syz.5.1513': attribute type 4 has an invalid length.
[  382.638726][T10604] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1513'.
[  382.735800][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.745027][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.917198][   T10] gspca_se401: Frame size: 0x2 1/4th janggu
[  382.923464][   T10] gspca_se401: Frame size: 0x127 bayer
[  382.929180][   T10] gspca_se401: Frame size: 256x0 bayer
[  382.934846][   T10] gspca_se401: Frame size: 0x0 1/16th janggu
[  382.941968][   T10] gspca_se401: Frame size: 0x4 bayer
[  383.122474][   T10] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64
[  383.148430][   T10] usb 2-1: USB disconnect, device number 10
[  383.229883][T10614] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1517' sets config #32769
[  383.515868][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.547129][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.998249][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  384.005136][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  384.068229][ T5915] appletouch 6-1:0.85: Failed to request geyser raw mode
[  384.075627][ T5915] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  384.227778][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.256739][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.326256][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  384.466096][ T5943] usb 2-1: device descriptor read/64, error -71
[  384.706873][ T5943] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  384.846059][ T5943] usb 2-1: device descriptor read/64, error -71
[  384.889496][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.899757][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.956707][ T5943] usb usb2-port1: attempt power cycle
[  385.138089][T10660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  385.177842][T10660] kvm: apic: phys broadcast and lowest prio
[  385.315749][ T5943] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  385.346835][ T5943] usb 2-1: device descriptor read/8, error -71
[  385.451796][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.484488][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.558329][   T30] audit: type=1326 audit(2000000702.588:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8992d8f749 code=0x7fc00000
[  385.619351][ T5943] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  385.662639][ T5943] usb 2-1: device descriptor read/8, error -71
[  385.781856][ T5943] usb usb2-port1: unable to enumerate USB device
[  386.306667][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.326744][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.133118][T10679] netlink: 'syz.4.1537': attribute type 21 has an invalid length.
[  387.150618][T10679] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1537'.
[  387.316294][T10685] autofs: Bad value for 'fd'
[  387.464615][ T5915] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  387.575382][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.597474][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.625146][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  387.642701][ T5915] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  387.661921][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.694165][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  387.711295][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  387.720964][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.730027][ T5915] usb 2-1: Product: syz
[  387.734811][ T5915] usb 2-1: Manufacturer: syz
[  387.746939][ T5915] usb 2-1: SerialNumber: syz
[  387.832092][T10699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.846792][T10699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.193442][ T5915] usb 2-1: 0:2 : does not exist
[  388.627917][T10714] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  388.645427][T10714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.941727][T10718] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1549'.
[  388.971191][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.992971][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.050602][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1549'.
[  389.085000][T10717] netlink: 12 bytes leftover after parsing attributes in process `…±ÌBpyÁsù\˜Î¤gÒ'.
[  389.425179][ T5915] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  389.449969][T10730] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1553'.
[  389.497744][ T5915] usb 2-1: USB disconnect, device number 15
[  389.601603][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  389.621976][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1554'.
[  389.767517][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.776810][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.067421][T10744] netlink: 'syz.1.1559': attribute type 2 has an invalid length.
[  390.077072][T10744] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  390.167495][T10746] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1560'.
[  390.466386][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.483563][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.189098][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.198524][ T5943] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  391.207158][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.223065][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.232128][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.362663][ T5943] usb 2-1: Using ep0 maxpacket: 16
[  391.369483][ T5943] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  391.378799][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.389237][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.400219][ T5943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  391.410161][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.418283][ T5943] usb 2-1: Product: syz
[  391.422863][ T5943] usb 2-1: Manufacturer: syz
[  391.427696][ T5943] usb 2-1: SerialNumber: syz
[  391.599358][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.610152][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.841570][ T5943] usb 2-1: 0:2 : does not exist
[  391.906687][T10786] netlink: 'syz.2.1576': attribute type 10 has an invalid length.
[  391.916850][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'.
[  391.927065][T10786] batadv0: entered promiscuous mode
[  391.932953][T10786] batadv0: entered allmulticast mode
[  391.939290][T10786] bridge0: port 4(batadv0) entered blocking state
[  391.946152][T10786] bridge0: port 4(batadv0) entered disabled state
[  391.956971][T10786] bridge0: port 4(batadv0) entered blocking state
[  391.964322][T10786] bridge0: port 4(batadv0) entered forwarding state
[  392.093749][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  392.103632][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  392.151934][T10792] binder: 10791:10792 ioctl c0306201 2000000001c0 returned -14
[  392.276174][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.290112][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.353261][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.366365][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.875468][ T5943] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  392.933705][ T5943] usb 2-1: USB disconnect, device number 16
[  393.096571][T10817] ------------[ cut here ]------------
[  393.103090][T10817] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[  393.133408][T10817] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#0: syz.2.1587/10817
[  393.147182][T10817] Modules linked in:
[  393.151867][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.2.1587 Not tainted syzkaller #0 PREEMPT(full) 
[  393.161441][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  393.171783][T10817] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.178702][T10817] Code: b1 20 00 00 48 c7 c7 e0 91 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 40 33 aa fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 bd 12 e8 fa 90 0f 0b 90 e9 fe fe ff
[  393.198907][T10817] RSP: 0018:ffffc9000b466e40 EFLAGS: 00010282
[  393.205744][T10817] RAX: c87901b294cf8d00 RBX: 0000000000000014 RCX: 0000000000080000
[  393.214313][T10817] RDX: ffffc9000c82b000 RSI: 00000000000049e2 RDI: 00000000000049e3
[  393.222522][T10817] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  393.230550][T10817] R10: dffffc0000000000 R11: fffffbfff1c3a708 R12: 0000000000000000
[  393.238702][T10817] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  393.246921][T10817] FS:  00007f4b289f66c0(0000) GS:ffff888125a72000(0000) knlGS:0000000000000000
[  393.255990][T10817] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.262873][T10817] CR2: 0000200000001080 CR3: 000000007654e000 CR4: 00000000003526f0
[  393.270938][T10817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000001be
[  393.279217][T10817] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  393.287492][T10817] Call Trace:
[  393.290828][T10817]  <TASK>
[  393.294431][T10817]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  393.300514][T10817]  mac80211_hwsim_sta_add+0xa3/0x310
[  393.306139][T10817]  drv_sta_state+0x7fd/0x18a0
[  393.310877][T10817]  sta_info_insert_rcu+0x1a30/0x2840
[  393.316487][T10817]  ? sta_info_insert_rcu+0x349/0x2840
[  393.321946][T10817]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  393.327736][T10817]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  393.334281][T10817]  ? ieee80211_add_station+0x4f1/0x6a0
[  393.339781][T10817]  sta_info_insert+0x16/0xc0
[  393.344863][T10817]  rdev_add_station+0xfc/0x290
[  393.349854][T10817]  nl80211_new_station+0x1755/0x1b70
[  393.355367][T10817]  ? __pfx_nl80211_new_station+0x10/0x10
[  393.361057][T10817]  ? netlink_rcv_skb+0x208/0x470
[  393.366189][T10817]  ? nl80211_pre_doit+0x4d5/0x8e0
[  393.371313][T10817]  genl_family_rcv_msg_doit+0x215/0x300
[  393.377019][T10817]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  393.383302][T10817]  ? bpf_lsm_capable+0x9/0x20
[  393.388207][T10817]  ? security_capable+0x7e/0x2e0
[  393.393294][T10817]  genl_rcv_msg+0x60e/0x790
[  393.397872][T10817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.403066][T10817]  ? ref_tracker_free+0x63a/0x7d0
[  393.408366][T10817]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  393.413920][T10817]  ? __pfx_nl80211_new_station+0x10/0x10
[  393.419645][T10817]  ? __pfx_nl80211_post_doit+0x10/0x10
[  393.425584][T10817]  ? ____sys_sendmsg+0x505/0x870
[  393.430596][T10817]  ? ___sys_sendmsg+0x21f/0x2a0
[  393.435633][T10817]  ? __x64_sys_sendmsg+0x19b/0x260
[  393.440813][T10817]  ? do_syscall_64+0xfa/0xfa0
[  393.445651][T10817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.451903][T10817]  netlink_rcv_skb+0x208/0x470
[  393.456804][T10817]  ? __lock_acquire+0xab9/0xd20
[  393.461704][T10817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.466873][T10817]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  393.472242][T10817]  ? down_read+0x1ad/0x2e0
[  393.476840][T10817]  genl_rcv+0x28/0x40
[  393.480873][T10817]  netlink_unicast+0x82f/0x9e0
[  393.485765][T10817]  ? __pfx_netlink_unicast+0x10/0x10
[  393.491159][T10817]  ? netlink_sendmsg+0x642/0xb30
[  393.496248][T10817]  ? skb_put+0x11b/0x210
[  393.500583][T10817]  netlink_sendmsg+0x805/0xb30
[  393.505560][T10817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.511107][T10817]  ? aa_sock_msg_perm+0xf1/0x1d0
[  393.516384][T10817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  393.521723][T10817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.527346][T10817]  __sock_sendmsg+0x21c/0x270
[  393.533180][T10817]  ____sys_sendmsg+0x505/0x870
[  393.538017][T10817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  393.543459][T10817]  ? import_iovec+0x74/0xa0
[  393.548034][T10817]  ___sys_sendmsg+0x21f/0x2a0
[  393.552891][T10817]  ? __pfx____sys_sendmsg+0x10/0x10
[  393.558197][T10817]  ? __fget_files+0x2a/0x420
[  393.563024][T10817]  ? __fget_files+0x3a0/0x420
[  393.567814][T10817]  __x64_sys_sendmsg+0x19b/0x260
[  393.572872][T10817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  393.578409][T10817]  ? do_syscall_64+0xbe/0xfa0
[  393.583476][T10817]  do_syscall_64+0xfa/0xfa0
[  393.588051][T10817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.594287][T10817]  ? clear_bhb_loop+0x60/0xb0
[  393.599039][T10817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.605101][T10817] RIP: 0033:0x7f4b2a78f749
[  393.609591][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.629610][T10817] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  393.638203][T10817] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  393.646353][T10817] RDX: 0000000000000600 RSI: 0000200000001080 RDI: 0000000000000005
[  393.654565][T10817] RBP: 00007f4b2a813f91 R08: 0000000000000000 R09: 0000000000000000
[  393.662683][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.670742][T10817] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  393.678867][T10817]  </TASK>
[  393.681939][T10817] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  393.689861][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.2.1587 Not tainted syzkaller #0 PREEMPT(full) 
[  393.699256][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  393.709330][T10817] Call Trace:
[  393.712625][T10817]  <TASK>
[  393.715577][T10817]  dump_stack_lvl+0x99/0x250
[  393.720215][T10817]  ? __asan_memcpy+0x40/0x70
[  393.724863][T10817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.730097][T10817]  ? __pfx__printk+0x10/0x10
[  393.734729][T10817]  vpanic+0x237/0x6d0
[  393.738754][T10817]  ? __pfx_vpanic+0x10/0x10
[  393.743302][T10817]  ? is_bpf_text_address+0x292/0x2b0
[  393.748889][T10817]  ? is_bpf_text_address+0x26/0x2b0
[  393.754132][T10817]  panic+0xb9/0xc0
[  393.757974][T10817]  ? __pfx_panic+0x10/0x10
[  393.762542][T10817]  __warn+0x318/0x4d0
[  393.766557][T10817]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.772652][T10817]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.778781][T10817]  report_bug+0x2be/0x4f0
[  393.783165][T10817]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.789258][T10817]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.795410][T10817]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[  393.801497][T10817]  handle_bug+0x84/0x160
[  393.805781][T10817]  exc_invalid_op+0x1a/0x50
[  393.810304][T10817]  asm_exc_invalid_op+0x1a/0x20
[  393.815171][T10817] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  393.821866][T10817] Code: b1 20 00 00 48 c7 c7 e0 91 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 40 33 aa fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 bd 12 e8 fa 90 0f 0b 90 e9 fe fe ff
[  393.841693][T10817] RSP: 0018:ffffc9000b466e40 EFLAGS: 00010282
[  393.847836][T10817] RAX: c87901b294cf8d00 RBX: 0000000000000014 RCX: 0000000000080000
[  393.855842][T10817] RDX: ffffc9000c82b000 RSI: 00000000000049e2 RDI: 00000000000049e3
[  393.863866][T10817] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  393.871965][T10817] R10: dffffc0000000000 R11: fffffbfff1c3a708 R12: 0000000000000000
[  393.880001][T10817] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  393.888169][T10817]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  393.894225][T10817]  mac80211_hwsim_sta_add+0xa3/0x310
[  393.899659][T10817]  drv_sta_state+0x7fd/0x18a0
[  393.904456][T10817]  sta_info_insert_rcu+0x1a30/0x2840
[  393.909769][T10817]  ? sta_info_insert_rcu+0x349/0x2840
[  393.915178][T10817]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  393.920852][T10817]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  393.927308][T10817]  ? ieee80211_add_station+0x4f1/0x6a0
[  393.932826][T10817]  sta_info_insert+0x16/0xc0
[  393.937448][T10817]  rdev_add_station+0xfc/0x290
[  393.942237][T10817]  nl80211_new_station+0x1755/0x1b70
[  393.947561][T10817]  ? __pfx_nl80211_new_station+0x10/0x10
[  393.953214][T10817]  ? netlink_rcv_skb+0x208/0x470
[  393.958254][T10817]  ? nl80211_pre_doit+0x4d5/0x8e0
[  393.963328][T10817]  genl_family_rcv_msg_doit+0x215/0x300
[  393.968936][T10817]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  393.975121][T10817]  ? bpf_lsm_capable+0x9/0x20
[  393.979819][T10817]  ? security_capable+0x7e/0x2e0
[  393.984814][T10817]  genl_rcv_msg+0x60e/0x790
[  393.989361][T10817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.994420][T10817]  ? ref_tracker_free+0x63a/0x7d0
[  393.999492][T10817]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  394.004897][T10817]  ? __pfx_nl80211_new_station+0x10/0x10
[  394.010550][T10817]  ? __pfx_nl80211_post_doit+0x10/0x10
[  394.016030][T10817]  ? ____sys_sendmsg+0x505/0x870
[  394.020996][T10817]  ? ___sys_sendmsg+0x21f/0x2a0
[  394.025871][T10817]  ? __x64_sys_sendmsg+0x19b/0x260
[  394.031095][T10817]  ? do_syscall_64+0xfa/0xfa0
[  394.035790][T10817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.041934][T10817]  netlink_rcv_skb+0x208/0x470
[  394.046726][T10817]  ? __lock_acquire+0xab9/0xd20
[  394.051768][T10817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  394.056804][T10817]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  394.062215][T10817]  ? down_read+0x1ad/0x2e0
[  394.066656][T10817]  genl_rcv+0x28/0x40
[  394.070752][T10817]  netlink_unicast+0x82f/0x9e0
[  394.075561][T10817]  ? __pfx_netlink_unicast+0x10/0x10
[  394.080867][T10817]  ? netlink_sendmsg+0x642/0xb30
[  394.085830][T10817]  ? skb_put+0x11b/0x210
[  394.090188][T10817]  netlink_sendmsg+0x805/0xb30
[  394.095089][T10817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.100412][T10817]  ? aa_sock_msg_perm+0xf1/0x1d0
[  394.105382][T10817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  394.110969][T10817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.116290][T10817]  __sock_sendmsg+0x21c/0x270
[  394.121094][T10817]  ____sys_sendmsg+0x505/0x870
[  394.125916][T10817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  394.131345][T10817]  ? import_iovec+0x74/0xa0
[  394.135981][T10817]  ___sys_sendmsg+0x21f/0x2a0
[  394.140707][T10817]  ? __pfx____sys_sendmsg+0x10/0x10
[  394.145992][T10817]  ? __fget_files+0x2a/0x420
[  394.150604][T10817]  ? __fget_files+0x3a0/0x420
[  394.155335][T10817]  __x64_sys_sendmsg+0x19b/0x260
[  394.160385][T10817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  394.165962][T10817]  ? do_syscall_64+0xbe/0xfa0
[  394.170755][T10817]  do_syscall_64+0xfa/0xfa0
[  394.175309][T10817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.181401][T10817]  ? clear_bhb_loop+0x60/0xb0
[  394.186096][T10817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.192003][T10817] RIP: 0033:0x7f4b2a78f749
[  394.196443][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.216338][T10817] RSP: 002b:00007f4b289f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.224777][T10817] RAX: ffffffffffffffda RBX: 00007f4b2a9e5fa0 RCX: 00007f4b2a78f749
[  394.232778][T10817] RDX: 0000000000000600 RSI: 0000200000001080 RDI: 0000000000000005
[  394.240809][T10817] RBP: 00007f4b2a813f91 R08: 0000000000000000 R09: 0000000000000000
[  394.248977][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.256992][T10817] R13: 00007f4b2a9e6038 R14: 00007f4b2a9e5fa0 R15: 00007ffc608a75f8
[  394.265012][T10817]  </TASK>
[  394.268360][T10817] Kernel Offset: disabled
[  394.272702][T10817] Rebooting in 86400 seconds..