last executing test programs:

3m3.225362284s ago: executing program 3 (id=47):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb86dd6d00200000fb11ff200100000000000000000007ffffff02ff0200000000000000000000000000014f194e2000fb90"], 0x135)

3m2.850818662s ago: executing program 3 (id=50):
r0 = semget$private(0x0, 0x207, 0x53)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/8) (async)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/8)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0902, 0x0)
write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock '], 0xd) (async)
write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock '], 0xd)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
write$vga_arbiter(r1, &(0x7f00000003c0), 0xf) (async)
write$vga_arbiter(r1, &(0x7f00000003c0), 0xf)
syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000580)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902740003010680070904000000010100000a2401a80f0a000201020904010000010200000904010101010200000a2402020100020004050a24020281000900060009050109000406b80807250104050100090402000001020000090402010101020000090582092824027705072501084c689dfe3259e5bdf01800c4076ebc6e6b81642719d0f18b3039db29b4f6bcdfa3aec305aa44f3779a32334e1e94f5c188fa71d8df6df3a1d12d91d2a8ed06d465431316969ce08a398f62dee7fd1174513ef073347cf493d009317dedd5694d939df21f564f6367c70c5586538e5b74d10efd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) (async)
writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async)
sendmmsg$sock(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8, 0x41, 0xd3, 0xfffffff3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000440)=""/95)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7fffffffffffffff, 0x4}}, 0x30)
socket$key(0xf, 0x3, 0x2) (async)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, 0x0)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYRES16=r5], 0x10}}, 0x48d1)

3m1.219069173s ago: executing program 3 (id=57):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080c0}, 0x404481c) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080c0}, 0x404481c)
syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[], 0x0)

2m58.18459866s ago: executing program 3 (id=61):
syz_usb_connect(0x5, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x300, 0xf3, 0x55, 0x4c, 0x20, 0x1f71, 0x3306, 0x600e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x38, 0x29, "", [{{0x9, 0x4, 0xaa, 0x7, 0x0, 0x2e, 0x22, 0xd2, 0xb}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x60000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r3=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r3)

2m56.682978986s ago: executing program 3 (id=70):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0)

2m56.411045064s ago: executing program 3 (id=73):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40204000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0xfffffffffffffffa, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x70, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x82}, {0x5000, 0xdddd0000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xc000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x8000000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x8}, {0x3000, 0x3000, 0x9, 0x5, 0x7, 0xe, 0x7, 0x3, 0x8, 0xff, 0x5, 0x70}, {0x8080000, 0x4000, 0x8, 0x5, 0x3, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0xbf4}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x4800, 0x8080000, [0x6800000000000000, 0x4, 0x2, 0x8]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0xfffffcda, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4008840)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x0)

2m56.078344262s ago: executing program 32 (id=73):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40204000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0xfffffffffffffffa, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x70, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x82}, {0x5000, 0xdddd0000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xc000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x8000000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x8}, {0x3000, 0x3000, 0x9, 0x5, 0x7, 0xe, 0x7, 0x3, 0x8, 0xff, 0x5, 0x70}, {0x8080000, 0x4000, 0x8, 0x5, 0x3, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0xbf4}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x4800, 0x8080000, [0x6800000000000000, 0x4, 0x2, 0x8]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0xfffffcda, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4008840)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x0)

2m42.607099937s ago: executing program 2 (id=140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000440)=""/4090, 0xffa)

2m42.419572506s ago: executing program 2 (id=143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r1, 0x101, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x0, 0x5, 0x0, {0xf, 0x16b1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x5}}]}, 0x4c}}, 0x20004800)

2m42.220547485s ago: executing program 2 (id=144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r1, &(0x7f0000000440)=""/4090, 0xffa)

2m42.173631925s ago: executing program 2 (id=145):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xf203, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2m41.218292041s ago: executing program 2 (id=155):
r0 = syz_usb_connect$lan78xx(0x4, 0xfffffffffffffd27, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffb8}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
close(r1)
socket$packet(0x11, 0x2, 0x300)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="3c0000000200"})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x4, "8e9a515d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0xb6b, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x50, 0xdc, 0x97, 0x8, 0xbda, 0x2832, 0xe95d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb59, 0x4, 0x5, 0xd8, 0x20, 0x0, "", [{{0x9, 0x4, 0x1c, 0x8, 0x1, 0x3, 0xab, 0x35, 0xa, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "88a314190290"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x5d4, 0x18}}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x80, 0x8, 0x10, 0x9}]}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x7, 0x7, 0xc, [@generic={0xd5, 0x18, "2b0f7a9d382f6ce5e67539b380f2c2b5f25ad66ac1fe5a6886e1201642101314638a89ed438fb0f494b9e495bafe87afc1712c327bd70296d0c3d131baa4d0251f042453ef62d330c401b85fc6995d238567e1287e8dad9ea3e331663c7c83f2f3705f3274d31a3922ef8fab59f57d1e80ffb341b6bf56250f9235b57ba1c4416bc050e309533a9809607e6a232b31b7903bea43b31619889f55c2f7ec59582963b1836bb03f24439c603bca614d9d4a9d92bb99bcef067302609c5c4f05ad9be9bcb8a3634c728a54600111dd41e700b9ec0f"}]}}]}}, {{0x9, 0x4, 0x33, 0xc, 0x10, 0x5a, 0xb4, 0x8c, 0x5, [@generic={0xaa, 0x9, "f46cc86e083d658513b1097c3459b4b86e3fc57e51642421cd381d02bfbed92f2e7affb13a8f9f2fe50028673075ff64b03c76b7fec9eb50df03609f730c09cf26f27eb9a9b9e2c6d6bb3eedcb8e362f68f02f7c204b2f4fa69b5f37c4cdae45fc1421877783b25ac766bc1ae06fef7dd62b43e00b44ecf062fa5125abc790cf645e7de6b4df6677686b95e7732713dacc1efb57730bd4ec5ca9c12b125997e10ae392f143cf1e2a"}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x6, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x8f, 0x1, 0x67}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x4, 0x18, 0x9}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x7f, 0xa, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xed, 0x7, 0x0, [@generic={0xfb, 0x24, "e0faf54d4d21af449112287e4195f123d9e89209710b8ebfbfa6f097403d9f6f9bd331a56f3001aea20a9f5476441a6867bcdaa532efe86b29448f5b0b214f2ba172afc39c3d4a2dd24b0d6abc207af3e6b729bd000e08e6e0a6a24fee8d071bbe468c83f8d1e026e1a2d117d4887371bae5363c6afdcea1c04920aed1fe6d813b76cbda55c8f3b0a9e91f78fb3d315bf057232182d28654001a1c0cdbb4ff5d361fe0beacebb3b3ecbb1dedc5030cc65aeaaf61d9308192f6f09dd8f06c1f5834751757053c00b91785b0481ed56b17e008e4561efe26f8893f5ac504ad4e037d9cc64b30aaaebe60e09e43e3e2761e3c52d8b0a51549e838"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x7, 0xfe, 0x6, [@generic={0x5e, 0x5, "f5b65f97b1e1b217c08370bdc94f5fd6d59868a4d0e59b37e2e1e6e700778e5a7e57d7e38e74708b0197b1a991250b0a6616490e1bb9d8a117b3ccba6a79029ab4061b583fc094fd25d122967f6a92006ab5aaa8e88baec462af3cb2"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0xff, 0x81, 0x8f}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x1, 0xf7, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x58, 0x5, 0xd, 0xf, [@generic={0x36, 0xb, "cc5bfa60cc29ea65213d6efa359703207bc56bb2ab1351db91eb0e14f1c9f3d1e13893e7e3668043a8fff28f2c29d560dba44503"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0xa, 0x99, [@generic={0x93, 0x5, "dc49f83e3127529d6e3160e255255a2a41a7551a44bbbc533393b0ea55f70a2209782b8f15db13f0e78983530ec70f82ccaa699287525811edd5437df2b3c9e9929c9cb04ffbdf443a3d0dfba370c66e333564b36bf3181a8b1d9ed02f6aa97dc14aa2423b5bafe2ca3a9fe93d41ba1970aa23478a1672ca9fa98b25d914a1e46c9975203b799ae1a2c712e3f408f60aed"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3f7, 0x81, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0x400}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x9, 0x7, 0x1, [@generic={0x52, 0xc, "37bb963ea12133c32b08b4ff9d5d84c713b202d963b901b198383ce1a920e43e1321dfee2a31b5fc2fc2aa4c25ffdff39e35197ab061e351887ae05bba0386661587983315781ad2759815b9854c60f4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x220, 0xff, 0xc, 0x5}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xb, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0xfffc}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x0, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x88}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3df, 0x4, 0x9b, 0x2}}]}}, {{0x9, 0x4, 0x16, 0xa0, 0xd, 0x50, 0x1e, 0x42, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4000, 0x35}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x402, 0x3, 0x1, 0x1, 0xff, 0xaf}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x6, 0x4}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x8, 0x0, "0105"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x6, 0x5, 0x9, 0x8], 0x4}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "79e8f8a780"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x0, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1, 0x3}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x8000, [0x1, 0x4, 0x7]}]}], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x14, 0x8, 0x3, 0x3c, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0xfffd}, @generic={0xc7, 0x21, "b464b2f428312baf7e4b37adb91f49d87f1a65bffca65fb31878939f727148ca2a1bddf9b242a7e54559937aecb0cebc693da86bf50bd3e5831709a49defbe67a419a24a7633f95b68ed719482539141c460ef3a4a3159602b96712acd44b9dee8766c71e05c930f29958d07edd20144bffa36060e08fb5f31d7d5d7ff13d50bc32282fc77fa71aeb763f65c986dac93c223bc267e35364c41e8b8a75b5461f7e6f55286be56ec32f8e885c3c228879711be61551fa7be75acf16e7466eed9866517d3ead7"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x4, 0x6, 0x40}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x1, 0x40, 0xc, [@generic={0x43, 0x31, "51bdb1fd3061d8dc49e0fd281eef1818d5820fb914ef96880131dac673d42058d62074018b80ebfbefab60fd0008fc1ff2e3e80a73c1b2d4e954b68f39e4a83efd"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x48, 0xf8, 0x5, 0x3}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x96, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x3a, 0xf1, 0x9, [@generic={0x11, 0x22, "5b38006644c0ffcf9564131a31eb9d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x2, 0x3, 0x9d, [@generic={0xcf, 0x1, "15064e7b5a3136f5f44c8ad7bb37721bc2dde27a19d7d9e6cac3cebb7e1fc03617e4646226be2ed78498aa25e0c4e75d5b1438f8dfdfcaead1f7be50d81c0ea59008160ff87f2e96e7ba719b86e78d0804c8ca533011a50f1e8ccbf5752619a40beaaa8fd53eed15f2e15420e5cb5c99c960c65fd6d129191ad3140c6eb3018af4940eb49ddffc62d8b325caaf0e2470f24683123094a21ad6490a3a9a1207f164046825f96df1e3c52c1077ce2da1b7c78f19665ee919b854319984a1a2a6410a68942499cb1429100b9925fd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0x603112303a952dd1, 0xc, 0x0, 0x1, 0x1d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9d9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xeb, 0x1a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x31a}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x1, 0xb}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x85, 0x5}}]}}, {{0x9, 0x4, 0xfc, 0xb, 0x6, 0xa5, 0x0, 0xa0, 0x4, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x7f, 0xfb}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xf3, 0x4, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x10, 0x7, 0x7}}, {{0x9, 0x5, 0x8, 0xb, 0x8, 0x0, 0x7, 0xf9, [@generic={0xe5, 0x24, "94ccda5fd75f13e1d59be92f68ba5a60f5dfb388e4d2e91b428c0af358b642a9c4c2b7fb5ba867aa6e5fe14a5a49bcd6e175d830979b16fc3b61684a42d6058615f5f8c382518f15cf8a8cff7c394330c6bfd0932bf040c286afec1a5fe96fd0ec128e0abc0bb433196e901ffef2d7f326050eb9bff977e1778ac46cd6fbbde9bf0dc9f47a60154542033357c4586b1bd4942f4cd73c822dcb3121c5ff3dd26f6dddaac96165bdb2349f9b3f5bbad3d68d4448d7ed9854fdf8c85dca2d2b461aa6e4a4c08ed5814fdfa5b6b4a8da789dc666898a4cf5f69a93612a8b023960048d5f75"}, @generic={0x79, 0x5, "a04b3e10723f84909a17d4b118066a159f335d838ad3fa71849073821a5de8b66a205907f2c9725ffdc4b377fd6082b3f60c180a381560d72fce146f49108bcf03415b65e67d0ffe2da154e61aaea7341dcec518f73d06884db191b649fc62ce71964ac0362795b501156d1124b083991423e73ad65a77"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x8b, 0xd, [@generic={0xc4, 0xf, "fe75eba097bb3287ed6c5e38717bcc3a38ff91bd68509261fa8ebf0c593282248f64f0734299c4c84f2939eef78f261e77f135467efb05c8885efed080cf8ef051d34923f17483cd302262d559a6488eb6e809cee1394630d4bb57d0f5a31b26c82ad54712448f0c3d813e0628aa9fa3fb4d5d05ea5c6a3957cc95b0369510e7a45f9e48c03cedf8c5ce930f62e12ec09f92da6a92a8673e5925f93a32c93eb424a96f7c0d10499412cc24c427a58245d8f4c9fdf09eedff39bdbb4a56adbe85781b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x6, 0x0, 0x0, [@generic={0xca, 0x21, "4bbe18dad08e924bfc6568d4302afa605380005a152579132e92acf955b11bf53a5004006f2147310427b08ffe314b5f6628405444173cadc1e3fd90f86bc18ce19b19238cb02ae3c741012c15fc9de0de706816bd08c0729e841be88f8d98836bb2e88e65f4a8da92898e7daaeed59466f26a3799135b0b30118dc63dd24ee5882ee8877cb2e0ce68f75514936cf3769094a25bfdb2ba34668213af571a39d07679e1ee2866f3a1a19f4630d6c96ab90c958875fef3d3f2409285fdc7913eb2c79b2080f1b701e9"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x7, 0xb7, 0xff, 0xa}, 0x69, &(0x7f00000001c0)={0x5, 0xf, 0x69, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x6, 0xff, 0x1c}, @generic={0x59, 0x10, 0x3, "28b1f3bb5c54eb6286e9751ab7699299303f44050831e4c66b49245bd83d11fd48d48e53458fc490b64d46b883c93c4a2c2786f47c1911c4d70bc14497f856527f49977c9647f0c1fff876290e94f8b0d2872c74559a"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}, {0x16, &(0x7f00000002c0)=@string={0x16, 0x3, "4da3ba8a6a67c6da2057037a43926552947fe60b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4}}, {0xf9, &(0x7f00000003c0)=@string={0xf9, 0x3, "a116646aae4423a7ad98637aa0e2b807dd9ce333c480c43f6b1e570441a24f306abab1903e6e940b59c84777da2e38c3a2b5345eac559ec66e905685dd3588019293ac6ace16a8cbb5b8540b7f9c44b1e63d5dbc4ea0d35ec559660f51cbfd0892929d96d17678fc6dd50dd30ed0bc2c6367f0f4948d55e106b3b6a8e624e0f47d32f549e74ca6bc2bd234923bf775e7f65dd94dad35374b8bf7b06f9cb94ca79756ebced766da4faaf899c1e148a60c03c9975f52a199230ec50b1a8927b77fe8fc56c2a191c880bef780bf3044d58f37d44df4e9c4da363898801652ba4cd879639c2eda4b244271f9cefb49419a68dbd0dd98281876"}}, {0xdc, &(0x7f00000004c0)=@string={0xdc, 0x3, "211869763c8c4e02c60b86c5ad52811f8eadb2be130c4dfd7d095054b93b5ea14defc84135c5245fe6a44f2d36c132eb713518e0c40c16af42f9a3fb8d6d789e9214ffaf3c83a35dc4a0f63f65b4c12c4e48ef95971b09aa5ea109e95e3bb61b9dbd4f0c4c07bd4e744f89b3afa2f16aba87e85ab53874a1f18603ab94ae1b2b242d13d31800d75899952d522828afbd70482499365658a4b35adc65d704879223c83443c9a59a308cfa2e6dee73a4f927cc5714463c8973479a16f4122859abf8958fb9f13a13eed8458c439d61a82c06f044c2264a2508b55c"}}]})

2m39.056115322s ago: executing program 2 (id=163):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x20000000000}}], 0x58}, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14)
syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0xa)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000040)=0x7)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xd, r7, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0, 0x30})
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000000)=0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000004a00)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x101}, 0xc0, 0x5d, 0x2, 0x2, 0x25, 'syz1\x00', "329400659d276e2f1d005e8ded44b8acb09e6f77a822eedae6681aad41c8b0f9", "bbadb326015683d96619fff671959300e4e4c8f0c9e53217b074dca2268f1961", [{0x5, 0x40, {0x0, 0x1}}, {0x9787, 0x8906, {0x2, 0x7b0}}, {0x7ff, 0x627, {0x3, 0x8}}, {0xcb6e, 0x1, {0x0, 0x7}}, {0x6, 0x5, {0x3, 0x2470afd1}}, {0x9, 0x5, {0x0, 0x3}}, {0x3, 0x1, {0x3, 0x7}}, {0x4, 0x6, {0x3, 0xa}}, {0x44dd, 0x4, {0x2, 0x7}}, {0x100, 0x6, {0x0, 0x9}}, {0x7fff, 0x80, {0x3, 0xd017}}, {0x1ab, 0x4, {0x2, 0x18e4}}, {0xfff0, 0x3, {0x1, 0x7827}}, {0x6, 0x7ff, {0x2}}, {0x9, 0xfff0, {0x1}}, {0x52a, 0xffff, {0x3, 0x5}}, {0x9f6, 0x7, {0x0, 0x8}}, {0x0, 0xafc4, {0x3, 0x4}}, {0xfff7, 0x3, {0x1, 0x80000001}}, {0x7, 0x17e0, {0x3, 0x7f}}, {0x1, 0x7, {0x0, 0xfff}}, {0xfffd, 0x8, {0x1, 0x9}}, {0x671a, 0x3, {0x2, 0x7}}, {0x3, 0x904c, {0x1, 0xfff}}, {0x3, 0x3, {0x0, 0x8001}}, {0xfff, 0x800, {0x0, 0x8}}, {0x4, 0x8, {0x3, 0x9}}, {0x2, 0x6, {0x0, 0x2}}, {0xe01e, 0x5, {0x3, 0x2}}, {0x28b9, 0x81, {0x0, 0x1}}, {0xdd1e, 0xfff, {0x2, 0x80000001}}, {0xa0, 0x90c8, {0x3, 0x6}}, {0xb1, 0x400, {0x0, 0x6}}, {0x3ff, 0x6, {0x2, 0x2}}, {0x2d9a, 0x64, {0x3, 0x2}}, {0x7, 0x8000, {0x3, 0x7}}, {0xe80, 0xf9f, {0x1, 0x3576}}, {0x3, 0x100, {0x3, 0x3}}, {0x200, 0x0, {0x2, 0x7}}, {0x8, 0xfffa}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x8, 0x6, 0x6, 0x3, 0x1b, 'syz0\x00', "a1bb6a361d40d412729099d4795793a0bf1a96c098ec19e2a00e784b56428689", "5f439538219957e3aaa2c656e9e1494b74a64150c1ef53e65ec2939c2de268f4", [{0x1ff, 0x1, {0x3, 0x6f}}, {0xb6a, 0x4, {0x3, 0x7}}, {0x6, 0x2, {0x0, 0xe}}, {0xfff8, 0x0, {0x1, 0x80000001}}, {0x8, 0x1, {0x1, 0x9}}, {0x100, 0xcd, {0x2, 0x2}}, {0x4, 0x3, {0x1, 0x2}}, {0x2, 0x6, {0x2, 0xc02}}, {0x101, 0x0, {0x0, 0x3}}, {0x1, 0x400, {0x2, 0x2}}, {0x1ff, 0xc1d, {0x1, 0x7}}, {0x8000, 0x7, {0x1, 0x6}}, {0x9, 0x4, {0x1, 0x2f}}, {0x3, 0x7, {0x1, 0x4095}}, {0x5, 0x2, {0x1, 0x6}}, {0x1, 0x7, {0x1, 0x8}}, {0x0, 0x200, {0x1, 0xc}}, {0x9, 0x8, {0x3, 0x27}}, {0x6, 0x5, {0x1, 0x7}}, {0x8c16, 0xffff, {0x0, 0xa00}}, {0x3ff, 0x1, {0x2, 0x7fffffff}}, {0xfff1, 0x7a83, {0x3, 0x9}}, {0xf, 0x0, {0x2, 0x925}}, {0x3, 0x7, {0x2, 0xb7}}, {0x1, 0x30, {0x0, 0x2}}, {0xfffa, 0x9e, {0x3, 0x40004}}, {0x4, 0x8000, {0x1, 0xc46}}, {0x7, 0x7ff, {0x0, 0x80000001}}, {0xff2, 0x4f6d, {0x2, 0x7}}, {0x7, 0x2, {0x91cb8941c2d4031b, 0x100}}, {0x4, 0x4, {0x1, 0x8000}}, {0xfc01, 0x1, {0x3, 0x400}}, {0x7, 0x2, {0x2, 0x101}}, {0x81, 0x4, {0x2, 0x29}}, {0xe000, 0x7b, {0x3, 0x2}}, {0x3, 0x1, {0x1, 0x4}}, {0x400, 0x9, {0x2, 0xffffffff}}, {0x7, 0xd, {0x0, 0x8d8}}, {0x1, 0xf000}, {0x6, 0x1800, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x4d}, 0x2, 0x9, 0x2, 0x6, 0x28, 'syz0\x00', "e2581d7bbf590ef0717348e27b27841165b07a473377f715e786b7dc1f8518a5", "2c2667373d972402070d394e68838e7af2badd1840a99271fd6908a204159f77", [{0x7, 0xa553, {0x0, 0xfffffff8}}, {0x2, 0x4, {0x2, 0x9}}, {0xf57c, 0x2, {0x3}}, {0x8, 0x5, {0x3, 0x40}}, {0x2824, 0xd, {0x3, 0x8}}, {0x70, 0x0, {0x3, 0x80000001}}, {0x80, 0xfc, {0x0, 0x50}}, {0x6, 0x2c0, {0x3, 0x18000}}, {0x3, 0x5bfa, {0x0, 0x9}}, {0x1, 0x8, {0x0, 0xfffffffe}}, {0x5, 0x3, {0x3, 0xd}}, {0xd, 0xb838, {0x1, 0xfd}}, {0x401, 0x24, {0x3}}, {0x7ff, 0x7ff, {0x1, 0x6}}, {0x5, 0x3ff, {0x1, 0x8}}, {0xfff8, 0x5, {0x0, 0x5}}, {0x2, 0x3ff, {0x3, 0x81}}, {0xe, 0xf, {0x1, 0x9}}, {0x10, 0x56, {0x0, 0x3}}, {0x3, 0xc99, {0x0, 0xfffffffb}}, {0x5, 0x4, {0x2, 0x2}}, {0x9, 0x9e, {0x0, 0x11}}, {0x8, 0x8, {0x1, 0x81}}, {0x6, 0xfff7, {0x1, 0x3}}, {0x3, 0x9, {0x0, 0x9}}, {0x200, 0xffff, {0x1, 0x1}}, {0x0, 0x0, {0x3, 0xfffffffa}}, {0x9, 0x6, {0x3, 0x10001}}, {0xff, 0x1, {0x0, 0x6}}, {0x8, 0x3, {0x3, 0x1}}, {0x1, 0xc1, {0x3, 0x4e9}}, {0x0, 0x9, {0x2}}, {0x48, 0x1, {0x2, 0xaab6}}, {0xe, 0x9e9a, {0x2, 0x6}}, {0xc1, 0x0, {0x3, 0x80000000}}, {0x9c5, 0xd, {0x2, 0x800}}, {0xdfc, 0x800}, {0x8000, 0x0, {0x0, 0x2}}, {0xfffd, 0x6033, {0x1, 0xe8}}, {0xfff8, 0x6b, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x11}, 0xc3, 0x80, 0x8, 0x7, 0x24, 'syz1\x00', "3ea95190e7292e2079399efb9c88d8be6270d5d9774b85dc04e88b73eb2ccb8e", "4bd4b3f456a89d4f6ee57621b8fb32f0dd1ff86f0374c2d0b319897b698dc19c", [{0x9, 0x0, {0x1, 0x10001}}, {0xc, 0x2, {0x3, 0x40}}, {0x0, 0x7, {0x2, 0x3}}, {0x9, 0x2, {0x0, 0x9}}, {0x6, 0x2, {0x0, 0xffff}}, {0x0, 0x507c, {0x0, 0x5a}}, {0x6, 0x2, {0x2, 0x2}}, {0x401, 0x9, {0x1, 0x1}}, {0x93f, 0x6, {0x1}}, {0x0, 0x42, {0x2, 0x7}}, {0x8b76, 0xffff, {0x1, 0x8}}, {0x8, 0x6, {0x0, 0x8}}, {0x1, 0x251, {0x2, 0x9}}, {0xadf4, 0x0, {0x0, 0x3}}, {0x7fff, 0x4, {0x0, 0x4c3a}}, {0x8, 0x6, {0x3, 0x6}}, {0x7f, 0x5, {0x1, 0x4}}, {0x0, 0x6, {0x1, 0x4}}, {0x0, 0x10a8, {0x2, 0x8}}, {0x14d1, 0xb6db, {0x3, 0x8}}, {0x71bb, 0x9, {0x3, 0x2}}, {0x3, 0x0, {0x1, 0xfffffffe}}, {0x5, 0x8, {0x1, 0x9}}, {0x401, 0xaf6, {0x3, 0x4904}}, {0x7, 0x400, {0x0, 0x3}}, {0x2, 0x3ff, {0x2, 0x175800}}, {0x7, 0x5, {0x1, 0x3}}, {0x400, 0xfff, {0x0, 0x1ff}}, {0xffff, 0x3, {0x1, 0x3}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0xf897, {0x3, 0x8}}, {0x1, 0xd, {0x2, 0x86}}, {0x2, 0x7, {0x0, 0x8}}, {0x6, 0x7574, {0x0, 0x7933}}, {0x7, 0x8001, {0x1, 0x909}}, {0x4, 0x982, {0x3, 0x4}}, {0x8, 0x123, {0x3, 0x1}}, {0x7fff, 0x6, {0x0, 0x6}}, {0x3ff, 0xe49b, {0x3, 0x3ff}}, {0x0, 0x8, {0x2, 0x68b}}]}}}, {{0x254, 0x1, {{0x0, 0x80000001}, 0x4, 0x9, 0x7, 0x6, 0x4, 'syz1\x00', "22b0ce83e53702fd341b40ab564200173953ff301537514de520515882bd0d1b", "6477f4ef75db5ac566be11b97cd5b088aa71c944b28e5fce985f730e3ddfe2c8", [{0x9, 0x32a, {0x1, 0x873}}, {0x9, 0x9, {0x2, 0xf3}}, {0xffcd, 0x1ff, {0x0, 0x4}}, {0x9, 0x1, {0x0, 0x38}}, {0x6, 0x9379, {0x2, 0xfff}}, {0x8, 0x10, {0x0, 0x4}}, {0x193, 0x8001, {0x3, 0xf95}}, {0x4, 0xa898, {0x3, 0x5}}, {0x6, 0x8, {0x2, 0x1}}, {0x5, 0x9, {0x3, 0x1000}}, {0x9, 0x40, {0x1, 0x8}}, {0x267d, 0xf001, {0x1, 0x7fffffff}}, {0x8, 0x2, {0x2, 0x2}}, {0x9, 0xd, {0x2, 0xa8}}, {0x67, 0x1000, {0x0, 0x3}}, {0x7, 0xff7f, {0x0, 0x1000}}, {0xaf7e, 0x7, {0x2, 0x1}}, {0x7ff, 0xf, {0x0, 0x9}}, {0x8, 0x9, {0x2}}, {0x6, 0x1, {0x0, 0x40}}, {0x1ff, 0x8, {0x0, 0x2}}, {0x6, 0x200, {0x0, 0xf}}, {0x1, 0x6, {0x1, 0x5}}, {0x8, 0x5, {0x2, 0xffff}}, {0x101, 0x2, {0x3, 0xfffffffa}}, {0xfff7, 0x7, {0x1, 0x5}}, {0x1, 0x9, {0x2}}, {0x100, 0x9, {0x0, 0x7}}, {0xdfce, 0x3, {0x2}}, {0x7, 0x401, {0xf81d9eb6f10ea938, 0x40}}, {0x6543, 0x1, {0x1, 0xfe57}}, {0x7fff, 0x101, {0x2, 0xfffffe01}}, {0x1, 0x4, {0x0, 0x16c8c0}}, {0x16, 0x5, {0x1, 0x7}}, {0x1, 0xf001, {0x3, 0x6}}, {0xd4, 0x635d, {0x0, 0xffff9d04}}, {0x3, 0xfb69, {0x3, 0x9}}, {0x6, 0x2, {0x3}}, {0x5, 0xc6, {0x3, 0x2a89}}, {0x1, 0x0, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x9, 0x80, 0x6, 0x4, 0x5, 'syz1\x00', "7dbd7815f31e8c5dd2bfec5bebcaaa6fcf0f5484e3f99b6e110f4a39827261c5", "5e8692607b424b2e780622cd7a48a7d45372c8d24ac081d86232039f7e2070e1", [{0x5, 0x4, {0x2, 0x2}}, {0x8de, 0x10, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0x7f}}, {0x9d, 0x1, {0x1, 0x2202}}, {0x9, 0xf9, {0x1, 0xfffffffb}}, {0x7, 0x247a, {0x3}}, {0x4, 0xfff8, {0x2, 0xfffffffa}}, {0x8, 0x8001, {0x3, 0x4}}, {0x6, 0x10, {0x2, 0x7}}, {0x200, 0x400, {0x1, 0x9}}, {0x5, 0x1, {0x3, 0x8}}, {0x8, 0xc, {0x3, 0x8}}, {0x2, 0x6, {0x1, 0x8001}}, {0xfff, 0x8, {0x0, 0x5}}, {0x2, 0x1, {0x0, 0x20000}}, {0x2, 0x1, {0x2, 0x50000}}, {0xfff7, 0x3ff, {0x3, 0x81}}, {0x8, 0x4, {0x2, 0x6}}, {0x3, 0xf1, {0x3, 0x5}}, {0x0, 0x8, {0x0, 0xd}}, {0x15, 0x5, {0x17115c76b5576ce5, 0xd879}}, {0x3, 0x4, {0x2, 0x401}}, {0x3, 0xdd, {0x3, 0x558}}, {0x0, 0x1, {0x3, 0x80000001}}, {0x7, 0x5, {0x0, 0x5}}, {0x100, 0xd6c3, {0x1, 0x7}}, {0x1, 0x1, {0x2, 0x9}}, {0x3, 0x5, {0x80aae75617de406f, 0x8}}, {0x7f, 0x2ec, {0x1, 0x4}}, {0x8, 0x4, {0x0, 0x86a}}, {0x121, 0x5, {0x2, 0x6}}, {0x4, 0x80, {0x3, 0xe90}}, {0x200, 0x1, {0x2, 0xf1}}, {0x8, 0x6552, {0x3, 0x89}}, {0x100, 0x9, {0x2, 0xffff}}, {0x2, 0x7, {0x1, 0x3}}, {0xb, 0x327b, {0x1, 0x3}}, {0x929, 0x0, {0x2, 0x6}}, {0x1e2e, 0x5, {0x2, 0x3}}, {0x6, 0x9, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x4788349a}, 0x3, 0xe, 0x37e1, 0x1, 0x27, 'syz0\x00', "c491f8e66e8c5634fe0a26187a3ba2fcdafdf6ad6a13ac128a59d09862ac8b7d", "d0162483400eb0415c00f6d8d40c227f8e3050f747ea9f6843451a411dabcc05", [{0xb, 0xfffb, {0x1, 0x8}}, {0x986f, 0xff, {0x1, 0x7}}, {0x10, 0x80, {0x1, 0x4}}, {0x200, 0x7fff, {0x0, 0x9}}, {0x9, 0x8001, {0x0, 0x3}}, {0x4b7, 0x6, {0x2, 0x7}}, {0x6, 0x15, {0x2, 0x5}}, {0x3, 0x3, {0x5, 0x80000000}}, {0x400, 0xe9, {0x1, 0x5}}, {0x3ff, 0x9, {0x3, 0x4e}}, {0x4, 0x3, {0x1, 0xffffff58}}, {0x7, 0x7, {0x0, 0x1}}, {0x5, 0x3, {0x0, 0x7}}, {0x9, 0xfe00, {0x2}}, {0x21, 0x7ff}, {0x4, 0x1ff, {0x2, 0xb}}, {0x8, 0xe78e, {0x1, 0x7}}, {0x8, 0x800, {0x2, 0xfffffffd}}, {0xfff2, 0x7, {0x1, 0x6}}, {0x2, 0x8, {0x1, 0x40}}, {0x80, 0x8, {0x1, 0x1}}, {0x6, 0xab, {0x1, 0xffff}}, {0x7, 0x79, {0x3, 0x24eeaa14}}, {0x0, 0xe44e, {0x1, 0x7fffffff}}, {0x8, 0x3, {0x2, 0x3ff}}, {0x8000, 0x8b86, {0x2, 0x3}}, {0x9, 0x7, {0x0, 0x9}}, {0x3, 0xd93c, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x8}}, {0xffff, 0xcd, {0x1, 0x2}}, {0x651, 0x1a9c, {0x1, 0x4}}, {0x40, 0x9, {0x2, 0xc}}, {0x800, 0x0, {0x2, 0x100}}, {0x8, 0x60d, {0x1, 0x400}}, {0x1, 0x9, {0x3}}, {0x87a, 0x8001, {0x2, 0x1}}, {0x4, 0xc, {0x3}}, {0x0, 0x6, {0x1, 0x8}}, {0x6, 0x9048, {0x1, 0x9}}, {0x2, 0x6, {0x2, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x8010}, 0x40010)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2cb1596aec3ade5bd780f601e976726f6f746d6e64653d30303030303030843030303030304230303031", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r9, &(0x7f000001a240)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x5, 0x24ff8719c9b99d2f, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x80, 0x427a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)

2m23.817368392s ago: executing program 33 (id=163):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x20000000000}}], 0x58}, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000280))
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14)
syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0xa)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000040)=0x7)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xd, r7, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0, 0x30})
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000000)=0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000004a00)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x101}, 0xc0, 0x5d, 0x2, 0x2, 0x25, 'syz1\x00', "329400659d276e2f1d005e8ded44b8acb09e6f77a822eedae6681aad41c8b0f9", "bbadb326015683d96619fff671959300e4e4c8f0c9e53217b074dca2268f1961", [{0x5, 0x40, {0x0, 0x1}}, {0x9787, 0x8906, {0x2, 0x7b0}}, {0x7ff, 0x627, {0x3, 0x8}}, {0xcb6e, 0x1, {0x0, 0x7}}, {0x6, 0x5, {0x3, 0x2470afd1}}, {0x9, 0x5, {0x0, 0x3}}, {0x3, 0x1, {0x3, 0x7}}, {0x4, 0x6, {0x3, 0xa}}, {0x44dd, 0x4, {0x2, 0x7}}, {0x100, 0x6, {0x0, 0x9}}, {0x7fff, 0x80, {0x3, 0xd017}}, {0x1ab, 0x4, {0x2, 0x18e4}}, {0xfff0, 0x3, {0x1, 0x7827}}, {0x6, 0x7ff, {0x2}}, {0x9, 0xfff0, {0x1}}, {0x52a, 0xffff, {0x3, 0x5}}, {0x9f6, 0x7, {0x0, 0x8}}, {0x0, 0xafc4, {0x3, 0x4}}, {0xfff7, 0x3, {0x1, 0x80000001}}, {0x7, 0x17e0, {0x3, 0x7f}}, {0x1, 0x7, {0x0, 0xfff}}, {0xfffd, 0x8, {0x1, 0x9}}, {0x671a, 0x3, {0x2, 0x7}}, {0x3, 0x904c, {0x1, 0xfff}}, {0x3, 0x3, {0x0, 0x8001}}, {0xfff, 0x800, {0x0, 0x8}}, {0x4, 0x8, {0x3, 0x9}}, {0x2, 0x6, {0x0, 0x2}}, {0xe01e, 0x5, {0x3, 0x2}}, {0x28b9, 0x81, {0x0, 0x1}}, {0xdd1e, 0xfff, {0x2, 0x80000001}}, {0xa0, 0x90c8, {0x3, 0x6}}, {0xb1, 0x400, {0x0, 0x6}}, {0x3ff, 0x6, {0x2, 0x2}}, {0x2d9a, 0x64, {0x3, 0x2}}, {0x7, 0x8000, {0x3, 0x7}}, {0xe80, 0xf9f, {0x1, 0x3576}}, {0x3, 0x100, {0x3, 0x3}}, {0x200, 0x0, {0x2, 0x7}}, {0x8, 0xfffa}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x8, 0x6, 0x6, 0x3, 0x1b, 'syz0\x00', "a1bb6a361d40d412729099d4795793a0bf1a96c098ec19e2a00e784b56428689", "5f439538219957e3aaa2c656e9e1494b74a64150c1ef53e65ec2939c2de268f4", [{0x1ff, 0x1, {0x3, 0x6f}}, {0xb6a, 0x4, {0x3, 0x7}}, {0x6, 0x2, {0x0, 0xe}}, {0xfff8, 0x0, {0x1, 0x80000001}}, {0x8, 0x1, {0x1, 0x9}}, {0x100, 0xcd, {0x2, 0x2}}, {0x4, 0x3, {0x1, 0x2}}, {0x2, 0x6, {0x2, 0xc02}}, {0x101, 0x0, {0x0, 0x3}}, {0x1, 0x400, {0x2, 0x2}}, {0x1ff, 0xc1d, {0x1, 0x7}}, {0x8000, 0x7, {0x1, 0x6}}, {0x9, 0x4, {0x1, 0x2f}}, {0x3, 0x7, {0x1, 0x4095}}, {0x5, 0x2, {0x1, 0x6}}, {0x1, 0x7, {0x1, 0x8}}, {0x0, 0x200, {0x1, 0xc}}, {0x9, 0x8, {0x3, 0x27}}, {0x6, 0x5, {0x1, 0x7}}, {0x8c16, 0xffff, {0x0, 0xa00}}, {0x3ff, 0x1, {0x2, 0x7fffffff}}, {0xfff1, 0x7a83, {0x3, 0x9}}, {0xf, 0x0, {0x2, 0x925}}, {0x3, 0x7, {0x2, 0xb7}}, {0x1, 0x30, {0x0, 0x2}}, {0xfffa, 0x9e, {0x3, 0x40004}}, {0x4, 0x8000, {0x1, 0xc46}}, {0x7, 0x7ff, {0x0, 0x80000001}}, {0xff2, 0x4f6d, {0x2, 0x7}}, {0x7, 0x2, {0x91cb8941c2d4031b, 0x100}}, {0x4, 0x4, {0x1, 0x8000}}, {0xfc01, 0x1, {0x3, 0x400}}, {0x7, 0x2, {0x2, 0x101}}, {0x81, 0x4, {0x2, 0x29}}, {0xe000, 0x7b, {0x3, 0x2}}, {0x3, 0x1, {0x1, 0x4}}, {0x400, 0x9, {0x2, 0xffffffff}}, {0x7, 0xd, {0x0, 0x8d8}}, {0x1, 0xf000}, {0x6, 0x1800, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x4d}, 0x2, 0x9, 0x2, 0x6, 0x28, 'syz0\x00', "e2581d7bbf590ef0717348e27b27841165b07a473377f715e786b7dc1f8518a5", "2c2667373d972402070d394e68838e7af2badd1840a99271fd6908a204159f77", [{0x7, 0xa553, {0x0, 0xfffffff8}}, {0x2, 0x4, {0x2, 0x9}}, {0xf57c, 0x2, {0x3}}, {0x8, 0x5, {0x3, 0x40}}, {0x2824, 0xd, {0x3, 0x8}}, {0x70, 0x0, {0x3, 0x80000001}}, {0x80, 0xfc, {0x0, 0x50}}, {0x6, 0x2c0, {0x3, 0x18000}}, {0x3, 0x5bfa, {0x0, 0x9}}, {0x1, 0x8, {0x0, 0xfffffffe}}, {0x5, 0x3, {0x3, 0xd}}, {0xd, 0xb838, {0x1, 0xfd}}, {0x401, 0x24, {0x3}}, {0x7ff, 0x7ff, {0x1, 0x6}}, {0x5, 0x3ff, {0x1, 0x8}}, {0xfff8, 0x5, {0x0, 0x5}}, {0x2, 0x3ff, {0x3, 0x81}}, {0xe, 0xf, {0x1, 0x9}}, {0x10, 0x56, {0x0, 0x3}}, {0x3, 0xc99, {0x0, 0xfffffffb}}, {0x5, 0x4, {0x2, 0x2}}, {0x9, 0x9e, {0x0, 0x11}}, {0x8, 0x8, {0x1, 0x81}}, {0x6, 0xfff7, {0x1, 0x3}}, {0x3, 0x9, {0x0, 0x9}}, {0x200, 0xffff, {0x1, 0x1}}, {0x0, 0x0, {0x3, 0xfffffffa}}, {0x9, 0x6, {0x3, 0x10001}}, {0xff, 0x1, {0x0, 0x6}}, {0x8, 0x3, {0x3, 0x1}}, {0x1, 0xc1, {0x3, 0x4e9}}, {0x0, 0x9, {0x2}}, {0x48, 0x1, {0x2, 0xaab6}}, {0xe, 0x9e9a, {0x2, 0x6}}, {0xc1, 0x0, {0x3, 0x80000000}}, {0x9c5, 0xd, {0x2, 0x800}}, {0xdfc, 0x800}, {0x8000, 0x0, {0x0, 0x2}}, {0xfffd, 0x6033, {0x1, 0xe8}}, {0xfff8, 0x6b, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x11}, 0xc3, 0x80, 0x8, 0x7, 0x24, 'syz1\x00', "3ea95190e7292e2079399efb9c88d8be6270d5d9774b85dc04e88b73eb2ccb8e", "4bd4b3f456a89d4f6ee57621b8fb32f0dd1ff86f0374c2d0b319897b698dc19c", [{0x9, 0x0, {0x1, 0x10001}}, {0xc, 0x2, {0x3, 0x40}}, {0x0, 0x7, {0x2, 0x3}}, {0x9, 0x2, {0x0, 0x9}}, {0x6, 0x2, {0x0, 0xffff}}, {0x0, 0x507c, {0x0, 0x5a}}, {0x6, 0x2, {0x2, 0x2}}, {0x401, 0x9, {0x1, 0x1}}, {0x93f, 0x6, {0x1}}, {0x0, 0x42, {0x2, 0x7}}, {0x8b76, 0xffff, {0x1, 0x8}}, {0x8, 0x6, {0x0, 0x8}}, {0x1, 0x251, {0x2, 0x9}}, {0xadf4, 0x0, {0x0, 0x3}}, {0x7fff, 0x4, {0x0, 0x4c3a}}, {0x8, 0x6, {0x3, 0x6}}, {0x7f, 0x5, {0x1, 0x4}}, {0x0, 0x6, {0x1, 0x4}}, {0x0, 0x10a8, {0x2, 0x8}}, {0x14d1, 0xb6db, {0x3, 0x8}}, {0x71bb, 0x9, {0x3, 0x2}}, {0x3, 0x0, {0x1, 0xfffffffe}}, {0x5, 0x8, {0x1, 0x9}}, {0x401, 0xaf6, {0x3, 0x4904}}, {0x7, 0x400, {0x0, 0x3}}, {0x2, 0x3ff, {0x2, 0x175800}}, {0x7, 0x5, {0x1, 0x3}}, {0x400, 0xfff, {0x0, 0x1ff}}, {0xffff, 0x3, {0x1, 0x3}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0xf897, {0x3, 0x8}}, {0x1, 0xd, {0x2, 0x86}}, {0x2, 0x7, {0x0, 0x8}}, {0x6, 0x7574, {0x0, 0x7933}}, {0x7, 0x8001, {0x1, 0x909}}, {0x4, 0x982, {0x3, 0x4}}, {0x8, 0x123, {0x3, 0x1}}, {0x7fff, 0x6, {0x0, 0x6}}, {0x3ff, 0xe49b, {0x3, 0x3ff}}, {0x0, 0x8, {0x2, 0x68b}}]}}}, {{0x254, 0x1, {{0x0, 0x80000001}, 0x4, 0x9, 0x7, 0x6, 0x4, 'syz1\x00', "22b0ce83e53702fd341b40ab564200173953ff301537514de520515882bd0d1b", "6477f4ef75db5ac566be11b97cd5b088aa71c944b28e5fce985f730e3ddfe2c8", [{0x9, 0x32a, {0x1, 0x873}}, {0x9, 0x9, {0x2, 0xf3}}, {0xffcd, 0x1ff, {0x0, 0x4}}, {0x9, 0x1, {0x0, 0x38}}, {0x6, 0x9379, {0x2, 0xfff}}, {0x8, 0x10, {0x0, 0x4}}, {0x193, 0x8001, {0x3, 0xf95}}, {0x4, 0xa898, {0x3, 0x5}}, {0x6, 0x8, {0x2, 0x1}}, {0x5, 0x9, {0x3, 0x1000}}, {0x9, 0x40, {0x1, 0x8}}, {0x267d, 0xf001, {0x1, 0x7fffffff}}, {0x8, 0x2, {0x2, 0x2}}, {0x9, 0xd, {0x2, 0xa8}}, {0x67, 0x1000, {0x0, 0x3}}, {0x7, 0xff7f, {0x0, 0x1000}}, {0xaf7e, 0x7, {0x2, 0x1}}, {0x7ff, 0xf, {0x0, 0x9}}, {0x8, 0x9, {0x2}}, {0x6, 0x1, {0x0, 0x40}}, {0x1ff, 0x8, {0x0, 0x2}}, {0x6, 0x200, {0x0, 0xf}}, {0x1, 0x6, {0x1, 0x5}}, {0x8, 0x5, {0x2, 0xffff}}, {0x101, 0x2, {0x3, 0xfffffffa}}, {0xfff7, 0x7, {0x1, 0x5}}, {0x1, 0x9, {0x2}}, {0x100, 0x9, {0x0, 0x7}}, {0xdfce, 0x3, {0x2}}, {0x7, 0x401, {0xf81d9eb6f10ea938, 0x40}}, {0x6543, 0x1, {0x1, 0xfe57}}, {0x7fff, 0x101, {0x2, 0xfffffe01}}, {0x1, 0x4, {0x0, 0x16c8c0}}, {0x16, 0x5, {0x1, 0x7}}, {0x1, 0xf001, {0x3, 0x6}}, {0xd4, 0x635d, {0x0, 0xffff9d04}}, {0x3, 0xfb69, {0x3, 0x9}}, {0x6, 0x2, {0x3}}, {0x5, 0xc6, {0x3, 0x2a89}}, {0x1, 0x0, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x9, 0x80, 0x6, 0x4, 0x5, 'syz1\x00', "7dbd7815f31e8c5dd2bfec5bebcaaa6fcf0f5484e3f99b6e110f4a39827261c5", "5e8692607b424b2e780622cd7a48a7d45372c8d24ac081d86232039f7e2070e1", [{0x5, 0x4, {0x2, 0x2}}, {0x8de, 0x10, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0x7f}}, {0x9d, 0x1, {0x1, 0x2202}}, {0x9, 0xf9, {0x1, 0xfffffffb}}, {0x7, 0x247a, {0x3}}, {0x4, 0xfff8, {0x2, 0xfffffffa}}, {0x8, 0x8001, {0x3, 0x4}}, {0x6, 0x10, {0x2, 0x7}}, {0x200, 0x400, {0x1, 0x9}}, {0x5, 0x1, {0x3, 0x8}}, {0x8, 0xc, {0x3, 0x8}}, {0x2, 0x6, {0x1, 0x8001}}, {0xfff, 0x8, {0x0, 0x5}}, {0x2, 0x1, {0x0, 0x20000}}, {0x2, 0x1, {0x2, 0x50000}}, {0xfff7, 0x3ff, {0x3, 0x81}}, {0x8, 0x4, {0x2, 0x6}}, {0x3, 0xf1, {0x3, 0x5}}, {0x0, 0x8, {0x0, 0xd}}, {0x15, 0x5, {0x17115c76b5576ce5, 0xd879}}, {0x3, 0x4, {0x2, 0x401}}, {0x3, 0xdd, {0x3, 0x558}}, {0x0, 0x1, {0x3, 0x80000001}}, {0x7, 0x5, {0x0, 0x5}}, {0x100, 0xd6c3, {0x1, 0x7}}, {0x1, 0x1, {0x2, 0x9}}, {0x3, 0x5, {0x80aae75617de406f, 0x8}}, {0x7f, 0x2ec, {0x1, 0x4}}, {0x8, 0x4, {0x0, 0x86a}}, {0x121, 0x5, {0x2, 0x6}}, {0x4, 0x80, {0x3, 0xe90}}, {0x200, 0x1, {0x2, 0xf1}}, {0x8, 0x6552, {0x3, 0x89}}, {0x100, 0x9, {0x2, 0xffff}}, {0x2, 0x7, {0x1, 0x3}}, {0xb, 0x327b, {0x1, 0x3}}, {0x929, 0x0, {0x2, 0x6}}, {0x1e2e, 0x5, {0x2, 0x3}}, {0x6, 0x9, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x4788349a}, 0x3, 0xe, 0x37e1, 0x1, 0x27, 'syz0\x00', "c491f8e66e8c5634fe0a26187a3ba2fcdafdf6ad6a13ac128a59d09862ac8b7d", "d0162483400eb0415c00f6d8d40c227f8e3050f747ea9f6843451a411dabcc05", [{0xb, 0xfffb, {0x1, 0x8}}, {0x986f, 0xff, {0x1, 0x7}}, {0x10, 0x80, {0x1, 0x4}}, {0x200, 0x7fff, {0x0, 0x9}}, {0x9, 0x8001, {0x0, 0x3}}, {0x4b7, 0x6, {0x2, 0x7}}, {0x6, 0x15, {0x2, 0x5}}, {0x3, 0x3, {0x5, 0x80000000}}, {0x400, 0xe9, {0x1, 0x5}}, {0x3ff, 0x9, {0x3, 0x4e}}, {0x4, 0x3, {0x1, 0xffffff58}}, {0x7, 0x7, {0x0, 0x1}}, {0x5, 0x3, {0x0, 0x7}}, {0x9, 0xfe00, {0x2}}, {0x21, 0x7ff}, {0x4, 0x1ff, {0x2, 0xb}}, {0x8, 0xe78e, {0x1, 0x7}}, {0x8, 0x800, {0x2, 0xfffffffd}}, {0xfff2, 0x7, {0x1, 0x6}}, {0x2, 0x8, {0x1, 0x40}}, {0x80, 0x8, {0x1, 0x1}}, {0x6, 0xab, {0x1, 0xffff}}, {0x7, 0x79, {0x3, 0x24eeaa14}}, {0x0, 0xe44e, {0x1, 0x7fffffff}}, {0x8, 0x3, {0x2, 0x3ff}}, {0x8000, 0x8b86, {0x2, 0x3}}, {0x9, 0x7, {0x0, 0x9}}, {0x3, 0xd93c, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x8}}, {0xffff, 0xcd, {0x1, 0x2}}, {0x651, 0x1a9c, {0x1, 0x4}}, {0x40, 0x9, {0x2, 0xc}}, {0x800, 0x0, {0x2, 0x100}}, {0x8, 0x60d, {0x1, 0x400}}, {0x1, 0x9, {0x3}}, {0x87a, 0x8001, {0x2, 0x1}}, {0x4, 0xc, {0x3}}, {0x0, 0x6, {0x1, 0x8}}, {0x6, 0x9048, {0x1, 0x9}}, {0x2, 0x6, {0x2, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x8010}, 0x40010)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2cb1596aec3ade5bd780f601e976726f6f746d6e64653d30303030303030843030303030304230303031", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r9, &(0x7f000001a240)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x5, 0x24ff8719c9b99d2f, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x80, 0x427a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)

7.392766226s ago: executing program 1 (id=1132):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x38416761, 0x0, 0x2, [{}, {}, {0x8}, {0x0, 0x9}]}})
splice(r0, &(0x7f0000001580)=0x661, r0, &(0x7f00000015c0)=0x2, 0x8001, 0xd)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = socket$kcm(0xa, 0x2, 0x73)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000001600)=[@in6={0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00', 0xfffffff9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x70, @local, 0xe5}], 0x58)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0)
close(r2)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000001540))

4.336356591s ago: executing program 1 (id=1138):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="c0179a2870"]}, 0x1c}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000580)={@hyper, 0xfe30})
recvmmsg(r2, &(0x7f00000036c0)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000003880)=""/162, 0xa2}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001840)=""/95, 0x5f}, 0x82}, {{&(0x7f00000018c0)=@nl=@unspec, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000001940)=""/237, 0xed}, {&(0x7f0000001a40)=""/247, 0xf7}, {&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000001b80)=""/212, 0xd4}, {&(0x7f0000001c80)=""/70, 0x46}], 0x6, &(0x7f0000001d80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002d80)=@xdp, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e00)=""/221, 0xdd}, {&(0x7f0000002f00)=""/239, 0xef}, {&(0x7f0000003000)=""/216, 0xd8}, {&(0x7f0000003100)=""/44, 0x2c}], 0x4, &(0x7f0000003180)=""/50, 0x32}, 0x7f}, {{&(0x7f00000031c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003240)=""/117, 0x75}, {&(0x7f00000032c0)=""/48, 0x30}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003340)=""/92, 0x5c}], 0x1, &(0x7f0000003400)=""/186, 0xba}, 0x7}, {{&(0x7f00000034c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003540)=""/61, 0x3d}], 0x1, &(0x7f00000035c0)=""/195, 0xc3}, 0x6}], 0x6, 0x10000, &(0x7f0000003840)={0x77359400})
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000020000000800000000000000f919000000000000"], 0x400000)

4.310857392s ago: executing program 1 (id=1139):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000380)={0x3, 0x0, @pic={0x6, 0x4, 0x2, 0x7f, 0x5, 0x4, 0xc6, 0x5, 0x8, 0xff, 0x4, 0xfd, 0x4, 0x5, 0x3, 0xf}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_connect$uac3(0x6, 0xc9, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x7e, 0xc0, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x20, 0x8001}, [@extension_unit={0x11, 0x24, 0xa, 0x1, 0x5, [0x3, 0x3, 0x1]}, @selector_unit={0x5, 0x24, 0xc, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x8, "66fe6bb3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x1, {0xa, 0x25, 0x25, 0x7ff, 0x3, 0xff44}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0x0, 0x9, "1d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x40, 0x2, 0x8, 0x2f}]}, {{0x9, 0x5, 0x82, 0x9, 0x1820cf8ee2082733, 0x50, 0x1, 0x6, {0xa, 0x25, 0x25, 0x3, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x9, 0x4, 0xff, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x6f, &(0x7f00000003c0)=@string={0x6f, 0x3, "d940f032e4756dc9e165524e01ed19ed33b4240a75377c54ceb01536f7bd48827256cc62e56e9d6d8c6f638d9f64047c83ab4afc18dc917d0aa79dc6f0bd31ab878e296cf01a553c13a0fa52ca416d9942d4de278fa6ff35c4d77f3d17fd7c1a369356adcdd98158faa804162b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xb9, &(0x7f0000000480)=@string={0xb9, 0x3, "e9235e1d6fcd4dcd81491c4034315ce1f85e14b28b1cbc74aa7eced69e1d6138249281f494a1c3e8b4e3238c2d03891837b72b8675d96b8511aae5bb02baae5ed90dc40b8d1cf44b7253dd4fce5193c717068f2148f4612e3c5afa1ac2cd467c16710da8c5cd321422fcea3141ec72259731e8ee6d141dc3f6538e6541b54a015e3a56f5e1ef07216e52a8e10b83f7a3ac88768ae65e233a8920265be843ae0239e28420abe1bfffb913bbd463f8f8b1b1a6b2dbfa80ee"}}]})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="00001700000000976730f80ff5b34a5b834452396552cf7cb1dea6a09ad486bfdd71d2b883d50ffbfa63324f1fa2a44de16db8ae9e9e70380870bad7f2f37521836e38019e4461f36af446a8b5e1b87a2db524f94409ce6124e7929e9cb373206f7f33240a64357b9aba01f2f47bac9c8bbb85cc1c4fc6b5046ab2a56da36cab"], 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x350, 0x20002, 0xffffffff}, {0xf4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4})

4.136511496s ago: executing program 5 (id=1141):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r3, 0x400, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x30}}, 0x2)

4.12694994s ago: executing program 5 (id=1142):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
writev(r0, &(0x7f0000001280)=[{&(0x7f00000017c0)="390000001300034700bb65e1c3e4ffff010000000100000056000000ff63b6065699e002242a6700000007fdd411efc4080004000000000000", 0x39}], 0x1)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="39000000130003473fbb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1)

4.046201236s ago: executing program 0 (id=1143):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3.976023633s ago: executing program 5 (id=1144):
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc0006}]})
times(0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x1d, 0x4, 0x4, 0xff, 0x24, 0x9, 0x31, 0x6, 0x8, 0x7, 0x50, 0x0, 0x1}, 0xffab) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x1d, 0x4, 0x4, 0xff, 0x24, 0x9, 0x31, 0x6, 0x8, 0x7, 0x50, 0x0, 0x1}, 0xffab)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='^', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e03, 0x0, @loopback}, 0x1c)
close(0x3)

3.843175708s ago: executing program 5 (id=1145):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c)
r1 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x0053U\x14\x04\xc0X\xb8\x9e\xac\xe0\xe6\x00\xb3\xaaA\xb3\xcd\xb4u9P4\x00'/40)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8)
readv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/232, 0xcf}], 0x1)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x2, 0xe})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x2})
syz_open_dev$char_usb(0xc, 0xb4, 0x6)

3.632275466s ago: executing program 0 (id=1146):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0xf8, r7, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xa4, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fgy,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00'])
r8 = socket(0x2, 0x800, 0xfe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000800)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYBLOB="ec72b6bc5406ce679b76f5542363f577beb7ee4b2165c3460c07119961dbe627c80961908868ced36fc4793d8589616c9e7870381d252aee419c345d4dcf2a8e9a88bc1ebd4ff72891e72fe05e8ee9ef3a1314037cdccb50b3e2c4501d3669a16122aa6f0b94041cc875fd51b024314ff3252d7a0b6fce9e383c8293ec00577ceca6fbb7ae63390c10c807c43d08cf4e159075b8c2fd37acffbf5494f14cdde59970f25acbc121753d92df76dc86fff2d11d51ac77accae25afc166c54d2f4b951a3b7fb3b9fa30c53f93280bb0bb1"], 0x0)

2.171358016s ago: executing program 4 (id=1151):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x10400000000000)

2.039586701s ago: executing program 4 (id=1152):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder1\x00'})

1.932601518s ago: executing program 4 (id=1153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r2, &(0x7f0000000440)=""/4090, 0xffa)

1.873555049s ago: executing program 4 (id=1154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) (fail_nth: 1)

1.456022947s ago: executing program 4 (id=1155):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004cf000/0x2000)=nil, &(0x7f000009c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000d1000/0x2000)=nil, &(0x7f00001b1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000337000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000288000/0x3000)=nil, &(0x7f0000000040)="b776c6f9a22211d4e75f6e40235361522777ef5b109a3fda747c9f2d4873bca29578294307be99e53e42f45d89cb2ddce1f24a46d8b601a8096af1de287d79", 0x3f, r1}, 0x68)
get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2)
setns(r1, 0x24020000)
syz_pidfd_open(r0, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r2, &(0x7f0000001cc0)={0x2020}, 0x2020)
setns(0xffffffffffffffff, 0x24020000)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x86)
fchdir(r4)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902)

1.280024899s ago: executing program 4 (id=1156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001400)="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", 0x304}, {0x0}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef3", 0x15}, {0x0}], 0x4}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7100030000008900000008000300", @ANYRES32=r4, @ANYBLOB="10005d800c00d3007db7b047bb561f137b99c9908006000500c000009b2003b6941a0962e65b1735057934098ba4a79c6220c1ec"], 0x2c}}, 0x0)
r5 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r7, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x61}})
syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0xc, 0xb0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x13}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x9, "0ac7c449"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xd, 0xd, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x17, 0x2, 0x4, 0xa, "", "a3ac"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x43, 0x3, 0x59, {0x7, 0x25, 0x1, 0x4, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xb5, 0x3, 0xc0}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x1, 0x1, 0x1, "c551", "0a2de5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x3, 0x3, {0x7, 0x25, 0x1, 0xc, 0x62, 0xa3e5}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x8, 0x4, 0xa, 0x8, 0x7}, 0xae, &(0x7f00000007c0)={0x5, 0xf, 0xae, 0x2, [@ptm_cap={0x3}, @generic={0xa6, 0x10, 0x3, "f5e77557e16b34dfc36c1894511c167b2c476996f35658be69fd20c1788c8269ebacb6433fb74d85cb2f1dd93779c845b3eebdfe8421949a048f1c4917be8d5fff1d761def855e68a3682cd5c7adaa2b688aba003f28c3fa288ad87ef2564b6bdf795ec3108e1001f96ded7e672bc13c70dc543f77d151d8ae10aa67b2db60cde29255c65dca76b91921f43f17b5168b6d2381b74a03f94f49a9868d1244e8bb11a7f4"}]}, 0x6, [{0x5a, &(0x7f0000000540)=@string={0x5a, 0x3, "f8f1a53f21dfc4ac0bbc5a6c091f118d7a63e5b138474cc845fff2b00e87740f81b2011e3b26cc03b674d03cc9484473a4a11880ef992093a8519f0ee9264c7ad5ef538ddec52d4ae9cc12ca832911869b71e354f8bc0638"}}, {0x57, &(0x7f0000000640)=@string={0x57, 0x3, "36afd36c28d406459228ebb6f17ebf5a35f86d90e2a8b27b1a51f199a652af42455175f137db5e67b994973cb81e011051817d9754db63d450fc0cfe73eb530b9c4efdc5619d333b395f9618c3b24d66cfcb268a46"}}, {0x43, &(0x7f0000000980)=@string={0x43, 0x3, "cee84218f53e328bbe723162f8315de0cdf97cb2ffef81bf3c9291cd34fe0f921541af9d152c96dc9acb1bd6f9a3b175a8bfbc1712c415043f62e53464ad4fe2fd"}}, {0x3, &(0x7f0000000340)=@string={0x3, 0x3, '8'}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2809}}, {0x11, &(0x7f0000000900)=@string={0x11, 0x3, "dd9bd5a8c1865c98d499538558bbae"}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
close_range(r6, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.232526128s ago: executing program 1 (id=1157):
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
semop(0x0, 0x0, 0x0)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800024000000001080001400000001205000300110000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)

725.167659ms ago: executing program 1 (id=1158):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xe0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)

544.342232ms ago: executing program 5 (id=1159):
r0 = socket$inet(0x2, 0x2, 0x7e0e)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) (async)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', <r5=>r1, 0x8, 0x40, 0x5, 0x3, {{0x18, 0x4, 0x1, 0x30, 0x60, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0xdb, 0x0, 0x9, [0xc9c, 0x9]}, @timestamp_prespec={0x44, 0xc, 0xaa, 0x3, 0x0, [{@rand_addr=0x64010101, 0x588}]}, @lsrr={0x83, 0x23, 0xf2, [@loopback, @remote, @empty, @loopback, @multicast2, @empty, @broadcast, @empty]}, @generic={0x88, 0x10, "534ada76885d18967adbc92acc1c"}]}}}}}) (async)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000003c0)="a36416b97e73e9e12a1d3af0e424eafbadfa2ae0fbeb5efcc72d1e6e3a4ee369942e78c8aca2da0e898d1f61a2c8f261e6e224ae2af4", 0x36)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@local, @multicast1, <r6=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000980)={&(0x7f0000000400), 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x480, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x800, 0x3, 0x7f, 0x6}]}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8, 0x1, r1}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x416e}}, {0x8, 0x7, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x49}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8000}, 0x2011) (async)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000ac0)={'nat\x00', 0x0, 0x4, 0x86, [0x8, 0x572, 0xa3, 0x2, 0x8, 0x4], 0x4, &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000a00)=""/134}, &(0x7f0000000b40)=0x78) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000b80)) (async)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000dc0)=<r8=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000e00)={"475cf27e5df4a72638b8eed03cad6bc8", r7, r8, {0x0, 0x9d1}, {0x5, 0xfffffff7}, 0x4, [0x8000000000000001, 0x80000000, 0x3b1d, 0x0, 0xfffffffffffffffd, 0x3, 0x9, 0x0, 0x80000000, 0x800, 0x6f, 0x9, 0x9, 0x6, 0xdd]}) (async)
getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000f80)={{0x1, 0x1, 0x18, <r9=>r0, {0x2}}, './file0\x00'})
read$watch_queue(r9, &(0x7f0000000fc0)=""/171, 0xab)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x40)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async)
r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001080), 0x8002, 0x0)
ioctl$TIOCSBRK(r11, 0x5427)
connect$inet(r0, &(0x7f00000010c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000001100)={{0x9c7, 0x5, 0x5, 0x8}, 'syz0\x00', 0x27}) (async)
recvfrom$inet(r0, &(0x7f0000001180)=""/129, 0x81, 0x1a040, &(0x7f0000001240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x17c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bond\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a77cd948c3dd7c9c3c35c4603588dab0aad0469ffead0bf8"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b44f9a4f20dd1c9684d630f7d0eb20c46135b3fc955d6aa"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "917ebcb17989372b2eed6e1518dfb8605e3ce989cda22407"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f399430b004d444e254cc2d1e6a81a3d32efa956b0179621"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvtap0\x00'}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000001500)={0x2, 0x8, 0x6, 0x0, 0xc}) (async)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r2, &(0x7f0000001580)={0x1, 0x1, 0x0, 0x6})

480.805272ms ago: executing program 1 (id=1160):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff5)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xc, 0x71, 0x86, 0x8, 0xdf6, 0x90ac, 0xe48e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0x20, 0x2, "", [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xd5, 0x53, 0x89, 0x5}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x5, 0x0}]})

436.147897ms ago: executing program 5 (id=1161):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x1, '['}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000cc0)={0x14, &(0x7f0000000bc0)={0x40, 0x10, 0xea, {0xea, 0x10, "696679ceabd2884f20864d858099452a208e0fcfba4f2d14447047091a3c766d20515ace5e1df6a115ff2387862922f24e7aa01172c2e062c1392756280e162773bcc89b66cc3d046949d79f6eda044995e627af7ff66b1e2f734544b2ff43bc983889ad11c79abadf7729800be73da3585726d4207ad9879957d3b312a799ba8a68af871492f0b0f3d1e19b6081e1fe4bf95947ccf0dc80abee0322fcb080553532e81182d4428aa4fbfdb70db3b5072d36c6680fba0c73c6ef5ae9f6fa201631d055a3cd8f3d88d868e78042498cc5031394889b7476ac5756c9a4b4fafd4877270c6a8e90f324"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "487b57c7f73e31ef25a3cfa44cb590b78a4f1883d6bfa9ef8c"}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000d00)={0x40, 0x11, 0x52, "a6c6cff885c795fd686b1610a6888bd136d78465ca3200b51c7c329d76614e6b70ab865c3ed9165ab9acdb0d11169a5f73d3cef9401a5505621ac21a3814c28b3bfdf302c729ca949b43593127e570350df4"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e00)={0x20, 0x81, 0x3, "8fdadb"}, &(0x7f0000000e40)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000000e80)={0x20, 0x83, 0x2, 'Gt'}, &(0x7f0000000ec0)={0x20, 0x84, 0x3, "8e8b22"}, &(0x7f0000000f00)={0x20, 0x85, 0x3, "5a85b1"}})

429.689603ms ago: executing program 0 (id=1162):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe)
shutdown(r0, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) (rerun: 64)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0x3}, &(0x7f0000000080)=0x8) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147c8a3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe165592689465eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a3c2a30f1312c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0d612827a8f6e2a73eb376e11160ddbc0d79e3a11d5a99fa9c98f559efeb1e0a196d6da225f8c145334989fae4eafc05bbad0dc880e923d6b2ed2890eed8255bd2f8296b8d689762aa02e1399045bc0cbec07ec937f2e6dfac960460574e2e00dc39221a4a0c31dbbfa4973e8b056afe87bdfe6bc1405d9ae867d05316247465aceddf5c95825d73a9b119dab89ac982fff04e5d140a8391bd6f1831a9b7519ba86abc94993fe918a1b640d57e276027d9ef490065235935407f7eda36490"], 0x564) (async)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xfffffffc}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="470d000000000000000004000180"], 0x18}}, 0x0) (async, rerun: 64)
r5 = socket(0x1d, 0x2, 0x6) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async, rerun: 64)
bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000480)={@private0, <r8=>0x0}, &(0x7f00000004c0)=0x14) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0xff}, 0xfd}, 0x18) (async, rerun: 32)
connect$can_j1939(r9, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (rerun: 32)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="32002bbd7000fddbdf25110000002800018008000100", @ANYRES32=r6, @ANYBLOB="080003000300e5ff1300020076657468315f746f5f626f040000000000000080080018be348e00000800030002000146921402006d61637365633093000000000000000020000180140002007665746831000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="8c000180140002006d6163736563300000000000000000001400020076657468305f746f5f62617461647600140002006e723000000000000000000000000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="14000200766c616e3100000000000000000000001400020070696d726567000000000000000000001400020077673000"/60], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x90)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r12 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
sendmsg$tipc(r12, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10, 0x0}, 0x40010) (async)
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,'])

208.499651ms ago: executing program 0 (id=1163):
r0 = inotify_init()
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000009c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006})
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socket(0x22, 0x2, 0x4)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x573c, @mcast2, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x1}]}, &(0x7f0000000340)=0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

139.3002ms ago: executing program 0 (id=1164):
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04060080c9"], 0x6) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffd, 0x61, &(0x7f00000004c0)={0x60, 0xe, 0x14, 0x3}, 0x8, 0x0, 0xc, 0x0, 0x80, 0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) (async, rerun: 64)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) (async, rerun: 32)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x2)
symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') (async, rerun: 64)
unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x0) (rerun: 64)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x18, 0x0, 0x0})

0s ago: executing program 0 (id=1165):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000380)={0x3, 0x0, @pic={0x6, 0x4, 0x2, 0x7f, 0x5, 0x4, 0xc6, 0x5, 0x8, 0xff, 0x4, 0xfd, 0x4, 0x5, 0x3, 0xf}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_connect$uac3(0x6, 0xc9, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x7e, 0xc0, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x20, 0x8001}, [@extension_unit={0x11, 0x24, 0xa, 0x1, 0x5, [0x3, 0x3, 0x1]}, @selector_unit={0x5, 0x24, 0xc, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x8, "66fe6bb3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x1, {0xa, 0x25, 0x25, 0x7ff, 0x3, 0xff44}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0x0, 0x9, "1d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x40, 0x2, 0x8, 0x2f}]}, {{0x9, 0x5, 0x82, 0x9, 0x1820cf8ee2082733, 0x50, 0x1, 0x6, {0xa, 0x25, 0x25, 0x3, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x9, 0x4, 0xff, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x6f, &(0x7f00000003c0)=@string={0x6f, 0x3, "d940f032e4756dc9e165524e01ed19ed33b4240a75377c54ceb01536f7bd48827256cc62e56e9d6d8c6f638d9f64047c83ab4afc18dc917d0aa79dc6f0bd31ab878e296cf01a553c13a0fa52ca416d9942d4de278fa6ff35c4d77f3d17fd7c1a369356adcdd98158faa804162b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xb9, &(0x7f0000000480)=@string={0xb9, 0x3, "e9235e1d6fcd4dcd81491c4034315ce1f85e14b28b1cbc74aa7eced69e1d6138249281f494a1c3e8b4e3238c2d03891837b72b8675d96b8511aae5bb02baae5ed90dc40b8d1cf44b7253dd4fce5193c717068f2148f4612e3c5afa1ac2cd467c16710da8c5cd321422fcea3141ec72259731e8ee6d141dc3f6538e6541b54a015e3a56f5e1ef07216e52a8e10b83f7a3ac88768ae65e233a8920265be843ae0239e28420abe1bfffb913bbd463f8f8b1b1a6b2dbfa80ee"}}]})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="00001700000000976730f80ff5b34a5b834452396552cf7cb1dea6a09ad486bfdd71d2b883d50ffbfa63324f1fa2a44de16db8ae9e9e70380870bad7f2f37521836e38019e4461f36af446a8b5e1b87a2db524f94409ce6124e7929e9cb373206f7f33240a64357b9aba01f2f47bac9c8bbb85cc1c4fc6b5046ab2a56da36cab"], 0x0, 0x0, 0x0, 0x0})
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x350, 0x20002, 0xffffffff}, {0xf4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4})

kernel console output (not intermixed with test programs):

[  204.775376][ T7824] syz.1.603 (7824): drop_caches: 2
[  204.843146][ T5928] usb 1-1: device descriptor read/64, error -71
[  204.954094][ T5928] usb usb1-port1: attempt power cycle
[  205.301449][ T5928] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  205.352503][ T5928] usb 1-1: device descriptor read/8, error -71
[  205.621005][ T5928] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  205.651649][ T5928] usb 1-1: device descriptor read/8, error -71
[  205.752470][  T796] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  205.781459][ T5928] usb usb1-port1: unable to enumerate USB device
[  205.911036][  T796] usb 5-1: Using ep0 maxpacket: 32
[  205.918557][  T796] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  205.927867][  T796] usb 5-1: config 0 has no interface number 0
[  205.938234][  T796] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  205.948111][  T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.957550][  T796] usb 5-1: Product: syz
[  205.962445][  T796] usb 5-1: Manufacturer: syz
[  205.967135][  T796] usb 5-1: SerialNumber: syz
[  205.976891][  T796] usb 5-1: config 0 descriptor??
[  206.713477][  T796] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  206.736853][  T796] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  206.762990][  T796] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  206.786452][  T796] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  206.824784][  T796] usb 5-1: USB disconnect, device number 29
[  206.905099][ T7006] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  207.112021][ T7006] usb 6-1: config index 0 descriptor too short (expected 65183, got 72)
[  207.124040][ T7006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  207.134047][ T7006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.143247][ T7006] usb 6-1: Product: syz
[  207.149450][ T7006] usb 6-1: Manufacturer: syz
[  207.158873][ T7006] usb 6-1: SerialNumber: syz
[  207.183119][ T7006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  207.217135][   T29] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  207.361514][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  207.461413][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.479846][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.498210][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.516544][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.531105][    T9] usb 1-1: Using ep0 maxpacket: 16
[  207.549118][ T5928] usb 6-1: USB disconnect, device number 15
[  207.556783][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.556814][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.595558][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.631215][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.681034][    T9] usb 1-1: Product: syz
[  207.687886][    T9] usb 1-1: Manufacturer: syz
[  207.699443][    T9] usb 1-1: SerialNumber: syz
[  207.803381][ T7900] netlink: 'syz.5.632': attribute type 28 has an invalid length.
[  207.936841][    T9] usb 1-1: 0:2 : does not exist
[  207.954059][    T9] usb 1-1: unit 9 not found!
[  207.976304][    T9] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4)
[  208.096364][    T9] usb 1-1: USB disconnect, device number 37
[  208.177907][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.300126][   T29] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  208.334367][   T29] ath9k_htc: Failed to initialize the device
[  208.362414][ T5928] usb 6-1: ath9k_htc: USB layer deinitialized
[  208.479566][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.493275][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.503527][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.520171][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.530102][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.650651][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.665505][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.676102][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.688427][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.699179][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.701441][ T5928] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  208.913032][ T5928] usb 6-1: device descriptor read/64, error -71
[  209.182098][ T5928] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  209.349816][ T5928] usb 6-1: device descriptor read/64, error -71
[  209.491354][ T5928] usb usb6-port1: attempt power cycle
[  209.567585][ T7917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  209.574724][ T7917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  209.582780][   T30] audit: type=1400 audit(1772530698.492:17): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=7918 comm="syz.0.641"
[  209.609413][ T7922] netlink: 'syz.1.640': attribute type 12 has an invalid length.
[  209.651890][ T1165] bridge_slave_1: left allmulticast mode
[  209.663055][ T1165] bridge_slave_1: left promiscuous mode
[  209.679279][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.708908][ T7917] vhci_hcd vhci_hcd.0: Device attached
[  209.728477][ T1165] bridge_slave_0: left allmulticast mode
[  209.754159][ T1165] bridge_slave_0: left promiscuous mode
[  209.773855][ T7919] vhci_hcd: connection closed
[  209.794118][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.838392][ T1087] vhci_hcd vhci_hcd.1: stop threads
[  209.856480][ T1087] vhci_hcd vhci_hcd.1: release socket
[  209.883128][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  209.907048][ T1087] vhci_hcd vhci_hcd.1: disconnect device
[  209.951081][    T9] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  209.986098][    T9] usb 35-1: enqueue for inactive port 0
[  210.063963][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  210.122548][ T5928] usb 6-1: device not accepting address 18, error -71
[  210.521529][ T2259] block nbd2: Possible stuck request ffff888027928000: control (read@0,1024B). Runtime 90 seconds
[  210.534902][ T2259] block nbd2: Possible stuck request ffff888027928200: control (read@1024,1024B). Runtime 90 seconds
[  210.546620][ T2259] block nbd2: Possible stuck request ffff888027928400: control (read@2048,1024B). Runtime 90 seconds
[  210.557801][ T2259] block nbd2: Possible stuck request ffff888027928600: control (read@3072,1024B). Runtime 90 seconds
[  210.728389][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.817415][ T7936] XFS (nbd1): SB validate failed with error -5.
[  210.833872][ T5822] Bluetooth: hci3: command tx timeout
[  210.857763][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.962698][ T1165] bond0 (unregistering): Released all slaves
[  211.260993][ T5928] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  211.407340][ T7958] gfs2: gfs2 mount does not exist
[  211.411776][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  211.481845][ T5928] usb 6-1: Using ep0 maxpacket: 32
[  211.526613][ T5928] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  211.556119][ T5928] usb 6-1: config 0 has no interface number 0
[  211.592050][ T5928] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  211.663305][ T5928] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  211.679003][    T9] usb 1-1: Using ep0 maxpacket: 32
[  211.695330][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.705771][ T5928] usb 6-1: Product: syz
[  211.733579][ T5928] usb 6-1: Manufacturer: syz
[  211.743376][ T5928] usb 6-1: SerialNumber: syz
[  211.787636][ T5928] usb 6-1: config 0 descriptor??
[  211.807818][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  211.816327][ T7951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  211.847037][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.901177][    T9] usb 1-1: Product: syz
[  211.907559][    T9] usb 1-1: Manufacturer: syz
[  211.943476][    T9] usb 1-1: SerialNumber: syz
[  211.989396][    T9] usb 1-1: config 0 descriptor??
[  212.093274][ T7951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  212.383973][ T1165] hsr_slave_0: left promiscuous mode
[  212.433987][    T9] airspy 1-1:0.0: Board ID: 00
[  212.442817][ T1165] hsr_slave_1: left promiscuous mode
[  212.451799][    T9] airspy 1-1:0.0: Firmware version: 
[  212.471280][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.492384][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.911635][ T5822] Bluetooth: hci3: command tx timeout
[  213.000781][ T5928] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  213.027642][ T5928] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  213.069690][ T5928] asix 6-1:0.188: probe with driver asix failed with error -61
[  213.508341][    T9] airspy 1-1:0.0: Registered as swradio24
[  213.526395][    T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  213.539856][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  213.609310][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  213.725975][   T29] usb 1-1: USB disconnect, device number 38
[  214.118872][ T7906] chnl_net:caif_netlink_parms(): no params data found
[  214.140588][ T7969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.649'.
[  214.319772][    T9] usb 6-1: USB disconnect, device number 20
[  214.434534][ T7976] binder: 7975:7976 ioctl c0306201 2000000003c0 returned -14
[  214.492692][   T30] audit: type=1400 audit(1772530703.412:18): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=7977 comm="syz.1.650"
[  214.696276][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.727794][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.747037][ T7906] bridge_slave_0: entered allmulticast mode
[  214.792234][ T7906] bridge_slave_0: entered promiscuous mode
[  214.923856][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.946203][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.966231][ T7906] bridge_slave_1: entered allmulticast mode
[  215.004041][ T7906] bridge_slave_1: entered promiscuous mode
[  215.012087][ T5822] Bluetooth: hci3: command tx timeout
[  215.033608][ T7992] netlink: 'syz.5.655': attribute type 3 has an invalid length.
[  215.149361][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.162227][   T29] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  215.185074][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.325203][   T29] usb 1-1: Using ep0 maxpacket: 8
[  215.347089][   T29] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  215.367459][   T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  215.405868][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  215.416548][ T7906] team0: Port device team_slave_0 added
[  215.426491][   T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  215.455723][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  215.466850][ T7906] team0: Port device team_slave_1 added
[  215.481393][   T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.512855][   T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  215.533922][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.571806][    T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  215.608115][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.616773][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.645384][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.661927][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.669084][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.696316][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.733056][    T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  215.742385][    T9] usb 6-1: config 0 has no interface number 0
[  215.748930][    T9] usb 6-1: config 0 interface 41 has no altsetting 0
[  215.756461][   T29] usb 1-1: usb_control_msg returned -32
[  215.765235][    T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  215.768671][   T29] usbtmc 1-1:16.0: can't read capabilities
[  215.775928][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.799477][    T9] usb 6-1: Product: syz
[  215.805626][    T9] usb 6-1: Manufacturer: syz
[  215.810487][    T9] usb 6-1: SerialNumber: syz
[  215.835447][    T9] usb 6-1: config 0 descriptor??
[  215.917599][ T7906] hsr_slave_0: entered promiscuous mode
[  215.925567][ T7906] hsr_slave_1: entered promiscuous mode
[  215.935049][ T7906] debugfs: 'hsr0' already exists in 'hsr'
[  215.943678][ T7906] Cannot create hsr debugfs directory
[  216.133860][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  216.146607][ T8014] usbtmc 1-1:16.0: Unable to send data, error -71
[  216.657664][    T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  217.071635][ T5822] Bluetooth: hci3: command tx timeout
[  217.195792][ T7906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  217.212616][ T7906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  217.227294][ T7906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  217.240124][ T7906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  217.408972][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.442484][ T7906] 8021q: adding VLAN 0 to HW filter on device team0
[  217.469037][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.476451][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.509717][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.517390][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.918465][ T5820] usb 1-1: USB disconnect, device number 39
[  217.931120][    T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  217.965772][    T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  218.002307][    T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  218.051216][    T9] usb 6-1: USB disconnect, device number 21
[  218.092791][ T8062] input: syz1 as /devices/virtual/input/input25
[  218.108556][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.983093][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.670'.
[  219.002338][ T8097] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.010736][ T7906] veth0_vlan: entered promiscuous mode
[  219.053745][ T7906] veth1_vlan: entered promiscuous mode
[  219.309256][ T7906] veth0_macvtap: entered promiscuous mode
[  219.337694][ T7906] veth1_macvtap: entered promiscuous mode
[  219.433185][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.494069][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.544265][ T1087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.567341][ T1087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.589060][ T1087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.602128][ T1087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.918135][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.954068][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.984538][ T8122] comedi comedi4: bad chanlist[0]=0x80100006 chan=6 range length=1
[  220.066816][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.076945][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.262527][ T5824] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  220.442909][ T5824] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  220.463719][ T5824] usb 1-1: config 0 has no interface number 0
[  220.478956][ T5824] usb 1-1: config 0 interface 41 has no altsetting 0
[  220.493422][ T5824] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  220.527942][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.545509][ T7006] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  220.557669][ T5824] usb 1-1: Product: syz
[  220.578836][ T5824] usb 1-1: Manufacturer: syz
[  220.594209][ T5824] usb 1-1: SerialNumber: syz
[  220.618295][ T5824] usb 1-1: config 0 descriptor??
[  220.712568][ T7006] usb 6-1: Using ep0 maxpacket: 8
[  220.724968][ T7006] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  220.744133][ T7006] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  220.754488][ T7006] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  220.768118][ T7006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.934140][ T8151] Bluetooth: MGMT ver 1.23
[  220.938984][ T8151] Bluetooth: hci1: unsupported parameter 65535
[  220.945926][ T8151] Bluetooth: hci1: unsupported parameter 65535
[  220.954813][ T8151] fuse: Bad value for 'rootmode'
[  221.016110][ T5820] usb 6-1: USB disconnect, device number 22
[  221.244183][ T5824] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32
[  221.583725][ T8155] binder: 8154:8155 ioctl c0306201 2000000003c0 returned -14
[  221.593511][ T8155] FAULT_INJECTION: forcing a failure.
[  221.593511][ T8155] name failslab, interval 1, probability 0, space 0, times 0
[  221.607844][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.5.686 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.607875][ T8155] Tainted: [L]=SOFTLOCKUP
[  221.607883][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  221.607896][ T8155] Call Trace:
[  221.607908][ T8155]  <TASK>
[  221.607916][ T8155]  dump_stack_lvl+0xe8/0x150
[  221.607951][ T8155]  should_fail_ex+0x412/0x560
[  221.607985][ T8155]  should_failslab+0xa8/0x100
[  221.608015][ T8155]  __kmalloc_cache_noprof+0x88/0x660
[  221.608041][ T8155]  ? set_page_refcounted+0xa0/0x1e0
[  221.608069][ T8155]  ? binder_alloc_new_buf+0x1e5d/0x3020
[  221.608109][ T8155]  binder_alloc_new_buf+0x1e5d/0x3020
[  221.608163][ T8155]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  221.608195][ T8155]  ? __kmalloc_cache_noprof+0x31c/0x660
[  221.608229][ T8155]  binder_transaction+0x28ce/0x70b0
[  221.608251][ T8155]  ? arch_stack_walk+0xfb/0x150
[  221.608310][ T8155]  ? ima_match_policy+0x2146/0x21e0
[  221.608342][ T8155]  ? __pfx_binder_transaction+0x10/0x10
[  221.608366][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608402][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608438][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608476][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608506][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608532][ T8155]  ? binder_debug+0x155/0x1d0
[  221.608580][ T8155]  binder_ioctl_write_read+0xb5c/0xa660
[  221.608624][ T8155]  ? unwind_get_return_address+0x4d/0x90
[  221.608658][ T8155]  ? arch_stack_walk+0xfb/0x150
[  221.608702][ T8155]  ? stack_trace_save+0xa9/0x100
[  221.608725][ T8155]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  221.608746][ T8155]  ? kasan_save_free_info+0x46/0x50
[  221.608770][ T8155]  ? stack_depot_save_flags+0x33/0x810
[  221.608809][ T8155]  ? format_decode+0xa0/0xe10
[  221.608845][ T8155]  ? kasan_save_track+0x4f/0x80
[  221.608867][ T8155]  ? kasan_save_track+0x3e/0x80
[  221.608888][ T8155]  ? kasan_save_free_info+0x46/0x50
[  221.608905][ T8155]  ? __kasan_slab_free+0x5c/0x80
[  221.608933][ T8155]  ? __lock_acquire+0x6b5/0x2cf0
[  221.608978][ T8155]  ? __pfx_binder_debug+0x10/0x10
[  221.608997][ T8155]  ? do_raw_spin_lock+0x12b/0x2f0
[  221.609035][ T8155]  ? _raw_spin_unlock+0x28/0x50
[  221.609057][ T8155]  ? binder_get_thread+0x177/0x6d0
[  221.609082][ T8155]  binder_ioctl+0x423/0x1b70
[  221.609105][ T8155]  ? tomoyo_path_number_perm+0x219/0x630
[  221.609152][ T8155]  ? tomoyo_path_number_perm+0x219/0x630
[  221.609178][ T8155]  ? do_vfs_ioctl+0x1166/0x1530
[  221.609204][ T8155]  ? __pfx_binder_ioctl+0x10/0x10
[  221.609226][ T8155]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  221.609266][ T8155]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  221.609314][ T8155]  ? __fget_files+0x2a/0x420
[  221.609339][ T8155]  ? __fget_files+0x2a/0x420
[  221.609358][ T8155]  ? __fget_files+0x3a0/0x420
[  221.609378][ T8155]  ? __fget_files+0x2a/0x420
[  221.609401][ T8155]  ? bpf_lsm_file_ioctl+0x9/0x20
[  221.609433][ T8155]  ? __pfx_binder_ioctl+0x10/0x10
[  221.609455][ T8155]  __se_sys_ioctl+0xfc/0x170
[  221.609484][ T8155]  do_syscall_64+0x14d/0xf80
[  221.609509][ T8155]  ? trace_irq_disable+0x3b/0x150
[  221.609529][ T8155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.609549][ T8155]  ? clear_bhb_loop+0x40/0x90
[  221.609575][ T8155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.609596][ T8155] RIP: 0033:0x7f331339c799
[  221.609617][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.609636][ T8155] RSP: 002b:00007f3314228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  221.609658][ T8155] RAX: ffffffffffffffda RBX: 00007f3313615fa0 RCX: 00007f331339c799
[  221.609674][ T8155] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  221.609687][ T8155] RBP: 00007f3314228090 R08: 0000000000000000 R09: 0000000000000000
[  221.609699][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.609710][ T8155] R13: 00007f3313616038 R14: 00007f3313615fa0 R15: 00007fff2e912468
[  221.609743][ T8155]  </TASK>
[  222.258753][ T8168] overlay: Unknown parameter 'obj_type'
[  222.325973][ T8171] binder: 8170:8171 ioctl c0306201 2000000003c0 returned -14
[  222.336116][ T8171] binder: 8170:8171 unknown command 0
[  222.357580][ T8171] binder: 8170:8171 ioctl c0306201 2000000001c0 returned -22
[  222.428485][ T8173] support for the xor transformation has been removed.
[  222.597389][ T8182] binder: 8181:8182 ioctl c0306201 2000000003c0 returned -14
[  222.917440][ T8194] binder: 8193:8194 ioctl c0306201 2000000003c0 returned -14
[  222.926227][ T8194] binder: 8193:8194 unknown command 0
[  222.932181][ T8194] binder: 8193:8194 ioctl c0306201 2000000001c0 returned -22
[  222.951073][ T7006] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  223.008215][ T8196] tipc: Started in network mode
[  223.018129][ T8196] tipc: Node identity ac1414aa, cluster identity 4711
[  223.032496][ T8196] tipc: Enabled bearer <udp:s>, priority 10
[  223.050567][   T29] usb 1-1: USB disconnect, device number 40
[  223.103283][ T7006] usb 5-1: unable to get BOS descriptor or descriptor too short
[  223.116732][ T7006] usb 5-1: not running at top speed; connect to a high speed hub
[  223.155366][ T7006] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.173695][ T7006] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.190536][ T7006] usb 5-1: string descriptor 0 read error: -22
[  223.201546][ T7006] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.226163][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.270000][ T7006] usb 5-1: 0:2 : does not exist
[  223.382850][ T8204] overlayfs: failed to resolve './file0': -2
[  223.564496][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'.
[  223.744924][ T8217] binder: 8216:8217 ioctl c0306201 2000000003c0 returned -14
[  223.753327][ T8217] binder: 8216:8217 unknown command 0
[  223.758980][ T8217] binder: 8216:8217 ioctl c0306201 2000000001c0 returned -22
[  223.880488][ T8219] input: syz1 as /devices/virtual/input/input26
[  224.066790][ T8226] overlayfs: failed to resolve './file0': -2
[  224.098054][ T7006] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  224.143345][ T7006] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  224.158793][ T5890] tipc: Node number set to 2886997162
[  224.182789][ T7006] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  224.309477][ T7006] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  224.377855][ T7006] usb 5-1: USB disconnect, device number 30
[  224.607492][ T8238] binder: 8237:8238 ioctl 4018620d 0 returned -22
[  224.615663][ T8238] binder: 8237:8238 ioctl c0306201 2000000003c0 returned -14
[  224.624183][ T8238] binder: 8237:8238 unknown command 0
[  224.630041][ T8238] binder: 8237:8238 ioctl c0306201 2000000001c0 returned -22
[  224.744557][ T8240] netlink: 364 bytes leftover after parsing attributes in process `syz.4.724'.
[  224.865085][ T8246] overlayfs: failed to resolve './file0': -2
[  224.917087][ T8248] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.728'.
[  225.205324][ T8262] binder: 8261:8262 ioctl 4018620d 0 returned -22
[  225.225369][ T8262] binder: 8261:8262 ioctl c0306201 2000000003c0 returned -14
[  225.242148][ T8262] binder: 8261:8262 unknown command 0
[  225.247632][ T8262] binder: 8261:8262 ioctl c0306201 2000000001c0 returned -22
[  225.259795][ T7006] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  225.294238][ T8264] netlink: 364 bytes leftover after parsing attributes in process `syz.5.735'.
[  225.349495][   T30] audit: type=1400 audit(1772530714.272:19): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=8265 comm="syz.0.736"
[  225.421436][ T7006] usb 5-1: Using ep0 maxpacket: 8
[  225.428510][ T7006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.440995][ T7006] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  225.454418][ T7006] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  225.474115][ T7006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.501340][ T7006] usb 5-1: config 0 descriptor??
[  225.520323][ T7006] hso 5-1:0.0: Can't find BULK IN endpoint
[  225.593178][ T8272] netlink: 'syz.5.739': attribute type 21 has an invalid length.
[  225.610574][ T8272] netlink: 144 bytes leftover after parsing attributes in process `syz.5.739'.
[  225.719819][ T5824] usb 5-1: USB disconnect, device number 31
[  225.861054][ T7006] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  226.031033][ T7006] usb 6-1: Using ep0 maxpacket: 32
[  226.038317][ T7006] usb 6-1: config 91 has an invalid interface number: 102 but max is 0
[  226.046891][ T7006] usb 6-1: config 91 has no interface number 0
[  226.056367][ T7006] usb 6-1: config 91 interface 102 has no altsetting 0
[  226.066525][ T7006] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[  226.075865][ T7006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.083958][ T7006] usb 6-1: Product: syz
[  226.088140][ T7006] usb 6-1: Manufacturer: syz
[  226.092829][ T7006] usb 6-1: SerialNumber: syz
[  226.181064][ T5824] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  226.309311][ T8284] binder: 8283:8284 ioctl 4018620d 0 returned -22
[  226.317726][ T8284] binder: 8283:8284 ioctl c0306201 2000000003c0 returned -14
[  226.325811][ T8284] binder: 8283:8284 unknown command 0
[  226.331452][ T7006] ems_usb 6-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  226.332298][ T7006] ems_usb 6-1:91.102: probe with driver ems_usb failed with error -22
[  226.343160][ T5824] usb 1-1: Using ep0 maxpacket: 32
[  226.358443][ T8284] binder: 8283:8284 ioctl c0306201 2000000001c0 returned -22
[  226.368593][ T7006] usb 6-1: USB disconnect, device number 23
[  226.378658][ T5824] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  226.392292][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.410776][ T5824] usb 1-1: Product: syz
[  226.417515][ T5824] usb 1-1: Manufacturer: syz
[  226.431495][ T5824] usb 1-1: SerialNumber: syz
[  226.442910][ T5824] usb 1-1: config 0 descriptor??
[  226.866527][ T5824] airspy 1-1:0.0: Board ID: 00
[  226.881023][ T5824] airspy 1-1:0.0: Firmware version: 
[  227.526244][ T8306] binder: 8305:8306 ioctl c0306201 0 returned -14
[  227.553024][ T8306] binder: 8305:8306 unknown command 0
[  227.582007][ T8306] binder: 8305:8306 ioctl c0306201 2000000001c0 returned -22
[  227.752048][ T8312] overlayfs: failed to resolve './file1': -2
[  227.957005][ T5824] airspy 1-1:0.0: Registered as swradio24
[  227.982739][ T5824] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  228.082974][ T5824] usb 1-1: USB disconnect, device number 41
[  228.462970][ T8334] binder: 8333:8334 ioctl c0306201 0 returned -14
[  228.470133][ T8334] binder: 8333:8334 unknown command 0
[  228.479315][ T8334] binder: 8333:8334 ioctl c0306201 2000000001c0 returned -22
[  228.772972][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'.
[  228.953128][ T5890] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  229.080962][ T8338] infiniband !yz!: set active
[  229.089699][ T8338] infiniband !yz!: added team_slave_0
[  229.121029][ T5890] usb 1-1: Using ep0 maxpacket: 16
[  229.134285][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  229.157952][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  229.188296][ T5890] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  229.193070][ T8338] RDS/IB: !yz!: added
[  229.203076][ T8338] smc: adding ib device !yz! with port count 1
[  229.212244][ T8338] smc:    ib device !yz! port 1 has no pnetid
[  229.224103][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.294955][ T5890] usb 1-1: config 0 descriptor??
[  229.336960][ T5890] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  229.407527][ T8355] binder: 8354:8355 ioctl c0306201 0 returned -14
[  229.415057][ T8355] binder: 8354:8355 unknown command 0
[  229.420694][ T8355] binder: 8354:8355 ioctl c0306201 2000000001c0 returned -22
[  229.546785][ T8342] netlink: 'syz.0.769': attribute type 16 has an invalid length.
[  229.560434][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.571838][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.627036][ T5890] usb 1-1: USB disconnect, device number 42
[  229.750999][ T7006] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  229.922424][ T7006] usb 6-1: Using ep0 maxpacket: 16
[  229.929676][ T7006] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  229.941231][ T7006] usb 6-1: config 0 has no interface number 0
[  229.948160][ T7006] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  229.960708][ T7006] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  229.974531][ T7006] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  229.984421][ T7006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.994633][ T7006] usb 6-1: Product: syz
[  229.998913][ T7006] usb 6-1: Manufacturer: syz
[  230.004079][ T7006] usb 6-1: SerialNumber: syz
[  230.012897][ T7006] usb 6-1: config 0 descriptor??
[  230.019366][ T8357] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  230.028159][ T8357] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  230.250725][ T8357] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  230.271352][ T8357] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  230.484998][   T30] audit: type=1326 audit(1772530719.412:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.5.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x0
[  230.595142][ T8366] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.776'.
[  230.626961][ T8366] openvswitch: netlink: IP tunnel dst address not specified
[  230.649245][ T7006] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  230.691014][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  230.841083][    T9] usb 1-1: Using ep0 maxpacket: 8
[  231.054190][ T8370] afs: Unknown parameter 'audit'
[  231.594576][ T8383] binder: 8382:8383 unknown command 0
[  231.603158][ T8383] binder: 8382:8383 ioctl c0306201 2000000001c0 returned -22
[  232.138188][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'.
[  232.243330][ T5824] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  232.401279][ T5824] usb 5-1: Using ep0 maxpacket: 32
[  232.408758][ T5824] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  232.417744][ T5824] usb 5-1: config 0 has no interface number 0
[  232.424222][ T5824] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  232.446573][ T5824] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  232.457122][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.466893][ T5824] usb 5-1: Product: syz
[  232.471285][ T5824] usb 5-1: Manufacturer: syz
[  232.476196][ T5824] usb 5-1: SerialNumber: syz
[  232.486820][ T5824] usb 5-1: config 0 descriptor??
[  232.494431][ T8395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  232.580960][ T7006] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  232.593558][ T7006] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  232.614628][ T7006] asix 6-1:0.34: probe with driver asix failed with error -71
[  232.627462][ T7006] usb 6-1: USB disconnect, device number 24
[  232.644358][ T5986] udevd[5986]: setting mode of /dev/bus/usb/006/024 to 020664 failed: No such file or directory
[  232.670001][ T5986] udevd[5986]: setting owner of /dev/bus/usb/006/024 to uid=0, gid=0 failed: No such file or directory
[  232.711214][ T8395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  232.806032][ T8410] binder: 8409:8410 unknown command 0
[  232.813162][ T8410] binder: 8409:8410 ioctl c0306201 2000000001c0 returned -22
[  232.954679][ T8414] binder: 8413:8414 ioctl c0306201 2000000003c0 returned -14
[  232.963869][ T8414] binder: 8413:8414 ioctl c0306201 0 returned -14
[  233.280483][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  233.294533][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  233.310556][    T9] usb 1-1: can't read configurations, error -71
[  233.362010][ T5820] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  233.535853][ T5824] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  233.547102][ T5820] usb 6-1: Using ep0 maxpacket: 16
[  233.548844][ T8428] binder: 8427:8428 unknown command 0
[  233.552776][ T5824] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  233.553044][ T5824] asix 5-1:0.188: probe with driver asix failed with error -61
[  233.581565][ T5820] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.598065][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0
[  233.607323][ T5820] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  233.617255][ T8428] binder: 8427:8428 ioctl c0306201 2000000001c0 returned -22
[  233.625125][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.644432][ T5820] usb 6-1: config 0 descriptor??
[  233.784175][ T8432] binder: 8431:8432 ioctl c0306201 2000000003c0 returned -14
[  233.793211][ T8432] binder: 8431:8432 ioctl c0306201 0 returned -14
[  234.060374][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.078238][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.109171][ T8440] netlink: 156 bytes leftover after parsing attributes in process `syz.0.809'.
[  234.137501][   T30] audit: type=1400 audit(1772530723.062:21): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8439 comm="syz.0.809"
[  234.160142][ T8440] netlink: 276 bytes leftover after parsing attributes in process `syz.0.809'.
[  234.296988][ T5820] usbhid 6-1:0.0: can't add hid device: -71
[  234.304186][ T5820] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  234.319504][ T5820] usb 6-1: USB disconnect, device number 25
[  234.541120][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  234.705525][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  234.715123][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.723410][    T9] usb 1-1: Product: syz
[  234.727748][    T9] usb 1-1: Manufacturer: syz
[  234.732939][    T9] usb 1-1: SerialNumber: syz
[  234.744210][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  234.763906][ T5824] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  234.938556][ T8452] binder: 8451:8452 unknown command 0
[  234.945481][ T8452] binder: 8451:8452 ioctl c0306201 2000000001c0 returned -22
[  234.983969][  T796] usb 1-1: USB disconnect, device number 45
[  235.034439][    T9] usb 5-1: USB disconnect, device number 32
[  235.149614][ T8456] binder: 8455:8456 ioctl c0306201 2000000003c0 returned -14
[  235.284804][ T8460] netlink: 'syz.5.816': attribute type 5 has an invalid length.
[  235.295218][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'.
[  235.304730][ T8460] netlink: 'syz.5.816': attribute type 1 has an invalid length.
[  235.364386][ T8460] netlink: 'syz.5.816': attribute type 29 has an invalid length.
[  235.386100][ T8460] netlink: 'syz.5.816': attribute type 29 has an invalid length.
[  235.623067][ T8471] netlink: 'syz.5.819': attribute type 9 has an invalid length.
[  235.634025][ T8473] binder: 8472:8473 unknown command 0
[  235.639739][ T8473] binder: 8472:8473 ioctl c0306201 2000000001c0 returned -22
[  235.650058][ T8470] netlink: 'syz.5.819': attribute type 9 has an invalid length.
[  235.661092][ T8470] netlink: 'syz.5.819': attribute type 11 has an invalid length.
[  235.669684][ T8471] netlink: 'syz.5.819': attribute type 11 has an invalid length.
[  235.669690][ T8470] netlink: 'syz.5.819': attribute type 12 has an invalid length.
[  235.692725][ T8467] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  235.700569][ T8470] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.819'.
[  235.702428][ T8471] netlink: 'syz.5.819': attribute type 12 has an invalid length.
[  235.713058][ T8467] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  235.728232][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.819'.
[  235.741526][ T8471] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.819'.
[  235.754699][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.819'.
[  235.795258][ T5824] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  235.809402][ T5824] ath9k_htc: Failed to initialize the device
[  235.820469][  T796] usb 1-1: ath9k_htc: USB layer deinitialized
[  235.828879][ T8467] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  235.905277][ T8478] binder: 8477:8478 ioctl c0306201 2000000003c0 returned -14
[  236.081856][ T5820] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  236.141069][  T796] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  236.241212][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  236.249796][ T5820] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  236.258175][ T5820] usb 5-1: config 0 has no interface number 0
[  236.264458][ T5820] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  236.275136][ T5890] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  236.287405][ T5820] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  236.297678][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.305947][  T796] usb 1-1: Using ep0 maxpacket: 8
[  236.311408][ T5820] usb 5-1: Product: syz
[  236.315772][ T5820] usb 5-1: Manufacturer: syz
[  236.320952][ T5820] usb 5-1: SerialNumber: syz
[  236.326479][  T796] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  236.336173][  T796] usb 1-1: config 179 has no interface number 0
[  236.344095][ T5820] usb 5-1: config 0 descriptor??
[  236.349450][  T796] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  236.361843][  T796] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  236.363585][ T8476] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  236.376013][  T796] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  236.399239][  T796] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  236.414649][  T796] usb 1-1: config 179 interface 65 has no altsetting 0
[  236.423546][  T796] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  236.432840][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.448932][ T5890] usb 6-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40
[  236.459102][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.467659][ T5890] usb 6-1: Product: syz
[  236.472154][ T5890] usb 6-1: Manufacturer: syz
[  236.476886][ T5890] usb 6-1: SerialNumber: syz
[  236.579340][  T796] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29
[  236.615249][ T8476] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  236.686146][ T5174] input input29: unable to receive magic message: -110
[  236.714541][ T5174] input input29: unable to receive magic message: -32
[  236.746206][ T5174] input input29: unable to receive magic message: -32
[  236.770266][ T5890] usb 6-1: unit 4 not found!
[  236.797425][ T5174] input input29: unable to receive magic message: -32
[  236.830190][ T5862] input input29: unable to receive magic message: -32
[  236.897461][ T5174] input input29: unable to receive magic message: -32
[  236.907493][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  236.907493][ T5870] usb 1-1: USB disconnect, device number 46
[  236.907636][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  236.959288][ T8487] comedi comedi2: ni_at_a2150: I/O port conflict (0x2,28)
[  236.983731][ T5890] snd_usb_pod 6-1:1.1: Line 6 PODxt Pro found
[  236.990710][ T5890] usb 6-1: selecting invalid altsetting 5
[  237.005395][ T5890] snd_usb_pod 6-1:1.1: set_interface failed
[  237.014189][ T5890] snd_usb_pod 6-1:1.1: Line 6 PODxt Pro now disconnected
[  237.023140][ T5890] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22
[  237.051719][ T5890] snd_usb_pod 6-1:1.2: Line 6 PODxt Pro found
[  237.059013][ T5890] usb 6-1: selecting invalid altsetting 5
[  237.066062][ T5890] snd_usb_pod 6-1:1.2: set_interface failed
[  237.077000][ T5890] snd_usb_pod 6-1:1.2: Line 6 PODxt Pro now disconnected
[  237.089136][ T5890] snd_usb_pod 6-1:1.2: probe with driver snd_usb_pod failed with error -22
[  237.103705][ T5890] usb 6-1: USB disconnect, device number 26
[  237.164587][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.449218][ T5820] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  237.472215][ T5820] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  237.490535][ T5820] asix 5-1:0.188: probe with driver asix failed with error -61
[  237.501821][ T8495] binder: 8494:8495 unknown command 0
[  237.508714][ T8495] binder: 8494:8495 ioctl c0306201 2000000001c0 returned -22
[  237.630111][ T8499] binder: 8498:8499 ioctl c0306201 2000000003c0 returned -14
[  237.638223][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout
[  237.981018][   T29] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  238.131022][   T29] usb 6-1: Using ep0 maxpacket: 32
[  238.139998][   T29] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  238.149564][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.158000][   T29] usb 6-1: Product: syz
[  238.162454][   T29] usb 6-1: Manufacturer: syz
[  238.167100][   T29] usb 6-1: SerialNumber: syz
[  238.175128][   T29] usb 6-1: config 0 descriptor??
[  238.587164][   T29] airspy 6-1:0.0: Board ID: 00
[  238.594806][   T29] airspy 6-1:0.0: Firmware version: 
[  238.856293][ T5824] usb 5-1: USB disconnect, device number 33
[  238.990525][ T8519] binder: 8518:8519 ioctl c0306201 2000000003c0 returned -14
[  238.999769][ T8519] binder: 8518:8519 ioctl c0306201 0 returned -14
[  239.110646][ T8525] binder: 8523:8525 ioctl c0306201 2000000003c0 returned -14
[  239.395481][ T8534] binder: 8533:8534 ioctl c0306201 2000000003c0 returned -14
[  239.404494][ T8534] FAULT_INJECTION: forcing a failure.
[  239.404494][ T8534] name failslab, interval 1, probability 0, space 0, times 0
[  239.419003][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.4.847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.419041][ T8534] Tainted: [L]=SOFTLOCKUP
[  239.419050][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.419063][ T8534] Call Trace:
[  239.419072][ T8534]  <TASK>
[  239.419081][ T8534]  dump_stack_lvl+0xe8/0x150
[  239.419120][ T8534]  should_fail_ex+0x412/0x560
[  239.419158][ T8534]  should_failslab+0xa8/0x100
[  239.419207][ T8534]  __kmalloc_noprof+0xe8/0x760
[  239.419234][ T8534]  ? tomoyo_encode+0x28b/0x550
[  239.419268][ T8534]  tomoyo_encode+0x28b/0x550
[  239.419302][ T8534]  tomoyo_realpath_from_path+0x58d/0x5d0
[  239.419342][ T8534]  ? tomoyo_path_number_perm+0x219/0x630
[  239.419367][ T8534]  tomoyo_path_number_perm+0x246/0x630
[  239.419393][ T8534]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  239.419420][ T8534]  ? __lock_acquire+0x6b5/0x2cf0
[  239.419468][ T8534]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  239.419528][ T8534]  ? __fget_files+0x2a/0x420
[  239.419553][ T8534]  ? __fget_files+0x2a/0x420
[  239.419573][ T8534]  ? __fget_files+0x3a0/0x420
[  239.419592][ T8534]  ? __fget_files+0x2a/0x420
[  239.419618][ T8534]  security_file_ioctl+0xc3/0x2a0
[  239.419643][ T8534]  __se_sys_ioctl+0x47/0x170
[  239.419674][ T8534]  do_syscall_64+0x14d/0xf80
[  239.419700][ T8534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.419722][ T8534]  ? clear_bhb_loop+0x40/0x90
[  239.419748][ T8534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.419769][ T8534] RIP: 0033:0x7fee2419c799
[  239.419790][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.419806][ T8534] RSP: 002b:00007fee25009028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.419829][ T8534] RAX: ffffffffffffffda RBX: 00007fee24415fa0 RCX: 00007fee2419c799
[  239.419843][ T8534] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  239.419855][ T8534] RBP: 00007fee25009090 R08: 0000000000000000 R09: 0000000000000000
[  239.419867][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.419878][ T8534] R13: 00007fee24416038 R14: 00007fee24415fa0 R15: 00007ffe79e7c378
[  239.419910][ T8534]  </TASK>
[  239.420162][ T8534] ERROR: Out of memory at tomoyo_realpath_from_path.
[  239.661638][   T29] airspy 6-1:0.0: Registered as swradio24
[  239.668940][   T29] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  239.679530][ T8534] binder: 8533:8534 unknown command 0
[  239.689124][ T8534] binder: 8533:8534 ioctl c0306201 2000000001c0 returned -22
[  239.711461][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout
[  239.850075][ T5890] usb 6-1: USB disconnect, device number 27
[  240.065655][ T8547] binder: 8546:8547 ioctl c0306201 2000000003c0 returned -14
[  240.074195][ T8547] binder: 8546:8547 ioctl c0306201 0 returned -14
[  240.146258][ T8549] binder: 8548:8549 ioctl c0306201 2000000003c0 returned -14
[  240.229556][ T8551] netlink: 25 bytes leftover after parsing attributes in process `syz.4.853'.
[  240.329280][ T8553] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.413176][ T8553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  240.594531][ T2259] block nbd2: Possible stuck request ffff888027928000: control (read@0,1024B). Runtime 120 seconds
[  240.606020][ T2259] block nbd2: Possible stuck request ffff888027928200: control (read@1024,1024B). Runtime 120 seconds
[  240.618094][ T2259] block nbd2: Possible stuck request ffff888027928400: control (read@2048,1024B). Runtime 120 seconds
[  240.630031][ T2259] block nbd2: Possible stuck request ffff888027928600: control (read@3072,1024B). Runtime 120 seconds
[  240.641618][ T5824] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  240.727806][ T8567] binder: 8565:8567 ioctl c0306201 2000000003c0 returned -14
[  240.736740][ T8567] binder: 8565:8567 ioctl c0306201 0 returned -14
[  240.802333][ T5824] usb 1-1: Using ep0 maxpacket: 16
[  240.815014][ T8570] binder: 8569:8570 ioctl c0306201 2000000003c0 returned -14
[  240.816499][ T5824] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  240.850969][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.867735][ T5824] usb 1-1: Product: syz
[  240.880987][ T5824] usb 1-1: Manufacturer: syz
[  240.894438][ T5824] usb 1-1: SerialNumber: syz
[  240.916787][ T5824] usb 1-1: config 0 descriptor??
[  241.131839][ T5824] usb-storage 1-1:0.0: USB Mass Storage device detected
[  241.149569][ T5824] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1
[  241.162959][ T5824] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  241.162959][ T5824]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  241.229740][ T5824] usb 1-1: USB disconnect, device number 47
[  241.291021][ T5820] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  241.451073][ T5820] usb 6-1: Using ep0 maxpacket: 32
[  241.458724][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.470141][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  241.483312][ T5820] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  241.492726][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.504064][ T5820] usb 6-1: config 0 descriptor??
[  241.514017][ T5820] hub 6-1:0.0: bad descriptor, ignoring hub
[  241.520378][ T5820] hub 6-1:0.0: probe with driver hub failed with error -5
[  241.530110][ T5820] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  241.621174][ T5928] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[  241.720589][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.730122][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.742284][ T8578] input: syz0 as /devices/virtual/input/input30
[  241.771016][ T5928] usb 5-1: Invalid ep0 maxpacket: 64
[  241.791522][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout
[  241.921044][ T5928] usb 5-1: new low-speed USB device number 35 using dummy_hcd
[  241.929005][ T8591] binder: 8590:8591 ioctl c0306201 2000000003c0 returned -14
[  241.962387][ T5820] usb 6-1: USB disconnect, device number 28
[  242.010454][   T30] audit: type=1326 audit(1772530730.932:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.0.870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f745c79c799 code=0x0
[  242.121155][ T5928] usb 5-1: Invalid ep0 maxpacket: 64
[  242.127439][ T5928] usb usb5-port1: attempt power cycle
[  242.301148][ T5870] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  242.431103][ T5870] usb 6-1: device descriptor read/64, error -71
[  242.471086][ T5928] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[  242.491923][ T5928] usb 5-1: Invalid ep0 maxpacket: 64
[  242.621147][ T5928] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  242.641754][ T5928] usb 5-1: Invalid ep0 maxpacket: 64
[  242.648066][ T5928] usb usb5-port1: unable to enumerate USB device
[  242.682452][ T5870] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  242.831285][ T5870] usb 6-1: device descriptor read/64, error -71
[  242.890786][ T8596] binder: 8595:8596 ioctl c0306201 2000000003c0 returned -14
[  242.952611][ T5870] usb usb6-port1: attempt power cycle
[  243.301084][ T5870] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  243.321884][ T5870] usb 6-1: device descriptor read/8, error -71
[  243.571177][ T5870] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  243.601804][ T5870] usb 6-1: device descriptor read/8, error -71
[  243.711458][ T5870] usb usb6-port1: unable to enumerate USB device
[  244.443693][ T8611] sp0: Synchronizing with TNC
[  244.558410][ T8624] binder: 8623:8624 ioctl c0306201 2000000003c0 returned -14
[  244.801011][ T5870] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  244.854579][ T8631] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  244.982814][ T5870] usb 6-1: Using ep0 maxpacket: 32
[  244.995413][ T5870] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  245.018552][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.031828][ T5870] usb 6-1: config 0 descriptor??
[  245.045737][ T5870] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  245.291058][ T5820] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  245.450999][ T5820] usb 1-1: Using ep0 maxpacket: 32
[  245.464166][ T5820] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  245.473886][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.482876][ T5820] usb 1-1: Product: syz
[  245.487743][ T5820] usb 1-1: Manufacturer: syz
[  245.493776][ T5820] usb 1-1: SerialNumber: syz
[  245.507581][ T5820] usb 1-1: config 0 descriptor??
[  245.848273][ T5870] gspca_vc032x: reg_w err -71
[  245.857966][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.865714][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.871284][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.876782][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.883805][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.889336][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.896164][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.903449][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.908887][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.914370][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.919978][ T5820] airspy 1-1:0.0: Board ID: 00
[  245.920917][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920934][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920946][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920957][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920967][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920978][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920989][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.920999][ T5870] gspca_vc032x: I2c Bus Busy Wait 00
[  245.921011][ T5870] gspca_vc032x: Unknown sensor...
[  245.929655][ T5820] airspy 1-1:0.0: Firmware version: 
[  245.939550][ T5870] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  245.994748][ T5870] usb 6-1: USB disconnect, device number 33
[  246.621439][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.894'.
[  246.637729][ T8662] syzkaller0: entered promiscuous mode
[  246.643983][ T8662] syzkaller0: entered allmulticast mode
[  246.731385][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  246.931979][ T5820] airspy 1-1:0.0: Registered as swradio24
[  246.940037][ T5820] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  247.079168][ T8673] tipc: Started in network mode
[  247.087135][ T8673] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  247.115324][ T8673] tipc: Enabled bearer <udp:syz1>, priority 10
[  247.137603][  T796] usb 1-1: USB disconnect, device number 48
[  247.632331][  T796] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  247.704718][ T8687] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  247.793237][  T796] usb 6-1: config index 0 descriptor too short (expected 65183, got 72)
[  247.811029][  T796] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  247.830740][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.847897][  T796] usb 6-1: Product: syz
[  247.852623][  T796] usb 6-1: Manufacturer: syz
[  247.857439][  T796] usb 6-1: SerialNumber: syz
[  247.873020][  T796] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  247.890714][ T5890] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  248.119966][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.134562][  T796] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  248.138235][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.161411][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.175531][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.187325][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.200253][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.210500][   T29] usb 6-1: USB disconnect, device number 34
[  248.235577][ T5928] tipc: Node number set to 4269801492
[  248.301496][  T796] usb 1-1: Using ep0 maxpacket: 16
[  248.318173][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.342671][  T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.356823][  T796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  248.379633][  T796] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  248.389393][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.407237][  T796] usb 1-1: config 0 descriptor??
[  248.672399][ T8708] comedi comedi0: aio_iiro_16: I/O port conflict (0x4e27,8)
[  248.763255][ T8712] binder: 8711:8712 ioctl c0306201 2000000003c0 returned -14
[  248.773472][ T8712] binder: 8711:8712 unknown command 0
[  248.779380][ T8712] binder: 8711:8712 ioctl c0306201 2000000001c0 returned -22
[  248.841422][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.849581][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.859186][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.890985][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.908810][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.929901][  T796] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0
[  248.943234][  T796] corsair 0003:1B1C:1B02.0008: invalid report_count 53754
[  248.960972][  T796] corsair 0003:1B1C:1B02.0008: item 0 2 1 9 parsing failed
[  248.972687][  T796] corsair 0003:1B1C:1B02.0008: parse failed
[  248.986675][  T796] corsair 0003:1B1C:1B02.0008: probe with driver corsair failed with error -22
[  248.999986][ T5890] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  249.010371][ T5890] ath9k_htc: Failed to initialize the device
[  249.026502][   T29] usb 6-1: ath9k_htc: USB layer deinitialized
[  249.181325][ T8722] overlayfs: missing 'lowerdir'
[  249.267740][ T8724] syzkaller1: entered promiscuous mode
[  249.277124][ T8724] syzkaller1: entered allmulticast mode
[  249.341072][   T29] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  249.513459][   T29] usb 6-1: Using ep0 maxpacket: 32
[  249.530140][   T29] usb 6-1: config index 0 descriptor too short (expected 241, got 72)
[  249.539723][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.556771][   T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  249.573299][   T29] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  249.594844][   T29] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  249.620982][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.636428][   T29] usb 6-1: config 0 descriptor??
[  249.655561][   T29] mos7840 6-1:0.0: missing endpoints
[  249.709390][ T8733] binder: 8732:8733 ioctl c0306201 2000000003c0 returned -14
[  249.717678][ T8733] binder: 8732:8733 unknown command 0
[  249.724199][ T8733] binder: 8732:8733 ioctl c0306201 2000000001c0 returned -22
[  249.832936][ T8737] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  249.866652][   T29] usb 6-1: USB disconnect, device number 35
[  250.081007][ T5928] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  250.248273][ T5928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  250.259244][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.268639][ T5928] usb 5-1: Product: syz
[  250.273577][ T5928] usb 5-1: Manufacturer: syz
[  250.278485][ T5928] usb 5-1: SerialNumber: syz
[  250.287436][ T5928] usb 5-1: config 0 descriptor??
[  250.497077][ T5928] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  250.517523][ T8741] overlayfs: missing 'lowerdir'
[  250.749973][ T8747] FAULT_INJECTION: forcing a failure.
[  250.749973][ T8747] name failslab, interval 1, probability 0, space 0, times 0
[  250.763582][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.5.933 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  250.763615][ T8747] Tainted: [L]=SOFTLOCKUP
[  250.763623][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  250.763635][ T8747] Call Trace:
[  250.763644][ T8747]  <TASK>
[  250.763651][ T8747]  dump_stack_lvl+0xe8/0x150
[  250.763688][ T8747]  should_fail_ex+0x412/0x560
[  250.763723][ T8747]  should_failslab+0xa8/0x100
[  250.763754][ T8747]  __kmalloc_cache_noprof+0x88/0x660
[  250.763781][ T8747]  ? ovl_iterate+0xfec/0x21a0
[  250.763809][ T8747]  ? __lock_acquire+0x6b5/0x2cf0
[  250.763842][ T8747]  ovl_iterate+0xfec/0x21a0
[  250.763869][ T8747]  ? register_lock_class+0x31/0x2e0
[  250.763911][ T8747]  ? __pfx_ovl_iterate+0x10/0x10
[  250.763957][ T8747]  ? __lock_acquire+0x6b5/0x2cf0
[  250.763987][ T8747]  ? aa_file_perm+0x50e/0x15e0
[  250.764019][ T8747]  ? __lock_acquire+0x6b5/0x2cf0
[  250.764048][ T8747]  ? trace_contention_end+0x3d/0x150
[  250.764071][ T8747]  ? __mutex_lock+0x319/0x1300
[  250.764119][ T8747]  ? down_write+0x16d/0x200
[  250.764147][ T8747]  ? __pfx_down_write+0x10/0x10
[  250.764176][ T8747]  ? wrap_directory_iterator+0x52/0xe0
[  250.764207][ T8747]  ? __pfx_ovl_iterate+0x10/0x10
[  250.764238][ T8747]  wrap_directory_iterator+0x96/0xe0
[  250.764270][ T8747]  iterate_dir+0x399/0x570
[  250.764303][ T8747]  __se_sys_getdents+0xf1/0x270
[  250.764335][ T8747]  ? __pfx___se_sys_getdents+0x10/0x10
[  250.764361][ T8747]  ? ksys_write+0x242/0x270
[  250.764383][ T8747]  ? __pfx_filldir+0x10/0x10
[  250.764412][ T8747]  ? __pfx_ksys_write+0x10/0x10
[  250.764449][ T8747]  do_syscall_64+0x14d/0xf80
[  250.764475][ T8747]  ? trace_irq_disable+0x3b/0x150
[  250.764495][ T8747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.764519][ T8747]  ? clear_bhb_loop+0x40/0x90
[  250.764545][ T8747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.764567][ T8747] RIP: 0033:0x7f331339c799
[  250.764588][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.764606][ T8747] RSP: 002b:00007f3314228028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  250.764629][ T8747] RAX: ffffffffffffffda RBX: 00007f3313615fa0 RCX: 00007f331339c799
[  250.764643][ T8747] RDX: 0000000000000ffa RSI: 0000200000000440 RDI: 0000000000000003
[  250.764656][ T8747] RBP: 00007f3314228090 R08: 0000000000000000 R09: 0000000000000000
[  250.764668][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.764681][ T8747] R13: 00007f3313616038 R14: 00007f3313615fa0 R15: 00007fff2e912468
[  250.764714][ T8747]  </TASK>
[  251.055401][ T5893] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  251.076320][ T5893] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  251.127217][ T5893] usb 2-1: USB disconnect, device number 12
[  251.134409][ T5890] usb 1-1: USB disconnect, device number 49
[  251.506144][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  251.617578][ T5928] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  251.640984][   T29] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  251.665410][ T5928] usb 5-1: USB disconnect, device number 38
[  251.680956][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  251.692717][ T5893] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  251.702308][ T5893] usb 2-1: config 0 has no interface number 0
[  251.714122][ T5893] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  251.730504][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.743148][ T5893] usb 2-1: Product: syz
[  251.748262][ T5893] usb 2-1: Manufacturer: syz
[  251.753974][ T5893] usb 2-1: SerialNumber: syz
[  251.763853][ T5893] usb 2-1: config 0 descriptor??
[  251.774371][ T5893] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  251.791127][ T5870] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  251.821913][   T29] usb 1-1: Using ep0 maxpacket: 32
[  251.836894][   T29] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  251.847929][   T29] usb 1-1: config 0 has no interface number 0
[  251.857544][   T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  251.869740][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.878210][   T29] usb 1-1: Product: syz
[  251.882519][   T29] usb 1-1: Manufacturer: syz
[  251.887474][   T29] usb 1-1: SerialNumber: syz
[  251.901609][   T29] usb 1-1: config 0 descriptor??
[  251.914762][   T29] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  252.007494][ T8766] overlayfs: missing 'lowerdir'
[  252.016367][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  252.034487][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  252.137958][   T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  252.186027][   T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3
[  252.245390][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  252.248673][   T29] usb 2-1: USB disconnect, device number 13
[  252.302903][   T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  252.375148][   T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  252.415648][   T29] quatech2 2-1:0.51: device disconnected
[  252.531662][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  252.533465][ T5890] usb 1-1: USB disconnect, device number 50
[  252.641776][ T5890] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  252.660483][ T5890] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3
[  252.683482][ T5890] quatech2 1-1:0.51: device disconnected
[  252.729760][ T8774] binder: 8773:8774 ioctl c0306201 2000000003c0 returned -14
[  252.857362][ T8778] binder: 8777:8778 ioctl c0306201 200000000080 returned -14
[  253.441088][ T5870] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  253.613275][ T5870] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  253.622817][ T5870] usb 6-1: config 0 has no interface number 0
[  253.629689][ T5870] usb 6-1: config 0 interface 41 has no altsetting 0
[  253.640670][ T5870] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  253.641534][ T5893] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  253.652520][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.666494][ T5870] usb 6-1: Product: syz
[  253.672225][ T5870] usb 6-1: Manufacturer: syz
[  253.676998][ T5870] usb 6-1: SerialNumber: syz
[  253.684659][ T5870] usb 6-1: config 0 descriptor??
[  253.821116][ T5893] usb 1-1: Using ep0 maxpacket: 8
[  253.826415][ T5890] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  253.838210][ T5893] usb 1-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[  253.850047][ T5893] usb 1-1: config 218 has 1 interface, different from the descriptor's value: 244
[  253.873981][ T5893] usb 1-1: config 218 has no interface number 0
[  253.882495][ T5893] usb 1-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.897713][ T5893] usb 1-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[  253.908936][ T5893] usb 1-1: config 218 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  253.923361][ T5893] usb 1-1: config 218 interface 95 has no altsetting 0
[  253.934037][ T5893] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  253.944829][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.953463][ T5893] usb 1-1: Product: syz
[  253.958077][ T5893] usb 1-1: Manufacturer: syz
[  253.962853][ T5893] usb 1-1: SerialNumber: syz
[  254.002295][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  254.017298][ T5890] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  254.028429][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  254.040411][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  254.051237][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'.
[  254.059971][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  254.060291][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  254.060347][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  254.060373][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  254.060423][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  254.060448][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.208893][ T5893] usb 1-1: USB disconnect, device number 51
[  254.335089][ T5870] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32
[  254.365036][ T5890] usb 5-1: usb_control_msg returned -32
[  254.375071][ T5890] usbtmc 5-1:16.0: can't read capabilities
[  254.390101][ T8807] input: syz1 as /devices/virtual/input/input32
[  254.719555][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.729340][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.771691][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  254.931076][ T5928] usb 2-1: Using ep0 maxpacket: 32
[  254.938654][ T5928] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  254.948809][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.960414][ T5928] usb 2-1: config 0 descriptor??
[  255.176629][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.186123][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.202755][ T5928] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  255.216119][ T5928] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  255.225339][ T5928] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  255.468129][ T8821] Invalid logical block size (1073741824)
[  255.761064][ T5890] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  255.911211][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  255.923562][ T5890] usb 1-1: config 91 has an invalid interface number: 231 but max is 0
[  255.932788][ T5890] usb 1-1: config 91 has no interface number 0
[  255.939425][ T5890] usb 1-1: config 91 interface 231 has no altsetting 0
[  255.948624][ T5890] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c
[  255.962923][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.964701][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.978327][ T5890] usb 1-1: Product: syz
[  255.982628][ T5890] usb 1-1: Manufacturer: syz
[  255.987394][ T5890] usb 1-1: SerialNumber: syz
[  256.201966][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.231809][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.254586][ T5890] ums-cypress 1-1:91.231: USB Mass Storage device detected
[  256.272160][ T5893] usb 6-1: USB disconnect, device number 37
[  256.345455][ T5890] usb 1-1: USB disconnect, device number 52
[  256.621110][ T5870] usb 5-1: USB disconnect, device number 39
[  257.098330][ T8850] binder: 8849:8850 ioctl c0306201 2000000003c0 returned -14
[  257.121180][ T5893] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  257.271149][ T5893] usb 1-1: Using ep0 maxpacket: 8
[  257.278670][ T5893] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  257.287056][ T5893] usb 1-1: config 0 has no interface number 0
[  257.293702][ T5893] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  257.304867][ T5893] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  257.317564][ T5893] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  257.328811][ T5893] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  257.339081][ T5893] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  257.353461][ T5893] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  257.364568][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.377230][ T5893] usb 1-1: config 0 descriptor??
[  257.403133][ T5893] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  257.445843][ T8852] netlink: 148 bytes leftover after parsing attributes in process `syz.5.973'.
[  257.490365][ T8852] netlink: 148 bytes leftover after parsing attributes in process `syz.5.973'.
[  257.502141][ T8854] netlink: 148 bytes leftover after parsing attributes in process `syz.5.973'.
[  257.555754][ T8854] netlink: 148 bytes leftover after parsing attributes in process `syz.5.973'.
[  257.614379][ T8842] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90
[  257.795603][ T8867] netlink: 'syz.5.976': attribute type 11 has an invalid length.
[  258.371020][ T5893] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  258.512378][ T5893] usb 6-1: device descriptor read/64, error -71
[  258.761020][ T5893] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  258.781041][ T7006] usb 5-1: new low-speed USB device number 40 using dummy_hcd
[  258.891012][ T5893] usb 6-1: device descriptor read/64, error -71
[  258.933459][ T7006] usb 5-1: LPM exit latency is zeroed, disabling LPM.
[  258.941946][ T7006] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  258.955022][ T7006] usb 5-1: string descriptor 0 read error: -22
[  258.961838][ T7006] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.972945][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.988541][ T7006] usb 5-1: bad CDC descriptors
[  259.003713][ T5893] usb usb6-port1: attempt power cycle
[  259.192766][ T7006] usb 5-1: USB disconnect, device number 40
[  259.351280][ T5893] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  259.371981][ T5893] usb 6-1: device descriptor read/8, error -71
[  259.611051][ T5893] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  259.632073][ T5893] usb 6-1: device descriptor read/8, error -71
[  259.741557][ T5893] usb usb6-port1: unable to enumerate USB device
[  259.838220][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'.
[  259.847453][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'.
[  259.856676][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'.
[  259.895999][ T5870] usb 1-1: USB disconnect, device number 53
[  259.910202][ T5870] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  260.246015][ T8899] overlayfs: missing 'workdir'
[  260.337151][ T8903] capability: warning: `syz.1.993' uses deprecated v2 capabilities in a way that may be insecure
[  260.863116][ T8920] overlayfs: missing 'workdir'
[  261.307990][ T8936] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1009'.
[  261.364828][ T8939] overlayfs: missing 'lowerdir'
[  261.385233][ T5893] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  261.541027][ T5893] usb 5-1: Using ep0 maxpacket: 16
[  261.548647][ T5893] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.563961][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0
[  261.576379][ T5893] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  261.592531][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.607063][ T5893] usb 5-1: config 0 descriptor??
[  261.635655][ T5890] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  261.795978][ T5890] usb 6-1: config 1 interface 0 altsetting 245 endpoint 0x81 has an invalid bInterval 87, changing to 10
[  261.807855][ T5890] usb 6-1: config 1 interface 0 has no altsetting 0
[  261.818796][ T5890] usb 6-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40
[  261.828258][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.837099][ T5890] usb 6-1: Product: syz
[  261.842593][ T5890] usb 6-1: Manufacturer: syz
[  261.847275][ T5890] usb 6-1: SerialNumber: syz
[  262.029702][ T5893] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  262.067174][ T5890] usbhid 6-1:1.0: can't add hid device: -71
[  262.091152][ T5890] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  262.125931][ T5890] usb 6-1: USB disconnect, device number 42
[  262.430005][ T7006] usb 5-1: USB disconnect, device number 41
[  262.789867][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  262.800674][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  262.819383][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  262.916548][ T8960] overlayfs: missing 'lowerdir'
[  262.941102][ T5890] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  262.994633][ T8962] FAULT_INJECTION: forcing a failure.
[  262.994633][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.009815][ T8962] CPU: 1 UID: 0 PID: 8962 Comm: syz.0.1020 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.009849][ T8962] Tainted: [L]=SOFTLOCKUP
[  263.009861][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  263.009874][ T8962] Call Trace:
[  263.009882][ T8962]  <TASK>
[  263.009892][ T8962]  dump_stack_lvl+0xe8/0x150
[  263.009928][ T8962]  should_fail_ex+0x412/0x560
[  263.009963][ T8962]  _copy_from_user+0x2d/0xb0
[  263.009986][ T8962]  binder_ioctl_write_read+0x16a/0xa660
[  263.010020][ T8962]  ? is_bpf_text_address+0x26/0x2b0
[  263.010051][ T8962]  ? is_bpf_text_address+0x292/0x2b0
[  263.010073][ T8962]  ? is_bpf_text_address+0x26/0x2b0
[  263.010100][ T8962]  ? kernel_text_address+0xa5/0xe0
[  263.010126][ T8962]  ? __kernel_text_address+0xd/0x30
[  263.010149][ T8962]  ? unwind_get_return_address+0x4d/0x90
[  263.010181][ T8962]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  263.010205][ T8962]  ? arch_stack_walk+0xfb/0x150
[  263.010271][ T8962]  ? stack_trace_save+0xa9/0x100
[  263.010293][ T8962]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  263.010314][ T8962]  ? kasan_save_free_info+0x46/0x50
[  263.010338][ T8962]  ? stack_depot_save_flags+0x33/0x810
[  263.010369][ T8962]  ? format_decode+0xa0/0xe10
[  263.010404][ T8962]  ? kasan_save_track+0x4f/0x80
[  263.010428][ T8962]  ? kasan_save_track+0x3e/0x80
[  263.010450][ T8962]  ? kasan_save_free_info+0x46/0x50
[  263.010469][ T8962]  ? __kasan_slab_free+0x5c/0x80
[  263.010498][ T8962]  ? __lock_acquire+0x6b5/0x2cf0
[  263.010538][ T8962]  ? binder_debug+0x155/0x1d0
[  263.010565][ T8962]  ? __pfx_binder_debug+0x10/0x10
[  263.010584][ T8962]  ? do_raw_spin_lock+0x12b/0x2f0
[  263.010622][ T8962]  ? _raw_spin_unlock+0x28/0x50
[  263.010644][ T8962]  ? binder_get_thread+0x177/0x6d0
[  263.010670][ T8962]  binder_ioctl+0x423/0x1b70
[  263.010693][ T8962]  ? tomoyo_path_number_perm+0x219/0x630
[  263.010719][ T8962]  ? tomoyo_path_number_perm+0x219/0x630
[  263.010746][ T8962]  ? do_vfs_ioctl+0x1166/0x1530
[  263.010774][ T8962]  ? __pfx_binder_ioctl+0x10/0x10
[  263.010795][ T8962]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  263.010835][ T8962]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  263.010878][ T8962]  ? __fget_files+0x2a/0x420
[  263.010902][ T8962]  ? __fget_files+0x2a/0x420
[  263.010920][ T8962]  ? __fget_files+0x3a0/0x420
[  263.010939][ T8962]  ? __fget_files+0x2a/0x420
[  263.010963][ T8962]  ? bpf_lsm_file_ioctl+0x9/0x20
[  263.010999][ T8962]  ? __pfx_binder_ioctl+0x10/0x10
[  263.011021][ T8962]  __se_sys_ioctl+0xfc/0x170
[  263.011051][ T8962]  do_syscall_64+0x14d/0xf80
[  263.011077][ T8962]  ? trace_irq_disable+0x3b/0x150
[  263.011097][ T8962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.011118][ T8962]  ? clear_bhb_loop+0x40/0x90
[  263.011143][ T8962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.011163][ T8962] RIP: 0033:0x7f745c79c799
[  263.011183][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.011200][ T8962] RSP: 002b:00007f745d698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  263.011223][ T8962] RAX: ffffffffffffffda RBX: 00007f745ca15fa0 RCX: 00007f745c79c799
[  263.011238][ T8962] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  263.011253][ T8962] RBP: 00007f745d698090 R08: 0000000000000000 R09: 0000000000000000
[  263.011266][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.011278][ T8962] R13: 00007f745ca16038 R14: 00007f745ca15fa0 R15: 00007ffc8551c6f8
[  263.011310][ T8962]  </TASK>
[  263.081397][ T5890] usb 6-1: device descriptor read/64, error -71
[  263.114230][ T8962] binder: 8961:8962 ioctl c0306201 2000000001c0 returned -14
[  263.502160][ T5890] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  263.651088][ T5890] usb 6-1: device descriptor read/64, error -71
[  263.772690][ T5890] usb usb6-port1: attempt power cycle
[  264.114354][ T5890] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  264.141910][ T5890] usb 6-1: device descriptor read/8, error -71
[  264.258254][ T8982] overlayfs: missing 'lowerdir'
[  264.403018][ T5890] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  264.453003][ T5890] usb 6-1: device descriptor read/8, error -71
[  264.581456][ T5890] usb usb6-port1: unable to enumerate USB device
[  264.692344][ T8995] FAULT_INJECTION: forcing a failure.
[  264.692344][ T8995] name failslab, interval 1, probability 0, space 0, times 0
[  264.709448][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.1.1034 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  264.709487][ T8995] Tainted: [L]=SOFTLOCKUP
[  264.709495][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  264.709508][ T8995] Call Trace:
[  264.709517][ T8995]  <TASK>
[  264.709526][ T8995]  dump_stack_lvl+0xe8/0x150
[  264.709566][ T8995]  should_fail_ex+0x412/0x560
[  264.709605][ T8995]  should_failslab+0xa8/0x100
[  264.709638][ T8995]  __kmalloc_cache_noprof+0x88/0x660
[  264.709667][ T8995]  ? ovl_iterate+0xfec/0x21a0
[  264.709696][ T8995]  ? __lock_acquire+0x6b5/0x2cf0
[  264.709730][ T8995]  ovl_iterate+0xfec/0x21a0
[  264.709760][ T8995]  ? register_lock_class+0x31/0x2e0
[  264.709803][ T8995]  ? __pfx_ovl_iterate+0x10/0x10
[  264.709838][ T8995]  ? __lock_acquire+0x6b5/0x2cf0
[  264.709870][ T8995]  ? aa_file_perm+0x50e/0x15e0
[  264.709902][ T8995]  ? __lock_acquire+0x6b5/0x2cf0
[  264.709931][ T8995]  ? trace_contention_end+0x3d/0x150
[  264.709954][ T8995]  ? __mutex_lock+0x319/0x1300
[  264.710003][ T8995]  ? down_write+0x16d/0x200
[  264.710032][ T8995]  ? __pfx_down_write+0x10/0x10
[  264.710062][ T8995]  ? wrap_directory_iterator+0x52/0xe0
[  264.710093][ T8995]  ? __pfx_ovl_iterate+0x10/0x10
[  264.710124][ T8995]  wrap_directory_iterator+0x96/0xe0
[  264.710175][ T8995]  iterate_dir+0x399/0x570
[  264.710209][ T8995]  __se_sys_getdents+0xf1/0x270
[  264.710241][ T8995]  ? __pfx___se_sys_getdents+0x10/0x10
[  264.710268][ T8995]  ? ksys_write+0x242/0x270
[  264.710293][ T8995]  ? __pfx_filldir+0x10/0x10
[  264.710323][ T8995]  ? __pfx_ksys_write+0x10/0x10
[  264.710370][ T8995]  do_syscall_64+0x14d/0xf80
[  264.710396][ T8995]  ? trace_irq_disable+0x3b/0x150
[  264.710417][ T8995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.710439][ T8995]  ? clear_bhb_loop+0x40/0x90
[  264.710466][ T8995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.710488][ T8995] RIP: 0033:0x7f609c79c799
[  264.710509][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.710528][ T8995] RSP: 002b:00007f609a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  264.710552][ T8995] RAX: ffffffffffffffda RBX: 00007f609ca15fa0 RCX: 00007f609c79c799
[  264.710567][ T8995] RDX: 0000000000000ffa RSI: 0000200000000440 RDI: 0000000000000005
[  264.710586][ T8995] RBP: 00007f609a9f6090 R08: 0000000000000000 R09: 0000000000000000
[  264.710598][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.710611][ T8995] R13: 00007f609ca16038 R14: 00007f609ca15fa0 R15: 00007ffc3e12bdb8
[  264.710645][ T8995]  </TASK>
[  265.105488][ T9005] cgroup: none used incorrectly
[  265.173806][ T9008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  265.207311][ T9008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  265.323950][ T5893] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  265.481153][ T5893] usb 1-1: Using ep0 maxpacket: 32
[  265.487539][ T5893] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  265.498117][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.507154][ T5893] usb 1-1: config 0 has no interface number 0
[  265.516250][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.540296][ T5893] usb 1-1: config 0 has no interface number 0
[  265.559200][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.581001][ T5893] usb 1-1: config 0 has no interface number 0
[  265.590068][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.612805][ T5893] usb 1-1: config 0 has no interface number 0
[  265.623082][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.632247][ T5893] usb 1-1: config 0 has no interface number 0
[  265.640492][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.654635][ T5893] usb 1-1: config 0 has no interface number 0
[  265.662311][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.670732][ T5893] usb 1-1: config 0 has no interface number 0
[  265.678437][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  265.701084][ T5893] usb 1-1: config 0 has no interface number 0
[  265.722137][ T5893] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  265.751943][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.772616][ T5893] usb 1-1: Product: syz
[  265.782967][ T5893] usb 1-1: Manufacturer: syz
[  265.799859][ T5893] usb 1-1: SerialNumber: syz
[  265.817412][ T5893] usb 1-1: config 0 descriptor??
[  265.833403][ T9014] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1041'.
[  265.844074][ T5893] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[  265.937384][ T9018] IPVS: length: 92 != 8
[  265.952708][   T30] audit: type=1326 audit(1772530754.882:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  265.975867][   T30] audit: type=1326 audit(1772530754.882:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.006656][   T30] audit: type=1326 audit(1772530754.882:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.030785][   T30] audit: type=1326 audit(1772530754.882:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.063616][   T30] audit: type=1326 audit(1772530754.882:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.086039][ T5893] etas_es58x 1-1:0.2: could not parse product info: '424242424242'
[  266.101324][   T30] audit: type=1326 audit(1772530754.882:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.133985][   T30] audit: type=1326 audit(1772530754.882:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  266.353573][ T9027] binder: 9026:9027 ioctl c0306201 2000000003c0 returned -14
[  266.366019][ T9027] FAULT_INJECTION: forcing a failure.
[  266.366019][ T9027] name failslab, interval 1, probability 0, space 0, times 0
[  266.379631][ T9027] CPU: 0 UID: 0 PID: 9027 Comm: syz.1.1045 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.379664][ T9027] Tainted: [L]=SOFTLOCKUP
[  266.379672][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.379685][ T9027] Call Trace:
[  266.379693][ T9027]  <TASK>
[  266.379702][ T9027]  dump_stack_lvl+0xe8/0x150
[  266.379739][ T9027]  should_fail_ex+0x412/0x560
[  266.379777][ T9027]  should_failslab+0xa8/0x100
[  266.379810][ T9027]  __kmalloc_noprof+0xe8/0x760
[  266.379838][ T9027]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  266.379875][ T9027]  tomoyo_realpath_from_path+0xe3/0x5d0
[  266.379914][ T9027]  ? tomoyo_path_number_perm+0x219/0x630
[  266.379940][ T9027]  tomoyo_path_number_perm+0x246/0x630
[  266.379967][ T9027]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  266.379993][ T9027]  ? __lock_acquire+0x6b5/0x2cf0
[  266.380037][ T9027]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  266.380087][ T9027]  ? __fget_files+0x2a/0x420
[  266.380109][ T9027]  ? __fget_files+0x2a/0x420
[  266.380128][ T9027]  ? __fget_files+0x3a0/0x420
[  266.380148][ T9027]  ? __fget_files+0x2a/0x420
[  266.380173][ T9027]  security_file_ioctl+0xc3/0x2a0
[  266.380199][ T9027]  __se_sys_ioctl+0x47/0x170
[  266.380230][ T9027]  do_syscall_64+0x14d/0xf80
[  266.380255][ T9027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.380291][ T9027]  ? clear_bhb_loop+0x40/0x90
[  266.380318][ T9027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.380339][ T9027] RIP: 0033:0x7f609c79c799
[  266.380358][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.380378][ T9027] RSP: 002b:00007f609a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.380401][ T9027] RAX: ffffffffffffffda RBX: 00007f609ca15fa0 RCX: 00007f609c79c799
[  266.380416][ T9027] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  266.380430][ T9027] RBP: 00007f609a9f6090 R08: 0000000000000000 R09: 0000000000000000
[  266.380442][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.380453][ T9027] R13: 00007f609ca16038 R14: 00007f609ca15fa0 R15: 00007ffc3e12bdb8
[  266.380497][ T9027]  </TASK>
[  266.380585][ T9027] ERROR: Out of memory at tomoyo_realpath_from_path.
[  266.612471][ T9027] binder: 9026:9027 unknown command 0
[  266.618436][ T9027] binder: 9026:9027 ioctl c0306201 2000000001c0 returned -22
[  266.840147][ T9034] binder: 9033:9034 ioctl c0306201 2000000003c0 returned -14
[  266.856366][ T9034] binder: 9033:9034 unknown command 0
[  266.867501][ T9034] binder: 9033:9034 ioctl c0306201 2000000001c0 returned -22
[  266.956255][ T9038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  266.986628][ T9038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  267.021069][ T9039] overlayfs: missing 'lowerdir'
[  267.281428][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'.
[  267.283670][ T7006] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  267.401289][ T5893] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  267.442720][ T7006] usb 5-1: device descriptor read/64, error -71
[  267.526007][ T5484] etas_es58x 1-1:0.2 can0: bit-timing not yet defined
[  267.568027][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.589460][ T5893] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  267.600801][ T9058] overlayfs: workdir and upperdir must be separate subtrees
[  267.611297][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.641023][ T5893] usb 6-1: config 0 descriptor??
[  267.668116][ T5893] pwc: Askey VC010 type 2 USB webcam detected.
[  267.675265][ T9058] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  267.695634][ T7006] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  267.840990][ T7006] usb 5-1: device descriptor read/64, error -71
[  267.951494][ T7006] usb usb5-port1: attempt power cycle
[  268.070717][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00
[  268.071610][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.097411][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00
[  268.104431][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.161062][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  268.162354][ T5820] usb 1-1: USB disconnect, device number 54
[  268.170985][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  268.171131][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  268.196090][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  268.205343][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  268.214925][    C1] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN
[  268.225139][ T5484] etas_es58x 1-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  268.226144][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  268.235231][ T5820] etas_es58x 1-1:0.2: Disconnecting syz syz
[  268.297763][ T5893] pwc: recv_control_msg error -71 req 04 val 1000
[  268.316252][ T5893] pwc: recv_control_msg error -71 req 04 val 1300
[  268.331044][ T7006] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  268.347209][ T5893] pwc: recv_control_msg error -71 req 04 val 1400
[  268.363546][ T7006] usb 5-1: device descriptor read/8, error -71
[  268.377288][ T5893] pwc: recv_control_msg error -71 req 02 val 2000
[  268.393202][ T5893] pwc: recv_control_msg error -71 req 02 val 2100
[  268.409609][ T5893] pwc: recv_control_msg error -71 req 04 val 1500
[  268.433707][ T5893] pwc: recv_control_msg error -71 req 02 val 2500
[  268.458159][ T5893] pwc: recv_control_msg error -71 req 02 val 2400
[  268.478073][ T5893] pwc: recv_control_msg error -71 req 02 val 2600
[  268.492622][ T5893] pwc: recv_control_msg error -71 req 02 val 2900
[  268.508150][ T5893] pwc: recv_control_msg error -71 req 02 val 2800
[  268.532139][ T5893] pwc: recv_control_msg error -71 req 04 val 1100
[  268.549965][ T5893] pwc: recv_control_msg error -71 req 04 val 1200
[  268.590674][ T5893] pwc: Registered as video103.
[  268.607950][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34
[  268.651187][ T7006] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  268.653098][ T5893] usb 6-1: USB disconnect, device number 47
[  268.694730][ T7006] usb 5-1: device descriptor read/8, error -71
[  268.840069][ T7006] usb usb5-port1: unable to enumerate USB device
[  269.137692][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.167456][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.199300][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.215410][ T9086] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  269.225458][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.235450][ T9086] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  269.244879][ T5893] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  269.255020][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.273874][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.295838][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.322021][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  269.395522][ T9090] validate_nla: 1 callbacks suppressed
[  269.395545][ T9090] netlink: 'syz.1.1059': attribute type 4 has an invalid length.
[  269.435898][ T5893] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  269.469725][ T5893] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  269.514505][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=1c.1c
[  269.533750][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.563241][ T5893] usb 1-1: Product: syz
[  269.573082][ T5893] usb 1-1: Manufacturer: syz
[  269.582792][ T5893] usb 1-1: SerialNumber: syz
[  269.824113][ T5893] usb 1-1: USB disconnect, device number 55
[  269.961169][ T5870] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  270.113223][ T5870] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.125259][ T5870] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  270.137300][ T5870] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  270.149429][ T5870] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  270.158868][ T5870] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  270.167913][ T5870] usb 6-1: Manufacturer: syz
[  270.172732][ T5870] usb 6-1: SerialNumber: syz
[  270.447080][ T5820] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  270.561126][ T9108] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  270.617634][ T5820] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  270.641058][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.656908][ T5820] usb 5-1: Product: syz
[  270.662223][ T5820] usb 5-1: Manufacturer: syz
[  270.667572][ T5820] usb 5-1: SerialNumber: syz
[  270.690639][ T5820] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  270.701556][ T2259] block nbd2: Possible stuck request ffff888027928000: control (read@0,1024B). Runtime 150 seconds
[  270.714450][ T2259] block nbd2: Possible stuck request ffff888027928200: control (read@1024,1024B). Runtime 150 seconds
[  270.726830][ T2259] block nbd2: Possible stuck request ffff888027928400: control (read@2048,1024B). Runtime 150 seconds
[  270.738188][ T2259] block nbd2: Possible stuck request ffff888027928600: control (read@3072,1024B). Runtime 150 seconds
[  270.769945][ T5893] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  271.291369][ T5820] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  271.454469][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  271.468286][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  271.481468][ T5820] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  271.491988][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.507089][ T5820] usb 1-1: config 0 descriptor??
[  271.721885][ T5820] ath6kl: Failed to submit usb control message: -71
[  271.740770][ T5820] ath6kl: unable to send the bmi data to the device: -71
[  271.751382][ T5820] ath6kl: Unable to send get target info: -71
[  271.781064][ T5820] ath6kl: Failed to init ath6kl core: -71
[  271.789153][ T5820] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  271.836184][ T5820] usb 1-1: USB disconnect, device number 56
[  272.031151][ T5893] usb 5-1: Service connection timeout for: 256
[  272.038627][ T5893] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  272.071542][ T5893] ath9k_htc: Failed to initialize the device
[  272.085322][ T5893] usb 5-1: ath9k_htc: USB layer deinitialized
[  272.593961][ T5870] yealink 6-1:36.0: invalid payload size 0, expected 16
[  272.624873][ T5870] input: Yealink usb-p1k as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.0/input/input36
[  272.706338][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.713674][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.720819][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.728057][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.735150][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.742345][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.750934][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.758348][    C1] yealink 6-1:36.0: urb_ctl_callback - urb status -71
[  272.765358][    C1] yealink 6-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  272.795810][ T5870] usb 6-1: USB disconnect, device number 48
[  272.871034][ T5893] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  273.021320][ T5893] usb 1-1: device descriptor read/64, error -71
[  273.271226][ T5893] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  273.351432][  T796] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  273.379691][   T29] usb 5-1: USB disconnect, device number 46
[  273.432327][ T5893] usb 1-1: device descriptor read/64, error -71
[  273.530973][  T796] usb 6-1: Using ep0 maxpacket: 8
[  273.541489][  T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.563455][  T796] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.581779][ T5893] usb usb1-port1: attempt power cycle
[  273.596535][  T796] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  273.607735][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.616660][  T796] usb 6-1: Product: syz
[  273.621546][  T796] usb 6-1: Manufacturer: syz
[  273.626294][  T796] usb 6-1: SerialNumber: syz
[  273.651163][  T796] usb 6-1: config 0 descriptor??
[  273.863222][  T796] usb 6-1: USB disconnect, device number 49
[  273.941410][ T5893] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  273.972541][ T5893] usb 1-1: device descriptor read/8, error -71
[  274.212125][ T5893] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  274.243422][ T5893] usb 1-1: device descriptor read/8, error -71
[  274.263355][ T9162] sock: sock_set_timeout: `syz.4.1084' (pid 9162) tries to set negative timeout
[  274.353915][ T5893] usb usb1-port1: unable to enumerate USB device
[  274.716158][ T9176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  274.941037][ T5890] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  275.072465][ T5890] usb 6-1: device descriptor read/64, error -71
[  275.331084][ T5890] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  275.481287][ T5890] usb 6-1: device descriptor read/64, error -71
[  275.611411][ T5890] usb usb6-port1: attempt power cycle
[  275.781424][ T5893] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  275.941081][ T5893] usb 5-1: Using ep0 maxpacket: 16
[  275.948548][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.963790][ T5890] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  275.980569][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.000623][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  276.014933][ T5893] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  276.024248][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.033400][ T5890] usb 6-1: device descriptor read/8, error -71
[  276.046700][ T5893] usb 5-1: config 0 descriptor??
[  276.264571][ T9218] kvm: pic: non byte write
[  276.281046][ T5890] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  276.302610][ T5890] usb 6-1: device descriptor read/8, error -71
[  276.316192][ T9220] netlink: 'syz.0.1104': attribute type 4 has an invalid length.
[  276.335401][ T9220] __nla_validate_parse: 25 callbacks suppressed
[  276.335422][ T9220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1104'.
[  276.411744][ T5890] usb usb6-port1: unable to enumerate USB device
[  276.479657][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.491439][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.498592][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.505918][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.514217][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.521588][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0
[  276.529041][ T5893] corsair 0003:1B1C:1B02.000A: invalid report_count 53754
[  276.537018][ T5893] corsair 0003:1B1C:1B02.000A: item 0 2 1 9 parsing failed
[  276.545098][ T5893] corsair 0003:1B1C:1B02.000A: parse failed
[  276.551384][ T5893] corsair 0003:1B1C:1B02.000A: probe with driver corsair failed with error -22
[  277.890972][ T5893] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  277.999795][ T9258] binder: 9257:9258 ioctl c0306201 2000000003c0 returned -14
[  278.010399][ T9258] binder: 9257:9258 unknown command 0
[  278.019079][ T9258] binder: 9257:9258 ioctl c0306201 2000000001c0 returned -22
[  278.040212][   T30] audit: type=1800 audit(1772530766.962:30): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1118" name="bus" dev="overlay" ino=1739 res=0 errno=0
[  278.079416][   T30] audit: type=1800 audit(1772530767.002:31): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1118" name="bus" dev="overlay" ino=1739 res=0 errno=0
[  278.112598][ T5893] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  278.122334][ T5893] usb 1-1: config 0 has no interface number 0
[  278.129283][ T5893] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  278.141377][ T5893] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  278.166364][ T5893] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  278.179021][ T9259] can: request_module (can-proto-0) failed.
[  278.204472][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  278.231066][ T5893] usb 1-1: Product: syz
[  278.241702][ T5893] usb 1-1: SerialNumber: syz
[  278.257945][ T5893] usb 1-1: config 0 descriptor??
[  278.269321][ T5893] cm109 1-1:0.8: invalid payload size 0, expected 4
[  278.280122][ T5893] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input38
[  278.552580][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  278.553285][ T5870] usb 1-1: USB disconnect, device number 61
[  278.560751][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  278.590117][ T5870] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  278.594869][ T5890] usb 5-1: USB disconnect, device number 47
[  278.771060][ T5893] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  278.923404][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.934718][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.945147][ T5893] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  278.954602][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.966791][ T5893] usb 6-1: config 0 descriptor??
[  279.381233][ T5893] usbhid 6-1:0.0: can't add hid device: -71
[  279.399817][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  279.432747][ T5893] usb 6-1: USB disconnect, device number 54
[  279.801554][ T5890] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  279.961109][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  279.992771][ T5890] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  280.007338][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  280.021922][ T5890] usb 5-1: Product: syz
[  280.026203][ T5890] usb 5-1: Manufacturer: syz
[  280.031169][ T5890] usb 5-1: SerialNumber: syz
[  280.049573][ T5890] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  280.253690][ T5890] vp7045: USB control message 'out' went wrong.
[  280.265030][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  280.276512][ T5890] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver)
[  280.286651][ T5890] usb 5-1: media controller created
[  280.292546][ T5890] vp7045: USB control message 'out' went wrong.
[  280.299097][ T5890] dvb-usb: MAC address reading failed.
[  280.316241][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  280.335508][ T5890] vp7045: USB control message 'out' went wrong.
[  280.342810][ T5890] vp7045: USB control message 'out' went wrong.
[  280.349607][ T5890] vp7045: USB control message 'out' went wrong.
[  280.361041][ T5890] usb 5-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)...
[  280.363021][ T7006] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[  280.382065][ T5890] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered.
[  280.481306][ T5890] rc_core: IR keymap rc-twinhan1027 not found
[  280.487540][ T5890] Registered IR keymap rc-empty
[  280.493972][ T5890] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  280.507416][ T5890] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input40
[  280.521506][ T5890] dvb-usb: schedule remote query interval to 400 msecs.
[  280.531670][ T5890] vp7045: USB control message 'out' went wrong.
[  280.538055][ T5890] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected.
[  280.552187][ T5890] usb 5-1: USB disconnect, device number 48
[  280.572179][ T7006] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  280.583756][ T7006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.594534][ T7006] usb 6-1: Product: syz
[  280.599153][ T7006] usb 6-1: Manufacturer: syz
[  280.604453][ T7006] usb 6-1: SerialNumber: syz
[  280.617340][ T7006] usb 6-1: config 0 descriptor??
[  280.710062][ T5890] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected.
[  280.831358][ T7006] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  281.432966][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.450353][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.661204][   T29] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  281.669301][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.679996][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.821007][   T29] usb 5-1: device descriptor read/64, error -71
[  282.081184][   T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  282.231293][   T29] usb 5-1: device descriptor read/64, error -71
[  282.305373][ T7006] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  282.323428][ T7006] usb 6-1: USB disconnect, device number 55
[  282.341470][   T29] usb usb5-port1: attempt power cycle
[  282.681007][   T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  282.722109][   T29] usb 5-1: device descriptor read/8, error -71
[  282.981380][   T29] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  283.005638][ T9316] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1142'.
[  283.015566][   T29] usb 5-1: device descriptor read/8, error -71
[  283.027910][ T9316] netlink: 'syz.5.1142': attribute type 4 has an invalid length.
[  283.103502][   T30] audit: type=1326 audit(1772530772.032:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.141840][   T29] usb usb5-port1: unable to enumerate USB device
[  283.165068][   T30] audit: type=1326 audit(1772530772.032:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.188881][   T30] audit: type=1326 audit(1772530772.032:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.213955][   T30] audit: type=1326 audit(1772530772.032:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.241097][   T30] audit: type=1326 audit(1772530772.032:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.264565][   T30] audit: type=1326 audit(1772530772.032:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.289405][   T30] audit: type=1326 audit(1772530772.032:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.315214][ T9321] binder: 9320:9321 ioctl c0306201 2000000003c0 returned -14
[  283.341677][ T9321] binder: 9320:9321 unknown command 0
[  283.351131][ T9321] binder: 9320:9321 ioctl c0306201 2000000001c0 returned -22
[  283.361123][   T30] audit: type=1326 audit(1772530772.032:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.386086][   T30] audit: type=1326 audit(1772530772.052:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.412202][   T30] audit: type=1326 audit(1772530772.052:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331339c799 code=0x7ffc0000
[  283.558047][ T9325] 9p: Could not find request transport: fgy
[  283.618721][ T9330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  283.628147][ T9330] overlayfs: missing 'lowerdir'
[  283.651241][ T5890] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[  283.824281][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  283.833608][ T5890] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  283.844367][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  283.853483][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[  283.866588][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.876078][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.885359][ T5893] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  283.893310][ T5890] usb 6-1: Product: syz
[  283.897823][ T5890] usb 6-1: Manufacturer: syz
[  283.910391][ T5890] cdc_wdm 6-1:1.0: skipping garbage
[  283.915979][ T5890] cdc_wdm 6-1:1.0: skipping garbage
[  283.928632][ T5890] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  283.934880][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol
[  284.031154][ T5893] usb 1-1: device descriptor read/64, error -71
[  284.271186][ T5893] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  284.411181][ T5893] usb 1-1: device descriptor read/64, error -71
[  284.522643][ T5893] usb usb1-port1: attempt power cycle
[  284.806529][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'.
[  284.861059][ T5893] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  284.882667][ T5893] usb 1-1: device descriptor read/8, error -71
[  285.121687][ T5893] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  285.161897][ T5893] usb 1-1: device descriptor read/8, error -71
[  285.269294][ T9348] FAULT_INJECTION: forcing a failure.
[  285.269294][ T9348] name failslab, interval 1, probability 0, space 0, times 0
[  285.284360][ T5893] usb usb1-port1: unable to enumerate USB device
[  285.292623][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.4.1154 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  285.292660][ T9348] Tainted: [L]=SOFTLOCKUP
[  285.292668][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  285.292685][ T9348] Call Trace:
[  285.292694][ T9348]  <TASK>
[  285.292704][ T9348]  dump_stack_lvl+0xe8/0x150
[  285.292744][ T9348]  should_fail_ex+0x412/0x560
[  285.292793][ T9348]  should_failslab+0xa8/0x100
[  285.292836][ T9348]  __kmalloc_noprof+0xe8/0x760
[  285.292866][ T9348]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  285.292896][ T9348]  ? tomoyo_check_open_permission+0x38e/0x470
[  285.292924][ T9348]  tomoyo_realpath_from_path+0xe3/0x5d0
[  285.292969][ T9348]  tomoyo_path_perm+0x283/0x560
[  285.292993][ T9348]  ? tomoyo_path_perm+0x251/0x560
[  285.293017][ T9348]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  285.293086][ T9348]  ? is_bpf_text_address+0x26/0x2b0
[  285.293118][ T9348]  security_inode_getattr+0x12b/0x310
[  285.293154][ T9348]  vfs_getattr+0x23/0x70
[  285.293187][ T9348]  ovl_iterate+0xb99/0x21a0
[  285.293234][ T9348]  ? __pfx_ovl_iterate+0x10/0x10
[  285.293271][ T9348]  ? __lock_acquire+0x6b5/0x2cf0
[  285.293304][ T9348]  ? aa_file_perm+0x50e/0x15e0
[  285.293334][ T9348]  ? __pfx_ovl_fill_real+0x10/0x10
[  285.293376][ T9348]  ? trace_contention_end+0x3d/0x150
[  285.293453][ T9348]  ? __pfx_down_write+0x10/0x10
[  285.293486][ T9348]  ? wrap_directory_iterator+0x52/0xe0
[  285.293516][ T9348]  ? __pfx_ovl_iterate+0x10/0x10
[  285.293549][ T9348]  wrap_directory_iterator+0x96/0xe0
[  285.293582][ T9348]  iterate_dir+0x399/0x570
[  285.293636][ T9348]  __se_sys_getdents+0xf1/0x270
[  285.293667][ T9348]  ? __pfx___se_sys_getdents+0x10/0x10
[  285.293697][ T9348]  ? ksys_write+0x242/0x270
[  285.293715][ T9348]  ? __pfx_filldir+0x10/0x10
[  285.293737][ T9348]  ? __pfx_ksys_write+0x10/0x10
[  285.293788][ T9348]  do_syscall_64+0x14d/0xf80
[  285.293813][ T9348]  ? trace_irq_disable+0x3b/0x150
[  285.293840][ T9348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.293865][ T9348]  ? clear_bhb_loop+0x40/0x90
[  285.293885][ T9348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.293900][ T9348] RIP: 0033:0x7fee2419c799
[  285.293935][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.293953][ T9348] RSP: 002b:00007fee25009028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  285.293976][ T9348] RAX: ffffffffffffffda RBX: 00007fee24415fa0 RCX: 00007fee2419c799
[  285.293990][ T9348] RDX: 0000000000000ffa RSI: 0000200000000440 RDI: 0000000000000005
[  285.294002][ T9348] RBP: 00007fee25009090 R08: 0000000000000000 R09: 0000000000000000
[  285.294020][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.294029][ T9348] R13: 00007fee24416038 R14: 00007fee24415fa0 R15: 00007ffe79e7c378
[  285.294054][ T9348]  </TASK>
[  285.294907][ T9348] ERROR: Out of memory at tomoyo_realpath_from_path.
[  285.828472][ T9353] netlink: 'syz.4.1156': attribute type 93 has an invalid length.
[  286.132592][ T5824] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  286.310991][ T5824] usb 5-1: Invalid ep0 maxpacket: 32
[  286.451025][ T5824] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  286.485962][ T7006] usb 6-1: USB disconnect, device number 56
[  286.623665][ T5824] usb 5-1: Invalid ep0 maxpacket: 32
[  286.635724][ T5824] usb usb5-port1: attempt power cycle
[  286.984086][ T5824] usb 5-1: new low-speed USB device number 55 using dummy_hcd
[  287.024417][ T5824] usb 5-1: Invalid ep0 maxpacket: 32
[  287.031197][ T5893] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  287.046497][ T9376] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  287.056703][ T9376] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  287.171113][ T5824] usb 5-1: new low-speed USB device number 56 using dummy_hcd
[  287.179106][ T5893] usb 6-1: device descriptor read/64, error -71
[  287.211865][ T5824] usb 5-1: Invalid ep0 maxpacket: 32
[  287.219050][ T5824] usb usb5-port1: unable to enumerate USB device
[  287.311351][   T31] INFO: task syz.2.163:6481 blocked for more than 143 seconds.
[  287.323141][   T31]       Tainted: G             L      syzkaller #0
[  287.329755][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.345439][   T31] task:syz.2.163       state:D stack:27400 pid:6481  tgid:6480  ppid:5816   task_flags:0x400040 flags:0x00080002
[  287.360022][   T31] Call Trace:
[  287.364426][   T31]  <TASK>
[  287.367462][   T31]  __schedule+0x1664/0x5590
[  287.373177][   T31]  ? check_path+0x21/0x40
[  287.377950][   T31]  ? check_noncircular+0xda/0x150
[  287.384814][   T31]  ? __pfx___schedule+0x10/0x10
[  287.389885][   T31]  ? schedule+0x90/0x360
[  287.394833][   T31]  schedule+0x164/0x360
[  287.399346][   T31]  schedule_preempt_disabled+0x13/0x30
[  287.405053][   T31]  __mutex_lock+0x7fe/0x1300
[  287.409883][   T31]  ? __mutex_lock+0x5ac/0x1300
[  287.414190][ T5824] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  287.415720][   T31]  ? bdev_open+0xe0/0xd30
[  287.425287][ T5893] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  287.427084][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  287.427142][   T31]  ? disk_block_events+0xab/0x120
[  287.446768][   T31]  ? bdev_open+0xaf/0xd30
[  287.451326][   T31]  bdev_open+0xe0/0xd30
[  287.456528][   T31]  blkdev_open+0x470/0x610
[  287.461371][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  287.466721][   T31]  do_dentry_open+0x785/0x14e0
[  287.475969][   T31]  vfs_open+0x3b/0x340
[  287.480146][   T31]  ? path_openat+0x2df0/0x3860
[  287.485069][   T31]  path_openat+0x2e08/0x3860
[  287.489724][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  287.495799][   T31]  ? stack_depot_save_flags+0x33/0x810
[  287.501861][   T31]  ? __pfx_path_openat+0x10/0x10
[  287.507371][   T31]  ? __x64_sys_openat+0x138/0x170
[  287.512604][   T31]  ? do_syscall_64+0x14d/0xf80
[  287.517450][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.523778][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  287.528864][   T31]  do_file_open+0x23e/0x4a0
[  287.533503][   T31]  ? __pfx_do_file_open+0x10/0x10
[  287.538628][   T31]  ? _raw_spin_unlock+0x28/0x50
[  287.544911][   T31]  ? alloc_fd+0x64b/0x6c0
[  287.549328][   T31]  do_sys_openat2+0x113/0x200
[  287.555283][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  287.560625][   T31]  ? exc_page_fault+0x6a/0xc0
[  287.566474][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  287.572343][   T31]  __x64_sys_openat+0x138/0x170
[  287.577322][   T31]  do_syscall_64+0x14d/0xf80
[  287.582303][   T31]  ? trace_irq_disable+0x3b/0x150
[  287.587862][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.588735][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.594405][   T31]  ? clear_bhb_loop+0x40/0x90
[  287.605600][ T5893] usb 6-1: device descriptor read/64, error -71
[  287.611016][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.623946][ T5824] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  287.633824][   T31] RIP: 0033:0x7fc1cfd5cfce
[  287.635352][ T5824] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  287.648342][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.651490][   T31] RSP: 002b:00007fc1cdff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  287.668048][   T31] RAX: ffffffffffffffda RBX: 00007fc1cdff66c0 RCX: 00007fc1cfd5cfce
[  287.680016][   T31] RDX: 0000000000040000 RSI: 00007fc1cdff5c00 RDI: ffffffffffffff9c
[  287.685392][ T5824] usb 1-1: config 0 descriptor??
[  287.695850][   T31] RBP: 00007fc1cdff5c00 R08: 0000000000000000 R09: 0000000000000000
[  287.709001][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  287.721031][   T31] R13: 00007fc1d0016038 R14: 00007fc1d0015fa0 R15: 00007fff073b8758
[  287.729502][   T31]  </TASK>
[  287.733032][   T31] 
[  287.733032][   T31] Showing all locks held in the system:
[  287.736624][ T5893] usb usb6-port1: attempt power cycle
[  287.747979][   T31] 1 lock held by khungtaskd/31:
[  287.754255][   T31]  #0: ffffffff8e960560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  287.768008][   T31] 2 locks held by kworker/u8:8/1165:
[  287.775154][   T31]  #0: ffff8880b843ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  287.789029][   T31]  #1: ffff8880b8424588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  287.798885][   T31] 1 lock held by klogd/5178:
[  287.803806][   T31] 2 locks held by getty/5578:
[  287.808802][   T31]  #0: ffff888033c540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  287.819203][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  287.829772][   T31] 5 locks held by kworker/0:4/5824:
[  287.835670][   T31]  #0: ffff8880206e3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[  287.847753][   T31]  #1: ffffc900043c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[  287.859654][   T31]  #2: ffff88802a8b9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  287.869564][   T31]  #3: ffff88807c04d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  287.880446][   T31]  #4: ffff888079acc160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  287.895317][   T31] 6 locks held by kworker/0:6/5893:
[  287.901243][   T31]  #0: ffff8880206e3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[  287.912349][   T31]  #1: ffffc90004777c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[  287.923768][   T31]  #2: ffff88802aa36198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  287.933269][   T31]  #3: ffff88802aa9f528 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[  287.943695][   T31]  #4: ffff88802a9ad668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[  287.955083][   T31]  #5: ffffffff8f69bc90 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840
[  287.966215][   T31] 6 locks held by kworker/1:5/5928:
[  287.971990][   T31]  #0: ffff8880206e3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[  287.983313][   T31]  #1: ffffc90004f87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[  287.997249][   T31]  #2: ffff88802a8f1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  288.011579][   T31]  #3: ffff88802a9d2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  288.021189][   T31]  #4: ffff88802b384160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  288.031154][   T31]  #5: ffffffff8e7fd730 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0
[  288.043801][   T31] 1 lock held by udevd/5945:
[  288.048485][   T31]  #0: ffff888027888358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  288.059379][   T31] 1 lock held by syz.2.163/6481:
[  288.065074][   T31]  #0: ffff888027888358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  288.075833][   T31] 
[  288.078451][   T31] =============================================
[  288.078451][   T31] 
[  288.089364][   T31] NMI backtrace for cpu 1
[  288.089396][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.089418][   T31] Tainted: [L]=SOFTLOCKUP
[  288.089423][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  288.089433][   T31] Call Trace:
[  288.089440][   T31]  <TASK>
[  288.089463][   T31]  dump_stack_lvl+0xe8/0x150
[  288.089502][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  288.089534][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.089566][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  288.089593][   T31]  sys_info+0x135/0x170
[  288.089632][   T31]  watchdog+0xfd9/0x1030
[  288.089660][   T31]  ? watchdog+0x21a/0x1030
[  288.089688][   T31]  kthread+0x388/0x470
[  288.089708][   T31]  ? __pfx_watchdog+0x10/0x10
[  288.089731][   T31]  ? __pfx_kthread+0x10/0x10
[  288.089747][   T31]  ret_from_fork+0x51e/0xb90
[  288.089771][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  288.089813][   T31]  ? __switch_to+0xc7d/0x1450
[  288.089846][   T31]  ? __pfx_kthread+0x10/0x10
[  288.089866][   T31]  ret_from_fork_asm+0x1a/0x30
[  288.089911][   T31]  </TASK>
[  288.089916][   T31] Sending NMI from CPU 1 to CPUs 0:
[  288.103223][ T5893] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  288.105804][    C0] NMI backtrace for cpu 0
[  288.105823][    C0] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.105848][    C0] Tainted: [L]=SOFTLOCKUP
[  288.105854][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  288.105868][    C0] Workqueue: usb_hub_wq hub_event
[  288.105896][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  288.105925][    C0] Code: e8 5e 13 7a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cf 53 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  288.105941][    C0] RSP: 0018:ffffc90004776f90 EFLAGS: 00000002
[  288.105955][    C0] RAX: 1ffffffff3506f00 RBX: 00000000000003fd RCX: 0000000000000000
[  288.105967][    C0] RDX: 00000000000003fd RSI: 000000000001af5c RDI: 000000000001af5d
[  288.105978][    C0] RBP: ffffffff9a837f10 R08: ffff888140ab8237 R09: 1ffff11028157046
[  288.105991][    C0] R10: dffffc0000000000 R11: ffffffff854bda20 R12: dffffc0000000000
[  288.106004][    C0] R13: 0000000000000000 R14: ffffffff9a837c80 R15: 0000000000000000
[  288.106016][    C0] FS:  0000000000000000(0000) GS:ffff888124ff7000(0000) knlGS:0000000000000000
[  288.106030][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.106042][    C0] CR2: 0000001b3061aff8 CR3: 000000006450a000 CR4: 00000000003526f0
[  288.106058][    C0] Call Trace:
[  288.106065][    C0]  <TASK>
[  288.106073][    C0]  wait_for_lsr+0x1a1/0x2f0
[  288.106100][    C0]  serial8250_console_write+0x1348/0x1ba0
[  288.106128][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  288.106147][    C0]  ? lock_acquire+0xf0/0x2e0
[  288.106174][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  288.106194][    C0]  ? console_flush_all+0x123/0xb20
[  288.106356][    C0]  console_flush_all+0x718/0xb20
[  288.106379][    C0]  ? console_flush_all+0x123/0xb20
[  288.106401][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  288.106422][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  288.106446][    C0]  console_unlock+0xd1/0x1c0
[  288.106463][    C0]  ? __pfx_console_unlock+0x10/0x10
[  288.106480][    C0]  ? vprintk_emit+0x455/0x560
[  288.106496][    C0]  ? vprintk_emit+0x2cf/0x560
[  288.106510][    C0]  ? vprintk_emit+0x2cf/0x560
[  288.106526][    C0]  vprintk_emit+0x485/0x560
[  288.106543][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  288.106565][    C0]  dev_vprintk_emit+0x355/0x420
[  288.106593][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  288.106626][    C0]  dev_printk_emit+0xee/0x140
[  288.106649][    C0]  ? irqentry_exit+0x61a/0x700
[  288.106676][    C0]  ? irqentry_exit+0x61a/0x700
[  288.106696][    C0]  ? trace_irq_disable+0x3b/0x150
[  288.106716][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  288.106739][    C0]  ? __up_read+0x291/0x6b0
[  288.106760][    C0]  ? __dev_printk+0x131/0x190
[  288.106780][    C0]  _dev_info+0x11e/0x180
[  288.106806][    C0]  ? __pfx__dev_info+0x10/0x10
[  288.106834][    C0]  ? hub_port_reset+0x971/0x1840
[  288.106899][    C0]  hub_port_init+0x5e6/0x28d0
[  288.106933][    C0]  hub_event+0x2593/0x4f30
[  288.106979][    C0]  ? __pfx_hub_event+0x10/0x10
[  288.107007][    C0]  ? process_one_work+0x87c/0x1650
[  288.107030][    C0]  process_one_work+0x949/0x1650
[  288.107063][    C0]  ? __pfx_process_one_work+0x10/0x10
[  288.107084][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  288.107112][    C0]  worker_thread+0xb46/0x1140
[  288.107149][    C0]  kthread+0x388/0x470
[  288.107166][    C0]  ? __pfx_worker_thread+0x10/0x10
[  288.107188][    C0]  ? __pfx_kthread+0x10/0x10
[  288.107206][    C0]  ret_from_fork+0x51e/0xb90
[  288.107232][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  288.107254][    C0]  ? __switch_to+0xc7d/0x1450
[  288.107276][    C0]  ? __pfx_kthread+0x10/0x10
[  288.107294][    C0]  ret_from_fork_asm+0x1a/0x30
[  288.107330][    C0]  </TASK>
[  288.150102][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  288.150166][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.150254][   T31] Tainted: [L]=SOFTLOCKUP
[  288.150275][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  288.150308][   T31] Call Trace:
[  288.150350][   T31]  <TASK>
[  288.150374][   T31]  vpanic+0x56c/0xa60
[  288.150478][   T31]  ? __pfx___schedule+0x10/0x10
[  288.150545][   T31]  ? __pfx_vpanic+0x10/0x10
[  288.150662][   T31]  panic+0xc5/0xd0
[  288.150740][   T31]  ? __pfx_panic+0x10/0x10
[  288.150819][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  288.150901][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  288.150997][   T31]  watchdog+0x1023/0x1030
[  288.151066][   T31]  ? watchdog+0x21a/0x1030
[  288.151140][   T31]  kthread+0x388/0x470
[  288.151202][   T31]  ? __pfx_watchdog+0x10/0x10
[  288.151256][   T31]  ? __pfx_kthread+0x10/0x10
[  288.151311][   T31]  ret_from_fork+0x51e/0xb90
[  288.151397][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  288.151472][   T31]  ? __switch_to+0xc7d/0x1450
[  288.151574][   T31]  ? __pfx_kthread+0x10/0x10
[  288.151647][   T31]  ret_from_fork_asm+0x1a/0x30
[  288.151766][   T31]  </TASK>
[  288.154740][   T31] Kernel Offset: disabled