last executing test programs:

7m32.217051504s ago: executing program 2 (id=10):
r0 = socket$kcm(0x29, 0x5, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000100)=""/218, 0xda}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/26, 0x1a}], 0x6}, 0xf88}, {{&(0x7f0000001380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/84, 0x54}, {&(0x7f0000001580)=""/136, 0x88}], 0x3, &(0x7f0000001680)=""/163, 0xa3}, 0x7}, {{&(0x7f0000001740)=@nl=@unspec, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000017c0)=""/230, 0xe6}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000001980)=""/226, 0xe2}, {&(0x7f0000001a80)=""/47, 0x2f}, {&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/196, 0xc4}], 0x6, &(0x7f0000001d40)=""/172, 0xac}, 0x5}, {{&(0x7f0000001e00)=@nfc_llcp, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e80)=""/140, 0x8c}, {&(0x7f0000001f40)=""/92, 0x5c}, {&(0x7f0000001fc0)=""/131, 0x83}], 0x3}}, {{&(0x7f00000020c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002140)=""/34, 0x22}, {&(0x7f0000002180)=""/32, 0x20}, {&(0x7f00000021c0)=""/74, 0x4a}], 0x3, &(0x7f0000002280)=""/214, 0xd6}, 0x1}, {{&(0x7f0000002380)=@sco, 0x80, &(0x7f0000002500)=[{&(0x7f0000002400)=""/228, 0xe4}], 0x1}, 0x7}, {{&(0x7f0000002540)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000025c0)=""/229, 0xe5}, {&(0x7f00000026c0)=""/232, 0xe8}, {&(0x7f00000027c0)=""/241, 0xf1}, {&(0x7f00000028c0)=""/185, 0xb9}, {&(0x7f0000002980)=""/88, 0x58}, {&(0x7f0000003d40)=""/141, 0x8d}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/26, 0x1a}], 0x8}, 0x10}], 0x7, 0x12222, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002a40), 0x80, 0x0)
ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000002a80)={0x2, 0xffffffff, 0x8})
syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async)
r5 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f0000002a00), r5)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0)

7m29.097863596s ago: executing program 2 (id=35):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0201050009000a0040ff623d885d000c1101fc000000000000000300000000000000ff0200000000000000000000000000014e220e21"], 0x42)

7m28.775958409s ago: executing program 2 (id=38):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x6f24, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000980)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f00000005c0)="5c6817db84aafc4ba93b3b2afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900000000000000000000000000000000000000000000000000000000000000000000000000000000540eb709496475983e04f86cfdb7d5717f1f4bd56abe74a68913cc87ff04fc6816ccb8228aae45c5d768ecdcf340adffb4686bf3540d1b834614fd9571948010bcb5928bcdbabd99cb149790414c2b0f1d4ebdb45f2e723bb9c36e26d60f9b13c547306bb83e22f97ef0e867f1f48f268175574f7ec0a572a28bcfcde3120cb190d57390c02517", 0x156}, {&(0x7f0000000f00)="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", 0x1d3}, {&(0x7f0000000a80)="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", 0x1ab}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0xfffffff5}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0)

7m28.644049525s ago: executing program 2 (id=39):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7570646174652064656661756c7420757365723a1f0900bd5deb45e96b8a557b73eb2e129b6aef6b8817a3556e3231f5f3b40ec76fb1e99c31865702be231a9db5f4dce98c65710086ca92444911d599d377d3314ac09ef145275a08faefd00c8f6b9e1f0b7c4ac9ac6189624d1f792147660999b1498fce2770ed68b825565e0d55f278b136be472b984cad30eb4971e9da28443df81e0fbe00fe8b41f2a6c371eeab09551672ae6b2eb081e2a9bace64d3b5ae7c83521889b5bd0f7a19e3700e904fd349c1b6879ddb432ddf18f042f8216b155b3a8ab56fde1cb51431e08128d3428bf7"], 0x17, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

7m28.612836171s ago: executing program 2 (id=40):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}]) (fail_nth: 3)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

7m27.946400318s ago: executing program 2 (id=41):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880)
recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044801}, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000002200)='net/anycast6\x00')
read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040))
setfsuid(0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4608008}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a000802110000010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd46, 0x1000005, 0xffffeffffffffff8, 0x3, 0xfffc, 0x0, 0x7, 0xa, 0xc, 0x4, 0x200000000002, 0x0, 0x401, 0x3, 0x2, 0x10000008d], 0x25000, 0x128657})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8901, 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
setresuid(r5, r5, r5)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0xff02}], 0x1)
ptrace$setregs(0xd, r8, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r8, 0x8, 0x4)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$uac2(r6, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000008532b310040000102030109046900030104007f080b0101010a20020904000000010120000104010700060900b209040100000102200009040101010102200009050109000206998008250101183e00000904020000010220000904020101010220000905820900020e0452082501040f43ce03"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})

7m20.111624226s ago: executing program 0 (id=98):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0x3, 0x3, 0x0, 0xfffe}, 0x64059eac031634e6)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001880)={'pcm3724\x00', [0x9, 0x3, 0x4000000, 0x10, 0x3, 0xcc7, 0xc9, 0x5c952399, 0xb, 0x3ff, 0x802, 0x9, 0x1, 0x8000, 0xf06a, 0x0, 0x1, 0x7, 0xfffffff4, 0x10000, 0x0, 0xfffffffd, 0xfffffffa, 0xfffffff5, 0x8, 0x3, 0x100004, 0x202, 0x200, 0x2]})

7m20.090911065s ago: executing program 0 (id=99):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard')
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x208001, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@msize={'msize', 0x3d, 0xff}}, {@cache_mmap}], [{@subj_role={'subj_role', 0x3d, 'discard'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'discard'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ').'}}, {@fsname={'fsname', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]}})

7m20.002896082s ago: executing program 0 (id=100):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000012000000007d01ff020000000000000000000000000001"], 0xfdef)

7m19.04777384s ago: executing program 0 (id=108):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000c40)={0x18, 0x2, 0x0, 0xe598})
mkdir(&(0x7f0000000080)='./file0\x00', 0x15d)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x2, 0x6, 0x8001, 0x1, 0xfff})
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pivot_root(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./file2\x00')
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

7m18.993902315s ago: executing program 3 (id=109):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x48000000, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

7m18.936661705s ago: executing program 0 (id=110):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'wlan0\x00', @local})

7m18.827268586s ago: executing program 3 (id=113):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000009c0)={0x53, 0xfffffffffffffffd, 0xfd, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="7f936cd6ec0ab5f335690c2a83b8c110c0207946b4987c5dc69b000086c84899eea448c59d17fb7983067d3e20347a7369eb657824b3eca3f26b4782baaae049fb6761e961f438d0b1212b1e8a2b34079c5a5437f2e6c257241ded0467c11ca4ce55383156ff4136cec08da0ccd68434d6423d01f672f86ec213e1e4bfbcae97834bb5df8789b455e49573f089179fe20a6b967f4e75637a005c4eaa2c57c31e851dbaedf832dae1aa54b9aed2a32a9cea5ad8b99f38e7f4529693242d7ec31cb0b9bc7162d1ee6c9bc925f37d3f295e47307919f9d3e6934337f6f026b7530f9ee1c441fb0c93db2d88776df9cfd8b31a3786b55377bfcce257b5ba8e", 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0})
mmap(&(0x7f0000f8e000/0x3000)=nil, 0x3000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x3000)
msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0)

7m18.730536322s ago: executing program 0 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @private=0xa010101, 0x4e20, 0x3, 'lblc\x00', 0xa, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xb00000000000000)

7m18.44712445s ago: executing program 32 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @private=0xa010101, 0x4e20, 0x3, 'lblc\x00', 0xa, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xb00000000000000)

7m18.400015205s ago: executing program 3 (id=118):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x800000000000000}, 0x0)

7m18.39243452s ago: executing program 3 (id=119):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x3, 0x1})

7m18.336556353s ago: executing program 3 (id=120):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x2000000, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

7m15.642958648s ago: executing program 3 (id=121):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x16)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir, 0x3a}], [], 0x2f})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x33, &(0x7f0000000540)=ANY=[@ANYBLOB="40110100000000000800000045af"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xfff, 0x4d8200)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x1, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000700)="467d5169a5459348ef48363f8de972413fa32b60c16c23b37be94ebeba9e2a8c6ad6d98013d1bf5966bde73776bc5b617f35ad92c016aefc512f3d48994823544ac6dc044a0dc5887ea9b2326e647900d62dcca482c22e64d888842d1f709099dff9c1cb40e56ffdb5b326cb0c552fe0a62a7f8d8c642231456b5da1f39c31b9a6d93543715233d29d0cfd6622b638d713092b3fd08dfa80a40db6d42f29a2ec44696a391fcba706116321bddb12f2cdcb091c6295b14f9f07235c2a5918aef98608a3c3d4e72c893554cbcae29d7ad87ccc506fa5457ad91e5eb112f75662bac01248ba22fec7065fa8b8bf36", 0xed}, {&(0x7f0000000800)="ba114bc8a9b0de3623f1425bab1b233138af18a88c0fc5eee15eee5e53f867c7105389abb8998b2a5916aa604cbd7363a894f6a265cbf0d5045987dcea13a7d9003dff02c936bca8ad58939f9a1b1b26e134d4ecf29739", 0x57}], 0x3, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x4000080)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x21, {0x21, 0x21, "53aed8715e234070f45efb129e6b40b75a6cbf0215da4f2a4572de476d155a"}}, &(0x7f0000000140)={0x0, 0x3, 0x48, @string={0x48, 0x3, "3464eba2bbee58dbe4a57d4b2878be3e763f19f99f41a664a25c00276b6d9263ee2277174a8772e26cab370ad6943b2a81c15fc666724a443ffd7ec8f41b7f3cab88da1282c8"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x10, 0xd, 0x3e, "6db4d6f6224b41e34263ffeb4ea751d5b6e1b953cacd44e146ae2493a50caea1f802af5832290f58a65ee58c6faf58c2084d3b1390213c2d769e8c62a6f4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000003c0)={0x40, 0xa0, 0x4}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "4e55cd47cdd7d011d04627494f03b3f31e37b2890863a8b23ae3c178c41af2aabc673384f5b2326269c5db69abc102"}})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x7, 0x6, &(0x7f0000000040)={0xe, "46ab1ee2294870395aac72cc5ed72ff137db7e49db2e30cf2ffc1d27353487233a"}})

7m12.586738424s ago: executing program 33 (id=41):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880)
recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044801}, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000002200)='net/anycast6\x00')
read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040))
setfsuid(0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4608008}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a000802110000010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd46, 0x1000005, 0xffffeffffffffff8, 0x3, 0xfffc, 0x0, 0x7, 0xa, 0xc, 0x4, 0x200000000002, 0x0, 0x401, 0x3, 0x2, 0x10000008d], 0x25000, 0x128657})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8901, 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
setresuid(r5, r5, r5)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0xff02}], 0x1)
ptrace$setregs(0xd, r8, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r8, 0x8, 0x4)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$uac2(r6, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000008532b310040000102030109046900030104007f080b0101010a20020904000000010120000104010700060900b209040100000102200009040101010102200009050109000206998008250101183e00000904020000010220000904020101010220000905820900020e0452082501040f43ce03"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})

7m0.64443616s ago: executing program 34 (id=121):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x16)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir, 0x3a}], [], 0x2f})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x33, &(0x7f0000000540)=ANY=[@ANYBLOB="40110100000000000800000045af"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xfff, 0x4d8200)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x1, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000600)="c6bd646cfb480d56ebcf97271341e264f713689ab582d181bdb5b45c94fb0cea6952c297e50735b0019d106d11d182e649114696af05c3c17d22b4807891a45d6b7031a2b86160b90c81ac669607475bbc2dd33198079268e5e7c9f230f558822eb7d58268dd7b9d18c0aced0c2500cc86a1795083796be3ee0e7c58534aa45ad27cc840be6d13eb7aa6b98b158a9e75c575cf7f64bb5e51dfafc274a8179e8202dde3fbedabead30ed58bd1e121b5f6d37dad9ddd868261ac932f137174d41a158be3cdb6bf2bb3f5abc4d26c088db0def547941c455c318ac23cc2cd9d4e67aa87719368007d56a85608af078dead1a9c822b49976d65114368493", 0xfc}, {&(0x7f0000000700)="467d5169a5459348ef48363f8de972413fa32b60c16c23b37be94ebeba9e2a8c6ad6d98013d1bf5966bde73776bc5b617f35ad92c016aefc512f3d48994823544ac6dc044a0dc5887ea9b2326e647900d62dcca482c22e64d888842d1f709099dff9c1cb40e56ffdb5b326cb0c552fe0a62a7f8d8c642231456b5da1f39c31b9a6d93543715233d29d0cfd6622b638d713092b3fd08dfa80a40db6d42f29a2ec44696a391fcba706116321bddb12f2cdcb091c6295b14f9f07235c2a5918aef98608a3c3d4e72c893554cbcae29d7ad87ccc506fa5457ad91e5eb112f75662bac01248ba22fec7065fa8b8bf36", 0xed}, {&(0x7f0000000800)="ba114bc8a9b0de3623f1425bab1b233138af18a88c0fc5eee15eee5e53f867c7105389abb8998b2a5916aa604cbd7363a894f6a265cbf0d5045987dcea13a7d9003dff02c936bca8ad58939f9a1b1b26e134d4ecf29739", 0x57}], 0x3, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x4000080)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x21, {0x21, 0x21, "53aed8715e234070f45efb129e6b40b75a6cbf0215da4f2a4572de476d155a"}}, &(0x7f0000000140)={0x0, 0x3, 0x48, @string={0x48, 0x3, "3464eba2bbee58dbe4a57d4b2878be3e763f19f99f41a664a25c00276b6d9263ee2277174a8772e26cab370ad6943b2a81c15fc666724a443ffd7ec8f41b7f3cab88da1282c8"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x10, 0xd, 0x3e, "6db4d6f6224b41e34263ffeb4ea751d5b6e1b953cacd44e146ae2493a50caea1f802af5832290f58a65ee58c6faf58c2084d3b1390213c2d769e8c62a6f4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000003c0)={0x40, 0xa0, 0x4}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "4e55cd47cdd7d011d04627494f03b3f31e37b2890863a8b23ae3c178c41af2aabc673384f5b2326269c5db69abc102"}})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x7, 0x6, &(0x7f0000000040)={0xe, "46ab1ee2294870395aac72cc5ed72ff137db7e49db2e30cf2ffc1d27353487233a"}})

1m21.087846641s ago: executing program 4 (id=3006):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc004001000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)

1m21.005771058s ago: executing program 4 (id=3008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)

1m20.86871322s ago: executing program 4 (id=3010):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xfffffffffffffe4a, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

1m20.717857876s ago: executing program 4 (id=3011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x98f905, 0x9})
socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r2, 0x0, 0x5c, 0x61, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = socket(0x1f, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x3}, {0x6, 0x4}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f00000000c0)={0x3, @default})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r9, &(0x7f0000000000), 0x8)
listen(r9, 0x3)
accept4(r8, 0x0, 0x0, 0x181400)
clock_gettime(0x0, &(0x7f0000000000)={<r10=>0x0, <r11=>0x0})
timer_settime(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {r10, r11+10000000}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x13, r0, 0xfcee000)

1m20.508125845s ago: executing program 4 (id=3012):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'lo\x00', 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {0xffffffa1}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)

1m19.4132246s ago: executing program 4 (id=3022):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0xeffd, 0x0, r0}])

1m18.942435594s ago: executing program 35 (id=3022):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0xeffd, 0x0, r0}])

2.738382927s ago: executing program 1 (id=3697):
r0 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x90, 0x24008084, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5}, 0x14)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)

2.460509741s ago: executing program 7 (id=3702):
r0 = socket$unix(0x1, 0x1, 0x0)
fsopen(0x0, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './bus\x00'}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./bus\x00', 0x40, 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0xf00, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
fanotify_mark(r3, 0x1, 0x10001043, r2, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001cc0), r7)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x4000000)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040841}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2)

2.362690249s ago: executing program 7 (id=3704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140ffffffff0000001101000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000e7ffffff000000000000060002"], 0x64}, 0x1, 0x620b}, 0x0)

2.23246878s ago: executing program 7 (id=3706):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff20, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf977201}, 0x10)
close(0xffffffffffffffff)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1000, 0x80000000000001})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0})

2.232283358s ago: executing program 6 (id=3707):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000004100000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0xc800)

2.095654925s ago: executing program 6 (id=3709):
mkdir(0x0, 0x18b)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102000000000000000002fff0840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

1.930773122s ago: executing program 6 (id=3711):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp={0x0, 0x0, 0x30383653}})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251e0000000800040000000000080001"], 0x54}}, 0x4000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) (async)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf252500000008000200", @ANYRES32=r9, @ANYBLOB="05002a00bd"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf252500000008000200", @ANYRES32=r9, @ANYBLOB="05002a00bd"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8080)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0x40000}, {@any, 0x800}, 0x400, "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"}, 0x418, 0x1})

1.87880156s ago: executing program 7 (id=3712):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0])
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0xffffff82}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r7)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r9=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r9, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"718c707b2f1958b0cf84e0799c88d5af"}, 0x8, 0xffffffffffffee78, 0x7}, @ib={0x1b, 0x1, 0x8, {"4ffef529a8edb12375d1dce0d261df44"}, 0x8, 0x81, 0x8}}}, 0x118)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)

1.675213546s ago: executing program 6 (id=3714):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000500000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232)

1.637639276s ago: executing program 7 (id=3715):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000340007d01ff020000000000000000000000000001"], 0xfdef)

1.376011168s ago: executing program 6 (id=3718):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0xf6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000033c0)=""/4105, 0x1009}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/233, 0xe9}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f00000003c0)=""/147, 0x93}], 0x9}, 0x1fd}], 0x3, 0x40000000, 0x0)

1.351839647s ago: executing program 6 (id=3720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000000c0)={0x40, 0x9, 0x94, "f977c48e459aa1b37aa23f059a66250c060caa58d8d8c52f1b364bafa2d7524ef8316beb5b12d6161bf783d3769b1f9f0d5be88a84944823332e87eec915f7885d8ae641e41f352cb547e8fe973f780d42bbc2ae675997438eb804c9e26065f4aa74a835d279d5c4c03ab61c6bec53998032475f02a412325ecd57a73479100f6be9efc1af7f8240fb2857214383786217115d8e"}, 0x0, &(0x7f0000000040)})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x0, 0x1, 0x6, 0xefff, 0x0, 0x5, 0x0})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0)
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="febe4d4730e038181700faeb292a777baadde3ce6a915ed52ed104fbe17fb4deef6ee5b19604d82a3878fc7fec726a99c4c5a4423b4b49efce2bbc86fd793d5bb38fc93ed08e4db390e5398751371f1550d24a8263f63d53d045b68925909f24e152e1b8156495859803f9c6484daa71978cc67298018be855f9f6fb06687b456466e8c91afdeb8f45578f6b017471eec6691b8bd6d1076c078e568e99da6c4bf3db59a0e140549f157c", @ANYRESHEX=r0, @ANYRES32=r4], 0xfdef)

1.179826201s ago: executing program 1 (id=3721):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000300008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)

1.157946507s ago: executing program 1 (id=3723):
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x1, 0x0, 0x80, 0x0, [{@initdev}, {@multicast2}, {@multicast2}, {}, {@multicast1}, {}, {@multicast2}, {@loopback}]}})
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0xa61, 0xfffffffffffffff8}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x95, 0x1, 0xffffffffffffffff, 0xfffffffffffffff9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16, 0x1, 0x5, 0x144}}, @wr_crn={0x67, 0x20, {0x4, 0x35}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x2ebe}}, @code={0xa, 0x82, {"b9190b0000b800000000ba000000800f30c4821905c066ba4300ecc441fe6f8628870000c4e1997588928c000066baa000edb9a5020000b8e5000000ba000000000f3066baf80cb8681da288ef66bafc0cb8951e0000efb805000000b9ab0000000f01c1b805000000b9400000000f01c1"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x63, 0x1, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x10, 0xc4b, 0x1}}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x2, 0x755f}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x4c, {"440f015800c422797813660fc734d6b9800000c00f3235001000000f3066baa100ed40e80e800000440f2247260f01cb36450f800000c0fe0f01cb"}}, @out_dx={0x6a, 0x28, {0x9ec9, 0x0, 0x7}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xdc, 0x1, 0x7, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x44d, 0x0, 0x3, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0xc42a}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4e5, 0x1000, 0x0, 0x7}}, @nested_load_syzos={0x136, 0x78, {0x1, 0x6, [@wr_drn={0x68, 0x20, {0x6, 0x3}}, @wrmsr={0x65, 0x20, {0x247, 0x80}}, @rdmsr={0x66, 0x18, {0x85f}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6008, 0x8, 0x4, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x8000000000000001}}, @uexit={0x0, 0x18, 0xc}, @rdmsr={0x66, 0x18, {0x831}}], 0x51e})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000680)=@arm64={0x93, 0x5, 0xf6, '\x00', 0x5})
ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f00000006c0)={0x100000, 0x0, {[0x80, 0x4, 0x6, 0x0, 0x200, 0xffffffff, 0x3ff, 0x3]}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xc2ee4e419f1998a1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x9, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x905e}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa1e}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000008c0))
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x24044000)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000a00)="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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x408, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x4054)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
close_range(r3, r1, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x3f7, 0x10, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000080)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000dc0)={'wg1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000e00)={'wg1\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001400)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000e40)={0x564, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x290, 0x8, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x11}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "72c7975b77d8a29be041e3d91951717063640f02f8b1bb51cbfa17af77ba8569"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8263e845ae6a62d5ef0d6db78071076512e798e47f5fc0519e76f412614c8942"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @private0, 0x80000001}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8e2463ffb49a5c62bb5feac649e89c392b7fabf2cc6abafa8778fa75bd105257"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd84745b7f4bae96d08f7ac4bea0cf3550a500487bea36a2212a4f036ddc2e86"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x298, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x86ec2207ce9bff01}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x564}, 0x1, 0x0, 0x0, 0x4845}, 0x4c000)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001480)={0x1b0, r4, 0x522, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PEERS={0x158, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6e}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @private2, 0xdd}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3408b3cd825e370050e0ca602b7390e6e0d5b41c55a3e663949d0d27d50985d0"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c3ffb25578de70af45b2093616f978a781c1cf288d8720bde34e5b7dcd9fe9a8"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xc0000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48}, 0x40040800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000016c0), &(0x7f0000001700)=0x4)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x138, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3020}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x28c36a0b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ce}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x4084000)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x339226d8e6d4a1f)
sendmsg$nl_generic(r3, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x1c0, 0x1e, 0x0, 0x70bd2c, 0x25dfdbff, {0x19}, [@nested={0x1aa, 0x69, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0xc, 0x10c, 0x0, 0x0, @u64}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x8000}, @generic="e7b57e6d19457490bccca50b72998f7d67722459b88d88931adb41df58e4201e6ec42d2c78235c1d7858934d3ba493d3277c0e125e56426545e3dbfb50d9bb8eb967489e10c1d9f1d501e7ac997dcb6590e76aa2ba764e1f619f5cead07533b32f6080dbdeb5a11ab73c4a3c0bd712ed6f2c726dd6281cc8ddcc44db2dfa545805098a8639deae300646561730c4749166adbece64450d8e55323bdd67d40232ee1c", @nested={0x4, 0x3a}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}, @generic="6f9350a8143c6ec7751d5f7e9b25f6ad2334c05a842a9e9b53891e638554884d1bc039fdafe7323d61cc4a82e24819cff411e6919d4a859d2408215b9fd89768cdd2643505a519723cca6fbfa68f34b92ca5f09210eafdd09de96d124865896b71a5c46f86d839acf3dc91dfa4ae0a1c03b160b9bd225f554e31ac4cbae48d9e898305bf1504a422067364d2d05d9de22b7d5ece2262b45d4925831755499daa94a4b4cac1ec710820642698db0d340c18a178b3bac7579fc11df94674bd7e50"]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001bc0)=0x11)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001c00)={{0x50000, 0xb609b955b401a948, 0xd, 0x5, 0x7, 0x64, 0xff, 0x19, 0x7, 0x7, 0xb, 0x9}, {0x0, 0xa000, 0x4, 0x3, 0x0, 0x8, 0x85, 0x3, 0x11, 0x3, 0xff, 0x8}, {0x7000, 0x26000, 0xb, 0x2, 0x6, 0x6, 0x8, 0x7, 0x2, 0x6, 0x8c, 0x2}, {0x54000, 0xc000, 0xe, 0x3, 0x0, 0xa, 0xc, 0x5, 0x40, 0xd, 0x2, 0x9}, {0x40000, 0x80a0000, 0x0, 0x2, 0x4, 0x7, 0xc7, 0xfb, 0x8, 0x3, 0x81, 0xd}, {0x4000, 0x30000, 0x3, 0x0, 0x3, 0x1b, 0xf2, 0x5, 0x7, 0x7, 0xe0, 0x6}, {0xfec00000, 0x80a0000, 0x4, 0x9, 0x0, 0x10, 0x3, 0x8, 0xbd, 0x2, 0x7, 0x33}, {0x60000, 0x3000, 0x8, 0x6, 0x8, 0x2, 0x9, 0x9, 0xf4, 0x0, 0x0, 0x4}, {0xa000, 0x5}, {0x60000}, 0x10004, 0x0, 0x54000, 0x10000, 0x8, 0x800, 0xb000, [0x6, 0x3, 0x5, 0x246c]})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001d40)={<r7=>0x0, 0xc1, "6e204040bba4f6cb499a27020611b06334a45f60be608eaeb209368ab0345e669d8d973dc566dbbf733383e621474b57937f9ed4bb60a7ab78e5fd5737c6e30e27dd1499f1fb9f52e82e592390dc3ded90dee508a1be4afd6413d8f2606116dc5478795d1175cbbf880fa857a8fdb17c23b8973ab2fcee9d94f32da743006508117bfea628ea46addcc281643e14ffe0be9e67ed26293b4e8751d54c7c95378526f28af9955199c936961ed9a487097d9c89fc5e91572b860a6752286168aecc51"}, &(0x7f0000001e40)=0xc9)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001e80)={r7, @in6={{0xa, 0x4e20, 0xb, @remote, 0x5}}, 0x4a4, 0xffc0, 0x8001, 0x80000001, 0x10, 0xe, 0x40}, 0x9c)
socket(0x22, 0x80000, 0x5)

1.047857481s ago: executing program 1 (id=3725):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)="ff68ced756aedb8f6afad2c7af91f9324bd2f460d4e8245c0f30bf977fde1b2afd2880ded6475646e903f2d720f301c9930d68df5fb80c1810f1cab38ced6158478ef7a2e4504f2a6a38e62b834feb9b4f031c5ca22f8f2eb5d4f1ed41a2cc471b928f8650ac61263f1209c7b498b4434e814419a0ce47ebedb4211bee1be2096ffe150f459c9f2300fad527e46f46aa18f66cf7236d232ed30ee88a217e67cb3a288dbc046304f2dce40f113ca7b47f2e377f458d34a7f2cdbea860a2ce808006f331c6ed51bb1f4d0d6cf676617a2f46da", 0xd2}, {&(0x7f0000000d00)="9b5a247f15fdf2f208a9d50c28dbd5ce9945ec1251f8072bc2c0c6f671c92282ff24fe64d942f822b6445a29311a40d33d471c", 0x33}, {&(0x7f0000000d80)="8c9e316091dba45eb98c4d1e2c917a55e0f01443177c3aa2cd468eaed95262b3a3e4b2505c4e4845108d91fe588838904e70cc5b53bd4cf560431d1b486a587c72eb1d4177ca1198f5e4fc00364abe5248ec81ce186565c5503779091d427fb6248ca80a537b37086ec3f4d9e75b83372550e8781621e0", 0x77}, {&(0x7f0000000e00)="f4c7eb618941bed01f45d24983c11f13bb5c293ea315e1c6", 0x18}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)="8fa8176522e4377489899d8869ccaebfaa64b3dde27ef32df48912abc0824a0af22f39f32ed4859870009db15a427c6d0547d54acc3593e4d913acf568e192bd591c8f1364775d9068886566a6a7f301d0759ab06729b54f8ff8208d25acdf638c16c2b8f9d88eafb16b5297675cb25e36b271c172", 0x75}], 0x1}}], 0x2, 0x4000045)

1.02235724s ago: executing program 1 (id=3727):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000200)=""/4089, 0xff9}, {&(0x7f0000001200)=""/216, 0xd8}], 0x4, 0x0, 0x20800, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r4, @ANYBLOB="3c002d80080003000000000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000340)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x8, 0x80, 0x0, 0x9, 0x0, 0x800000})

748.782078ms ago: executing program 5 (id=3730):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffffffff110000000aaf3a000802110000000000210f661c7c100e3582f70f1313c41e882e901977045ef6fcc9533eb45d76d5a5b982b152b95b263a335b0300ddfdad4159b3f349c83dadb14554244bfd0adf104a3c6f93240e44aea164152fd2b4936adbf8bc53d70313011ffbb04b413f9259ce26262290063e9cb737c60efd319c88a5b60352f75832b89990f1a036b5644be079a6f291c50678834b405d7199cb83b86f74061cb1bf31a97b1210fc8ac29a74b02d6f0c9c90790dd61b6fadfa46e8df92"], 0x20}, 0x1, 0x0, 0x0, 0xec0}, 0x20000010)
r2 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x30}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008080}, 0x40000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200))

662.889477ms ago: executing program 5 (id=3731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000f500010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

536.573362ms ago: executing program 7 (id=3732):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (rerun: 64)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2}, 0x20) (async, rerun: 64)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000880) (rerun: 64)

536.144099ms ago: executing program 5 (id=3733):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xfffffffffffffe4a, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x4800, &(0x7f00000009c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

462.076873ms ago: executing program 5 (id=3734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000080000060fc030000382c01fe8000000000000500000000000000aaff0200000000000000000000000000013a"], 0x6e)

312.725999ms ago: executing program 5 (id=3735):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)="ff68ced756aedb8f6afad2c7af91f9324bd2f460d4e8245c0f30bf977fde1b2afd2880ded6475646e903f2d720f301c9930d68df5fb80c1810f1cab38ced6158478ef7a2e4504f2a6a38e62b834feb9b4f031c5ca22f8f2eb5d4f1ed41a2cc471b928f8650ac61263f1209c7b498b4434e814419a0ce47ebedb4211bee1be2096ffe150f459c9f2300fad527e46f46aa18f66cf7236d232ed30ee88a217e67cb3a288dbc046304f2dce40f113ca7b47f2e377f458d34a7f2cdbea860a2ce808006f331c6ed51bb1f4d0d6cf676617a2f46da", 0xd2}, {&(0x7f0000000d00)="9b5a247f15fdf2f208a9d50c28dbd5ce9945ec1251f8072bc2c0c6f671c92282ff24fe64d942f822b6445a29311a40d33d471c917db82f1779898a", 0x3b}, {&(0x7f0000000d80)="8c9e316091dba45eb98c4d1e2c917a55e0f01443177c3aa2cd468eaed95262b3a3e4b2505c4e4845108d91fe588838904e70cc5b53bd4cf560431d1b486a587c72eb1d4177ca1198f5e4fc00364abe5248ec81ce186565c5503779091d427fb6248ca80a537b37086ec3f4d9e75b83372550e8781621e0", 0x77}, {&(0x7f0000000e00)="f4c7eb618941bed01f45d24983c11f13bb5c293ea315e1c6", 0x18}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)="8fa8176522e4377489899d8869ccaebfaa64b3dde27ef32df48912abc0824a0af22f39f32ed4859870009db15a427c6d0547d54acc3593e4d913acf568e192bd591c8f1364775d9068886566a6a7f301d0759ab06729b54f8ff8208d25acdf638c16c2b8f9d88eafb16b5297675cb25e36b271c172", 0x75}], 0x1}}], 0x2, 0x4000045)

258.321952ms ago: executing program 5 (id=3736):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x6)
syz_usb_connect$uac3(0x2, 0xc8, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000020630731104000010203010902b6000301fe8001080b0200012730ff0904000000010130"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
socket(0xa, 0x5, 0x4)

0s ago: executing program 1 (id=3737):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="6705dbf26a", 0x5}], 0x1)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
ioctl$RTC_SET_TIME(r4, 0x40187014, &(0x7f0000000000)={0x19, 0x9, 0x16, 0xc, 0xa, 0x1, 0x5, 0x163})
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x100000000000000)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) (async)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="6705dbf26a", 0x5}], 0x1) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) (async)
ioctl$RTC_SET_TIME(r4, 0x40187014, &(0x7f0000000000)={0x19, 0x9, 0x16, 0xc, 0xa, 0x1, 0x5, 0x163}) (async)
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) (async)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) (async)
read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) (async)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r5}, 0x10) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
close_range(r6, 0xffffffffffffffff, 0x100000000000000) (async)

kernel console output (not intermixed with test programs):

88.345192][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.345205][T15262] Call Trace:
[  488.345214][T15262]  <TASK>
[  488.345223][T15262]  dump_stack_lvl+0xe8/0x150
[  488.345258][T15262]  should_fail_ex+0x412/0x560
[  488.345287][T15262]  prepare_alloc_pages+0x22a/0x650
[  488.345316][T15262]  __alloc_frozen_pages_noprof+0x119/0x3d0
[  488.345343][T15262]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  488.345369][T15262]  ? __pfx_policy_nodemask+0x10/0x10
[  488.345391][T15262]  ? __pfx___mutex_lock+0x10/0x10
[  488.345415][T15262]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  488.345440][T15262]  alloc_pages_mpol+0x235/0x490
[  488.345468][T15262]  alloc_pages_noprof+0xac/0x2a0
[  488.345501][T15262]  binder_alloc_new_buf+0x1e17/0x3020
[  488.345636][T15262]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  488.345666][T15262]  ? __kmalloc_cache_noprof+0x31c/0x660
[  488.345706][T15262]  binder_transaction+0x28ce/0x70b0
[  488.345725][T15262]  ? arch_stack_walk+0xfb/0x150
[  488.345773][T15262]  ? ima_match_policy+0x2146/0x21e0
[  488.345807][T15262]  ? __pfx_binder_transaction+0x10/0x10
[  488.345829][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.345865][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.345903][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.345943][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.345976][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.346004][T15262]  ? binder_debug+0x155/0x1d0
[  488.346051][T15262]  binder_ioctl_write_read+0xb5c/0xa660
[  488.346091][T15262]  ? unwind_get_return_address+0x4d/0x90
[  488.346112][T15262]  ? arch_stack_walk+0xfb/0x150
[  488.346143][T15262]  ? stack_trace_save+0xa9/0x100
[  488.346169][T15262]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  488.346189][T15262]  ? kasan_save_free_info+0x46/0x50
[  488.346219][T15262]  ? stack_depot_save_flags+0x33/0x810
[  488.346244][T15262]  ? format_decode+0x90/0xe10
[  488.346274][T15262]  ? kasan_save_track+0x4f/0x80
[  488.346301][T15262]  ? kasan_save_track+0x3e/0x80
[  488.346326][T15262]  ? kasan_save_free_info+0x46/0x50
[  488.346353][T15262]  ? __kasan_slab_free+0x5c/0x80
[  488.346373][T15262]  ? __lock_acquire+0x6b5/0x2cf0
[  488.346422][T15262]  ? __pfx_binder_debug+0x10/0x10
[  488.346438][T15262]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.346484][T15262]  ? _raw_spin_unlock+0x28/0x50
[  488.346512][T15262]  ? binder_get_thread+0x177/0x6d0
[  488.346549][T15262]  binder_ioctl+0x423/0x1b70
[  488.346570][T15262]  ? tomoyo_path_number_perm+0x219/0x630
[  488.346599][T15262]  ? tomoyo_path_number_perm+0x219/0x630
[  488.346629][T15262]  ? do_vfs_ioctl+0x1166/0x1530
[  488.346651][T15262]  ? __pfx_binder_ioctl+0x10/0x10
[  488.346672][T15262]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  488.346706][T15262]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  488.346748][T15262]  ? __fget_files+0x2a/0x420
[  488.346779][T15262]  ? __fget_files+0x2a/0x420
[  488.346805][T15262]  ? __fget_files+0x3a0/0x420
[  488.346831][T15262]  ? __fget_files+0x2a/0x420
[  488.346861][T15262]  ? bpf_lsm_file_ioctl+0x9/0x20
[  488.346882][T15262]  ? __pfx_binder_ioctl+0x10/0x10
[  488.346903][T15262]  __se_sys_ioctl+0xfc/0x170
[  488.346927][T15262]  do_syscall_64+0x14d/0xf80
[  488.346946][T15262]  ? trace_irq_disable+0x3b/0x150
[  488.346970][T15262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.346992][T15262]  ? clear_bhb_loop+0x40/0x90
[  488.347018][T15262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.347039][T15262] RIP: 0033:0x7fc98019c799
[  488.347060][T15262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.347078][T15262] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  488.347107][T15262] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  488.347122][T15262] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  488.347136][T15262] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  488.347149][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.347160][T15262] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  488.347193][T15262]  </TASK>
[  488.772375][ T5907] usb 8-1: GET_CAPABILITIES returned 0
[  488.778521][ T5907] usbtmc 8-1:16.0: can't read capabilities
[  488.795640][T15260] netlink: 'syz.1.3200': attribute type 3 has an invalid length.
[  489.006710][T15274] netlink: 'syz.5.3206': attribute type 6 has an invalid length.
[  489.015082][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.015571][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.023058][T15275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.042538][T15275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.117444][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  489.196129][T15281] netlink: 'syz.5.3207': attribute type 10 has an invalid length.
[  489.273381][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.282824][ T5907] usb 2-1: Using ep0 maxpacket: 32
[  489.293510][ T5907] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  489.305780][ T5907] usb 2-1: config 0 has no interface number 0
[  489.315014][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.325752][ T5907] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  489.330985][    T9] usb 8-1: USB disconnect, device number 5
[  489.357462][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.366778][ T5907] usb 2-1: Product: syz
[  489.372272][ T5907] usb 2-1: Manufacturer: syz
[  489.377097][ T5907] usb 2-1: SerialNumber: syz
[  489.403655][ T5907] usb 2-1: config 0 descriptor??
[  489.579325][T15289] FAULT_INJECTION: forcing a failure.
[  489.579325][T15289] name failslab, interval 1, probability 0, space 0, times 0
[  489.594659][T15289] CPU: 1 UID: 0 PID: 15289 Comm: syz.6.3209 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  489.594694][T15289] Tainted: [L]=SOFTLOCKUP
[  489.594716][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  489.594729][T15289] Call Trace:
[  489.594737][T15289]  <TASK>
[  489.594747][T15289]  dump_stack_lvl+0xe8/0x150
[  489.594783][T15289]  should_fail_ex+0x412/0x560
[  489.594812][T15289]  should_failslab+0xa8/0x100
[  489.594836][T15289]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  489.594870][T15289]  ? __alloc_skb+0x1d0/0x7d0
[  489.594888][T15289]  ? __local_bh_enable_ip+0xd0/0x130
[  489.594924][T15289]  __alloc_skb+0x1d0/0x7d0
[  489.594948][T15289]  inet_netconf_notify_devconf+0x173/0x240
[  489.594985][T15289]  inetdev_event+0x79e/0x1610
[  489.595021][T15289]  ? __pfx_inetdev_event+0x10/0x10
[  489.595062][T15289]  notifier_call_chain+0x1be/0x400
[  489.595094][T15289]  unregister_netdevice_many_notify+0x186a/0x2380
[  489.595136][T15289]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  489.595171][T15289]  ? __lock_acquire+0x6b5/0x2cf0
[  489.595211][T15289]  unregister_netdevice_queue+0x31f/0x360
[  489.595238][T15289]  ? apparmor_capable+0x126/0x170
[  489.595260][T15289]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  489.595286][T15289]  ? security_capable+0x7e/0x2c0
[  489.595330][T15289]  ip6gre_tunnel_siocdevprivate+0x33f/0x720
[  489.595369][T15289]  ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10
[  489.595420][T15289]  ? full_name_hash+0x92/0xe0
[  489.595473][T15289]  dev_ifsioc+0xba6/0x1280
[  489.595513][T15289]  dev_ioctl+0x84c/0x1150
[  489.595547][T15289]  sock_ioctl+0x75f/0x7f0
[  489.595576][T15289]  ? __pfx_sock_ioctl+0x10/0x10
[  489.595604][T15289]  ? __fget_files+0x3a0/0x420
[  489.595630][T15289]  ? __fget_files+0x2a/0x420
[  489.595660][T15289]  ? bpf_lsm_file_ioctl+0x9/0x20
[  489.595680][T15289]  ? __pfx_sock_ioctl+0x10/0x10
[  489.595704][T15289]  __se_sys_ioctl+0xfc/0x170
[  489.595727][T15289]  do_syscall_64+0x14d/0xf80
[  489.595747][T15289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.595768][T15289]  ? clear_bhb_loop+0x40/0x90
[  489.595794][T15289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.595814][T15289] RIP: 0033:0x7fc98019c799
[  489.595834][T15289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.595851][T15289] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  489.595873][T15289] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  489.595889][T15289] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003
[  489.595902][T15289] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  489.595915][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.595927][T15289] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  489.595959][T15289]  </TASK>
[  489.973024][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3210'.
[  490.157137][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  490.168191][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  490.233574][T15300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.270212][T15300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.291995][T15300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.319306][T15300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.360952][T15300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.373775][T15300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.382333][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  490.393520][ T5907] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  490.457323][  T809] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  490.607347][  T809] usb 7-1: Using ep0 maxpacket: 32
[  490.622359][  T809] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  490.638021][T15309] sctp: [Deprecated]: syz.5.3217 (pid 15309) Use of int in max_burst socket option deprecated.
[  490.638021][T15309] Use struct sctp_assoc_value instead
[  490.653868][  T809] usb 7-1: config 0 has no interface number 0
[  490.660888][  T809] usb 7-1: config 0 interface 184 has no altsetting 0
[  490.671987][  T809] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  490.688277][  T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.720101][  T809] usb 7-1: Product: syz
[  490.729974][  T809] usb 7-1: Manufacturer: syz
[  490.739325][  T809] usb 7-1: SerialNumber: syz
[  490.760706][  T809] usb 7-1: config 0 descriptor??
[  490.981413][  T809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  490.998897][  T809] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  491.024522][  T809] usb 7-1: USB disconnect, device number 91
[  491.331282][T15326] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3221'.
[  492.540432][T15365] binder: 15364:15365 ioctl c0306201 2000000004c0 returned -14
[  492.549058][T15365] FAULT_INJECTION: forcing a failure.
[  492.549058][T15365] name failslab, interval 1, probability 0, space 0, times 0
[  492.564232][T15365] CPU: 0 UID: 0 PID: 15365 Comm: syz.6.3233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.564265][T15365] Tainted: [L]=SOFTLOCKUP
[  492.564274][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  492.564286][T15365] Call Trace:
[  492.564294][T15365]  <TASK>
[  492.564303][T15365]  dump_stack_lvl+0xe8/0x150
[  492.564340][T15365]  should_fail_ex+0x412/0x560
[  492.564370][T15365]  should_failslab+0xa8/0x100
[  492.564394][T15365]  __kmalloc_noprof+0xe8/0x760
[  492.564427][T15365]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  492.564464][T15365]  tomoyo_realpath_from_path+0xe3/0x5d0
[  492.564507][T15365]  ? tomoyo_path_number_perm+0x219/0x630
[  492.564534][T15365]  tomoyo_path_number_perm+0x246/0x630
[  492.564564][T15365]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  492.564594][T15365]  ? __lock_acquire+0x6b5/0x2cf0
[  492.564634][T15365]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  492.564678][T15365]  ? __fget_files+0x2a/0x420
[  492.564721][T15365]  ? __fget_files+0x2a/0x420
[  492.564747][T15365]  ? __fget_files+0x3a0/0x420
[  492.564773][T15365]  ? __fget_files+0x2a/0x420
[  492.564808][T15365]  security_file_ioctl+0xc3/0x2a0
[  492.564835][T15365]  __se_sys_ioctl+0x47/0x170
[  492.564860][T15365]  do_syscall_64+0x14d/0xf80
[  492.564879][T15365]  ? trace_irq_disable+0x3b/0x150
[  492.564903][T15365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.564924][T15365]  ? clear_bhb_loop+0x40/0x90
[  492.564950][T15365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.564970][T15365] RIP: 0033:0x7fc98019c799
[  492.564991][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.565008][T15365] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.565030][T15365] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  492.565045][T15365] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  492.565059][T15365] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  492.565071][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.565083][T15365] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  492.565116][T15365]  </TASK>
[  492.565222][T15365] ERROR: Out of memory at tomoyo_realpath_from_path.
[  492.826366][ T5894] usb 2-1: USB disconnect, device number 6
[  493.000201][T15374] binder: 15373:15374 ioctl c0306201 2000000004c0 returned -14
[  493.162849][T15381] FAULT_INJECTION: forcing a failure.
[  493.162849][T15381] name failslab, interval 1, probability 0, space 0, times 0
[  493.187731][T15381] CPU: 1 UID: 0 PID: 15381 Comm: syz.5.3238 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.187764][T15381] Tainted: [L]=SOFTLOCKUP
[  493.187771][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  493.187783][T15381] Call Trace:
[  493.187792][T15381]  <TASK>
[  493.187801][T15381]  dump_stack_lvl+0xe8/0x150
[  493.187837][T15381]  should_fail_ex+0x412/0x560
[  493.187865][T15381]  should_failslab+0xa8/0x100
[  493.187885][T15381]  ? skb_clone+0x212/0x3a0
[  493.187909][T15381]  kmem_cache_alloc_noprof+0x87/0x650
[  493.187939][T15381]  ? apparmor_capable+0x126/0x170
[  493.187968][T15381]  skb_clone+0x212/0x3a0
[  493.187990][T15381]  ? nfnetlink_rcv+0x4b0/0x27b0
[  493.188022][T15381]  nfnetlink_rcv+0x4de/0x27b0
[  493.188053][T15381]  ? unwind_get_return_address+0x4d/0x90
[  493.188074][T15381]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  493.188109][T15381]  ? trim_netdev_trace+0x7d7/0x830
[  493.188141][T15381]  ? stack_trace_save+0xa9/0x100
[  493.188174][T15381]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  493.188213][T15381]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  493.188240][T15381]  ? ref_tracker_free+0x693/0x840
[  493.188265][T15381]  ? netlink_unicast+0x7e3/0x9b0
[  493.188290][T15381]  ? netlink_sendmsg+0x813/0xb40
[  493.188308][T15381]  ? sock_sendmsg_nosec+0x112/0x150
[  493.188333][T15381]  ? ____sys_sendmsg+0x589/0x8c0
[  493.188354][T15381]  ? ___sys_sendmsg+0x2a5/0x360
[  493.188375][T15381]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  493.188396][T15381]  ? do_syscall_64+0x14d/0xf80
[  493.188413][T15381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.188440][T15381]  ? __skb_clone+0x483/0x7a0
[  493.188469][T15381]  ? skb_clone+0x246/0x3a0
[  493.188496][T15381]  ? __netlink_deliver_tap+0x866/0x8b0
[  493.188531][T15381]  ? netlink_deliver_tap+0x2e/0x1b0
[  493.188584][T15381]  netlink_unicast+0x80f/0x9b0
[  493.188620][T15381]  ? __pfx_netlink_unicast+0x10/0x10
[  493.188650][T15381]  ? netlink_sendmsg+0x650/0xb40
[  493.188668][T15381]  ? skb_put+0x11b/0x210
[  493.188692][T15381]  netlink_sendmsg+0x813/0xb40
[  493.188721][T15381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.188742][T15381]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  493.188785][T15381]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.188804][T15381]  sock_sendmsg_nosec+0x112/0x150
[  493.188834][T15381]  ____sys_sendmsg+0x589/0x8c0
[  493.188878][T15381]  ? __pfx_____sys_sendmsg+0x10/0x10
[  493.188910][T15381]  ? import_iovec+0x73/0xa0
[  493.188940][T15381]  ___sys_sendmsg+0x2a5/0x360
[  493.188968][T15381]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.189024][T15381]  ? __fget_files+0x2a/0x420
[  493.189050][T15381]  ? __fget_files+0x3a0/0x420
[  493.189087][T15381]  __x64_sys_sendmsg+0x1bd/0x2a0
[  493.189112][T15381]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  493.189144][T15381]  ? __pfx_ksys_write+0x10/0x10
[  493.189174][T15381]  do_syscall_64+0x14d/0xf80
[  493.189191][T15381]  ? trace_irq_disable+0x3b/0x150
[  493.189214][T15381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.189233][T15381]  ? clear_bhb_loop+0x40/0x90
[  493.189257][T15381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.189276][T15381] RIP: 0033:0x7f846399c799
[  493.189296][T15381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.189314][T15381] RSP: 002b:00007f8464812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  493.189335][T15381] RAX: ffffffffffffffda RBX: 00007f8463c15fa0 RCX: 00007f846399c799
[  493.189350][T15381] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003
[  493.189362][T15381] RBP: 00007f8464812090 R08: 0000000000000000 R09: 0000000000000000
[  493.189373][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.189385][T15381] R13: 00007f8463c16038 R14: 00007f8463c15fa0 R15: 00007fff0bfdf728
[  493.189414][T15381]  </TASK>
[  493.199187][T15379] binder: 15378:15379 ioctl c0306201 2000000004c0 returned -14
[  493.638731][T15388] openvswitch: netlink: Tunnel attr 32 out of range max 16
[  493.892007][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3244'.
[  494.047988][ T5926] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  494.059979][  T141] Bluetooth: (null): Invalid header checksum
[  494.227761][ T5926] usb 7-1: Using ep0 maxpacket: 32
[  494.240720][ T5926] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  494.249412][ T5926] usb 7-1: config 0 has no interface number 0
[  494.266585][ T5926] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  494.278944][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.287117][ T5926] usb 7-1: Product: syz
[  494.291698][ T5926] usb 7-1: Manufacturer: syz
[  494.297107][ T5926] usb 7-1: SerialNumber: syz
[  494.305167][ T5926] usb 7-1: config 0 descriptor??
[  494.493875][T15413] netlink: 'syz.5.3251': attribute type 4 has an invalid length.
[  494.502916][T15413] netlink: 'syz.5.3251': attribute type 2 has an invalid length.
[  494.516331][T15413] trusted_key: encrypted_key: hex blob is missing
[  494.730861][ T5926] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  494.742111][ T5926] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  494.792603][T15417] loop4: detected capacity change from 0 to 1
[  494.817797][ T5936] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  494.834294][T15417] Dev loop4: unable to read RDB block 1
[  494.840113][T15417]  loop4: unable to read partition table
[  494.846034][T15417] loop4: partition table beyond EOD, truncated
[  494.853249][T15417] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  494.958125][ T5926] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  494.967853][ T5936] usb 6-1: Using ep0 maxpacket: 32
[  494.984204][ T5936] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  494.988723][ T5926] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[  495.012944][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.025369][ T5936] usb 6-1: config 0 descriptor??
[  495.236796][ T5936] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  495.259233][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  495.282002][ T5936] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  495.297397][ T5936] usb 6-1: media controller created
[  495.363354][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  495.486699][ T5936] DVB: Unable to find symbol dib7000p_attach()
[  495.496543][ T5936] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  495.610624][ T5936] rc_core: IR keymap rc-dib0700-rc5 not found
[  495.624930][ T5936] Registered IR keymap rc-empty
[  495.640328][ T5936] dvb-usb: could not initialize remote control.
[  495.646758][ T5936] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  495.684355][ T5936] usb 6-1: USB disconnect, device number 101
[  495.812459][ T5936] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  496.245464][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3268'.
[  496.307378][ T5907] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  496.467872][ T5907] usb 8-1: Using ep0 maxpacket: 16
[  496.484247][ T5907] usb 8-1: config 254 has an invalid interface number: 235 but max is 0
[  496.504099][ T5907] usb 8-1: config 254 has no interface number 0
[  496.522345][ T5907] usb 8-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  496.550178][ T5907] usb 8-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  496.569591][ T5907] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  496.582555][ T5907] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[  496.594056][ T5907] usb 8-1: config 254 interface 235 has no altsetting 0
[  496.610411][ T5907] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  496.620301][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.628788][ T5907] usb 8-1: Product: syz
[  496.633497][ T5907] usb 8-1: Manufacturer: syz
[  496.638162][T15475] syzkaller1: entered promiscuous mode
[  496.643828][T15475] syzkaller1: entered allmulticast mode
[  496.645910][ T5907] usb 8-1: SerialNumber: syz
[  496.662849][T15459] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  496.739985][T15478] tmpfs: User quota block hardlimit too large.
[  496.761020][T15478] input: syz0 as /devices/virtual/input/input30
[  496.893276][ T5907] usbtest 8-1:254.235: couldn't get endpoints, -71
[  496.911966][ T5907] usbtest 8-1:254.235: probe with driver usbtest failed with error -71
[  496.944843][ T5907] usb 8-1: USB disconnect, device number 6
[  497.095684][ T5926] usb 7-1: USB disconnect, device number 92
[  497.237420][T13106] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  497.397447][T13106] usb 6-1: Using ep0 maxpacket: 8
[  497.411371][T13106] usb 6-1: unable to get BOS descriptor or descriptor too short
[  497.433815][T13106] usb 6-1: config 4 has an invalid interface number: 78 but max is 0
[  497.449871][T13106] usb 6-1: config 4 has no interface number 0
[  497.459964][T13106] usb 6-1: config 4 interface 78 has no altsetting 0
[  497.485723][T15502] binder: 15501:15502 ioctl c0306201 2000000004c0 returned -14
[  497.497036][T13106] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=6b.7c
[  497.524138][T13106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.540812][T13106] usb 6-1: Product: syz
[  497.545078][T13106] usb 6-1: Manufacturer: syz
[  497.553746][T13106] usb 6-1: SerialNumber: syz
[  497.554078][T15504] openvswitch: netlink: Flow key attr not present in new flow.
[  497.578448][T13106] usb 6-1: active config #4 != 1 ??
[  497.633778][T15509] binder: 15508:15509 ioctl c0306201 2000000004c0 returned -14
[  497.729859][T15513] binder: 15512:15513 ioctl c0306201 2000000004c0 returned -14
[  497.739059][T15513] FAULT_INJECTION: forcing a failure.
[  497.739059][T15513] name failslab, interval 1, probability 0, space 0, times 0
[  497.752897][T15513] CPU: 1 UID: 0 PID: 15513 Comm: syz.6.3290 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  497.752928][T15513] Tainted: [L]=SOFTLOCKUP
[  497.752937][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  497.752949][T15513] Call Trace:
[  497.752957][T15513]  <TASK>
[  497.752965][T15513]  dump_stack_lvl+0xe8/0x150
[  497.753001][T15513]  should_fail_ex+0x412/0x560
[  497.753030][T15513]  should_failslab+0xa8/0x100
[  497.753054][T15513]  __kmalloc_noprof+0xe8/0x760
[  497.753084][T15513]  ? tomoyo_encode+0x28b/0x550
[  497.753120][T15513]  tomoyo_encode+0x28b/0x550
[  497.753156][T15513]  tomoyo_realpath_from_path+0x58d/0x5d0
[  497.753208][T15513]  ? tomoyo_path_number_perm+0x219/0x630
[  497.753234][T15513]  tomoyo_path_number_perm+0x246/0x630
[  497.753263][T15513]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  497.753291][T15513]  ? __lock_acquire+0x6b5/0x2cf0
[  497.753333][T15513]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  497.753375][T15513]  ? __fget_files+0x2a/0x420
[  497.753404][T15513]  ? __fget_files+0x2a/0x420
[  497.753428][T15513]  ? __fget_files+0x3a0/0x420
[  497.753453][T15513]  ? __fget_files+0x2a/0x420
[  497.753482][T15513]  security_file_ioctl+0xc3/0x2a0
[  497.753508][T15513]  __se_sys_ioctl+0x47/0x170
[  497.753532][T15513]  do_syscall_64+0x14d/0xf80
[  497.753551][T15513]  ? trace_irq_disable+0x3b/0x150
[  497.753573][T15513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.753594][T15513]  ? clear_bhb_loop+0x40/0x90
[  497.753619][T15513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.753639][T15513] RIP: 0033:0x7fc98019c799
[  497.753659][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.753676][T15513] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  497.753697][T15513] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  497.753712][T15513] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  497.753724][T15513] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  497.753736][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.753747][T15513] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  497.753779][T15513]  </TASK>
[  497.753812][T15513] ERROR: Out of memory at tomoyo_realpath_from_path.
[  497.795714][T13106] usb 6-1: USB disconnect, device number 102
[  498.017131][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'.
[  498.032837][T15517] tipc: Enabled bearer <eth:gre0>, priority 0
[  498.046914][T15518] netlink: 'syz.1.3293': attribute type 40 has an invalid length.
[  498.087132][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3294'.
[  498.248395][T15528] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3297'.
[  498.772167][ T5926] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  498.784644][T15551] netlink: 'syz.1.3306': attribute type 10 has an invalid length.
[  498.937704][ T5926] usb 6-1: device descriptor read/64, error -71
[  498.952925][T15555] FAULT_INJECTION: forcing a failure.
[  498.952925][T15555] name failslab, interval 1, probability 0, space 0, times 0
[  498.966967][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.7.3308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.966998][T15555] Tainted: [L]=SOFTLOCKUP
[  498.967007][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  498.967019][T15555] Call Trace:
[  498.967027][T15555]  <TASK>
[  498.967036][T15555]  dump_stack_lvl+0xe8/0x150
[  498.967071][T15555]  should_fail_ex+0x412/0x560
[  498.967101][T15555]  should_failslab+0xa8/0x100
[  498.967124][T15555]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  498.967164][T15555]  ? kasprintf+0xe2/0x140
[  498.967306][T15555]  kvasprintf+0xeb/0x1a0
[  498.967335][T15555]  ? __pfx_kvasprintf+0x10/0x10
[  498.967374][T15555]  kasprintf+0xe2/0x140
[  498.967404][T15555]  ? __pfx_kasprintf+0x10/0x10
[  498.967426][T15555]  ? nfnl_pernet+0x23/0x240
[  498.967452][T15555]  ? nfnl_pernet+0x23/0x240
[  498.967481][T15555]  nf_tables_getsetelem+0xf00/0x1150
[  498.967510][T15555]  ? __pfx_nf_tables_getsetelem+0x10/0x10
[  498.967564][T15555]  ? symbol_string+0x383/0x400
[  498.967594][T15555]  ? nfnl_pernet+0x23/0x240
[  498.967623][T15555]  ? __nla_parse+0x40/0x60
[  498.967647][T15555]  ? __pfx_nf_tables_getsetelem+0x10/0x10
[  498.967673][T15555]  nfnetlink_rcv_msg+0x8b1/0x12c0
[  498.967702][T15555]  ? nfnetlink_rcv_msg+0x22a/0x12c0
[  498.967748][T15555]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  498.967803][T15555]  ? __lock_acquire+0x6b5/0x2cf0
[  498.967847][T15555]  ? pointer+0x6fa/0xe50
[  498.967882][T15555]  netlink_rcv_skb+0x232/0x4b0
[  498.967914][T15555]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  498.967944][T15555]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  498.967985][T15555]  ? bpf_lsm_capable+0x9/0x20
[  498.968007][T15555]  ? security_capable+0x7e/0x2c0
[  498.968042][T15555]  nfnetlink_rcv+0x2c0/0x27b0
[  498.968073][T15555]  ? unwind_get_return_address+0x4d/0x90
[  498.968093][T15555]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  498.968128][T15555]  ? trim_netdev_trace+0x7d7/0x830
[  498.968158][T15555]  ? stack_trace_save+0xa9/0x100
[  498.968192][T15555]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  498.968219][T15555]  ? save_netdev_trace_buffer+0x4f7/0x610
[  498.968247][T15555]  ? __pfx___dev_queue_xmit+0x10/0x10
[  498.968278][T15555]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  498.968305][T15555]  ? ref_tracker_free+0x693/0x840
[  498.968329][T15555]  ? __netlink_deliver_tap+0x636/0x8b0
[  498.968357][T15555]  ? netlink_deliver_tap+0x19c/0x1b0
[  498.968385][T15555]  ? netlink_unicast+0x7e3/0x9b0
[  498.968409][T15555]  ? netlink_sendmsg+0x813/0xb40
[  498.968426][T15555]  ? sock_sendmsg_nosec+0x112/0x150
[  498.968452][T15555]  ? ____sys_sendmsg+0x589/0x8c0
[  498.968471][T15555]  ? ___sys_sendmsg+0x2a5/0x360
[  498.968492][T15555]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  498.968513][T15555]  ? do_syscall_64+0x14d/0xf80
[  498.968531][T15555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.968559][T15555]  ? __skb_clone+0x483/0x7a0
[  498.968589][T15555]  ? skb_clone+0x246/0x3a0
[  498.968615][T15555]  ? __netlink_deliver_tap+0x866/0x8b0
[  498.968645][T15555]  ? netlink_deliver_tap+0x2e/0x1b0
[  498.968701][T15555]  ? netlink_deliver_tap+0x2e/0x1b0
[  498.968741][T15555]  netlink_unicast+0x80f/0x9b0
[  498.968779][T15555]  ? __pfx_netlink_unicast+0x10/0x10
[  498.968809][T15555]  ? netlink_sendmsg+0x650/0xb40
[  498.968836][T15555]  ? skb_put+0x11b/0x210
[  498.968861][T15555]  netlink_sendmsg+0x813/0xb40
[  498.968890][T15555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.968913][T15555]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  498.968956][T15555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.968976][T15555]  sock_sendmsg_nosec+0x112/0x150
[  498.969007][T15555]  ____sys_sendmsg+0x589/0x8c0
[  498.969041][T15555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  498.969075][T15555]  ? import_iovec+0x73/0xa0
[  498.969105][T15555]  ___sys_sendmsg+0x2a5/0x360
[  498.969135][T15555]  ? __pfx____sys_sendmsg+0x10/0x10
[  498.969195][T15555]  ? __fget_files+0x2a/0x420
[  498.969222][T15555]  ? __fget_files+0x3a0/0x420
[  498.969260][T15555]  __x64_sys_sendmsg+0x1bd/0x2a0
[  498.969286][T15555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  498.969320][T15555]  ? __pfx_ksys_write+0x10/0x10
[  498.969353][T15555]  do_syscall_64+0x14d/0xf80
[  498.969372][T15555]  ? trace_irq_disable+0x3b/0x150
[  498.969397][T15555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.969418][T15555]  ? clear_bhb_loop+0x40/0x90
[  498.969445][T15555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.969466][T15555] RIP: 0033:0x7feb9559c799
[  498.969489][T15555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.969507][T15555] RSP: 002b:00007feb96411028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  498.969530][T15555] RAX: ffffffffffffffda RBX: 00007feb95815fa0 RCX: 00007feb9559c799
[  498.969545][T15555] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  498.969559][T15555] RBP: 00007feb96411090 R08: 0000000000000000 R09: 0000000000000000
[  498.969571][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  498.969583][T15555] R13: 00007feb95816038 R14: 00007feb95815fa0 R15: 00007ffcf84126e8
[  498.969617][T15555]  </TASK>
[  499.617344][ T5926] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  499.662647][   T29] audit: type=1326 audit(1773811740.502:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.3309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb9559c799 code=0x0
[  499.758000][ T5926] usb 6-1: device descriptor read/64, error -71
[  499.802310][T15565] netlink: 'syz.1.3311': attribute type 16 has an invalid length.
[  499.867568][ T5926] usb usb6-port1: attempt power cycle
[  499.967374][T13106] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  500.127703][T13106] usb 8-1: Using ep0 maxpacket: 16
[  500.136909][T13106] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  500.152708][T13106] usb 8-1: config 1 interface 0 has no altsetting 0
[  500.162178][T13106] usb 8-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.40
[  500.171780][T13106] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.179893][T13106] usb 8-1: Product: syz
[  500.184092][T13106] usb 8-1: Manufacturer: syz
[  500.188839][T13106] usb 8-1: SerialNumber: syz
[  500.198126][T15560] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  500.217387][ T5926] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  500.239355][ T5926] usb 6-1: device descriptor read/8, error -71
[  500.477419][ T5926] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  500.518056][ T5926] usb 6-1: device descriptor read/8, error -71
[  500.578490][T15562] Bluetooth: hci0: Opcode 0x080f failed: -4
[  500.629134][ T5926] usb usb6-port1: unable to enumerate USB device
[  501.350984][T15601] syzkaller1: entered promiscuous mode
[  501.359114][T15601] syzkaller1: entered allmulticast mode
[  501.402126][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  501.625355][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'.
[  501.788916][ T5842] Bluetooth: hci0: command 0x080f tx timeout
[  502.573668][T15624] openvswitch: netlink: Tunnel attr 32 out of range max 16
[  502.643412][T13106] usbhid 8-1:1.0: can't add hid device: -71
[  502.650091][T13106] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  502.680126][T13106] usb 8-1: USB disconnect, device number 7
[  502.765749][T15627] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3337'.
[  502.801803][T15630] 9p: Bad value for 'wfdno'
[  503.093255][ T5926] usb 6-1: new full-speed USB device number 107 using dummy_hcd
[  503.165886][T15639] netlink: 'syz.7.3341': attribute type 4 has an invalid length.
[  503.224120][T15639] netlink: 'syz.7.3341': attribute type 4 has an invalid length.
[  503.249161][T15639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.280210][ T5926] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  503.301417][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.336002][ T5926] usb 6-1: config 0 has no interface number 0
[  503.352259][ T5926] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  503.394118][ T5926] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8E has invalid maxpacket 32729, setting to 64
[  503.422812][ T5926] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  503.455103][ T5926] usb 6-1: config 0 interface 52 has no altsetting 0
[  503.464232][ T5926] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  503.473728][ T5926] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  503.481956][ T5926] usb 6-1: Manufacturer: syz
[  503.491938][ T5926] usb 6-1: config 0 descriptor??
[  503.506391][ T5926] hub 6-1:0.52: bad descriptor, ignoring hub
[  503.517827][ T5926] hub 6-1:0.52: probe with driver hub failed with error -5
[  503.540503][T15649] netlink: 'syz.1.3345': attribute type 10 has an invalid length.
[  503.550476][T15649] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.558417][T15649] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.582064][T15649] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.589423][T15649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.597112][T15649] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.604472][T15649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.655153][T15649] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  503.700475][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.713569][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.726041][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.737028][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.759595][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.779015][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.791073][ T5926] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input31
[  503.802301][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  503.823216][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'.
[  504.029849][ T5926] usb 6-1: USB disconnect, device number 107
[  504.299454][T15674] netlink: 'syz.6.3353': attribute type 3 has an invalid length.
[  504.357684][ T5926] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  504.527638][ T5926] usb 2-1: Using ep0 maxpacket: 16
[  504.550725][ T5926] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  504.568404][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.584947][ T5926] usb 2-1: Product: syz
[  504.600215][ T5926] usb 2-1: Manufacturer: syz
[  504.613482][ T5926] usb 2-1: SerialNumber: syz
[  504.655459][ T5926] usb 2-1: config 0 descriptor??
[  504.685716][ T5926] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  504.708328][ T5894] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  504.880588][ T5926] usb 2-1: clie_3_5_startup: get config number bad return length: 0
[  504.890590][ T5894] usb 7-1: Using ep0 maxpacket: 32
[  504.899583][ T5926] visor 2-1:0.0: probe with driver visor failed with error -5
[  504.911984][ T5894] usb 7-1: config 0 has an invalid interface number: 146 but max is 0
[  504.953535][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.992643][ T5894] usb 7-1: config 0 has no interface number 0
[  505.029977][ T5894] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  505.063630][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.082234][ T5894] usb 7-1: Product: syz
[  505.096718][ T5894] usb 7-1: Manufacturer: syz
[  505.115265][ T5894] usb 7-1: SerialNumber: syz
[  505.134615][ T5894] usb 7-1: config 0 descriptor??
[  505.158853][ T5894] usb 7-1: expecting 3 got 0 endpoints! Bailing out.
[  505.277366][ T5926] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  505.320429][T15701] loop4: detected capacity change from 0 to 524287936
[  505.448789][ T5926] usb 6-1: Using ep0 maxpacket: 16
[  505.472661][ T5926] usb 6-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config
[  505.505161][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  505.519194][ T5926] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  505.538705][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  505.552521][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.564503][ T5926] usb 6-1: Product: syz
[  505.568886][ T5926] usb 6-1: Manufacturer: syz
[  505.574611][ T5926] usb 6-1: SerialNumber: syz
[  505.780821][  T809] usb 2-1: USB disconnect, device number 7
[  505.825553][ T5926] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  505.842798][ T5926] cdc_ncm 6-1:1.0: bind() failure
[  505.858786][ T5926] usb 6-1: USB disconnect, device number 108
[  506.147121][T15713] ./cgroup.net/devices.allow: Can't lookup blockdev
[  506.287393][  T809] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  506.476478][  T809] usb 2-1: config 0 interface 0 has no altsetting 0
[  506.484515][  T809] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  506.494044][  T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.517139][  T809] usb 2-1: config 0 descriptor??
[  506.823862][  T809]  (null): keene_cmd_main failed (-71)
[  506.864993][  T809] video4linux radio48: keene_cmd_main failed (-71)
[  506.887750][T13106] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  506.887853][  T809] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  506.920600][ T5926] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  506.931532][T15735] __nla_validate_parse: 42 callbacks suppressed
[  506.931588][T15735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3376'.
[  506.954301][  T809] usb 2-1: USB disconnect, device number 8
[  507.033605][ T5936] usb 7-1: USB disconnect, device number 93
[  507.069848][T13106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.081521][T13106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.092682][T13106] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  507.107560][ T5926] usb 8-1: Using ep0 maxpacket: 32
[  507.115456][T13106] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  507.122362][ T5926] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  507.125864][T13106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.145157][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.156508][T13106] usb 6-1: config 0 descriptor??
[  507.170972][ T5926] usb 8-1: config 0 descriptor??
[  507.191498][ T5926] gspca_main: sunplus-2.14.0 probing 041e:400b
[  507.215812][T15739] binder: 15738:15739 ioctl c0306201 2000000004c0 returned -14
[  507.229606][T15739] FAULT_INJECTION: forcing a failure.
[  507.229606][T15739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.243053][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.1.3378 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  507.243087][T15739] Tainted: [L]=SOFTLOCKUP
[  507.243093][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  507.243103][T15739] Call Trace:
[  507.243110][T15739]  <TASK>
[  507.243116][T15739]  dump_stack_lvl+0xe8/0x150
[  507.243167][T15739]  should_fail_ex+0x412/0x560
[  507.243196][T15739]  _copy_from_user+0x2d/0xb0
[  507.243222][T15739]  binder_ioctl_write_read+0x16a/0xa660
[  507.243246][T15739]  ? is_bpf_text_address+0x26/0x2b0
[  507.243320][T15739]  ? is_bpf_text_address+0x292/0x2b0
[  507.243348][T15739]  ? is_bpf_text_address+0x26/0x2b0
[  507.243377][T15739]  ? kernel_text_address+0xa5/0xe0
[  507.243405][T15739]  ? __kernel_text_address+0xd/0x30
[  507.243423][T15739]  ? unwind_get_return_address+0x4d/0x90
[  507.243438][T15739]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  507.243479][T15739]  ? arch_stack_walk+0xfb/0x150
[  507.243511][T15739]  ? stack_trace_save+0xa9/0x100
[  507.243535][T15739]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  507.243556][T15739]  ? kasan_save_free_info+0x46/0x50
[  507.243578][T15739]  ? stack_depot_save_flags+0x33/0x810
[  507.243595][T15739]  ? format_decode+0x90/0xe10
[  507.243634][T15739]  ? kasan_save_track+0x4f/0x80
[  507.243662][T15739]  ? kasan_save_track+0x3e/0x80
[  507.243688][T15739]  ? kasan_save_free_info+0x46/0x50
[  507.243714][T15739]  ? __kasan_slab_free+0x5c/0x80
[  507.243730][T15739]  ? __lock_acquire+0x6b5/0x2cf0
[  507.243773][T15739]  ? binder_debug+0x155/0x1d0
[  507.243798][T15739]  ? __pfx_binder_debug+0x10/0x10
[  507.243815][T15739]  ? do_raw_spin_lock+0x12b/0x2f0
[  507.243858][T15739]  ? _raw_spin_unlock+0x28/0x50
[  507.243892][T15739]  ? binder_get_thread+0x177/0x6d0
[  507.243928][T15739]  binder_ioctl+0x423/0x1b70
[  507.243948][T15739]  ? tomoyo_path_number_perm+0x219/0x630
[  507.243976][T15739]  ? tomoyo_path_number_perm+0x219/0x630
[  507.244006][T15739]  ? do_vfs_ioctl+0x1166/0x1530
[  507.244027][T15739]  ? __pfx_binder_ioctl+0x10/0x10
[  507.244045][T15739]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  507.244095][T15739]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  507.244136][T15739]  ? __fget_files+0x2a/0x420
[  507.244167][T15739]  ? __fget_files+0x2a/0x420
[  507.244186][T15739]  ? __fget_files+0x3a0/0x420
[  507.244205][T15739]  ? __fget_files+0x2a/0x420
[  507.244240][T15739]  ? bpf_lsm_file_ioctl+0x9/0x20
[  507.244262][T15739]  ? __pfx_binder_ioctl+0x10/0x10
[  507.244281][T15739]  __se_sys_ioctl+0xfc/0x170
[  507.244304][T15739]  do_syscall_64+0x14d/0xf80
[  507.244325][T15739]  ? trace_irq_disable+0x3b/0x150
[  507.244342][T15739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.244358][T15739]  ? clear_bhb_loop+0x40/0x90
[  507.244387][T15739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.244409][T15739] RIP: 0033:0x7f148ff9c799
[  507.244429][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.244445][T15739] RSP: 002b:00007f1490d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  507.244466][T15739] RAX: ffffffffffffffda RBX: 00007f1490215fa0 RCX: 00007f148ff9c799
[  507.244485][T15739] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  507.244495][T15739] RBP: 00007f1490d96090 R08: 0000000000000000 R09: 0000000000000000
[  507.244504][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.244513][T15739] R13: 00007f1490216038 R14: 00007f1490215fa0 R15: 00007ffc9ccdc318
[  507.244549][T15739]  </TASK>
[  507.244580][T15739] binder: 15738:15739 ioctl c0306201 2000000002c0 returned -14
[  507.640718][T13106] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  507.873764][T15744] random: crng reseeded on system resumption
[  507.923615][T15728] kvm: pic: single mode not supported
[  508.086820][T15729] 9pnet: p9_errstr2errno: server reported unknown error ./file0
[  508.377680][ T5926] gspca_sunplus: reg_r err -110
[  508.382879][ T5926] sunplus 8-1:0.0: probe with driver sunplus failed with error -110
[  508.519608][T15750] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3381'.
[  508.859143][T15756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3384'.
[  509.007369][ T5936] usb 6-1: reset high-speed USB device number 109 using dummy_hcd
[  509.540116][T15762] xt_policy: too many policy elements
[  509.592460][T13106] usb 8-1: USB disconnect, device number 8
[  509.779767][T15766] binder: 15765:15766 ioctl c0306201 2000000004c0 returned -14
[  509.788573][T15766] FAULT_INJECTION: forcing a failure.
[  509.788573][T15766] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  509.805097][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.7.3387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  509.805130][T15766] Tainted: [L]=SOFTLOCKUP
[  509.805139][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  509.805152][T15766] Call Trace:
[  509.805160][T15766]  <TASK>
[  509.805170][T15766]  dump_stack_lvl+0xe8/0x150
[  509.805214][T15766]  should_fail_ex+0x412/0x560
[  509.805244][T15766]  prepare_alloc_pages+0x22a/0x650
[  509.805276][T15766]  __alloc_frozen_pages_noprof+0x119/0x3d0
[  509.805304][T15766]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  509.805332][T15766]  ? __pfx_policy_nodemask+0x10/0x10
[  509.805367][T15766]  alloc_pages_mpol+0x235/0x490
[  509.805394][T15766]  alloc_pages_noprof+0xac/0x2a0
[  509.805418][T15766]  pte_alloc_one+0x22/0x370
[  509.805446][T15766]  __pte_alloc+0x25/0x1a0
[  509.805493][T15766]  ? walk_to_pmd+0x2b8/0x450
[  509.805520][T15766]  insert_page+0x3cc/0x440
[  509.805552][T15766]  ? __pfx_insert_page+0x10/0x10
[  509.805576][T15766]  ? __kmalloc_cache_noprof+0x31c/0x660
[  509.805607][T15766]  ? vm_insert_page+0x210/0x370
[  509.805630][T15766]  ? binder_alloc_new_buf+0x1e5d/0x3020
[  509.805667][T15766]  binder_alloc_new_buf+0x1fc3/0x3020
[  509.805722][T15766]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  509.805760][T15766]  ? __kmalloc_cache_noprof+0x31c/0x660
[  509.805801][T15766]  binder_transaction+0x28ce/0x70b0
[  509.805823][T15766]  ? arch_stack_walk+0xfb/0x150
[  509.805871][T15766]  ? ima_match_policy+0x2146/0x21e0
[  509.805906][T15766]  ? __pfx_binder_transaction+0x10/0x10
[  509.805929][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.805965][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.806002][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.806044][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.806078][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.806106][T15766]  ? binder_debug+0x155/0x1d0
[  509.806153][T15766]  binder_ioctl_write_read+0xb5c/0xa660
[  509.806196][T15766]  ? unwind_get_return_address+0x4d/0x90
[  509.806219][T15766]  ? arch_stack_walk+0xfb/0x150
[  509.806251][T15766]  ? stack_trace_save+0xa9/0x100
[  509.806276][T15766]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  509.806294][T15766]  ? kasan_save_free_info+0x46/0x50
[  509.806323][T15766]  ? stack_depot_save_flags+0x33/0x810
[  509.806348][T15766]  ? format_decode+0x90/0xe10
[  509.806377][T15766]  ? kasan_save_track+0x4f/0x80
[  509.806408][T15766]  ? kasan_save_track+0x3e/0x80
[  509.806435][T15766]  ? kasan_save_free_info+0x46/0x50
[  509.806459][T15766]  ? __kasan_slab_free+0x5c/0x80
[  509.806480][T15766]  ? __lock_acquire+0x6b5/0x2cf0
[  509.806533][T15766]  ? __pfx_binder_debug+0x10/0x10
[  509.806550][T15766]  ? do_raw_spin_lock+0x12b/0x2f0
[  509.806591][T15766]  ? _raw_spin_unlock+0x28/0x50
[  509.806618][T15766]  ? binder_get_thread+0x177/0x6d0
[  509.806655][T15766]  binder_ioctl+0x423/0x1b70
[  509.806676][T15766]  ? tomoyo_path_number_perm+0x219/0x630
[  509.806706][T15766]  ? tomoyo_path_number_perm+0x219/0x630
[  509.806736][T15766]  ? do_vfs_ioctl+0x1166/0x1530
[  509.806765][T15766]  ? __pfx_binder_ioctl+0x10/0x10
[  509.806785][T15766]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  509.806820][T15766]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  509.806862][T15766]  ? __fget_files+0x2a/0x420
[  509.806892][T15766]  ? __fget_files+0x2a/0x420
[  509.806919][T15766]  ? __fget_files+0x3a0/0x420
[  509.806944][T15766]  ? __fget_files+0x2a/0x420
[  509.806974][T15766]  ? bpf_lsm_file_ioctl+0x9/0x20
[  509.806996][T15766]  ? __pfx_binder_ioctl+0x10/0x10
[  509.807016][T15766]  __se_sys_ioctl+0xfc/0x170
[  509.807039][T15766]  do_syscall_64+0x14d/0xf80
[  509.807058][T15766]  ? trace_irq_disable+0x3b/0x150
[  509.807081][T15766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.807103][T15766]  ? clear_bhb_loop+0x40/0x90
[  509.807129][T15766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.807150][T15766] RIP: 0033:0x7feb9559c799
[  509.807171][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.807189][T15766] RSP: 002b:00007feb96411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  509.807211][T15766] RAX: ffffffffffffffda RBX: 00007feb95815fa0 RCX: 00007feb9559c799
[  509.807225][T15766] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  509.807238][T15766] RBP: 00007feb96411090 R08: 0000000000000000 R09: 0000000000000000
[  509.807250][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  509.807262][T15766] R13: 00007feb95816038 R14: 00007feb95815fa0 R15: 00007ffcf84126e8
[  509.807293][T15766]  </TASK>
[  510.266732][T15766] binder_alloc: 15765: binder_install_single_page failed to insert page at offset 0 with -12
[  510.680416][    T9] usb 6-1: USB disconnect, device number 109
[  510.708184][   T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  510.877298][   T44] usb 2-1: Using ep0 maxpacket: 32
[  510.892664][   T44] usb 2-1: unable to get BOS descriptor or descriptor too short
[  510.915225][   T44] usb 2-1: language id specifier not provided by device, defaulting to English
[  511.074717][   T44] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40
[  511.218249][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.226315][   T44] usb 2-1: Product: ꭪�ᘛҌl€
[  511.247950][   T44] usb 2-1: SerialNumber: syz
[  511.260533][   T44] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  511.479882][   T44] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  511.526067][   T44] snd_usb_pod 2-1:1.0: Line 6 BassPODxt found
[  511.538140][   T44] usb 2-1: selecting invalid altsetting 5
[  511.545693][   T44] snd_usb_pod 2-1:1.0: set_interface failed
[  511.552305][   T44] snd_usb_pod 2-1:1.0: Line 6 BassPODxt now disconnected
[  511.561106][   T44] snd_usb_pod 2-1:1.0: probe with driver snd_usb_pod failed with error -22
[  511.582304][   T44] snd_usb_pod 2-1:1.1: Line 6 BassPODxt found
[  511.588673][   T44] usb 2-1: selecting invalid altsetting 5
[  511.594547][   T44] snd_usb_pod 2-1:1.1: set_interface failed
[  511.601884][   T44] snd_usb_pod 2-1:1.1: Line 6 BassPODxt now disconnected
[  511.609552][   T44] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  511.648554][T15802] binder: BINDER_SET_CONTEXT_MGR already set
[  511.654327][   T44] snd_usb_pod 2-1:1.2: Line 6 BassPODxt found
[  511.661044][   T44] usb 2-1: selecting invalid altsetting 5
[  511.666935][   T44] snd_usb_pod 2-1:1.2: set_interface failed
[  511.677468][T15802] binder: 15801:15802 ioctl 4018620d 200000004a80 returned -16
[  511.695635][T15802] binder: 15801:15802 ioctl c0306201 2000000004c0 returned -14
[  511.704713][T15802] FAULT_INJECTION: forcing a failure.
[  511.704713][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.709111][   T44] snd_usb_pod 2-1:1.2: Line 6 BassPODxt now disconnected
[  511.719808][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.7.3399 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.719891][T15802] Tainted: [L]=SOFTLOCKUP
[  511.719912][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  511.719952][T15802] Call Trace:
[  511.719973][T15802]  <TASK>
[  511.719995][T15802]  dump_stack_lvl+0xe8/0x150
[  511.720096][T15802]  should_fail_ex+0x412/0x560
[  511.720177][T15802]  _copy_from_user+0x2d/0xb0
[  511.720236][T15802]  binder_ioctl_write_read+0x16a/0xa660
[  511.720304][T15802]  ? is_bpf_text_address+0x26/0x2b0
[  511.720390][T15802]  ? is_bpf_text_address+0x292/0x2b0
[  511.720463][T15802]  ? is_bpf_text_address+0x26/0x2b0
[  511.720538][T15802]  ? kernel_text_address+0xa5/0xe0
[  511.720618][T15802]  ? __kernel_text_address+0xd/0x30
[  511.720689][T15802]  ? unwind_get_return_address+0x4d/0x90
[  511.720751][T15802]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  511.720815][T15802]  ? arch_stack_walk+0xfb/0x150
[  511.720912][T15802]  ? stack_trace_save+0xa9/0x100
[  511.720994][T15802]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  511.721052][T15802]  ? kasan_save_free_info+0x46/0x50
[  511.721125][T15802]  ? stack_depot_save_flags+0x33/0x810
[  511.721181][T15802]  ? format_decode+0x90/0xe10
[  511.721236][T15802]  ? kasan_save_track+0x4f/0x80
[  511.721307][T15802]  ? kasan_save_track+0x3e/0x80
[  511.721378][T15802]  ? kasan_save_free_info+0x46/0x50
[  511.721439][T15802]  ? __kasan_slab_free+0x5c/0x80
[  511.721500][T15802]  ? __lock_acquire+0x6b5/0x2cf0
[  511.721614][T15802]  ? binder_debug+0x155/0x1d0
[  511.721676][T15802]  ? __pfx_binder_debug+0x10/0x10
[  511.721735][T15802]  ? do_raw_spin_lock+0x12b/0x2f0
[  511.721836][T15802]  ? _raw_spin_unlock+0x28/0x50
[  511.721906][T15802]  ? binder_get_thread+0x177/0x6d0
[  511.722004][T15802]  binder_ioctl+0x423/0x1b70
[  511.722056][T15802]  ? tomoyo_path_number_perm+0x219/0x630
[  511.722127][T15802]  ? tomoyo_path_number_perm+0x219/0x630
[  511.722195][T15802]  ? do_vfs_ioctl+0x1166/0x1530
[  511.722253][T15802]  ? __pfx_binder_ioctl+0x10/0x10
[  511.722318][T15802]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  511.722431][T15802]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  511.722534][T15802]  ? __fget_files+0x2a/0x420
[  511.722613][T15802]  ? __fget_files+0x2a/0x420
[  511.722676][T15802]  ? __fget_files+0x3a0/0x420
[  511.722743][T15802]  ? __fget_files+0x2a/0x420
[  511.722823][T15802]  ? bpf_lsm_file_ioctl+0x9/0x20
[  511.722875][T15802]  ? __pfx_binder_ioctl+0x10/0x10
[  511.722928][T15802]  __se_sys_ioctl+0xfc/0x170
[  511.722990][T15802]  do_syscall_64+0x14d/0xf80
[  511.723041][T15802]  ? trace_irq_disable+0x3b/0x150
[  511.723103][T15802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.723163][T15802]  ? clear_bhb_loop+0x40/0x90
[  511.723233][T15802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.723285][T15802] RIP: 0033:0x7feb9559c799
[  511.723345][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.723388][T15802] RSP: 002b:00007feb96411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  511.723450][T15802] RAX: ffffffffffffffda RBX: 00007feb95815fa0 RCX: 00007feb9559c799
[  511.723490][T15802] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  511.723522][T15802] RBP: 00007feb96411090 R08: 0000000000000000 R09: 0000000000000000
[  511.723554][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.723585][T15802] R13: 00007feb95816038 R14: 00007feb95815fa0 R15: 00007ffcf84126e8
[  511.723675][T15802]  </TASK>
[  511.723809][T15802] binder: 15801:15802 ioctl c0306201 2000000001c0 returned -14
[  511.757725][ T5926] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  512.088793][   T44] snd_usb_pod 2-1:1.2: probe with driver snd_usb_pod failed with error -22
[  512.160416][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  512.179643][T15798] syzkaller1: entered promiscuous mode
[  512.189195][T15798] syzkaller1: entered allmulticast mode
[  512.196341][T15805] binder: 15804:15805 ioctl c0306201 2000000004c0 returned -14
[  512.361410][ T5926] usb 7-1: Using ep0 maxpacket: 8
[  512.371854][ T5926] usb 7-1: unable to get BOS descriptor or descriptor too short
[  512.381514][ T5926] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  512.392307][ T5926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  512.410533][ T5926] usb 7-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40
[  512.425113][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.442199][ T5926] usb 7-1: Product: syz
[  512.446615][ T5926] usb 7-1: Manufacturer: syz
[  512.451450][ T5926] usb 7-1: SerialNumber: syz
[  512.470526][ T5926] usb 7-1: 0:1 : does not exist
[  512.475536][ T5926] usb 7-1: 0:2 : does not exist
[  512.577377][    T9] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  512.604889][T15815] FAULT_INJECTION: forcing a failure.
[  512.604889][T15815] name failslab, interval 1, probability 0, space 0, times 0
[  512.621420][T15815] CPU: 1 UID: 0 PID: 15815 Comm: syz.7.3405 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  512.621454][T15815] Tainted: [L]=SOFTLOCKUP
[  512.621462][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  512.621475][T15815] Call Trace:
[  512.621485][T15815]  <TASK>
[  512.621493][T15815]  dump_stack_lvl+0xe8/0x150
[  512.621531][T15815]  should_fail_ex+0x412/0x560
[  512.621560][T15815]  should_failslab+0xa8/0x100
[  512.621586][T15815]  __kmalloc_noprof+0xe8/0x760
[  512.621617][T15815]  ? __kasan_kmalloc+0x93/0xb0
[  512.621636][T15815]  ? nla_strdup+0x9d/0x140
[  512.621662][T15815]  ? __kmalloc_cache_noprof+0x31c/0x660
[  512.621698][T15815]  nla_strdup+0x9d/0x140
[  512.621727][T15815]  nf_tables_newtable+0x491/0x1910
[  512.621750][T15815]  ? nfnetlink_subsys_unregister+0x161/0x1b0
[  512.621799][T15815]  nfnetlink_rcv+0x123e/0x27b0
[  512.621863][T15815]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  512.621903][T15815]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  512.621931][T15815]  ? ref_tracker_free+0x693/0x840
[  512.621956][T15815]  ? netlink_unicast+0x7e3/0x9b0
[  512.621983][T15815]  ? netlink_sendmsg+0x813/0xb40
[  512.622030][T15815]  ? __netlink_deliver_tap+0x866/0x8b0
[  512.622062][T15815]  ? netlink_deliver_tap+0x2e/0x1b0
[  512.622118][T15815]  netlink_unicast+0x80f/0x9b0
[  512.622155][T15815]  ? __pfx_netlink_unicast+0x10/0x10
[  512.622186][T15815]  ? netlink_sendmsg+0x650/0xb40
[  512.622203][T15815]  ? skb_put+0x11b/0x210
[  512.622228][T15815]  netlink_sendmsg+0x813/0xb40
[  512.622258][T15815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.622280][T15815]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  512.622323][T15815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.622340][T15815]  sock_sendmsg_nosec+0x112/0x150
[  512.622373][T15815]  ____sys_sendmsg+0x589/0x8c0
[  512.622406][T15815]  ? __pfx_____sys_sendmsg+0x10/0x10
[  512.622438][T15815]  ? import_iovec+0x73/0xa0
[  512.622469][T15815]  ___sys_sendmsg+0x2a5/0x360
[  512.622498][T15815]  ? __pfx____sys_sendmsg+0x10/0x10
[  512.622556][T15815]  ? __fget_files+0x2a/0x420
[  512.622583][T15815]  ? __fget_files+0x3a0/0x420
[  512.622621][T15815]  __x64_sys_sendmsg+0x1bd/0x2a0
[  512.622648][T15815]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  512.622682][T15815]  ? __pfx_ksys_write+0x10/0x10
[  512.622713][T15815]  do_syscall_64+0x14d/0xf80
[  512.622732][T15815]  ? trace_irq_disable+0x3b/0x150
[  512.622757][T15815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.622778][T15815]  ? clear_bhb_loop+0x40/0x90
[  512.622804][T15815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.622825][T15815] RIP: 0033:0x7feb9559c799
[  512.622845][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.622862][T15815] RSP: 002b:00007feb96411028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.622884][T15815] RAX: ffffffffffffffda RBX: 00007feb95815fa0 RCX: 00007feb9559c799
[  512.622899][T15815] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003
[  512.622913][T15815] RBP: 00007feb96411090 R08: 0000000000000000 R09: 0000000000000000
[  512.622926][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.622937][T15815] R13: 00007feb95816038 R14: 00007feb95815fa0 R15: 00007ffcf84126e8
[  512.622970][T15815]  </TASK>
[  512.755224][    T9] usb 6-1: Using ep0 maxpacket: 16
[  512.965343][    T9] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[  512.972779][ T5842] Bluetooth: hci4: SCO packet for unknown connection handle 172
[  512.973594][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.991674][    T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  513.003444][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.015338][    T9] usb 6-1: config 0 descriptor??
[  513.024446][    T9] pxrc 6-1:0.0: Could not find endpoint
[  513.174641][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3407'.
[  513.208410][T15823] openvswitch: netlink: Flow actions attr not present in new flow.
[  513.231234][ T5894] usb 6-1: USB disconnect, device number 110
[  513.280873][ T5936] usb 7-1: USB disconnect, device number 94
[  513.421247][ T5894] usb 2-1: USB disconnect, device number 9
[  513.521843][T15830] binder: 15829:15830 ioctl c0306201 2000000004c0 returned -14
[  513.616375][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3411'.
[  513.633537][T15836] loop2: detected capacity change from 0 to 7
[  513.642529][T15836] Dev loop2: unable to read RDB block 7
[  513.648863][T15836]  loop2: unable to read partition table
[  513.654972][T15836] loop2: partition table beyond EOD, truncated
[  513.663252][T15836] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  513.696720][T15836] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  513.704913][T15836] overlayfs: failed to set xattr on upper
[  513.715781][ T5842] Bluetooth: hci0: command 0x080f tx timeout
[  513.726280][T15836] overlayfs: ...falling back to redirect_dir=nofollow.
[  513.734631][T15836] overlayfs: ...falling back to uuid=null.
[  513.740855][T15836] overlayfs: conflicting lowerdir path
[  513.917562][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  514.088999][ T5894] usb 2-1: Using ep0 maxpacket: 32
[  514.111112][ T5894] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  514.120349][ T5894] usb 2-1: config 0 has no interface number 0
[  514.129940][ T5894] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  514.152987][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.168895][ T5894] usb 2-1: Product: syz
[  514.173646][ T5894] usb 2-1: Manufacturer: syz
[  514.181034][ T5894] usb 2-1: SerialNumber: syz
[  514.192565][ T5894] usb 2-1: config 0 descriptor??
[  514.205520][ T5894] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  514.260095][T15858] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.3419'.
[  514.301609][T15863] loop4: detected capacity change from 0 to 1
[  514.350167][T15865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.400191][T15863] Dev loop4: unable to read RDB block 1
[  514.411146][ T5894] usb 2-1: qt2_attach - failed to power on unit: -71
[  514.420029][T15863]  loop4: unable to read partition table
[  514.426818][ T5894] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  514.436130][T15863] loop4: partition table beyond EOD, truncated
[  514.448971][T15863] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  514.466050][ T5894] usb 2-1: USB disconnect, device number 10
[  514.543598][T15869] FAULT_INJECTION: forcing a failure.
[  514.543598][T15869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.558610][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.6.3423 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.558644][T15869] Tainted: [L]=SOFTLOCKUP
[  514.558653][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  514.558665][T15869] Call Trace:
[  514.558674][T15869]  <TASK>
[  514.558683][T15869]  dump_stack_lvl+0xe8/0x150
[  514.558720][T15869]  should_fail_ex+0x412/0x560
[  514.558749][T15869]  _copy_to_user+0x31/0xb0
[  514.558777][T15869]  snd_pcm_sw_params_user+0x123/0x1b0
[  514.558803][T15869]  ? __pfx_snd_pcm_sw_params_user+0x10/0x10
[  514.558848][T15869]  ? snd_pcm_common_ioctl+0x6d2/0xb70
[  514.558871][T15869]  ? __pfx_snd_pcm_ioctl+0x10/0x10
[  514.558899][T15869]  snd_pcm_ioctl+0x8b/0xb0
[  514.558927][T15869]  __se_sys_ioctl+0xfc/0x170
[  514.558951][T15869]  do_syscall_64+0x14d/0xf80
[  514.558971][T15869]  ? trace_irq_disable+0x3b/0x150
[  514.559004][T15869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.559026][T15869]  ? clear_bhb_loop+0x40/0x90
[  514.559051][T15869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.559071][T15869] RIP: 0033:0x7fc98019c799
[  514.559092][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.559109][T15869] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.559131][T15869] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  514.559146][T15869] RDX: 0000200000000340 RSI: 00000000c0884113 RDI: 0000000000000005
[  514.559160][T15869] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  514.559173][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.559185][T15869] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  514.559217][T15869]  </TASK>
[  514.964801][T15881] netlink: 'syz.7.3428': attribute type 3 has an invalid length.
[  514.972763][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3428'.
[  515.291363][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3434'.
[  515.369004][ T5926] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  515.472948][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3437'.
[  515.486098][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3437'.
[  515.537454][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  515.545758][ T5926] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  515.567321][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.588975][ T5926] usb 6-1: config 0 has no interface number 0
[  515.608940][ T5926] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  515.623945][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.643468][ T5926] usb 6-1: Product: syz
[  515.656907][ T5926] usb 6-1: Manufacturer: syz
[  515.663907][ T5926] usb 6-1: SerialNumber: syz
[  515.676903][ T5926] usb 6-1: config 0 descriptor??
[  515.691109][ T5926] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  515.701058][ T5926] cx231xx 6-1:0.1: Not found matching IAD interface
[  515.866709][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3444'.
[  515.897079][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.919403][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.956999][ T5926] usb 6-1: USB disconnect, device number 111
[  516.330864][T15943] overlayfs: workdir and upperdir must reside under the same mount
[  516.375181][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3452'.
[  516.402338][T15943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  516.455056][T15948] binder: 15947:15948 ioctl c0306201 2000000004c0 returned -14
[  516.616440][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3456'.
[  516.654863][ T5894] kernel write not supported for file /input/event2 (pid: 5894 comm: kworker/0:4)
[  516.687436][T15956] binder: 15955:15956 ioctl c0306201 2000000004c0 returned -14
[  516.699557][T15954] QAT: failed to copy from user cfg_data.
[  516.705811][T15958] netlink: 'syz.7.3459': attribute type 41 has an invalid length.
[  516.741607][T15958] syzkaller1: entered promiscuous mode
[  516.763913][T15958] syzkaller1: entered allmulticast mode
[  517.132259][T15973] binder: 15972:15973 ioctl c0306201 2000000004c0 returned -14
[  517.156609][T15973] FAULT_INJECTION: forcing a failure.
[  517.156609][T15973] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.170279][T15973] CPU: 1 UID: 0 PID: 15973 Comm: syz.6.3465 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  517.170316][T15973] Tainted: [L]=SOFTLOCKUP
[  517.170324][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  517.170337][T15973] Call Trace:
[  517.170346][T15973]  <TASK>
[  517.170355][T15973]  dump_stack_lvl+0xe8/0x150
[  517.170391][T15973]  should_fail_ex+0x412/0x560
[  517.170420][T15973]  _copy_to_user+0x31/0xb0
[  517.170447][T15973]  binder_ioctl_write_read+0x9abf/0xa660
[  517.170483][T15973]  ? kernel_text_address+0xa5/0xe0
[  517.170514][T15973]  ? arch_stack_walk+0xfb/0x150
[  517.170545][T15973]  ? stack_trace_save+0xa9/0x100
[  517.170570][T15973]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  517.170589][T15973]  ? kasan_save_free_info+0x46/0x50
[  517.170616][T15973]  ? __pfx_autoremove_wake_function+0x10/0x10
[  517.170644][T15973]  ? format_decode+0x90/0xe10
[  517.170672][T15973]  ? kasan_save_track+0x4f/0x80
[  517.170701][T15973]  ? kasan_save_track+0x3e/0x80
[  517.170729][T15973]  ? kasan_save_free_info+0x46/0x50
[  517.170748][T15973]  ? __kasan_slab_free+0x5c/0x80
[  517.170778][T15973]  ? binder_debug+0x155/0x1d0
[  517.170798][T15973]  ? __pfx_binder_debug+0x10/0x10
[  517.170812][T15973]  ? do_raw_spin_lock+0x12b/0x2f0
[  517.170844][T15973]  ? _raw_spin_unlock+0x28/0x50
[  517.170865][T15973]  ? binder_get_thread+0x177/0x6d0
[  517.170894][T15973]  binder_ioctl+0x423/0x1b70
[  517.170909][T15973]  ? tomoyo_path_number_perm+0x219/0x630
[  517.170932][T15973]  ? tomoyo_path_number_perm+0x219/0x630
[  517.170955][T15973]  ? do_vfs_ioctl+0x1166/0x1530
[  517.170972][T15973]  ? __pfx_binder_ioctl+0x10/0x10
[  517.170987][T15973]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  517.171013][T15973]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  517.171056][T15973]  ? __fget_files+0x2a/0x420
[  517.171080][T15973]  ? __fget_files+0x2a/0x420
[  517.171101][T15973]  ? __fget_files+0x3a0/0x420
[  517.171122][T15973]  ? __fget_files+0x2a/0x420
[  517.171147][T15973]  ? bpf_lsm_file_ioctl+0x9/0x20
[  517.171163][T15973]  ? __pfx_binder_ioctl+0x10/0x10
[  517.171179][T15973]  __se_sys_ioctl+0xfc/0x170
[  517.171199][T15973]  do_syscall_64+0x14d/0xf80
[  517.171224][T15973]  ? trace_irq_disable+0x3b/0x150
[  517.171244][T15973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.171260][T15973]  ? clear_bhb_loop+0x40/0x90
[  517.171279][T15973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.171296][T15973] RIP: 0033:0x7fc98019c799
[  517.171316][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.171330][T15973] RSP: 002b:00007fc980ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  517.171347][T15973] RAX: ffffffffffffffda RBX: 00007fc980415fa0 RCX: 00007fc98019c799
[  517.171358][T15973] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  517.171368][T15973] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  517.171378][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.171388][T15973] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  517.171412][T15973]  </TASK>
[  517.171527][T15973] binder: 15972:15973 ioctl c0306201 2000000002c0 returned -14
[  517.427767][    T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  517.692583][    T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  517.717314][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.735874][    T9] usb 6-1: Product: syz
[  517.746015][    T9] usb 6-1: Manufacturer: syz
[  517.757408][    T9] usb 6-1: SerialNumber: syz
[  517.773848][    T9] usb 6-1: config 0 descriptor??
[  517.794703][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  518.047546][  T809] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[  518.048235][T15994] kvm: requested 130742 ns i8254 timer period limited to 200000 ns
[  518.066686][T15994] kvm: requested 196952 ns i8254 timer period limited to 200000 ns
[  518.080565][T15994] kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[  518.090025][T15994] kvm: requested 34361 ns i8254 timer period limited to 200000 ns
[  518.103247][T15994] nbd: must specify a size in bytes for the device
[  518.198953][T16000] netlink: 'syz.1.3476': attribute type 10 has an invalid length.
[  518.210128][  T809] usb 7-1: Using ep0 maxpacket: 8
[  518.229620][ T5926] usb 6-1: USB disconnect, device number 112
[  518.242139][  T809] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  518.260371][  T809] usb 7-1: config 0 has no interface number 0
[  518.284896][  T809] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  518.294604][  T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.304779][  T809] usb 7-1: Product: syz
[  518.309855][  T809] usb 7-1: Manufacturer: syz
[  518.314632][  T809] usb 7-1: SerialNumber: syz
[  518.325838][  T809] usb 7-1: config 0 descriptor??
[  518.545262][  T809] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  518.559484][  T809] uvcvideo 7-1:0.31: Failed to initialize entity for entity 32774
[  518.578429][  T809] uvcvideo 7-1:0.31: Failed to register entities (-22).
[  518.723551][  T809] IPVS: starting estimator thread 0...
[  518.763500][  T809] usb 7-1: USB disconnect, device number 95
[  518.868059][T16008] IPVS: using max 27 ests per chain, 64800 per kthread
[  519.057127][T16020] binder: 16019:16020 ioctl c0306201 2000000004c0 returned -14
[  519.076215][T16020] FAULT_INJECTION: forcing a failure.
[  519.076215][T16020] name failslab, interval 1, probability 0, space 0, times 0
[  519.090984][T16020] CPU: 1 UID: 0 PID: 16020 Comm: syz.5.3484 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  519.091017][T16020] Tainted: [L]=SOFTLOCKUP
[  519.091025][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  519.091037][T16020] Call Trace:
[  519.091045][T16020]  <TASK>
[  519.091054][T16020]  dump_stack_lvl+0xe8/0x150
[  519.091093][T16020]  should_fail_ex+0x412/0x560
[  519.091122][T16020]  should_failslab+0xa8/0x100
[  519.091145][T16020]  ? ptlock_alloc+0x20/0x70
[  519.091173][T16020]  kmem_cache_alloc_noprof+0x87/0x650
[  519.091203][T16020]  ? alloc_pages_mpol+0x3c0/0x490
[  519.091234][T16020]  ptlock_alloc+0x20/0x70
[  519.091270][T16020]  pte_alloc_one+0x7a/0x370
[  519.091295][T16020]  __pte_alloc+0x25/0x1a0
[  519.091315][T16020]  ? walk_to_pmd+0x2b8/0x450
[  519.091341][T16020]  insert_page+0x3cc/0x440
[  519.091367][T16020]  ? __pfx_insert_page+0x10/0x10
[  519.091390][T16020]  ? __kmalloc_cache_noprof+0x31c/0x660
[  519.091421][T16020]  ? vm_insert_page+0x210/0x370
[  519.091444][T16020]  ? binder_alloc_new_buf+0x1e5d/0x3020
[  519.091481][T16020]  binder_alloc_new_buf+0x1fc3/0x3020
[  519.091537][T16020]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  519.091567][T16020]  ? __kmalloc_cache_noprof+0x31c/0x660
[  519.091608][T16020]  binder_transaction+0x28ce/0x70b0
[  519.091630][T16020]  ? arch_stack_walk+0xfb/0x150
[  519.091679][T16020]  ? ima_match_policy+0x2146/0x21e0
[  519.091720][T16020]  ? __pfx_binder_transaction+0x10/0x10
[  519.091742][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.091779][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.091818][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.091860][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.091893][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.091923][T16020]  ? binder_debug+0x155/0x1d0
[  519.091971][T16020]  binder_ioctl_write_read+0xb5c/0xa660
[  519.092013][T16020]  ? unwind_get_return_address+0x4d/0x90
[  519.092036][T16020]  ? arch_stack_walk+0xfb/0x150
[  519.092069][T16020]  ? stack_trace_save+0xa9/0x100
[  519.092095][T16020]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  519.092114][T16020]  ? kasan_save_free_info+0x46/0x50
[  519.092144][T16020]  ? stack_depot_save_flags+0x33/0x810
[  519.092170][T16020]  ? format_decode+0x90/0xe10
[  519.092200][T16020]  ? kasan_save_track+0x4f/0x80
[  519.092229][T16020]  ? kasan_save_track+0x3e/0x80
[  519.092267][T16020]  ? kasan_save_free_info+0x46/0x50
[  519.092290][T16020]  ? __kasan_slab_free+0x5c/0x80
[  519.092313][T16020]  ? __lock_acquire+0x6b5/0x2cf0
[  519.092366][T16020]  ? __pfx_binder_debug+0x10/0x10
[  519.092384][T16020]  ? do_raw_spin_lock+0x12b/0x2f0
[  519.092427][T16020]  ? _raw_spin_unlock+0x28/0x50
[  519.092455][T16020]  ? binder_get_thread+0x177/0x6d0
[  519.092492][T16020]  binder_ioctl+0x423/0x1b70
[  519.092513][T16020]  ? tomoyo_path_number_perm+0x219/0x630
[  519.092541][T16020]  ? tomoyo_path_number_perm+0x219/0x630
[  519.092585][T16020]  ? do_vfs_ioctl+0x1166/0x1530
[  519.092607][T16020]  ? __pfx_binder_ioctl+0x10/0x10
[  519.092628][T16020]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  519.092662][T16020]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  519.092705][T16020]  ? __fget_files+0x2a/0x420
[  519.092735][T16020]  ? __fget_files+0x2a/0x420
[  519.092762][T16020]  ? __fget_files+0x3a0/0x420
[  519.092787][T16020]  ? __fget_files+0x2a/0x420
[  519.092817][T16020]  ? bpf_lsm_file_ioctl+0x9/0x20
[  519.092838][T16020]  ? __pfx_binder_ioctl+0x10/0x10
[  519.092858][T16020]  __se_sys_ioctl+0xfc/0x170
[  519.092883][T16020]  do_syscall_64+0x14d/0xf80
[  519.092903][T16020]  ? trace_irq_disable+0x3b/0x150
[  519.092929][T16020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.092951][T16020]  ? clear_bhb_loop+0x40/0x90
[  519.092978][T16020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.092998][T16020] RIP: 0033:0x7f846399c799
[  519.093019][T16020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.093037][T16020] RSP: 002b:00007f8464812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.093059][T16020] RAX: ffffffffffffffda RBX: 00007f8463c15fa0 RCX: 00007f846399c799
[  519.093074][T16020] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  519.093088][T16020] RBP: 00007f8464812090 R08: 0000000000000000 R09: 0000000000000000
[  519.093100][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  519.093113][T16020] R13: 00007f8463c16038 R14: 00007f8463c15fa0 R15: 00007fff0bfdf728
[  519.093146][T16020]  </TASK>
[  519.093234][T16020] binder_alloc: 16019: binder_install_single_page failed to insert page at offset 0 with -12
[  519.875177][T16049] __nla_validate_parse: 2 callbacks suppressed
[  519.875205][T16049] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3494'.
[  520.053683][T16059] binder: 16057:16059 ioctl c0306201 2000000004c0 returned -14
[  520.065557][T16059] binder: 16057:16059 unknown command 0
[  520.072310][T16059] binder: 16057:16059 ioctl c0306201 2000000001c0 returned -22
[  520.217440][ T5894] usb 6-1: new full-speed USB device number 113 using dummy_hcd
[  520.379978][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  520.396302][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.418953][ T5894] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  520.435206][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.455976][ T5894] usb 6-1: config 0 descriptor??
[  520.508331][T16075] FAULT_INJECTION: forcing a failure.
[  520.508331][T16075] name failslab, interval 1, probability 0, space 0, times 0
[  520.524716][T16075] CPU: 1 UID: 0 PID: 16075 Comm: syz.1.3505 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  520.524751][T16075] Tainted: [L]=SOFTLOCKUP
[  520.524759][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  520.524772][T16075] Call Trace:
[  520.524781][T16075]  <TASK>
[  520.524790][T16075]  dump_stack_lvl+0xe8/0x150
[  520.524824][T16075]  should_fail_ex+0x412/0x560
[  520.524855][T16075]  should_failslab+0xa8/0x100
[  520.524880][T16075]  __kvmalloc_node_noprof+0x178/0x8a0
[  520.524901][T16075]  ? rhashtable_init_noprof+0x52e/0xa70
[  520.524926][T16075]  ? rhashtable_init_noprof+0x12d/0xa70
[  520.524954][T16075]  rhashtable_init_noprof+0x52e/0xa70
[  520.524985][T16075]  rhltable_init_noprof+0x1e/0x60
[  520.525010][T16075]  nf_tables_newtable+0x68f/0x1910
[  520.525062][T16075]  nfnetlink_rcv+0x123e/0x27b0
[  520.525133][T16075]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  520.525172][T16075]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  520.525198][T16075]  ? ref_tracker_free+0x693/0x840
[  520.525222][T16075]  ? netlink_unicast+0x7e3/0x9b0
[  520.525264][T16075]  ? netlink_sendmsg+0x813/0xb40
[  520.525312][T16075]  ? __netlink_deliver_tap+0x866/0x8b0
[  520.525343][T16075]  ? netlink_deliver_tap+0x2e/0x1b0
[  520.525390][T16075]  netlink_unicast+0x80f/0x9b0
[  520.525429][T16075]  ? __pfx_netlink_unicast+0x10/0x10
[  520.525461][T16075]  ? netlink_sendmsg+0x650/0xb40
[  520.525479][T16075]  ? skb_put+0x11b/0x210
[  520.525507][T16075]  netlink_sendmsg+0x813/0xb40
[  520.525536][T16075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.525559][T16075]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  520.525602][T16075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.525621][T16075]  sock_sendmsg_nosec+0x112/0x150
[  520.525653][T16075]  ____sys_sendmsg+0x589/0x8c0
[  520.525686][T16075]  ? __pfx_____sys_sendmsg+0x10/0x10
[  520.525720][T16075]  ? import_iovec+0x73/0xa0
[  520.525751][T16075]  ___sys_sendmsg+0x2a5/0x360
[  520.525780][T16075]  ? __pfx____sys_sendmsg+0x10/0x10
[  520.525837][T16075]  ? __fget_files+0x2a/0x420
[  520.525864][T16075]  ? __fget_files+0x3a0/0x420
[  520.525902][T16075]  __x64_sys_sendmsg+0x1bd/0x2a0
[  520.525928][T16075]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  520.525962][T16075]  ? __pfx_ksys_write+0x10/0x10
[  520.525995][T16075]  do_syscall_64+0x14d/0xf80
[  520.526016][T16075]  ? trace_irq_disable+0x3b/0x150
[  520.526046][T16075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.526067][T16075]  ? clear_bhb_loop+0x40/0x90
[  520.526092][T16075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.526113][T16075] RIP: 0033:0x7f148ff9c799
[  520.526134][T16075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.526151][T16075] RSP: 002b:00007f1490d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  520.526173][T16075] RAX: ffffffffffffffda RBX: 00007f1490215fa0 RCX: 00007f148ff9c799
[  520.526189][T16075] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003
[  520.526202][T16075] RBP: 00007f1490d96090 R08: 0000000000000000 R09: 0000000000000000
[  520.526216][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.526228][T16075] R13: 00007f1490216038 R14: 00007f1490215fa0 R15: 00007ffc9ccdc318
[  520.526261][T16075]  </TASK>
[  520.864985][T16055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.874017][T16055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.979284][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3507'.
[  520.988489][T16078] openvswitch: netlink: Flow actions attr not present in new flow.
[  521.099136][ T5894] hid_parser_main: 3 callbacks suppressed
[  521.099162][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.112670][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.120661][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.129537][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.136938][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.145621][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.153176][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.160554][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.169977][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.183318][ T5894] petalynx 0003:18B1:0037.0011: unknown main item tag 0x0
[  521.191180][ T5894] petalynx 0003:18B1:0037.0011: unknown global tag 0xd
[  521.199769][ T5894] petalynx 0003:18B1:0037.0011: item 0 4 1 13 parsing failed
[  521.210496][ T5894] petalynx 0003:18B1:0037.0011: parse failed
[  521.216637][ T5894] petalynx 0003:18B1:0037.0011: probe with driver petalynx failed with error -22
[  521.251150][T16086] binder: 16085:16086 ioctl c0306201 2000000004c0 returned -14
[  521.267368][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  521.297822][ T5887] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  521.305550][ T5894] usb 6-1: USB disconnect, device number 113
[  521.437348][ T5926] usb 2-1: Using ep0 maxpacket: 16
[  521.445718][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short
[  521.447673][ T5887] usb 8-1: device descriptor read/64, error -71
[  521.458654][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  521.469815][ T5926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  521.481903][ T5926] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  521.491157][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.499325][ T5926] usb 2-1: Product: syz
[  521.503574][ T5926] usb 2-1: Manufacturer: syz
[  521.508404][ T5926] usb 2-1: SerialNumber: syz
[  521.717505][ T5887] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  521.741177][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  521.801187][ T5926] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12
[  521.813724][ T5926] usb 2-1: USB disconnect, device number 11
[  521.855828][ T6963] udevd[6963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  521.893294][ T5887] usb 8-1: device descriptor read/64, error -71
[  522.028462][ T5887] usb usb8-port1: attempt power cycle
[  522.307545][T16097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3515'.
[  522.368489][ T5887] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  522.399859][ T5887] usb 8-1: device descriptor read/8, error -71
[  522.517351][  T809] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  522.617482][ T5926] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  522.657349][ T5887] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  522.677321][  T809] usb 6-1: Using ep0 maxpacket: 32
[  522.678802][ T5887] usb 8-1: device descriptor read/8, error -71
[  522.688983][  T809] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  522.697826][  T809] usb 6-1: config 0 has no interface number 0
[  522.703994][  T809] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  522.714110][  T809] usb 6-1: config 0 interface 89 has no altsetting 0
[  522.723879][  T809] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  522.733281][  T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.741442][  T809] usb 6-1: Product: syz
[  522.745792][  T809] usb 6-1: Manufacturer: syz
[  522.750628][  T809] usb 6-1: SerialNumber: syz
[  522.759004][  T809] usb 6-1: config 0 descriptor??
[  522.769044][  T809] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  522.778887][  T809] em28xx 6-1:0.89: Video interface 89 found:
[  522.786879][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short
[  522.795848][ T5926] usb 2-1: not running at top speed; connect to a high speed hub
[  522.805063][ T5926] usb 2-1: config 68 has too many interfaces: 183, using maximum allowed: 32
[  522.808988][ T5887] usb usb8-port1: unable to enumerate USB device
[  522.814676][ T5926] usb 2-1: config 68 has 1 interface, different from the descriptor's value: 183
[  522.831443][ T5926] usb 2-1: config 68 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  522.844526][ T5926] usb 2-1: config 68 interface 0 has no altsetting 0
[  522.854530][ T5926] usb 2-1: New USB device found, idVendor=04b8, idProduct=021e, bcdDevice= 0.40
[  522.863962][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.872316][ T5926] usb 2-1: Product: syz
[  522.876518][ T5926] usb 2-1: Manufacturer: syz
[  522.881206][ T5926] usb 2-1: SerialNumber: syz
[  523.106044][ T5926] usb 2-1: USB disconnect, device number 12
[  523.228227][  T809] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  523.521561][  T809] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  523.531656][  T809] em28xx 6-1:0.89: board has no eeprom
[  523.734793][T16121] loop4: detected capacity change from 0 to 1
[  523.769325][T16121] Dev loop4: unable to read RDB block 1
[  523.774962][T16121]  loop4: unable to read partition table
[  523.780962][T16121] loop4: partition table beyond EOD, truncated
[  523.788674][T16121] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  523.818821][  T809] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  523.848818][  T809] em28xx 6-1:0.89: analog set to bulk mode.
[  523.862040][   T44] em28xx 6-1:0.89: Registering V4L2 extension
[  523.880415][T16125] FAULT_INJECTION: forcing a failure.
[  523.880415][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.920764][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.6.3526 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  523.920798][T16125] Tainted: [L]=SOFTLOCKUP
[  523.920807][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  523.920820][T16125] Call Trace:
[  523.920830][T16125]  <TASK>
[  523.920840][T16125]  dump_stack_lvl+0xe8/0x150
[  523.920876][T16125]  should_fail_ex+0x412/0x560
[  523.920906][T16125]  _copy_to_user+0x31/0xb0
[  523.920935][T16125]  simple_read_from_buffer+0xe1/0x170
[  523.920969][T16125]  proc_fail_nth_read+0x1bb/0x230
[  523.921000][T16125]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.921031][T16125]  ? rw_verify_area+0x2a6/0x4d0
[  523.921062][T16125]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.921091][T16125]  vfs_read+0x20c/0xa70
[  523.921120][T16125]  ? fdget_pos+0x246/0x320
[  523.921152][T16125]  ? __pfx___mutex_lock+0x10/0x10
[  523.921174][T16125]  ? __pfx_vfs_read+0x10/0x10
[  523.921215][T16125]  ? __fget_files+0x2a/0x420
[  523.921246][T16125]  ? __fget_files+0x3a0/0x420
[  523.921272][T16125]  ? __fget_files+0x2a/0x420
[  523.921309][T16125]  ksys_read+0x150/0x270
[  523.921331][T16125]  ? __pfx_ksys_read+0x10/0x10
[  523.921350][T16125]  ? __pfx_snd_pcm_ioctl+0x10/0x10
[  523.921387][T16125]  do_syscall_64+0x14d/0xf80
[  523.921407][T16125]  ? trace_irq_disable+0x3b/0x150
[  523.921431][T16125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.921452][T16125]  ? clear_bhb_loop+0x40/0x90
[  523.921478][T16125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.921499][T16125] RIP: 0033:0x7fc98015cfce
[  523.921520][T16125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  523.921538][T16125] RSP: 002b:00007fc980ff7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  523.921560][T16125] RAX: ffffffffffffffda RBX: 00007fc980ff86c0 RCX: 00007fc98015cfce
[  523.921575][T16125] RDX: 000000000000000f RSI: 00007fc980ff80a0 RDI: 0000000000000006
[  523.921588][T16125] RBP: 00007fc980ff8090 R08: 0000000000000000 R09: 0000000000000000
[  523.921600][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.921612][T16125] R13: 00007fc980416038 R14: 00007fc980415fa0 R15: 00007ffcf780ac68
[  523.921645][T16125]  </TASK>
[  524.197157][ T5842] Bluetooth: hci4: command 0x0406 tx timeout
[  524.250517][  T809] usb 6-1: USB disconnect, device number 114
[  524.258772][  T809] em28xx 6-1:0.89: Disconnecting em28xx
[  524.267131][   T44] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  524.327430][   T44] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  524.356261][   T44] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  524.364350][T16133] netlink: 'syz.6.3529': attribute type 3 has an invalid length.
[  524.372228][   T44] em28xx 6-1:0.89: No AC97 audio processor
[  524.378581][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3529'.
[  524.421890][   T44] usb 6-1: Decoder not found
[  524.452743][   T44] em28xx 6-1:0.89: failed to create media graph
[  524.466885][   T44] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  524.500674][   T44] em28xx 6-1:0.89: Registering snapshot button...
[  524.583116][   T44] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input32
[  524.674949][   T44] em28xx 6-1:0.89: Remote control support is not available for this card.
[  524.692584][  T809] em28xx 6-1:0.89: Closing input extension
[  524.710434][  T809] em28xx 6-1:0.89: Deregistering snapshot button
[  524.767428][ T5907] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  524.869532][  T809] em28xx 6-1:0.89: Freeing device
[  524.875018][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3534'.
[  524.929417][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  524.961369][ T5907] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  524.979440][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.993448][ T5907] usb 8-1: config 0 descriptor??
[  525.003500][T16139] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  525.187773][  T809] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  525.347719][  T809] usb 6-1: Using ep0 maxpacket: 8
[  525.361644][  T809] usb 6-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config
[  525.375220][  T809] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  525.385032][  T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.401717][  T809] usb 6-1: Product: syz
[  525.405990][  T809] usb 6-1: Manufacturer: syz
[  525.410932][  T809] usb 6-1: SerialNumber: syz
[  525.419544][  T809] usb 6-1: config 0 descriptor??
[  525.432061][ T5907] hid (null): global environment stack underflow
[  525.440412][ T5907] hid (null): bogus close delimiter
[  525.448810][  T809] cdc_ether 6-1:0.0: skipping garbage
[  525.454486][ T5907] hid (null): report_id 0 is invalid
[  525.460028][  T809] cdc_ether 6-1:0.0: bad CDC descriptors
[  525.470838][  T809] usb 6-1: unsupported MDLM descriptors
[  525.483419][ T5907] logitech-djreceiver 0003:046D:C71F.0012: global environment stack underflow
[  525.493255][  T809] cdc_acm 6-1:0.0: skipping garbage
[  525.506694][ T5907] logitech-djreceiver 0003:046D:C71F.0012: item 0 4 1 11 parsing failed
[  525.530066][ T5907] logitech-djreceiver 0003:046D:C71F.0012: logi_dj_probe: parse failed
[  525.544441][ T5907] logitech-djreceiver 0003:046D:C71F.0012: probe with driver logitech-djreceiver failed with error -22
[  525.568267][T16172] JFS: charset not found
[  525.662715][ T5894] usb 6-1: USB disconnect, device number 115
[  526.121812][T16195] binfmt_misc: Unknown parameter 'grpquota'
[  526.403803][T16200] binder: 16199:16200 ioctl c0306201 2000000004c0 returned -14
[  526.674653][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'.
[  526.726193][T16216] binder: 16215:16216 ioctl c0306201 2000000004c0 returned -14
[  526.735033][T16216] FAULT_INJECTION: forcing a failure.
[  526.735033][T16216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.748849][T16216] CPU: 1 UID: 0 PID: 16216 Comm: syz.5.3561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  526.748879][T16216] Tainted: [L]=SOFTLOCKUP
[  526.748886][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  526.748898][T16216] Call Trace:
[  526.748906][T16216]  <TASK>
[  526.748914][T16216]  dump_stack_lvl+0xe8/0x150
[  526.748958][T16216]  should_fail_ex+0x412/0x560
[  526.748983][T16216]  _copy_to_user+0x31/0xb0
[  526.749007][T16216]  simple_read_from_buffer+0xe1/0x170
[  526.749047][T16216]  proc_fail_nth_read+0x1bb/0x230
[  526.749074][T16216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  526.749100][T16216]  ? rw_verify_area+0x2a6/0x4d0
[  526.749126][T16216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  526.749150][T16216]  vfs_read+0x20c/0xa70
[  526.749174][T16216]  ? fdget_pos+0x246/0x320
[  526.749200][T16216]  ? __pfx___mutex_lock+0x10/0x10
[  526.749220][T16216]  ? __pfx_vfs_read+0x10/0x10
[  526.749247][T16216]  ? __fget_files+0x2a/0x420
[  526.749292][T16216]  ? __fget_files+0x3a0/0x420
[  526.749314][T16216]  ? __fget_files+0x2a/0x420
[  526.749345][T16216]  ksys_read+0x150/0x270
[  526.749365][T16216]  ? __pfx_ksys_read+0x10/0x10
[  526.749381][T16216]  ? __pfx_binder_ioctl+0x10/0x10
[  526.749407][T16216]  do_syscall_64+0x14d/0xf80
[  526.749424][T16216]  ? trace_irq_disable+0x3b/0x150
[  526.749445][T16216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.749464][T16216]  ? clear_bhb_loop+0x40/0x90
[  526.749486][T16216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.749503][T16216] RIP: 0033:0x7f846395cfce
[  526.749522][T16216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  526.749539][T16216] RSP: 002b:00007f8464811fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  526.749558][T16216] RAX: ffffffffffffffda RBX: 00007f84648126c0 RCX: 00007f846395cfce
[  526.749571][T16216] RDX: 000000000000000f RSI: 00007f84648120a0 RDI: 0000000000000006
[  526.749582][T16216] RBP: 00007f8464812090 R08: 0000000000000000 R09: 0000000000000000
[  526.749593][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.749603][T16216] R13: 00007f8463c16038 R14: 00007f8463c15fa0 R15: 00007fff0bfdf728
[  526.749632][T16216]  </TASK>
[  527.042870][   T29] audit: type=1326 audit(1773811767.882:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.5.3562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f846399c799 code=0x0
[  527.419022][ T5907] usb 6-1: new full-speed USB device number 116 using dummy_hcd
[  527.515861][  T809] usb 8-1: USB disconnect, device number 13
[  527.613416][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short
[  527.651392][ T5907] usb 6-1: not running at top speed; connect to a high speed hub
[  527.686960][ T5907] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 4
[  527.725846][ T5907] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40
[  527.738601][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.746878][ T5907] usb 6-1: Product: syz
[  527.753388][ T5907] usb 6-1: Manufacturer: syz
[  527.766319][ T5907] usb 6-1: SerialNumber: syz
[  527.981741][T16250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3573'.
[  528.010744][ T5907] usb 6-1: selecting invalid altsetting 1
[  528.022276][T16250] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3573'.
[  528.041494][ T5907] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  528.065318][T16250] ptrace attach of "./syz-executor exec"[14641] was attempted by ""[16250]
[  528.072439][ T5907] usb 6-1: selecting invalid altsetting 1
[  528.091232][ T5907] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[  528.113141][ T5907] usb 6-1: selecting invalid altsetting 1
[  528.200679][ T5907] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22
[  528.243995][ T5907] usb 6-1: USB disconnect, device number 116
[  528.306083][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.768212][T16267] netlink: 'syz.1.3581': attribute type 4 has an invalid length.
[  528.786443][T16267] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3581'.
[  528.851022][T16267] .`: renamed from bond0 (while UP)
[  529.073915][T16280] xfrm0 speed is unknown, defaulting to 1000
[  529.088080][ T5894] usb 6-1: new full-speed USB device number 117 using dummy_hcd
[  529.098679][T16280] xfrm0 speed is unknown, defaulting to 1000
[  529.114907][T16280] xfrm0 speed is unknown, defaulting to 1000
[  529.122394][T16282] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3587'.
[  529.259509][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  529.291662][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  529.329437][ T5894] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  529.352050][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.369653][ T5894] usb 6-1: Product: syz
[  529.378879][ T5894] usb 6-1: Manufacturer: syz
[  529.389088][ T5894] usb 6-1: SerialNumber: syz
[  529.407896][ T5894] usb 6-1: config 0 descriptor??
[  529.426966][ T5894] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  529.688003][ T5926] usb 6-1: USB disconnect, device number 117
[  529.740524][ T5907] xfrm0 speed is unknown, defaulting to 1000
[  529.748123][T16280] infiniband syz1: set active
[  529.760806][T16280] infiniband syz1: added xfrm0
[  529.792040][T16280] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  529.807868][T16280] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  529.825779][T16280] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  529.885633][T16280] RDS/IB: syz1: added
[  529.896666][T16280] smc: adding ib device syz1 with port count 1
[  529.917501][T16280] smc:    ib device syz1 port 1 has no pnetid
[  529.932118][ T5894] xfrm0 speed is unknown, defaulting to 1000
[  529.945858][T16280] xfrm0 speed is unknown, defaulting to 1000
[  530.012232][T16303] syzkaller1: entered promiscuous mode
[  530.020152][T16303] syzkaller1: entered allmulticast mode
[  530.208851][T16305] FAULT_INJECTION: forcing a failure.
[  530.208851][T16305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.223983][T16305] CPU: 0 UID: 0 PID: 16305 Comm: syz.7.3597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.224018][T16305] Tainted: [L]=SOFTLOCKUP
[  530.224027][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  530.224040][T16305] Call Trace:
[  530.224049][T16305]  <TASK>
[  530.224058][T16305]  dump_stack_lvl+0xe8/0x150
[  530.224095][T16305]  should_fail_ex+0x412/0x560
[  530.224124][T16305]  _copy_to_user+0x31/0xb0
[  530.224154][T16305]  simple_read_from_buffer+0xe1/0x170
[  530.224187][T16305]  proc_fail_nth_read+0x1bb/0x230
[  530.224218][T16305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.224249][T16305]  ? rw_verify_area+0x2a6/0x4d0
[  530.224281][T16305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.224311][T16305]  vfs_read+0x20c/0xa70
[  530.224340][T16305]  ? fdget_pos+0x246/0x320
[  530.224372][T16305]  ? __pfx___mutex_lock+0x10/0x10
[  530.224396][T16305]  ? __pfx_vfs_read+0x10/0x10
[  530.224429][T16305]  ? __fget_files+0x2a/0x420
[  530.224461][T16305]  ? __fget_files+0x3a0/0x420
[  530.224487][T16305]  ? __fget_files+0x2a/0x420
[  530.224524][T16305]  ksys_read+0x150/0x270
[  530.224546][T16305]  ? __pfx_ksys_read+0x10/0x10
[  530.224578][T16305]  do_syscall_64+0x14d/0xf80
[  530.224599][T16305]  ? trace_irq_disable+0x3b/0x150
[  530.224623][T16305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.224645][T16305]  ? clear_bhb_loop+0x40/0x90
[  530.224671][T16305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.224692][T16305] RIP: 0033:0x7feb9555cfce
[  530.224713][T16305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  530.224730][T16305] RSP: 002b:00007feb96410fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  530.224760][T16305] RAX: ffffffffffffffda RBX: 00007feb964116c0 RCX: 00007feb9555cfce
[  530.224776][T16305] RDX: 000000000000000f RSI: 00007feb964110a0 RDI: 0000000000000004
[  530.224789][T16305] RBP: 00007feb96411090 R08: 0000000000000000 R09: 0000000000000000
[  530.224801][T16305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  530.224813][T16305] R13: 00007feb95816038 R14: 00007feb95815fa0 R15: 00007ffcf84126e8
[  530.224847][T16305]  </TASK>
[  530.294107][T16280] xfrm0 speed is unknown, defaulting to 1000
[  530.482752][T16307] openvswitch: netlink: IPv4 tun info is not correct
[  530.844654][T16280] xfrm0 speed is unknown, defaulting to 1000
[  530.857326][ T5936] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  530.987586][ T5936] usb 2-1: device descriptor read/64, error -71
[  530.993990][ T5894] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  531.032583][T16280] xfrm0 speed is unknown, defaulting to 1000
[  531.167282][ T5894] usb 8-1: Using ep0 maxpacket: 32
[  531.174725][ T5894] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  531.184445][ T5894] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  531.193640][ T5894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  531.203157][ T5894] usb 8-1: config 1 has no interface number 0
[  531.209717][ T5894] usb 8-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  531.224775][ T5894] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  531.238508][ T5936] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  531.249402][ T5894] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  531.258674][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.272382][T16280] xfrm0 speed is unknown, defaulting to 1000
[  531.284342][ T5894] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  531.387430][ T5936] usb 2-1: device descriptor read/64, error -71
[  531.473949][ T5894] snd_usb_pod 8-1:1.1: endpoint not available, using fallback values
[  531.492346][ T5894] snd_usb_pod 8-1:1.1: invalid control EP
[  531.499365][ T5936] usb usb2-port1: attempt power cycle
[  531.505243][ T5894] snd_usb_pod 8-1:1.1: cannot start listening: -22
[  531.513871][ T5894] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  531.522064][ T5894] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22
[  531.686987][ T5894] usb 8-1: USB disconnect, device number 14
[  531.847399][ T5926] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  531.857320][ T5936] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  531.888112][T16325] loop4: detected capacity change from 0 to 1
[  531.892426][ T5936] usb 2-1: device descriptor read/8, error -71
[  531.919372][ T5933] Dev loop4: unable to read RDB block 1
[  531.924998][ T5933]  loop4: unable to read partition table
[  531.931178][ T5933] loop4: partition table beyond EOD, truncated
[  531.938980][T16325] Dev loop4: unable to read RDB block 1
[  531.945143][T16325]  loop4: unable to read partition table
[  531.951417][T16325] loop4: partition table beyond EOD, truncated
[  531.958311][T16325] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  531.999288][ T5926] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  532.010253][ T5926] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  532.024690][ T5926] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  532.041935][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.050177][ T5926] usb 7-1: Product: syz
[  532.054585][ T5926] usb 7-1: Manufacturer: syz
[  532.059818][ T5926] usb 7-1: SerialNumber: syz
[  532.067590][ T5926] usb 7-1: config 0 descriptor??
[  532.075145][T16327] binder: 16326:16327 ioctl c0306201 2000000004c0 returned -14
[  532.081701][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c630
[  532.158173][ T5936] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  532.178096][ T5936] usb 2-1: device descriptor read/8, error -71
[  532.287763][ T5936] usb usb2-port1: unable to enumerate USB device
[  532.653002][   T29] audit: type=1800 audit(1773811773.492:43): pid=16350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3616" name="bus" dev="tmpfs" ino=1516 res=0 errno=0
[  532.953396][T16361] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3621'.
[  533.097542][ T5926] gspca_sunplus: reg_r err -110
[  533.102649][ T5926] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  533.127873][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3624'.
[  533.290047][ T5936] usb 7-1: USB disconnect, device number 96
[  533.550860][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3630'.
[  533.639811][ T5936] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  533.733103][T16387] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3633'.
[  533.742731][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.762290][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.862320][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  533.878696][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  533.896365][ T5936] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  533.926208][ T5936] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  533.947782][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.966410][ T5936] usb 7-1: Product: syz
[  533.992629][ T5936] usb 7-1: Manufacturer: syz
[  534.000041][ T5936] usb 7-1: SerialNumber: syz
[  534.017824][T14869] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  534.027893][ T5936] usb 7-1: config 0 descriptor??
[  534.187396][T14869] usb 8-1: Using ep0 maxpacket: 8
[  534.196432][T14869] usb 8-1: config 2 has an invalid interface number: 152 but max is 0
[  534.206019][T14869] usb 8-1: config 2 has no interface number 0
[  534.214195][T14869] usb 8-1: config 2 interface 152 has no altsetting 0
[  534.224571][T14869] usb 8-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d
[  534.234221][T14869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.242670][T14869] usb 8-1: Product: syz
[  534.246959][T14869] usb 8-1: Manufacturer: syz
[  534.252200][T14869] usb 8-1: SerialNumber: syz
[  534.264300][T14869] r8152-cfgselector 8-1: Unknown version 0x0000
[  534.480916][T14869] r8152 8-1:2.152: Expected endpoints are not found
[  534.495526][T14869] r8152-cfgselector 8-1: USB disconnect, device number 15
[  534.860635][ T5926] IPVS: starting estimator thread 0...
[  534.957746][T16406] IPVS: using max 27 ests per chain, 64800 per kthread
[  535.291912][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3645'.
[  535.302488][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3645'.
[  535.570562][T16428] netlink: 'syz.7.3649': attribute type 10 has an invalid length.
[  535.819960][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3652'.
[  536.009328][T16441] binder: 16440:16441 ioctl c0306201 2000000004c0 returned -14
[  536.018047][T16441] FAULT_INJECTION: forcing a failure.
[  536.018047][T16441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.031287][T16441] CPU: 1 UID: 0 PID: 16441 Comm: syz.1.3654 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  536.031321][T16441] Tainted: [L]=SOFTLOCKUP
[  536.031330][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  536.031342][T16441] Call Trace:
[  536.031353][T16441]  <TASK>
[  536.031361][T16441]  dump_stack_lvl+0xe8/0x150
[  536.031399][T16441]  should_fail_ex+0x412/0x560
[  536.031430][T16441]  _copy_from_user+0x2d/0xb0
[  536.031457][T16441]  binder_ioctl_write_read+0xde9/0xa660
[  536.031499][T16441]  ? unwind_get_return_address+0x4d/0x90
[  536.031521][T16441]  ? arch_stack_walk+0xfb/0x150
[  536.031553][T16441]  ? stack_trace_save+0xa9/0x100
[  536.031579][T16441]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  536.031598][T16441]  ? kasan_save_free_info+0x46/0x50
[  536.031628][T16441]  ? stack_depot_save_flags+0x33/0x810
[  536.031652][T16441]  ? format_decode+0x90/0xe10
[  536.031681][T16441]  ? kasan_save_track+0x4f/0x80
[  536.031709][T16441]  ? kasan_save_track+0x3e/0x80
[  536.031736][T16441]  ? kasan_save_free_info+0x46/0x50
[  536.031760][T16441]  ? __kasan_slab_free+0x5c/0x80
[  536.031782][T16441]  ? __lock_acquire+0x6b5/0x2cf0
[  536.031859][T16441]  ? _raw_spin_unlock+0x28/0x50
[  536.031887][T16441]  ? binder_get_thread+0x177/0x6d0
[  536.031923][T16441]  binder_ioctl+0x423/0x1b70
[  536.031944][T16441]  ? tomoyo_path_number_perm+0x219/0x630
[  536.031972][T16441]  ? tomoyo_path_number_perm+0x219/0x630
[  536.032003][T16441]  ? do_vfs_ioctl+0x1166/0x1530
[  536.032024][T16441]  ? __pfx_binder_ioctl+0x10/0x10
[  536.032044][T16441]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  536.032079][T16441]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  536.032120][T16441]  ? __fget_files+0x2a/0x420
[  536.032150][T16441]  ? __fget_files+0x2a/0x420
[  536.032176][T16441]  ? __fget_files+0x3a0/0x420
[  536.032202][T16441]  ? __fget_files+0x2a/0x420
[  536.032232][T16441]  ? bpf_lsm_file_ioctl+0x9/0x20
[  536.032252][T16441]  ? __pfx_binder_ioctl+0x10/0x10
[  536.032272][T16441]  __se_sys_ioctl+0xfc/0x170
[  536.032295][T16441]  do_syscall_64+0x14d/0xf80
[  536.032315][T16441]  ? trace_irq_disable+0x3b/0x150
[  536.032338][T16441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.032360][T16441]  ? clear_bhb_loop+0x40/0x90
[  536.032386][T16441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.032406][T16441] RIP: 0033:0x7f148ff9c799
[  536.032428][T16441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.032445][T16441] RSP: 002b:00007f1490d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  536.032468][T16441] RAX: ffffffffffffffda RBX: 00007f1490215fa0 RCX: 00007f148ff9c799
[  536.032483][T16441] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  536.032496][T16441] RBP: 00007f1490d96090 R08: 0000000000000000 R09: 0000000000000000
[  536.032509][T16441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  536.032521][T16441] R13: 00007f1490216038 R14: 00007f1490215fa0 R15: 00007ffc9ccdc318
[  536.032553][T16441]  </TASK>
[  536.032564][T16441] binder: 16440:16441 ioctl c0306201 2000000001c0 returned -14
[  536.153187][ T5936] usb 6-1: new full-speed USB device number 118 using dummy_hcd
[  536.390196][T14869] usb 7-1: USB disconnect, device number 97
[  536.451285][T16446] xfrm0 speed is unknown, defaulting to 1000
[  536.509743][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.520463][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.539947][ T5936] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  536.544323][T16451] binder: 16450:16451 ioctl c0306201 2000000004c0 returned -14
[  536.549780][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.574496][ T5936] usb 6-1: Product: syz
[  536.583540][ T5936] usb 6-1: Manufacturer: syz
[  536.597261][ T5936] usb 6-1: SerialNumber: syz
[  536.597909][ T5926] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  536.630767][ T5936] usb 6-1: 0:2 : does not exist
[  536.737423][ T5926] usb 8-1: device descriptor read/64, error -71
[  536.835372][ T5936] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  536.911385][ T5936] usb 6-1: USB disconnect, device number 118
[  536.977393][ T5926] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  536.991745][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.049964][T16458] netlink: 'syz.6.3661': attribute type 4 has an invalid length.
[  537.122191][ T5926] usb 8-1: device descriptor read/64, error -71
[  537.246669][ T5926] usb usb8-port1: attempt power cycle
[  537.587507][ T5926] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  537.622263][ T5926] usb 8-1: device descriptor read/8, error -71
[  537.877640][ T5926] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  537.886699][T14869] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  537.926961][ T5926] usb 8-1: device descriptor read/8, error -71
[  537.988504][T16471] ALSA: mixer_oss: invalid OSS volume ''
[  537.994978][T16471] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3667'.
[  538.047715][ T5926] usb usb8-port1: unable to enumerate USB device
[  538.054230][T14869] usb 2-1: Using ep0 maxpacket: 32
[  538.066494][T14869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.089313][T14869] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  538.101926][T14869] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  538.112584][T14869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.121078][T14869] usb 2-1: Product: syz
[  538.125667][T14869] usb 2-1: Manufacturer: syz
[  538.130493][T14869] usb 2-1: SerialNumber: syz
[  538.149329][T14869] usb 2-1: config 0 descriptor??
[  538.296937][T16475] binder: 16474:16475 ioctl c0306201 2000000004c0 returned -22
[  540.282655][T16502] binder: 16501:16502 ioctl c0306201 2000000004c0 returned -14
[  540.714322][ T5936] usb 2-1: USB disconnect, device number 17
[  541.628843][T14869] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  541.713966][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3704'.
[  541.787701][T14869] usb 2-1: Using ep0 maxpacket: 16
[  541.805372][T14869] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  541.829810][T14869] usb 2-1: config 1 has no interface number 0
[  541.847629][T14869] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  541.864712][T14869] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  541.898705][T16566] netlink: 'syz.5.3708': attribute type 4 has an invalid length.
[  541.900993][T14869] usb 2-1: config 1 interface 105 has no altsetting 0
[  541.903726][T14869] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  541.903759][T14869] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  541.903782][T14869] usb 2-1: Product: syz
[  541.903798][T14869] usb 2-1: Manufacturer: syz
[  541.903815][T14869] usb 2-1: SerialNumber: syz
[  541.928367][T16544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  541.928517][T16544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  541.975390][T16567] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3706'.
[  542.010327][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3706'.
[  542.010356][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3706'.
[  542.014274][T16567] binder: 16563:16567 ioctl c0306201 2000000004c0 returned -22
[  542.194185][T16573] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3711'.
[  542.212088][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.226649][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.238932][T14869] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  542.266920][T14869] usb 2-1: USB disconnect, device number 18
[  542.634909][T16590] pim6reg: entered allmulticast mode
[  542.967799][T14869] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  543.058635][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3727'.
[  543.127923][T14869] usb 7-1: Using ep0 maxpacket: 32
[  543.135593][T14869] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  543.149762][T14869] usb 7-1: config 0 has no interface number 0
[  543.155970][T14869] usb 7-1: config 0 interface 184 has no altsetting 0
[  543.166627][T14869] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  543.176154][T14869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.185865][T14869] usb 7-1: Product: syz
[  543.191749][T16619] netlink: 'syz.5.3729': attribute type 10 has an invalid length.
[  543.201410][T14869] usb 7-1: Manufacturer: syz
[  543.210552][T14869] usb 7-1: SerialNumber: syz
[  543.228184][T14869] usb 7-1: config 0 descriptor??
[  543.238580][T16619] team0: Device vxcan1 is of different type
[  543.316665][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3730'.
[  543.522821][T16626] binder: 16625:16626 ioctl c0306201 2000000004c0 returned -14
[  543.883406][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  543.894479][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  543.905142][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  543.918573][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  543.931306][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  543.966058][T14869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  543.979380][T14869] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  543.998227][T14869] usb 7-1: USB disconnect, device number 98
[  544.117350][ T5887] usb 6-1: new full-speed USB device number 119 using dummy_hcd
[  544.161785][T16643] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI
[  544.173829][T16643] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
[  544.182254][T16643] CPU: 0 UID: 0 PID: 16643 Comm: syz.1.3737 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.193214][T16643] Tainted: [L]=SOFTLOCKUP
[  544.197591][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  544.207679][T16643] RIP: 0010:fuse_opt_fd+0x49/0x220
[  544.212960][T16643] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 95 f6 e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 79 f6 e4 fe 49 81 3c 24 40 2b 29 8c
[  544.232609][T16643] RSP: 0018:ffffc90016d37a68 EFLAGS: 00010206
[  544.238687][T16643] RAX: 0000000000000009 RBX: ffff88805da01000 RCX: ffff8880262dbd00
[  544.246669][T16643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805da01000
[  544.254653][T16643] RBP: dffffc0000000000 R08: ffffffff824b4fca R09: ffffffff8eb5d6a0
[  544.262649][T16643] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000048
[  544.270645][T16643] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888075316280
[  544.278642][T16643] FS:  00007f148e1f66c0(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000
[  544.287591][T16643] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  544.294191][T16643] CR2: 00007f148e1f5ff8 CR3: 00000000784b8000 CR4: 00000000003526f0
[  544.302181][T16643] Call Trace:
[  544.305478][T16643]  <TASK>
[  544.308428][T16643]  fuse_parse_param+0x69b/0xa80
[  544.313301][T16643]  ? __pfx_fuse_parse_param+0x10/0x10
[  544.318694][T16643]  ? static_key_count+0x41/0x70
[  544.323567][T16643]  vfs_parse_fs_param+0x1a9/0x420
[  544.328620][T16643]  vfs_parse_monolithic_sep+0x283/0x360
[  544.334191][T16643]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  544.339848][T16643]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  544.345970][T16643]  ? alloc_fs_context+0x9e9/0xd50
[  544.351021][T16643]  do_new_mount+0x304/0xd30
[  544.355543][T16643]  ? apparmor_capable+0x126/0x170
[  544.360588][T16643]  ? security_capable+0x7e/0x2c0
[  544.365549][T16643]  ? __pfx_do_new_mount+0x10/0x10
[  544.370595][T16643]  ? ns_capable+0x89/0xe0
[  544.374954][T16643]  ? path_mount+0x690/0x10e0
[  544.379564][T16643]  ? user_path_at+0xd4/0x160
[  544.384178][T16643]  __se_sys_mount+0x31d/0x420
[  544.388879][T16643]  ? __pfx___se_sys_mount+0x10/0x10
[  544.394106][T16643]  ? __x64_sys_mount+0x20/0xc0
[  544.398895][T16643]  do_syscall_64+0x14d/0xf80
[  544.403524][T16643]  ? trace_irq_disable+0x3b/0x150
[  544.408569][T16643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.414647][T16643]  ? clear_bhb_loop+0x40/0x90
[  544.419342][T16643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.425247][T16643] RIP: 0033:0x7f148ff9c799
[  544.429720][T16643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.449355][T16643] RSP: 002b:00007f148e1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  544.457789][T16643] RAX: ffffffffffffffda RBX: 00007f1490216180 RCX: 00007f148ff9c799
[  544.465798][T16643] RDX: 0000200000000800 RSI: 00002000000020c0 RDI: 0000000000000000
[  544.474140][T16643] RBP: 00007f1490032c99 R08: 00002000000003c0 R09: 0000000000000000
[  544.482157][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  544.490304][T16643] R13: 00007f1490216218 R14: 00007f1490216180 R15: 00007ffc9ccdc318
[  544.498474][T16643]  </TASK>
[  544.501523][T16643] Modules linked in:
[  544.507346][T16643] ---[ end trace 0000000000000000 ]---
[  544.519129][T16643] RIP: 0010:fuse_opt_fd+0x49/0x220
[  544.524548][T16643] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 95 f6 e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 79 f6 e4 fe 49 81 3c 24 40 2b 29 8c
[  544.545137][T16643] RSP: 0018:ffffc90016d37a68 EFLAGS: 00010206
[  544.557482][T16643] RAX: 0000000000000009 RBX: ffff88805da01000 RCX: ffff8880262dbd00
[  544.565595][T16643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805da01000
[  544.574451][T16643] RBP: dffffc0000000000 R08: ffffffff824b4fca R09: ffffffff8eb5d6a0
[  544.583068][T16643] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000048
[  544.591481][T16643] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888075316280
[  544.600373][T16643] FS:  00007f148e1f66c0(0000) GS:ffff888124ee1000(0000) knlGS:0000000000000000
[  544.609714][T16643] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  544.616367][T16643] CR2: 00007feb957e92f8 CR3: 00000000784b8000 CR4: 00000000003526f0
[  544.617850][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short
[  544.625877][T16643] Kernel panic - not syncing: Fatal exception
[  544.632648][T16643] Kernel Offset: disabled