last executing test programs:

48.323494203s ago: executing program 0 (id=34):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x1})
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a044)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000240)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418})
poll(&(0x7f0000000340)=[{r3, 0x700a}], 0x1, 0x7)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2, 0xffff6c28}, 0x1c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8)

48.291091356s ago: executing program 0 (id=35):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))
socket(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x64010100, @broadcast, 0x4, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffffff, 0xff, 0xd, 0x1, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x4, 0x8000, 0x4, 0xffff, 0x0, 0x7, 'erspan0\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x52}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @mac=@remote, @rand_addr=0x64010102, @multicast2, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @local, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffffd0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

48.216271001s ago: executing program 0 (id=36):

48.119317158s ago: executing program 0 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="ea003000001b000f0865660f38f894ba1199000066b8ca000f00d0d8e9b979080000b820000000ba000000000f3066bad00466ed36640f01ca660f3acf8593000000c3b920080000b80b000000ba000000000f30", 0x54}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404603, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000005c0)={0x1, 0x0, [{0x80000019, 0x4bed4709, 0x3, 0x8001, 0x3, 0x0, 0x40}]})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @remote})
write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c88fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21000790"], 0xd2)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x822026, &(0x7f0000000600)={[{@userxattr}, {@verity_on}, {@userxattr}, {@default_permissions}, {@index_on}, {@redirect_dir_on}], [{@subj_role={'subj_role', 0x3d, 'workdir'}}, {@pcr={'pcr', 0x3d, 0x6}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0)
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x130, 0x0, 0x4, {0x1, 0x7, 0x0, '\x00', {0x1, 0xadb, 0x8, 0x10000808, 0x0, r6, 0x8000, '\x00', 0xffffffffffffffff, 0x8, 0x100000000, 0x9, {0x6, 0x7}, {0x20000000000004}, {0x100000000, 0xc}, {0x10000, 0xa06}, 0x4, 0x5, 0x1, 0x1}}}})
write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5}, 0x50)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = open(&(0x7f0000000580)='./bus\x00', 0x86182, 0x0)
fdatasync(r7)
syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

47.743500069s ago: executing program 0 (id=41):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x10003, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "35e1c07b100000e5b90d00", "6631cbd8c92f5461e2ea90f9"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc})

47.454593629s ago: executing program 0 (id=44):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000002480)=""/132, 0x84}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/139, 0x8b}, {&(0x7f0000003600)=""/138, 0x8a}], 0x8, &(0x7f00000036c0)=""/247, 0xf7}, 0x2)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb35"], 0x830200)

47.081147164s ago: executing program 32 (id=44):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000002480)=""/132, 0x84}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/139, 0x8b}, {&(0x7f0000003600)=""/138, 0x8a}], 0x8, &(0x7f00000036c0)=""/247, 0xf7}, 0x2)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb35"], 0x830200)

6.683929917s ago: executing program 1 (id=269):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x921, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}]}, 0x28}}, 0x40000)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)

6.641553411s ago: executing program 1 (id=271):
unshare(0x62040200)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x8080)
syz_usb_disconnect(r0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x511c02, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000bd70da508252625b66e800"/30], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x1404, 0xc, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x2f9513c85e87b3a9, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xef, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "09602fc7aa31"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x5, 0x80, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0xfa, 0xe}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x1, 0x3, 0x40, 0xf4}, 0xff, &(0x7f0000000300)={0x5, 0xf, 0xff, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x0, 0x6a, 0x8000}, @generic={0xd1, 0x10, 0x4, "e4ed60e158ddd91bc9bd417fbb755c76c595a37640f78a5e42a9dbb00fed233c06cec868065896aece1fbe291d17059835536645246c1b1de2357bdca736fd9ca7e5df63536737086c9dbdc67253be80fe758387ea710b92a28e51e69c953db88932a06b7365e46522876ff1b3522c024068631512ff6c9b5d9084136f372819581d9cf43ee12ddd3501a2e322a0fd2ad74f43dd52846a9f2a92913d01620ac96466a53df55c5f14ac31c0ddcf579bb00ed075c5bd085e33e57f41131ab1c06de4aeb415a17697fa979b0d01c600"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "04f8f2f93fd568303b0b5afd860aed0b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x9, 0x2, 0xf, 0x5}]}, 0x2, [{0xc4, &(0x7f0000000440)=@string={0xc4, 0x3, "17ace34db7bde68bb8811f733ddd562eb5ebc59bc872f8bad2864c54da6eff3ad40d696f800c94040d106e29d5e9e7b1bcd567f1d5ec30c763c3a7d4d1ab8b475813bd9a742090c8343910774bfa62cecb9314b55eb4d97e19ae8ce71a39b6c47355617c6b45b791b207b0708b2f2c5c98a33846aa2cbc6f295935aeead8a0eeb4aedf47b27779bd47f6ae34e8591a49469bcdf3aa9d342a215f6e25ab90081b1aa597d60663a90cfd4799518c603130b56b5c63a973810d359d8149ddd2a1c32fad"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x430}}]})
unshare(0x200)

6.332196308s ago: executing program 4 (id=274):
mkdir(&(0x7f0000000000)='./file0\x00', 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x9}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, 0x0, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)

6.267760974s ago: executing program 4 (id=275):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x20, 0x0, 0x2, "f6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0xe0, 0x1}}, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0xb, 0x2, "8e6d"}, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "c96f"}, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000440)={0x20, 0x15, 0x2, '\x00J'}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x2, 0x10, {0x10, 0x0, "dfbf0a26c2a83cd63e6f55c06bb1"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000600)={0x0, 0xf, 0x8f, {0x5, 0xf, 0x8f, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "5c76c25563745eb4f3af32bc42c6bc8f"}, @generic={0x76, 0x10, 0x3, "bba52972b25d7bd5108b96d04262a674a6c18551806f44d62d44244d85a7bd7a4411469b4b9e66beff7da06b02a156627c73fa7ad5b685bcfbe6ef8776c0aa9a596fee1730dcae4d2bcbc81feb55ecf57b97ce9ebf0b5797fb3e14e1dbe18e715520f4cb2051dcc0a7df3ad64ea4c9ab171790"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x4, 0x4, "c5b467b1", "a0788f7c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x6, 0x3, 0xce, 0x0, 0x1d}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000700)={0x0, 0x15, 0xb2, "626df4c7a4cb748cdd5b8f731cbe98b12a2172023247728c2adae8ed015c7d90b19fe048e04467efb215a8019b8401a2743ac7c8743eab499e185c64e8480492ad718182ed1908533c8a37b8454128afea3c7bc191892ca6a226ff2301cf8a994065d2334dfb5b0b44ae99a0d83527f7ecc8f260bdfbc66eb98ff252d3fd70e564f4a98bf9f7b23ab37c45f6a42ba925fe8bb8755c199201b3162a68134ad382cfe52aa4e36bf93d9753f50bafbf8d083804"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x200, 0x1, [0x0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0xb, 0x2, 'NN'}, &(0x7f00000008c0)={0x40, 0xf, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000980)={0x40, 0x19, 0x2, "8941"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xe9ed}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000b00)={0x40, 0x1e, 0x1}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xb}})
r3 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="0ae0deec74bf592f5e0ca86e1e0d97d13b991d94fe862ccdb5282675cbf36c4fa3abfec7dd35d5d27309d7a433e9fd128e678b33529c46e6184baa68053601d2c4da5254374c9946649c115c714a26bc6e3639ab5d9ea77a279c6717cad87bfbed64ddfe28f026918acb77af49053a5b3b6187b5c876ab9c9fdeca66ad279c79bc5e2ddc5e004c1a7bb1a353ce38af4eee66d551d3e6", 0x96, 0xfffffffffffffffd)
keyctl$describe(0x6, r3, &(0x7f00000001c0)=""/71, 0x47)
syz_usb_control_io$uac1(r2, &(0x7f0000001000)={0x14, &(0x7f0000000e80)={0x40, 0x1, 0x42, {0x42, 0x8, "fed046e00c80bec5f0b85737fbd124c7edd792d62cdf96c62fb9e536fd6dae1b59699e4490ec9d2f15fa773b8315fd7212b652d09877d0f17f3bf4f67bd7f04a"}}, &(0x7f0000000f00)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "acfc8697f4336c8d82caef42407b2b2e069866252da37007d016b8a2b66ff242c47d8998ff3cf2522d9a8cfb637d8ca0b531dbb8c44808544413fc2d7ef5a66f44ed47a199ff80b56591a37c2d15f1ef7de162091df220d50f408325ee32ee2eb90b87765170deca44332e22380fdc720de32eb34cb515f8b348f470bec3beb6094b521dc1d92dbdf9b10383e046109cc3d5c92920f614a5d1a542fa91f85c2877e7e8602c368516f802c1b4fde9ef540e9d3c338f7ffac34d9f2cccdcea259301dc7c50432a7c809f6c1bf0ff3cce1b6c724707fb04"}}}, &(0x7f0000001340)={0x44, &(0x7f0000001040)={0x0, 0x7, 0xff, "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"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001200)={0x20, 0x81, 0x3, "0122e2"}, &(0x7f0000001240)={0x20, 0x82, 0x3, "0e6dfc"}, &(0x7f0000001280)={0x20, 0x83, 0x1, "cc"}, &(0x7f00000012c0)={0x20, 0x84, 0x3, "f0cee3"}, &(0x7f0000001300)={0x20, 0x85, 0x3, "eaceab"}})
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$char_usb(r4, &(0x7f0000000d80)="2ecb054987b6998f56aafc9704e1b74fe2a763c1c51e9231f8213efeda2a27d153eb04f48775093ca2714837cd64cf3cfa3f3fdf5aab1637700097b0990d2bb3ab59115c2d6bf74ed6805129e31743e50206b9b3ac2083edc8c27b177fb7ac009bce9e5c837a61c901f3e9d463598ad12a989b53f114bb58e808b87fe455cd3a1df55ad9a69ec3b99e22e9ed3bc21df20cfbfe15746726dd5c06cfa8a93b49020fe689ea98fa81b0b1317b0b0da6c9283a615ecd2111318cba0b5d1dc8b70ff67b421a1907b8ab3e0f1797c86bae0f188218e7bf3e80fd5ca0bdb14ae85865b7bd2b9d2ca7501cbad74a07", 0xeb)

4.123602037s ago: executing program 4 (id=279):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x3000, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_INTERRUPT(r4, 0x50009405, &(0x7f00000001c0))
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x8)

4.041762725s ago: executing program 4 (id=280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bc95d720f53b01d550230102030509021200010000000409044200007be37900"], 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050007000100"], 0x24}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0)
r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300004000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=""/48, 0x30}], 0x1}, 0x62)
syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400e3b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x208000)
ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/95)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xfd}]}, 0x28}, 0x1, 0x0, 0x0, 0x200180c0}, 0x4040010)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r12, 0x29, 0x33, 0x0, &(0x7f0000000040))

3.487886243s ago: executing program 1 (id=285):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa301, 0x0)
write$sndseq(r0, 0x0, 0x72)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0))
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34b801)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x0, <r4=>0x0, 0x2})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000240)={0x5, r4})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010000000000000001001c00000008000200090000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf)

3.300960576s ago: executing program 1 (id=287):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.085772142s ago: executing program 1 (id=288):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0xc6ce069ebb14c3a1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.933886371s ago: executing program 2 (id=290):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000180)) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0)

2.360024501s ago: executing program 4 (id=292):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, 0x0, r1)
stat(&(0x7f0000000980)='./file0\x00', 0x0)

2.290833072s ago: executing program 4 (id=293):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x4a)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0)
mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x1840c00, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_none}], [{@pcr={'pcr', 0x3d, 0x1e}}, {@context={'context', 0x3d, 'root'}}]}})
setxattr$incfs_metadata(&(0x7f0000000180)='./file1\x00', &(0x7f00000005c0), &(0x7f0000000600)="246ded44f7", 0x5, 0x2)
write$UHID_CREATE2(r5, 0x0, 0x141)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x20, 0x30, 0xf8, {0xf8, 0xd, "eac9353cefdadba19efb3cc3256ae7973a8df83b3a415860118b8d1d4e395884bcc77b33af7b7a134a14ce42d193bf4bd58c80aa47cbd44e69c8b531bbc18a64c5cb27b2b1f5a6c1587330f27e5bd14748140523e731529dfa1423a68440eb4d9eb3e9a6f3d147f064c6e481355d91226e1a3ecc770e674afac842c63ec22a50aa4d762a1276c82fe19c277f4a6ed588d0f1b8386973e94f968ed798f2499ddb1314a82daee4f00dcb69f92459d953351bc99dfeb623bb0bed739b5bfc4d8606d26757f4023b89f76740ef78aae92cfb899b3659904e4639e3140dc2df82327d071bfa197c278da4973d8a2bceeaee3451ae85573991"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="4005b3f0bda0f5de6b5c929a5d5549482bc3b5fbe8222e53c498dda4fdbe0b257800bfc111a2e715f812db57e0f5db5447372bd0826392938dccdcf0ee027d6e95aad91d203ad68c2ab638a55b554558ed21630f68cd6cc93bff2fcf333e00"/106], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x43}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4f}})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x6011, r5, 0x8000000)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xfdbd)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.716170149s ago: executing program 2 (id=294):
mkdir(&(0x7f0000000000)='./file0\x00', 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x9}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, 0x0, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)

1.644993914s ago: executing program 2 (id=295):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa301, 0x0)
write$sndseq(r0, 0x0, 0x72)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0))
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34b801)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x0, <r4=>0x0, 0x2})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000240)={0x5, r4})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010000000000000001001c00000008000200090000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf)

1.504069692s ago: executing program 2 (id=296):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.383896855s ago: executing program 2 (id=297):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x80000, 0x5)
unshare(0x8000000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x10001}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
r4 = memfd_secret(0x80000)
read$hiddev(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
unshare(0x22020600)
r6 = memfd_secret(0x0)
timerfd_gettime(r6, 0x0)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000440)=[{0x3, 0x6, 0x1000}], 0x1, 0x0)
unshare(0xa008400)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="08000800070002000000140000004520002800680000030690780a010100f51414bb4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5100000190780008"], 0x36)
creat(&(0x7f0000000280)='./file0\x00', 0x2e)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x29, 0xb, 0x6, {0x1a, @hdata="c3b467aca71fbfd283e0a12e23d2fa504990e9652cad691071ad38e75600000000000000000000cb092114393b5dd300", {0x0, @remote, 0x7f, 0x2, [0x8, 0x7]}, @sctp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x4e22, 0x81}, {0x0, @random="0ae0458aab80", 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}, 0x6, [0x10, 0x7, 0x2, 0x9, 0x9, 0x0]}})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
read$ptp(r1, &(0x7f0000000300)=""/210, 0xd2)
r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r9, 0x400, 0x2)
read$rfkill(r9, &(0x7f0000000040), 0x8)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)

1.245831237s ago: executing program 2 (id=298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', <r5=>0x0, 0x8, 0x20, 0x6, 0x100, {{0xd, 0x4, 0x0, 0x6, 0x34, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0xb, 0x7b, [@local, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x2, [{@private=0xa010102, 0x6}, {@multicast1, 0x400}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xb0, 0x0, 0x100, 0x70bd2b, 0x1000, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb0}}, 0x4040083)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r7=>0xffffffffffffffff})
syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100"], 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r10 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1)
ioctl$USBDEVFS_CONTROL(r10, 0x80045503, &(0x7f0000000000)={0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0})
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r9, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100"})
socket$kcm(0x10, 0x2, 0x4)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000fcffffff2b00000008000300", @ANYRES32=r11, @ANYBLOB="0400460005003400c4000000080026006c09000028005180240000800900010000000000000000000500000800030001ac0f000400050000"], 0x58}, 0x1, 0x0, 0x0, 0x4044015}, 0x48000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="8f2bf6c130"], 0x48)

903.04862ms ago: executing program 3 (id=301):
io_setup(0x80000000, &(0x7f0000000240))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x3)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x18, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

738.241584ms ago: executing program 3 (id=302):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xb0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0)
socket$alg(0x26, 0x5, 0x700)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0})
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)

672.918837ms ago: executing program 3 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x22)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90, 0x0, r4, {0x0, 0x0, 0xffffffffffffffff, 0x2, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}}}, 0x90)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

535.095671ms ago: executing program 3 (id=304):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
fchdir(r1)
r2 = memfd_create(0x0, 0x0)
write(r2, &(0x7f00000005c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de505000000000000007190ba2b6d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100040, 0x0)

457.2507ms ago: executing program 3 (id=305):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

340.898029ms ago: executing program 3 (id=306):
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x140b, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}}, 0x8040)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='[', 0x1}], 0x1}}], 0x1, 0x9200000000000000)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000900000825020000000000"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

0s ago: executing program 1 (id=307):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000d0000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
[   82.451056][ T5848] cgroup: Unknown subsys name 'net'
[   82.579981][ T5848] cgroup: Unknown subsys name 'cpuset'
[   82.589010][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.222132][ T5848] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.167949][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.186456][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.196503][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.206953][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.216055][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.267727][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.276131][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.283738][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.316928][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.325017][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.333587][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.346489][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.355177][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.376642][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.376706][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.391548][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.399138][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.406969][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.415851][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.440083][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.763596][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   89.034279][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   89.053538][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.061206][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.068741][ T5857] bridge_slave_0: entered allmulticast mode
[   89.076526][ T5857] bridge_slave_0: entered promiscuous mode
[   89.139051][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.147098][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.154286][ T5857] bridge_slave_1: entered allmulticast mode
[   89.162419][ T5857] bridge_slave_1: entered promiscuous mode
[   89.284007][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   89.315334][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.322861][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.330130][ T5866] bridge_slave_0: entered allmulticast mode
[   89.339123][ T5866] bridge_slave_0: entered promiscuous mode
[   89.350237][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.367459][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   89.379463][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.386773][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.393950][ T5866] bridge_slave_1: entered allmulticast mode
[   89.401570][ T5866] bridge_slave_1: entered promiscuous mode
[   89.411435][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.524741][ T5857] team0: Port device team_slave_0 added
[   89.550701][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.562666][ T5857] team0: Port device team_slave_1 added
[   89.599657][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.671149][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.678243][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.704722][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.746198][ T5866] team0: Port device team_slave_0 added
[   89.752854][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.760067][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.786047][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.805363][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.812721][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.821053][ T5863] bridge_slave_0: entered allmulticast mode
[   89.829062][ T5863] bridge_slave_0: entered promiscuous mode
[   89.856854][ T5866] team0: Port device team_slave_1 added
[   89.863046][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.870259][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.877531][ T5862] bridge_slave_0: entered allmulticast mode
[   89.885107][ T5862] bridge_slave_0: entered promiscuous mode
[   89.894618][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.904754][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.912398][ T5863] bridge_slave_1: entered allmulticast mode
[   89.921413][ T5863] bridge_slave_1: entered promiscuous mode
[   89.942578][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.949956][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.957485][ T5862] bridge_slave_1: entered allmulticast mode
[   89.964707][ T5862] bridge_slave_1: entered promiscuous mode
[   90.039370][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.047709][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.073979][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.106435][ T5857] hsr_slave_0: entered promiscuous mode
[   90.113170][ T5857] hsr_slave_1: entered promiscuous mode
[   90.135467][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.145374][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.152494][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.178427][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.214620][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.227548][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.273569][ T5863] team0: Port device team_slave_0 added
[   90.282349][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.297553][   T53] Bluetooth: hci0: command tx timeout
[   90.347969][ T5863] team0: Port device team_slave_1 added
[   90.408373][ T5862] team0: Port device team_slave_0 added
[   90.434578][ T5866] hsr_slave_0: entered promiscuous mode
[   90.441051][ T5866] hsr_slave_1: entered promiscuous mode
[   90.447535][ T5866] debugfs: 'hsr0' already exists in 'hsr'
[   90.453344][ T5866] Cannot create hsr debugfs directory
[   90.459327][   T53] Bluetooth: hci1: command tx timeout
[   90.466912][   T53] Bluetooth: hci3: command tx timeout
[   90.466922][ T5867] Bluetooth: hci2: command tx timeout
[   90.477189][ T5862] team0: Port device team_slave_1 added
[   90.484371][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.491446][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.517521][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.530355][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.537650][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.563636][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.649673][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.657059][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.683095][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.696656][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.703644][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.729675][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.868935][ T5863] hsr_slave_0: entered promiscuous mode
[   90.875393][ T5863] hsr_slave_1: entered promiscuous mode
[   90.882335][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   90.888159][ T5863] Cannot create hsr debugfs directory
[   90.911283][ T5862] hsr_slave_0: entered promiscuous mode
[   90.918098][ T5862] hsr_slave_1: entered promiscuous mode
[   90.924232][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   90.930091][ T5862] Cannot create hsr debugfs directory
[   91.192650][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.234255][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.247605][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.288592][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.398397][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.424226][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.438377][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.463252][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.527680][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.551463][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.564531][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.585346][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.701887][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.714291][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.742752][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.771817][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.831181][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.844923][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.903010][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   91.938912][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.946236][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.961762][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   91.992985][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.000159][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.028005][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.037212][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.044381][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.066986][    T9] cfg80211: failed to load regulatory.db
[   92.079671][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.086832][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.139334][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   92.169219][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.176548][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.204921][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.222510][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.229717][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.251896][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.339535][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   92.375790][   T53] Bluetooth: hci0: command tx timeout
[   92.385148][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.392365][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.424323][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.431578][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.541075][   T53] Bluetooth: hci2: command tx timeout
[   92.543710][ T5867] Bluetooth: hci3: command tx timeout
[   92.552800][ T5867] Bluetooth: hci1: command tx timeout
[   92.685351][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.819265][ T5857] veth0_vlan: entered promiscuous mode
[   92.832986][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.853397][ T5857] veth1_vlan: entered promiscuous mode
[   92.977244][ T5857] veth0_macvtap: entered promiscuous mode
[   93.008547][ T5857] veth1_macvtap: entered promiscuous mode
[   93.064043][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.077010][ T5866] veth0_vlan: entered promiscuous mode
[   93.093773][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.120289][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.135251][ T1336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.150533][ T1336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.161216][ T5866] veth1_vlan: entered promiscuous mode
[   93.179498][ T1314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.188877][ T1314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.204052][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.264435][ T5866] veth0_macvtap: entered promiscuous mode
[   93.304978][ T5866] veth1_macvtap: entered promiscuous mode
[   93.362307][ T5862] veth0_vlan: entered promiscuous mode
[   93.379334][ T5862] veth1_vlan: entered promiscuous mode
[   93.386740][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.394701][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.442343][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.484801][ T5863] veth0_vlan: entered promiscuous mode
[   93.499049][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.512432][ T5862] veth0_macvtap: entered promiscuous mode
[   93.521105][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.528783][ T5862] veth1_macvtap: entered promiscuous mode
[   93.537461][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.545234][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.570757][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.590675][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.602337][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.615377][ T5863] veth1_vlan: entered promiscuous mode
[   93.651228][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.661361][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.670929][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.760661][ T1336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.782373][ T1336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.792419][ T5950] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   93.814717][ T1336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.873760][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.891699][ T5863] veth0_macvtap: entered promiscuous mode
[   93.925403][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.943889][ T5863] veth1_macvtap: entered promiscuous mode
[   93.965128][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.011603][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.028404][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.080983][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.091206][ T5952] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   94.127272][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.141082][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.149761][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.457619][ T5867] Bluetooth: hci0: command tx timeout
[   94.497768][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.617567][ T5867] Bluetooth: hci2: command tx timeout
[   94.617850][ T5180] Bluetooth: hci3: command tx timeout
[   94.625799][ T5867] Bluetooth: hci1: command tx timeout
[   94.666499][ T5915] usb 3-1: Using ep0 maxpacket: 32
[   94.693685][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.708172][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.718370][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   94.735412][ T5915] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   94.744602][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.776532][ T5915] usb 3-1: config 0 descriptor??
[   95.016630][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.058703][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.073868][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.077656][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.108526][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.141768][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.280915][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.300992][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input5
[   95.302074][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.323997][ T5959] Bluetooth: MGMT ver 1.23
[   95.376372][   T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   95.388782][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.408735][ T5954] Zero length message leads to an empty skb
[   95.413738][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.440598][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input6
[   95.590900][   T24] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   95.606582][ T5915] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[   95.644542][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.667272][   T24] usb 1-1: Product: syz
[   95.671514][   T24] usb 1-1: Manufacturer: syz
[   95.727945][ T5915] usb 3-1: USB disconnect, device number 2
[   95.736505][   T24] usb 1-1: SerialNumber: syz
[   95.797194][   T24] usb 1-1: config 0 descriptor??
[   95.822330][   T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   95.859098][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   95.865452][ T5962] fido_id[5962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   95.879292][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[   95.948019][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.038740][ T5956] netlink: 'syz.0.6': attribute type 40 has an invalid length.
[   96.080565][   T60] nci: nci_ntf_packet: unknown ntf opcode 0x13d
[   96.111958][ T5930] usb 1-1: USB disconnect, device number 2
[   96.292909][ T5975] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   96.538278][ T5180] Bluetooth: hci0: command tx timeout
[   96.697635][ T5180] Bluetooth: hci1: command tx timeout
[   96.703126][   T53] Bluetooth: hci2: command tx timeout
[   96.968941][ T5994] No control pipe specified
[   97.178916][ T6002] 9pnet_fd: Insufficient options for proto=fd
[   97.339098][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   97.920701][ T6027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   97.953087][ T6027] CIFS mount error: No usable UNC path provided in device string!
[   97.953087][ T6027] 
[   97.974612][ T6027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   98.026906][ T6029] FAULT_INJECTION: forcing a failure.
[   98.026906][ T6029] name failslab, interval 1, probability 0, space 0, times 1
[   98.066886][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) 
[   98.066914][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   98.066935][ T6029] Call Trace:
[   98.066943][ T6029]  <TASK>
[   98.066952][ T6029]  dump_stack_lvl+0x189/0x250
[   98.066984][ T6029]  ? __pfx____ratelimit+0x10/0x10
[   98.067012][ T6029]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.067027][ T6029]  ? __pfx__printk+0x10/0x10
[   98.067063][ T6029]  ? __pfx___might_resched+0x10/0x10
[   98.067086][ T6029]  ? fs_reclaim_acquire+0x7d/0x100
[   98.067117][ T6029]  should_fail_ex+0x414/0x560
[   98.067146][ T6029]  should_failslab+0xa8/0x100
[   98.067173][ T6029]  __kmalloc_noprof+0xcb/0x7f0
[   98.067195][ T6029]  ? __d_alloc+0xb5/0x7a0
[   98.067232][ T6029]  __d_alloc+0xb5/0x7a0
[   98.067262][ T6029]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.067296][ T6029]  d_alloc_parallel+0xe5/0x15e0
[   98.067320][ T6029]  ? stack_depot_save_flags+0x41b/0x860
[   98.067364][ T6029]  ? __pfx_d_alloc_parallel+0x10/0x10
[   98.067389][ T6029]  ? __raw_spin_lock_init+0x45/0x100
[   98.067422][ T6029]  ? __init_waitqueue_head+0xa9/0x150
[   98.067458][ T6029]  __lookup_slow+0x116/0x3d0
[   98.067489][ T6029]  ? __pfx___lookup_slow+0x10/0x10
[   98.067527][ T6029]  ? down_read+0x1ad/0x2e0
[   98.067551][ T6029]  lookup_one_unlocked+0x127/0x250
[   98.067570][ T6029]  ? kfree+0x199/0x6d0
[   98.067592][ T6029]  lookup_one_positive_unlocked+0x26/0xb0
[   98.067616][ T6029]  ovl_lookup_index+0x27a/0x790
[   98.067655][ T6029]  ? ovl_lookup_layer+0x377/0x450
[   98.067685][ T6029]  ? __pfx_ovl_lookup_index+0x10/0x10
[   98.067715][ T6029]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[   98.067752][ T6029]  ovl_lookup+0x13f1/0x1bc0
[   98.067796][ T6029]  ? d_alloc_parallel+0x14ae/0x15e0
[   98.067834][ T6029]  ? __pfx_ovl_lookup+0x10/0x10
[   98.067860][ T6029]  ? mark_lock_irq+0x317/0x390
[   98.067888][ T6029]  ? __pfx_d_alloc_parallel+0x10/0x10
[   98.067914][ T6029]  ? __raw_spin_lock_init+0x45/0x100
[   98.067947][ T6029]  ? __init_waitqueue_head+0xa9/0x150
[   98.067983][ T6029]  __lookup_slow+0x294/0x3d0
[   98.068005][ T6029]  ? __pfx___lookup_slow+0x10/0x10
[   98.068042][ T6029]  ? down_read+0x1ad/0x2e0
[   98.068066][ T6029]  lookup_slow+0x53/0x70
[   98.068087][ T6029]  walk_component+0x2d2/0x400
[   98.068115][ T6029]  ? path_lookupat+0x156/0x430
[   98.068150][ T6029]  path_lookupat+0x163/0x430
[   98.068190][ T6029]  filename_lookup+0x212/0x570
[   98.068228][ T6029]  ? __pfx_filename_lookup+0x10/0x10
[   98.068286][ T6029]  ? strncpy_from_user+0x150/0x290
[   98.068312][ T6029]  ? getname_flags+0x1e5/0x540
[   98.068351][ T6029]  user_path_at+0x3a/0x60
[   98.068371][ T6029]  do_fchownat+0x105/0x270
[   98.068403][ T6029]  ? __pfx_do_fchownat+0x10/0x10
[   98.068441][ T6029]  __x64_sys_lchown+0x85/0xa0
[   98.068484][ T6029]  do_syscall_64+0xfa/0xfa0
[   98.068515][ T6029]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.068545][ T6029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.068567][ T6029]  ? clear_bhb_loop+0x60/0xb0
[   98.068592][ T6029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.068613][ T6029] RIP: 0033:0x7f0a9e58eba9
[   98.068639][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.068656][ T6029] RSP: 002b:00007f0a9f43c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[   98.068678][ T6029] RAX: ffffffffffffffda RBX: 00007f0a9e7d5fa0 RCX: 00007f0a9e58eba9
[   98.068694][ T6029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   98.068706][ T6029] RBP: 00007f0a9f43c090 R08: 0000000000000000 R09: 0000000000000000
[   98.068719][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.068731][ T6029] R13: 00007f0a9e7d6038 R14: 00007f0a9e7d5fa0 R15: 00007ffd2b3525e8
[   98.068766][ T6029]  </TASK>
[   98.074946][ T6029] overlayfs: failed inode index lookup (ino=63, key=00fb210001d2dd98ab3e1e4485b82796f8e276fcbad408d8b53f00000000000000, err=-12);
[   98.074946][ T6029] overlayfs: mount with '-o index=off' to disable inodes index.
[   98.597740][ T5930] IPVS: starting estimator thread 0...
[   98.606084][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   98.610244][ T6041] Invalid ELF header type: 2 != 1
[   98.619516][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.640362][ T6041] warning: `syz.3.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.654817][ T6041] netlink: 'syz.3.31': attribute type 1 has an invalid length.
[   98.686376][   T10] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   98.736882][ T6042] IPVS: using max 23 ests per chain, 55200 per kthread
[   98.784604][ T5915] usb 3-1: Using ep0 maxpacket: 8
[   98.800902][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.811457][ T5867] Bluetooth: hci0: unexpected event for opcode 0x1003
[   98.820698][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   98.825722][   T10] usb 2-1: device descriptor read/64, error -71
[   98.833722][ T5915] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   98.845156][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.869284][ T5915] hub 3-1:1.0: bad descriptor, ignoring hub
[   98.875268][ T5915] hub 3-1:1.0: probe with driver hub failed with error -5
[   98.917222][ T6050] netlink: 'syz.0.34': attribute type 21 has an invalid length.
[   98.925267][ T6050] netlink: 156 bytes leftover after parsing attributes in process `syz.0.34'.
[   99.073124][ T5867] Bluetooth: hci3: adv larger than maximum supported
[   99.073177][ T5867] Bluetooth: hci3: Malformed LE Event: 0x0d
[   99.098308][   T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   99.195967][ T5930] usb 3-1: USB disconnect, device number 3
[   99.245749][   T10] usb 2-1: device descriptor read/64, error -71
[   99.366402][   T10] usb usb2-port1: attempt power cycle
[   99.669627][ T6069] FAULT_INJECTION: forcing a failure.
[   99.669627][ T6069] name failslab, interval 1, probability 0, space 0, times 0
[   99.700142][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) 
[   99.700169][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   99.700180][ T6069] Call Trace:
[   99.700188][ T6069]  <TASK>
[   99.700195][ T6069]  dump_stack_lvl+0x189/0x250
[   99.700219][ T6069]  ? __pfx____ratelimit+0x10/0x10
[   99.700245][ T6069]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.700262][ T6069]  ? __pfx__printk+0x10/0x10
[   99.700293][ T6069]  ? __pfx___might_resched+0x10/0x10
[   99.700311][ T6069]  ? fs_reclaim_acquire+0x7d/0x100
[   99.700336][ T6069]  should_fail_ex+0x414/0x560
[   99.700363][ T6069]  should_failslab+0xa8/0x100
[   99.700386][ T6069]  __kmalloc_node_noprof+0xd2/0x800
[   99.700406][ T6069]  ? alloc_slab_obj_exts+0x31/0x80
[   99.700441][ T6069]  alloc_slab_obj_exts+0x31/0x80
[   99.700461][ T6069]  __memcg_slab_post_alloc_hook+0x31e/0x7d0
[   99.700493][ T6069]  ? kasan_unpoison+0x48/0x70
[   99.700517][ T6069]  __kmalloc_noprof+0x48f/0x7f0
[   99.700538][ T6069]  ? __d_alloc+0xb5/0x7a0
[   99.700568][ T6069]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   99.700608][ T6069]  __d_alloc+0xb5/0x7a0
[   99.700645][ T6069]  d_alloc_parallel+0xe5/0x15e0
[   99.700669][ T6069]  ? stack_depot_save_flags+0x40/0x860
[   99.700711][ T6069]  ? __pfx_d_alloc_parallel+0x10/0x10
[   99.700737][ T6069]  ? __raw_spin_lock_init+0x45/0x100
[   99.700768][ T6069]  ? __init_waitqueue_head+0xa9/0x150
[   99.700805][ T6069]  __lookup_slow+0x116/0x3d0
[   99.700829][ T6069]  ? __pfx___lookup_slow+0x10/0x10
[   99.700867][ T6069]  ? down_read+0x1ad/0x2e0
[   99.700897][ T6069]  lookup_one_unlocked+0x127/0x250
[   99.700917][ T6069]  ? kfree+0x199/0x6d0
[   99.700939][ T6069]  lookup_one_positive_unlocked+0x26/0xb0
[   99.700962][ T6069]  ovl_lookup_index+0x27a/0x790
[   99.701002][ T6069]  ? ovl_lookup_layer+0x377/0x450
[   99.701032][ T6069]  ? __pfx_ovl_lookup_index+0x10/0x10
[   99.701062][ T6069]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[   99.701099][ T6069]  ovl_lookup+0x13f1/0x1bc0
[   99.701145][ T6069]  ? d_alloc_parallel+0x14ae/0x15e0
[   99.701184][ T6069]  ? __pfx_ovl_lookup+0x10/0x10
[   99.701215][ T6069]  ? __lock_acquire+0xab9/0xd20
[   99.701239][ T6069]  ? __pfx_d_alloc_parallel+0x10/0x10
[   99.701258][ T6069]  ? look_up_lock_class+0x74/0x170
[   99.701295][ T6069]  ? __raw_spin_lock_init+0x45/0x100
[   99.701327][ T6069]  ? __init_waitqueue_head+0xa9/0x150
[   99.701360][ T6069]  __lookup_slow+0x294/0x3d0
[   99.701379][ T6069]  ? __pfx___lookup_slow+0x10/0x10
[   99.701411][ T6069]  ? down_read+0x1ad/0x2e0
[   99.701439][ T6069]  lookup_slow+0x53/0x70
[   99.701457][ T6069]  walk_component+0x2d2/0x400
[   99.701485][ T6069]  ? path_lookupat+0x156/0x430
[   99.701521][ T6069]  path_lookupat+0x163/0x430
[   99.701563][ T6069]  filename_lookup+0x212/0x570
[   99.701603][ T6069]  ? __pfx_filename_lookup+0x10/0x10
[   99.701664][ T6069]  ? strncpy_from_user+0x150/0x290
[   99.701693][ T6069]  ? getname_flags+0x1e5/0x540
[   99.701729][ T6069]  user_path_at+0x3a/0x60
[   99.701752][ T6069]  do_fchownat+0x105/0x270
[   99.701787][ T6069]  ? __pfx_do_fchownat+0x10/0x10
[   99.701819][ T6069]  ? __pfx_ksys_write+0x10/0x10
[   99.701849][ T6069]  __x64_sys_lchown+0x85/0xa0
[   99.701883][ T6069]  do_syscall_64+0xfa/0xfa0
[   99.701913][ T6069]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.701945][ T6069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.701967][ T6069]  ? clear_bhb_loop+0x60/0xb0
[   99.701993][ T6069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.702015][ T6069] RIP: 0033:0x7f0a9e58eba9
[   99.702034][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.702052][ T6069] RSP: 002b:00007f0a9f43c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[   99.702074][ T6069] RAX: ffffffffffffffda RBX: 00007f0a9e7d5fa0 RCX: 00007f0a9e58eba9
[   99.702089][ T6069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   99.702101][ T6069] RBP: 00007f0a9f43c090 R08: 0000000000000000 R09: 0000000000000000
[   99.702114][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   99.702126][ T6069] R13: 00007f0a9e7d6038 R14: 00007f0a9e7d5fa0 R15: 00007ffd2b3525e8
[   99.702161][ T6069]  </TASK>
[   99.703451][ T6069] evm: overlay not supported
[   99.945881][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.947862][   T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  100.162277][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.166957][   T10] usb 2-1: device descriptor read/8, error -71
[  100.209104][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.215111][ T6074] fuse: Bad value for 'group_id'
[  100.225132][ T6074] fuse: Bad value for 'group_id'
[  100.257408][ T5915] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  100.272558][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.278268][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.329674][ T5915] usb 3-1: config 0 descriptor??
[  100.399760][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.430925][   T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  100.458543][   T10] usb 2-1: device descriptor read/8, error -71
[  100.494206][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.567557][   T10] usb usb2-port1: unable to enumerate USB device
[  100.576054][  T845] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.591709][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.671480][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.682210][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.693325][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.702902][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.714268][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.739152][  T845] usb 4-1: Using ep0 maxpacket: 32
[  100.757335][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.777391][  T845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.797235][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.810458][  T845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.819362][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.820989][  T845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  100.841671][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.872272][ T5915] usbhid 3-1:0.0: can't add hid device: -71
[  100.882006][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  100.894469][ T5915] usb 3-1: USB disconnect, device number 4
[  100.908869][  T845] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  100.920486][  T845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.958390][   T13] bridge_slave_1: left allmulticast mode
[  100.969842][  T845] usb 4-1: config 0 descriptor??
[  100.975053][   T13] bridge_slave_1: left promiscuous mode
[  100.995408][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.013725][   T13] bridge_slave_0: left allmulticast mode
[  101.020001][   T13] bridge_slave_0: left promiscuous mode
[  101.026200][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.452972][  T845] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input7
[  101.585200][  T845] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input8
[  101.798579][  T845] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  102.021899][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.086466][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.098794][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.120333][   T13] bond0 (unregistering): Released all slaves
[  102.221078][ T5922] usb 4-1: USB disconnect, device number 2
[  102.277588][ T5858] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  102.288879][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.315581][ T5858] usb 3-1: Product: syz
[  102.320018][ T5858] usb 3-1: Manufacturer: syz
[  102.324718][ T5858] usb 3-1: SerialNumber: syz
[  102.570716][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  102.597981][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  102.609602][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  102.629971][ T5858] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  102.674787][ T5858] usb 3-1: USB disconnect, device number 5
[  102.779188][ T5867] Bluetooth: hci0: command tx timeout
[  103.001110][ T6130] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure
[  103.020857][   T13] hsr_slave_0: left promiscuous mode
[  103.035365][   T13] hsr_slave_1: left promiscuous mode
[  103.043739][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.055165][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.065180][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.078423][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.117239][   T13] veth1_macvtap: left promiscuous mode
[  103.125726][   T13] veth0_macvtap: left promiscuous mode
[  103.133000][   T13] veth1_vlan: left promiscuous mode
[  103.148811][   T13] veth0_vlan: left promiscuous mode
[  103.455753][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.651789][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.683379][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.697531][   T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  103.716388][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.724918][   T24] usb 2-1: Product: syz
[  103.734749][   T24] usb 2-1: Manufacturer: syz
[  103.742184][   T24] usb 2-1: SerialNumber: syz
[  103.782705][   T24] usb 2-1: config 0 descriptor??
[  103.808658][   T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  103.833518][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  103.864334][   T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  103.877064][   T24] usb 2-1: media controller created
[  103.924530][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.959233][   T13] team0 (unregistering): Port device team_slave_1 removed
[  104.001891][   T13] team0 (unregistering): Port device team_slave_0 removed
[  104.003641][   T24] DVB: Unable to find symbol tda10046_attach()
[  104.016618][   T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  104.025270][   T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  104.146121][ T5922] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  104.305659][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  104.313872][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.324422][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  104.333534][ T5922] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  104.342804][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.372961][ T5922] hub 3-1:1.0: bad descriptor, ignoring hub
[  104.380070][ T5922] hub 3-1:1.0: probe with driver hub failed with error -5
[  104.442228][ T6122] tipc: Started in network mode
[  104.447471][ T6122] tipc: Node identity 0622ce1fdbfe, cluster identity 4711
[  104.454872][ T6122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.470694][ T6077] chnl_net:caif_netlink_parms(): no params data found
[  104.504386][ T6126] syzkaller0: entered promiscuous mode
[  104.520098][ T6126] syzkaller0: entered allmulticast mode
[  104.530896][ T6137] tipc: Resetting bearer <eth:syzkaller0>
[  104.549431][   T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  104.588643][ T5867] Bluetooth: hci3: adv larger than maximum supported
[  104.588670][ T5867] Bluetooth: hci3: Malformed LE Event: 0x0d
[  104.600910][   T24] usb 2-1: USB disconnect, device number 6
[  104.706307][ T5922] usb 3-1: USB disconnect, device number 6
[  104.717663][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[  104.744678][ T6120] tipc: Disabling bearer <eth:syzkaller0>
[  104.757675][ T6158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.815135][ T6160] block device autoloading is deprecated and will be removed.
[  104.857685][ T5867] Bluetooth: hci0: command tx timeout
[  104.915276][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.923939][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.950223][ T6077] bridge_slave_0: entered allmulticast mode
[  104.971076][ T6077] bridge_slave_0: entered promiscuous mode
[  104.998319][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.005868][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.013117][ T6077] bridge_slave_1: entered allmulticast mode
[  105.021221][ T6077] bridge_slave_1: entered promiscuous mode
[  105.104346][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.124096][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.223825][ T6077] team0: Port device team_slave_0 added
[  105.267618][ T6077] team0: Port device team_slave_1 added
[  105.345991][ T6179] autofs: Unknown parameter '��Xٍ́U�R�2'
[  105.394541][ T6179] IPv6: Can't replace route, no match found
[  105.412904][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.430723][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.534066][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.564273][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.584476][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.690406][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.800954][ T6190] input: syz1 as /devices/virtual/input/input9
[  105.852861][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'.
[  105.887844][ T6194] tmpfs: Bad value for 'mpol'
[  105.919541][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'.
[  105.994115][ T6077] hsr_slave_0: entered promiscuous mode
[  106.014052][ T6077] hsr_slave_1: entered promiscuous mode
[  106.943986][ T5867] Bluetooth: hci0: command tx timeout
[  106.952059][ T6077] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.982671][ T6077] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.046184][ T6077] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.098321][ T6077] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.496478][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.568433][ T6077] 8021q: adding VLAN 0 to HW filter on device team0
[  107.651780][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.659005][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.702818][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.710114][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.005746][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.186765][ T5858] usb 2-1: Using ep0 maxpacket: 16
[  108.199128][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.225560][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  108.317133][ T5858] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  108.326320][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.334354][ T5858] usb 2-1: Product: syz
[  108.375696][ T5858] usb 2-1: Manufacturer: syz
[  108.377786][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.380365][ T5858] usb 2-1: SerialNumber: syz
[  108.418857][ T5858] usb 2-1: config 0 descriptor??
[  108.997803][ T6273] fuse: Unknown parameter 'grou00000000000000000000'
[  109.015973][ T5867] Bluetooth: hci0: command tx timeout
[  109.125122][ T6278] pimreg: entered allmulticast mode
[  109.160270][ T6277] pimreg: left allmulticast mode
[  109.319223][ T6077] veth0_vlan: entered promiscuous mode
[  109.369043][ T6077] veth1_vlan: entered promiscuous mode
[  109.437894][ T6077] veth0_macvtap: entered promiscuous mode
[  109.449354][ T6077] veth1_macvtap: entered promiscuous mode
[  109.473647][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.494366][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.529456][ T1314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.555392][ T1314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.578142][ T1314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.604361][ T1314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.749948][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.770264][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.822204][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.838350][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.923800][ T6296] fuse: Unknown parameter 'grou00000000000000000000'
[  110.156025][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  110.251011][ T6310] overlayfs: failed to resolve './file0': -2
[  110.334466][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  110.351168][   T10] usb 3-1: config 0 has no interface number 0
[  110.365748][   T10] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[  110.380771][   T10] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  110.403856][   T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  110.419713][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.451450][   T10] usb 3-1: config 0 descriptor??
[  110.682924][   T10] usb 3-1: string descriptor 0 read error: -71
[  110.707187][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  110.767432][ T5915] usb 2-1: USB disconnect, device number 7
[  110.830121][   T10] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2
[  110.861480][   T10] usb 3-1: USB disconnect, device number 7
[  110.882881][ T6330] fuse: Unknown parameter 'grou00000000000000000000'
[  111.030697][ T6335] mmap: syz.1.110 (6335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.109531][ T6337] tmpfs: Unknown parameter 'quo'
[  111.483548][ T6345] input: syz1 as /devices/virtual/input/input10
[  111.508353][   T30] audit: type=1107 audit(1757619845.386:2): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  111.527441][ T6347] overlayfs: failed lookup in lower (newroot/46, name='file1', err=-40): overlapping layers
[  111.714153][ T6355] fuse: Unknown parameter 'group_i00000000000000000000'
[  111.745692][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  111.830886][ T6359] tmpfs: Unknown parameter 'quo'
[  111.942562][ T5915] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  111.963704][ T5915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  111.995337][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.006961][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.014993][ T5915] usb 5-1: Product: syz
[  112.021392][ T5915] usb 5-1: Manufacturer: syz
[  112.052815][ T5915] usb 5-1: SerialNumber: syz
[  112.084277][ T6357] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.092469][ T6357] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.134324][ T6357] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.154172][ T6357] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.163708][ T6357] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.179037][ T6357] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.189426][ T6357] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  112.198076][ T6357] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.214494][ T6357] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.234312][ T6357] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.246587][ T6357] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.265603][ T6357] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.305141][ T6373] FAULT_INJECTION: forcing a failure.
[  112.305141][ T6373] name failslab, interval 1, probability 0, space 0, times 0
[  112.319336][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(full) 
[  112.319364][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  112.319377][ T6373] Call Trace:
[  112.319385][ T6373]  <TASK>
[  112.319393][ T6373]  dump_stack_lvl+0x189/0x250
[  112.319423][ T6373]  ? __pfx____ratelimit+0x10/0x10
[  112.319455][ T6373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.319475][ T6373]  ? __pfx__printk+0x10/0x10
[  112.319514][ T6373]  ? __pfx___might_resched+0x10/0x10
[  112.319537][ T6373]  ? fs_reclaim_acquire+0x7d/0x100
[  112.319576][ T6373]  should_fail_ex+0x414/0x560
[  112.319608][ T6373]  should_failslab+0xa8/0x100
[  112.319636][ T6373]  __kmalloc_noprof+0xcb/0x7f0
[  112.319658][ T6373]  ? tomoyo_encode+0x28b/0x550
[  112.319698][ T6373]  tomoyo_encode+0x28b/0x550
[  112.319737][ T6373]  tomoyo_realpath_from_path+0x58d/0x5d0
[  112.319784][ T6373]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  112.319810][ T6373]  tomoyo_path_number_perm+0x1e8/0x5a0
[  112.319852][ T6373]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  112.319883][ T6373]  ? register_lock_class+0x51/0x320
[  112.319941][ T6373]  ? __pfx_from_kgid+0x10/0x10
[  112.319963][ T6373]  ? down_write_killable+0x178/0x230
[  112.319990][ T6373]  ? __pfx_down_write_killable+0x10/0x10
[  112.320020][ T6373]  security_path_chown+0x13d/0x360
[  112.320044][ T6373]  chown_common+0x3bd/0x5c0
[  112.320084][ T6373]  ? __pfx_chown_common+0x10/0x10
[  112.320127][ T6373]  ? mnt_get_write_access+0x213/0x280
[  112.320158][ T6373]  do_fchownat+0x161/0x270
[  112.320191][ T6373]  ? __pfx_do_fchownat+0x10/0x10
[  112.320221][ T6373]  ? __pfx_ksys_write+0x10/0x10
[  112.320254][ T6373]  __x64_sys_lchown+0x85/0xa0
[  112.320286][ T6373]  do_syscall_64+0xfa/0xfa0
[  112.320317][ T6373]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.320348][ T6373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.320368][ T6373]  ? clear_bhb_loop+0x60/0xb0
[  112.320394][ T6373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.320413][ T6373] RIP: 0033:0x7f673358eba9
[  112.320432][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.320448][ T6373] RSP: 002b:00007f67343c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  112.320475][ T6373] RAX: ffffffffffffffda RBX: 00007f67337d5fa0 RCX: 00007f673358eba9
[  112.320491][ T6373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  112.320503][ T6373] RBP: 00007f67343c6090 R08: 0000000000000000 R09: 0000000000000000
[  112.320516][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  112.320528][ T6373] R13: 00007f67337d6038 R14: 00007f67337d5fa0 R15: 00007ffef3ef3738
[  112.320572][ T6373]  </TASK>
[  112.320637][ T6373] ERROR: Out of memory at tomoyo_realpath_from_path.
[  112.443447][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.612593][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.624859][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.634948][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.649518][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.650277][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.676228][ T5858] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  112.713735][ T6379] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in;
[  112.713735][ T6379]    program syz.1.127 not setting count and/or reply_len properly
[  112.735639][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.838002][ T5858] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  112.846500][ T5858] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  112.865577][   T10] usb 4-1: device descriptor read/64, error -71
[  112.886147][ T5858] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  112.897770][ T5858] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  112.909260][ T5858] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  112.922836][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  112.934752][ T5858] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  112.955551][ T5858] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  112.965198][ T5858] usb 3-1: Product: syz
[  112.969460][ T5858] usb 3-1: Manufacturer: syz
[  112.974515][ T5858] usb 3-1: SerialNumber: syz
[  112.991137][ T5858] usb 3-1: config 0 descriptor??
[  113.008081][ T6364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  113.019696][ T6385] fuse: Unknown parameter 'group_i00000000000000000000'
[  113.043226][ T5858] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  113.068911][ T5858] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  113.115701][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  113.240742][  T845] usb 3-1: USB disconnect, device number 8
[  113.246915][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  113.253140][   T10] usb 4-1: device descriptor read/64, error -71
[  113.265984][  T845] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  113.387512][   T10] usb usb4-port1: attempt power cycle
[  113.454295][ T6364] ldusb: No device or device unplugged -19
[  113.463424][ T6364] Bluetooth: MGMT ver 1.23
[  113.468350][ T5858] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  113.632239][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short
[  113.640600][ T5858] usb 2-1: not running at top speed; connect to a high speed hub
[  113.655247][ T5858] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13
[  113.664481][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.673442][ T5858] usb 2-1: Product: syz
[  113.677703][ T5858] usb 2-1: Manufacturer: syz
[  113.683694][ T5858] usb 2-1: SerialNumber: syz
[  113.725710][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.746537][   T10] usb 4-1: device descriptor read/8, error -71
[  113.947856][ T5867] Bluetooth: hci2: unexpected event for opcode 0x1003
[  113.986524][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout
[  113.991163][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.027973][   T10] usb 4-1: device descriptor read/8, error -71
[  114.157991][   T10] usb usb4-port1: unable to enumerate USB device
[  114.226179][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.305642][ T5867] Bluetooth: hci0: command 0x0405 tx timeout
[  114.311812][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  114.376366][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  114.490714][ T5915] usb 5-1: 0:2 : does not exist
[  114.518230][ T5858] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  114.550766][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  114.563524][ T5922] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.588130][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0
[  114.608638][ T5858] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -2
[  114.608913][ T5915] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  114.627835][ T5922] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  114.647061][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.673439][ T5858] usb 2-1: USB disconnect, device number 8
[  114.676254][ T5922] usb 3-1: config 0 descriptor??
[  114.695339][ T5915] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  114.712687][ T6401] netlink: 'syz.1.134': attribute type 21 has an invalid length.
[  114.739333][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  114.767893][ T5915] usb 5-1: USB disconnect, device number 2
[  114.768003][ T6401] netlink: 128 bytes leftover after parsing attributes in process `syz.1.134'.
[  114.865134][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.897358][ T6401] netlink: 'syz.1.134': attribute type 4 has an invalid length.
[  114.908397][ T6401] netlink: 3 bytes leftover after parsing attributes in process `syz.1.134'.
[  115.144273][ T5922] uclogic 0003:28BD:0078.0003: interface is invalid, ignoring
[  115.160301][ T6410] FAULT_INJECTION: forcing a failure.
[  115.160301][ T6410] name failslab, interval 1, probability 0, space 0, times 0
[  115.173938][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) 
[  115.173967][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  115.173980][ T6410] Call Trace:
[  115.173989][ T6410]  <TASK>
[  115.173997][ T6410]  dump_stack_lvl+0x189/0x250
[  115.174023][ T6410]  ? __pfx____ratelimit+0x10/0x10
[  115.174055][ T6410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.174074][ T6410]  ? __pfx__printk+0x10/0x10
[  115.174111][ T6410]  ? __pfx___might_resched+0x10/0x10
[  115.174143][ T6410]  should_fail_ex+0x414/0x560
[  115.174173][ T6410]  should_failslab+0xa8/0x100
[  115.174202][ T6410]  __kmalloc_noprof+0xcb/0x7f0
[  115.174223][ T6410]  ? kfree+0x4d/0x6d0
[  115.174239][ T6410]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  115.174276][ T6410]  tomoyo_realpath_from_path+0xe3/0x5d0
[  115.174305][ T6410]  ? tomoyo_domain+0xd9/0x130
[  115.174337][ T6410]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  115.174359][ T6410]  tomoyo_path_number_perm+0x1e8/0x5a0
[  115.174384][ T6410]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  115.174410][ T6410]  ? register_lock_class+0x51/0x320
[  115.174460][ T6410]  ? __pfx_from_kgid+0x10/0x10
[  115.174478][ T6410]  ? down_write_killable+0x178/0x230
[  115.174501][ T6410]  ? __pfx_down_write_killable+0x10/0x10
[  115.174526][ T6410]  security_path_chown+0x13d/0x360
[  115.174546][ T6410]  chown_common+0x3bd/0x5c0
[  115.174581][ T6410]  ? __pfx_chown_common+0x10/0x10
[  115.174617][ T6410]  ? mnt_get_write_access+0x213/0x280
[  115.174644][ T6410]  do_fchownat+0x161/0x270
[  115.174671][ T6410]  ? __pfx_do_fchownat+0x10/0x10
[  115.174697][ T6410]  ? __pfx_ksys_write+0x10/0x10
[  115.174724][ T6410]  __x64_sys_lchown+0x85/0xa0
[  115.174750][ T6410]  do_syscall_64+0xfa/0xfa0
[  115.174776][ T6410]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.174802][ T6410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.174819][ T6410]  ? clear_bhb_loop+0x60/0xb0
[  115.174841][ T6410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.174858][ T6410] RIP: 0033:0x7f673358eba9
[  115.174875][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.174890][ T6410] RSP: 002b:00007f67343c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  115.174909][ T6410] RAX: ffffffffffffffda RBX: 00007f67337d5fa0 RCX: 00007f673358eba9
[  115.174922][ T6410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  115.174932][ T6410] RBP: 00007f67343c6090 R08: 0000000000000000 R09: 0000000000000000
[  115.174943][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.174953][ T6410] R13: 00007f67337d6038 R14: 00007f67337d5fa0 R15: 00007ffef3ef3738
[  115.174983][ T6410]  </TASK>
[  115.174992][ T6410] ERROR: Out of memory at tomoyo_realpath_from_path.
[  115.454855][ T5922] usb 3-1: USB disconnect, device number 9
[  115.875748][  T845] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  115.925750][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  116.041313][  T845] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  116.055127][  T845] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  116.064092][  T845] usb 2-1: config 0 has no interface number 0
[  116.065911][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.070753][  T845] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  116.105623][   T10] usb 4-1: Using ep0 maxpacket: 16
[  116.110847][  T845] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.121431][  T845] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  116.131804][  T845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.142303][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  116.152793][   T10] usb 4-1: config 0 has no interface number 0
[  116.163049][  T845] usb 2-1: config 0 descriptor??
[  116.182546][   T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.194783][   T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.212854][   T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  116.224440][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.256626][   T10] usb 4-1: config 0 descriptor??
[  116.299071][   T53] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.323346][ T6424] fuse: Unknown parameter 'group_id00000000000000000000'
[  116.379250][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  116.417246][   T53] Bluetooth: hci3: unexpected event for opcode 0x1003
[  116.678521][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'.
[  116.688162][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'.
[  116.724415][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.745941][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.770623][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.780854][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.802478][   T10] usbhid 4-1:0.1: can't add hid device: -71
[  116.827323][   T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  116.851619][  T845] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input11
[  116.873457][   T10] usb 4-1: USB disconnect, device number 7
[  116.898984][  T845] input: failed to attach handler kbd to device input11, error: -5
[  117.123087][ T6435] FAULT_INJECTION: forcing a failure.
[  117.123087][ T6435] name failslab, interval 1, probability 0, space 0, times 0
[  117.136198][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) 
[  117.136229][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  117.136242][ T6435] Call Trace:
[  117.136250][ T6435]  <TASK>
[  117.136259][ T6435]  dump_stack_lvl+0x189/0x250
[  117.136286][ T6435]  ? __pfx____ratelimit+0x10/0x10
[  117.136317][ T6435]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.136338][ T6435]  ? __pfx__printk+0x10/0x10
[  117.136377][ T6435]  ? __pfx___might_resched+0x10/0x10
[  117.136409][ T6435]  should_fail_ex+0x414/0x560
[  117.136440][ T6435]  should_failslab+0xa8/0x100
[  117.136469][ T6435]  __kmalloc_noprof+0xcb/0x7f0
[  117.136489][ T6435]  ? kfree+0x4d/0x6d0
[  117.136505][ T6435]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  117.136547][ T6435]  tomoyo_realpath_from_path+0xe3/0x5d0
[  117.136583][ T6435]  ? tomoyo_domain+0xd9/0x130
[  117.136613][ T6435]  tomoyo_path_perm+0x213/0x4b0
[  117.136640][ T6435]  ? tomoyo_path_perm+0x1e3/0x4b0
[  117.136667][ T6435]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  117.136744][ T6435]  ? dget_parent+0x26/0x4a0
[  117.136778][ T6435]  security_inode_getattr+0x12f/0x330
[  117.136803][ T6435]  vfs_getattr+0x23/0x70
[  117.136836][ T6435]  ovl_copy_up_flags+0x3f6/0x3170
[  117.136865][ T6435]  ? unwind_get_return_address+0x4d/0x90
[  117.136895][ T6435]  ? arch_stack_walk+0xfc/0x150
[  117.136948][ T6435]  ? __pfx_ovl_copy_up_flags+0x10/0x10
[  117.136980][ T6435]  ? kasan_save_track+0x4f/0x80
[  117.136999][ T6435]  ? kasan_save_track+0x3e/0x80
[  117.137018][ T6435]  ? __kasan_save_free_info+0x46/0x50
[  117.137047][ T6435]  ? __kasan_slab_free+0x5b/0x80
[  117.137068][ T6435]  ? kfree+0x199/0x6d0
[  117.137084][ T6435]  ? cap_inode_getsecurity+0x64e/0x7d0
[  117.137107][ T6435]  ? security_inode_getsecurity+0x11c/0x400
[  117.137130][ T6435]  ? vfs_getxattr+0x185/0x290
[  117.137156][ T6435]  ? ovl_xattr_set+0x2df/0x4d0
[  117.137190][ T6435]  ? __vfs_removexattr+0x42e/0x470
[  117.137217][ T6435]  ? cap_inode_killpriv+0x24/0x50
[  117.137239][ T6435]  ? security_inode_killpriv+0x93/0x290
[  117.137261][ T6435]  ? setattr_prepare+0x1f7/0xac0
[  117.137282][ T6435]  ? ovl_setattr+0xad/0x550
[  117.137307][ T6435]  ? notify_change+0xc1a/0xf40
[  117.137327][ T6435]  ? chown_common+0x40c/0x5c0
[  117.137354][ T6435]  ? do_fchownat+0x161/0x270
[  117.137382][ T6435]  ? __x64_sys_lchown+0x85/0xa0
[  117.137410][ T6435]  ? do_syscall_64+0xfa/0xfa0
[  117.137441][ T6435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.137499][ T6435]  ? kasan_quarantine_put+0xdd/0x220
[  117.137520][ T6435]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.137614][ T6435]  ? __pfx_vfs_getxattr+0x10/0x10
[  117.137642][ T6435]  ? __pfx_cap_inode_getsecurity+0x10/0x10
[  117.137676][ T6435]  ovl_xattr_set+0x316/0x4d0
[  117.137717][ T6435]  ? __pfx_ovl_xattr_set+0x10/0x10
[  117.137751][ T6435]  ? __pfx_vfs_getxattr+0x10/0x10
[  117.137777][ T6435]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  117.137808][ T6435]  ? ovl_other_xattr_set+0x28/0x50
[  117.137835][ T6435]  ? __pfx_ovl_other_xattr_set+0x10/0x10
[  117.137887][ T6435]  __vfs_removexattr+0x42e/0x470
[  117.137930][ T6435]  cap_inode_killpriv+0x24/0x50
[  117.137955][ T6435]  security_inode_killpriv+0x93/0x290
[  117.137982][ T6435]  setattr_prepare+0x1f7/0xac0
[  117.138017][ T6435]  ovl_setattr+0xad/0x550
[  117.138046][ T6435]  ? try_break_deleg+0x79/0x130
[  117.138066][ T6435]  ? __pfx_ovl_setattr+0x10/0x10
[  117.138095][ T6435]  notify_change+0xc1a/0xf40
[  117.138131][ T6435]  chown_common+0x40c/0x5c0
[  117.138180][ T6435]  ? __pfx_chown_common+0x10/0x10
[  117.138223][ T6435]  ? mnt_get_write_access+0x213/0x280
[  117.138255][ T6435]  do_fchownat+0x161/0x270
[  117.138289][ T6435]  ? __pfx_do_fchownat+0x10/0x10
[  117.138320][ T6435]  ? __pfx_ksys_write+0x10/0x10
[  117.138353][ T6435]  __x64_sys_lchown+0x85/0xa0
[  117.138385][ T6435]  do_syscall_64+0xfa/0xfa0
[  117.138416][ T6435]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.138448][ T6435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.138468][ T6435]  ? clear_bhb_loop+0x60/0xb0
[  117.138495][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.138516][ T6435] RIP: 0033:0x7f4cabd8eba9
[  117.138535][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.138553][ T6435] RSP: 002b:00007f4cacb75038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  117.138575][ T6435] RAX: ffffffffffffffda RBX: 00007f4cabfd5fa0 RCX: 00007f4cabd8eba9
[  117.138591][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  117.138604][ T6435] RBP: 00007f4cacb75090 R08: 0000000000000000 R09: 0000000000000000
[  117.138617][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  117.138629][ T6435] R13: 00007f4cabfd6038 R14: 00007f4cabfd5fa0 R15: 00007fff47b39998
[  117.138666][ T6435]  </TASK>
[  117.138675][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path.
[  117.465325][ T6437] overlayfs: failed to resolve './file1/file0': -2
[  117.706503][ T6443] overlayfs: failed to resolve './file1': -2
[  117.787186][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  117.948446][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  117.960546][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.974973][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.993454][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  118.014062][ T5922] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  118.028483][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.042785][ T5922] usb 4-1: config 0 descriptor??
[  118.097003][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  118.145719][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.255597][ T5930] usb 3-1: Using ep0 maxpacket: 8
[  118.263576][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.274219][ T5930] usb 3-1: config 0 has no interfaces?
[  118.280095][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.302725][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.325317][ T5930] usb 3-1: config 0 descriptor??
[  118.455935][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  118.474541][ T5922] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input12
[  118.580009][ T5922] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input13
[  118.635866][ T5930] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  118.654268][   T53] Bluetooth: hci1: unexpected event for opcode 0x1003
[  118.673876][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.705104][ T5922] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  118.717767][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.820149][  T845] usb 3-1: USB disconnect, device number 10
[  118.821696][ T5922] usb 4-1: USB disconnect, device number 8
[  118.832439][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.858572][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  118.869129][   T24] usb 2-1: USB disconnect, device number 9
[  118.925983][ T5930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.945881][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.966166][ T5930] usb 5-1: Product: syz
[  118.979418][ T5930] usb 5-1: Manufacturer: syz
[  118.996443][ T5930] usb 5-1: SerialNumber: syz
[  119.048223][ T6452] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  119.064430][ T6460] fido_id[6460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  119.395990][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'.
[  119.692595][ T6477] input: syz0 as /devices/virtual/input/input14
[  119.766135][ T6477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.158'.
[  119.980064][ T6489] nfsd: Unknown parameter '�K�Ť4�8��G���~�͕e��ߡض����@��W+����šM�oE)Ҹ/5����'
[  120.015633][  T845] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  120.071554][ T6492] overlayfs: failed to resolve './file1': -2
[  120.096248][ T5930] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  120.103001][ T5930] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048
[  120.122394][ T5930] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  120.205247][ T6496] fuse: Bad value for 'group_id'
[  120.210605][ T6496] fuse: Bad value for 'group_id'
[  120.236514][  T845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.267153][  T845] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.298632][ T5930] cdc_ncm 5-1:1.0: setting tx_max = 184
[  120.310648][  T845] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  120.330286][  T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.348416][  T845] usb 4-1: Product: syz
[  120.363555][  T845] usb 4-1: Manufacturer: syz
[  120.373701][  T845] usb 4-1: SerialNumber: syz
[  120.406965][  T845] usb 4-1: config 0 descriptor??
[  120.423356][  T845] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  120.453873][  T845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.468185][  T845] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  120.477169][  T845] usb 4-1: media controller created
[  120.511128][  T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.535663][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  120.566729][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  120.612649][  T845] DVB: Unable to find symbol tda10046_attach()
[  120.621102][  T845] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  120.629976][  T845] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  120.646197][  T845] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  120.684328][  T845] usb 4-1: USB disconnect, device number 9
[  120.705592][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.725567][   T24] usb 3-1: device descriptor read/64, error -71
[  120.768568][ T5930] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  120.813625][ T5930] usb 5-1: USB disconnect, device number 3
[  120.837688][ T5930] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  120.878670][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  120.888910][ T5914] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  120.904060][ T5914] usb 2-1: config 0 has no interface number 0
[  120.913490][ T5914] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  120.932858][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.950352][ T5914] usb 2-1: Product: syz
[  120.954720][ T5914] usb 2-1: Manufacturer: syz
[  120.961056][ T5914] usb 2-1: SerialNumber: syz
[  120.972141][ T5914] usb 2-1: config 0 descriptor??
[  120.986479][ T5914] smsc95xx v2.0.0
[  120.990311][ T5914] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  121.003776][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  121.013083][ T5914] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[  121.155954][   T24] usb 3-1: device descriptor read/64, error -71
[  121.194175][   T53] Bluetooth: hci2: ISO packet for unknown connection handle 295
[  121.204654][ T5930] usb 2-1: USB disconnect, device number 10
[  121.271843][   T24] usb usb3-port1: attempt power cycle
[  121.566358][  T845] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  121.626030][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  121.667220][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  121.671402][   T24] usb 3-1: device descriptor read/8, error -71
[  121.739970][  T845] usb 5-1: Using ep0 maxpacket: 16
[  121.781368][  T845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  121.800866][  T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  121.828281][  T845] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  121.845562][ T5930] usb 4-1: Using ep0 maxpacket: 32
[  121.852759][ T5930] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  121.865605][  T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.874995][ T5930] usb 4-1: config 0 has no interface number 0
[  121.896136][  T845] usb 5-1: Product: syz
[  121.900694][  T845] usb 5-1: Manufacturer: syz
[  121.908856][  T845] usb 5-1: SerialNumber: syz
[  121.914468][ T5930] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94
[  121.934601][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.945046][  T845] usb 5-1: config 0 descriptor??
[  121.957750][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  121.959307][ T5930] usb 4-1: Product: syz
[  121.978971][  T845] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  121.989122][ T5930] usb 4-1: Manufacturer: syz
[  121.993763][ T5930] usb 4-1: SerialNumber: syz
[  122.008878][ T5930] usb 4-1: config 0 descriptor??
[  122.014147][   T24] usb 3-1: device descriptor read/8, error -71
[  122.022055][ T5930] as10x_usb: device has been detected
[  122.036436][ T5930] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  122.108796][ T5930] usb 4-1: DVB: registering adapter 3 frontend 0 (PCTV Systems picoStick (74e))...
[  122.153130][ T5930] as10x_usb: error during firmware upload part1
[  122.161234][ T5930] Registered device PCTV Systems picoStick (74e)
[  122.169194][   T24] usb usb3-port1: unable to enumerate USB device
[  122.223868][ T5930] usb 4-1: USB disconnect, device number 10
[  122.290476][ T5930] Unregistered device PCTV Systems picoStick (74e)
[  122.293391][ T5930] as10x_usb: device has been disconnected
[  122.453224][ T6555] overlayfs: failed to resolve './file0': -2
[  122.778695][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  122.969232][ T5867] Bluetooth: hci1: unexpected event for opcode 0x1003
[  122.996013][   T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  123.010156][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.018752][   T24] usb 2-1: Product: syz
[  123.022959][   T24] usb 2-1: Manufacturer: syz
[  123.031115][   T24] usb 2-1: SerialNumber: syz
[  123.042310][ T5867] Bluetooth: hci1: unexpected event for opcode 0x1408
[  123.050072][   T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  123.052761][ T6567] comedi comedi3: comedi_parport: I/O port conflict (0x1,3)
[  123.091041][ T5914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  123.316389][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.329117][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.546977][ T5867] Bluetooth: hci2: unexpected event for opcode 0x1003
[  123.561129][ T5930] usb 2-1: USB disconnect, device number 11
[  123.837523][  T845] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  124.005611][  T845] usb 3-1: Using ep0 maxpacket: 32
[  124.012863][  T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.024728][  T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.034621][  T845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  124.047637][  T845] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  124.064354][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  124.071301][ T5867] Bluetooth: hci0: command 0x0405 tx timeout
[  124.071796][  T845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.089700][  T845] usb 3-1: config 0 descriptor??
[  124.217590][ T5914] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  124.232444][ T5914] ath9k_htc: Failed to initialize the device
[  124.252677][ T5930] usb 2-1: ath9k_htc: USB layer deinitialized
[  124.360912][ T5915] usb 5-1: USB disconnect, device number 4
[  124.545794][ T6585] overlayfs: failed to resolve './file0': -2
[  124.558103][  T845] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0005/input/input16
[  124.605622][ T5930] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  124.665556][  T845] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0005/input/input17
[  124.714598][ T5867] Bluetooth: hci3: unexpected event for opcode 0x1003
[  124.798351][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  124.817299][  T845] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  124.853483][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  124.897127][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60
[  124.913496][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.933851][ T5930] usb 2-1: SerialNumber: syz
[  124.977619][ T5930] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  124.996503][ T5930] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  125.016315][ T1314] wlan1: Trigger new scan to find an IBSS to join
[  125.158858][ T5915] usb 3-1: USB disconnect, device number 15
[  125.773519][ T6599] fuse: Bad value for 'fd'
[  126.069237][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  126.135585][ T5981] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  126.221881][ T5915] usb 3-1: device descriptor read/64, error -71
[  126.300814][ T5981] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  126.329596][ T5981] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15653, setting to 64
[  126.346854][ T5981] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  126.359370][ T5981] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  126.390385][ T5981] usb 5-1: Manufacturer: syz
[  126.403071][ T5981] usb 5-1: SerialNumber: syz
[  126.415039][ T6603] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  126.485653][ T5915] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  126.635584][ T5915] usb 3-1: device descriptor read/64, error -71
[  126.655933][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  126.744589][ T5981] yealink 5-1:36.0: invalid payload size 64, expected 16
[  126.755997][ T5915] usb usb3-port1: attempt power cycle
[  126.760213][ T5981] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input18
[  126.784263][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.792503][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.800377][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.807654][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.814751][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.815740][   T24] usb 4-1: Using ep0 maxpacket: 32
[  126.821781][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.833826][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.840916][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.843165][   T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  126.848074][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.862836][    C0] yealink 5-1:36.0: unexpected response 0
[  126.869028][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.876051][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.882851][    C0] yealink 5-1:36.0: unexpected response 0
[  126.889266][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.896567][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.899806][   T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  126.903361][    C0] yealink 5-1:36.0: unexpected response 0
[  126.904716][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.927375][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.934173][    C0] yealink 5-1:36.0: unexpected response 0
[  126.940176][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.947169][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.953973][    C0] yealink 5-1:36.0: unexpected response 0
[  126.959935][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.962063][   T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  126.967012][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  126.984754][    C0] yealink 5-1:36.0: unexpected response 0
[  126.991430][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  126.998920][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.005460][   T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  127.018836][    C0] yealink 5-1:36.0: unexpected response 0
[  127.019260][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.031822][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.038639][    C0] yealink 5-1:36.0: unexpected response 0
[  127.042775][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  127.044616][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.058126][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.064392][   T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  127.064926][    C0] yealink 5-1:36.0: unexpected response 0
[  127.065150][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.078808][   T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  127.080116][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.101665][    C0] yealink 5-1:36.0: unexpected response 0
[  127.108214][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.115467][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.116632][ T5915] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  127.122258][    C0] yealink 5-1:36.0: unexpected response 0
[  127.122520][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.142414][   T24] usb 4-1: Product: syz
[  127.143638][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.153390][    C0] yealink 5-1:36.0: unexpected response 0
[  127.160401][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.167470][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.174273][    C0] yealink 5-1:36.0: unexpected response 0
[  127.180270][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.181449][   T24] usb 4-1: Manufacturer: syz
[  127.187311][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.187334][    C0] yealink 5-1:36.0: unexpected response 0
[  127.187580][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.202967][ T5915] usb 3-1: device descriptor read/8, error -71
[  127.206528][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.224454][    C0] yealink 5-1:36.0: unexpected response 0
[  127.236142][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.243191][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.249991][    C0] yealink 5-1:36.0: unexpected response 0
[  127.255870][   T24] usb 4-1: SerialNumber: syz
[  127.256987][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.267764][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.274775][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.281797][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.290133][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.296943][    C0] yealink 5-1:36.0: unexpected response 0
[  127.303531][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.310368][   T24] usb 4-1: config 0 descriptor??
[  127.310990][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  127.322115][    C0] yealink 5-1:36.0: unexpected response 0
[  127.328165][ T5981] usb 5-1: USB disconnect, device number 5
[  127.335657][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  127.342469][    C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -19
[  127.351337][ T5934] usb 2-1: USB disconnect, device number 12
[  127.387309][   T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  127.434913][   T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  127.475823][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  127.490042][ T6610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.189'.
[  127.508814][ T5915] usb 3-1: device descriptor read/8, error -71
[  127.558994][   T24] usb 4-1: USB disconnect, device number 11
[  127.569750][   T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  127.575862][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  127.575943][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  127.626073][ T5915] usb usb3-port1: unable to enumerate USB device
[  128.055827][   T37] wlan1: Trigger new scan to find an IBSS to join
[  128.188074][ T6630] fuse: Bad value for 'fd'
[  128.211569][ T6631] netlink: 60 bytes leftover after parsing attributes in process `syz.3.195'.
[  128.265741][ T6628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.195'.
[  128.275637][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.195'.
[  128.285799][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  128.410413][ T5915] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0
[  128.448800][ T5915] hid-generic 0001:0000:0000.0006: hidraw0: <UNKNOWN> HID va0000.00 Device [syz1] on syz0
[  128.465676][   T24] usb 2-1: Using ep0 maxpacket: 16
[  128.492093][   T24] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 230, changing to 11
[  128.518701][   T24] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  128.554950][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  128.581642][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.40
[  128.594996][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.606347][   T24] usb 2-1: Product: А
[  128.610472][   T24] usb 2-1: Manufacturer: 孄罝孳㍙ෟ玟帊묯嗈ত쑝⋈磖暅౎⚤돯翕惤
獔☮㗇봬ﰫ꺳쫄僒鴴剐᳛罤᮷䤄䛸脆硈튞䒩絠愣㪔ﻼＲ톾鰊⋯ी㕜泣驁娉쵏㘒ᳶ᪁ꏽ╽⺼茮瑤ѷ剘녣甽峒菗㰛寫좴誥ㆧ앚Ȥ䃻♛﯒赆
[  128.654882][   T24] usb 2-1: SerialNumber: ⟆躑ྒ旎쩋趙柧읪瘋㷍ᦲ퍨競ሾ鈪隯෪ꎎŒꁢ﷟ﲩ⢚ꤕ怓竴걈掬ఇ☾쪏鶤뤱趠㥬ᆹ疾窡픸¢껞ࡈⓗ劭㚇閮褄ᨭꃜ廱ặॼ
[  128.733251][ T6640] CIFS mount error: No usable UNC path provided in device string!
[  128.733251][ T6640] 
[  128.745631][ T6640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  129.001439][ T6636] netlink: 401 bytes leftover after parsing attributes in process `syz.3.197'.
[  129.097353][ T6625] veth1_macvtap: left promiscuous mode
[  129.106007][ T6625] macsec0: entered promiscuous mode
[  130.022672][ T6675] =======================================================
[  130.022672][ T6675] WARNING: The mand mount option has been deprecated and
[  130.022672][ T6675]          and is ignored by this kernel. Remove the mand
[  130.022672][ T6675]          option from the mount to silence this warning.
[  130.022672][ T6675] =======================================================
[  130.071281][ T6675] proc: Unknown parameter 'giMf*'
[  130.271242][ T6687] sit0: entered promiscuous mode
[  130.286575][ T6687] netlink: 'syz.4.212': attribute type 1 has an invalid length.
[  130.294450][ T6687] netlink: 1 bytes leftover after parsing attributes in process `syz.4.212'.
[  130.333004][ T6687] overlayfs: failed to resolve './file1/file0': -2
[  130.465786][ T5915] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  130.486698][ T6694] netlink: 'syz.4.215': attribute type 10 has an invalid length.
[  130.510531][ T6694] 8021q: adding VLAN 0 to HW filter on device team0
[  130.522397][ T6694] bond0: (slave team0): Enslaving as an active interface with an up link
[  130.635592][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  130.654211][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.670278][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.682044][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  130.695655][ T5915] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  130.704779][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.747055][ T5915] usb 3-1: config 0 descriptor??
[  131.006568][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  131.016619][   T37] wlan1: Creating new IBSS network, BSSID 76:47:b8:23:cd:3b
[  131.035450][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  131.119943][   T24] usb 2-1: USB disconnect, device number 13
[  131.146211][ T5930] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  131.216225][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0007/input/input19
[  131.327126][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0007/input/input20
[  131.336927][ T5930] usb 5-1: Using ep0 maxpacket: 16
[  131.357431][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.368737][ T5867] Bluetooth: hci3: unexpected event for opcode 0x1003
[  131.413657][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0
[  131.423786][ T5915] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  131.447990][ T5930] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  131.488750][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.521905][ T5930] usb 5-1: Product: syz
[  131.534943][ T5930] usb 5-1: Manufacturer: syz
[  131.570196][ T5915] usb 3-1: USB disconnect, device number 20
[  131.575102][ T5930] usb 5-1: SerialNumber: syz
[  131.621558][ T5930] usb 5-1: config 0 descriptor??
[  131.631364][ T6714] fido_id[6714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  132.063341][   T10] usb 5-1: USB disconnect, device number 6
[  132.165625][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  132.328077][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short
[  132.338597][ T5930] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  132.351231][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  132.360418][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.368528][ T5930] usb 2-1: Product: syz
[  132.372754][ T5930] usb 2-1: Manufacturer: ⼶劐ꏼൗ贵랮瓣䎦㰍Ӗ鸨젗ꬎ받곷埕푯ᒓ飀ስ좘ᖹ뿎ႆН蠆롉벑뤛园ᎎ㋄
[  132.386318][ T5930] usb 2-1: SerialNumber: syz
[  132.445733][ T5915] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  132.603848][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  132.632465][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  132.642630][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.646164][ T6736] 9pnet: p9_errstr2errno: server reported unknown error ile0
[  132.665166][ T5915] usb 3-1: config 0 descriptor??
[  132.961914][   T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  133.110023][ T5915] microsoft 0003:045E:009D.0008: item fetching failed at offset 2/5
[  133.119514][ T5915] microsoft 0003:045E:009D.0008: parse failed
[  133.126160][ T5915] microsoft 0003:045E:009D.0008: probe with driver microsoft failed with error -22
[  133.136735][   T44] usb 5-1: Using ep0 maxpacket: 8
[  133.150449][   T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  133.159143][   T44] usb 5-1: config 179 has no interface number 0
[  133.165623][   T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  133.181054][   T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  133.192721][   T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  133.204174][   T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  133.215629][   T44] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  133.229054][   T44] usb 5-1: config 179 interface 65 has no altsetting 0
[  133.236124][   T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  133.246407][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.270425][ T5930] usb 2-1: USB disconnect, device number 14
[  133.272568][   T44] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21
[  133.364925][ T5215] input input21: unable to receive magic message: -110
[  133.377725][   T44] usb 3-1: USB disconnect, device number 21
[  133.390640][ T5215] input input21: unable to receive magic message: -32
[  133.406641][ T5215] input input21: unable to receive magic message: -32
[  133.420722][ T5215] input input21: unable to receive magic message: -32
[  133.429044][ T5215] input input21: unable to receive magic message: -32
[  133.444323][ T5215] input input21: unable to receive magic message: -32
[  133.446309][ T5930] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  133.585629][ T5930] usb 2-1: device descriptor read/64, error -71
[  133.667678][ T6736] overlay: ./file0 is not a directory
[  133.677410][   T44] usb 5-1: USB disconnect, device number 7
[  133.683398][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  133.827198][ T5930] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  133.966916][ T5930] usb 2-1: device descriptor read/64, error -71
[  134.085875][ T5930] usb usb2-port1: attempt power cycle
[  134.385753][   T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  134.427630][ T5930] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  134.456467][ T5930] usb 2-1: device descriptor read/8, error -71
[  134.476426][  T845] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  134.535877][   T44] usb 3-1: Using ep0 maxpacket: 16
[  134.542767][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.553760][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.563591][   T44] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  134.573272][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.584404][   T44] usb 3-1: config 0 descriptor??
[  134.625566][  T845] usb 5-1: Using ep0 maxpacket: 16
[  134.633130][  T845] usb 5-1: unable to read config index 0 descriptor/start: -61
[  134.642256][  T845] usb 5-1: can't read configurations, error -61
[  134.696110][ T5930] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  134.716497][ T5930] usb 2-1: device descriptor read/8, error -71
[  134.775738][  T845] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  134.828438][ T5930] usb usb2-port1: unable to enumerate USB device
[  134.925784][  T845] usb 5-1: Using ep0 maxpacket: 16
[  134.947605][  T845] usb 5-1: unable to read config index 0 descriptor/start: -61
[  134.958239][  T845] usb 5-1: can't read configurations, error -61
[  134.965122][  T845] usb usb5-port1: attempt power cycle
[  134.998439][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.010996][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.023674][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.038615][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.066463][   T44] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0009/input/input22
[  135.154201][   T44] creative-sb0540 0003:041E:3100.0009: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0
[  135.305715][  T845] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  135.328310][  T845] usb 5-1: Using ep0 maxpacket: 16
[  135.331861][   T44] usb 3-1: USB disconnect, device number 22
[  135.336696][  T845] usb 5-1: unable to read config index 0 descriptor/start: -61
[  135.350527][  T845] usb 5-1: can't read configurations, error -61
[  135.355722][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  135.485731][  T845] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  135.506188][  T845] usb 5-1: Using ep0 maxpacket: 16
[  135.513465][  T845] usb 5-1: unable to read config index 0 descriptor/start: -61
[  135.521182][  T845] usb 5-1: can't read configurations, error -61
[  135.527923][  T845] usb usb5-port1: unable to enumerate USB device
[  135.535885][ T5915] usb 2-1: Using ep0 maxpacket: 8
[  135.542891][ T5915] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  135.551289][ T5915] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  135.559446][ T5915] usb 2-1: config 0 has no interface number 0
[  135.565626][ T5915] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  135.578377][ T5915] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  135.589784][ T5915] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  135.604159][ T5915] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  135.613326][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  135.621548][ T5915] usb 2-1: Product: syz
[  135.628951][ T5915] usb 2-1: config 0 descriptor??
[  135.634703][ T6758] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  135.885267][ T6761] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  136.227848][ T6770] fuse: Unknown parameter 'grou00000000000000000000'
[  136.250281][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'.
[  136.280272][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[  136.351741][ T5915] usb 2-1: USB disconnect, device number 19
[  136.432274][ T6776] binder: 6775:6776 ioctl 4008642b 2000000000c0 returned -22
[  136.995594][   T44] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  137.007865][  T845] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  137.145760][   T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  137.153686][   T44] usb 3-1: Using ep0 maxpacket: 16
[  137.160871][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.171879][   T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.184444][  T845] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  137.184806][   T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  137.198193][  T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.202919][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.214955][  T845] usb 4-1: Product: syz
[  137.223460][   T44] usb 3-1: config 0 descriptor??
[  137.224195][  T845] usb 4-1: Manufacturer: syz
[  137.235070][  T845] usb 4-1: SerialNumber: syz
[  137.268475][  T845] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  137.306081][ T5930] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  137.312275][ T6794] fuse: Unknown parameter 'group_i00000000000000000000'
[  137.329522][   T24] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  137.375702][   T24] usb 2-1: config 0 has no interface number 0
[  137.394614][   T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  137.407126][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.415193][   T24] usb 2-1: Product: syz
[  137.421530][   T24] usb 2-1: Manufacturer: syz
[  137.426587][   T24] usb 2-1: SerialNumber: syz
[  137.439654][   T24] usb 2-1: config 0 descriptor??
[  137.661522][   T44] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed
[  137.670017][   T44] microsoft 0003:045E:07DA.000A: parse failed
[  137.676935][   T44] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22
[  137.858654][   T24] usb 2-1: Firmware: major: 141, minor: 12, hardware type: UNKNOWN (66)
[  137.919949][   T44] usb 4-1: USB disconnect, device number 12
[  138.061144][   T24] usb 2-1: Read permanent extended address 7c:99:15:b7:83:3f:66:0f from device
[  138.070287][   T24] usb 2-1: atusb_probe: initialization failed, error = -524
[  138.078292][   T24] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  138.149498][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  138.157486][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  138.262930][ T6792] netlink: 'syz.1.254': attribute type 10 has an invalid length.
[  138.272568][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.280869][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.294522][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.301841][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.310331][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.317561][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.321646][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.333617][ T6792] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  138.336522][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.353334][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'.
[  138.364984][ T6792] bridge_slave_1: left allmulticast mode
[  138.371370][ T6792] bridge_slave_1: left promiscuous mode
[  138.376762][ T5930] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  138.377647][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.389644][ T5930] ath9k_htc: Failed to initialize the device
[  138.399152][   T44] usb 4-1: ath9k_htc: USB layer deinitialized
[  138.408518][ T6792] bridge_slave_0: left allmulticast mode
[  138.414195][ T6792] bridge_slave_0: left promiscuous mode
[  138.421404][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.451136][ T6792] bond0: (slave bridge0): Releasing backup interface
[  138.582719][ T5981] usb 2-1: USB disconnect, device number 20
[  138.857934][   T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  139.031644][   T44] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  139.040938][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.049042][   T44] usb 4-1: Product: syz
[  139.053223][   T44] usb 4-1: Manufacturer: syz
[  139.057901][   T44] usb 4-1: SerialNumber: syz
[  139.064787][   T44] usb 4-1: config 0 descriptor??
[  139.075943][   T44] gspca_main: sunplus-2.14.0 probing 055f:c230
[  139.395674][ T5981] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  139.545586][ T5981] usb 2-1: Using ep0 maxpacket: 32
[  139.552779][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.564011][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.573885][ T5981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  139.588425][ T5981] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  139.600048][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.610619][ T5981] usb 2-1: config 0 descriptor??
[  139.770054][ T5930] usb 3-1: USB disconnect, device number 23
[  139.822564][ T5867] Bluetooth: hci2: unexpected event for opcode 0x1003
[  139.857286][ T5981] usbhid 2-1:0.0: can't add hid device: -71
[  139.863479][ T5981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  139.884151][ T5981] usb 2-1: USB disconnect, device number 21
[  140.208640][ T6817] fuse: Unknown parameter 'group_i00000000000000000000'
[  140.270570][ T6819] fuse: Unknown parameter 'use00000000000000000000'
[  140.673283][ T6831] overlayfs: missing 'lowerdir'
[  140.697341][ T5914] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  140.845803][ T5914] usb 3-1: device descriptor read/64, error -71
[  140.893001][ T6838] fuse: Unknown parameter 'group_i00000000000000000000'
[  140.953563][ T6840] fuse: Unknown parameter 'use00000000000000000000'
[  140.961212][ T6832] lo speed is unknown, defaulting to 1000
[  140.979483][ T6832] lo speed is unknown, defaulting to 1000
[  141.003246][ T6832] lo speed is unknown, defaulting to 1000
[  141.051239][ T6832] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  141.067648][ T6832] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  141.085665][ T5914] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  141.104777][ T6832] lo speed is unknown, defaulting to 1000
[  141.112120][ T6832] lo speed is unknown, defaulting to 1000
[  141.119968][ T6832] lo speed is unknown, defaulting to 1000
[  141.129078][ T6832] lo speed is unknown, defaulting to 1000
[  141.139873][ T6832] lo speed is unknown, defaulting to 1000
[  141.235617][ T5914] usb 3-1: device descriptor read/64, error -71
[  141.275751][   T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  141.283445][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  141.347066][ T5914] usb usb3-port1: attempt power cycle
[  141.417117][   T24] usb 2-1: device descriptor read/64, error -71
[  141.448877][ T5915] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  141.458095][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.467779][ T5915] usb 5-1: Product: syz
[  141.472002][ T5915] usb 5-1: Manufacturer: syz
[  141.476887][ T5915] usb 5-1: SerialNumber: syz
[  141.483844][ T5915] usb 5-1: config 0 descriptor??
[  141.572633][   T44] usb 4-1: USB disconnect, device number 13
[  141.647064][ T5867] Bluetooth: hci1: unexpected event for opcode 0x1003
[  141.657450][   T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  141.685666][ T5914] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  141.717334][ T5914] usb 3-1: device descriptor read/8, error -71
[  141.816874][   T24] usb 2-1: device descriptor read/64, error -71
[  141.937231][   T24] usb usb2-port1: attempt power cycle
[  141.955646][ T5914] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  141.986442][ T5914] usb 3-1: device descriptor read/8, error -71
[  142.035665][ T5930] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  142.095950][ T5914] usb usb3-port1: unable to enumerate USB device
[  142.196281][ T5930] usb 4-1: too many configurations: 38, using maximum allowed: 8
[  142.208501][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61
[  142.218935][ T5930] usb 4-1: can't read configurations, error -61
[  142.285597][   T24] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  142.306402][   T24] usb 2-1: device descriptor read/8, error -71
[  142.310580][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.321680][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.331769][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.340693][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.355746][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  142.507326][ T5930] usb 4-1: too many configurations: 38, using maximum allowed: 8
[  142.517900][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61
[  142.525676][ T5930] usb 4-1: can't read configurations, error -61
[  142.532288][ T5930] usb usb4-port1: attempt power cycle
[  142.545692][   T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  142.558210][ T5915] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  142.568416][ T5915] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  142.579320][   T24] usb 2-1: device descriptor read/8, error -71
[  142.585839][ T5915] asix 5-1:0.0: probe with driver asix failed with error -71
[  142.597685][ T5915] usb 5-1: USB disconnect, device number 12
[  142.695869][   T24] usb usb2-port1: unable to enumerate USB device
[  142.885731][ T5930] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  142.906910][ T5930] usb 4-1: too many configurations: 38, using maximum allowed: 8
[  142.918690][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61
[  142.926418][ T5930] usb 4-1: can't read configurations, error -61
[  143.055787][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  143.081567][ T5930] usb 4-1: too many configurations: 38, using maximum allowed: 8
[  143.100993][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61
[  143.113964][ T5930] usb 4-1: can't read configurations, error -61
[  143.121767][ T5930] usb usb4-port1: unable to enumerate USB device
[  143.480533][ T6854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  143.489919][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  143.490505][ T6854] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  143.510958][ T6854] overlayfs: missing 'lowerdir'
[  143.632366][ T6858] fuse: Unknown parameter 'group_id00000000000000000000'
[  143.645564][ T5915] usb 5-1: Using ep0 maxpacket: 32
[  143.652646][ T5915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  143.675735][ T5915] usb 5-1: config 0 has no interface number 0
[  143.691415][ T5915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  143.705544][ T5915] usb 5-1: config 0 has no interface number 0
[  143.714513][ T5915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  143.736051][ T5915] usb 5-1: config 0 has no interface number 0
[  143.754012][ T5915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  143.775554][ T5915] usb 5-1: config 0 has no interface number 0
[  143.787305][ T6860] fuse: Unknown parameter 'user_i00000000000000000000'
[  143.803945][ T5915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  143.858811][ T5915] usb 5-1: config 0 has no interface number 0
[  143.868708][ T5867] Bluetooth: hci2: unexpected event for opcode 0x1003
[  143.892706][ T5915] usb 5-1: New USB device found, idVendor=3bf5, idProduct=d501, bcdDevice=23.50
[  143.902461][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.910934][ T5915] usb 5-1: Product: syz
[  143.915241][ T5915] usb 5-1: Manufacturer: syz
[  143.919974][ T5915] usb 5-1: SerialNumber: syz
[  143.930138][ T5915] usb 5-1: config 0 descriptor??
[  143.979998][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[  144.070930][ T6871] netlink: 'syz.2.286': attribute type 11 has an invalid length.
[  144.110432][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'.
[  144.152764][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.162253][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.189114][ T6852] netlink: 'syz.4.280': attribute type 10 has an invalid length.
[  144.250855][ T6852] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.280313][  T845] usb 5-1: USB disconnect, device number 13
[  144.361027][ T6881] binder: 6879:6881 ioctl c00c620f 200000000180 returned -22
[  144.425810][ T5915] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  144.595636][ T5930] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  144.595646][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  144.613037][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  144.625842][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  144.642099][ T5915] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  144.652004][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.660266][ T5915] usb 2-1: Product: syz
[  144.664451][ T5915] usb 2-1: Manufacturer: syz
[  144.669137][ T5915] usb 2-1: SerialNumber: syz
[  144.676122][ T5915] usb 2-1: config 0 descriptor??
[  144.685183][ T5915] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  144.694592][ T5915] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  144.745628][ T5930] usb 3-1: Using ep0 maxpacket: 16
[  144.756468][ T5930] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  144.765818][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.773887][ T5930] usb 3-1: Product: syz
[  144.779623][ T5930] usb 3-1: Manufacturer: syz
[  144.784275][ T5930] usb 3-1: SerialNumber: syz
[  144.912467][ T6883] netlink: 'syz.3.291': attribute type 10 has an invalid length.
[  144.924441][ T6885] fuse: Unknown parameter 'group_id00000000000000000000'
[  144.933623][ T6883] lo: entered promiscuous mode
[  144.944046][ T6883] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  145.026507][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  145.057456][ T5930] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71
[  145.073432][ T5930] usb 3-1: USB disconnect, device number 28
[  145.095936][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.205609][ T5981] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  145.257874][ T5914] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  145.298506][ T5915] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  145.305369][ T5915] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  145.313057][ T5915] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  145.321430][ T5915] em28xx 2-1:0.0: No AC97 audio processor
[  145.365930][ T5981] usb 4-1: Using ep0 maxpacket: 32
[  145.372496][ T5981] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  145.381991][ T5981] usb 4-1: config 0 has no interface number 0
[  145.391073][ T5981] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  145.400261][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.408629][ T5981] usb 4-1: Product: syz
[  145.412823][ T5981] usb 4-1: Manufacturer: syz
[  145.419989][ T5981] usb 4-1: SerialNumber: syz
[  145.423237][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  145.430405][ T5981] usb 4-1: config 0 descriptor??
[  145.440961][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.446925][ T5981] smsc95xx v2.0.0
[  145.455192][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  145.462528][ T5981] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  145.467872][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.478125][ T5981] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  145.582991][ T6889] fuse: Unknown parameter 'user_i00000000000000000000'
[  145.653525][ T6883] program syz.3.291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.668664][ T5915] usb 4-1: USB disconnect, device number 18
[  145.674870][ T5867] Bluetooth: hci3: unexpected event for opcode 0x1003
[  145.702729][ T5914] usb 5-1: usb_control_msg returned -32
[  145.709764][ T5914] usbtmc 5-1:16.0: can't read capabilities
[  145.914950][ T6897] syzkaller1: entered promiscuous mode
[  145.920959][ T6897] syzkaller1: entered allmulticast mode
[  146.275601][ T5981] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  146.435972][ T5981] usb 3-1: Using ep0 maxpacket: 16
[  146.454363][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.469697][ T5981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  146.482601][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  146.495152][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.504921][ T5981] usb 3-1: Product: syz
[  146.512741][ T5981] usb 3-1: Manufacturer: syz
[  146.518698][ T5981] usb 3-1: SerialNumber: syz
[  146.530284][ T5981] usb 3-1: config 0 descriptor??
[  146.752918][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  146.800100][   T44] usb 3-1: USB disconnect, device number 29
[  147.175613][ T5914] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  147.211296][   T44] usb 2-1: USB disconnect, device number 26
[  147.229518][   T44] em28xx 2-1:0.0: Disconnecting em28xx
[  147.253917][   T44] ==================================================================
[  147.262067][   T44] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0
[  147.270444][   T44] Read of size 4 at addr ffff88807f0fb4f0 by task kworker/1:1/44
[  147.278193][   T44] 
[  147.280546][   T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  147.280574][   T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  147.280590][   T44] Workqueue: usb_hub_wq hub_event
[  147.280618][   T44] Call Trace:
[  147.280627][   T44]  <TASK>
[  147.280636][   T44]  dump_stack_lvl+0x189/0x250
[  147.280658][   T44]  ? rcu_is_watching+0x15/0xb0
[  147.280685][   T44]  ? __kasan_check_byte+0x12/0x40
[  147.280711][   T44]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.280730][   T44]  ? rcu_is_watching+0x15/0xb0
[  147.280757][   T44]  ? lock_release+0x4b/0x3e0
[  147.280782][   T44]  ? __virt_addr_valid+0x1c8/0x5c0
[  147.280825][   T44]  ? __virt_addr_valid+0x4a5/0x5c0
[  147.280860][   T44]  print_report+0xca/0x240
[  147.280883][   T44]  ? media_devnode_unregister+0xe2/0xf0
[  147.280912][   T44]  kasan_report+0x118/0x150
[  147.280939][   T44]  ? media_devnode_unregister+0xe2/0xf0
[  147.280973][   T44]  media_devnode_unregister+0xe2/0xf0
[  147.281004][   T44]  media_device_unregister+0x37c/0x400
[  147.281032][   T44]  ? em28xx_audio_fini+0x59/0x1b0
[  147.281058][   T44]  em28xx_release_resources+0xac/0x240
[  147.281092][   T44]  em28xx_usb_disconnect+0x19f/0x2f0
[  147.281125][   T44]  usb_unbind_interface+0x26e/0x910
[  147.281153][   T44]  ? __pfx_usb_unbind_interface+0x10/0x10
[  147.281176][   T44]  device_release_driver_internal+0x4d9/0x800
[  147.281207][   T44]  bus_remove_device+0x34d/0x410
[  147.281229][   T44]  device_del+0x511/0x8e0
[  147.281258][   T44]  ? __pfx_device_del+0x10/0x10
[  147.281282][   T44]  ? kobject_put+0x446/0x480
[  147.281309][   T44]  usb_disable_device+0x3e9/0x8a0
[  147.281336][   T44]  usb_disconnect+0x330/0x950
[  147.281371][   T44]  hub_event+0x1cf5/0x4a20
[  147.281406][   T44]  ? do_raw_spin_lock+0x121/0x290
[  147.281440][   T44]  ? register_lock_class+0x51/0x320
[  147.281473][   T44]  ? __pfx_hub_event+0x10/0x10
[  147.281496][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  147.281527][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.281558][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  147.281583][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  147.281610][   T44]  process_scheduled_works+0xae1/0x17b0
[  147.281652][   T44]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.281688][   T44]  worker_thread+0x8a0/0xda0
[  147.281729][   T44]  kthread+0x711/0x8a0
[  147.281770][   T44]  ? __pfx_worker_thread+0x10/0x10
[  147.281807][   T44]  ? __pfx_kthread+0x10/0x10
[  147.281840][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.281870][   T44]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.281902][   T44]  ? __pfx_kthread+0x10/0x10
[  147.281934][   T44]  ret_from_fork+0x47c/0x820
[  147.281962][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  147.281991][   T44]  ? __switch_to_asm+0x39/0x70
[  147.282014][   T44]  ? __switch_to_asm+0x33/0x70
[  147.282037][   T44]  ? __pfx_kthread+0x10/0x10
[  147.282071][   T44]  ret_from_fork_asm+0x1a/0x30
[  147.282104][   T44]  </TASK>
[  147.282113][   T44] 
[  147.564312][   T44] Allocated by task 5915:
[  147.568650][   T44]  kasan_save_track+0x3e/0x80
[  147.573339][   T44]  __kasan_kmalloc+0x93/0xb0
[  147.577943][   T44]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  147.583327][   T44]  __media_device_register+0x58/0x280
[  147.588710][   T44]  em28xx_usb_probe+0x1764/0x2a20
[  147.593753][   T44]  usb_probe_interface+0x665/0xc30
[  147.598886][   T44]  really_probe+0x26d/0x9e0
[  147.603398][   T44]  __driver_probe_device+0x18c/0x2f0
[  147.608693][   T44]  driver_probe_device+0x4f/0x430
[  147.613729][   T44]  __device_attach_driver+0x2ce/0x530
[  147.619115][   T44]  bus_for_each_drv+0x24e/0x2e0
[  147.624076][   T44]  __device_attach+0x2b8/0x400
[  147.628851][   T44]  bus_probe_device+0x185/0x260
[  147.633708][   T44]  device_add+0x7b6/0xb50
[  147.638050][   T44]  usb_set_configuration+0x1a87/0x20e0
[  147.643516][   T44]  usb_generic_driver_probe+0x8d/0x150
[  147.648986][   T44]  usb_probe_device+0x1c1/0x390
[  147.653847][   T44]  really_probe+0x26d/0x9e0
[  147.658363][   T44]  __driver_probe_device+0x18c/0x2f0
[  147.663660][   T44]  driver_probe_device+0x4f/0x430
[  147.668694][   T44]  __device_attach_driver+0x2ce/0x530
[  147.674077][   T44]  bus_for_each_drv+0x24e/0x2e0
[  147.678945][   T44]  __device_attach+0x2b8/0x400
[  147.683742][   T44]  bus_probe_device+0x185/0x260
[  147.688736][   T44]  device_add+0x7b6/0xb50
[  147.693098][   T44]  usb_new_device+0xa39/0x16f0
[  147.697881][   T44]  hub_event+0x2958/0x4a20
[  147.702306][   T44]  process_scheduled_works+0xae1/0x17b0
[  147.707861][   T44]  worker_thread+0x8a0/0xda0
[  147.712459][   T44]  kthread+0x711/0x8a0
[  147.716589][   T44]  ret_from_fork+0x47c/0x820
[  147.721192][   T44]  ret_from_fork_asm+0x1a/0x30
[  147.725967][   T44] 
[  147.728292][   T44] Freed by task 44:
[  147.732122][   T44]  kasan_save_track+0x3e/0x80
[  147.736836][   T44]  __kasan_save_free_info+0x46/0x50
[  147.742072][   T44]  __kasan_slab_free+0x5b/0x80
[  147.746859][   T44]  kfree+0x199/0x6d0
[  147.750806][   T44]  media_devnode_release+0x61/0xa0
[  147.755951][   T44]  device_release+0x99/0x1c0
[  147.760564][   T44]  kobject_put+0x228/0x480
[  147.764995][   T44]  media_devnode_unregister+0x6d/0xf0
[  147.770383][   T44]  media_device_unregister+0x37c/0x400
[  147.775855][   T44]  em28xx_release_resources+0xac/0x240
[  147.781335][   T44]  em28xx_usb_disconnect+0x19f/0x2f0
[  147.786641][   T44]  usb_unbind_interface+0x26e/0x910
[  147.791860][   T44]  device_release_driver_internal+0x4d9/0x800
[  147.797946][   T44]  bus_remove_device+0x34d/0x410
[  147.802892][   T44]  device_del+0x511/0x8e0
[  147.807238][   T44]  usb_disable_device+0x3e9/0x8a0
[  147.812360][   T44]  usb_disconnect+0x330/0x950
[  147.817058][   T44]  hub_event+0x1cf5/0x4a20
[  147.821494][   T44]  process_scheduled_works+0xae1/0x17b0
[  147.827060][   T44]  worker_thread+0x8a0/0xda0
[  147.831670][   T44]  kthread+0x711/0x8a0
[  147.835795][   T44]  ret_from_fork+0x47c/0x820
[  147.840399][   T44]  ret_from_fork_asm+0x1a/0x30
[  147.845177][   T44] 
[  147.847506][   T44] The buggy address belongs to the object at ffff88807f0fb000
[  147.847506][   T44]  which belongs to the cache kmalloc-2k of size 2048
[  147.861565][   T44] The buggy address is located 1264 bytes inside of
[  147.861565][   T44]  freed 2048-byte region [ffff88807f0fb000, ffff88807f0fb800)
[  147.875550][   T44] 
[  147.877890][   T44] The buggy address belongs to the physical page:
[  147.884318][   T44] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f0f8
[  147.893090][   T44] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  147.901603][   T44] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  147.909166][   T44] page_type: f5(slab)
[  147.913155][   T44] raw: 00fff00000000040 ffff88801a842000 ffffea0000bdc000 dead000000000002
[  147.921743][   T44] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  147.930335][   T44] head: 00fff00000000040 ffff88801a842000 ffffea0000bdc000 dead000000000002
[  147.939023][   T44] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  147.947699][   T44] head: 00fff00000000003 ffffea0001fc3e01 00000000ffffffff 00000000ffffffff
[  147.956383][   T44] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  147.965057][   T44] page dumped because: kasan: bad access detected
[  147.971481][   T44] page_owner tracks the page as allocated
[  147.977195][   T44] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 91487838627, free_ts 91361090578
[  147.998481][   T44]  post_alloc_hook+0x240/0x2a0
[  148.003265][   T44]  get_page_from_freelist+0x21e4/0x22c0
[  148.008836][   T44]  __alloc_frozen_pages_noprof+0x181/0x370
[  148.014655][   T44]  alloc_pages_mpol+0x232/0x4a0
[  148.019516][   T44]  allocate_slab+0x8a/0x330
[  148.024031][   T44]  ___slab_alloc+0xbd1/0x13f0
[  148.028722][   T44]  __slab_alloc+0x55/0xa0
[  148.033061][   T44]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  148.039484][   T44]  kmalloc_reserve+0x136/0x290
[  148.044268][   T44]  pskb_expand_head+0x18e/0x1150
[  148.049219][   T44]  netlink_trim+0x1d5/0x2e0
[  148.053746][   T44]  netlink_broadcast_filtered+0xd6/0x1000
[  148.059476][   T44]  nlmsg_notify+0xf0/0x1a0
[  148.063913][   T44]  register_netdevice+0x1712/0x1ae0
[  148.069119][   T44]  nsim_create+0xae8/0xf10
[  148.073551][   T44]  __nsim_dev_port_add+0x6b6/0xb10
[  148.078669][   T44] page last free pid 5857 tgid 5857 stack trace:
[  148.085001][   T44]  __free_frozen_pages+0xbc4/0xd30
[  148.090125][   T44]  __slab_free+0x2e7/0x390
[  148.094560][   T44]  qlist_free_all+0x97/0x140
[  148.099243][   T44]  kasan_quarantine_reduce+0x148/0x160
[  148.104706][   T44]  __kasan_slab_alloc+0x22/0x80
[  148.109561][   T44]  kmem_cache_alloc_node_noprof+0x433/0x710
[  148.115466][   T44]  __alloc_skb+0x112/0x2d0
[  148.119912][   T44]  netlink_sendmsg+0x5c6/0xb30
[  148.124678][   T44]  __sock_sendmsg+0x219/0x270
[  148.129362][   T44]  __sys_sendto+0x3bd/0x520
[  148.133879][   T44]  __x64_sys_sendto+0xde/0x100
[  148.138659][   T44]  do_syscall_64+0xfa/0xfa0
[  148.143176][   T44]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.149073][   T44] 
[  148.151397][   T44] Memory state around the buggy address:
[  148.157026][   T44]  ffff88807f0fb380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.165178][   T44]  ffff88807f0fb400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.173247][   T44] >ffff88807f0fb480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.181317][   T44]                                                              ^
[  148.189049][   T44]  ffff88807f0fb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.197143][   T44]  ffff88807f0fb580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.205215][   T44] ==================================================================
[  148.252095][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  148.260011][ T5914] usb 4-1: no configurations
[  148.264735][ T5914] usb 4-1: can't read configurations, error -22
[  148.293133][   T44] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  148.300388][   T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  148.309621][   T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  148.319719][   T44] Workqueue: usb_hub_wq hub_event
[  148.324792][   T44] Call Trace:
[  148.328106][   T44]  <TASK>
[  148.331066][   T44]  dump_stack_lvl+0x99/0x250
[  148.335682][   T44]  ? __asan_memcpy+0x40/0x70
[  148.340298][   T44]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.345511][   T44]  ? __pfx__printk+0x10/0x10
[  148.350128][   T44]  vpanic+0x237/0x6d0
[  148.354131][   T44]  ? __pfx_vpanic+0x10/0x10
[  148.358662][   T44]  ? preempt_schedule+0xae/0xc0
[  148.363546][   T44]  ? __pfx_preempt_schedule+0x10/0x10
[  148.368959][   T44]  panic+0xb9/0xc0
[  148.372709][   T44]  ? __pfx_panic+0x10/0x10
[  148.377146][   T44]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  148.383079][   T44]  ? media_devnode_unregister+0xe2/0xf0
[  148.388644][   T44]  check_panic_on_warn+0x89/0xb0
[  148.393597][   T44]  ? media_devnode_unregister+0xe2/0xf0
[  148.399168][   T44]  end_report+0x78/0x160
[  148.403440][   T44]  kasan_report+0x129/0x150
[  148.408047][   T44]  ? media_devnode_unregister+0xe2/0xf0
[  148.413607][   T44]  media_devnode_unregister+0xe2/0xf0
[  148.419001][   T44]  media_device_unregister+0x37c/0x400
[  148.424476][   T44]  ? em28xx_audio_fini+0x59/0x1b0
[  148.429514][   T44]  em28xx_release_resources+0xac/0x240
[  148.434994][   T44]  em28xx_usb_disconnect+0x19f/0x2f0
[  148.440297][   T44]  usb_unbind_interface+0x26e/0x910
[  148.445523][   T44]  ? __pfx_usb_unbind_interface+0x10/0x10
[  148.451261][   T44]  device_release_driver_internal+0x4d9/0x800
[  148.457432][   T44]  bus_remove_device+0x34d/0x410
[  148.462380][   T44]  device_del+0x511/0x8e0
[  148.466728][   T44]  ? __pfx_device_del+0x10/0x10
[  148.471616][   T44]  ? kobject_put+0x446/0x480
[  148.476220][   T44]  usb_disable_device+0x3e9/0x8a0
[  148.481257][   T44]  usb_disconnect+0x330/0x950
[  148.485953][   T44]  hub_event+0x1cf5/0x4a20
[  148.490386][   T44]  ? do_raw_spin_lock+0x121/0x290
[  148.495432][   T44]  ? register_lock_class+0x51/0x320
[  148.500660][   T44]  ? __pfx_hub_event+0x10/0x10
[  148.505439][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  148.511186][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.516401][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  148.522130][   T44]  ? process_scheduled_works+0x9ef/0x17b0
[  148.527872][   T44]  process_scheduled_works+0xae1/0x17b0
[  148.533446][   T44]  ? __pfx_process_scheduled_works+0x10/0x10
[  148.539445][   T44]  worker_thread+0x8a0/0xda0
[  148.544057][   T44]  kthread+0x711/0x8a0
[  148.548139][   T44]  ? __pfx_worker_thread+0x10/0x10
[  148.553262][   T44]  ? __pfx_kthread+0x10/0x10
[  148.557888][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.563109][   T44]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.568317][   T44]  ? __pfx_kthread+0x10/0x10
[  148.572923][   T44]  ret_from_fork+0x47c/0x820
[  148.577528][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  148.582661][   T44]  ? __switch_to_asm+0x39/0x70
[  148.587452][   T44]  ? __switch_to_asm+0x33/0x70
[  148.592235][   T44]  ? __pfx_kthread+0x10/0x10
[  148.596863][   T44]  ret_from_fork_asm+0x1a/0x30
[  148.601664][   T44]  </TASK>
[  148.605076][   T44] Kernel Offset: disabled
[  148.609411][   T44] Rebooting in 86400 seconds..