last executing test programs:

11m47.940805135s ago: executing program 0 (id=404):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)

11m46.174040002s ago: executing program 0 (id=409):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="508ddf4bc90ff8a0d7d19396e5cec81889c6bfee7fc46d748c4bf210dfdaa32dc3344c0d7558b35f03eb8fea1acf85", 0x2f}], 0x1, &(0x7f0000000240)}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)='k)', 0x2}], 0x1}}], 0x2, 0x40408d0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)

11m45.209273732s ago: executing program 0 (id=410):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xa2242, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00')
preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000240)=""/151, 0x97}], 0x1, 0x91, 0x9861, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x106f)
r4 = socket(0x10, 0x80002, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000380))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3})
mq_timedreceive(r6, &(0x7f0000001880)=""/253, 0xfd, 0x0, &(0x7f00000003c0))
write$tun(r5, &(0x7f0000000400)={@val={0x0, 0x6003}, @val={0x1, 0x3, 0x4, 0x7, 0x12, 0x312f}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x9000, "eddb041f4f2a382615bee087fa7e325f7a95174d01762403cfc8dc631947f89300deb9541a6f0fd448cda55f89b1febace0d6bd42b27fa3bacc2f331d5561c0c442ecdf35655abe9832861a684030afac906ee6ab8f865ed39c013b816c268e7d6b0952e40393719c758d136c0d9227b74cf0fe648ba6f"}}}}, 0x93)
readv(r5, &(0x7f0000000780)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x6}, 0x2)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
clock_gettime(0x0, &(0x7f0000000180)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x10000, 0x8, 0x10000, 0x1, 0x9, 0x0, 0x58e, 0x8000000000000001}, &(0x7f0000000100)={0x3ca, 0x3, 0x6, 0x9, 0x818b, 0x1, 0x5}, &(0x7f0000000140)={0x9, 0x2, 0x1ff, 0x8001, 0xffffffffffffffff, 0x9, 0x9, 0x7fffffffffffffff}, &(0x7f00000001c0)={r7, r8+10000000}, &(0x7f0000000300)={&(0x7f0000000200)={[0x8]}, 0x8})
writev(r1, &(0x7f0000000040), 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000340)={0x0, 0x3}, 0x2)
close_range(r0, r0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_gettime(0x0, &(0x7f0000000600)={<r11=>0x0, <r12=>0x0})
ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x7420}, {r3, 0x100}, {0xffffffffffffffff, 0x704d}, {r0, 0x1}, {r0, 0x40}, {r4, 0xa280}], 0x6, &(0x7f0000000640)={r11, r12+60000000}, &(0x7f00000006c0)={[0x2]}, 0x8)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000004200)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r13, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1cc826a341b2217fe23a27ff5921353fd4eb92d23432833bd20188ce021fa834c960df5b0c5d5a6b6dda2ceee264bc265261464af3e29ed2cd319ff2e30a879a", @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf256900000008000300", @ANYRES32=r14, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000050)
setsockopt$inet6_buf(r10, 0x29, 0x2d, &(0x7f0000000940)="ad2efb1879ede5a1bdc3d5ceb95f3c4a25a13a35ab1ed816103852b52422c1ee58b8b7c7c29737c288d3d5c0d692a9d01d86fe80d34ff11101c3bd9539f15a9671468e2787aba278106d0ef4a3edf3df2b41c6a5da5dff4a27b08cda709d73d396cf2726daf25892331336854db9d533a5914ca2706336297ff636fdb81cd27189727303656fb01e97b53e62c079815f6e8edc8bce83e3242529b52853650373228e58545a65e482d4bf40920f7e83ff26b907d7a269d329afa2682da33ffdeb1d782e434be28035fe89d48cedc4ff65585e", 0xd2)

11m43.783412057s ago: executing program 0 (id=415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x7}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000004c0)={r1, 0xffff, 0x22, "c032d21f338fa55da88587b1b3aecf467bd4004bb0a37681a21198a6d6ccbf7425ce"}, 0x2a)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b40000000000000073119f000000000006000000000000009500740000000000110f21fda743fa85375da716a34082e8f18e7397f48a57f3632f342e7f588c204a31c3c948fb3e86d8851da4e2dc4967a064d29795f183ddbad0e986f79a06eb7dcfaaf57f47a8fa4d20e643d3ab95f6cca7254f0fd79564524031f6a2d5e0adbf14edcd1e16a07120b1d0a48912fd943017966e109c03d0af35466cd382e9add4744e2a747bfe6fa80c404c43af9fe0863c1fbe5d883baffdaf023a08f9fe10ccac48f1c1f9ccc74f50812e6d1fa341296a1e0e005d5fb4558b53f46eab8057715d9ee3efa9c97dd733d235a647b4d2d6d844"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r3, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240), &(0x7f0000001280)=[0x0], <r5=>0x0, 0x60, &(0x7f00000012c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xf, 0x7, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f00000010c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r4, 0x4, &(0x7f0000001500)=[r2, r2, r2], &(0x7f0000001540)=[{0x3, 0x4, 0x0, 0x7}, {0x0, 0x2, 0xa, 0x1}, {0x1, 0x1, 0x0, 0x6}, {0x1, 0x5, 0x2}], 0x10, 0x80000001, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='hrtimer_start\x00', r7}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file0\x00'})
io_uring_setup(0x5334, &(0x7f00000005c0)={0x0, 0x3f10, 0x20080, 0x2, 0x22c, 0x0, r8})
timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4001c1542, 0x0)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

11m43.675321709s ago: executing program 4 (id=416):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @dev, <r3=>0x0}, &(0x7f0000000280)=0xc)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000)
write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x3], 0x0, 0x5, 0x1, 0x1}}, 0x40)
syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0)

11m41.375888585s ago: executing program 4 (id=421):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
memfd_secret(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

11m40.680065671s ago: executing program 0 (id=422):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x9e32, 0x7fffffd})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1})

11m40.239152923s ago: executing program 4 (id=425):
creat(&(0x7f0000000280)='./bus\x00', 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd000000060005"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000740)={[{@errors_remount}, {@discard}, {@dmask={'dmask', 0x3d, 0x2}}, {@errors_continue}, {@errors_remount}, {@keep_last_dots}, {@gid}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x1, 0x152a, &(0x7f0000002900)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9XX+sd+hP9E69S+/Wn+o9+jO9V3+u9+kv9H79pc7UX+kD+mt9UH+jD+lv9WH9nT6ij+pj+nt9XP+gT+iT+pQ+rc/oH/VZ/ZM+p/35k/vzX+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMltcps8Jo/JZ/KZeBNvCpqC5jwyZAqZQiZqoqaIKWKKmqKmmClmnHEmwSSYkqakKWVKmdKmtCljypiypqwpb8qbO8wd5k5zp7nL3GXuNnebqqaqqW6qmxqmhqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWKamGammWlumpsWpoVpZVqZ1qa1aWPamESTaNqatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4mySSZnqan6WV6mT6mj+ln+pn+pr8ZYAaYZJNsBplBZrAZbIaYIWaoGWaGnz9RNSPNKDPajDFjTYpJMePNeDPBTDATzUQz2Uw2qSbVTDPTzHQz3cw0M80sM8vMNrPNXDPXpJk0M9/MN+km3Sw0C02GyTCLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJe/H70ptYm93msFfZnPZqm8teY/8+zmfz23hbwBa02uaxeX8VG2ttUXuTLWaLW2dL2AR782/isracLW8r2DtsRXunrfSbuIa919a099la9n5b3d7zq7i2fcDWsY/auogAtrGtb5vaBvZR29A+ZhvZxraJbWpb26dsG/u0TbTP2Lb22d/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbTfb3fazr9j+9lU7wL5mk+3A38TD7Vt2hB1pR9nRdowd+5t4sp1iU+1UO82+a6fbGb+J0+wHdpZNt7PtHDvXzvs5Pl9Tuv3QLrQf2QwbwGK7xC61y+xyu+L/17rErrPr7Qa7w35iN9stdqvdZrdfOhG2u+xu+6ndYz+zB+zXdp/9wu63h2ym/ern+PzjO2S/tYftd/aIPWqP2e/tcfuD+jl3ZC8A+6P93v5kz1lvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCXyitGxclRCUqgm6kk3UKl6FYqTbdRGbqdylI5Kk8V6A6qSHdSJbqLKtPdVIWqUjWqTvdQDbqXatJ9VIvup9r0ANWhB6kuPUT16GGqT49QA3qUGtJj1IgaUxNqSs3ocWpOT1ALakmt6ElqTU9RG3qaEukZakvPUjv6G7Wn56gDPU8d6QXqRJ2pC71IXekl6kbdKYl6UE96mXpRb+pDfakfvUL96VUaQK9RMg2kQfQ6DaY3aAi9SUNpGA2nt2gEjaRRNJrG0FhKoXE0nt6mCfQOTaRJNJmmUCpNpWn0Lk2nGTST3qNZ9D7Npjk0l+ZRGn1A82kBpdOHtJA+ogxaRItpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+ph30Ce2kXbSbPqU99Bntpc9pH31B++lLyqSv6AB9TQfpGzpE3/ru9B0doaN0jL6n4/QDnaCTdIpO0xn6kc7ST3SOPEGIoQhlqMIgjAmzhbFh9jBHeFWYM7w6zBVeE0bCa8O48Lowd3h9mCfMG+YL84fxYYGwYKhDE9qQwjAsFBYOo+ENYZHwxrBoiGGxsHjowhJhQnhzWDK8JSwV3hqWDm8Ly4S3h2XDcuGj91cI7wgrhneGlcK7wsrh3WGVsGpYLawe3hPWCO8Na4b3hbXC+8NS4QNhnfDBsG74UFgvfDisHz4SNggfDRuGj4WNwsZhk7Bp2Cx8PGwePhG2CFuGrcInw9bhU2Gb8OkwMXwmbBs++/P8Awv+eD4p7BH2DF8OXw69v0/Ojc6LpkU/iM6PLoimRz+MLox+FM2ILoouji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iel89Gzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKuptcMVfcOVfCJbimrplr5pq7J1wL19K1ck+6J91T7in3tHvaPePaumddO/c319495zq4593z7gXXyXV2XdyLrqsbl+vCezLJ9XQ9XS/Xy/VxfVw/18/1d/3dADfAJbtkN8gNcoPdYDfEDXFD3VA33A13I9wIN8qNcmPcGJfiUtx4N95NcBPcRDfRTXaTXapLddPcNDfdTXcVZ1w4ymw32811c12aS3Pz3flzxnS30C10GS7DLXaL3VK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdDrfD7fTXXFjU7XF73V63z+1z+92XLtN95Q64r91B94075L51h9137og76o65791x94M74U66U+60O+N+dGfdT+6c8y4lMi4yPvJ2ZELkncjEyKTI5MiUSGpkamRa5N3I9MiMyMzIe5FZkfcjsyNzInMj8yJpkQ8i8yMLIumRDyMLIx9FMiKLIosjSyJLI8si3hfYHPpCvrCP+ht8EX+jL+pv8sV8ce98CZ/gb/Yl/S2+lL/Vl/a3+TL+dl/Wl/Pl/WO+kW/sm/imvpl/3Df3T/gWvqVv5Z/0rf1Tvo1/2if6Z3xb/6xv5//m2/vnfAf/vO/oX/CdfGffxb/ou/qXfDff3Sf5Hr6nf9n38r19H9/X9/Ov+P7+VT/Av+aT/UA/yL/uB/s3/BD/ph/qh/nhMW/5EZcukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C3y6/9Av9B/5DL/o0k1lv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/df+x3+E/8Tr/L7/af+j3+M7/Xf+73+S/8fv+lz/Rf+QP+a3/Qf+MP+W/9Yf+dP+KP+mP+e3/c/+BP+JP+lD/tz/gf/Vn/kz/H/2eNMcYYY+xPGXd5KH49c+F2fo/fyRG/2LknAFy9JX/mL+fPn1GuzXNh3FvEt44AwDPdOz58aatSJSkp6eK+GRKCwnMALv1N0HkxcDleBK3gKUiEllDyd+vvLTqfoX+wfvQ2gBy/yImFy/Hl9T8HwKTfWf/xJ4fPLxOeivsf1p8DULTw5ZzscDleBK1+vr/SEkr9Qf15m/+y/tjfrp/9ixSAFr/IyQmX48v1J8AT8Cwk/mpPxhhjjDHGGGPsgt6ifPtL15+X/sXn712fx6vLOdngcvyPrs8ZY4wxxhhjjDF25T3XucvTjycmtmz/zw8q/a+y/vSgIfxfrcyD3x14D3DpJwoA/sUFAc4P5L/zUWz6txwr+eJb5++nlp72AfxntPKvGFzhDybGGGOMMcbYX+7ySf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9O/4dWJX+jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA///UxgMC")

11m39.887807659s ago: executing program 0 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

11m36.982238645s ago: executing program 32 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

11m36.775975572s ago: executing program 4 (id=432):
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r0=>0x0, 0x7}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000004c0)={r0, 0xffff, 0x22, "c032d21f338fa55da88587b1b3aecf467bd4004bb0a37681a21198a6d6ccbf7425ce"}, 0x2a)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b40000000000000073119f000000000006000000000000009500740000000000110f21fda743fa85375da716a34082e8f18e7397f48a57f3632f342e7f588c204a31c3c948fb3e86d8851da4e2dc4967a064d29795f183ddbad0e986f79a06eb7dcfaaf57f47a8fa4d20e643d3ab95f6cca7254f0fd79564524031f6a2d5e0adbf14edcd1e16a07120b1d0a48912fd943017966e109c03d0af35466cd382e9add4744e2a747bfe6fa80c404c43af9fe0863c1fbe5d883baffdaf023a08f9fe10ccac48f1c1f9ccc74f50812e6d1fa341296a1e0e005d5fb4558b53f46eab8057715d9ee3efa9c97dd733d235a647b4d2d6d844"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r2, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240), &(0x7f0000001280)=[0x0], <r4=>0x0, 0x60, &(0x7f00000012c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xf, 0x7, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f00000010c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r3, 0x4, &(0x7f0000001500)=[r1, r1, r1], &(0x7f0000001540)=[{0x3, 0x4, 0x0, 0x7}, {0x0, 0x2, 0xa, 0x1}, {0x1, 0x1, 0x0, 0x6}, {0x1, 0x5, 0x2}], 0x10, 0x80000001, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

11m34.495666565s ago: executing program 4 (id=435):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
socket$inet6(0xa, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40efa, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002180)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="0403"], 0x13, 0x1)

11m33.828108963s ago: executing program 4 (id=438):
r0 = socket(0x23, 0x800, 0x1)
r1 = timerfd_create(0x6, 0x800)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r1, 0x3, &(0x7f0000000100)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f0000000140))
rt_sigtimedwait(&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x8)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000240)=0x2)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)=<r7=>0x0)
r8 = syz_open_procfs(r7, &(0x7f00000002c0)='fd\x00')
r9 = semget$private(0x0, 0x0, 0x59c)
semtimedop(r9, &(0x7f0000000300)=[{0x3, 0x0, 0x800}, {0x0, 0x3, 0x1000}, {0x3, 0x6, 0x800}, {0x4, 0x0, 0x800}, {0x0, 0x6}, {0x0, 0x81, 0x800}, {0x4, 0x0, 0x800}], 0x7, &(0x7f0000000340)={0x77359400})
semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x9}, {0x4, 0x4, 0x1000}, {0x2, 0xf70}], 0x3)
semctl$GETVAL(r9, 0x1, 0xc, &(0x7f00000003c0)=""/95)
ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x2, 0x4e24, @empty}, 0x200, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)='veth1_to_hsr\x00', 0x5e1d8e88, 0x7f, 0x5})
mq_timedsend(0xffffffffffffffff, &(0x7f0000000500)="029d525ae292863d188b3a9cf168311f498314a6aa5f8f4488cf6dec450173a1dff0b136186cbb7827d8bd05c581a9a00435114b35156a3e3df27c70dbe0edb14bc18c013c9de59acce3d7f509938b9059feecfc2f9fbd579722cdbad898b2e98eea4a522789318c05e6807514942592cb5148da6e43c4e3206569ea73f8b492a61ddf258ba498469857a93a1a05ca8d7f12be63b948412cffc4211cff145973beeedffd30cdac", 0xa7, 0xffff, &(0x7f00000005c0))
pwrite64(r8, &(0x7f0000000600)="3b6a6766e47b9101a711d0419a939fb00ca03162ad884039382c5d060f11fa4d3c6c3ecb53420d8df9c093a57b84a4e6d618e066b2ef34bbb3ee3224bc1134b01cf8591ad907ac765f7cc430a688cf358107a937e9581ea179bd04acdd070bfdf02e2aa552f6cc5b449d641348a23b16c00782cfefd855cde2176d15116c6b7b841be914c70fece24bd761cae429844d7829549a79191856b3401b5cd3c5dfea54d746c8a976af6b596165ef624a816ea4cf4a6ad9151ee533ae857b206ba0e9d967fd959a3ef493f143adaa", 0xcc, 0x6b8)
r10 = signalfd4(r1, &(0x7f0000000700)={[0x5]}, 0x8, 0x80000)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000000740))
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r12, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8881)
getsockname$packet(r8, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
fallocate(r1, 0x50, 0x100000001, 0x7)
timer_create(0x2, &(0x7f0000000940)={0x0, 0xb, 0x4, @tid=r7}, &(0x7f0000000980)=<r13=>0x0)
clock_gettime(0x0, &(0x7f00000009c0)={<r14=>0x0, <r15=>0x0})
timer_settime(r13, 0x1, &(0x7f0000000a00)={{0x77359400}, {r14, r15+60000000}}, &(0x7f0000000a40))
write$sndseq(r8, &(0x7f0000000a80)=[{0x6, 0x1, 0xfe, 0x0, @time={0x7, 0x6}, {0x0, 0x55}, {0x8, 0x8}, @time=@tick=0x9}], 0x1c)

11m32.124196755s ago: executing program 33 (id=438):
r0 = socket(0x23, 0x800, 0x1)
r1 = timerfd_create(0x6, 0x800)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r1, 0x3, &(0x7f0000000100)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f0000000140))
rt_sigtimedwait(&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x8)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000240)=0x2)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)=<r7=>0x0)
r8 = syz_open_procfs(r7, &(0x7f00000002c0)='fd\x00')
r9 = semget$private(0x0, 0x0, 0x59c)
semtimedop(r9, &(0x7f0000000300)=[{0x3, 0x0, 0x800}, {0x0, 0x3, 0x1000}, {0x3, 0x6, 0x800}, {0x4, 0x0, 0x800}, {0x0, 0x6}, {0x0, 0x81, 0x800}, {0x4, 0x0, 0x800}], 0x7, &(0x7f0000000340)={0x77359400})
semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x9}, {0x4, 0x4, 0x1000}, {0x2, 0xf70}], 0x3)
semctl$GETVAL(r9, 0x1, 0xc, &(0x7f00000003c0)=""/95)
ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x2, 0x4e24, @empty}, 0x200, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)='veth1_to_hsr\x00', 0x5e1d8e88, 0x7f, 0x5})
mq_timedsend(0xffffffffffffffff, &(0x7f0000000500)="029d525ae292863d188b3a9cf168311f498314a6aa5f8f4488cf6dec450173a1dff0b136186cbb7827d8bd05c581a9a00435114b35156a3e3df27c70dbe0edb14bc18c013c9de59acce3d7f509938b9059feecfc2f9fbd579722cdbad898b2e98eea4a522789318c05e6807514942592cb5148da6e43c4e3206569ea73f8b492a61ddf258ba498469857a93a1a05ca8d7f12be63b948412cffc4211cff145973beeedffd30cdac", 0xa7, 0xffff, &(0x7f00000005c0))
pwrite64(r8, &(0x7f0000000600)="3b6a6766e47b9101a711d0419a939fb00ca03162ad884039382c5d060f11fa4d3c6c3ecb53420d8df9c093a57b84a4e6d618e066b2ef34bbb3ee3224bc1134b01cf8591ad907ac765f7cc430a688cf358107a937e9581ea179bd04acdd070bfdf02e2aa552f6cc5b449d641348a23b16c00782cfefd855cde2176d15116c6b7b841be914c70fece24bd761cae429844d7829549a79191856b3401b5cd3c5dfea54d746c8a976af6b596165ef624a816ea4cf4a6ad9151ee533ae857b206ba0e9d967fd959a3ef493f143adaa", 0xcc, 0x6b8)
r10 = signalfd4(r1, &(0x7f0000000700)={[0x5]}, 0x8, 0x80000)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000000740))
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r12, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8881)
getsockname$packet(r8, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
fallocate(r1, 0x50, 0x100000001, 0x7)
timer_create(0x2, &(0x7f0000000940)={0x0, 0xb, 0x4, @tid=r7}, &(0x7f0000000980)=<r13=>0x0)
clock_gettime(0x0, &(0x7f00000009c0)={<r14=>0x0, <r15=>0x0})
timer_settime(r13, 0x1, &(0x7f0000000a00)={{0x77359400}, {r14, r15+60000000}}, &(0x7f0000000a40))
write$sndseq(r8, &(0x7f0000000a80)=[{0x6, 0x1, 0xfe, 0x0, @time={0x7, 0x6}, {0x0, 0x55}, {0x8, 0x8}, @time=@tick=0x9}], 0x1c)

10m35.065789658s ago: executing program 6 (id=551):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40efa, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002180)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="0403"], 0x13, 0x1)

10m34.024642141s ago: executing program 6 (id=555):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804810, &(0x7f0000005440), 0x0, 0x772, &(0x7f0000001100)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030e777a43030303030b03030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x11)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000020000000020e9ff00000000020000000008"], 0x2a)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f00000001c0)={0x83, 0x4, 0x8, 0x3, 0x15, "e20b0020ffffffff"})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
read$FUSE(r5, &(0x7f0000001ac0)={0x2020}, 0x2020)

10m30.889345689s ago: executing program 6 (id=558):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000070000000400000000000000000000000400001d8c29870002000000000000000000000000fc00000000000000000000766bd64769c553483d9f2354807cdb3b30ad1f9c3a93f1358e3264c2116eec060206d4a5700ed5e017421582307702fff14fc2e2ef0ccd151d50ca5b96d4b068c0109540ab26bce9ee7f060b10079486659aa6ae8889e49d147ce5a89dfc9ca28005d087381a449b617b09a43ea9fb6bf45e60bec509bc77a500609a81304823c74424ae31ee3a76653ea9d11c968482f8700d1bf8fbc2ba171f741e70d728bd16b688ff7260aedf7635d8b709dd79d82193b1f7"])

10m29.506863872s ago: executing program 6 (id=564):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

10m27.460434308s ago: executing program 6 (id=567):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x8f\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\xa3v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', 0x0, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x3)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
ioctl$TIOCSWINSZ(r3, 0x5414, 0x0)
r4 = io_uring_setup(0x7fe7, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
poll(&(0x7f0000000000)=[{r4, 0x11000}], 0x1, 0x7)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000200))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

10m25.864198737s ago: executing program 6 (id=571):
creat(&(0x7f00000001c0)='./bus\x00', 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB])

10m22.258027725s ago: executing program 34 (id=571):
creat(&(0x7f00000001c0)='./bus\x00', 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB])

15.29879654s ago: executing program 2 (id=2416):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x4000004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4a55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.725731058s ago: executing program 5 (id=2419):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

13.680842514s ago: executing program 2 (id=2423):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x1000000, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={<r7=>0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000})
close_range(r7, 0xffffffffffffffff, 0x10000000000000)

10.980838979s ago: executing program 2 (id=2428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000240), 0x0}, 0x20)

10.891442942s ago: executing program 5 (id=2429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @random="217cc1fc0059"})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf)

10.800294976s ago: executing program 3 (id=2430):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

10.215578204s ago: executing program 7 (id=2432):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000040000006102000002"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f00000004c0), 0x0}, 0x20)

10.081145714s ago: executing program 2 (id=2433):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0)
sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040))
unshare(0x400)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x2, 0x4c, 0x0})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
dup(0xffffffffffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd, &(0x7f0000000000))
getpgid(0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00')
pread64(r5, 0x0, 0x0, 0x8f3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, r4, 0x0, &(0x7f00000003c0)={0x8, 0xaf1, 0x9})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)

9.803086231s ago: executing program 3 (id=2434):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9.386510853s ago: executing program 7 (id=2435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

9.291817268s ago: executing program 5 (id=2436):
socket$inet6(0xa, 0x6, 0x0)
socket(0x21, 0x3, 0x6)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = socket(0x1e, 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8.754832785s ago: executing program 3 (id=2438):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x1000000, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={<r8=>0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000})
close_range(r8, 0xffffffffffffffff, 0x10000000000000)

8.242783366s ago: executing program 7 (id=2439):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

7.867086332s ago: executing program 1 (id=2440):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
write$char_usb(r1, &(0x7f00000000c0)='V', 0x1)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

7.863373392s ago: executing program 3 (id=2441):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

7.261045094s ago: executing program 5 (id=2442):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xffff, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x13, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x7, 0x70}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

6.323911398s ago: executing program 1 (id=2443):
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0xb8, 0xd4, 0x40, 0x11ba, 0x1001, 0xec57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x19, 0xb0, 0x13, [{{0x9, 0x4, 0x4e, 0x3, 0x1, 0x4d, 0x6b, 0xe7, 0xca, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0x7, 0x2}}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})

6.055690783s ago: executing program 3 (id=2444):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t'], 0x48)

5.802332786s ago: executing program 2 (id=2445):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x596, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x90, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x7b3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x33, &(0x7f0000000200)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x10001, 0x770f, 0x8be}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x8, 0x0, 0x1c}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x2, 0x4f}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xd1b3, 0xf00f, 0x4f3, [0x3f5f]}]}, 0x5, [{0x13, &(0x7f0000000300)=@string={0x13, 0x3, "91c84510ac4acd721caa5650c7288ff242"}}, {0x48, &(0x7f0000000380)=@string={0x48, 0x3, "06d3b6695066f82ba0203c00dbe03689f91460f87341f145b97b50ce912b4122f5863593acb3dd4759ca21df391fd859704dc732a066798fc7f3718297d8c9a78b0bd8617019"}}, {0x0, 0x0}, {0x64, &(0x7f00000005c0)=@string={0x64, 0x3, "9bbe18f1875d6b7eb385eaa5ee3d4aadd2f4799028fa4aca27654af73f6d21f380a5561077714a676147a4a8b7c922b8f019e2733bb2c1e38b5b0851e5f9e84bc4942e0fc8cea33f7833daed539fa029b3f61d1ec189e980abc1c1d8e77108318056"}}, {0x3b, &(0x7f00000006c0)=@string={0x3b, 0x3, "e495951653fc6d9c6eb70aabf9625fb48aec3a657b7752f79a350825b180f6fbc61407e6309799ad862932d1e352e06956c3e25d91fadeded9"}}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x1a8f99b74ae4654e, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x58, 0x1c, 0x29, 0x8, 0xb57, 0x8528, 0x6d39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x0, 0xb, [{{0x9, 0x4, 0xc8, 0x2, 0x1, 0x3, 0x1, 0x2, 0x3, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x0, 0x8}}]}}]}}]}}, 0x0)
r2 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000800)={0x3, 0x100, 0xf})
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff0)
write$char_usb(r3, &(0x7f0000000000)='8', 0x1)

4.851218708s ago: executing program 1 (id=2446):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0xdf63e9fb3bbd7bc4, 0x70bd29, 0x25dfdbfc, {0xa, 0x40, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20050000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.472507106s ago: executing program 7 (id=2447):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000001800)=ANY=[@ANYBLOB="100b4a0000008e6b906a006ea85ff6d5cc5c8b3e92ae2c3fba47a6612f55287ca2df9ec3c655dcf71eff826603921928c255362fdf5980249c6898db827508000000b98dbef63a56"], 0x0, 0x0})

3.727973113s ago: executing program 1 (id=2448):
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0)
syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x1a, &(0x7f0000000080)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x42, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x6a, 0x8, 0xff, 0x10}]}})

3.398413288s ago: executing program 5 (id=2449):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3.144029099s ago: executing program 3 (id=2450):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x54, 0x30, 0x5, 0x10, 0xdb0, 0x6869, 0x73b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xb5, 0xe5, 0x49}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000740)={0x0, 0x16, 0x49, "66c0eb4f24a0bdfb5ad8459decf5ac05ee6882cd5fbd6683d8d2335fa60479ade617efb13d52c39ad6f86a980363253e2ac9411b545477bec1c43c357b97e42bcc18b01f80e0e2e261"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000680)={0x20, 0x0, 0xba, {0xb8, "c6800b2530b4dd67e5fe3e5eda81ab3fb9670c988d887e3066b43713bce353f415eade9d8b2daeaed2a79b0188a07aba0d6ea8e6c6239d90dd15eec22435f38d12be11a7cb06f897afe11161553394c8a09a6016b0381573de6164634e07ff95832ce47fcc4d67c9aeb9a348035c9dc0723962337e624586ae2dc46206387d6b50b2ff262b438fa488069a9a1b19b4e5de2eb148164f6765bc38f1a1dbbca765d69ab7075212d855a486be41160c9dbfd491f8c5fdf18c98"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x49}})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.494204305s ago: executing program 5 (id=2451):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="00070004"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x28, &(0x7f0000000a80)=ANY=[@ANYBLOB="00150100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.371417605s ago: executing program 1 (id=2452):
socket$inet6(0xa, 0x6, 0x0)
socket(0x21, 0x3, 0x6)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = socket(0x1e, 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.618866146s ago: executing program 2 (id=2453):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
r1 = syz_usb_connect$uac1(0x4, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xef, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x8, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x5, "b248894a2e"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x401, 0x8, "08921e7e589f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x0, 0x1004}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0xb1, 0x3, {0x7, 0x25, 0x1, 0x3, 0x9b, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xbd, 0x0, 0x5, {0x7, 0x25, 0x1, 0x82, 0x7, 0x1ff}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0xe, 0x2, "c0f0"}, 0x0, 0x0, 0x0, 0x0})

872.372556ms ago: executing program 7 (id=2454):
r0 = syz_open_dev$evdev(&(0x7f0000002d80), 0x3, 0x40000)
ioctl$EVIOCSREP(r0, 0x40084503, 0x0)

336.667922ms ago: executing program 1 (id=2455):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0)
sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040))
unshare(0x400)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x2, 0x4c, 0x0})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd, &(0x7f0000000000))
getpgid(0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00')
pread64(r5, 0x0, 0x0, 0x8f3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, r4, 0x0, &(0x7f00000003c0)={0x8, 0xaf1, 0x9})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)

0s ago: executing program 7 (id=2456):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

kernel console output (not intermixed with test programs):

[ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.088684][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.096459][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.103874][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.122507][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.133391][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.140596][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.147995][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.155394][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  724.162686][ T9246] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  724.248926][ T5840] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  724.285650][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  724.337429][ T5840] usb 6-1: unable to read config index 0 descriptor/start: -61
[  724.345739][ T5840] usb 6-1: can't read configurations, error -61
[  724.653618][ T5840] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  725.391515][ T5840] usb 6-1: device descriptor read/8, error -71
[  725.507236][ T5840] usb usb6-port1: unable to enumerate USB device
[  725.804457][ T5840] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  725.989625][ T5840] usb 6-1: Using ep0 maxpacket: 16
[  726.046156][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.065764][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  726.171261][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  726.184515][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.192816][ T5840] usb 6-1: Product: syz
[  726.201007][ T5840] usb 6-1: Manufacturer: syz
[  726.207258][ T5840] usb 6-1: SerialNumber: syz
[  726.689342][ T5840] usb 6-1: 0:2 : does not exist
[  726.821643][ T9278] FAULT_INJECTION: forcing a failure.
[  726.821643][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.824958][ T5840] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  726.836144][ T9278] CPU: 1 UID: 0 PID: 9278 Comm: syz.7.1002 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  726.836345][ T9278] Tainted: [W]=WARN
[  726.836404][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  726.836496][ T9278] Call Trace:
[  726.836552][ T9278]  <TASK>
[  726.836610][ T9278]  dump_stack_lvl+0x216/0x2d0
[  726.836781][ T9278]  dump_stack+0x1e/0x24
[  726.836918][ T9278]  should_fail_ex+0x767/0x830
[  726.837135][ T9278]  should_fail+0x2a/0x40
[  726.837337][ T9278]  should_fail_usercopy+0x2e/0x40
[  726.837555][ T9278]  _copy_from_iter+0x1d8/0x2e30
[  726.837758][ T9278]  ? kmsan_alloc_page+0x182/0x220
[  726.837964][ T9278]  ? __alloc_frozen_pages_noprof+0x9a7/0xe00
[  726.838217][ T9278]  copy_page_from_iter+0x3c8/0x7e0
[  726.838448][ T9278]  pipe_write+0xefc/0x2950
[  726.838643][ T9278]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  726.838844][ T9278]  ? vfs_write+0x53b/0x1540
[  726.839056][ T9278]  vfs_write+0xb34/0x1540
[  726.839253][ T9278]  ? __pfx_pipe_write+0x10/0x10
[  726.839460][ T9278]  ksys_write+0x240/0x4b0
[  726.839627][ T9278]  ? kmsan_get_metadata+0x13e/0x1c0
[  726.839830][ T9278]  __x64_sys_write+0x93/0xe0
[  726.840009][ T9278]  x64_sys_call+0x3161/0x3c30
[  726.840173][ T9278]  do_syscall_64+0xcd/0x1e0
[  726.840371][ T9278]  ? clear_bhb_loop+0x25/0x80
[  726.840567][ T9278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.840767][ T9278] RIP: 0033:0x7f0ff198d169
[  726.840888][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  726.841026][ T9278] RSP: 002b:00007f0ff2736038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  726.841172][ T9278] RAX: ffffffffffffffda RBX: 00007f0ff1ba5fa0 RCX: 00007f0ff198d169
[  726.841293][ T9278] RDX: 000000000001000c RSI: 00004000000022c0 RDI: 0000000000000004
[  726.841393][ T9278] RBP: 00007f0ff2736090 R08: 0000000000000000 R09: 0000000000000000
[  726.841491][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.841586][ T9278] R13: 0000000000000000 R14: 00007f0ff1ba5fa0 R15: 00007ffefa4bc2e8
[  726.841710][ T9278]  </TASK>
[  727.270642][ T5840] usb 6-1: USB disconnect, device number 27
[  727.576942][ T8929] udevd[8929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  729.010019][ T9296] program syz.5.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  729.617023][ T9303] xt_hashlimit: size too large, truncated to 1048576
[  729.907808][ T9308] veth0_macvtap: left promiscuous mode
[  730.004870][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'.
[  730.174693][ T9310] vlan3: entered promiscuous mode
[  730.180022][ T9310] syz_tun: entered promiscuous mode
[  730.410269][ T9302] loop2: detected capacity change from 0 to 32768
[  730.590258][ T9302] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  730.792028][ T5840] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  730.928818][ T9323] loop1: detected capacity change from 0 to 8
[  730.993299][ T5840] usb 4-1: Using ep0 maxpacket: 16
[  731.005259][ T9302] XFS (loop2): Ending clean mount
[  731.019530][ T9302] XFS (loop2): Quotacheck needed: Please wait.
[  731.041954][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  731.053176][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  731.109989][ T5840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  731.119764][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.128408][ T5840] usb 4-1: Product: syz
[  731.132850][ T5840] usb 4-1: Manufacturer: syz
[  731.138057][ T5840] usb 4-1: SerialNumber: syz
[  731.162679][ T9302] XFS (loop2): Quotacheck: Done.
[  731.460138][ T5840] usb 4-1: 0:2 : does not exist
[  731.508576][ T5840] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  731.550339][ T5781] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  731.715756][ T5840] usb 4-1: USB disconnect, device number 34
[  732.749712][ T8929] udevd[8929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  733.603782][ T9339] loop3: detected capacity change from 0 to 128
[  733.639276][ T9339] hpfs: Bad value for 'umask'
[  733.749902][ T9339] loop3: detected capacity change from 0 to 256
[  733.785375][ T9339] exfat: Unknown parameter '0ÀøÓ'
[  734.278045][ T9342] loop2: detected capacity change from 0 to 2048
[  734.438545][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'.
[  734.470632][ T9345] vlan3: entered promiscuous mode
[  734.476158][ T9345] syz_tun: entered promiscuous mode
[  734.507596][ T9342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.507883][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'.
[  734.520377][ T9342] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  734.789499][   T30] audit: type=1326 audit(1742366710.745:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  734.844232][   T30] audit: type=1326 audit(1742366710.855:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  734.875256][   T30] audit: type=1326 audit(1742366710.855:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  734.901339][   T30] audit: type=1326 audit(1742366710.885:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  734.956775][   T30] audit: type=1326 audit(1742366710.975:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  735.033989][   T30] audit: type=1326 audit(1742366711.015:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  735.057859][   T30] audit: type=1326 audit(1742366711.045:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd16198effc code=0x7ffc0000
[  735.088915][   T30] audit: type=1326 audit(1742366711.045:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd16198ef34 code=0x7ffc0000
[  735.114677][   T30] audit: type=1326 audit(1742366711.045:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd16198ef34 code=0x7ffc0000
[  735.137641][   T30] audit: type=1326 audit(1742366711.045:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16198d169 code=0x7ffc0000
[  735.928864][ T5840] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  736.543983][ T5840] usb 4-1: Using ep0 maxpacket: 16
[  736.613221][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  736.623842][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  736.796486][ T5840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  736.815328][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.826824][ T5840] usb 4-1: Product: syz
[  736.831262][ T5840] usb 4-1: Manufacturer: syz
[  736.836360][ T5840] usb 4-1: SerialNumber: syz
[  737.407682][ T5840] usb 4-1: 0:2 : does not exist
[  737.569788][ T9360] loop5: detected capacity change from 0 to 4096
[  737.608699][ T5840] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  738.063740][ T5840] usb 4-1: USB disconnect, device number 35
[  738.640118][ T8929] udevd[8929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  740.468489][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.505538][ T9360] ntfs3(loop5): Failed to read $AttrDef (-4).
[  741.614371][   T26] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  741.854058][   T26] usb 3-1: Using ep0 maxpacket: 16
[  741.913800][   T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  741.925207][   T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  742.113823][   T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  742.123568][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.133959][   T26] usb 3-1: Product: syz
[  742.138379][   T26] usb 3-1: Manufacturer: syz
[  742.143956][   T26] usb 3-1: SerialNumber: syz
[  742.427951][ T9378] loop3: detected capacity change from 0 to 32768
[  742.501309][ T9378] XFS: noikeep mount option is deprecated.
[  742.557732][   T26] usb 3-1: 0:2 : does not exist
[  742.589727][ T9378] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  742.695100][   T26] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  742.731849][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'.
[  742.975540][ T9378] XFS (loop3): Ending clean mount
[  742.990417][ T9378] XFS (loop3): Quotacheck needed: Please wait.
[  743.002640][   T26] usb 3-1: USB disconnect, device number 38
[  743.125969][ T9378] XFS (loop3): Quotacheck: Done.
[  743.175571][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  743.175652][   T30] audit: type=1800 audit(1742366719.185:891): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1036" name="file0" dev="loop3" ino=1060 res=0 errno=0
[  743.407843][ T8929] udevd[8929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  743.453687][ T5840] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  743.723644][ T5840] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  743.732063][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.742811][ T5840] usb 4-1: config 0 has no interface number 0
[  743.839438][ T5840] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  743.849461][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.858074][ T5840] usb 4-1: Product: syz
[  743.862611][ T5840] usb 4-1: Manufacturer: syz
[  743.867667][ T5840] usb 4-1: SerialNumber: syz
[  743.888608][ T5840] usb 4-1: config 0 descriptor??
[  744.038604][ T9396] loop1: detected capacity change from 0 to 2048
[  744.304684][ T9396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.317839][ T9396] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.878684][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.396879][ T9409] loop5: detected capacity change from 0 to 2048
[  745.469566][   T45] usb 4-1: USB disconnect, device number 36
[  745.554976][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.566340][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.636390][ T9409]  loop5: p2 < > p4
[  745.726478][ T9409] loop5: p4 size 8192 extends beyond EOD, truncated
[  745.747574][ T5797] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  746.635262][ T9416] loop7: detected capacity change from 0 to 1024
[  746.915247][ T9416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  747.026948][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'.
[  747.036951][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'.
[  747.161125][ T9426] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.1049: Abort forced by user
[  747.183926][ T9416] overlayfs: upper fs does not support tmpfile.
[  747.195859][ T9426] EXT4-fs (loop7): Remounting filesystem read-only
[  747.202695][ T9426] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  747.302001][ T9425] netlink: 'syz.1.1052': attribute type 12 has an invalid length.
[  747.598447][ T7915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.093866][ T5840] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  748.313356][ T5840] usb 6-1: Using ep0 maxpacket: 16
[  748.358825][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  748.369680][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  748.470069][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  748.490283][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.503103][ T5840] usb 6-1: Product: syz
[  748.507574][ T5840] usb 6-1: Manufacturer: syz
[  748.512433][ T5840] usb 6-1: SerialNumber: syz
[  748.727020][ T9437] loop2: detected capacity change from 0 to 128
[  748.747406][ T9437] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  748.881024][ T5840] usb 6-1: 0:2 : does not exist
[  748.935453][ T5840] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  749.043611][ T9437] program syz.2.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  749.138047][ T5840] usb 6-1: USB disconnect, device number 28
[  750.107283][ T9449] loop1: detected capacity change from 0 to 32768
[  750.116646][ T9449] XFS: noikeep mount option is deprecated.
[  750.244696][ T9449] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  750.397569][ T9449] XFS (loop1): Ending clean mount
[  750.409650][ T9449] XFS (loop1): Quotacheck needed: Please wait.
[  750.480181][ T9449] XFS (loop1): Quotacheck: Done.
[  750.511956][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  750.521980][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  750.557063][   T30] audit: type=1800 audit(1742366726.515:892): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1058" name="file0" dev="loop1" ino=1060 res=0 errno=0
[  750.594252][ T8929] udevd[8929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  752.086795][ T5784] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  755.525267][ T9462] 9pnet_fd: Insufficient options for proto=fd
[  755.876889][ T9462] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.935579][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.946233][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.129012][ T9462] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.154556][ T5840] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  756.323843][ T9462] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.380311][ T5840] usb 3-1: Using ep0 maxpacket: 16
[  756.423820][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  756.434562][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  756.436937][ T9462] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.466442][ T5840] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  756.487702][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.496243][ T5840] usb 3-1: Product: syz
[  756.500666][ T5840] usb 3-1: Manufacturer: syz
[  756.505753][ T5840] usb 3-1: SerialNumber: syz
[  756.711060][ T9462] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.744034][ T9462] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.779842][ T9462] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.813503][ T9462] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.816174][ T5840] usb 3-1: 0:2 : does not exist
[  757.025294][ T5840] usb 3-1: USB disconnect, device number 39
[  757.236983][ T9470] udevd[9470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  758.745964][ T9478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.719892][ T9492] loop3: detected capacity change from 0 to 2048
[  760.474048][   T26] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  760.660836][   T26] usb 6-1: device descriptor read/64, error -71
[  760.691484][ T9493] loop7: detected capacity change from 0 to 32768
[  760.700811][ T9493] XFS: noikeep mount option is deprecated.
[  760.708764][ T5840] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  760.739451][ T9492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  760.793243][ T9493] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  760.903544][ T5840] usb 3-1: Using ep0 maxpacket: 16
[  760.919823][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  760.930572][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  760.946495][   T26] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  760.954496][ T5840] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  760.954653][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.954782][ T5840] usb 3-1: Product: syz
[  760.954884][ T5840] usb 3-1: Manufacturer: syz
[  760.954993][ T5840] usb 3-1: SerialNumber: syz
[  761.113981][ T9493] XFS (loop7): Ending clean mount
[  761.129648][ T9493] XFS (loop7): Quotacheck needed: Please wait.
[  761.190381][ T9493] XFS (loop7): Quotacheck: Done.
[  761.227825][   T30] audit: type=1800 audit(1742366737.225:893): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1072" name="file0" dev="loop7" ino=1060 res=0 errno=0
[  761.234796][ T5840] usb 3-1: 0:2 : does not exist
[  761.334711][ T5840] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  761.353623][   T26] usb 6-1: device descriptor read/64, error -71
[  761.476727][   T26] usb usb6-port1: attempt power cycle
[  761.574479][ T5840] usb 3-1: USB disconnect, device number 40
[  761.692151][ T9471] udevd[9471]: setting mode of /dev/bus/usb/003/040 to 020664 failed: No such file or directory
[  761.747793][ T9471] udevd[9471]: setting owner of /dev/bus/usb/003/040 to uid=0, gid=0 failed: No such file or directory
[  761.884337][   T26] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  761.932350][   T26] usb 6-1: device descriptor read/8, error -71
[  761.994690][ T9518] FAULT_INJECTION: forcing a failure.
[  761.994690][ T9518] name failslab, interval 1, probability 0, space 0, times 0
[  762.017587][ T9518] CPU: 0 UID: 0 PID: 9518 Comm: syz.3.1078 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  762.017759][ T9518] Tainted: [W]=WARN
[  762.017811][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  762.017896][ T9518] Call Trace:
[  762.017951][ T9518]  <TASK>
[  762.018002][ T9518]  dump_stack_lvl+0x216/0x2d0
[  762.018160][ T9518]  dump_stack+0x1e/0x24
[  762.018287][ T9518]  should_fail_ex+0x767/0x830
[  762.018506][ T9518]  should_failslab+0x17f/0x210
[  762.018699][ T9518]  __kmalloc_noprof+0x176/0x1230
[  762.018855][ T9518]  ? kfree+0x20/0xdb0
[  762.018984][ T9518]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  762.019175][ T9518]  ? tomoyo_realpath_from_path+0x104/0xaa0
[  762.019333][ T9518]  ? kmsan_get_metadata+0x13e/0x1c0
[  762.019535][ T9518]  tomoyo_realpath_from_path+0x104/0xaa0
[  762.019707][ T9518]  ? __srcu_read_lock+0x76/0xd0
[  762.019857][ T9518]  tomoyo_path_number_perm+0x1cf/0x7d0
[  762.020040][ T9518]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  762.020215][ T9518]  ? kmsan_get_metadata+0x13e/0x1c0
[  762.020384][ T9518]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  762.020615][ T9518]  tomoyo_file_ioctl+0x3f/0x50
[  762.020771][ T9518]  security_file_ioctl+0x145/0x590
[  762.020957][ T9518]  __se_sys_ioctl+0xd0/0x440
[  762.021127][ T9518]  __x64_sys_ioctl+0x96/0xe0
[  762.021294][ T9518]  x64_sys_call+0x19f0/0x3c30
[  762.021455][ T9518]  do_syscall_64+0xcd/0x1e0
[  762.021633][ T9518]  ? clear_bhb_loop+0x25/0x80
[  762.021819][ T9518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.022006][ T9518] RIP: 0033:0x7f4da478d169
[  762.022115][ T9518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  762.022245][ T9518] RSP: 002b:00007f4da5539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  762.022382][ T9518] RAX: ffffffffffffffda RBX: 00007f4da49a5fa0 RCX: 00007f4da478d169
[  762.022495][ T9518] RDX: 00004000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  762.022588][ T9518] RBP: 00007f4da5539090 R08: 0000000000000000 R09: 0000000000000000
[  762.022678][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  762.022763][ T9518] R13: 0000000000000000 R14: 00007f4da49a5fa0 R15: 00007ffc7db0b718
[  762.022878][ T9518]  </TASK>
[  762.272069][ T9518] ERROR: Out of memory at tomoyo_realpath_from_path.
[  762.353845][   T26] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  762.409497][   T26] usb 6-1: device descriptor read/8, error -71
[  762.480505][ T9513] udevd[9513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  762.617084][   T26] usb usb6-port1: unable to enumerate USB device
[  762.643531][ T7915] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  764.084124][ T9534] loop2: detected capacity change from 0 to 64
[  766.277983][ T9549] loop1: detected capacity change from 0 to 32768
[  766.288826][ T9549] XFS: noikeep mount option is deprecated.
[  766.308077][ T5840] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  766.367529][ T9549] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  766.434300][   T26] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  766.553918][ T9549] XFS (loop1): Ending clean mount
[  766.567148][ T5840] usb 6-1: Using ep0 maxpacket: 16
[  766.569879][ T9549] XFS (loop1): Quotacheck needed: Please wait.
[  766.623518][   T26] usb 3-1: Using ep0 maxpacket: 16
[  766.631492][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  766.642533][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  766.677799][   T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  766.688659][   T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  766.771210][   T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  766.780983][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.789628][   T26] usb 3-1: Product: syz
[  766.791820][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  766.794917][   T26] usb 3-1: Manufacturer: syz
[  766.803599][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.808161][   T26] usb 3-1: SerialNumber: syz
[  766.825355][ T5840] usb 6-1: Product: syz
[  766.829807][ T5840] usb 6-1: Manufacturer: syz
[  766.838001][ T5840] usb 6-1: SerialNumber: syz
[  766.845431][ T9549] XFS (loop1): Quotacheck: Done.
[  766.883552][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.893749][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.940760][   T30] audit: type=1800 audit(1742366742.885:894): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1091" name="file0" dev="loop1" ino=1060 res=0 errno=0
[  767.157394][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  767.189871][ T5840] usb 6-1: 0:2 : does not exist
[  767.248048][ T5840] usb 6-1: USB disconnect, device number 33
[  767.335324][   T11] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  767.354471][   T26] usb 3-1: 0:2 : does not exist
[  767.415527][   T26] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  767.513230][   T11] usb 4-1: Using ep0 maxpacket: 8
[  767.558633][   T11] usb 4-1: config 0 has an invalid interface number: 5 but max is 0
[  767.567336][   T11] usb 4-1: config 0 has no interface number 0
[  767.573933][   T11] usb 4-1: config 0 interface 5 has no altsetting 0
[  767.646570][   T26] usb 3-1: USB disconnect, device number 41
[  767.703875][   T11] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff
[  767.714835][   T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.723618][   T11] usb 4-1: Product: syz
[  767.728050][   T11] usb 4-1: Manufacturer: syz
[  767.741343][   T11] usb 4-1: SerialNumber: syz
[  767.847106][   T11] usb 4-1: config 0 descriptor??
[  768.163311][ T9521] udevd[9521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  768.179943][   T11] dvb_usb_m920x 4-1:0.5: probe with driver dvb_usb_m920x failed with error -71
[  768.217262][ T9513] udevd[9513]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  768.279691][   T11] usb 4-1: USB disconnect, device number 37
[  768.717288][ T5784] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  770.011688][ T9592] loop5: detected capacity change from 0 to 1024
[  771.108777][   T26] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  771.303848][   T26] usb 4-1: Using ep0 maxpacket: 16
[  771.339040][   T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  771.349841][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  771.404521][   T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  771.414513][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.425182][   T26] usb 4-1: Product: syz
[  771.429728][   T26] usb 4-1: Manufacturer: syz
[  771.435762][   T26] usb 4-1: SerialNumber: syz
[  771.926443][ T9610] FAULT_INJECTION: forcing a failure.
[  771.926443][ T9610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  771.949543][ T9610] CPU: 0 UID: 0 PID: 9610 Comm: syz.1.1112 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  771.949723][ T9610] Tainted: [W]=WARN
[  771.949779][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  771.949867][ T9610] Call Trace:
[  771.949919][ T9610]  <TASK>
[  771.949971][ T9610]  dump_stack_lvl+0x216/0x2d0
[  771.950125][ T9610]  dump_stack+0x1e/0x24
[  771.950261][ T9610]  should_fail_ex+0x767/0x830
[  771.950469][ T9610]  should_fail+0x2a/0x40
[  771.950651][ T9610]  should_fail_usercopy+0x2e/0x40
[  771.950855][ T9610]  _copy_from_user+0x35/0x110
[  771.951054][ T9610]  io_submit_one+0x67/0x3280
[  771.951231][ T9610]  ? stack_depot_save_flags+0x2c/0x750
[  771.951425][ T9610]  ? kmsan_get_metadata+0x13e/0x1c0
[  771.951618][ T9610]  ? kmsan_get_metadata+0x13e/0x1c0
[  771.951806][ T9610]  ? kmsan_get_metadata+0x13e/0x1c0
[  771.951994][ T9610]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  771.952198][ T9610]  __se_sys_io_submit+0x275/0x700
[  771.952382][ T9610]  __x64_sys_io_submit+0x96/0xe0
[  771.952537][ T9610]  x64_sys_call+0x38ed/0x3c30
[  771.952698][ T9610]  do_syscall_64+0xcd/0x1e0
[  771.952872][ T9610]  ? clear_bhb_loop+0x25/0x80
[  771.953053][ T9610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.953247][ T9610] RIP: 0033:0x7f8781b8d169
[  771.953352][ T9610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.953484][ T9610] RSP: 002b:00007f878294d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  771.953623][ T9610] RAX: ffffffffffffffda RBX: 00007f8781da5fa0 RCX: 00007f8781b8d169
[  771.953731][ T9610] RDX: 00004000000005c0 RSI: 000000000000047f RDI: 00007f8782909000
[  771.953830][ T9610] RBP: 00007f878294d090 R08: 0000000000000000 R09: 0000000000000000
[  771.953925][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.954013][ T9610] R13: 0000000000000000 R14: 00007f8781da5fa0 R15: 00007ffc86839728
[  771.954133][ T9610]  </TASK>
[  772.349189][ T9608] loop5: detected capacity change from 0 to 32768
[  772.358623][ T9608] XFS: noikeep mount option is deprecated.
[  772.366385][   T45] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  772.477127][ T9608] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  772.549459][   T45] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.560262][   T45] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  772.573879][   T45] usb 3-1: config 0 interface 0 has no altsetting 0
[  772.581223][   T45] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  772.591027][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.651913][   T26] usb 4-1: 0:2 : does not exist
[  772.721455][   T26] usb 4-1: USB disconnect, device number 38
[  772.750900][   T45] usb 3-1: config 0 descriptor??
[  772.988896][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.999797][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  773.044424][ T9608] XFS (loop5): Ending clean mount
[  773.064483][ T9608] XFS (loop5): Quotacheck needed: Please wait.
[  773.117173][ T9608] XFS (loop5): Quotacheck: Done.
[  773.169205][   T30] audit: type=1800 audit(1742366749.155:895): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1110" name="file0" dev="loop5" ino=1060 res=0 errno=0
[  773.320014][ T9513] udevd[9513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  773.445897][   T45] holtek_mouse 0003:04D9:A067.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0
[  773.501651][   T26] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  773.644706][   T45] usb 3-1: USB disconnect, device number 42
[  773.740880][   T26] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  773.749522][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  773.760330][   T26] usb 6-1: config 0 has no interface number 0
[  773.881665][   T26] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  773.891659][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.900396][   T26] usb 6-1: Product: syz
[  773.905170][   T26] usb 6-1: Manufacturer: syz
[  773.910054][   T26] usb 6-1: SerialNumber: syz
[  773.994404][   T26] usb 6-1: config 0 descriptor??
[  774.217245][ T9628] FAULT_INJECTION: forcing a failure.
[  774.217245][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  774.231015][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.7.1115 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  774.231188][ T9628] Tainted: [W]=WARN
[  774.231239][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  774.231327][ T9628] Call Trace:
[  774.231380][ T9628]  <TASK>
[  774.231431][ T9628]  dump_stack_lvl+0x216/0x2d0
[  774.231583][ T9628]  dump_stack+0x1e/0x24
[  774.231710][ T9628]  should_fail_ex+0x767/0x830
[  774.231917][ T9628]  should_fail+0x2a/0x40
[  774.232103][ T9628]  should_fail_usercopy+0x2e/0x40
[  774.232314][ T9628]  _copy_from_iter+0x1d8/0x2e30
[  774.232501][ T9628]  ? kmsan_get_metadata+0x13e/0x1c0
[  774.232693][ T9628]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  774.232891][ T9628]  ? kmsan_get_metadata+0x13e/0x1c0
[  774.233091][ T9628]  ? skb_put+0x189/0x230
[  774.233230][ T9628]  netlink_sendmsg+0xc1d/0x11e0
[  774.233441][ T9628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.233638][ T9628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.233835][ T9628]  __sock_sendmsg+0x30f/0x380
[  774.234037][ T9628]  ____sys_sendmsg+0x890/0xda0
[  774.234219][ T9628]  ___sys_sendmsg+0x28d/0x3c0
[  774.234388][ T9628]  ? __rcu_read_unlock+0x7b/0xe0
[  774.234588][ T9628]  ? __fget_files+0x42b/0x500
[  774.234785][ T9628]  ? kmsan_get_metadata+0x13e/0x1c0
[  774.234980][ T9628]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  774.235182][ T9628]  __x64_sys_sendmsg+0x212/0x3c0
[  774.235352][ T9628]  ? kmsan_get_metadata+0x13e/0x1c0
[  774.235548][ T9628]  x64_sys_call+0x2ed6/0x3c30
[  774.235706][ T9628]  do_syscall_64+0xcd/0x1e0
[  774.235876][ T9628]  ? clear_bhb_loop+0x25/0x80
[  774.236068][ T9628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.236254][ T9628] RIP: 0033:0x7f0ff198d169
[  774.236364][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  774.236498][ T9628] RSP: 002b:00007f0ff2736038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.236640][ T9628] RAX: ffffffffffffffda RBX: 00007f0ff1ba5fa0 RCX: 00007f0ff198d169
[  774.236747][ T9628] RDX: 0000000010000000 RSI: 00004000000002c0 RDI: 0000000000000004
[  774.236841][ T9628] RBP: 00007f0ff2736090 R08: 0000000000000000 R09: 0000000000000000
[  774.236933][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.237027][ T9628] R13: 0000000000000000 R14: 00007f0ff1ba5fa0 R15: 00007ffefa4bc2e8
[  774.237145][ T9628]  </TASK>
[  775.524523][   T26] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  775.560641][ T9639] loop1: detected capacity change from 0 to 256
[  775.588121][   T45] usb 6-1: USB disconnect, device number 34
[  775.670775][ T7370] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  775.765596][   T26] usb 3-1: Using ep0 maxpacket: 16
[  775.850751][   T26] usb 3-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59
[  775.862098][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.871935][   T26] usb 3-1: Product: syz
[  775.876742][   T26] usb 3-1: Manufacturer: syz
[  775.881611][   T26] usb 3-1: SerialNumber: syz
[  775.940591][   T26] usb 3-1: config 0 descriptor??
[  776.820567][ T9643] loop3: detected capacity change from 0 to 32768
[  776.843064][   T26] pwc: Logitech QuickCam 4000 Pro USB webcam detected.
[  776.975180][   T26] pwc: Failed to set LED on/off time (-71)
[  776.982356][   T26] pwc: send_video_command error -71
[  776.988294][   T26] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  776.997051][   T26] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  777.344253][   T26] usb 3-1: USB disconnect, device number 43
[  777.717787][ T9648] loop7: detected capacity change from 0 to 512
[  777.950723][ T9656] FAULT_INJECTION: forcing a failure.
[  777.950723][ T9656] name failslab, interval 1, probability 0, space 0, times 0
[  777.965874][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.1.1127 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  777.966051][ T9656] Tainted: [W]=WARN
[  777.966107][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  777.966195][ T9656] Call Trace:
[  777.966248][ T9656]  <TASK>
[  777.966299][ T9656]  dump_stack_lvl+0x216/0x2d0
[  777.966457][ T9656]  dump_stack+0x1e/0x24
[  777.966607][ T9656]  should_fail_ex+0x767/0x830
[  777.966818][ T9656]  should_failslab+0x17f/0x210
[  777.967016][ T9656]  __kmalloc_noprof+0x176/0x1230
[  777.967176][ T9656]  ? kmsan_get_metadata+0x13e/0x1c0
[  777.967361][ T9656]  ? tomoyo_encode+0x5f8/0xa40
[  777.967498][ T9656]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  777.967698][ T9656]  ? kmsan_get_metadata+0x13e/0x1c0
[  777.967882][ T9656]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  777.968085][ T9656]  tomoyo_encode+0x5f8/0xa40
[  777.968245][ T9656]  tomoyo_realpath_from_path+0x9dd/0xaa0
[  777.968427][ T9656]  tomoyo_path_number_perm+0x1cf/0x7d0
[  777.968630][ T9656]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  777.968820][ T9656]  ? kmsan_get_metadata+0x13e/0x1c0
[  777.969009][ T9656]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  777.969236][ T9656]  tomoyo_file_ioctl+0x3f/0x50
[  777.969389][ T9656]  security_file_ioctl+0x145/0x590
[  777.969582][ T9656]  __se_sys_ioctl+0xd0/0x440
[  777.969756][ T9656]  __x64_sys_ioctl+0x96/0xe0
[  777.969924][ T9656]  x64_sys_call+0x19f0/0x3c30
[  777.970085][ T9656]  do_syscall_64+0xcd/0x1e0
[  777.970259][ T9656]  ? clear_bhb_loop+0x25/0x80
[  777.970446][ T9656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.970641][ T9656] RIP: 0033:0x7f8781b8d169
[  777.970751][ T9656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  777.970877][ T9656] RSP: 002b:00007f878294d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  777.971014][ T9656] RAX: ffffffffffffffda RBX: 00007f8781da5fa0 RCX: 00007f8781b8d169
[  777.971122][ T9656] RDX: 0000000000000000 RSI: 0000000040045109 RDI: 0000000000000003
[  777.971207][ T9656] RBP: 00007f878294d090 R08: 0000000000000000 R09: 0000000000000000
[  777.971301][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.971389][ T9656] R13: 0000000000000000 R14: 00007f8781da5fa0 R15: 00007ffc86839728
[  777.971506][ T9656]  </TASK>
[  778.208016][ T9656] ERROR: Out of memory at tomoyo_realpath_from_path.
[  778.423619][   T26] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  778.593453][   T26] usb 4-1: Using ep0 maxpacket: 32
[  778.635356][   T26] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  778.647687][   T26] usb 4-1: config 0 has no interface number 0
[  778.654592][   T26] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024
[  778.666475][   T26] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  778.919819][   T26] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  778.930314][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.945055][   T26] usb 4-1: Product: syz
[  778.949520][   T26] usb 4-1: Manufacturer: syz
[  778.954926][   T26] usb 4-1: SerialNumber: syz
[  778.970204][ T9662] pimreg0: tun_chr_ioctl cmd 1074025677
[  778.977202][ T9662] pimreg0: linktype set to 65534
[  779.100205][   T26] usb 4-1: config 0 descriptor??
[  779.109421][ T9653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  779.168337][   T26] smsc95xx v2.0.0
[  779.848767][ T9653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  780.574259][ T9665] loop2: detected capacity change from 0 to 32768
[  780.663341][ T9665] (syz.2.1129,9665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  780.683133][ T9665] (syz.2.1129,9665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  780.714754][ T9665] (syz.2.1129,9665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x61a7be75. Applying ECC.
[  780.728753][ T9665] (syz.2.1129,9665,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xd5db68cb, computed 0x71d5655d
[  780.757087][ T9665] (syz.2.1129,9665,0):ocfs2_validate_inode_block:1393 ERROR: Checksum failed for dinode 22
[  780.770825][ T9665] (syz.2.1129,9665,0):ocfs2_read_locked_inode:535 ERROR: status = -5
[  780.779670][ T9665] (syz.2.1129,9665,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  780.789622][ T9665] (syz.2.1129,9665,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  780.799086][ T9665] (syz.2.1129,9665,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  780.799294][ T9665] (syz.2.1129,9665,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  780.821115][ T9665] (syz.2.1129,9665,0):ocfs2_initialize_super:2195 ERROR: status = -22
[  780.830281][ T9665] (syz.2.1129,9665,0):ocfs2_fill_super:1177 ERROR: status = -22
[  780.934241][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'.
[  780.999500][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.010277][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.233568][   T11] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  781.493662][   T11] usb 3-1: Using ep0 maxpacket: 16
[  781.577747][   T11] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  781.587951][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.596652][   T11] usb 3-1: Product: syz
[  781.601155][   T11] usb 3-1: Manufacturer: syz
[  781.606088][   T11] usb 3-1: SerialNumber: syz
[  781.834672][   T11] usb 3-1: config 0 descriptor??
[  781.911488][   T11] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  782.093940][   T11] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  782.166495][   T11] usb 3-1: USB disconnect, device number 44
[  782.553239][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  782.560257][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  782.696404][ T9676] loop5: detected capacity change from 0 to 32768
[  782.707424][ T9676] XFS: noikeep mount option is deprecated.
[  782.817911][   T26] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  782.829355][   T26] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  782.901478][ T9676] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  782.928232][   T26] usb 4-1: USB disconnect, device number 39
[  783.530985][ T9676] XFS (loop5): Ending clean mount
[  783.544391][ T9676] XFS (loop5): Quotacheck needed: Please wait.
[  783.779341][ T9676] XFS (loop5): Quotacheck: Done.
[  783.827009][   T30] audit: type=1800 audit(1742366759.815:896): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1132" name="file0" dev="loop5" ino=1060 res=0 errno=0
[  784.063587][   T11] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  784.284787][   T11] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  784.293757][   T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  784.304419][   T11] usb 6-1: config 0 has no interface number 0
[  784.351885][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.362006][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.483325][   T11] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  784.492729][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.501266][   T11] usb 6-1: Product: syz
[  784.506152][   T11] usb 6-1: Manufacturer: syz
[  784.511032][   T11] usb 6-1: SerialNumber: syz
[  784.636546][   T11] usb 6-1: config 0 descriptor??
[  785.130628][ T9705] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  785.167376][   T11] usb 6-1: USB disconnect, device number 35
[  785.217745][ T7370] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  786.294690][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1146'.
[  787.320284][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'.
[  788.175405][   T30] audit: type=1326 audit(1742366764.185:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8781b8d169 code=0x0
[  789.663894][ T9745] program syz.1.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  793.714982][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  793.724973][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.241582][   T26] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  798.465971][   T26] usb 4-1: Using ep0 maxpacket: 16
[  798.499537][   T26] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  798.512366][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  798.524367][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  798.537147][   T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  798.554646][   T26] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  798.565066][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.846306][   T26] usb 4-1: config 0 descriptor??
[  798.857250][ T9781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  798.935535][   T26] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  799.249699][   T26] usb 4-1: USB disconnect, device number 40
[  799.249971][    C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  801.648104][ T9817] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  801.648104][ T9817] The task syz.7.1186 (9817) triggered the difference, watch for misbehavior.
[  801.834513][   T26] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  802.055595][   T26] usb 6-1: config 0 has no interfaces?
[  802.165326][   T26] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  802.175319][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.184312][   T26] usb 6-1: Product: syz
[  802.188812][   T26] usb 6-1: Manufacturer: syz
[  802.193847][   T26] usb 6-1: SerialNumber: syz
[  802.356551][   T26] usb 6-1: config 0 descriptor??
[  803.394393][ T9823] syz.3.1188 (9823) used greatest stack depth: 5144 bytes left
[  806.562472][   T11] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  806.763490][   T11] usb 4-1: Using ep0 maxpacket: 32
[  806.799530][   T11] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  806.809455][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.896177][   T11] usb 4-1: config 0 descriptor??
[  807.414446][   T11] viewsonic 0003:2133:0018.000A: item fetching failed at offset 0/4
[  807.484797][   T11] viewsonic 0003:2133:0018.000A: probe with driver viewsonic failed with error -22
[  807.643479][   T11] usb 4-1: USB disconnect, device number 41
[  807.735060][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  807.744389][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'.
[  810.526698][ T9874] kvm: pic: single mode not supported
[  810.526771][ T9874] kvm: pic: level sensitive irq not supported
[  810.561446][ T9874] kvm: pic: level sensitive irq not supported
[  810.614389][ T9874] kvm: pic: level sensitive irq not supported
[  810.681249][ T9874] kvm: pic: level sensitive irq not supported
[  810.704466][ T9874] kvm: pic: level sensitive irq not supported
[  810.787260][ T9874] kvm: pic: level sensitive irq not supported
[  810.864568][ T9874] kvm: pic: level sensitive irq not supported
[  810.939359][ T9874] kvm: pic: level sensitive irq not supported
[  810.991955][ T9874] kvm: pic: level sensitive irq not supported
[  811.042588][ T9874] kvm: pic: level sensitive irq not supported
[  812.434023][ T9886] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  813.194546][   T45] usb 6-1: USB disconnect, device number 36
[  813.338767][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.349046][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  817.055009][   T11] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  817.183770][   T45] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  817.270720][   T11] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  817.280513][   T11] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  817.291301][   T11] usb 4-1: config 0 has no interface number 0
[  817.306397][   T11] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  817.323207][   T11] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  817.332702][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.373320][   T45] usb 6-1: Using ep0 maxpacket: 32
[  817.443358][   T45] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  817.453142][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.489991][   T11] usb 4-1: config 0 descriptor??
[  817.533394][   T45] usb 6-1: config 0 descriptor??
[  818.008637][   T45] usbhid 6-1:0.0: can't add hid device: -71
[  818.018497][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  818.095304][   T45] usb 6-1: USB disconnect, device number 37
[  818.196134][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1236'.
[  819.966232][   T11] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  820.196535][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.208034][   T11] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  820.217699][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.378936][   T11] usb 3-1: config 0 descriptor??
[  820.853727][   T11] wacom 0003:056A:003F.000B: unknown main item tag 0x0
[  820.943633][   T11] wacom 0003:056A:003F.000B: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0
[  821.015881][   T30] audit: type=1326 audit(1742366797.025:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.1239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16198d169 code=0x0
[  821.095400][   T11] usb 3-1: USB disconnect, device number 45
[  821.204529][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.215517][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.514533][   T11] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  821.738992][   T30] audit: type=1326 audit(1742366797.725:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8781b8d169 code=0x7ffc0000
[  821.853211][   T30] audit: type=1326 audit(1742366797.785:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f8781b8d169 code=0x7ffc0000
[  821.876443][   T30] audit: type=1326 audit(1742366797.785:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8781b8d169 code=0x7ffc0000
[  821.899668][   T30] audit: type=1326 audit(1742366797.785:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8781b8d169 code=0x7ffc0000
[  821.930799][   T11] usb 3-1: Using ep0 maxpacket: 32
[  822.014944][   T11] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.026371][   T11] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.069811][   T11] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  822.079667][   T11] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  822.088618][   T11] usb 3-1: Product: syz
[  822.093255][   T11] usb 3-1: Manufacturer: syz
[  822.133303][ T5840] usb 4-1: USB disconnect, device number 42
[  822.167426][   T11] hub 3-1:4.0: USB hub found
[  822.870528][   T11] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  822.996631][   T11] usb 3-1: USB disconnect, device number 46
[  823.014060][ T5840] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  823.243346][ T5840] usb 4-1: Using ep0 maxpacket: 32
[  823.276449][ T5840] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  823.286174][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.399427][ T5840] usb 4-1: config 0 descriptor??
[  823.888259][ T5840] usbhid 4-1:0.0: can't add hid device: -71
[  823.895376][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  823.946832][ T5840] usb 4-1: USB disconnect, device number 43
[  824.083646][ T9984] syz.7.1250 (9984) used greatest stack depth: 5128 bytes left
[  824.334643][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  826.320592][T10003] netlink: 'syz.2.1258': attribute type 10 has an invalid length.
[  826.329951][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1258'.
[  826.339584][T10003] batadv0: entered promiscuous mode
[  826.345321][T10003] batadv0: entered allmulticast mode
[  826.358263][T10003] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  826.594693][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  826.602572][T10005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  826.657505][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  826.666114][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.243554][   T26] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  829.453835][   T26] usb 4-1: Using ep0 maxpacket: 32
[  829.513473][   T26] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  829.522807][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.672591][   T26] usb 4-1: config 0 descriptor??
[  829.749832][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'.
[  830.164800][   T26] usbhid 4-1:0.0: can't add hid device: -71
[  830.171685][   T26] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  830.323695][   T26] usb 4-1: USB disconnect, device number 44
[  833.752576][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'.
[  834.806111][   T26] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  835.003250][   T26] usb 4-1: Using ep0 maxpacket: 32
[  835.071277][   T26] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  835.081486][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.130147][   T26] usb 4-1: config 0 descriptor??
[  835.612151][   T26] usbhid 4-1:0.0: can't add hid device: -71
[  835.619501][   T26] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  835.712300][   T26] usb 4-1: USB disconnect, device number 45
[  836.044937][T10078] netlink: 'syz.1.1285': attribute type 11 has an invalid length.
[  836.053343][T10078] netlink: 'syz.1.1285': attribute type 5 has an invalid length.
[  838.096463][ T5840] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  838.144307][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'.
[  838.295458][ T5840] usb 4-1: Using ep0 maxpacket: 8
[  838.318492][ T5840] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  838.330692][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  838.341304][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  838.351779][ T5840] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  838.365266][ T5840] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  838.375148][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.653680][ T5840] usb 4-1: GET_CAPABILITIES returned 2f
[  838.659653][ T5840] usbtmc 4-1:16.0: can't read capabilities
[  838.862089][ T5840] usb 4-1: USB disconnect, device number 46
[  840.765113][ T5840] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  840.914221][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'.
[  841.020291][ T5840] usb 4-1: Using ep0 maxpacket: 32
[  841.042093][ T5840] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  841.059439][ T5840] usb 4-1: config 0 has no interface number 0
[  841.069255][ T5840] usb 4-1: config 0 interface 184 has no altsetting 0
[  841.170946][ T5840] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  841.180763][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.189374][ T5840] usb 4-1: Product: syz
[  841.193962][ T5840] usb 4-1: Manufacturer: syz
[  841.198812][ T5840] usb 4-1: SerialNumber: syz
[  841.296644][ T5840] usb 4-1: config 0 descriptor??
[  841.339339][ T5840] smsc75xx v1.0.0
[  841.588672][   T11] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  841.779972][   T11] usb 3-1: Using ep0 maxpacket: 32
[  841.801906][   T11] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  841.811643][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.886510][   T11] usb 3-1: config 0 descriptor??
[  842.004312][ T5840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  842.015772][ T5840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  842.375763][   T11] usbhid 3-1:0.0: can't add hid device: -71
[  842.395426][   T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  842.447612][ T5840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  842.459014][ T5840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  842.470053][ T5840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  842.480816][ T5840] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  842.537755][   T11] usb 3-1: USB disconnect, device number 47
[  842.745809][ T5840] usb 4-1: USB disconnect, device number 47
[  843.391834][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1304'.
[  843.998253][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  844.005639][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  845.073426][   T30] audit: type=1326 audit(1742366821.075:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.5.1311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d5bf8d169 code=0x0
[  845.420620][T10145] syz.5.1311 (10145): /proc/10143/oom_adj is deprecated, please use /proc/10143/oom_score_adj instead.
[  848.336244][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'.
[  851.693403][ T5840] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  851.745126][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'.
[  852.016880][ T5840] usb 3-1: Using ep0 maxpacket: 8
[  852.087040][ T5840] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  852.097159][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.105686][ T5840] usb 3-1: Product: syz
[  852.118541][ T5840] usb 3-1: Manufacturer: syz
[  852.126367][ T5840] usb 3-1: SerialNumber: syz
[  852.246313][ T5840] usb 3-1: config 0 descriptor??
[  852.333862][ T5840] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  852.342186][ T5840] usb 3-1: setting power ON
[  852.347361][ T5840] dvb-usb: bulk message failed: -22 (2/0)
[  852.453433][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  852.561799][ T5840] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  852.572137][ T5840] usb 3-1: media controller created
[  852.687791][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  852.969048][ T5840] usb 3-1: selecting invalid altsetting 6
[  852.976486][ T5840] usb 3-1: digital interface selection failed (-22)
[  852.983847][ T5840] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  853.049317][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[  853.113476][ T5840] usb 3-1: setting power OFF
[  853.118520][ T5840] dvb-usb: bulk message failed: -22 (2/0)
[  853.124943][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  853.147455][ T5840] (NULL device *): no alternate interface
[  854.013150][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  854.236079][ T5840] usb 3-1: USB disconnect, device number 48
[  856.241347][T10262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  858.833918][T10268] Bluetooth: hci3: command 0x0406 tx timeout
[  859.597937][T10296] dccp_xmit_packet: Payload too large (65475) for featneg.
[  872.406907][T10436] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  872.647797][ T5785] Bluetooth: hci2: adv larger than maximum supported
[  875.266557][T10473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer.
[  876.061973][ T5785] Bluetooth: hci2: adv larger than maximum supported
[  876.394702][T10478] sctp: failed to load transform for md5: -2
[  879.222607][ T5785] Bluetooth: hci3: adv larger than maximum supported
[  881.503277][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'.
[  883.606230][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.617243][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.797913][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.808179][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.903843][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.914235][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.726940][T10586] vlan4: entered allmulticast mode
[  885.735925][T10586] bond0: entered allmulticast mode
[  885.741338][T10586] bond_slave_0: entered allmulticast mode
[  885.747522][T10586] bond_slave_1: entered allmulticast mode
[  885.875113][T10586] bond0: left allmulticast mode
[  885.880414][T10586] bond_slave_0: left allmulticast mode
[  885.887853][T10586] bond_slave_1: left allmulticast mode
[  886.014576][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'.
[  890.027582][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  890.410738][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1480'.
[  897.244683][ T5840] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  897.484812][ T5840] usb 4-1: Using ep0 maxpacket: 16
[  897.516144][ T5840] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  897.524922][ T5840] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  897.532450][ T5840] usb 4-1: config 0 has no interface number 0
[  897.632253][ T5840] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  897.645264][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.653895][ T5840] usb 4-1: Product: syz
[  897.658344][ T5840] usb 4-1: Manufacturer: syz
[  897.663402][ T5840] usb 4-1: SerialNumber: syz
[  897.769509][ T5840] usb 4-1: config 0 descriptor??
[  897.812597][ T5840] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  897.819577][ T5840] usb 4-1: No valid video chain found.
[  898.018979][ T5840] usb 4-1: USB disconnect, device number 48
[  905.417265][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  905.424570][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  906.363191][ T5840] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  906.573191][ T5840] usb 4-1: Using ep0 maxpacket: 8
[  906.685883][ T5840] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  906.704376][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.712779][ T5840] usb 4-1: Product: syz
[  906.720326][ T5840] usb 4-1: Manufacturer: syz
[  906.725474][ T5840] usb 4-1: SerialNumber: syz
[  906.785675][ T5840] usb 4-1: config 0 descriptor??
[  907.071460][ T5840] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  908.975136][ T5840] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  909.005350][ T5840] usb 4-1: USB disconnect, device number 49
[  912.705090][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  912.715194][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.664965][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1584'.
[  916.743671][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  916.752709][ T5785] Bluetooth: hci3: Injecting HCI hardware error event
[  916.763439][ T5785] Bluetooth: hci3: hardware error 0x00
[  917.074361][ T5840] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  917.263138][ T5840] usb 3-1: Using ep0 maxpacket: 8
[  917.304296][T10902] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  917.311152][T10902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  917.320436][T10902] vhci_hcd vhci_hcd.0: Device attached
[  917.433484][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  917.451619][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.463075][ T5840] usb 3-1: Product: syz
[  917.467564][ T5840] usb 3-1: Manufacturer: syz
[  917.472420][ T5840] usb 3-1: SerialNumber: syz
[  917.540901][ T5840] usb 3-1: config 0 descriptor??
[  917.643551][ T8313] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  917.797766][ T5840] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  918.546950][T10912] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  918.823927][ T5785] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  919.538117][ T5840] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  919.585386][ T5840] usb 3-1: USB disconnect, device number 49
[  920.781875][T10903] vhci_hcd: connection reset by peer
[  920.792692][ T5025] vhci_hcd: stop threads
[  920.797510][ T5025] vhci_hcd: release socket
[  920.802162][ T5025] vhci_hcd: disconnect device
[  922.775360][ T8313] vhci_hcd: vhci_device speed not set
[  927.964372][   T26] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  928.204096][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.216006][   T26] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  928.225633][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.354285][   T26] usb 3-1: config 0 descriptor??
[  928.445913][ T8313] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  928.666112][ T8313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.678085][ T8313] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  928.687768][ T8313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.814388][   T26] wacom 0003:056A:003F.000C: unknown main item tag 0x0
[  928.863658][ T8313] usb 6-1: config 0 descriptor??
[  928.926283][   T26] wacom 0003:056A:003F.000C: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0
[  928.985148][   T30] audit: type=1326 audit(1742366904.995:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.2.1620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16198d169 code=0x0
[  929.057360][ T5840] usb 3-1: USB disconnect, device number 50
[  929.348880][ T8313] wacom 0003:056A:003F.000D: unknown main item tag 0x0
[  929.435247][ T8313] wacom 0003:056A:003F.000D: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.5-1/input0
[  929.565566][   T30] audit: type=1326 audit(1742366905.555:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.5.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5bf8d169 code=0x0
[  929.593254][ T8313] usb 6-1: USB disconnect, device number 38
[  930.073242][ T8313] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  930.276530][ T8313] usb 6-1: Using ep0 maxpacket: 32
[  930.313485][ T8313] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.325955][ T8313] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  930.501338][ T8313] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  930.511129][ T8313] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  930.520174][ T8313] usb 6-1: Product: syz
[  930.524764][ T8313] usb 6-1: Manufacturer: syz
[  930.688042][ T8313] hub 6-1:4.0: USB hub found
[  931.494364][ T8313] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  931.650504][ T8313] usb 6-1: USB disconnect, device number 39
[  932.271818][ T8313] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  932.527072][ T8313] usb 6-1: Using ep0 maxpacket: 8
[  932.594250][ T8313] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  932.613570][ T8313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.621782][ T8313] usb 6-1: Product: syz
[  932.626633][ T8313] usb 6-1: Manufacturer: syz
[  932.631493][ T8313] usb 6-1: SerialNumber: syz
[  932.695672][ T8313] usb 6-1: config 0 descriptor??
[  932.998584][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.010668][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.074299][ T8313] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  934.973670][ T8313] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  935.045363][ T8313] usb 6-1: USB disconnect, device number 40
[  936.564623][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.574942][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.454145][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  939.467039][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.664462][ T8313] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  940.883434][ T8313] usb 3-1: Using ep0 maxpacket: 16
[  940.948839][ T8313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.959679][ T8313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  941.030702][ T8313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  941.040438][ T8313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.049241][ T8313] usb 3-1: Product: syz
[  941.053777][ T8313] usb 3-1: Manufacturer: syz
[  941.058664][ T8313] usb 3-1: SerialNumber: syz
[  941.384038][ T8313] usb 3-1: 0:2 : does not exist
[  941.460317][ T8313] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  941.619831][ T8313] usb 3-1: USB disconnect, device number 51
[  941.969980][ T9513] udevd[9513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  943.533297][ T8313] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  943.778893][ T8313] usb 3-1: Using ep0 maxpacket: 8
[  943.858110][ T8313] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  943.876354][ T8313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.887554][ T8313] usb 3-1: Product: syz
[  943.892004][ T8313] usb 3-1: Manufacturer: syz
[  943.896993][ T8313] usb 3-1: SerialNumber: syz
[  943.984674][ T8313] usb 3-1: config 0 descriptor??
[  944.284235][ T8313] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  946.196849][ T8313] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  946.347705][ T8313] usb 3-1: USB disconnect, device number 52
[  947.715057][T11146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  951.527793][T11183] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  955.179589][ T5840] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  955.373187][ T5840] usb 3-1: Using ep0 maxpacket: 16
[  955.416518][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  955.428733][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  955.634150][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  955.652414][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.663786][ T5840] usb 3-1: Product: syz
[  955.668241][ T5840] usb 3-1: Manufacturer: syz
[  955.673499][ T5840] usb 3-1: SerialNumber: syz
[  955.806571][ T5840] usb 3-1: config 0 descriptor??
[  955.871612][ T5840] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  955.887264][ T5840] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  956.482793][ T5840] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  956.510575][ T5840] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  957.151111][ T5840] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  957.209375][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  957.219675][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  957.253887][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  957.355278][   T26] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  957.679426][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.693660][   T26] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  957.703363][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.752183][   T26] usb 6-1: config 0 descriptor??
[  957.917641][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  957.969400][ T5840] usb 3-1: USB disconnect, device number 53
[  958.202216][   T26] wacom 0003:056A:003F.000E: unknown main item tag 0x0
[  958.266148][   T26] wacom 0003:056A:003F.000E: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.5-1/input0
[  958.412540][   T26] usb 6-1: USB disconnect, device number 41
[  958.420451][   T30] audit: type=1326 audit(1742366934.415:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.5.1711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5bf8d169 code=0x0
[  963.503447][ T5840] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  963.767148][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.778750][ T5840] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  963.788401][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.821858][ T5840] usb 4-1: config 0 descriptor??
[  964.356470][ T5840] wacom 0003:056A:003F.000F: unknown main item tag 0x0
[  964.483333][ T5840] wacom 0003:056A:003F.000F: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0
[  964.501991][   T30] audit: type=1326 audit(1742366940.485:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.3.1731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da478d169 code=0x0
[  964.598803][ T5840] usb 4-1: USB disconnect, device number 50
[  966.301507][T11332] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  966.851681][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  966.859241][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  967.295182][   T26] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  967.494120][   T26] usb 3-1: Using ep0 maxpacket: 8
[  967.560603][   T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  967.570588][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.579148][   T26] usb 3-1: Product: syz
[  967.584015][   T26] usb 3-1: Manufacturer: syz
[  967.588901][   T26] usb 3-1: SerialNumber: syz
[  967.679382][   T26] usb 3-1: config 0 descriptor??
[  967.920231][   T26] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  969.852498][   T26] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  969.904555][   T26] usb 3-1: USB disconnect, device number 54
[  970.015412][T11369] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  971.894636][   T26] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  972.124798][   T26] usb 6-1: Using ep0 maxpacket: 16
[  972.175231][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.186831][   T26] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  972.196660][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.281687][   T26] usb 6-1: config 0 descriptor??
[  972.895610][   T26] aquacomputer_d5next 0003:0C70:F003.0010: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.5-1/input0
[  973.041115][   T26] usb 6-1: USB disconnect, device number 42
[  973.788056][T11407] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  979.886189][   T26] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  980.104622][   T26] usb 4-1: Using ep0 maxpacket: 16
[  980.148470][   T26] usb 4-1: config 0 has no interfaces?
[  980.199722][   T26] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  980.209750][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.220053][   T26] usb 4-1: Product: syz
[  980.225203][   T26] usb 4-1: Manufacturer: syz
[  980.230138][   T26] usb 4-1: SerialNumber: syz
[  980.326636][   T26] usb 4-1: config 0 descriptor??
[  982.487574][T11511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  982.684736][   T26] usb 4-1: USB disconnect, device number 51
[  989.343764][T11601] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  989.352129][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1848'.
[  993.267486][T11643] netlink: 'syz.2.1862': attribute type 10 has an invalid length.
[  993.275839][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1862'.
[  995.223836][   T26] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  995.418690][   T26] usb 3-1: Using ep0 maxpacket: 8
[  995.479587][   T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  995.489555][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.498164][   T26] usb 3-1: Product: syz
[  995.502590][   T26] usb 3-1: Manufacturer: syz
[  995.507661][   T26] usb 3-1: SerialNumber: syz
[  995.679888][   T26] usb 3-1: config 0 descriptor??
[  995.918789][   T26] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  996.484196][ T5840] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  996.745241][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  996.757067][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  996.768030][ T5840] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  996.777631][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.121599][ T5840] usb 4-1: config 0 descriptor??
[  997.465791][   T26] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  997.485984][   T26] usb 3-1: USB disconnect, device number 55
[  997.685259][ T5840] usbhid 4-1:0.0: can't add hid device: -71
[  997.692014][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  997.811226][ T5840] usb 4-1: USB disconnect, device number 52
[  999.706636][T11707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  999.823199][ T5840] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1000.034492][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1000.046228][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1000.056532][ T5840] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1000.066116][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.158337][ T5840] usb 6-1: config 0 descriptor??
[ 1000.662641][ T5840] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1000.671259][ T5840] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1000.679176][ T5840] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1000.687560][ T5840] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1000.709694][ T5840] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1000.747310][ T5840] cm6533_jd 0003:0D8C:0022.0011: No inputs registered, leaving
[ 1000.776133][ T5840] cm6533_jd 0003:0D8C:0022.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[ 1000.991746][ T5840] usb 6-1: USB disconnect, device number 43
[ 1004.010727][T11750] Attempt to restore checkpoint with obsolete wellknown handles
[ 1004.073595][   T26] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[ 1004.317234][   T26] usb 3-1: config 0 has an invalid interface number: 207 but max is 0
[ 1004.327057][   T26] usb 3-1: config 0 has no interface number 0
[ 1004.404395][   T26] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[ 1004.414630][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.423276][   T26] usb 3-1: Product: syz
[ 1004.428655][   T26] usb 3-1: Manufacturer: syz
[ 1004.433887][   T26] usb 3-1: SerialNumber: syz
[ 1004.565168][   T26] usb 3-1: config 0 descriptor??
[ 1004.578465][   T26] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1
[ 1004.876245][   T26] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22
[ 1004.887684][T11756] tipc: Started in network mode
[ 1004.903415][T11756] tipc: Node identity 5, cluster identity 4711
[ 1004.909924][T11756] tipc: Node number set to 5
[ 1005.492332][   T26] usb 3-1: USB disconnect, device number 56
[ 1010.755302][   T26] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1010.983289][   T26] usb 4-1: Using ep0 maxpacket: 32
[ 1011.020012][   T26] usb 4-1: config 0 has an invalid interface number: 202 but max is 1
[ 1011.029010][   T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.041419][   T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1011.051410][   T26] usb 4-1: config 0 has no interface number 0
[ 1011.057915][   T26] usb 4-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[ 1011.069612][   T26] usb 4-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[ 1011.081175][   T26] usb 4-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[ 1011.095095][   T26] usb 4-1: config 0 interface 202 has no altsetting 0
[ 1011.391152][   T26] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[ 1011.401129][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.409712][   T26] usb 4-1: Product: syz
[ 1011.414302][   T26] usb 4-1: Manufacturer: syz
[ 1011.419167][   T26] usb 4-1: SerialNumber: syz
[ 1011.530716][   T26] usb 4-1: config 0 descriptor??
[ 1011.605702][   T26] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1011.797476][   T35] usb 4-1: Failed to submit usb control message: -71
[ 1011.805221][   T35] usb 4-1: unable to send the bmi data to the device: -71
[ 1011.810949][   T26] usb 4-1: USB disconnect, device number 53
[ 1011.812526][   T35] usb 4-1: unable to get target info from device
[ 1011.825565][   T35] usb 4-1: could not get target info (-71)
[ 1011.831723][   T35] usb 4-1: could not probe fw (-71)
[ 1012.187785][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[ 1012.989316][ T5863] kworker/1:5 (5863) used greatest stack depth: 4600 bytes left
[ 1013.628068][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.638297][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1015.883803][   T26] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[ 1016.093199][   T26] usb 6-1: config 0 has an invalid interface number: 207 but max is 0
[ 1016.101893][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1016.112733][   T26] usb 6-1: config 0 has no interface number 0
[ 1016.213347][   T26] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[ 1016.223316][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.231677][   T26] usb 6-1: Product: syz
[ 1016.236404][   T26] usb 6-1: Manufacturer: syz
[ 1016.241337][   T26] usb 6-1: SerialNumber: syz
[ 1016.360519][   T26] usb 6-1: config 0 descriptor??
[ 1016.526462][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'.
[ 1016.656941][   T26] qmi_wwan 6-1:0.207: probe with driver qmi_wwan failed with error -22
[ 1016.749475][   T26] usb 6-1: USB disconnect, device number 44
[ 1017.133680][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'.
[ 1018.403191][   T26] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1018.643262][   T26] usb 3-1: Using ep0 maxpacket: 8
[ 1018.705038][   T26] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[ 1018.715622][   T26] usb 3-1: config 0 has no interface number 0
[ 1018.722077][   T26] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1018.734058][   T26] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1018.746725][   T26] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1018.758316][   T26] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1019.006015][   T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1019.015785][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.026253][   T26] usb 3-1: Product: syz
[ 1019.031346][   T26] usb 3-1: Manufacturer: syz
[ 1019.036441][   T26] usb 3-1: SerialNumber: syz
[ 1019.129701][   T26] usb 3-1: config 0 descriptor??
[ 1019.400533][   T26] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1019.460083][   T26] usb 3-1: USB disconnect, device number 57
[ 1021.174242][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'.
[ 1023.253106][ T5840] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[ 1023.476611][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1023.488314][ T5840] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1023.498047][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.603788][ T5840] usb 4-1: config 0 descriptor??
[ 1023.612059][T11935] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1023.659079][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.766513][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1023.878835][ T5840] usbhid 4-1:0.0: can't add hid device: -71
[ 1023.885768][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1023.932429][ T5840] usb 4-1: USB disconnect, device number 54
[ 1025.970433][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'.
[ 1028.312097][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1028.320058][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1029.314237][T12005] netlink: 'syz.2.1984': attribute type 10 has an invalid length.
[ 1029.322354][T12005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1984'.
[ 1029.644251][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'.
[ 1033.578156][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'.
[ 1038.199527][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1040.043527][T12123] syz.1.2021 (12123) used greatest stack depth: 4504 bytes left
[ 1042.286034][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2032'.
[ 1045.970095][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[ 1046.666066][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'.
[ 1046.733613][T12215] vivid-007: =================  START STATUS  =================
[ 1046.741676][T12215] vivid-007: Enable Output Cropping: true grabbed
[ 1046.749055][T12215] vivid-007: Enable Output Composing: true grabbed
[ 1046.756578][T12215] vivid-007: Enable Output Scaler: true grabbed
[ 1046.763397][T12215] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[ 1046.780694][T12215] vivid-007: Transmit Mode: HDMI grabbed
[ 1046.790027][T12215] vivid-007: Hotplug Present: 0x00000000
[ 1046.796257][T12215] vivid-007: RxSense Present: 0x00000000
[ 1046.802299][T12215] vivid-007: EDID Present: 0x00000000
[ 1046.808198][T12215] vivid-007: ==================  END STATUS  ==================
[ 1049.660224][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2065'.
[ 1050.594917][T12263] usb usb8: usbfs: process 12263 (syz.2.2069) did not claim interface 0 before use
[ 1051.074809][T12269] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1053.870830][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2082'.
[ 1054.919493][T12318] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1056.467191][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.477417][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.043335][   T26] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1057.210094][   T26] usb 6-1: device descriptor read/64, error -71
[ 1057.369899][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'.
[ 1057.493938][   T26] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1057.693444][   T26] usb 6-1: device descriptor read/64, error -71
[ 1057.818271][   T26] usb usb6-port1: attempt power cycle
[ 1058.254557][   T26] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1058.328842][   T26] usb 6-1: device descriptor read/8, error -71
[ 1058.593755][   T26] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1058.663737][   T26] usb 6-1: device descriptor read/8, error -71
[ 1058.778589][   T26] usb usb6-port1: unable to enumerate USB device
[ 1060.495845][   T26] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1060.733139][   T26] usb 6-1: Using ep0 maxpacket: 16
[ 1060.823426][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.835011][   T26] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[ 1060.844672][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.906487][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'.
[ 1061.058164][T12400] netlink: 'syz.7.2114': attribute type 29 has an invalid length.
[ 1061.060348][   T26] usb 6-1: config 0 descriptor??
[ 1061.571877][   T26] usbhid 6-1:0.0: can't add hid device: -71
[ 1061.579029][   T26] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1061.751648][   T26] usb 6-1: USB disconnect, device number 49
[ 1063.906983][T12431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2125'.
[ 1064.708034][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2128'.
[ 1070.039980][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'.
[ 1074.233156][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2156'.
[ 1079.256258][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'.
[ 1080.163303][   T26] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1080.363354][   T26] usb 4-1: Using ep0 maxpacket: 16
[ 1080.406169][   T26] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1080.415160][   T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.426159][   T26] usb 4-1: config 0 has no interface number 0
[ 1080.543383][   T26] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1080.553404][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.561797][   T26] usb 4-1: Product: syz
[ 1080.568592][   T26] usb 4-1: Manufacturer: syz
[ 1080.574274][   T26] usb 4-1: SerialNumber: syz
[ 1080.692464][   T26] usb 4-1: config 0 descriptor??
[ 1080.747491][   T26] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[ 1080.754484][   T26] usb 4-1: No valid video chain found.
[ 1080.992116][ T5840] usb 4-1: USB disconnect, device number 55
[ 1083.163073][ T8313] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1083.379495][ T8313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.390275][ T8313] usb 3-1: config 0 has no interfaces?
[ 1083.397467][ T8313] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1083.407125][ T8313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.483812][ T8313] usb 3-1: config 0 descriptor??
[ 1084.566525][ T8313] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1084.633445][   T26] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1084.713558][T12649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2194'.
[ 1084.774489][ T8313] usb 6-1: Using ep0 maxpacket: 8
[ 1084.826884][ T8313] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1084.836619][ T8313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.837514][   T26] usb 4-1: Using ep0 maxpacket: 16
[ 1084.845034][ T8313] usb 6-1: Product: syz
[ 1084.845147][ T8313] usb 6-1: Manufacturer: syz
[ 1084.845259][ T8313] usb 6-1: SerialNumber: syz
[ 1084.911286][ T8313] usb 6-1: config 0 descriptor??
[ 1084.990479][   T26] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1084.999396][   T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.010566][   T26] usb 4-1: config 0 has no interface number 0
[ 1085.065537][   T26] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1085.077169][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.086323][   T26] usb 4-1: Product: syz
[ 1085.090772][   T26] usb 4-1: Manufacturer: syz
[ 1085.096330][   T26] usb 4-1: SerialNumber: syz
[ 1085.145967][ T8313] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1085.211000][   T26] usb 4-1: config 0 descriptor??
[ 1085.259573][   T26] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[ 1085.266572][   T26] usb 4-1: No valid video chain found.
[ 1085.445962][   T26] usb 4-1: USB disconnect, device number 56
[ 1086.180808][ T5840] usb 3-1: USB disconnect, device number 58
[ 1087.069252][ T8313] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1087.165487][ T8313] usb 6-1: USB disconnect, device number 50
[ 1089.724018][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1089.731062][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1093.199642][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'.
[ 1093.758559][ T8313] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1093.993417][ T8313] usb 3-1: Using ep0 maxpacket: 8
[ 1094.074250][ T8313] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1094.097877][ T8313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1094.111501][ T8313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1094.121911][ T8313] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1094.135414][ T8313] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1094.144890][ T8313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.742052][ T8313] usb 3-1: GET_CAPABILITIES returned 2f
[ 1094.748486][ T8313] usbtmc 3-1:16.0: can't read capabilities
[ 1094.973855][ T8313] usb 3-1: USB disconnect, device number 59
[ 1096.038676][   T26] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1096.233529][   T26] usb 4-1: Using ep0 maxpacket: 8
[ 1096.265282][   T26] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1096.277031][   T26] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1096.289293][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1096.300818][   T26] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1096.376927][   T26] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 1096.386892][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.395673][   T26] usb 4-1: Product: syz
[ 1096.400097][   T26] usb 4-1: Manufacturer: syz
[ 1096.405155][   T26] usb 4-1: SerialNumber: syz
[ 1096.440415][   T26] usb 4-1: config 0 descriptor??
[ 1096.534760][   T26] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29
[ 1096.883904][   T26] imon:send_packet: packet tx failed (-71)
[ 1096.905405][   T26] imon 4-1:0.0: panel buttons/knobs setup failed
[ 1097.504242][   T26] rc_core: IR keymap rc-imon-pad not found
[ 1097.511637][   T26] Registered IR keymap rc-empty
[ 1097.519812][   T26] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1097.532085][   T26] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1097.714514][   T26] imon:send_packet: packet tx failed (-71)
[ 1097.755533][   T26] imon 4-1:0.0: remote input dev register failed
[ 1097.764850][   T26] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[ 1098.003479][   T26] imon 4-1:0.0: unable to initialize intf0, err 0
[ 1098.010468][   T26] imon:imon_probe: failed to initialize context!
[ 1098.017543][   T26] imon 4-1:0.0: unable to register, err -19
[ 1098.135743][   T26] usb 4-1: USB disconnect, device number 57
[ 1098.917260][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'.
[ 1099.474599][   T26] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1099.693606][   T26] usb 6-1: Using ep0 maxpacket: 8
[ 1099.766563][   T26] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1099.778763][   T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1099.789444][   T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1099.799882][   T26] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1099.815185][   T26] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1099.825529][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.047024][T12798] pim6reg1: entered promiscuous mode
[ 1100.052689][T12798] pim6reg1: entered allmulticast mode
[ 1100.403967][   T26] usb 6-1: GET_CAPABILITIES returned 0
[ 1100.409881][   T26] usbtmc 6-1:16.0: can't read capabilities
[ 1100.605973][ T8313] usb 6-1: USB disconnect, device number 51
[ 1102.078108][ T8313] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1102.303683][ T8313] usb 6-1: Using ep0 maxpacket: 8
[ 1102.368456][ T8313] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1102.388511][ T8313] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1102.403402][ T8313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1102.414857][ T8313] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1102.544578][   T26] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1102.613034][ T8313] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 1102.623079][ T8313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.631396][ T8313] usb 6-1: Product: syz
[ 1102.636238][ T8313] usb 6-1: Manufacturer: syz
[ 1102.641144][ T8313] usb 6-1: SerialNumber: syz
[ 1102.743745][ T8313] usb 6-1: config 0 descriptor??
[ 1102.743968][   T26] usb 3-1: Using ep0 maxpacket: 8
[ 1102.842664][ T8313] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31
[ 1102.904941][   T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1102.914692][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.923244][   T26] usb 3-1: Product: syz
[ 1102.927681][   T26] usb 3-1: Manufacturer: syz
[ 1102.932546][   T26] usb 3-1: SerialNumber: syz
[ 1103.061834][   T26] usb 3-1: config 0 descriptor??
[ 1103.336877][ T8313] imon:send_packet: packet tx failed (-71)
[ 1103.358166][   T26] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1103.447927][ T8313] imon 6-1:0.0: panel buttons/knobs setup failed
[ 1104.638644][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'.
[ 1104.976707][ T8313] rc_core: IR keymap rc-imon-pad not found
[ 1104.984868][ T8313] Registered IR keymap rc-empty
[ 1104.992334][ T8313] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1105.004261][ T8313] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1105.339825][   T26] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1105.460881][ T8313] imon:send_packet: packet tx failed (-71)
[ 1105.528051][ T8313] imon 6-1:0.0: remote input dev register failed
[ 1105.538301][ T8313] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[ 1105.556287][   T26] usb 3-1: USB disconnect, device number 60
[ 1105.611339][ T9471] udevd[9471]: setting owner of /dev/bus/usb/003/060 to uid=0, gid=0 failed: No such file or directory
[ 1105.806874][T12846] fuse: Invalid rootmode
[ 1105.844569][ T8313] imon 6-1:0.0: unable to initialize intf0, err 0
[ 1105.851314][ T8313] imon:imon_probe: failed to initialize context!
[ 1105.871989][ T8313] imon 6-1:0.0: unable to register, err -19
[ 1105.936085][ T8313] usb 6-1: USB disconnect, device number 52
[ 1106.867171][ T8313] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1107.099012][ T8313] usb 4-1: Using ep0 maxpacket: 8
[ 1107.132353][ T8313] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1107.144260][ T8313] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1107.154844][ T8313] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1107.165225][ T8313] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1107.178826][ T8313] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1107.196812][ T8313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.812596][ T8313] usb 4-1: GET_CAPABILITIES returned 0
[ 1107.819615][ T8313] usbtmc 4-1:16.0: can't read capabilities
[ 1108.051934][   T26] usb 4-1: USB disconnect, device number 58
[ 1109.294127][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1109.304804][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1109.384978][T12880] fuse: Invalid rootmode
[ 1109.949413][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2274'.
[ 1112.332212][   T26] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1112.565679][   T26] usb 4-1: Using ep0 maxpacket: 8
[ 1112.634904][   T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1112.646630][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1112.657209][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1112.668396][   T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1112.681961][   T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1112.691505][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.166198][   T26] usb 4-1: usb_control_msg returned -71
[ 1113.172357][   T26] usbtmc 4-1:16.0: can't read capabilities
[ 1113.221286][T12926] fuse: Invalid rootmode
[ 1113.349784][   T26] usb 4-1: USB disconnect, device number 59
[ 1114.294959][   T26] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1114.337571][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'.
[ 1114.475232][   T26] usb 6-1: Using ep0 maxpacket: 8
[ 1114.585949][   T26] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1114.595992][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.604655][   T26] usb 6-1: Product: syz
[ 1114.609189][   T26] usb 6-1: Manufacturer: syz
[ 1114.614223][   T26] usb 6-1: SerialNumber: syz
[ 1114.728065][   T26] usb 6-1: config 0 descriptor??
[ 1115.094163][   T26] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1116.502722][T12961] fuse: Bad value for 'rootmode'
[ 1116.670852][   T26] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1116.736731][   T26] usb 6-1: USB disconnect, device number 53
[ 1117.756080][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.769421][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1119.409636][T12991] fuse: Bad value for 'rootmode'
[ 1120.455237][   T26] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1120.643214][   T26] usb 4-1: Using ep0 maxpacket: 8
[ 1120.723609][   T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1120.733845][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.742248][   T26] usb 4-1: Product: syz
[ 1120.746994][   T26] usb 4-1: Manufacturer: syz
[ 1120.751885][   T26] usb 4-1: SerialNumber: syz
[ 1120.935932][   T26] usb 4-1: config 0 descriptor??
[ 1121.241976][   T26] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1122.352312][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1122.367220][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1122.916868][   T26] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1122.994733][   T26] usb 4-1: USB disconnect, device number 60
[ 1123.285585][T13022] fuse: Bad value for 'rootmode'
[ 1125.660246][T13050] fuse: Unknown parameter 'use00000000000000000000'
[ 1125.662637][T13043] pim6reg1: entered promiscuous mode
[ 1125.673012][T13043] pim6reg1: entered allmulticast mode
[ 1126.674935][   T26] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1126.834672][   T26] usb 4-1: Using ep0 maxpacket: 8
[ 1126.858188][   T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1126.870362][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1126.881027][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1126.891494][   T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1126.905280][   T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1126.914922][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.465912][   T26] usb 4-1: GET_CAPABILITIES returned 0
[ 1127.471837][   T26] usbtmc 4-1:16.0: can't read capabilities
[ 1127.678880][   T26] usb 4-1: USB disconnect, device number 61
[ 1128.351248][T13064] syzkaller0: entered allmulticast mode
[ 1130.203484][   T26] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1130.393920][   T26] usb 3-1: device descriptor read/64, error -71
[ 1130.743885][   T26] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1130.885649][   T26] usb 3-1: device descriptor read/64, error -71
[ 1130.998433][   T26] usb usb3-port1: attempt power cycle
[ 1131.427573][   T26] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1131.498908][   T26] usb 3-1: device descriptor read/8, error -71
[ 1131.755293][   T26] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1131.812461][   T26] usb 3-1: device descriptor read/8, error -71
[ 1131.924949][   T26] usb usb3-port1: unable to enumerate USB device
[ 1134.798869][T13118] kvm: pic: level sensitive irq not supported
[ 1134.799330][T13118] kvm: pic: single mode not supported
[ 1136.953725][ T8313] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1137.245023][ T8313] usb 3-1: Using ep0 maxpacket: 16
[ 1137.280273][ T8313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1137.301219][ T8313] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[ 1137.313868][ T8313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.434236][ T8313] usb 3-1: config 0 descriptor??
[ 1138.082695][T13151] pim6reg1: entered promiscuous mode
[ 1138.088819][T13151] pim6reg1: entered allmulticast mode
[ 1138.138185][ T8313] usbhid 3-1:0.0: can't add hid device: -71
[ 1138.151207][ T8313] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1138.205360][ T8313] usb 3-1: USB disconnect, device number 65
[ 1138.240719][ T9470] udevd[9470]: setting owner of /dev/bus/usb/003/065 to uid=0, gid=0 failed: No such file or directory
[ 1142.688938][ T8313] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1142.913512][ T8313] usb 4-1: Using ep0 maxpacket: 16
[ 1142.991060][ T8313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1143.002878][ T8313] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[ 1143.012281][ T8313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.049861][ T8313] usb 4-1: config 0 descriptor??
[ 1143.729259][ T8313] usbhid 4-1:0.0: can't add hid device: -71
[ 1143.736260][ T8313] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1143.844750][ T8313] usb 4-1: USB disconnect, device number 62
[ 1147.824275][   T26] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1148.033183][   T26] usb 4-1: Using ep0 maxpacket: 16
[ 1148.075796][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1148.089120][   T26] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[ 1148.098844][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1148.283601][   T26] usb 4-1: config 0 descriptor??
[ 1149.008633][   T26] usbhid 4-1:0.0: can't add hid device: -71
[ 1149.015742][   T26] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1149.074136][   T26] usb 4-1: USB disconnect, device number 63
[ 1150.523286][ T8313] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1150.738309][ T8313] usb 6-1: Using ep0 maxpacket: 16
[ 1150.767968][ T8313] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1150.780021][ T8313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1150.901170][ T8313] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1150.911466][ T8313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.928728][ T8313] usb 6-1: Product: syz
[ 1150.936595][ T8313] usb 6-1: Manufacturer: syz
[ 1150.941977][ T8313] usb 6-1: SerialNumber: syz
[ 1151.066665][ T8313] usb 6-1: config 0 descriptor??
[ 1151.103712][ T8313] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1151.113775][ T8313] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1151.186648][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1151.193690][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1151.807017][ T8313] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1151.826315][ T8313] em28xx 6-1:0.0: Config register raw data: 0x56
[ 1152.020243][ T8313] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1152.028594][ T8313] em28xx 6-1:0.0: No AC97 audio processor
[ 1153.634056][ T8313] usb 6-1: USB disconnect, device number 54
[ 1153.641645][ T8313] em28xx 6-1:0.0: Disconnecting em28xx
[ 1153.662198][ T8313] em28xx 6-1:0.0: Freeing device
[ 1154.834697][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1154.844820][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1155.403248][   T26] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1155.653901][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1155.665777][   T26] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[ 1155.675411][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.829917][   T26] usb 3-1: config 0 descriptor??
[ 1156.161728][   T30] audit: type=1326 audit(1742367132.125:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.2.2433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16198d169 code=0x0
[ 1156.210380][   T26] usbhid 3-1:0.0: can't add hid device: -71
[ 1156.217380][   T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1156.280533][   T26] usb 3-1: USB disconnect, device number 66
[ 1156.713655][   T26] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1156.897743][   T26] usb 3-1: Using ep0 maxpacket: 32
[ 1156.937192][   T26] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1156.946524][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.949120][   T26] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1156.968117][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.078818][   T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1157.088678][   T26] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1157.097872][   T26] usb 3-1: Product: syz
[ 1157.102314][   T26] usb 3-1: Manufacturer: syz
[ 1157.212223][   T26] hub 3-1:4.0: USB hub found
[ 1157.915620][T12802] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1158.145565][T12802] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1158.155562][T12802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1158.164278][T12802] usb 6-1: Product: syz
[ 1158.168927][T12802] usb 6-1: Manufacturer: syz
[ 1158.174177][T12802] usb 6-1: SerialNumber: syz
[ 1158.330142][T12802] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1158.738562][T13332] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1158.812022][   T26] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1158.858372][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.868490][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.991145][   T26] usb 3-1: USB disconnect, device number 67
[ 1159.078530][T12802] usb 6-1: USB disconnect, device number 55
[ 1159.784439][T13332] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1159.792396][T13332] ath9k_htc: Failed to initialize the device
[ 1159.823350][   T26] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1159.872064][T12802] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1160.013904][   T26] usb 3-1: Using ep0 maxpacket: 32
[ 1160.054798][   T26] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1160.125175][   T26] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1160.137278][   T26] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1160.146697][   T26] usb 3-1: Product: syz
[ 1160.151197][   T26] usb 3-1: Manufacturer: syz
[ 1160.156437][   T26] usb 3-1: SerialNumber: syz
[ 1160.224986][   T26] usb 3-1: config 0 descriptor??
[ 1160.234600][T12802] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1160.248512][T13338] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1160.478493][T12802] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1160.488304][T12802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.497126][T12802] usb 6-1: Product: syz
[ 1160.501567][T12802] usb 6-1: Manufacturer: syz
[ 1160.507244][T12802] usb 6-1: SerialNumber: syz
[ 1160.572551][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.582536][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.680764][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.690903][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.872381][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.883608][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1161.094779][T12802] usb 6-1: can't set config #1, error -71
[ 1161.125830][T13332] usb 3-1: USB disconnect, device number 68
[ 1161.163956][T12802] usb 6-1: USB disconnect, device number 56
[ 1161.233302][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1161.243756][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1161.644369][T13332] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1161.840456][T13332] usb 3-1: Using ep0 maxpacket: 32
[ 1161.856373][T13332] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1161.882305][T13332] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1161.892394][T13332] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1161.901297][T13332] usb 3-1: Product: syz
[ 1161.905902][T13332] usb 3-1: Manufacturer: syz
[ 1161.910772][T13332] usb 3-1: SerialNumber: syz
[ 1161.932102][T13332] usb 3-1: config 0 descriptor??
[ 1161.941054][T13338] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1161.984112][T12802] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1162.163967][T12802] usb 4-1: Using ep0 maxpacket: 16
[ 1162.207405][T12802] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1162.240331][T13332] usb 3-1: USB disconnect, device number 69
[ 1162.266012][T12802] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[ 1162.274972][T12802] usb 4-1: config 0 has no interface number 0
[ 1162.358849][T12802] usb 4-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3
[ 1162.369634][T12802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.379204][T12802] usb 4-1: Product: syz
[ 1162.386661][T12802] usb 4-1: Manufacturer: syz
[ 1162.391646][T12802] usb 4-1: SerialNumber: syz
[ 1162.444974][T12802] usb 4-1: config 0 descriptor??
[ 1162.709425][ T8313] usb 4-1: USB disconnect, device number 64
[ 1162.773122][T13332] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1162.983954][T13332] usb 6-1: Using ep0 maxpacket: 8
[ 1163.017131][T13332] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1163.027723][T13332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.086529][T13332] usb 6-1: config 0 descriptor??
[ 1163.343960][ T8313] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1163.519452][ T8313] usb 4-1: Using ep0 maxpacket: 16
[ 1163.524242][T12802] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1163.559765][ T8313] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1163.586198][ T8313] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[ 1163.595130][ T8313] usb 4-1: config 0 has no interface number 0
[ 1163.644075][ T8313] usb 4-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3
[ 1163.653781][ T8313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.662079][ T8313] usb 4-1: Product: syz
[ 1163.666756][ T8313] usb 4-1: Manufacturer: syz
[ 1163.671634][ T8313] usb 4-1: SerialNumber: syz
[ 1163.755394][T12802] usb 3-1: Using ep0 maxpacket: 8
[ 1163.784925][ T8313] usb 4-1: config 0 descriptor??
[ 1163.844758][T12802] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[ 1163.853474][T12802] usb 3-1: config 2 has no interface number 0
[ 1163.859889][T12802] usb 3-1: config 2 interface 31 has no altsetting 0
[ 1163.955498][T12802] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1163.965486][T12802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.974177][T12802] usb 3-1: Product: syz
[ 1163.978822][T12802] usb 3-1: Manufacturer: syz
[ 1163.984082][T12802] usb 3-1: SerialNumber: syz
[ 1164.456960][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.467237][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.761450][T12802] =====================================================
[ 1164.769704][T12802] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0
[ 1164.777675][T12802]  mii_nway_restart+0x119/0x1e0
[ 1164.783114][T12802]  ch9200_bind+0x238/0xeb0
[ 1164.788028][T12802]  usbnet_probe+0xdb0/0x3eb0
[ 1164.793592][T12802]  usb_probe_interface+0xd33/0x12e0
[ 1164.799192][T12802]  really_probe+0x4dc/0xd90
[ 1164.804193][T12802]  __driver_probe_device+0x2ab/0x5d0
[ 1164.809845][T12802]  driver_probe_device+0x72/0x890
[ 1164.816052][T12802]  __device_attach_driver+0x568/0x9e0
[ 1164.821800][T12802]  bus_for_each_drv+0x403/0x620
[ 1164.827374][T12802]  __device_attach+0x3c1/0x650
[ 1164.832488][T12802]  device_initial_probe+0x32/0x40
[ 1164.840953][T12802]  bus_probe_device+0x3dc/0x5c0
[ 1164.847092][T12802]  device_add+0x13aa/0x1ba0
[ 1164.852021][T12802]  usb_set_configuration+0x31c9/0x38d0
[ 1164.858027][T12802]  usb_generic_driver_probe+0x109/0x2a0
[ 1164.866036][T12802]  usb_probe_device+0x3a7/0x690
[ 1164.871617][T12802]  really_probe+0x4dc/0xd90
[ 1164.876729][T12802]  __driver_probe_device+0x2ab/0x5d0
[ 1164.882373][T12802]  driver_probe_device+0x72/0x890
[ 1164.889218][T12802]  __device_attach_driver+0x568/0x9e0
[ 1164.895217][T12802]  bus_for_each_drv+0x403/0x620
[ 1164.900466][T12802]  __device_attach+0x3c1/0x650
[ 1164.905760][T12802]  device_initial_probe+0x32/0x40
[ 1164.911193][T12802]  bus_probe_device+0x3dc/0x5c0
[ 1164.916724][T12802]  device_add+0x13aa/0x1ba0
[ 1164.921656][T12802]  usb_new_device+0x15f0/0x2470
[ 1164.927060][T12802]  hub_event+0x4ffb/0x72d0
[ 1164.931876][T12802]  process_scheduled_works+0xc1a/0x1e80
[ 1164.937970][T12802]  worker_thread+0xea7/0x14f0
[ 1164.946114][T12802]  kthread+0x6b9/0xef0
[ 1164.950429][T12802]  ret_from_fork+0x6d/0x90
[ 1164.956076][T12802]  ret_from_fork_asm+0x1a/0x30
[ 1164.961223][T12802] 
[ 1164.963964][T12802] Local variable buff created at:
[ 1164.969268][T12802]  ch9200_mdio_read+0x3c/0x100
[ 1164.975533][T12802]  mii_nway_restart+0x8a/0x1e0
[ 1164.980682][T12802] 
[ 1164.983436][T12802] CPU: 1 UID: 0 PID: 12802 Comm: kworker/1:3 Tainted: G        W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[ 1164.996434][T12802] Tainted: [W]=WARN
[ 1165.000456][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1165.011281][T12802] Workqueue: usb_hub_wq hub_event
[ 1165.016868][T12802] =====================================================
[ 1165.024314][T12802] Disabling lock debugging due to kernel taint
[ 1165.030768][T12802] Kernel panic - not syncing: kmsan.panic set ...
[ 1165.037389][T12802] CPU: 1 UID: 0 PID: 12802 Comm: kworker/1:3 Tainted: G    B   W          6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[ 1165.050020][T12802] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1165.055205][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1165.065480][T12802] Workqueue: usb_hub_wq hub_event
[ 1165.070833][T12802] Call Trace:
[ 1165.074266][T12802]  <TASK>
[ 1165.077351][T12802]  dump_stack_lvl+0x216/0x2d0
[ 1165.082286][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.088369][T12802]  dump_stack+0x1e/0x24
[ 1165.092724][T12802]  panic+0x4e2/0xcf0
[ 1165.096874][T12802]  ? kmsan_get_metadata+0x61/0x1c0
[ 1165.102294][T12802]  kmsan_report+0x2c7/0x2d0
[ 1165.107149][T12802]  ? __slab_free+0x3e5/0x960
[ 1165.111973][T12802]  ? __msan_warning+0x95/0x120
[ 1165.116956][T12802]  ? mii_nway_restart+0x119/0x1e0
[ 1165.122183][T12802]  ? ch9200_bind+0x238/0xeb0
[ 1165.126970][T12802]  ? usbnet_probe+0xdb0/0x3eb0
[ 1165.131914][T12802]  ? usb_probe_interface+0xd33/0x12e0
[ 1165.137492][T12802]  ? really_probe+0x4dc/0xd90
[ 1165.142397][T12802]  ? __driver_probe_device+0x2ab/0x5d0
[ 1165.148060][T12802]  ? driver_probe_device+0x72/0x890
[ 1165.153486][T12802]  ? __device_attach_driver+0x568/0x9e0
[ 1165.159253][T12802]  ? bus_for_each_drv+0x403/0x620
[ 1165.164507][T12802]  ? __device_attach+0x3c1/0x650
[ 1165.169650][T12802]  ? device_initial_probe+0x32/0x40
[ 1165.175127][T12802]  ? bus_probe_device+0x3dc/0x5c0
[ 1165.180384][T12802]  ? device_add+0x13aa/0x1ba0
[ 1165.185315][T12802]  ? usb_set_configuration+0x31c9/0x38d0
[ 1165.191215][T12802]  ? usb_generic_driver_probe+0x109/0x2a0
[ 1165.197192][T12802]  ? usb_probe_device+0x3a7/0x690
[ 1165.202412][T12802]  ? really_probe+0x4dc/0xd90
[ 1165.207273][T12802]  ? __driver_probe_device+0x2ab/0x5d0
[ 1165.212948][T12802]  ? driver_probe_device+0x72/0x890
[ 1165.218383][T12802]  ? __device_attach_driver+0x568/0x9e0
[ 1165.224150][T12802]  ? bus_for_each_drv+0x403/0x620
[ 1165.229403][T12802]  ? __device_attach+0x3c1/0x650
[ 1165.234529][T12802]  ? device_initial_probe+0x32/0x40
[ 1165.239918][T12802]  ? bus_probe_device+0x3dc/0x5c0
[ 1165.245168][T12802]  ? device_add+0x13aa/0x1ba0
[ 1165.250116][T12802]  ? usb_new_device+0x15f0/0x2470
[ 1165.255411][T12802]  ? hub_event+0x4ffb/0x72d0
[ 1165.260272][T12802]  ? process_scheduled_works+0xc1a/0x1e80
[ 1165.266261][T12802]  ? worker_thread+0xea7/0x14f0
[ 1165.271317][T12802]  ? kthread+0x6b9/0xef0
[ 1165.275751][T12802]  ? ret_from_fork+0x6d/0x90
[ 1165.280636][T12802]  ? ret_from_fork_asm+0x1a/0x30
[ 1165.285778][T12802]  ? control_read+0x25b/0x2d0
[ 1165.290673][T12802]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1165.296109][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.302176][T12802]  __msan_warning+0x95/0x120
[ 1165.306996][T12802]  mii_nway_restart+0x119/0x1e0
[ 1165.312063][T12802]  ch9200_bind+0x238/0xeb0
[ 1165.316685][T12802]  ? __pfx_ch9200_bind+0x10/0x10
[ 1165.321818][T12802]  usbnet_probe+0xdb0/0x3eb0
[ 1165.326595][T12802]  ? pm_runtime_enable+0x3bb/0x3f0
[ 1165.331951][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.338039][T12802]  ? __pfx_usbnet_probe+0x10/0x10
[ 1165.343273][T12802]  usb_probe_interface+0xd33/0x12e0
[ 1165.348784][T12802]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1165.354624][T12802]  really_probe+0x4dc/0xd90
[ 1165.359439][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.365536][T12802]  __driver_probe_device+0x2ab/0x5d0
[ 1165.371062][T12802]  driver_probe_device+0x72/0x890
[ 1165.376289][T12802]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1165.381726][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.387777][T12802]  __device_attach_driver+0x568/0x9e0
[ 1165.393452][T12802]  bus_for_each_drv+0x403/0x620
[ 1165.398525][T12802]  ? __pfx___device_attach_driver+0x10/0x10
[ 1165.404677][T12802]  __device_attach+0x3c1/0x650
[ 1165.409638][T12802]  device_initial_probe+0x32/0x40
[ 1165.414849][T12802]  bus_probe_device+0x3dc/0x5c0
[ 1165.419931][T12802]  device_add+0x13aa/0x1ba0
[ 1165.424697][T12802]  usb_set_configuration+0x31c9/0x38d0
[ 1165.430436][T12802]  ? usb_set_configuration+0x8f1/0x38d0
[ 1165.436282][T12802]  usb_generic_driver_probe+0x109/0x2a0
[ 1165.442061][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.448118][T12802]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 1165.454703][T12802]  usb_probe_device+0x3a7/0x690
[ 1165.459784][T12802]  ? __pfx_usb_probe_device+0x10/0x10
[ 1165.465455][T12802]  really_probe+0x4dc/0xd90
[ 1165.470213][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.476393][T12802]  __driver_probe_device+0x2ab/0x5d0
[ 1165.481948][T12802]  driver_probe_device+0x72/0x890
[ 1165.487758][T12802]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1165.493197][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.499254][T12802]  __device_attach_driver+0x568/0x9e0
[ 1165.504857][T12802]  bus_for_each_drv+0x403/0x620
[ 1165.509931][T12802]  ? __pfx___device_attach_driver+0x10/0x10
[ 1165.516045][T12802]  __device_attach+0x3c1/0x650
[ 1165.521002][T12802]  device_initial_probe+0x32/0x40
[ 1165.526228][T12802]  bus_probe_device+0x3dc/0x5c0
[ 1165.531316][T12802]  device_add+0x13aa/0x1ba0
[ 1165.536085][T12802]  usb_new_device+0x15f0/0x2470
[ 1165.541218][T12802]  hub_event+0x4ffb/0x72d0
[ 1165.545976][T12802]  ? __pfx_hub_event+0x10/0x10
[ 1165.550975][T12802]  process_scheduled_works+0xc1a/0x1e80
[ 1165.556821][T12802]  worker_thread+0xea7/0x14f0
[ 1165.561713][T12802]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1165.567807][T12802]  kthread+0x6b9/0xef0
[ 1165.572080][T12802]  ? __pfx_worker_thread+0x10/0x10
[ 1165.577409][T12802]  ? __pfx_kthread+0x10/0x10
[ 1165.582215][T12802]  ret_from_fork+0x6d/0x90
[ 1165.586838][T12802]  ? __pfx_kthread+0x10/0x10
[ 1165.591665][T12802]  ret_from_fork_asm+0x1a/0x30
[ 1165.596698][T12802]  </TASK>
[ 1165.600300][T12802] Kernel Offset: disabled
[ 1165.604840][T12802] Rebooting in 86400 seconds..