last executing test programs:

4m25.071816071s ago: executing program 1 (id=344):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0xc, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"])
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/87)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c0001"], 0x1618}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x541b)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

4m24.778060117s ago: executing program 1 (id=345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801b}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

4m24.394047756s ago: executing program 1 (id=348):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4c, 0x4}, {0x6, 0x0, 0x9}]})
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80003000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x35, 0x8, "abf2e696c942765461281a49b32221e786c1bf0ee0d9145ee2af3c3fb28db47cee78dd641f9b495b5ef1178284954e5d62"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8055)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xa2000)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000080))
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000000)=0x8, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='-\\\\^]&:{,\x00', &(0x7f0000000280)='/dev/rnullb0\x00', 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)

4m23.449894133s ago: executing program 1 (id=352):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"], 0xa)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x1, 0xffffffff9084adc4, 0x0, 0x0, 0xa0, 0x4, 0x0, 0x0, 0x9, 0xfffffffc}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff0600000000000000020000000000000003000000000000000200000000000000050000000800000006000000000000000a000000000000000700000000000000ff0000000000000009000000000000000000000000000000ffffff7f570000000300000000800000ff", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000040000000000000000000000000020003705000000200000ab00000009"], 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000200)=0x8)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
getsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r8, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4)
setsockopt$sock_int(r9, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4)

4m23.261074488s ago: executing program 1 (id=354):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
creat(&(0x7f0000000440)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
getdents64(r1, &(0x7f0000000200)=""/179, 0xb3) (async)
lseek(r1, 0xfffffffffffffffe, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32)
munlock(&(0x7f0000b3d000/0x1000)=nil, 0x1000)

4m22.730063595s ago: executing program 1 (id=357):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008008df08241cb0300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000800370000000000"], 0x30}}, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xb)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000000)='./bus\x00', 0xa4000161)
copy_file_range(r5, &(0x7f0000000080), r4, 0x0, 0xfffffffffffffff8, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000903000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x57789000)
r8 = socket(0x23, 0x80805, 0x2)
connect$llc(r8, &(0x7f0000000540)={0x1a, 0x114, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10)
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)
syz_open_dev$video(&(0x7f0000000140), 0x20e, 0x345040)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4m22.009127098s ago: executing program 32 (id=357):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008008df08241cb0300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000800370000000000"], 0x30}}, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xb)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000000)='./bus\x00', 0xa4000161)
copy_file_range(r5, &(0x7f0000000080), r4, 0x0, 0xfffffffffffffff8, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000903000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x57789000)
r8 = socket(0x23, 0x80805, 0x2)
connect$llc(r8, &(0x7f0000000540)={0x1a, 0x114, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10)
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)
syz_open_dev$video(&(0x7f0000000140), 0x20e, 0x345040)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.845978784s ago: executing program 4 (id=2110):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil)
shmat(r0, &(0x7f00005da000/0x1000)=nil, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r2, 0x4605, &(0x7f0000000040)={0x0, 0x20000000}) (async, rerun: 64)
r3 = gettid() (rerun: 64)
tkill(r3, 0xb)
move_pages(r3, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x6) (async)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) (async)
mlockall(0x7) (async)
mlockall(0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5) (async)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8010, r6, 0x2000)

3.584608173s ago: executing program 4 (id=2112):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) (async)
listen(0xffffffffffffffff, 0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}}], 0x18}}], 0x1, 0x8004)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, 0xffffffffffffffff, 0x5708e000) (async)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000140)={0x1, 0x5, 0xbfd}) (async)
madvise(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x64) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.481736825s ago: executing program 4 (id=2114):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000aa1000/0x2000)=nil, 0x2000, 0xb, 0x59032, r2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x48084)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r7, 0x4000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2, 0x5, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESHEX=r1, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09ff"], 0x40}, 0x20002880)
fcntl$addseals(r7, 0x409, 0x2)
r10 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
keyctl$setperm(0x5, r1, 0x12000800)
ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000040)={r7, 0x0, 0x0, 0x2000})
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x8001})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000020601080000000000000000000000004086bdd87862c52da5a0c18a6f3939ed8c00000000d07946835c4fd4a6e43127fcadff17ce19b74744645f90b09122898c155a058d9998c78db7000189794cc44c94b406107cb90efd7b3b62"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r12 = geteuid()
keyctl$get_persistent(0x16, r12, r1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)

3.053903498s ago: executing program 3 (id=2117):
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x2}) (async)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x2})
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, r0) (async)
getpriority(0x1, r0)
creat(&(0x7f0000001380)='./file0\x00', 0x29)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setns(0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @pic={0x3, 0x9, 0x9c, 0x9, 0x5, 0x8d, 0x7, 0xa, 0xf5, 0x3, 0xf7, 0x7, 0xdb, 0x4, 0xa1, 0x6}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
socket$can_raw(0x1d, 0x3, 0x1)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="408001", @ANYRES64=r6], 0x4) (async)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="408001", @ANYRES64=r6], 0x4)
syz_emit_vhci(&(0x7f00000013c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

2.854190114s ago: executing program 3 (id=2118):
syz_usb_connect(0x6, 0x8a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0xee, 0x71, 0xba, 0x10, 0x1058, 0x631, 0xf4cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x6, 0xf6, 0x10, 0x0, [{{0x9, 0x4, 0xad, 0x68, 0x0, 0xff, 0xff, 0xff, 0x4, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x16, "0f652d"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x1, 0x5, 0x9, "400bfc41"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8001, 0x1000, 0x9c, "19d1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x9, "c4"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x3}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0xab}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0xa, 0x5, 0x2, 0x6, 0x8, 0x9], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x6, 0xbe, 0x101, 0x0, 0x18}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xdd, "a6f7"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0xe}]}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x2c09}}]})
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000140)={0x20, 0x9, 0x2, "f981"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xb, 0x0, 0x0, 0xfff9, 0x3, 0x1}}, 0x50)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f00000001c0)={@my=0x0, 0x4})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.325609617s ago: executing program 0 (id=2123):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000c0)
sendfile(r3, r3, 0x0, 0x7ffff000)

1.884536223s ago: executing program 2 (id=2126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}})
bind$l2tp6(r0, 0x0, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f00000001c0)=""/32, 0x20})
r1 = socket$netlink(0x10, 0x3, 0xa)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r2, @ANYBLOB="f7a3"])
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x10, r3, 0x100000000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xffffffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = fsopen(&(0x7f0000000440)='omfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
r6 = creat(&(0x7f0000000380)='./file0\x00', 0x90)
ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000000c0)={0xc})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x8, 0xf0, 0x40, 0xfd, 0xfa, 0xd4, 0x0, 0x4, 0x17, 0x7}, {0x5000, 0x2, 0x0, 0x9, 0x8, 0xff, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xf000, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x3d57f2cd19a4b3a7, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000800000003e080000000000000200008000000000"])
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14)

1.67943831s ago: executing program 2 (id=2127):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
setreuid(0x0, 0xee00)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private2, @in=@private=0xa010101, 0x4e23, 0x69, 0x4e23, 0x8000, 0xa, 0x30, 0x20, 0x2, 0x0, r2}, {0x100000001, 0x63178cc2, 0x2, 0x6, 0x6167, 0x1, 0x9, 0x8}, {0xcf2, 0x10, 0x6, 0x3}, 0xffff, 0x6e6bb6, 0x2, 0x1, 0x1, 0x2}, {{@in=@private=0xa010101, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x34ff, 0x2, 0x1, 0x5, 0xd, 0x3, 0x2453}}, 0xe8)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ff030000ac"])
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r9, r8, 0x0, 0x7fffefff)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x5)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8)
recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40000002, 0x0)
fadvise64(r8, 0x9, 0x9, 0x2)
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="32ee2006"])
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0))
sendfile(r8, r8, 0x0, 0x7ffff000)

1.5775947s ago: executing program 2 (id=2128):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x200003, 0xf, 0xb4})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

1.495873232s ago: executing program 2 (id=2129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', <r2=>0x0, 0x8, 0x20, 0x1000, 0x4, {{0x14, 0x4, 0x2, 0x1, 0x50, 0x66, 0x0, 0xb, 0x2b, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x27, 0xcf, [@rand_addr=0x64010101, @remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @multicast1, @loopback, @local]}, @ssrr={0x89, 0x7, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xd, 0x3, [{0x0, 0x7, "40b2bfdc12"}]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="000228bd91aed1411e753d24daf3777000fddbdf250b0000006c00018014000200626f6e645f736c6176655f3100000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f746f5f62726964676500140002006c6f00000000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r3, @ANYBLOB="7400018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f626f6e640000001400020073797a6b616c6c6572310000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020070696d367265673000000000000000000800030003000000"], 0x114}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='erofs\x00', 0x11052, 0x0)

1.469625168s ago: executing program 0 (id=2130):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
sendmsg$AUDIT_USER(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x58, 0x3ed, 0x200, 0x70bd25, 0x25dfdbfc, "ec23c9ba2dd5960c335f541cec5513b237a94f6dcb4de1cefd35864336e629da5e086c60db65552ac83e71dd0e3c8e1b1ba9ddda487ab218e1b92e87713dbe9d91a963c928", ["", "", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x93)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x5c}, {0x0, 0x0, 0x100000000000, 0x1, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x80)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x440dc2)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000680)="580000004b80", 0x6}, {&(0x7f00000006c0)="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", 0x1000}], 0x2)

1.402112215s ago: executing program 2 (id=2131):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
fadvise64(r1, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
fadvise64(r1, 0x94, 0x6e, 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async)

1.383708466s ago: executing program 0 (id=2132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r3, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x4}, {0x48}, {0x4}, {0x4}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8b9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x88f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4040}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x94}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)
setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f00000000c0)=0xd211, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c90009"], 0x7)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x82}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x14}, 0x40010)
sendfile(r0, r0, 0x0, 0x7ffff000)

888.870779ms ago: executing program 2 (id=2133):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x65, 0xfe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200)=0x1ff, 0x4)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mq_timedreceive(r2, &(0x7f0000000240)=""/173, 0xad, 0x0, &(0x7f0000000000)={0x0, 0x989680})
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

390.13421ms ago: executing program 3 (id=2134):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e1c, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0x10, 0x7, 0x4}, 0x9c)
sendmsg$inet(r0, &(0x7f00000011c0)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000780)='*', 0x1}], 0x1}, 0x84) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async)
mmap(&(0x7f0000762000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x57789000)
syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, 0xffffffffffffffff, 0xfffff000)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b00000037c2c48bc58360aca57d548520b864e01555aa6e0327d0e1a6dd"], 0x0}, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

333.128497ms ago: executing program 0 (id=2135):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0)
fallocate(r0, 0x1, 0x0, 0x7c000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

331.940366ms ago: executing program 4 (id=2136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r3, 0x52fbb000)
ioctl$FIOCLEX(r0, 0x5451)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001180)={[0x6, 0x1, 0x49d6069d, 0x3f5, 0x2, 0x0, 0x5, 0x3, 0x3df, 0x1, 0x4, 0x4, 0xe, 0x1000, 0x0, 0x2, 0x4, 0x6, 0xffff, 0x1, 0xd, 0xb, 0x9, 0x3, 0x75d6, 0x3, 0x4, 0xffff, 0x10001, 0x0, 0x553, 0x3, 0x7, 0xda, 0x1, 0x0, 0xfffffffa, 0x0, 0xa, 0x2, 0x8, 0xffffffff, 0xffff2cd5, 0x3, 0xf, 0x8, 0x3, 0xbc1, 0x1, 0x0, 0x5620, 0x7, 0xa4b, 0xffff, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x4, 0x400, 0x6, 0x4a, 0x3, 0x401, 0x0, 0x80000000, 0x62, 0xfff, 0x6, 0x8, 0x800000, 0x5, 0x1, 0x3, 0xc, 0x900, 0x9, 0xfffff801, 0xd14, 0xffffffff, 0x7f, 0x9, 0x7, 0x6, 0x7, 0x5, 0x5, 0x1, 0xfab7, 0x4, 0x8, 0x8, 0x5ab6, 0x80000000, 0x0, 0x99, 0x5, 0x9, 0x1ff, 0x6, 0x80, 0x915f, 0x1, 0xdcde, 0x2, 0x450, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x6, 0x9, 0xfff00000, 0x0, 0x4, 0x4, 0x9, 0x7, 0x2dec, 0x2, 0x8073, 0x6, 0xa, 0x2, 0xfffffff9, 0x0, 0x7d3, 0x4, 0x1, 0x80000000, 0x4, 0xe, 0xe, 0x0, 0x6, 0x7fffffff, 0x9, 0x6, 0xfffffff3, 0x40, 0xee, 0xadb, 0x5, 0x2, 0xa00, 0xd13, 0x55de, 0x8, 0x2, 0x0, 0x4, 0x6bbe, 0xb18, 0x6, 0x800, 0x8, 0x8, 0xda3f, 0xaf, 0x4, 0x2, 0x100, 0x80, 0x7, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0xffff2826, 0x9, 0x7, 0x2, 0x487f4171, 0x3, 0x5, 0x800, 0x80000000, 0x7, 0x4, 0x871, 0x50, 0x0, 0xff, 0x0, 0x7, 0x5, 0x1, 0x10000, 0xfffffffe, 0x5, 0x2, 0xb0, 0xfffffff5, 0x319, 0x2392, 0xbfd, 0x7, 0x80, 0x13, 0x6, 0x448, 0xeb48, 0x6, 0x5, 0x6c, 0x100, 0x80, 0x4, 0x5, 0x0, 0xe3a1, 0xffff, 0x17f, 0x4, 0x2, 0x6, 0x32c, 0x1000, 0x5, 0x4, 0xfffffff0, 0x3, 0x6, 0x7, 0x8, 0x9, 0x10, 0x6, 0x9, 0x915e, 0x7, 0x7, 0x738d, 0x10, 0x7, 0x1, 0xf, 0x7446, 0xfffffff9, 0x1, 0x7, 0xfffffff8, 0x9, 0xff, 0x0, 0x3, 0xe5, 0x2e2, 0x26210000, 0x3, 0x9, 0x40, 0xe, 0x7fffffff, 0x1, 0x4, 0x1, 0x75ee915a, 0x0, 0x1, 0x6, 0xa8ba, 0x0, 0x2, 0x5, 0x6, 0x7fff, 0x7ff, 0x4, 0x565, 0x80000000, 0x81, 0x7, 0xc, 0x0, 0xffffffff, 0x10, 0x2, 0xe, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x2, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0xb58d, 0x4, 0xfffffff8, 0xa9, 0x4, 0x9, 0xffff0000, 0x8, 0x7, 0x9, 0xfffffffa, 0x1, 0x7, 0x1, 0x7fffffff, 0x5, 0x8, 0x7b, 0xf, 0xc, 0xb08f, 0x5, 0x7ff, 0x2, 0xcaab, 0x9, 0x5, 0x7ff, 0x9, 0x3, 0x6, 0xffffff01, 0xd12, 0x3, 0x8, 0x6, 0x400, 0x3, 0x7, 0xa935, 0x300000, 0xa3, 0xc, 0x5, 0x5, 0x7ff, 0x7, 0x10000, 0x2, 0x8, 0x10001, 0x3ff, 0x3, 0x3, 0x3, 0x66a, 0x3, 0xff, 0x1ff, 0x6, 0x6, 0x6, 0x2, 0x80, 0x0, 0x8, 0x88c, 0x56c, 0x7, 0x98, 0x5, 0x2, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x5a3c, 0x7fffffff, 0x7, 0x9c, 0x1ff, 0xa00000, 0xffff, 0xd, 0xc6ea, 0xfff, 0x7ff, 0xc594, 0x3, 0x18, 0xa, 0x726c, 0x8, 0x3, 0xd71, 0xc, 0x9, 0x8, 0x2, 0x5, 0x0, 0x10, 0x0, 0xb9, 0x4, 0x9, 0xfff, 0x12, 0x7fff, 0x9, 0x8, 0x7fff, 0x9, 0xb4b, 0x6, 0x1, 0xa312, 0x553, 0x1, 0x0, 0xfffffffc, 0x2, 0xf, 0xe, 0x1, 0x3, 0x48, 0xf2, 0xa28, 0x4, 0xb3c, 0x4, 0xfffffffe, 0xf726, 0x0, 0x4, 0x80000000, 0x1, 0x8, 0xf4, 0x9, 0x2, 0x3, 0x8, 0x4, 0xfffffffe, 0x7, 0x7, 0x48, 0xf, 0xbab, 0xfffffe00, 0x2, 0x7fffffff, 0xfffffffc, 0x10000, 0x4, 0x36c, 0x1, 0x100, 0x3, 0x101, 0x7, 0x0, 0x6, 0x2, 0x5, 0x1, 0x800000, 0x4, 0x5, 0x100, 0x1000, 0x9, 0xde5c, 0x200, 0x80000001, 0xff, 0x0, 0xd, 0x4, 0x0, 0x7cbe8276, 0x3d4, 0x186, 0x1, 0x4, 0x6, 0xfffffffa, 0x1, 0xa000, 0x8, 0x3ad3125e, 0xfffff491, 0x81, 0x2, 0xffffff01, 0x800, 0x3ff, 0x39ae, 0xdf3, 0xe1d2, 0xffffee22, 0x1, 0x1000, 0x1a2f91b4, 0x6, 0x8, 0xfb3, 0x8, 0x3, 0x8, 0xc, 0x1, 0x152, 0xfffffff9, 0x2a, 0x5, 0xfff, 0x7fffffff, 0x4, 0x3000, 0x9, 0x8, 0x7fff, 0x10, 0x3, 0x8, 0x10, 0x57, 0xf, 0x8, 0x2, 0xff, 0xe1, 0xa9, 0x8, 0x8, 0x8c, 0x69e8, 0x130a, 0x4, 0x9, 0x80, 0x2, 0x8, 0x9, 0xfff, 0x7fff, 0x10000, 0x7ff80, 0x8, 0x2, 0x4, 0x90000000, 0x1, 0x7, 0xfffffffd, 0xa12, 0x7, 0xea8, 0x5bf8, 0x2, 0x6ab, 0x3, 0xf, 0xffff, 0x1, 0xfffffffb, 0x80000001, 0x80000001, 0x5, 0x0, 0x78, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x4, 0x7, 0x6, 0x400, 0x1, 0xb72, 0x0, 0x4800, 0xdd7f, 0x7, 0x6, 0x9, 0xe, 0x95f, 0x1ff, 0xe5, 0x37ae, 0x0, 0xa92, 0x4, 0x5, 0x9, 0x1, 0x6, 0x2, 0x3ff, 0x3b, 0xb, 0x4, 0x1, 0x12e7, 0x2, 0x10001, 0x7, 0xc5, 0x6, 0x5, 0x1, 0x1, 0x7fffffff, 0x5, 0xa1, 0xffffffff, 0x1, 0x1, 0x743, 0x1, 0x7, 0xffffe9fb, 0xb, 0x7, 0x1, 0x0, 0x100, 0xfffffff7, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x4, 0x3, 0xb4, 0x80000001, 0x1, 0xbe8b, 0x0, 0x9, 0x3, 0x81, 0x3, 0xdf8, 0x4, 0x71, 0x3, 0x3, 0x9, 0x4edc, 0x100, 0x8, 0x0, 0x2, 0x10, 0x8, 0x7, 0x7f, 0xa58, 0x6, 0x81, 0xfffffffa, 0x3, 0xff, 0xfffff000, 0x1237, 0x71a66a2a, 0x6, 0x1, 0x1, 0xcf0c, 0x4, 0x81, 0xff, 0x1, 0x698fdd79, 0xfffffffc, 0x8, 0x6, 0x7, 0x7f9a, 0x0, 0x0, 0x3, 0x6f5, 0xa, 0x6, 0xfffffffd, 0x2, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0x6, 0x0, 0x200, 0x3cf5dd3d, 0x7, 0x1, 0xa, 0x200, 0x200, 0x92fe25b, 0xc, 0x1, 0x9, 0x81, 0x7, 0x7, 0x1000, 0xc651, 0xf, 0x3, 0x8, 0x6, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x5, 0xd02, 0x2, 0x7, 0x10001, 0x0, 0x9, 0x7, 0xfffffffb, 0x64e, 0x4403c5ae, 0xc, 0xfffffffc, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x1, 0xfffffff6, 0x516, 0x5, 0x2, 0x200, 0xc3, 0x2b1c, 0x6, 0x4, 0x0, 0x81, 0x5, 0x6fa, 0x6, 0x2, 0x80000000, 0x6e7, 0x7f, 0x7, 0x8, 0xfffffff9, 0x3, 0x7f, 0x10000, 0x3, 0x6, 0x37, 0x89, 0x2, 0x2, 0x89a, 0xb, 0x80000000, 0x4, 0x10, 0x6, 0x1, 0x0, 0x5, 0xf8d9, 0x5, 0x2, 0x2, 0x9, 0x2, 0xb8, 0x74e2, 0x2, 0x3ff, 0x1, 0x9, 0x2, 0x1, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x7, 0x7, 0xf, 0x7ff, 0xffffffc6, 0x9, 0xcc9, 0x7, 0x5, 0xb0, 0xe4, 0x5, 0x80000001, 0xc410, 0x8000, 0x7fffffff, 0x3, 0x6, 0x1c000000, 0x101, 0x79, 0xfffffffb, 0x3, 0x1, 0xff, 0x6, 0x81, 0xfffffffc, 0x6, 0x30000, 0x6, 0x7, 0x6, 0x8, 0xc0e1, 0x5, 0x3, 0x6f, 0x5, 0x5, 0x800, 0x1, 0x80000000, 0x8, 0x81, 0x2, 0x9, 0x0, 0x7a8, 0x8e, 0x4, 0x1356, 0x3, 0x80000000, 0x8, 0x7, 0x81, 0x8, 0x1, 0x0, 0x5, 0xa, 0x1d, 0xa22, 0x5, 0xffffffc5, 0xc, 0xa, 0x7, 0x81, 0x2d063505, 0x223, 0xd7, 0x80000001, 0x5, 0xff, 0x4800000, 0x80000000, 0x8001, 0x8, 0x10, 0x9, 0x200, 0x5, 0xfffffffa, 0xd093, 0x3, 0x1, 0x3, 0x5, 0x5, 0x5, 0x589c1fd7, 0xd0f, 0x4, 0x0, 0xb55d, 0x920, 0x7f, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x5, 0x1, 0xffff4bfc, 0x1, 0x10001, 0xfe05, 0x5, 0x79, 0x1000, 0x9, 0x10000, 0xf8b9, 0x4, 0x3832, 0x1, 0xd, 0x81, 0x8, 0x5, 0xbd, 0x4, 0x800, 0x5, 0x826, 0xffffed29, 0x7f, 0x60b8, 0x200, 0x7, 0x6, 0x9, 0x101, 0x0, 0xfffffff8, 0x8, 0x8, 0x401, 0x5, 0x4d800000, 0xa44, 0x3, 0x6, 0xc00, 0x5, 0x2, 0x0, 0x3, 0x200, 0x1fc000, 0x3, 0x3, 0x5, 0x2, 0x8, 0xd, 0x1, 0x80000000, 0xbd1a, 0x0, 0x1, 0xfc4, 0x3, 0xfb1c, 0x42, 0x0, 0x400, 0x7, 0x8d7, 0xd, 0xfffffff9, 0x1, 0xc27a, 0x2, 0x5, 0x5, 0x101, 0x7, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x8, 0x4, 0x8, 0x4, 0x7, 0x9, 0x1, 0x3, 0x3ff, 0x4b6, 0x9, 0x9, 0x3, 0x0, 0x5]})

260.744139ms ago: executing program 3 (id=2137):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x200003, 0xf, 0xb4})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

202.190242ms ago: executing program 0 (id=2138):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40)
setreuid(0x0, r2)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000100)=0x6, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

152.414543ms ago: executing program 4 (id=2139):
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00']}, 0x5b) (async)
creat(&(0x7f0000000080)='./file0\x00', 0xac) (async)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

111.613369ms ago: executing program 3 (id=2140):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x27ae, 0x401, 0x0, 0x3, 0x2125, 0x9, 0x7, 0x4, 0x221, 0x401, 0x4, 0xa, 0x2, 0x8000, 0x314f], 0x1, 0x108800})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xec5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6d}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x1, 0x1, 0x0, 0xe, 'syz0\x00', 0x1}, 0x0, [0x100000000, 0x8001, 0x8001, 0x9, 0x1, 0x3000, 0x3, 0x7, 0x8, 0xe7, 0x2, 0x10, 0x1, 0x4, 0x4, 0xffffffffffff1a1e, 0x555, 0x4, 0x8001, 0x0, 0x6, 0x4d12d1b5, 0x6, 0x8, 0x8, 0x8000000000000000, 0x1, 0x3, 0x4c, 0x4, 0x2a2b0c49, 0x6, 0x7f, 0xffffffffffffffff, 0xd, 0x9, 0x0, 0xd, 0xe, 0x7, 0xfffffffffffffbff, 0x2, 0x1ff, 0x81, 0x400, 0x8000, 0x8, 0x1, 0xb, 0xffffffffffffc9b4, 0x120000, 0x3, 0xfe, 0xa84, 0x6, 0x5, 0x5, 0xe6, 0x98, 0x5, 0x4, 0x401, 0x100000001, 0x80000001, 0xbec7, 0x0, 0x81, 0x10, 0x0, 0xe, 0x6, 0x40, 0x3ff, 0x8, 0x3, 0x7, 0x401, 0x3, 0xc20b, 0x4, 0x0, 0x1, 0x2b, 0x4, 0x750, 0x6, 0x0, 0x775, 0x9, 0xda, 0x80, 0x80000000, 0x8, 0xfffffffffffffc10, 0x5, 0x100000001, 0x7, 0x6, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7, 0x0, 0x5, 0xfffffffffffffffe, 0x2, 0x7, 0x4d3, 0xfffffffffffffff8, 0xffff, 0x81, 0x7, 0x4c, 0x0, 0x100000000, 0x2b, 0x7, 0xfffffffffffffffb, 0x2, 0x2e, 0x7, 0x80000001, 0xac4, 0x0, 0x6, 0x351, 0x1]})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000780))
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000007c0)={0x12, 0xd, 0xd, 0x15, 0x6, 0x9, 0x5, 0x9e})
r3 = socket$nl_route(0x10, 0x3, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000800)={0x1043, r3}, 0x0)
bind$bt_hci(r0, &(0x7f0000000840), 0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0)
write$uinput_user_dev(r0, &(0x7f00000008c0)={'syz1\x00', {0x9, 0x8, 0x1, 0x3}, 0x53, [0x400, 0x10, 0xffff8001, 0x3e, 0x7, 0x3, 0x9, 0xb, 0x6, 0x6, 0x81, 0x7, 0xfe, 0x2, 0x2, 0x1000000, 0x7ff, 0x0, 0x8, 0x6, 0x9, 0x401, 0xf962, 0x159a, 0x0, 0x8001, 0x0, 0x0, 0x8, 0x2, 0x25, 0x5, 0x7fffffff, 0x80000001, 0x5, 0x2, 0x7, 0x10000, 0xdee5, 0xfffffff8, 0x9, 0x5, 0x8, 0xcc0, 0xfffffffc, 0x934, 0x8, 0x3f40, 0x2000000, 0x7, 0x7, 0x0, 0xb, 0x1000, 0x800, 0x3, 0x79c286a4, 0x8, 0x1, 0xd6a, 0x7d925b27, 0xe325, 0x54, 0x10000], [0x7, 0xe, 0xda, 0x0, 0x2, 0x0, 0x7, 0x3, 0x5, 0x9, 0x0, 0x19e, 0xfffffffe, 0x3, 0x7, 0xaefcee2, 0x5, 0x6, 0x40, 0x7ff, 0x40, 0x1, 0xfff, 0x6, 0xa0, 0x3, 0x6, 0x3, 0x3ff, 0x101, 0x7, 0x8, 0xb1f0, 0xffffff00, 0xca, 0x7ff, 0x4, 0x1, 0x5, 0x8, 0xaf7b, 0x401, 0xfffffffd, 0x0, 0x0, 0x46, 0x40, 0x7ff, 0x6, 0x7ff, 0x0, 0x7ff, 0x0, 0x4, 0x2, 0x2, 0x1, 0xd98, 0x27c, 0x401, 0xfffffff7, 0x40, 0x7, 0x7], [0x3, 0x9, 0x9, 0xff, 0x2, 0x5, 0x0, 0xe3, 0x0, 0xd, 0x3, 0x6, 0x80000001, 0x9, 0x400, 0x174, 0x6, 0x3ff, 0x0, 0x80000000, 0x1ff, 0x4, 0x0, 0x10, 0x7, 0x7, 0x4, 0x2, 0x4, 0x10, 0x7, 0x5, 0x6, 0xc01, 0x2, 0x1, 0x4, 0x3, 0xfffffff9, 0x6c, 0x5, 0x7f, 0x1ff, 0x1bf, 0x5, 0x8000, 0x4, 0xd, 0x8, 0x10001, 0x2, 0xfffff86f, 0x3, 0x4, 0x3, 0x3, 0xc, 0xffffffff, 0xfff, 0x6, 0xfffff801, 0x0, 0x7, 0x1ff], [0xdd1d, 0x3, 0x5, 0x6, 0x81, 0x1, 0x7fff, 0x9, 0x1, 0x5, 0x7, 0x200, 0xb, 0x8, 0x4b72, 0x3c, 0x3, 0xdcc, 0x10, 0x8, 0x8001, 0x2e, 0x7, 0x3, 0x1, 0x10000, 0x7, 0x2, 0x1, 0x10000, 0x10001, 0x1, 0x1, 0x5, 0x6, 0x8, 0xd, 0x3, 0x6f57, 0x10001, 0x1, 0x800, 0xaab, 0x1, 0x48d, 0x2, 0x8, 0x9, 0x0, 0x4, 0x9, 0x9, 0x8, 0xc, 0x9, 0x3, 0x3, 0x6, 0x6, 0x6, 0x800, 0x7fff, 0xfffffff8, 0x200]}, 0x45c)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000d40)={[0x9, 0x1, 0x5df, 0xfff, 0xffffffff, 0x3, 0x4, 0x5, 0xd, 0x9, 0x4, 0x6b4, 0x6, 0x0, 0x2, 0x26f], 0x4, 0x1241c4})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000e00)={0x10002001})
linkat(r0, &(0x7f0000000e40)='./file0\x00', r0, &(0x7f0000000e80)='./file0\x00', 0x0)
write$rfkill(r0, &(0x7f0000000ec0)={0xa, 0x0, 0x1, 0x1}, 0x8)
r4 = socket(0x15, 0x1, 0x9)
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f80), 0x6080, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r5, 0xc0045406)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000fc0)={'veth0_to_batadv\x00', 0x9})
ioctl$USBDEVFS_RESET(r0, 0x5514)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001000))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2412003}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x58, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbc6, 0x5}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2cc6cd919c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
fcntl$getown(r5, 0x9)
syz_emit_vhci(&(0x7f00000011c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000001200)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
mount$overlay(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x1160c4, &(0x7f00000012c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}, {@xino_auto}, {@uuid_off}, {@workdir={'workdir', 0x3d, './file0'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00'}}, {@obj_role={'obj_role', 0x3d, '}-[^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-]{#'}}, {@subj_role={'subj_role', 0x3d, '#*'}}, {@fsmagic={'fsmagic', 0x3d, 0x3e4}}]})

30.234283ms ago: executing program 0 (id=2141):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)
fallocate(r0, 0x0, 0x10, 0x1ff)
creat(&(0x7f0000000040)='./file0\x00', 0xac) (async)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async)
fallocate(r0, 0x0, 0x10, 0x1ff) (async)

1.183445ms ago: executing program 4 (id=2142):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x629, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0xd, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x80000000, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0x2]})
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='virtiofs\x00', 0x4400, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x629, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0xd, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x80000000, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0x2]}) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='virtiofs\x00', 0x4400, 0x0) (async)

0s ago: executing program 3 (id=2143):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x84)
read$FUSE(r0, &(0x7f000001d980)={0x2020}, 0x1b9)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e21, @multicast1}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x30, {0x2, 0x4e23, @multicast1}, 'geneve0\x00'})
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0xaec1726e2ebfd999, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

kernel console output (not intermixed with test programs):

yz
[  306.697049][    T9] usb 1-1: SerialNumber: syz
[  306.797379][   T30] audit: type=1804 audit(1756639383.196:528): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1548" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  307.040487][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  307.049180][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  307.056250][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  307.063411][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  307.070395][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  307.279375][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  307.405049][   T30] audit: type=1804 audit(1756639383.806:529): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1550" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  307.504402][T11099] MPI: mpi too large (129928 bits)
[  307.510535][T11099] /dev/rnullb0: Can't lookup blockdev
[  307.688963][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  307.695893][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  307.702818][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  307.709598][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  307.717601][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  307.724641][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  307.732671][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  307.740249][   T24] pwc: Registered as video103.
[  307.746263][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[  307.763850][   T24] usb 3-1: USB disconnect, device number 74
[  307.965456][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  307.977409][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  307.987005][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  307.996751][    T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  308.237355][T11121] IPVS: set_ctl: invalid protocol: 25647 47.114.110.117:27756
[  308.247295][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1558'.
[  308.289952][T11124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1560'.
[  308.324750][   T30] audit: type=1804 audit(1756639384.727:530): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1561" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  308.491048][    T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  308.642415][    T9] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  308.650700][    T9] usb 3-1: config 2 has no interface number 0
[  308.656992][    T9] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  308.669244][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  308.678514][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.686649][    T9] usb 3-1: Product: syz
[  308.691003][    T9] usb 3-1: Manufacturer: syz
[  308.695626][    T9] usb 3-1: SerialNumber: syz
[  308.703357][T11118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  308.911519][T11118] /dev/rnullb0: Can't open blockdev
[  308.966104][    T9] usb 3-1: probing VID:PID(0424:012C)   
[  308.973124][    T9] usb 3-1: vub300 testing BULK IN EndPoint(0) 82
[  308.979526][    T9] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  308.987413][    T9] vub300 3-1:2.174: probe with driver vub300 failed with error -22
[  308.997532][    T9] usb 3-1: USB disconnect, device number 75
[  309.278468][T11146] /dev/rnullb0: Can't lookup blockdev
[  309.291269][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.307206][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.661253][   T30] audit: type=1804 audit(1756639386.067:531): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1576" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  309.719658][ T5929] usb 1-1: USB disconnect, device number 62
[  309.750437][    T9] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[  309.880451][    T9] usb 3-1: device descriptor read/64, error -71
[  310.070201][ T5929] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  310.120243][    T9] usb 3-1: new low-speed USB device number 77 using dummy_hcd
[  310.222372][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.232667][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  310.243103][ T5929] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  310.252240][    T9] usb 3-1: device descriptor read/64, error -71
[  310.258551][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  310.266883][ T5929] usb 1-1: SerialNumber: syz
[  310.380932][    T9] usb usb3-port1: attempt power cycle
[  310.483571][ T5929] usb 1-1: 0:2 : does not exist
[  310.507145][ T5929] usb 1-1: USB disconnect, device number 63
[  310.536129][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.730110][    T9] usb 3-1: new low-speed USB device number 78 using dummy_hcd
[  310.770775][    T9] usb 3-1: device descriptor read/8, error -71
[  310.882757][T11187] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  311.438716][T11210] /dev/rnullb0: Can't open blockdev
[  311.923330][    T9] usb 3-1: new low-speed USB device number 79 using dummy_hcd
[  311.969920][    T9] usb 3-1: device descriptor read/8, error -71
[  313.016515][T11216] binder: 11215:11216 unknown command 576
[  313.023956][T11216] binder: 11215:11216 ioctl c0306201 200000000480 returned -22
[  313.042879][    T9] usb usb3-port1: unable to enumerate USB device
[  313.628637][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'.
[  314.106734][T11243] bond0: (slave wlan1): Releasing backup interface
[  314.116846][ T9858] smc: removing ib device syz0
[  314.125165][  T981] wlan1 speed is unknown, defaulting to 1000
[  314.153243][T11244] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1598'.
[  314.168491][    T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  314.370953][    T9] usb 3-1: Using ep0 maxpacket: 32
[  314.382588][    T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  314.391851][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.413916][    T9] usb 3-1: config 0 has no interface number 0
[  314.428572][    T9] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  314.449831][    T9] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  314.472087][    T9] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  314.503800][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  314.513693][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.524627][    T9] usb 3-1: Product: syz
[  314.530978][    T9] usb 3-1: Manufacturer: syz
[  314.535827][    T9] usb 3-1: SerialNumber: syz
[  314.550019][    T9] usb 3-1: config 0 descriptor??
[  314.563339][    T9] smsc95xx v2.0.0
[  314.571867][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  314.590346][    T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22
[  314.776280][   T24] usb 3-1: USB disconnect, device number 80
[  314.793145][T11250] MTD: Couldn't look up '/dev/rnullb0': -15
[  314.837912][ T5929] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  314.998795][ T5929] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  315.014147][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.026548][ T5929] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  315.041450][ T5929] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  315.052223][ T5929] usb 1-1: Manufacturer: syz
[  315.068080][ T5929] usb 1-1: config 0 descriptor??
[  315.127685][ T5929] rc_core: IR keymap rc-hauppauge not found
[  315.133651][ T5929] Registered IR keymap rc-empty
[  315.141414][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  315.152674][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20
[  315.227685][   T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  315.281278][T11246] /dev/rnullb0: Can't open blockdev
[  315.292117][ T5929] usb 1-1: USB disconnect, device number 64
[  315.387602][   T24] usb 3-1: Using ep0 maxpacket: 16
[  315.394892][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.405891][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.415699][   T24] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  315.424777][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.434748][   T24] usb 3-1: config 0 descriptor??
[  315.632309][T11278] fuse: Bad value for 'group_id'
[  315.637305][T11278] fuse: Bad value for 'group_id'
[  315.850008][   T24] playstation 0003:054C:05C4.000D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  316.021026][   T30] audit: type=1804 audit(1756639392.431:532): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1609" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  316.063342][   T24] playstation 0003:054C:05C4.000D: Invalid reportID received, expected 18 got 47
[  316.081031][   T24] playstation 0003:054C:05C4.000D: Failed to retrieve DualShock4 pairing info: -22
[  316.097314][   T24] playstation 0003:054C:05C4.000D: Failed to get MAC address from DualShock4
[  316.108133][   T24] playstation 0003:054C:05C4.000D: Failed to create dualshock4.
[  316.129404][   T24] playstation 0003:054C:05C4.000D: probe with driver playstation failed with error -22
[  316.266085][   T24] usb 3-1: USB disconnect, device number 81
[  316.467050][    T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  316.576201][T11304] /dev/rnullb0: Can't open blockdev
[  316.607035][    T9] usb 1-1: device descriptor read/64, error -71
[  316.847041][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  316.977247][    T9] usb 1-1: device descriptor read/64, error -71
[  317.056765][   T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  317.086991][    T9] usb usb1-port1: attempt power cycle
[  317.109857][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'.
[  317.126554][T11330] netlink: 'syz.4.1623': attribute type 21 has an invalid length.
[  317.136024][T11330] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1623'.
[  317.163944][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  317.226630][   T24] usb 3-1: Using ep0 maxpacket: 32
[  317.233782][   T24] usb 3-1: no configurations
[  317.239948][   T24] usb 3-1: can't read configurations, error -22
[  317.377309][   T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  317.427285][    T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  317.447213][    T9] usb 1-1: device descriptor read/8, error -71
[  317.536570][   T24] usb 3-1: Using ep0 maxpacket: 32
[  317.543574][   T24] usb 3-1: no configurations
[  317.548295][   T24] usb 3-1: can't read configurations, error -22
[  317.554904][   T24] usb usb3-port1: attempt power cycle
[  317.706567][    T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  317.727093][    T9] usb 1-1: device descriptor read/8, error -71
[  317.837390][    T9] usb usb1-port1: unable to enumerate USB device
[  317.906382][   T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  317.923824][   T30] audit: type=1804 audit(1756639394.331:533): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1630" name="rnullb0" dev="tmpfs" ino=1368 res=1 errno=0
[  317.947715][   T24] usb 3-1: Using ep0 maxpacket: 32
[  317.956282][   T24] usb 3-1: no configurations
[  317.961547][   T24] usb 3-1: can't read configurations, error -22
[  317.977621][T11348] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  318.116300][   T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  318.126441][    T9] usb 4-1: USB disconnect, device number 28
[  318.146984][   T24] usb 3-1: Using ep0 maxpacket: 32
[  318.153913][   T24] usb 3-1: no configurations
[  318.166100][   T24] usb 3-1: can't read configurations, error -22
[  318.182008][   T24] usb usb3-port1: unable to enumerate USB device
[  318.362623][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.370020][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.377401][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.385125][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.392738][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.522572][T11362] /dev/rnullb0: Can't open blockdev
[  318.540887][T11355] chnl_net:caif_netlink_parms(): no params data found
[  318.594782][T11355] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.602091][T11355] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.609458][T11355] bridge_slave_0: entered allmulticast mode
[  318.616380][T11355] bridge_slave_0: entered promiscuous mode
[  318.623806][T11355] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.631102][T11355] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.638670][T11355] bridge_slave_1: entered allmulticast mode
[  318.645558][T11355] bridge_slave_1: entered promiscuous mode
[  318.670183][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.681337][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.707723][T11355] team0: Port device team_slave_0 added
[  318.715230][T11355] team0: Port device team_slave_1 added
[  318.742687][T11355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.750586][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.777128][T11355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.788959][T11355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.796116][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.822181][T11355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.855065][T11355] hsr_slave_0: entered promiscuous mode
[  318.861870][T11355] hsr_slave_1: entered promiscuous mode
[  318.868309][T11355] debugfs: 'hsr0' already exists in 'hsr'
[  318.874158][T11355] Cannot create hsr debugfs directory
[  318.944625][T11355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.011000][T11355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.061179][T11355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.121832][T11355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.254139][T11355] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  319.265151][T11369] /dev/rnullb0: Can't open blockdev
[  319.267535][T11355] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  319.284552][T11355] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  319.295889][T11355] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  319.323975][T11355] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.331182][T11355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.338663][T11355] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.345835][T11355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.401074][T11355] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.418852][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.428887][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.442459][T11355] 8021q: adding VLAN 0 to HW filter on device team0
[  319.454067][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.461368][ T9858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.487249][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.494551][ T9858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.663429][T11355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.703044][T11355] veth0_vlan: entered promiscuous mode
[  319.713532][T11355] veth1_vlan: entered promiscuous mode
[  319.747376][T11355] veth0_macvtap: entered promiscuous mode
[  319.764614][T11355] veth1_macvtap: entered promiscuous mode
[  319.784813][T11355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.800819][T11355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.833469][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.880108][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.900690][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.913073][T11393] /dev/rnullb0: Can't open blockdev
[  319.914552][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.954685][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.969395][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.992239][ T9856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.006876][ T9856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.335105][    T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  320.357709][   T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  320.475208][   T51] Bluetooth: hci4: command tx timeout
[  320.485114][    T9] usb 3-1: Using ep0 maxpacket: 8
[  320.492198][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  320.503850][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.516036][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.520061][T11402] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  320.526589][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  320.533274][T11402] /dev/rnullb0: Can't open blockdev
[  320.546381][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  320.561325][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.582721][    T9] usb 3-1: config 0 descriptor??
[  320.610225][   T24] usb 4-1: unable to read config index 0 descriptor/start: -71
[  320.642304][   T24] usb 4-1: can't read configurations, error -71
[  320.798814][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.811392][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.004867][   T10] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  321.026847][    T9] redragon 0003:0C45:760B.000E: Fixing Redragon ASURA report descriptor.
[  321.041114][    T9] hid_parser_main: 22 callbacks suppressed
[  321.041137][    T9] redragon 0003:0C45:760B.000E: unknown main item tag 0x6
[  321.055131][    T9] redragon 0003:0C45:760B.000E: item fetching failed at offset 7/133
[  321.064244][    T9] redragon 0003:0C45:760B.000E: probe with driver redragon failed with error -22
[  321.160701][   T10] usb 1-1: config 0 has an invalid interface number: 161 but max is 0
[  321.169843][   T10] usb 1-1: config 0 has no interface number 0
[  321.181653][   T10] usb 1-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31
[  321.191460][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.203060][   T10] usb 1-1: Product: syz
[  321.207847][   T10] usb 1-1: Manufacturer: syz
[  321.216299][   T10] usb 1-1: SerialNumber: syz
[  321.225169][   T10] usb 1-1: config 0 descriptor??
[  321.272366][  T981] usb 3-1: USB disconnect, device number 86
[  321.464520][   T10] pl2303 1-1:0.161: required endpoints missing
[  321.472686][   T10] usb 1-1: USB disconnect, device number 69
[  321.694522][   T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  321.823225][T11416] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1646'.
[  321.832991][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'.
[  321.848371][   T24] usb 4-1: Using ep0 maxpacket: 16
[  321.863062][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.884807][   T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  321.901017][   T24] usb 4-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=fd.9b
[  321.910377][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.919703][   T24] usb 4-1: Product: syz
[  321.923999][   T24] usb 4-1: Manufacturer: syz
[  321.928785][   T24] usb 4-1: SerialNumber: syz
[  321.943025][   T24] usb 4-1: config 0 descriptor??
[  322.157653][   T24] usb 4-1: USB disconnect, device number 30
[  322.398413][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  322.404947][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  322.554077][   T51] Bluetooth: hci4: command tx timeout
[  322.692441][T11453] erofs (device rnullb0): cannot find valid erofs superblock
[  322.903846][    T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  323.065802][    T9] usb 3-1: Using ep0 maxpacket: 16
[  323.074042][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.079650][T11459] Mount JFS Failure: -22
[  323.086820][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.099923][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  323.115135][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.125251][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  323.133835][    T9] usb 3-1: SerialNumber: syz
[  323.142540][    T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  323.342816][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 201
[  323.350606][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 201
[  323.357442][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.368526][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.372373][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.387441][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.424840][  T981] usb 3-1: USB disconnect, device number 87
[  323.484798][   T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  323.633539][   T24] usb 4-1: Using ep0 maxpacket: 8
[  323.639964][   T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  323.648603][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  323.658537][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  323.668332][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  323.678675][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  323.692419][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  323.701579][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.915723][   T24] usb 4-1: GET_CAPABILITIES returned 1b
[  323.921429][   T24] usbtmc 4-1:16.0: can't read capabilities
[  324.078119][T11471] /dev/rnullb0: Can't open blockdev
[  324.493258][   T24] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  324.632925][   T51] Bluetooth: hci4: command tx timeout
[  324.665138][   T24] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  324.673769][   T24] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  324.683207][   T24] usb 1-1: config 150 has no interface number 0
[  324.689511][   T24] usb 1-1: config 150 interface 204 has no altsetting 0
[  324.698479][   T24] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  324.708348][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.716895][   T24] usb 1-1: Product: syz
[  324.721091][   T24] usb 1-1: Manufacturer: syz
[  324.725791][   T24] usb 1-1: SerialNumber: syz
[  324.795424][  T981] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  324.939837][   T24] xr_serial 1-1:150.204: skipping garbage
[  324.945826][   T24] xr_serial 1-1:150.204: xr_serial converter detected
[  324.965991][  T981] usb 3-1: Using ep0 maxpacket: 16
[  324.973858][  T981] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  324.985666][  T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  324.998645][  T981] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  325.007816][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.016772][  T981] usb 3-1: Product: syz
[  325.021010][  T981] usb 3-1: Manufacturer: syz
[  325.025709][  T981] usb 3-1: SerialNumber: syz
[  325.032549][  T981] usb 3-1: config 0 descriptor??
[  325.044027][  T981] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  325.054810][  T981] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  325.745840][T11489] /dev/rnullb0: Can't open blockdev
[  326.030942][   T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  326.038559][   T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  326.050041][   T24] usb 1-1: USB disconnect, device number 70
[  326.057804][   T24] xr_serial 1-1:150.204: device disconnected
[  326.096458][  T981] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  326.110530][  T981] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  326.321383][    T9] IPVS: starting estimator thread 0...
[  326.424606][T11515] IPVS: using max 42 ests per chain, 100800 per kthread
[  326.714043][   T51] Bluetooth: hci4: command tx timeout
[  326.724477][  T981] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  326.958324][  T981] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  326.968568][  T981] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  326.975493][  T981] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  326.983928][  T981] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  326.990703][  T981] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  327.013354][  T981] usb 3-1: USB disconnect, device number 88
[  327.396618][T11541] bpf: Bad value for 'uid'
[  327.456570][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1683'.
[  327.468699][T11541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1683'.
[  327.702092][T11555] /dev/rnullb0: Can't open blockdev
[  328.005207][T11570] /dev/rnullb0: Can't open blockdev
[  328.155638][T11580] /dev/rnullb0: Can't open blockdev
[  328.352794][  T981] usb 1-1: new low-speed USB device number 71 using dummy_hcd
[  328.500963][  T981] usb 1-1: device descriptor read/64, error -71
[  328.649494][T11587] /dev/rnullb0: Can't open blockdev
[  328.657841][T11589] wlan1 speed is unknown, defaulting to 1000
[  328.664671][T11589] wlan1 speed is unknown, defaulting to 1000
[  328.671269][T11589] wlan1 speed is unknown, defaulting to 1000
[  328.700487][T11591] /dev/rnullb0: Can't open blockdev
[  328.741256][  T981] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  328.741311][T11592] /dev/rnullb0: Can't open blockdev
[  328.795036][T11595] /dev/rnullb0: Can't open blockdev
[  328.804630][T11589] infiniband syz0: set active
[  328.809452][   T24] wlan1 speed is unknown, defaulting to 1000
[  328.809722][T11589] infiniband syz0: added wlan1
[  328.841617][T11589] RDS/IB: syz0: added
[  328.845701][T11589] smc: adding ib device syz0 with port count 1
[  328.852514][T11589] smc:    ib device syz0 port 1 has pnetid 
[  328.858549][   T24] wlan1 speed is unknown, defaulting to 1000
[  328.864843][T11589] wlan1 speed is unknown, defaulting to 1000
[  328.880947][  T981] usb 1-1: device descriptor read/64, error -71
[  328.964491][T11589] wlan1 speed is unknown, defaulting to 1000
[  329.000900][  T981] usb usb1-port1: attempt power cycle
[  329.069854][T11589] wlan1 speed is unknown, defaulting to 1000
[  329.171912][T11589] wlan1 speed is unknown, defaulting to 1000
[  329.191323][T11464] usbtmc 4-1:16.0: stb usb_control_msg returned -110
[  329.219464][    T9] usb 4-1: USB disconnect, device number 31
[  329.333919][T11589] wlan1 speed is unknown, defaulting to 1000
[  329.351709][  T981] usb 1-1: new low-speed USB device number 73 using dummy_hcd
[  329.371173][  T981] usb 1-1: device descriptor read/8, error -71
[  329.476074][T11608] Mount JFS Failure: -22
[  329.545387][T11617] netlink: 'syz.4.1707': attribute type 4 has an invalid length.
[  329.630863][  T981] usb 1-1: new low-speed USB device number 74 using dummy_hcd
[  329.650587][   T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  329.659373][  T981] usb 1-1: device descriptor read/8, error -71
[  329.780526][  T981] usb usb1-port1: unable to enumerate USB device
[  329.810358][   T24] usb 3-1: Using ep0 maxpacket: 16
[  329.817502][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  329.833542][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  329.844958][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  329.859484][   T24] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  329.870318][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.878492][   T24] usb 3-1: Product: syz
[  329.883322][   T24] usb 3-1: Manufacturer: syz
[  329.888017][   T24] usb 3-1: SerialNumber: syz
[  329.895609][   T24] usb 3-1: config 0 descriptor??
[  330.112327][   T24] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  330.127618][   T24] usb 3-1: USB disconnect, device number 89
[  330.649021][T11626] comedi comedi3: mpc624: I/O port conflict (0x4f27,16)
[  330.732631][T11630] netlink: 'syz.2.1712': attribute type 1 has an invalid length.
[  330.740628][T11630] netlink: 'syz.2.1712': attribute type 101 has an invalid length.
[  330.748692][T11630] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1712'.
[  331.629438][ T5929] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  331.657977][T11630] syz.2.1712 (11630) used greatest stack depth: 17992 bytes left
[  331.716666][T11643] /dev/rnullb0: Can't open blockdev
[  331.789457][ T5929] usb 1-1: Using ep0 maxpacket: 16
[  331.797886][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.811893][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  331.828294][ T5929] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  331.839575][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.851456][ T5929] usb 1-1: config 0 descriptor??
[  331.999454][   T10] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[  332.151039][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.162698][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.176821][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  332.186443][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.199710][   T10] usb 3-1: config 0 descriptor??
[  332.266129][ T5929] microsoft 0003:045E:07DA.000F: item fetching failed at offset 29/34
[  332.275624][ T5929] microsoft 0003:045E:07DA.000F: parse failed
[  332.282494][ T5929] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22
[  332.409121][T11646] /dev/rnullb0: Can't open blockdev
[  332.415643][   T10] usb 3-1: string descriptor 0 read error: -71
[  332.431950][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22
[  332.462716][ T5223] bcm5974 3-1:0.0: could not read from device
[  332.469713][   T10] usb 3-1: USB disconnect, device number 90
[  332.655082][T11652] /dev/rnullb0: Can't open blockdev
[  332.743191][T11649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  332.986611][T11660] /dev/rnullb0: Can't open blockdev
[  333.918663][ T5872] Bluetooth: hci1: hardware error 0x03
[  333.922300][T11670] binder: 11669:11670 ioctl c018620c 200000000140 returned -22
[  333.934568][T11670] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  333.941642][T11670] /dev/rnullb0: Can't open blockdev
[  334.140371][   T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  334.300958][   T10] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0
[  334.311238][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  334.322517][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  334.331979][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.340713][   T10] usb 4-1: Product: syz
[  334.345002][   T10] usb 4-1: Manufacturer: syz
[  334.351539][   T10] usb 4-1: SerialNumber: syz
[  334.387865][   T43] usb 1-1: USB disconnect, device number 75
[  334.767291][   T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  334.824491][T11679] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  334.832275][T11679] /dev/rnullb0: Can't open blockdev
[  334.958644][  T981] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  334.978874][   T43] usb 4-1: USB disconnect, device number 32
[  334.989424][   T43] usblp0: removed
[  334.995294][T11688] /dev/rnullb0: Can't open blockdev
[  335.107747][  T981] usb 1-1: Using ep0 maxpacket: 32
[  335.118496][  T981] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  335.127131][  T981] usb 1-1: config 0 has no interface number 0
[  335.133826][  T981] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  335.149519][  T981] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  335.161261][  T981] usb 1-1: config 0 interface 85 has no altsetting 0
[  335.171143][  T981] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  335.180719][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.190909][  T981] usb 1-1: Product: syz
[  335.195107][  T981] usb 1-1: Manufacturer: syz
[  335.200124][  T981] usb 1-1: SerialNumber: syz
[  335.206568][  T981] usb 1-1: config 0 descriptor??
[  335.712056][  T981] appletouch 1-1:0.85: Failed to request geyser raw mode
[  335.720188][  T981] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  335.738552][  T981] usb 1-1: USB disconnect, device number 76
[  335.778230][    T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  335.797047][T11707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1735'.
[  335.809008][T11707] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  335.815989][T11707] /dev/rnullb0: Can't open blockdev
[  335.915050][T11713] /dev/rnullb0: Can't open blockdev
[  335.938288][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  335.947939][    T9] usb 4-1: config 8 has an invalid interface number: 247 but max is 0
[  335.956914][    T9] usb 4-1: config 8 has no interface number 0
[  335.963383][    T9] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64
[  335.974890][    T9] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  335.979908][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'.
[  335.989616][ T5872] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  336.002080][    T9] usb 4-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping
[  336.014026][    T9] usb 4-1: config 8 interface 247 altsetting 54 has an invalid descriptor for endpoint zero, skipping
[  336.017273][T11715] netlink: 'syz.2.1737': attribute type 3 has an invalid length.
[  336.025741][    T9] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  336.044559][    T9] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x2 has invalid wMaxPacketSize 0
[  336.054839][    T9] usb 4-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  336.068517][    T9] usb 4-1: config 8 interface 247 has no altsetting 0
[  336.076711][T11716] /dev/rnullb0: Can't open blockdev
[  336.083667][    T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d
[  336.084319][T11719] /dev/rnullb0: Can't open blockdev
[  336.092941][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.107604][    T9] usb 4-1: Product: syz
[  336.109234][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'.
[  336.111799][    T9] usb 4-1: Manufacturer: syz
[  336.111817][    T9] usb 4-1: SerialNumber: syz
[  336.120790][T11705] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  336.126638][T11716] netlink: 'syz.2.1737': attribute type 3 has an invalid length.
[  336.175339][T11721] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  336.187290][T11721] File: /dev/rnullb0 PID: 11721 Comm: syz.2.1739
[  336.708494][  T981] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  336.870697][  T981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.881333][  T981] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  336.893572][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.905278][  T981] usb 3-1: config 0 descriptor??
[  336.926758][  T981] pwc: Askey VC010 type 2 USB webcam detected.
[  337.322721][  T981] pwc: recv_control_msg error -32 req 02 val 2b00
[  337.331082][  T981] pwc: recv_control_msg error -32 req 02 val 2700
[  337.341789][  T981] pwc: recv_control_msg error -32 req 02 val 2c00
[  337.349401][  T981] pwc: recv_control_msg error -32 req 04 val 1000
[  337.362193][  T981] pwc: recv_control_msg error -32 req 04 val 1300
[  337.370171][  T981] pwc: recv_control_msg error -32 req 04 val 1400
[  337.809915][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  337.857189][    T9] usb 4-1: USB disconnect, device number 33
[  337.885642][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.247/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.641051][  T981] pwc: recv_control_msg error -71 req 02 val 2100
[  339.658241][  T981] pwc: recv_control_msg error -71 req 04 val 1500
[  339.702042][  T981] pwc: recv_control_msg error -71 req 02 val 2500
[  339.716561][  T981] pwc: recv_control_msg error -71 req 02 val 2400
[  339.743733][  T981] pwc: recv_control_msg error -71 req 02 val 2600
[  339.779767][  T981] pwc: recv_control_msg error -71 req 02 val 2900
[  339.798169][  T981] pwc: recv_control_msg error -71 req 02 val 2800
[  339.835752][  T981] pwc: recv_control_msg error -71 req 04 val 1100
[  339.859058][  T981] pwc: recv_control_msg error -71 req 04 val 1200
[  339.883394][  T981] pwc: Registered as video103.
[  339.898589][  T981] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  339.950369][  T981] usb 3-1: USB disconnect, device number 91
[  340.044542][T11790] /dev/rnullb0: Can't open blockdev
[  340.287125][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.410508][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.489198][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.550333][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.607436][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.677246][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.736307][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.757133][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.799782][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.847433][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.888665][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  340.939814][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  341.003949][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  341.092493][T11793] XFS (nbd0): no-recovery mounts must be read-only.
[  341.207959][T11796] /dev/rnullb0: Can't open blockdev
[  342.110476][   T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  342.275746][   T10] usb 3-1: Using ep0 maxpacket: 16
[  342.300473][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  342.321358][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  342.340788][   T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  342.355739][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.373241][   T10] usb 3-1: Product: syz
[  342.384039][   T10] usb 3-1: Manufacturer: syz
[  342.394220][   T10] usb 3-1: SerialNumber: syz
[  342.409350][   T10] usb 3-1: config 0 descriptor??
[  342.688094][T11814] netlink: 'syz.4.1766': attribute type 3 has an invalid length.
[  342.698747][T11814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1766'.
[  342.698853][T11815] netlink: 'syz.4.1766': attribute type 3 has an invalid length.
[  342.716376][T11815] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1766'.
[  342.726923][T11814] /dev/rnullb0: Can't open blockdev
[  343.545374][   T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  343.603282][  T981] usb 3-1: USB disconnect, device number 92
[  343.690136][T11824] kvm: kvm [11823]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000034)
[  343.703820][   T43] usb 1-1: device descriptor read/64, error -71
[  344.903436][   T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  345.113085][  T981] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  345.192626][   T43] usb 1-1: device descriptor read/64, error -71
[  345.278393][  T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  345.287726][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.298172][  T981] usb 3-1: Product: syz
[  345.302372][  T981] usb 3-1: Manufacturer: syz
[  345.312517][  T981] usb 3-1: SerialNumber: syz
[  345.328676][  T981] usb 3-1: config 0 descriptor??
[  345.335764][   T43] usb usb1-port1: attempt power cycle
[  345.348463][  T981] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  345.702421][   T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  345.805226][T11856] siw: device registration error -23
[  345.836064][  T981] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25
[  345.848259][   T43] usb 1-1: device descriptor read/8, error -71
[  345.884409][  T981] usb 3-1: USB disconnect, device number 93
[  346.192985][   T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  346.242559][   T43] usb 1-1: device descriptor read/8, error -71
[  346.354030][   T43] usb usb1-port1: unable to enumerate USB device
[  347.407514][T11878] input: syz1 as /devices/virtual/input/input26
[  349.197530][T11909] usb usb8: usbfs: process 11909 (syz.2.1803) did not claim interface 0 before use
[  351.669992][T11963] gfs2: gfs2 mount does not exist
[  351.746455][T11965] netlink: 'syz.3.1827': attribute type 1 has an invalid length.
[  351.754457][ T5872] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  351.762821][ T5872] Bluetooth: hci3: Injecting HCI hardware error event
[  351.771271][ T5872] Bluetooth: hci3: hardware error 0x00
[  351.776800][T11965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1827'.
[  351.798311][   T10] IPVS: starting estimator thread 0...
[  351.889427][T11967] IPVS: using max 53 ests per chain, 127200 per kthread
[  352.068967][T11975] FAULT_INJECTION: forcing a failure.
[  352.068967][T11975] name failslab, interval 1, probability 0, space 0, times 0
[  352.082934][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.3.1831 Not tainted syzkaller #0 PREEMPT(full) 
[  352.082964][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  352.082977][T11975] Call Trace:
[  352.082985][T11975]  <TASK>
[  352.082993][T11975]  dump_stack_lvl+0x189/0x250
[  352.083029][T11975]  ? __pfx____ratelimit+0x10/0x10
[  352.083054][T11975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.083084][T11975]  ? __pfx__printk+0x10/0x10
[  352.083109][T11975]  ? read_seqbegin+0x1ac/0x250
[  352.083141][T11975]  ? __pfx___might_resched+0x10/0x10
[  352.083163][T11975]  ? lock_acquire+0x5f/0x360
[  352.083183][T11975]  should_fail_ex+0x414/0x560
[  352.083213][T11975]  should_failslab+0xa8/0x100
[  352.083240][T11975]  __kmalloc_noprof+0xcb/0x4b0
[  352.083270][T11975]  ? tomoyo_encode+0x28b/0x550
[  352.083297][T11975]  tomoyo_encode+0x28b/0x550
[  352.083326][T11975]  tomoyo_realpath_from_path+0x58d/0x5d0
[  352.083358][T11975]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  352.083381][T11975]  tomoyo_path_number_perm+0x1e8/0x5a0
[  352.083402][T11975]  ? lock_release+0x4b/0x3e0
[  352.083420][T11975]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  352.083443][T11975]  ? rcu_is_watching+0x15/0xb0
[  352.083465][T11975]  ? lock_release+0x4b/0x3e0
[  352.083483][T11975]  ? vfs_write+0x956/0xb30
[  352.083505][T11975]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  352.083547][T11975]  ? __fget_files+0x3a0/0x420
[  352.083569][T11975]  ? __fget_files+0x2a/0x420
[  352.083594][T11975]  security_file_ioctl+0xcb/0x2d0
[  352.083614][T11975]  __se_sys_ioctl+0x47/0x170
[  352.083656][T11975]  do_syscall_64+0xfa/0xfa0
[  352.083682][T11975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.083701][T11975]  ? clear_bhb_loop+0x60/0xb0
[  352.083722][T11975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.083741][T11975] RIP: 0033:0x7fd54f38ebe9
[  352.083762][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.083780][T11975] RSP: 002b:00007fd5501da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.083800][T11975] RAX: ffffffffffffffda RBX: 00007fd54f5c5fa0 RCX: 00007fd54f38ebe9
[  352.083813][T11975] RDX: 0000000000000008 RSI: 0000000000001261 RDI: 0000000000000004
[  352.083824][T11975] RBP: 00007fd5501da090 R08: 0000000000000000 R09: 0000000000000000
[  352.083835][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.083845][T11975] R13: 00007fd54f5c6038 R14: 00007fd54f5c5fa0 R15: 00007ffe593fd498
[  352.083867][T11975]  </TASK>
[  352.083883][T11975] ERROR: Out of memory at tomoyo_realpath_from_path.
[  352.109811][    T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  352.260601][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.360541][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.370864][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.384675][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.395448][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.415758][    T9] usb 1-1: config 0 descriptor??
[  352.549916][T11986] /dev/rnullb0: Can't open blockdev
[  352.828820][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  352.839270][    T9] plantronics 0003:047F:FFFF.0010: item fetching failed at offset 12/15
[  352.847970][    T9] plantronics 0003:047F:FFFF.0010: parse failed
[  352.854662][    T9] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22
[  352.916422][T11991] netlink: 'syz.4.1837': attribute type 11 has an invalid length.
[  352.924675][T11991] netlink: 'syz.4.1837': attribute type 11 has an invalid length.
[  352.933017][T11991] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1837'.
[  352.978775][   T10] usb 4-1: Using ep0 maxpacket: 32
[  352.986109][   T10] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  352.994883][   T10] usb 4-1: config 0 has no interface number 0
[  353.005288][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  353.014785][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.024020][   T10] usb 4-1: Product: syz
[  353.028239][   T10] usb 4-1: Manufacturer: syz
[  353.033042][   T10] usb 4-1: SerialNumber: syz
[  353.041128][   T10] usb 4-1: config 0 descriptor??
[  353.049332][  T981] usb 1-1: USB disconnect, device number 81
[  353.052221][   T10] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  353.066924][   T10] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  353.212764][T11999] /dev/rnullb0: Can't open blockdev
[  353.251851][   T10] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  353.270461][   T10] usbhid 4-1:0.35: couldn't find an input interrupt endpoint
[  353.345549][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'.
[  353.599443][T12013] FAULT_INJECTION: forcing a failure.
[  353.599443][T12013] name failslab, interval 1, probability 0, space 0, times 0
[  353.620137][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.2.1842 Not tainted syzkaller #0 PREEMPT(full) 
[  353.620167][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  353.620181][T12013] Call Trace:
[  353.620189][T12013]  <TASK>
[  353.620198][T12013]  dump_stack_lvl+0x189/0x250
[  353.620233][T12013]  ? __pfx____ratelimit+0x10/0x10
[  353.620260][T12013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.620290][T12013]  ? __pfx__printk+0x10/0x10
[  353.620319][T12013]  ? is_bpf_text_address+0x292/0x2b0
[  353.620339][T12013]  ? is_bpf_text_address+0x26/0x2b0
[  353.620362][T12013]  should_fail_ex+0x414/0x560
[  353.620391][T12013]  should_failslab+0xa8/0x100
[  353.620410][T12013]  __kmalloc_cache_noprof+0x70/0x3a0
[  353.620440][T12013]  ? bdi_split_work_to_wbs+0x4fc/0x8c0
[  353.620473][T12013]  bdi_split_work_to_wbs+0x4fc/0x8c0
[  353.620502][T12013]  ? bdi_split_work_to_wbs+0x103/0x8c0
[  353.620535][T12013]  ? __pfx_bdi_split_work_to_wbs+0x10/0x10
[  353.620564][T12013]  ? __pfx___might_resched+0x10/0x10
[  353.620587][T12013]  ? __mutex_lock+0x335/0x1350
[  353.620626][T12013]  __writeback_inodes_sb_nr+0x1e9/0x250
[  353.620659][T12013]  ? __pfx___writeback_inodes_sb_nr+0x10/0x10
[  353.620689][T12013]  ? get_nr_dirty_inodes+0x1c4/0x210
[  353.620713][T12013]  ? __pfx_fs_bdev_sync+0x10/0x10
[  353.620733][T12013]  sync_filesystem+0xa3/0x230
[  353.620758][T12013]  ? __pfx_fs_bdev_sync+0x10/0x10
[  353.620777][T12013]  fs_bdev_sync+0x2c/0x50
[  353.620796][T12013]  blkdev_common_ioctl+0x642/0x2550
[  353.620823][T12013]  ? lock_release+0x4b/0x3e0
[  353.620841][T12013]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  353.620863][T12013]  ? kfree+0x18e/0x440
[  353.620889][T12013]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  353.620913][T12013]  ? do_vfs_ioctl+0xbe8/0x1430
[  353.620929][T12013]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  353.620951][T12013]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  353.620982][T12013]  ? lock_release+0x4b/0x3e0
[  353.620998][T12013]  ? vfs_write+0x956/0xb30
[  353.621019][T12013]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  353.621062][T12013]  blkdev_ioctl+0x4ef/0x6d0
[  353.621088][T12013]  ? __pfx_blkdev_ioctl+0x10/0x10
[  353.621112][T12013]  ? __fget_files+0x3a0/0x420
[  353.621135][T12013]  ? __fget_files+0x2a/0x420
[  353.621159][T12013]  ? bpf_lsm_file_ioctl+0x9/0x20
[  353.621187][T12013]  ? __pfx_blkdev_ioctl+0x10/0x10
[  353.621212][T12013]  __se_sys_ioctl+0xf9/0x170
[  353.621242][T12013]  do_syscall_64+0xfa/0xfa0
[  353.621268][T12013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.621287][T12013]  ? clear_bhb_loop+0x60/0xb0
[  353.621309][T12013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.621329][T12013] RIP: 0033:0x7faba078ebe9
[  353.621346][T12013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.621363][T12013] RSP: 002b:00007faba16d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  353.621384][T12013] RAX: ffffffffffffffda RBX: 00007faba09c5fa0 RCX: 00007faba078ebe9
[  353.621399][T12013] RDX: 0000000000000008 RSI: 0000000000001261 RDI: 0000000000000004
[  353.621410][T12013] RBP: 00007faba16d3090 R08: 0000000000000000 R09: 0000000000000000
[  353.621423][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.621434][T12013] R13: 00007faba09c6038 R14: 00007faba09c5fa0 R15: 00007ffd9ef22a98
[  353.621456][T12013]  </TASK>
[  353.951659][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.965609][ T5872] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  354.022808][T12021] input: syz1 as /devices/virtual/input/input28
[  354.085693][   T10] usb 4-1: USB disconnect, device number 34
[  354.495272][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1850'.
[  354.539903][T12039] block nbd4: Send control failed (result -32)
[  354.546201][T12039] block nbd4: Request send failed, requeueing
[  354.552911][   T94] block nbd4: Dead connection, failed to find a fallback
[  354.560174][   T94] block nbd4: shutting down sockets
[  354.565412][   T94] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.575400][T12039] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.586567][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  354.597051][T12039] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.608546][T12043] netlink: 'syz.4.1849': attribute type 27 has an invalid length.
[  354.609119][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  354.627384][T12039] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.636967][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  354.645465][T12039] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.655919][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  354.666058][T12039] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.676607][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  354.686620][T12043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.689291][T12039] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.712472][T12039] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.723044][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  354.733536][T12039] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.743175][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  354.755583][T12039] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  354.765566][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  354.775752][T12039] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  354.785409][T12039] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  354.797846][   T10] usb 4-1: Using ep0 maxpacket: 16
[  354.806186][   T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  354.819936][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.828389][   T10] usb 4-1: Product: syz
[  354.832582][   T10] usb 4-1: Manufacturer: syz
[  354.837344][   T10] usb 4-1: SerialNumber: syz
[  354.844130][   T10] usb 4-1: config 0 descriptor??
[  354.901755][ T5872] Bluetooth: hci0: unexpected event for opcode 0x080f
[  355.072001][   T10] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  355.087512][   T10] usb 4-1: USB disconnect, device number 35
[  355.134768][T12052] FAULT_INJECTION: forcing a failure.
[  355.134768][T12052] name failslab, interval 1, probability 0, space 0, times 0
[  355.151193][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.2.1853 Not tainted syzkaller #0 PREEMPT(full) 
[  355.151223][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  355.151235][T12052] Call Trace:
[  355.151243][T12052]  <TASK>
[  355.151251][T12052]  dump_stack_lvl+0x189/0x250
[  355.151287][T12052]  ? __pfx____ratelimit+0x10/0x10
[  355.151313][T12052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.151343][T12052]  ? __pfx__printk+0x10/0x10
[  355.151372][T12052]  ? __resched_curr+0x2d6/0x3e0
[  355.151399][T12052]  should_fail_ex+0x414/0x560
[  355.151429][T12052]  should_failslab+0xa8/0x100
[  355.151449][T12052]  __kmalloc_cache_noprof+0x70/0x3a0
[  355.151479][T12052]  ? bdi_split_work_to_wbs+0x4fc/0x8c0
[  355.151512][T12052]  bdi_split_work_to_wbs+0x4fc/0x8c0
[  355.151541][T12052]  ? sync_inodes_sb+0x19f/0xa10
[  355.151568][T12052]  ? bdi_split_work_to_wbs+0x103/0x8c0
[  355.151601][T12052]  ? __pfx_bdi_split_work_to_wbs+0x10/0x10
[  355.151638][T12052]  sync_inodes_sb+0x1ae/0xa10
[  355.151672][T12052]  ? __pfx_sync_inodes_sb+0x10/0x10
[  355.151700][T12052]  ? __pfx_ext4_sync_fs+0x10/0x10
[  355.151730][T12052]  ? get_nr_dirty_inodes+0x1c4/0x210
[  355.151755][T12052]  sync_filesystem+0x17a/0x230
[  355.151780][T12052]  ? __pfx_fs_bdev_sync+0x10/0x10
[  355.151799][T12052]  fs_bdev_sync+0x2c/0x50
[  355.151818][T12052]  blkdev_common_ioctl+0x642/0x2550
[  355.151845][T12052]  ? lock_release+0x4b/0x3e0
[  355.151863][T12052]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  355.151885][T12052]  ? kfree+0x18e/0x440
[  355.151911][T12052]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  355.151937][T12052]  ? do_vfs_ioctl+0xbe8/0x1430
[  355.151954][T12052]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  355.151977][T12052]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  355.152025][T12052]  ? lock_release+0x4b/0x3e0
[  355.152042][T12052]  ? vfs_write+0x956/0xb30
[  355.152064][T12052]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  355.152102][T12052]  blkdev_ioctl+0x4ef/0x6d0
[  355.152128][T12052]  ? __pfx_blkdev_ioctl+0x10/0x10
[  355.152151][T12052]  ? __fget_files+0x3a0/0x420
[  355.152174][T12052]  ? __fget_files+0x2a/0x420
[  355.152198][T12052]  ? bpf_lsm_file_ioctl+0x9/0x20
[  355.152226][T12052]  ? __pfx_blkdev_ioctl+0x10/0x10
[  355.152251][T12052]  __se_sys_ioctl+0xf9/0x170
[  355.152282][T12052]  do_syscall_64+0xfa/0xfa0
[  355.152309][T12052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.152329][T12052]  ? clear_bhb_loop+0x60/0xb0
[  355.152350][T12052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.152369][T12052] RIP: 0033:0x7faba078ebe9
[  355.152388][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.152405][T12052] RSP: 002b:00007faba16d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.152426][T12052] RAX: ffffffffffffffda RBX: 00007faba09c5fa0 RCX: 00007faba078ebe9
[  355.152441][T12052] RDX: 0000000000000008 RSI: 0000000000001261 RDI: 0000000000000004
[  355.152453][T12052] RBP: 00007faba16d3090 R08: 0000000000000000 R09: 0000000000000000
[  355.152465][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.152476][T12052] R13: 00007faba09c6038 R14: 00007faba09c5fa0 R15: 00007ffd9ef22a98
[  355.152499][T12052]  </TASK>
[  355.468881][    C1] vkms_vblank_simulate: vblank timer overrun
[  355.525157][T12060] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  356.185686][T12077] wlan1 speed is unknown, defaulting to 1000
[  356.289273][T12080] sctp: [Deprecated]: syz.2.1862 (pid 12080) Use of int in max_burst socket option.
[  356.289273][T12080] Use struct sctp_assoc_value instead
[  356.365788][T12085] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  356.372875][T12085] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  356.756881][ T5928] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  356.916787][ T5928] usb 3-1: Using ep0 maxpacket: 32
[  356.922550][ T5928] usb 3-1: too many configurations: 17, using maximum allowed: 8
[  356.932320][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  356.940965][ T5928] usb 3-1: config 0 has no interface number 0
[  356.956037][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  356.965064][ T5928] usb 3-1: config 0 has no interface number 0
[  356.972139][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  356.980214][ T5928] usb 3-1: config 0 has no interface number 0
[  356.989327][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  356.997703][ T5928] usb 3-1: config 0 has no interface number 0
[  357.004868][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  357.013108][ T5928] usb 3-1: config 0 has no interface number 0
[  357.020202][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  357.028285][ T5928] usb 3-1: config 0 has no interface number 0
[  357.035221][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  357.043411][ T5928] usb 3-1: config 0 has no interface number 0
[  357.050864][ T5928] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  357.059083][ T5928] usb 3-1: config 0 has no interface number 0
[  357.069169][ T5928] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  357.078345][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.086356][ T5928] usb 3-1: Product: syz
[  357.091340][ T5928] usb 3-1: Manufacturer: syz
[  357.095987][ T5928] usb 3-1: SerialNumber: syz
[  357.105644][ T5928] usb 3-1: config 0 descriptor??
[  357.112362][ T5928] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz)
[  357.313280][ T5928] etas_es58x 3-1:0.2: could not parse product info: '424242424242'
[  357.721604][T12118] rdma_rxe: rxe_newlink: failed to add wlan1
[  357.752525][T12118] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  357.763013][T12118] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  357.870775][T12128] erofs (device rnullb0): cannot find valid erofs superblock
[  357.889662][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.908646][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.958774][    C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0048.
[  357.969769][    C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  357.977763][    C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG
[  357.985902][ T5533] etas_es58x 3-1:0.2 can0: bit-timing not yet defined
[  358.128567][ T5928] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  358.172025][    C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  358.181238][    C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  358.190416][    C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  358.199583][    C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  358.208742][    C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  358.217912][    C0] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  358.226422][ T5533] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  358.227972][    T9] usb 3-1: USB disconnect, device number 94
[  358.244073][    T9] etas_es58x 3-1:0.2: Disconnecting syz syz
[  358.736251][T12160] /dev/rnullb0: Can't open blockdev
[  358.921692][T12171] FAULT_INJECTION: forcing a failure.
[  358.921692][T12171] name failslab, interval 1, probability 0, space 0, times 0
[  358.938423][ T5872] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  358.946858][ T5872] Bluetooth: hci0: Injecting HCI hardware error event
[  358.953760][   T51] Bluetooth: hci0: hardware error 0x00
[  358.974676][T12171] CPU: 0 UID: 0 PID: 12171 Comm: syz.2.1880 Not tainted syzkaller #0 PREEMPT(full) 
[  358.974706][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  358.974719][T12171] Call Trace:
[  358.974727][T12171]  <TASK>
[  358.974735][T12171]  dump_stack_lvl+0x189/0x250
[  358.974772][T12171]  ? __pfx____ratelimit+0x10/0x10
[  358.974806][T12171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.974842][T12171]  ? __pfx__printk+0x10/0x10
[  358.974872][T12171]  ? __pfx___might_resched+0x10/0x10
[  358.974895][T12171]  ? lock_acquire+0x5f/0x360
[  358.974916][T12171]  should_fail_ex+0x414/0x560
[  358.974953][T12171]  should_failslab+0xa8/0x100
[  358.974974][T12171]  kmem_cache_alloc_noprof+0x73/0x390
[  358.975015][T12171]  ? security_file_alloc+0x34/0x330
[  358.975037][T12171]  security_file_alloc+0x34/0x330
[  358.975058][T12171]  init_file+0x93/0x2f0
[  358.975085][T12171]  alloc_empty_file+0x6e/0x1d0
[  358.975111][T12171]  path_openat+0x107/0x3830
[  358.975128][T12171]  ? arch_stack_walk+0xfc/0x150
[  358.975159][T12171]  ? stack_trace_save+0x9c/0xe0
[  358.975187][T12171]  ? stack_depot_save_flags+0x40/0x860
[  358.975219][T12171]  ? kasan_save_track+0x4f/0x80
[  358.975255][T12171]  ? kasan_save_track+0x3e/0x80
[  358.975281][T12171]  ? __kasan_slab_alloc+0x6c/0x80
[  358.975308][T12171]  ? kmem_cache_alloc_noprof+0x1ad/0x390
[  358.975336][T12171]  ? getname_flags+0xb8/0x540
[  358.975361][T12171]  ? __pfx_path_openat+0x10/0x10
[  358.975389][T12171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.975418][T12171]  do_filp_open+0x1fa/0x410
[  358.975450][T12171]  ? __pfx_do_filp_open+0x10/0x10
[  358.975491][T12171]  ? _raw_spin_unlock+0x28/0x50
[  358.975514][T12171]  ? alloc_fd+0x64c/0x6c0
[  358.975541][T12171]  do_sys_openat2+0x121/0x1c0
[  358.975571][T12171]  ? __pfx_do_sys_openat2+0x10/0x10
[  358.975601][T12171]  ? ksys_write+0x22a/0x250
[  358.975625][T12171]  ? __pfx_ksys_write+0x10/0x10
[  358.975644][T12171]  __x64_sys_openat+0x138/0x170
[  358.975675][T12171]  do_syscall_64+0xfa/0xfa0
[  358.975703][T12171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.975721][T12171]  ? clear_bhb_loop+0x60/0xb0
[  358.975744][T12171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.975763][T12171] RIP: 0033:0x7faba078ebe9
[  358.975781][T12171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.975798][T12171] RSP: 002b:00007faba16d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  358.975819][T12171] RAX: ffffffffffffffda RBX: 00007faba09c5fa0 RCX: 00007faba078ebe9
[  358.975834][T12171] RDX: 000000000004a300 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  358.975848][T12171] RBP: 00007faba16d3090 R08: 0000000000000000 R09: 0000000000000000
[  358.975861][T12171] R10: 00000000000000cd R11: 0000000000000246 R12: 0000000000000001
[  358.975873][T12171] R13: 00007faba09c6038 R14: 00007faba09c5fa0 R15: 00007ffd9ef22a98
[  358.975896][T12171]  </TASK>
[  359.808514][T12202] exFAT-fs (rnullb0): invalid boot record signature
[  359.817195][T12202] exFAT-fs (rnullb0): failed to read boot sector
[  359.824020][T12202] exFAT-fs (rnullb0): failed to recognize exfat type
[  359.845299][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  359.995240][    T9] usb 4-1: Using ep0 maxpacket: 8
[  360.002443][    T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  360.013013][    T9] usb 4-1: config 0 has no interface number 0
[  360.021878][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  360.031470][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.040008][    T9] usb 4-1: Product: syz
[  360.044444][    T9] usb 4-1: Manufacturer: syz
[  360.049533][    T9] usb 4-1: SerialNumber: syz
[  360.057072][    T9] usb 4-1: config 0 descriptor??
[  360.085428][ T5928] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  360.236831][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0
[  360.247995][ T5928] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[  360.258856][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.270184][ T5928] usb 1-1: Product: syz
[  360.274492][ T5928] usb 1-1: Manufacturer: syz
[  360.277162][    T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  360.287806][ T5928] usb 1-1: SerialNumber: syz
[  360.299402][ T5928] usb 1-1: config 0 descriptor??
[  360.307099][    T9] usb 4-1: Failed to initialize entity for entity 6
[  360.323280][    T9] usb 4-1: Failed to register entities (-22).
[  360.338719][    T9] usb 4-1: USB disconnect, device number 37
[  360.474792][T12212] /dev/rnullb0: Can't open blockdev
[  360.574640][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.608667][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.624025][ T5872] Bluetooth: hci4: Malformed LE Event: 0x1d
[  360.660928][T12202] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  360.714955][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1886'.
[  361.113759][ T5928] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  361.149644][ T5928] usb 1-1: USB disconnect, device number 82
[  361.164067][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.414557][   T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  362.055045][ T5929] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  362.097204][T12237] wlan1 speed is unknown, defaulting to 1000
[  362.235755][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.250921][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.274106][ T5929] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  362.294275][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.314334][ T5929] usb 3-1: config 0 descriptor??
[  362.736669][ T5929] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0
[  362.765764][ T5929] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  362.788416][ T5929] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints?
[  362.836642][T12249] binder: 12248:12249 ioctl c0306201 200000000640 returned -22
[  362.935680][    C0] hid-thrustmaster 0003:044F:B65D.0011: Unknown packet type 0x0, unable to proceed further with wheel init
[  363.357976][ T5929] usb 3-1: USB disconnect, device number 95
[  363.463538][ T5928] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  363.624789][ T5928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  363.643405][ T5928] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  363.663340][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  363.680487][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  363.702083][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  363.730663][ T5928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  363.740475][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  363.763322][ T5928] usb 1-1: Product: syz
[  363.767844][ T5928] usb 1-1: Manufacturer: syz
[  363.787816][ T5928] cdc_wdm 1-1:1.0: skipping garbage
[  363.793071][ T5928] cdc_wdm 1-1:1.0: skipping garbage
[  363.805625][ T5928] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  363.811572][ T5928] cdc_wdm 1-1:1.0: Unknown control protocol
[  364.509153][T12282] erofs (device rnullb0): cannot find valid erofs superblock
[  364.611995][T12287] netlink: 'syz.2.1912': attribute type 21 has an invalid length.
[  364.627437][T12287] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1912'.
[  365.955510][ T5929] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  366.112444][ T5929] usb 4-1: Using ep0 maxpacket: 32
[  366.126129][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.147581][ T5929] usb 4-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6
[  366.157607][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.167054][ T5929] usb 4-1: Product: syz
[  366.171268][ T5929] usb 4-1: Manufacturer: syz
[  366.176580][ T5929] usb 4-1: SerialNumber: syz
[  366.189431][ T5929] usb 4-1: config 0 descriptor??
[  366.203899][ T5929] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f
[  366.261559][   T24] usb 1-1: USB disconnect, device number 83
[  366.307650][T12306] /dev/rnullb0: Can't open blockdev
[  366.480298][T12314] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  366.487689][T12314] overlayfs: failed to set xattr on upper
[  366.494089][T12314] overlayfs: ...falling back to redirect_dir=nofollow.
[  366.502561][T12314] overlayfs: ...falling back to uuid=null.
[  366.511299][T12314] CUSE: zero length info key specified
[  366.711852][   T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  366.871857][   T24] usb 1-1: Using ep0 maxpacket: 8
[  366.879759][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17
[  366.894181][   T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  366.901964][ T5929] gspca_sn9c20x: Write register 1001 failed -110
[  366.905219][   T24] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  366.909581][ T5929] gspca_sn9c20x: Device initialization failed
[  366.922016][   T24] usb 1-1: Product: syz
[  366.928516][   T24] usb 1-1: Manufacturer: syz
[  366.936450][ T5929] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110
[  366.944757][   T24] usb 1-1: SerialNumber: syz
[  366.957682][   T24] usb 1-1: config 0 descriptor??
[  367.168420][   T24] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  368.181720][T12309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.190388][T12309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.200168][T12309] input input29: cannot allocate more than FF_MAX_EFFECTS effects
[  368.208468][ T5928] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  368.380977][ T5928] usb 3-1: Using ep0 maxpacket: 16
[  368.387657][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.398679][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  368.412276][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  368.423160][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.431381][   T24] gspca_sunplus: reg_w_riv err -71
[  368.436607][   T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  368.446267][ T5928] usb 3-1: config 0 descriptor??
[  368.454466][   T24] usb 1-1: USB disconnect, device number 84
[  368.729219][ T5929] usb 4-1: USB disconnect, device number 38
[  368.766346][T12361] loop6: detected capacity change from 0 to 7
[  368.773800][    C0] blk_print_req_error: 2 callbacks suppressed
[  368.773817][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.789183][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.797441][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.806689][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.815374][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.824583][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.834622][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.843878][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.852222][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.861420][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.872034][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.881242][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.890299][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.899531][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.900118][T12361] ldm_validate_partition_table(): Disk read failed.
[  368.917205][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.926439][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.939805][ T5928] HID 045e:07da: Invalid code 65791 type 1
[  368.952540][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input30
[  368.963472][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  368.973122][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  368.995343][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  369.004581][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  369.017669][ T5928] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  369.019145][T12361] Dev loop6: unable to read RDB block 0
[  369.067563][T12361]  loop6: unable to read partition table
[  369.110786][T12361] loop6: partition table beyond EOD, truncated
[  369.117976][T12370] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1936'.
[  369.128005][T12361] loop_reread_partitions: partition scan of loop6 (�被x������() failed (rc=-5)
[  369.201325][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'.
[  369.343032][T12355] /dev/rnullb0: Can't open blockdev
[  369.362040][ T5928] usb 3-1: USB disconnect, device number 96
[  369.537061][T12379] /dev/rnullb0: Can't open blockdev
[  369.939908][T12383] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1940'.
[  369.997783][T12385] nfs4: Bad value for 'source'
[  370.004230][T12385] syzkaller1: entered promiscuous mode
[  370.010212][T12385] syzkaller1: entered allmulticast mode
[  370.190216][    T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  370.280071][ T5928] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  370.350161][    T9] usb 3-1: Using ep0 maxpacket: 16
[  370.359200][    T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  370.369207][    T9] usb 3-1: config 0 has no interface number 0
[  370.377486][    T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  370.387620][    T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  370.401709][    T9] usb 3-1: config 0 interface 41 has no altsetting 0
[  370.411468][    T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  370.422268][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.430709][    T9] usb 3-1: Product: syz
[  370.435114][    T9] usb 3-1: Manufacturer: syz
[  370.439777][    T9] usb 3-1: SerialNumber: syz
[  370.439990][ T5928] usb 1-1: Using ep0 maxpacket: 8
[  370.448822][    T9] usb 3-1: config 0 descriptor??
[  370.455959][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.456567][T12383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  370.477996][T12383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  370.479956][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.495739][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  370.509545][ T5928] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  370.522108][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.540714][ T5928] usb 1-1: config 0 descriptor??
[  370.689414][T12383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  370.706653][T12383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  371.117196][    T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22
[  371.157325][T12385] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  371.164500][T12385] /dev/rnullb0: Can't open blockdev
[  371.175364][ T5928] usbhid 1-1:0.0: can't add hid device: -71
[  371.183908][ T5928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  371.197737][ T5928] usb 1-1: USB disconnect, device number 85
[  371.265680][T11355] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  371.279241][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  371.279269][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  371.279287][T11355] Call Trace:
[  371.279295][T11355]  <TASK>
[  371.279304][T11355]  dump_stack_lvl+0x189/0x250
[  371.279341][T11355]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.279371][T11355]  ? __pfx__printk+0x10/0x10
[  371.279403][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.279428][T11355]  dump_header+0xd3/0x480
[  371.279447][T11355]  oom_kill_process+0x387/0x920
[  371.279477][T11355]  out_of_memory+0xf09/0x12a0
[  371.279500][T11355]  ? mem_cgroup_iter+0x3b/0x460
[  371.279523][T11355]  ? __pfx_out_of_memory+0x10/0x10
[  371.279548][T11355]  mem_cgroup_out_of_memory+0x145/0x240
[  371.279570][T11355]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  371.279597][T11355]  ? _raw_spin_unlock+0x28/0x50
[  371.279619][T11355]  ? memcg1_oom_prepare+0x37f/0x450
[  371.279646][T11355]  try_charge_memcg+0xdff/0x1290
[  371.279681][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.279708][T11355]  ? __pfx_try_charge_memcg+0x10/0x10
[  371.279736][T11355]  ? rcu_irq_exit_check_preempt+0x201/0x210
[  371.279758][T11355]  ? xa_load+0x60/0x210
[  371.279784][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.279807][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.279826][T11355]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  371.279857][T11355]  charge_memcg+0x9f/0x180
[  371.279885][T11355]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  371.279916][T11355]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  371.279947][T11355]  __read_swap_cache_async+0x28c/0x510
[  371.279975][T11355]  swap_cluster_readahead+0x4cf/0x5f0
[  371.280001][T11355]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  371.280028][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.280048][T11355]  ? filemap_get_entry+0xad/0x2f0
[  371.280071][T11355]  ? get_vma_policy+0x27c/0x3c0
[  371.280102][T11355]  swapin_readahead+0x17d/0xb50
[  371.280125][T11355]  ? __pfx_filemap_get_entry+0x10/0x10
[  371.280149][T11355]  ? get_swap_device_info+0x1c/0x2b0
[  371.280172][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.280192][T11355]  ? __pfx_swapin_readahead+0x10/0x10
[  371.280216][T11355]  ? __filemap_get_folio+0x9a6/0xaf0
[  371.280242][T11355]  ? swap_cache_get_folio+0xae/0x3b0
[  371.280266][T11355]  do_swap_page+0x525/0x5ac0
[  371.280292][T11355]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  371.280321][T11355]  ? ___pte_offset_map+0x29/0x250
[  371.280349][T11355]  ? lock_acquire+0x5f/0x360
[  371.280367][T11355]  ? do_swap_page+0x184/0x5ac0
[  371.280391][T11355]  ? __pfx_do_swap_page+0x10/0x10
[  371.280418][T11355]  ? __pfx_default_wake_function+0x10/0x10
[  371.280435][T11355]  ? ___pte_offset_map+0x45/0x250
[  371.280460][T11355]  ? ___pte_offset_map+0x1cf/0x250
[  371.280488][T11355]  ? pte_offset_map_rw_nolock+0xea/0x160
[  371.280518][T11355]  __handle_mm_fault+0xe55/0x5400
[  371.280554][T11355]  ? __pfx___handle_mm_fault+0x10/0x10
[  371.280581][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.280630][T11355]  ? lock_vma_under_rcu+0x3cb/0x450
[  371.280651][T11355]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  371.280680][T11355]  handle_mm_fault+0x40a/0x8e0
[  371.280712][T11355]  do_user_addr_fault+0xa81/0x1390
[  371.280736][T11355]  ? rcu_is_watching+0x15/0xb0
[  371.280758][T11355]  ? trace_page_fault_user+0x84/0x1e0
[  371.280778][T11355]  exc_page_fault+0x82/0x100
[  371.280806][T11355]  asm_exc_page_fault+0x26/0x30
[  371.280831][T11355] RIP: 0033:0x7fd54f3c14a8
[  371.280849][T11355] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  371.280867][T11355] RSP: 002b:00007ffe593fd7b0 EFLAGS: 00010293
[  371.280886][T11355] RAX: 0000000000000000 RBX: 00000000000000a6 RCX: 00007fd54f3c14a5
[  371.280899][T11355] RDX: 00007ffe593fd7f0 RSI: 0000000000000000 RDI: 0000000000000000
[  371.280912][T11355] RBP: 00007ffe593fd85c R08: 0000000000000000 R09: 0000000000000000
[  371.280925][T11355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  371.280937][T11355] R13: 00000000000927c0 R14: 000000000005a445 R15: 00007ffe593fd8b0
[  371.280959][T11355]  </TASK>
[  371.677086][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.685318][T11355] memory: usage 307200kB, limit 307200kB, failcnt 41561
[  371.709690][T11355] memory+swap: usage 307012kB, limit 9007199254740988kB, failcnt 0
[  371.717677][T11355] kmem: usage 1972kB, limit 9007199254740988kB, failcnt 0
[  371.727819][T11355] Memory cgroup stats for /syz3:
[  371.727990][T11355] cache 312066048
[  371.741016][T11355] rss 139264
[  371.744249][T11355] rss_huge 0
[  371.747866][T11355] shmem 245043200
[  371.752292][T11355] mapped_file 0
[  371.755784][T11355] dirty 0
[  371.758867][T11355] writeback 0
[  371.762625][T11355] workingset_refault_anon 4058
[  371.767441][T11355] workingset_refault_file 8358
[  371.772691][T11355] swap 61440
[  371.775932][T11355] swapcached 114688
[  371.780118][T11355] pgpgin 842520
[  371.784194][T11355] pgpgout 766807
[  371.787782][T11355] pgfault 283313
[  371.792209][T11355] pgmajfault 6944
[  371.795983][T11355] inactive_anon 245047296
[  371.800738][T11355] active_anon 143360
[  371.804658][T11355] inactive_file 0
[  371.808412][T11355] active_file 0
[  371.815082][T11355] unevictable 67022848
[  371.819388][T11355] hierarchical_memory_limit 314572800
[  371.824841][T11355] hierarchical_memsw_limit 9223372036854771712
[  371.833448][T11355] total_cache 312066048
[  371.837724][T11355] total_rss 139264
[  371.842146][T11355] total_rss_huge 0
[  371.846001][T11355] total_shmem 245043200
[  371.850528][T11355] total_mapped_file 0
[  371.854546][T11355] total_dirty 0
[  371.858020][T11355] total_writeback 0
[  371.862322][T11355] total_workingset_refault_anon 4058
[  371.867657][T11355] total_workingset_refault_file 8358
[  371.873379][T11355] total_swap 61440
[  371.877131][T11355] total_swapcached 114688
[  371.881877][T11355] total_pgpgin 842520
[  371.885891][T11355] total_pgpgout 766807
[  371.890830][T11355] total_pgfault 283313
[  371.894942][T11355] total_pgmajfault 6944
[  371.899139][T11355] total_inactive_anon 245047296
[  371.904450][T11355] total_active_anon 143360
[  371.908889][T11355] total_inactive_file 0
[  371.913464][T11355] total_active_file 0
[  371.917686][T11355] total_unevictable 67022848
[  371.922715][T11355] anon_cost 0
[  371.926025][T11355] file_cost 0
[  371.930132][T11355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1939,pid=12380,uid=0
[  371.945768][T11355] Memory cgroup out of memory: Killed process 12380 (syz.3.1939) total-vm:102000kB, anon-rss:1140kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  372.868798][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.891741][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.694907][T12405] /dev/rnullb0: Can't open blockdev
[  373.729559][T12407] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  373.751552][T12405] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1947'.
[  373.764226][   T51] Bluetooth: hci4: Malformed LE Event: 0x1d
[  373.989584][   T24] usb 3-1: USB disconnect, device number 97
[  374.178418][ T5928] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  374.339704][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  374.361514][ T5928] usb 1-1: config 6 has an invalid interface number: 213 but max is 0
[  374.377202][ T5928] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[  374.389873][ T5928] usb 1-1: config 6 has no interface number 0
[  374.396108][ T5928] usb 1-1: config 6 interface 213 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  374.407791][ T5928] usb 1-1: config 6 interface 213 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[  374.420418][ T5928] usb 1-1: config 6 interface 213 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  374.431970][ T5928] usb 1-1: config 6 interface 213 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[  374.445952][ T5928] usb 1-1: config 6 interface 213 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[  374.459956][ T5928] usb 1-1: config 6 interface 213 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0
[  374.470110][ T5928] usb 1-1: config 6 interface 213 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 0
[  374.482109][ T5928] usb 1-1: config 6 interface 213 has no altsetting 0
[  374.492488][ T5928] usb 1-1: New USB device found, idVendor=0586, idProduct=341f, bcdDevice=21.5f
[  374.504349][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.514815][ T5928] usb 1-1: Product: ࠾
[  374.520932][ T5928] usb 1-1: Manufacturer: Њ
[  374.525478][ T5928] usb 1-1: SerialNumber: ݵ袢嬨俳㳙돒ㄶꝳ䇷헅€扤ȧ⳧㿍༔⅀慿∳푪묩庲勎핀ପ轈㯟鑿Ⰹ鷉汞쀈넭弝縺ᬒⓋ爈ᅺ쳋鈊퉡ૺ﬏㿞ऩ᪀ź⑇꫗塷핻䮡݀읔倵Е耏隂砡氇漈易أ㖲羰埜黆ᮗ屓ణ꾗苇潦ꊙ嚠皷테䞪泎ᗰ㯘
[  374.553539][    C1] vkms_vblank_simulate: vblank timer overrun
[  374.565132][T12410] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  374.572630][   T24] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  374.743614][   T24] usb 3-1: config 8 has an invalid interface number: 80 but max is 0
[  374.754439][   T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  374.767173][   T24] usb 3-1: config 8 has no interface number 0
[  374.774129][   T24] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  374.802164][   T24] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  374.813400][   T24] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  374.835620][ T5928] usb 1-1: USB disconnect, device number 86
[  374.860686][   T24] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  374.886486][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.903383][   T24] usb 3-1: NFC: intf ffff888027d57000 id ffffffff8ef6c9e0
[  375.464816][T12433] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1956'.
[  376.524234][T12443] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  376.531907][T12443] /dev/rnullb0: Can't open blockdev
[  377.252254][   T24] usb 3-1: USB disconnect, device number 98
[  377.305781][T12445] syzkaller1: entered promiscuous mode
[  377.330331][T12445] syzkaller1: entered allmulticast mode
[  378.288879][T12469] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  378.307518][T12470] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  378.709972][T12469] /dev/rnullb0: Can't open blockdev
[  378.715673][T12470] /dev/rnullb0: Can't open blockdev
[  378.868039][T12474] XFS (rnullb0): Invalid superblock magic number
[  380.110327][T12499] ubi31: attaching mtd0
[  380.181483][T12499] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612)
[  381.384303][T12507] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  381.814374][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  381.910692][T12523] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1983'.
[  381.974364][ T1170] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  381.981524][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.991471][   T24] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  382.009398][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  382.020762][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.029203][   T24] usb 4-1: SerialNumber: ᴋዻ
[  382.104770][ T1170] usb 1-1: device descriptor read/64, error -71
[  382.414628][ T1170] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  382.564471][ T1170] usb 1-1: device descriptor read/64, error -71
[  382.674556][ T1170] usb usb1-port1: attempt power cycle
[  382.863934][   T24] usb 4-1: reset high-speed USB device number 39 using dummy_hcd
[  383.013723][   T24] usb 4-1: device descriptor read/64, error -71
[  383.013723][ T1170] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  383.045786][ T1170] usb 1-1: device descriptor read/8, error -71
[  383.244547][T12543] netlink: 'syz.4.1988': attribute type 2 has an invalid length.
[  383.253443][T12543] netlink: 'syz.4.1988': attribute type 9 has an invalid length.
[  383.263800][T12543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1988'.
[  383.275469][   T24] usb 4-1: reset high-speed USB device number 39 using dummy_hcd
[  383.304543][ T1170] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  383.335546][ T1170] usb 1-1: device descriptor read/8, error -71
[  383.443643][   T24] usb 4-1: device descriptor read/64, error -71
[  383.452185][ T1170] usb usb1-port1: unable to enumerate USB device
[  383.458661][    T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  383.627749][    T9] usb 3-1: too many configurations: 236, using maximum allowed: 8
[  383.637821][    T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  383.648467][    T9] usb 3-1: can't read configurations, error -22
[  383.703435][   T24] usb 4-1: reset high-speed USB device number 39 using dummy_hcd
[  383.734801][   T24] usb 4-1: device descriptor read/8, error -71
[  383.783497][    T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  383.818131][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  383.944000][    T9] usb 3-1: too many configurations: 236, using maximum allowed: 8
[  383.953615][    T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  383.961579][    T9] usb 3-1: can't read configurations, error -22
[  383.968874][    T9] usb usb3-port1: attempt power cycle
[  383.983398][   T24] usb 4-1: reset high-speed USB device number 39 using dummy_hcd
[  384.014256][   T24] usb 4-1: device descriptor read/8, error -71
[  384.130391][   T24] usb 4-1: USB disconnect, device number 39
[  384.273162][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  384.323083][    T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  384.344168][    T9] usb 3-1: too many configurations: 236, using maximum allowed: 8
[  384.353568][    T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  384.361639][    T9] usb 3-1: can't read configurations, error -22
[  384.414602][   T24] usb 4-1: device descriptor read/64, error -71
[  384.502994][    T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  384.523994][    T9] usb 3-1: too many configurations: 236, using maximum allowed: 8
[  384.568843][    T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  384.581122][    T9] usb 3-1: can't read configurations, error -22
[  384.590715][    T9] usb usb3-port1: unable to enumerate USB device
[  384.605587][T12545] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  384.613680][T12545] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock
[  384.622162][T12545] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  384.630088][T12545] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock
[  384.718415][T12547] rdma_rxe: rxe_newlink: failed to add wlan1
[  384.728708][T12547] /dev/rnullb0: Can't open blockdev
[  384.833101][T12550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32
[  384.981836][T12550] /dev/rnullb0: Can't open blockdev
[  385.236627][T12561] /dev/rnullb0: Can't open blockdev
[  385.295086][ T7144] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  385.322872][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  385.322903][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  385.322916][ T7144] Call Trace:
[  385.322924][ T7144]  <TASK>
[  385.322931][ T7144]  dump_stack_lvl+0x189/0x250
[  385.322968][ T7144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.322998][ T7144]  ? __pfx__printk+0x10/0x10
[  385.323030][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323056][ T7144]  dump_header+0xd3/0x480
[  385.323075][ T7144]  oom_kill_process+0x387/0x920
[  385.323101][ T7144]  out_of_memory+0xf09/0x12a0
[  385.323125][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323147][ T7144]  ? __pfx_out_of_memory+0x10/0x10
[  385.323167][ T7144]  ? percpu_ref_put+0x19/0x180
[  385.323185][ T7144]  ? lock_release+0x4b/0x3e0
[  385.323207][ T7144]  mem_cgroup_out_of_memory+0x145/0x240
[  385.323231][ T7144]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  385.323259][ T7144]  ? _raw_spin_unlock+0x28/0x50
[  385.323282][ T7144]  ? memcg1_oom_prepare+0x37f/0x450
[  385.323312][ T7144]  try_charge_memcg+0xdff/0x1290
[  385.323342][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323371][ T7144]  ? __pfx_try_charge_memcg+0x10/0x10
[  385.323400][ T7144]  ? rcu_irq_exit_check_preempt+0x201/0x210
[  385.323423][ T7144]  ? xa_load+0x60/0x210
[  385.323451][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323473][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323495][ T7144]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  385.323527][ T7144]  charge_memcg+0x9f/0x180
[  385.323566][ T7144]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  385.323596][ T7144]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  385.323628][ T7144]  __read_swap_cache_async+0x28c/0x510
[  385.323658][ T7144]  swap_cluster_readahead+0x305/0x5f0
[  385.323686][ T7144]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  385.323713][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323733][ T7144]  ? filemap_get_entry+0xad/0x2f0
[  385.323756][ T7144]  ? get_vma_policy+0x27c/0x3c0
[  385.323787][ T7144]  swapin_readahead+0x17d/0xb50
[  385.323811][ T7144]  ? __pfx_filemap_get_entry+0x10/0x10
[  385.323836][ T7144]  ? get_swap_device_info+0x1c/0x2b0
[  385.323860][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.323882][ T7144]  ? __pfx_swapin_readahead+0x10/0x10
[  385.323907][ T7144]  ? __filemap_get_folio+0x9a6/0xaf0
[  385.323933][ T7144]  ? swap_cache_get_folio+0xae/0x3b0
[  385.323959][ T7144]  do_swap_page+0x525/0x5ac0
[  385.323985][ T7144]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  385.324016][ T7144]  ? ___pte_offset_map+0x29/0x250
[  385.324046][ T7144]  ? lock_acquire+0x5f/0x360
[  385.324063][ T7144]  ? do_swap_page+0x184/0x5ac0
[  385.324089][ T7144]  ? __pfx_do_swap_page+0x10/0x10
[  385.324115][ T7144]  ? __pfx_default_wake_function+0x10/0x10
[  385.324134][ T7144]  ? ___pte_offset_map+0x45/0x250
[  385.324161][ T7144]  ? ___pte_offset_map+0x1cf/0x250
[  385.324191][ T7144]  ? pte_offset_map_rw_nolock+0xea/0x160
[  385.324221][ T7144]  __handle_mm_fault+0xe55/0x5400
[  385.324256][ T7144]  ? __pfx___handle_mm_fault+0x10/0x10
[  385.324285][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.324312][ T7144]  ? lock_vma_under_rcu+0x3cb/0x450
[  385.324333][ T7144]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  385.324355][ T7144]  handle_mm_fault+0x40a/0x8e0
[  385.324388][ T7144]  do_user_addr_fault+0xa81/0x1390
[  385.324413][ T7144]  ? rcu_is_watching+0x15/0xb0
[  385.324434][ T7144]  ? trace_page_fault_user+0x84/0x1e0
[  385.324456][ T7144]  exc_page_fault+0x82/0x100
[  385.324483][ T7144]  asm_exc_page_fault+0x26/0x30
[  385.324502][ T7144] RIP: 0033:0x7f86e95c14a8
[  385.324520][ T7144] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  385.324544][ T7144] RSP: 002b:00007ffe4dc42c00 EFLAGS: 00010293
[  385.324564][ T7144] RAX: 0000000000000000 RBX: 000000000000038d RCX: 00007f86e95c14a5
[  385.324577][ T7144] RDX: 00007ffe4dc42c40 RSI: 0000000000000000 RDI: 0000000000000000
[  385.324590][ T7144] RBP: 00007ffe4dc42cac R08: 0000000000000000 R09: 0000000000000000
[  385.324603][ T7144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  385.324615][ T7144] R13: 00000000000927c0 R14: 000000000005d99e R15: 00007ffe4dc42d00
[  385.324637][ T7144]  </TASK>
[  385.324646][ T7144] memory: usage 307200kB, limit 307200kB, failcnt 20884
[  385.622494][   T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  385.626922][ T7144] memory+swap: usage 308148kB, limit 9007199254740988kB, failcnt 0
[  385.759757][ T7144] kmem: usage 2500kB, limit 9007199254740988kB, failcnt 0
[  385.767009][ T7144] Memory cgroup stats for /syz4:
[  385.767151][ T7144] cache 311971840
[  385.775794][ T7144] rss 0
[  385.778574][ T7144] rss_huge 0
[  385.781784][ T7144] shmem 311971840
[  385.785530][ T7144] mapped_file 0
[  385.789003][ T7144] dirty 0
[  385.791960][ T7144] writeback 0
[  385.795378][ T7144] workingset_refault_anon 92
[  385.799985][ T7144] workingset_refault_file 5574
[  385.804869][ T7144] swap 970752
[  385.808309][ T7144] swapcached 40960
[  385.812047][ T7144] pgpgin 432740
[  385.813409][   T24] usb 4-1: config index 0 descriptor too short (expected 256, got 227)
[  385.815576][ T7144] pgpgout 357587
[  385.827412][ T7144] pgfault 166675
[  385.829774][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.830968][ T7144] pgmajfault 14512
[  385.844880][ T7144] inactive_anon 0
[  385.848835][ T7144] active_anon 68227072
[  385.853013][ T7144] inactive_file 0
[  385.856672][ T7144] active_file 0
[  385.860146][ T7144] unevictable 243785728
[  385.863836][   T24] usb 4-1: config 0 has no interfaces?
[  385.864577][ T7144] hierarchical_memory_limit 314572800
[  385.875231][ T7144] hierarchical_memsw_limit 9223372036854771712
[  385.881399][ T7144] total_cache 311971840
[  385.885694][ T7144] total_rss 0
[  385.889001][ T7144] total_rss_huge 0
[  385.889862][   T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  385.892826][ T7144] total_shmem 311971840
[  385.892839][ T7144] total_mapped_file 0
[  385.892847][ T7144] total_dirty 0
[  385.892854][ T7144] total_writeback 0
[  385.892862][ T7144] total_workingset_refault_anon 92
[  385.892871][ T7144] total_workingset_refault_file 5574
[  385.892880][ T7144] total_swap 970752
[  385.892887][ T7144] total_swapcached 40960
[  385.892894][ T7144] total_pgpgin 432740
[  385.892902][ T7144] total_pgpgout 357587
[  385.903979][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.906164][ T7144] total_pgfault 166675
[  385.931914][   T24] usb 4-1: Product: syz
[  385.962616][   T24] usb 4-1: Manufacturer: syz
[  385.967257][   T24] usb 4-1: SerialNumber: syz
[  385.973223][ T7144] total_pgmajfault 14512
[  385.977896][ T7144] total_inactive_anon 0
[  385.983371][   T24] usb 4-1: config 0 descriptor??
[  385.991275][ T7144] total_active_anon 68227072
[  385.996399][ T7144] total_inactive_file 0
[  386.000664][ T7144] total_active_file 0
[  386.008708][ T7144] total_unevictable 243785728
[  386.014275][ T7144] anon_cost 0
[  386.037927][ T7144] file_cost 0
[  386.041288][ T7144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1988,pid=12538,uid=0
[  386.058882][ T7144] Memory cgroup out of memory: Killed process 12538 (syz.4.1988) total-vm:102024kB, anon-rss:1020kB, file-rss:23368kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  386.071285][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'.
[  386.195151][ T1170] usb 4-1: USB disconnect, device number 41
[  386.853539][T12581] /dev/rnullb0: Can't open blockdev
[  386.944223][T12583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  386.971911][T12583] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  387.083181][T12584] fuse: Bad value for 'fd'
[  387.576939][T12593] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2005'.
[  387.604786][T12594] /dev/rnullb0: Can't open blockdev
[  387.622048][T12593] /dev/rnullb0: Can't open blockdev
[  387.720911][T12596] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  387.753991][T12596] /dev/rnullb0: Can't open blockdev
[  388.673012][T12602] /dev/rnullb0: Can't open blockdev
[  388.698750][T12601] nfs4: Bad value for 'source'
[  388.719274][T12601] syzkaller1: entered promiscuous mode
[  388.735723][T12601] syzkaller1: entered allmulticast mode
[  389.000198][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  389.599363][    T9] usb 4-1: Using ep0 maxpacket: 8
[  389.941622][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.952834][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.963039][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  389.976344][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  389.985776][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.996202][    T9] usb 4-1: config 0 descriptor??
[  390.202259][T12626] /dev/rnullb0: Can't open blockdev
[  390.232292][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  390.264846][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  390.312569][    T9] usb 4-1: USB disconnect, device number 42
[  390.510863][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'.
[  390.743155][T12632] /dev/rnullb0: Can't open blockdev
[  391.202408][    T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  391.361112][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.376512][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.386168][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  391.408261][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  391.426769][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  391.437285][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.449041][    T9] usb 1-1: Product: syz
[  391.453538][    T9] usb 1-1: Manufacturer: syz
[  391.458245][    T9] usb 1-1: SerialNumber: syz
[  391.538282][T12665] /dev/rnullb0: Can't open blockdev
[  391.732417][    T9] usb 1-1: 0:2 : does not exist
[  391.776210][    T9] usb 1-1: USB disconnect, device number 91
[  392.012887][T12672] nfs4: Bad value for 'source'
[  392.018181][T12672] syzkaller1: entered promiscuous mode
[  392.024089][T12672] syzkaller1: entered allmulticast mode
[  392.072977][T12675] /dev/rnullb0: Can't open blockdev
[  392.272383][ T5928] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  392.342496][T12680] /dev/rnullb0: Can't open blockdev
[  392.429224][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  392.438098][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.458964][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.468763][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  392.509982][ T5928] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  392.519362][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.531622][ T5928] usb 4-1: config 0 descriptor??
[  392.748468][ T5928] usbhid 4-1:0.0: can't add hid device: -71
[  392.757639][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  392.773797][ T5928] usb 4-1: USB disconnect, device number 43
[  392.839350][   T24] usb 3-1: new low-speed USB device number 103 using dummy_hcd
[  392.898821][    T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  393.000245][   T24] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  393.014871][   T24] usb 3-1: string descriptor 0 read error: -22
[  393.023105][   T24] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  393.032372][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.051442][    T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  393.061781][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  393.071247][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.088712][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  393.246949][   T24] usb 3-1: USB disconnect, device number 103
[  393.927025][T12699] fuse: Bad value for 'fd'
[  394.093516][T12702] /dev/rnullb0: Can't open blockdev
[  394.151958][T12703] /dev/rnullb0: Can't open blockdev
[  394.188390][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  394.209362][    T9] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  394.216263][    T9] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  394.295432][ T5928] libceph: connect (1)[c::]:6789 error -101
[  394.317352][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  394.345930][   T24] libceph: connect (1)[c::]:6789 error -101
[  394.360682][T12714] tmpfs: Bad value for 'mpol'
[  394.365442][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  394.449441][   T24] usb 1-1: USB disconnect, device number 92
[  394.598356][ T5928] libceph: connect (1)[c::]:6789 error -101
[  394.604458][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  394.639519][   T24] libceph: connect (1)[c::]:6789 error -101
[  394.645663][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  395.164931][   T24] libceph: connect (1)[c::]:6789 error -101
[  395.278977][T12705] ceph: No mds server is up or the cluster is laggy
[  395.298543][T12710] ceph: No mds server is up or the cluster is laggy
[  395.329341][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  395.335640][   T24] libceph: connect (1)[c::]:6789 error -101
[  395.343702][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  395.450266][T12727] /dev/rnullb0: Can't open blockdev
[  395.515289][T12729] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  395.657485][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  395.713071][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2048'.
[  395.759751][T12734] syzkaller1: entered promiscuous mode
[  395.761086][T12736] /dev/rnullb0: Can't open blockdev
[  395.765263][T12734] syzkaller1: entered allmulticast mode
[  395.817587][    T9] usb 4-1: Using ep0 maxpacket: 32
[  395.824272][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  395.837159][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  395.846453][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  395.854870][    T9] usb 4-1: Product: syz
[  395.859376][    T9] usb 4-1: Manufacturer: syz
[  395.863990][    T9] usb 4-1: SerialNumber: syz
[  395.870863][    T9] usb 4-1: config 0 descriptor??
[  395.876435][T12725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  396.007246][ T5929] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  396.047353][   T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  396.091735][    T9] usb 4-1: USB disconnect, device number 44
[  396.158548][ T5929] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  396.167526][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.178231][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  396.187866][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.200506][ T5929] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  396.211657][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  396.222541][ T5929] usb 3-1: Product: syz
[  396.226745][ T5929] usb 3-1: Manufacturer: syz
[  396.243479][   T24] usb 1-1: Using ep0 maxpacket: 8
[  396.248862][ T5929] cdc_wdm 3-1:1.0: skipping garbage
[  396.251987][   T24] usb 1-1: config 25 has an invalid interface number: 77 but max is 0
[  396.254546][ T5929] cdc_wdm 3-1:1.0: skipping garbage
[  396.270423][ T5929] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  396.271064][   T24] usb 1-1: config 25 has no interface number 0
[  396.289240][   T24] usb 1-1: config 25 interface 77 has no altsetting 0
[  396.299319][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f2.d1
[  396.309087][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.318035][   T24] usb 1-1: Product: syz
[  396.322229][   T24] usb 1-1: Manufacturer: syz
[  396.337193][   T24] usb 1-1: SerialNumber: syz
[  396.458399][ T5929] usb 3-1: USB disconnect, device number 104
[  396.711707][   T24] gspca_main: sunplus-2.14.0 probing 046d:0960
[  396.718620][   T24] gspca_sunplus: reg_w_riv err -71
[  396.724045][   T24] sunplus 1-1:25.77: probe with driver sunplus failed with error -71
[  396.733853][   T24] usb 1-1: USB disconnect, device number 93
[  397.126060][T12754] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  397.154918][   T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  397.320155][   T24] usb 4-1: Using ep0 maxpacket: 16
[  397.329743][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.341823][   T24] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  397.351557][   T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  397.396935][   T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  397.416628][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  397.443547][T12776] nfs4: Bad value for 'source'
[  397.450730][T12776] syzkaller1: entered promiscuous mode
[  397.456302][T12776] syzkaller1: entered allmulticast mode
[  397.475089][   T24] usb 4-1: config 1 interface 1 has no altsetting 0
[  397.483419][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  397.492661][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.500954][   T24] usb 4-1: Product: syz
[  397.505182][   T24] usb 4-1: Manufacturer: syz
[  397.509954][   T24] usb 4-1: SerialNumber: syz
[  397.546708][ T5929] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  397.699801][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  397.713454][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  397.727148][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.735780][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.744379][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  397.759798][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.768724][ T5929] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  397.778036][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.787456][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.798768][ T5929] usb 3-1: config 0 descriptor??
[  397.807632][ T5929] hdpvr 3-1:0.0: Could not find bulk-in endpoint
[  397.825845][ T5929] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  397.839693][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  397.859462][   T24] usb 4-1: 2:1 : format type 9 is not supported yet
[  397.897623][   T24] usb 4-1: USB disconnect, device number 45
[  397.900902][T12797] netlink: 'syz.3.2067': attribute type 6 has an invalid length.
[  397.932738][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  398.022160][  T981] usb 3-1: USB disconnect, device number 105
[  398.120704][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2070'.
[  398.134665][T12807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'.
[  398.148838][T12807] /dev/rnullb0: Can't open blockdev
[  398.175688][T12811] nfs4: Bad value for 'source'
[  398.182733][T12811] syzkaller1: entered promiscuous mode
[  398.188511][T12811] syzkaller1: entered allmulticast mode
[  398.262835][T12817] netlink: 7986 bytes leftover after parsing attributes in process `syz.3.2074'.
[  398.274605][T12817] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  398.285589][T12817] /dev/rnullb0: Can't open blockdev
[  398.432080][T12822] blk_print_req_error: 10 callbacks suppressed
[  398.432100][T12822] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[  398.432266][T12822] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[  398.843840][T12832] /dev/rnullb0: Can't open blockdev
[  398.889334][T12835] /dev/rnullb0: Can't open blockdev
[  399.390069][T12860] ieee802154 phy1 wpan1: encryption failed: -22
[  399.397727][T12860] /dev/rnullb0: Can't open blockdev
[  399.595710][ T5929] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  399.649477][T12872] /dev/rnullb0: Can't open blockdev
[  399.764400][T12872] 9p: Could not find request transport: �#fd
[  399.787051][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short
[  399.805968][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -71
[  399.813975][ T5929] usb 4-1: can't read configurations, error -71
[  400.088355][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2099'.
[  400.308052][   T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  400.427194][T12891] netlink: 'syz.0.2100': attribute type 27 has an invalid length.
[  400.439707][T12891] netlink: 'syz.0.2100': attribute type 1 has an invalid length.
[  400.446997][T12893] erofs (device nbd3): cannot find valid erofs superblock
[  400.456985][T12891] bridge0: port 1(bridge_slave_0) entered learning state
[  400.490937][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  400.515806][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  400.528814][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  400.538398][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.565051][T12886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.586388][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  400.785956][T12886] /dev/rnullb0: Can't open blockdev
[  400.865509][   T24] usb 3-1: USB disconnect, device number 106
[  401.620582][ T5929] IPVS: starting estimator thread 0...
[  401.657338][T12908] /dev/rnullb0: Can't open blockdev
[  401.746740][T12906] IPVS: using max 43 ests per chain, 103200 per kthread
[  401.985726][ T5929] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  402.166850][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  402.175139][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.197121][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.214299][ T5929] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  402.233944][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.255298][ T5929] usb 3-1: config 0 descriptor??
[  402.352918][T12931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2111'.
[  402.396652][T12937] trusted_key: encrypted_key: insufficient parameters specified
[  402.424964][T12939] /dev/rnullb0: Can't open blockdev
[  402.606481][T12948] /dev/rnullb0: Can't open blockdev
[  402.682102][ T5929] hid-multitouch 0003:1FD2:6007.0013: item fetching failed at offset 1/5
[  402.696281][ T5929] hid-multitouch 0003:1FD2:6007.0013: probe with driver hid-multitouch failed with error -22
[  403.135695][ T5929] usb 3-1: USB disconnect, device number 107
[  403.279059][T12968] input: syz1 as /devices/virtual/input/input33
[  403.308742][T12969] syzkaller1: entered promiscuous mode
[  403.316442][T12969] syzkaller1: entered allmulticast mode
[  403.343728][   T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  403.516719][   T24] usb 4-1: Using ep0 maxpacket: 16
[  403.524598][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  403.538721][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  403.549809][T12981] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  403.559166][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  403.568505][T12981] /dev/rnullb0: Can't open blockdev
[  403.588382][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.608615][   T24] usb 4-1: Product: syz
[  403.612849][   T24] usb 4-1: Manufacturer: syz
[  403.620764][   T24] usb 4-1: SerialNumber: syz
[  403.642121][   T24] usb 4-1: config 0 descriptor??
[  403.658755][   T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  403.678859][   T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  403.939857][T12988] IPVS: persistence engine module ip_vs_pe_ not found
[  403.951339][T12990] /dev/rnullb0: Can't open blockdev
[  403.996353][T12992] tmpfs: Bad value for 'uid'
[  404.001002][T12992] tmpfs: Bad value for 'uid'
[  404.209938][T12995] program syz.2.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  404.260307][   T24] em28xx 4-1:0.0: unknown em28xx chip ID (249)
[  404.417197][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'.
[  404.442427][T13003] sp0: Synchronizing with TNC
[  404.596969][T13003] sp0: Synchronizing with TNC
[  404.612764][T13009] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  404.620684][T13009] /dev/rnullb0: Can't open blockdev
[  404.679203][T13009] tipc: Started in network mode
[  404.712658][T13009] tipc: Node identity 100, cluster identity 4711
[  404.722025][   T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  404.740721][T13009] tipc: Node number set to 256
[  404.749113][   T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  404.759914][   T24] em28xx 4-1:0.0: No AC97 audio processor
[  404.814766][   T24] usb 4-1: USB disconnect, device number 48
[  404.821592][   T24] em28xx 4-1:0.0: Disconnecting em28xx
[  404.837530][   T24] em28xx 4-1:0.0: Freeing device
[  405.597081][T13023] /dev/rnullb0: Can't open blockdev
[  405.747107][   T30] audit: type=1400 audit(1756639483.196:534): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13028 comm="syz.4.2139"
[  405.767573][T13029] /dev/rnullb0: Can't open blockdev
[  405.859532][T13035] /dev/rnullb0: Can't open blockdev
[  405.871131][T13036] comedi comedi3: pcl818: I/O port conflict (0x4f27,16)
[  405.872812][T13037] /dev/rnullb0: Can't open blockdev
[  405.893052][T13036] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  405.905000][T13036] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  405.913445][T13036] CPU: 1 UID: 0 PID: 13036 Comm: syz.4.2142 Not tainted syzkaller #0 PREEMPT(full) 
[  405.922345][T13040] virtio-fs: tag </dev/rnullb0> not found
[  405.922922][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  405.922939][T13036] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  405.944289][T13036] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  405.964013][T13036] RSP: 0018:ffffc90003c479d8 EFLAGS: 00010206
[  405.970114][T13036] RAX: 0000000000000005 RBX: ffff88802665fb80 RCX: ffff8880307d9e00
[  405.978187][T13036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814c45d000
[  405.986196][T13036] RBP: 0000000000000000 R08: ffff88814c45d12f R09: 1ffff1102988ba25
[  405.994292][T13036] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  406.002281][T13036] R13: dffffc0000000000 R14: ffff88814c45d000 R15: dffffc0000000000
[  406.010267][T13036] FS:  00007f86ea44c6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000
[  406.019205][T13036] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  406.025891][T13036] CR2: 000000110c2f776e CR3: 0000000086c94000 CR4: 00000000003526f0
[  406.033877][T13036] DR0: 0000000000000000 DR1: 000000000000000e DR2: 0000000000000000
[  406.041911][T13036] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  406.049904][T13036] Call Trace:
[  406.053200][T13036]  <TASK>
[  406.056173][T13036]  pcl818_detach+0x66/0xd0
[  406.060608][T13036]  comedi_device_detach_locked+0x175/0x750
[  406.066435][T13036]  comedi_device_attach+0x5d4/0x720
[  406.071646][T13036]  comedi_unlocked_ioctl+0x5ff/0x1020
[  406.077033][T13036]  ? rcu_is_watching+0x15/0xb0
[  406.081806][T13036]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  406.087623][T13036]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  406.093273][T13036]  ? do_futex+0x333/0x420
[  406.097624][T13036]  ? __se_sys_futex+0x36f/0x400
[  406.102497][T13036]  ? __fget_files+0x3a0/0x420
[  406.107183][T13036]  ? __fget_files+0x2a/0x420
[  406.111785][T13036]  ? bpf_lsm_file_ioctl+0x9/0x20
[  406.116733][T13036]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  406.122565][T13036]  __se_sys_ioctl+0xf9/0x170
[  406.127175][T13036]  do_syscall_64+0xfa/0xfa0
[  406.131704][T13036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.137775][T13036]  ? clear_bhb_loop+0x60/0xb0
[  406.142462][T13036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.148359][T13036] RIP: 0033:0x7f86e958ebe9
[  406.152813][T13036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.172451][T13036] RSP: 002b:00007f86ea44c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.180889][T13036] RAX: ffffffffffffffda RBX: 00007f86e97c5fa0 RCX: 00007f86e958ebe9
[  406.188871][T13036] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004
[  406.196924][T13036] RBP: 00007f86e9611e19 R08: 0000000000000000 R09: 0000000000000000
[  406.204901][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.212874][T13036] R13: 00007f86e97c6038 R14: 00007f86e97c5fa0 R15: 00007ffe4dc428e8
[  406.220865][T13036]  </TASK>
[  406.223916][T13036] Modules linked in:
[  406.227839][    C1] vkms_vblank_simulate: vblank timer overrun
[  406.235216][T13036] ---[ end trace 0000000000000000 ]---
[  406.242269][T13036] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  406.262142][T13036] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  406.306144][T13036] RSP: 0018:ffffc90003c479d8 EFLAGS: 00010206
[  406.314512][T13036] RAX: 0000000000000005 RBX: ffff88802665fb80 RCX: ffff8880307d9e00
[  406.323153][T13036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814c45d000
[  406.331165][T13036] RBP: 0000000000000000 R08: ffff88814c45d12f R09: 1ffff1102988ba25
[  406.340712][T13036] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  406.349637][T13036] R13: dffffc0000000000 R14: ffff88814c45d000 R15: dffffc0000000000
[  406.359372][T13036] FS:  00007f86ea44c6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  406.375483][T13036] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  406.382285][T13036] CR2: 000055556f6025c8 CR3: 0000000086c94000 CR4: 00000000003526f0
[  406.390314][T13036] Kernel panic - not syncing: Fatal exception
[  406.396733][T13036] Kernel Offset: disabled
[  406.401061][T13036] Rebooting in 86400 seconds..