last executing test programs:

15m14.564277401s ago: executing program 2 (id=1244):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async)
r2 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac2(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b, 0x32, "5b1b0201d5ab8d39670dddf454a21062f74082ba34e37164351a98fc34ca96723d179537288eeb39a231e223c16501a7312d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000a00140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

15m13.748036769s ago: executing program 2 (id=1250):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

15m13.513069723s ago: executing program 2 (id=1252):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1ae0}], 0x2, 0x60000100, 0x0)

15m12.457140817s ago: executing program 2 (id=1259):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0xa00)

15m12.35684924s ago: executing program 2 (id=1260):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000180)={0x3, 0x9ac})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
setreuid(0x0, 0xee00)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

15m11.421324172s ago: executing program 2 (id=1267):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0x926d0c32df1996bc, 0xf, "69425b6884a669edf2f297598ff5d9"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000580)={0x20, 0x81, 0x1, "df"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, "56ed"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "17"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "ace9"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "df744f"}})

15m10.934500153s ago: executing program 32 (id=1267):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0x926d0c32df1996bc, 0xf, "69425b6884a669edf2f297598ff5d9"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000580)={0x20, 0x81, 0x1, "df"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, "56ed"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "17"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "ace9"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "df744f"}})

10m49.723376129s ago: executing program 3 (id=2477):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000000fef3e0cb0000000000000007000008060002406002000004000480050003002f0000000900010073797a3000000000"], 0x34}}, 0x4000000) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x430a3011}], 0x0, 0x10021, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='syz0\x00', 0x10800, &(0x7f0000000040)={@_ha_fsid={[0x8, 0xf]}, {0x1, 0x7, 0xfff, 0xd3}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7})

10m49.395872435s ago: executing program 3 (id=2478):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0)
read(r0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f00000000c0)={0xe8, 0x1000f4, 0x100000}, 0x20)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000004c0))

10m49.284069627s ago: executing program 3 (id=2479):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x13)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0xfffffffe, 0x0, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x2, 0x0, 0xa, 0xa0}, {@in=@local, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4)
sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20040891)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000), 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4)
sendmmsg(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000100)=@l2={0x1f, 0x2, @any, 0xffff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="a22940c9d6fa6046d2837cc7330f3604810238ab5b3afee89d955b18630fddc63f52a8e7a3e2c1bec98fadb2f9cdc7e78bbb5f2545aa06afc1b7550d5111d8f30ddd0d3112477de0431819916efdefa630a21440", 0x54}], 0x1, &(0x7f0000000a00)=[{0x108, 0x0, 0x8, "a74368b237609100155ece24c05e2d9c08dcbf415dff40183833f6195596bf69a691894f19958a283cf1d5fcd47d1fd5d5110da6e69295564d35259161a97898b1b3003a82539c53ec1dc1a4b0ec5026b5361ec0e7a0c7cd378ec1f7e9cf3f295b386e6bc89cf289c9247a9d9292c1a4d81c197393c780e149a268fc101dc80a76ccaa63fe37579984c5f8f623afcb937a04ca4d3ee433e1fef677c04223727bda103e4fb62fa68cc384800536a496e37fd220675449a29203152b49882af720311cdbcfb34b7e05bb6ee442f596593f833052e2fa0d11c65dc1b3c24c924c152c64efe0ba37e39251f9bebb4c56dbbf5073b0a3d0"}, {0xe0, 0x114, 0x7, "c1f2530786e1c151ecdf8a62649cf11f2d1146af3e7fc9231c80b43ccb4fdbf854ccb50265560e54cff6c11b58a0985d2f889a4f690aa95a8ec644a150b377cfb467ce703ec998eecd04a71f0d50c5dc2aabeb8c641a3efa0e61728e156eb86429b5eb4ab4d580aa4d4ea02fe439d3f0f23f424b395dacb4913f30462a68c29fa443e0b5174a03f7b0f2bf0683ca198d52ab19b4391fc8344a51384705ebea4ee6baa6df0c34206c9f977df829821dc057dd99d2f054356324f724f8cd0888c7c9979a7fca81b92749d734c5d9"}, {0x50, 0x109, 0xff00, "21fdfef16d21ba705de2d3da6891de7e5339d10d39cfa5ac9ee64e683dc5a0f905ff194aab031689420680661257ac8bd8fa9dae4284c95ee648f7ed"}], 0x238}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="50db3af8d0acea92b646d6cda3d08e5587f19820ce41e1733f273cd79db9c46e610fe2c83b16c9583381c69fe617d8c0bf0fd5cad5445e8fe2b4abb12d415a1f1d06aa1350caa189457d6a68121fe8cdb921dda8b28faf4c5e7ca40e0246951b0be6e5d17b2c65b1f80d803d6ab7bf4ee9d26a3193ab9d938c30f3f43a32fd308422d4bbf4a58a3281b726c74b2f52559b6e5359941d8c045958637721c3", 0x9e}, {&(0x7f0000000640)="702267539fe25b8378d720819ff5a6a98c5831caef3c4fccbcf5d56c628d03ce1a542c39e3089ca2b4a229dbe49f1104f0", 0x31}, {&(0x7f0000000740)="f99cdf4c9417a3d1b5e44f982005e3bf60830c54f5aeed5d7c4da674a6a6aa795aa9161c9ac5e97cdf5f151e3b83e799d9396a64cf86e07436a8a3bbd18f77c41f88e3e682fbd932f9dee3257db2b3786fda3fa2c7c18b41a8631ffd27548319ef8e9825e95b6247cf76740f7377a43a130ef77db0b952d03a911ffb47b296a0b4e4df8353dfddf7278ea032e3d7c9f3666530f7accb453de67f680bfe26271db48a11668a4db083952081ee8d154de7abf6a08b3c22b2fbbefd17bdd7ceed702dc45267cc095e0e511b3da48229fa39a151ad70f9efe0704a458536884ebc3943f317bfa86ffc184fa77d6d7223f2b19571f676", 0xf4}], 0x3, &(0x7f0000000c40)=[{0xb8, 0x10b, 0x1, "d144be9fb39397fd9e0f6ee6c44ee786d81a32866525dca05a91ee7e6e6d2084017c11530ff9986193d6e87b260dbcd00634ef1638742b01a9befb66327159dc3c6adc3ac8707274743b5685033c805656ef969a73f6879effadef4a81c6e0a9047f7adf816e2128934f92a57f0822594a360b07df5a000c01d26e94a8b4ec854acc36afe6703151d8e2fb364082438b469a265a2182ad867d1591ca03a60bd5d9"}, {0x50, 0x117, 0x80, "e60dbe932c2a34c85c55df91c458eb92453ad85436ed4ff455dd1a1d68ea1eb711b70ad0d1351b7ef71ed45f822adb89e8edb02a1507f2270565516c1b"}, {0xf0, 0x88, 0x1, "b4d79d914fd7a4b79e4e28fd266a0ace5d9976d24fe64d0b7b91d353fce467ffc3ea52397dc23f586b748a317395fe86e944168c0211e5c20d03e085f5e97490998d073c6240acf1fdf920d3f1e5eca5d7b90578d950926c556178de1f7e64a3551186782cca04f8361c36a383ae3d45ab6bed98cef52d412763b5587529ccdeea6ecf08f63950f862cb7066d0d1f15c3a60211f0df27c428d25efae9cbd8f5aa6daf494b38aad04a1cb6e2c1d2134547c8b69a293447d7c15e5147b6c18bfc41162215209cc71e051cc7f32a7ef8f71033ed16453096893ffa0"}, {0x10, 0x10a, 0x8000}, {0x40, 0x119, 0x7, "430c9750b7374b1e42ef18e55cf55b45d9a66e714f9243777e73b05b7773f06a6fd4598b1f65258b6395efb4"}], 0x248}}, {{&(0x7f0000000ec0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=[{0x38, 0x112, 0x3, "f7bca7bc79f9bd21fb2b63766ed12fca4d1550cd1f06001aa02e65e58cdf410a74ae86335d866eef"}], 0x38}}], 0x4, 0x41)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x9000, 0x6, 0x1, 0x6, 0x0, [{0x10, 0x1, 0xf6, '\x00', 0x5}, {0x0, 0x2, 0x60, '\x00', 0x9c}, {0x6, 0x10, 0x9, '\x00', 0x6}, {0xa3, 0x9, 0x5, '\x00', 0x7}, {0xd, 0x10, 0x3, '\x00', 0x3a}, {0x81, 0x82, 0x3, '\x00', 0x7}, {0x9, 0x0, 0x9a, '\x00', 0x1}, {0x3, 0x7, 0xd, '\x00', 0x7f}, {0x1, 0x0, 0x2, '\x00', 0x4e}, {0x5, 0xfc, 0x7, '\x00', 0x4b}, {0xc, 0xe, 0x3, '\x00', 0x60}, {0x0, 0xba, 0x1, '\x00', 0xc0}, {0xbc, 0x7, 0x4, '\x00', 0x48}, {0x8, 0x8, 0x2, '\x00', 0x2}, {0xec, 0x81, 0xe, '\x00', 0x86}, {0x80, 0x5, 0x4, '\x00', 0x80}, {0xf5, 0x40, 0x1}, {0xf9, 0x5, 0x0, '\x00', 0xe}, {0xfe, 0x0, 0xc4, '\x00', 0x4}, {0x5, 0x6, 0x0, '\x00', 0x7}, {0x8d, 0xab, 0x2, '\x00', 0x1}, {0xff, 0x4, 0xe, '\x00', 0x4e}, {0xa9, 0x8, 0x9, '\x00', 0x4}, {0x5, 0x9, 0x7, '\x00', 0x7}]}})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x2, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

10m48.103566961s ago: executing program 3 (id=2483):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0xc00)

10m47.991674092s ago: executing program 3 (id=2484):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e000905", @ANYRESOCT=0x0], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000100000004ff6943b80000000800003fecf20000000086070000", 0x4000, r3)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x2, 0xfffffffd, 0x0, 0xe3fd331d626e3519, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01012cbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0xc910}, 0x20020000)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000200)=0x7)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r7=>0x0, 0x66, "d4092925e64a27017086593a886bea74dad083f9299f65cc17d8b43f779fe89ca80a54f0c29ca882395772543287cb286a5d127898476fd9920fefeea6c5b91e43742976d2bf43420691d59d96b3d7fac9ee19bf72a84dc5b1a6b67c99efbeb5f7b1e0afe8b6"}, &(0x7f00000000c0)=0x6e)
r8 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb)
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000001640)={@remote, 0x52})
fcntl$addseals(r8, 0x409, 0x4)
ftruncate(r8, 0xffff)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r7, 0x5}, 0x8)

10m47.230760855s ago: executing program 3 (id=2487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)

10m46.892317035s ago: executing program 33 (id=2487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)

5m32.799943234s ago: executing program 5 (id=3825):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="eb318cf18e6560c138b1dc138f7ecb89360f155d476ae230df25bc3f266ff58296e7d4fa64c5d5", 0x27}], 0x2}, 0x48090)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048880}, 0x24040884) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x50, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x16}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4)

5m32.603761361s ago: executing program 5 (id=3827):
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8bac}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xf}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000000380)={0x12a0, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x26278710}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x823c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x71}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x476}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb99b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x487a}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x10d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "a1698004967868d391a50cda722d866c2a3209a723f84a6b2db8acbddc3e8eb79a86edb7b630c4237d48f037612719bab903fb2e4d6361391980b29d7020f106d3fad47539b95147174aae9a72c25b97dc7ade59220c5af449facf04ae5ba067ff7e3a90e14ca8"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "7a92d1f39d3b4e99b29965018b28dfbc8db34fbb5c3e430d26667260f671c22b99b39993357cf718b95de233a4ec1dd0abd5f31d07183f9523dca13d6e988c3e56ff42dba60f731883c3edbcb8e6938d6be371e37b00b908b2ba7d61d2e819fc362428af68a1d89d6f3c8e4b7bfe50409d44d1f417561807f4752dc62f76d1c5f3038ad7092121d7a787891da1fc9d1961da1a5bbd5387f3d21534318c549542cb77e7f5847b2dd57eb557d77e49af2f93b17901e2ef93e06f64761c201bad1636cabc459d5779d19cbcaf6ecca429b2f7e50f912a33074ca4e35ab4db41eced493b76d1ad9309b533cdd78b3f79150a22e81c9c38d6a9dc10dc5b6d7832186f04773c43713b38da09e63d8adec6c0aad8c15e537828ba92ea5cde8a9bc84edef4b4335dafb54b214ceb4f71ea54dc53c52d9dd00119ee42aa6a440b45ef7bc938ebf6242824d3122a6f86a2ec6afa5bab3d755038927800277a8fc2fd5719abe16b65c28248f9e0878cb93857c2e670b12a610838713cd9c8f16bb085f060bc0d7c30642ac92a7d91c37582e38893784a96c5a669879326ee29df4cc4e85945247334c0a65721bb982b556deca81c994f47e258544d33231a7db1993004622f8bf9e455ef6c52f15abf911a154ef446cc3bc636e70050c23bcbcfd64ae7319d04a8534bd3d2e1d71e2e7aa9d298d7a398b0dcdf52b22a811e075f7c981aec42908e124fa6dff9a2267c091319360e57fdbc12c23029f1699f2c63867a1628e8c4927b624ea7751df424755e3c39386ed0fa882e3225ee04729403992085c69eae5d0918ae5a3cfa9d9eb33fda499ed66a9fea745eb90520ba96804571635b74ee7d30138c862b2a9a8d7c1bebdc13a75e3027c200c6562047faedafa91aed7f244abd96853089f537aa24109da3c10c910199377c695e4d5a3300e41b70c6e9788c726bb5dda016e9dbe698335775c5299556afc15f60d375158d285505a453bd78f64bfa2ceba360a8c82d978045ff735dedfcab077347668885c091e713e84a5713cf5708d8f849c5e871d2e70092781f04119f5bc5b3ec536006fe68daa21b80a6615b8087a83775deddc6474a7ff40a90f43f39bf69079d98292fc64d4522b902b01aaafb8e264e9b302ba3c820cdd324a59655f31a004ed851a0292681a946cc35c13cda22d24a204312358fe986cbf941ee58374cd6f80b2c72f3b9a34ea7e35cb097930e06f8205e0c310d33364cd0a93c46191587781718e339bb075c928dd6784ce7a30b966cd804856db3acc21bbfb0737233607bb66aff186df9f88825c25c4f7c89bde0d6ed4f16cc7226eeddaafd2edec891789ee3ef4d0356308f57d8f8ba40e7602f4de5eb3b76567e1f812fbc3605b394cb584e1ef83d537ba3c117c5d685040adc0b6949245f5e7e0ffd7d56eb2fc7212911ac592c2d2406ace0aa68c0175ddf42c14caf1a022aeafdd9faae8ea3a125e90f0ee22876d578d9607f60922b1a2898b8ae78230d1981e8f0eab16b6c3659f524e5175c41cdc8201ef778772d12487bf8abe978ccbf3186261ee7ecbef92931c6b85dfe782077981b9f20e8fa5ec9e00c2462804ab65f61691485a201323b6a7e9b75341ad1c6b1af1f50b2640d39fdd754511ba78b02e4c0c0fb66505a370e308c5dca231c10b6dac91aec6e10d113bb91b39eefd799e2fc847b616f36203d264750aa8bbaf056026931295978550e9389c003f461865751589e4eda88e24edff600d8bb9ba13bb5065f462c3d5eb9dbf6f1df05cf5414db3e812324df380bc027d9100dd7ebf17bb35bf70118a308c24404cef156ba5d5ba10ac9948c726c6b1752536ec0a3e148d3279a320349ee17a78f2828ea3266d50b87d3da92a3ae5949968b0b587095b748f28963b6fb4266f7cc18efb9eccd31be533d2a1a66a882f614c41be73fd7e7819e6f95f66e070f8dffa77e6d2b078d5bd9e05202fb620a3cebafc66c70621184be81302781d69aaa3e3d54e7a5ea57457544cc655c124e787d789c51d2ce1a82fdd68923a4575142c2edb3aae80af7c92251394508dd402d856c413d7f7c3fad1b0f70762f419c32795dddc107c0ff3eb04b3ee0f16d2676c37c0b50f3142ec9a486f1e61f4e26e37c6d8c685dbcfb657ad27a8cb81523db0e5ed8fd5879d7378efeade1bf0ef80f3da58333c6c89c79e239bf939141ecb191072422e51236535c4bb0f5bcc0515653c8a9ecdf241005092c4dc6cfa23c35a0cd7ba38df47d9ae20cd8e46eae18a26df5e98a676e120e33225185e00deec024fa3df566cc789a7e6a9b0a5c27f5311117ef05e519d196104210bbdf7e15f2b6767df6468b87edee04fa7b9bb310825ff9c94755614cc3ef2bb78a1da6bcb206800b1d07c3e2cfbca25614e054be38f04937cdd7f8ed026ebbcfb2546b10af413a0d2b4304aa18b21daf02251501a2aecf23a09fe890c54f1d42abe0aedc1167932fa473b6e050f0145878dec9c177926b070e35b4d42930f5e129f44fda83aea08a9d1e37861552e9e24ba074a7d679fe3671e055fe5299fe34ce1fe55648bac85f738ac832cda23bb215a225cbacb58669ab79376ad5a237d392439bb7522f0e644a28942b6f4b356aac7fab982d14a59dcfb86932ffbe06eb10f02fd5f1b37bcdd47be3226d05353af48da251f38e1650f753c26e826313f70e76c83e48857fd792e62eecf93042465aa9f725a51ade60b05c1b970ec1c8969e2af4fda60e6b513adc0ca93f4d53e2b2cd849e88caf53af7ea3982360de7bcbcbd624bd2fc0b3177a5be7a8c7103b23eb964f91056c0a73833d05f83f8041fab642f51ed52743c9403b06d4f468045c3827a581b4fbb7ad48fcafb5594bc79b58a2c413ef02ebcd9dc4f36d200b918868146929c70624a73a71601a8678b2eeb28e0a12c43bb3cb5ee1f0219620974640fbb18cfa6978a67348a06e218e11ba483c89c8e28c0d75dbfa8010f5b931df2e1697e33bfbb77c10723faa642c6c223c1a287a78beda2f5498fa1c1fd6ce7ab1fe83f139736ae939d175c04a7c5c8cc357954e3fab33836098915cacd1408b3cec81e91112e6bb6b7f733f6257e0915fde52cc6729582eea4dab6791b99ac054c42976a9cf8f6b9a9ef1adc619ed8c3c0bc44c28207eba0c462d401a0a8f119e4b3945ce9ec11169077558ace82be92bdcf56af87d4b6eec4bbbd4d88f37fba5e75b2b1e61cbb91f550735d7bfd0b626a3e2c5e9b5ad88298719ab8f7ebd15a0a4965328827fc93d2ca51a48ed06c6cf291f5d4d77e8d8d77522fb3c5168d53002a834ffb675cdb9e7fe45137a4b55412ebcd7f63d53cfd1d14daf7f67159fa6d45402ef930ce0c1194d232043dbd1241bbed2cd34a5895f98d394d8f24116297687901a5c25f834a47e23abf323a07917531f9dbf7aa385ccfe5fe3f59db6bf10126096a645eb26e745eb801a1a74c4e851a4ea07579934be2677f2c8f2a89c19513416b10653a58d7da748007aa9d3422344ae66acd729ccc5d20119c92656611afd3d8d3ff3e6232e5381498b668e222fb19dcc17ef7447d7085cd15dc6789e374718ee784130a5bca7e151f92a9ae5b1cc01d3757989d9e8fc0b05eb0d8e608c7f754d552c3bc1aa8a79fb4a88fbc551b613db99fa1524c56c2a8400f25d1eba24c947fb7c15dd7d628b8e5c1f2835118d6c338fb5f8b0bcf2bd27c6837cf6a061c3bdeaacbc818696fb47027e427af83315cb60aab5c4766d2ec1cc33e58d3585d8e1ebd00acfa36a0d8bd0f3a423895bdbce1774ea34d614443339649c2a944d791665edec362b2fedf5bfe5f348d8f4fca41c11d5a7083ba4c1e9388b5cdb9da09173681b74688a945eeb3ec2b483d9f2f0e06afcaf998d8e068b2ca857335cb8194fd6a8af8d004e6da69c8dfbaf5aa86110a09c878fcb24d1d4b853101b40c48477735ef78739603d62bd94db5a9e70710d629eec0d5e518c224deec46c6b8b813f10087b87af15f882170942bca4afe40751625911b485090ce8c4251b2054e4ecf3019a7d6244467d2cdf4279b29204b6d7b7c1b245e1b389f20673603fef27fc9f1afff694b28dddfd276fcc9a2771460423d62d0615a85ca312d8ce10c585949dc75adecf4a35888b5d04ea830dc1cab3553dbaefcb766100f65c588902418bc15cd879e99e9f988a9359029a8adcd637bf29d5aa97039566ba475bc897f994ed2b22ca287f70930d544a2fa8c2562ad2f0ef09317cd57504a55a549e2618f9150f7ac33580a1b6f433fb66d11c32bcd5a3a70f7105ec2455ac905c45f0ee5c4797d2630fe53f4699a0b4b4f5582c2dbc31856f8a0262e60ec6f60f714f76c4b2e00c83555ecc35f58012090ac2285868dcde4d98b8ef1ee888243fea31efd7fd8480bc930e107f9b0af3e6a8ec6cc4614ad892da43921ce5bb069992a11a45e78d7479a3a7dade24e7c83f62036491767903fc019a9d9b6c5db3ef31e77c9d71d5de50a70150315878749ed1ec5f8fb9c28cb709534b37d5aa1729a3caf93de090c290366e1795894617d9b4cc9207748219db37115523158133cad648657992b945c0c0e19981d7d1b28a6183f8a44aa1a18ff8ea3bb4789a99d0089abe363592a45916cd4dd929383ea6305c4d8dd349d58f0778ba16431ed848efe78220990bcec6ed76c5c2179e858548ea1cf031ee900e07c1de77d1e68c426596cb8439309a0ff3d8ed91b8c34ac002723fe1b152799a116be9f8de5cc37ec114120f010869de9bf66f7bacd4378ed84b52807475145bd164d2c8c2ab1644bb3d63e02368c211f317b65fa1c115950a03ae7cd4d39ad2cb2fda28cce94433caf34274a9e200a311fa2cb4a4af0a588f25eeddffdaf792e5a01e39058d8394e3b6d94281444fff0b5fc078072823d9cba871d0e5b2431881f9e809ac0ca647c8ecc921227478ae8dc4ef525a754ddde2479e69ad68e65bd6794e3c94b09fc34fe728967ba58070da3e62c7118d751cddca55718b634d84149d2e5edf7590c7b871d81eeaabc3cf1da71144a9ac1162c3bccdb9dfc2e1796df10c2c8c5eea4e2d427f0a1b54b8b88d8864dbcc1c162514bbb19e752849db8cd95df2371317e8e61b6b44e12c15bf1ab312de2cd9c3949af3d0f7a2a807eae4782ab5283d207d8fc6a79a2846d8143110bb6c7987600b9cd75b2011a8c84c14660db516a7d096e480c8615ce166e0319765dfa8eee25f05e34bab51783f996bf109053cd8eef49a6f0ddc6280878a90f62fa93409643c71508b4a8d69d72a42ad6cb6330db1b67ad5fe695e6a2bf6b06cd81cf1743c185b2d8e3faa26708a391b505ba00e647fb56ee5004f8bb98d5d26ba96b5094f71af9f76d258f86c89c42566486128b728d7c6f836025e0373f22c22b7a4e75f45844a895c90f4770ad072da26c5dd76f7bb292650732583b25af772e3fe3ee94bd215e6c9abcce4b1a2c93ced7665fc2ebfc2f1e72129715098caa2772a75c9484533a93e9ec6bb2d37d4c965ecf522a38c1d246a03717ef551ba4a3243adc27967acb6d988b854efe61f988d52f5c9c592586b9450bbb8bc2501f7b6786167d309146289c3d68b784c1b80442c6c6db37327f24cb3bb56cb9fcb7cb5d97457c74fecff724176ec68ff73bef2444a4e2f79d530bea35f8bda31f8fd1e7748a2bbba2942d33ce93cf7269a85a4f645a7f70b9da23821aad9827455c0050aba66e395944ce4eb371e9f3d6b6fb01438ae332888e1f816a8f777d9949d6d6084f272d149a7ede85"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4ac03bb693f4992d3b969716a3b993417a49df22932faac526f3c4dcee015804e6aeb72c"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b9}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

5m32.523325584s ago: executing program 5 (id=3829):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m31.399034597s ago: executing program 5 (id=3836):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
fallocate(0xffffffffffffffff, 0x0, 0x1, 0x1001f0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0d0f0808820400000f32c4c15564efb9050000000f01d966ba410066ed0fa80f01c40fc70036f4c4e2fd40db6681ba6100003e9f0000ef", 0x37}], 0x1, 0xc, 0x0, 0x0)

5m30.8483859s ago: executing program 5 (id=3839):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getpeername(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22c01)
r2 = socket(0x11, 0x3, 0xd)
accept4$unix(r2, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[])
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

5m27.547892643s ago: executing program 5 (id=3849):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8000000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000003c80)=0x1ff, 0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0xfffffffd, 0x80, 0x0, 'queue0\x00'})
syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003b0009000000a66338bd3ed0e2cf0000040000000800010104001080"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
unshare(0x60000000)

5m11.079517856s ago: executing program 34 (id=3849):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8000000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000003c80)=0x1ff, 0x80000001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0xfffffffd, 0x80, 0x0, 'queue0\x00'})
syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003b0009000000a66338bd3ed0e2cf0000040000000800010104001080"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
unshare(0x60000000)

4m46.456905992s ago: executing program 1 (id=3926):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffffa, 0x8, 0x5, 0x9, 0x8, 0x3, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0x4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f63, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x7, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x85, 0x9, 0x0, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x6, 0xffffffff, 0x4, 0x4], [0x9, 0x3, 0x6, 0x9, 0x0, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0xfffffff8, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0x3, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x50, 0x9, 0x3, 0x3, 0xa, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x2, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7ffffffd, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xb, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1d, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000480)=[{&(0x7f0000000100)="934fdf8411a1011a8666372db27e52", 0xf}, {&(0x7f0000000140)="1fd6c8a3f0042f21d537148a6c", 0xd}, {&(0x7f0000000280)="9fadfa56790542f1d92c8be173209fe2d8f99ce8dbf7fc67d1fc5c8e293cb65475dad4e1dea11c703b7a60d37368c24ac2a58ac674dc956e879142208afa0ecfca53e8db194c8ee74ce54110fac6b2c0bd99000741ec0a5e46fb77e441b69a0abfb18f1efb4220d62e853b8f9a2653da799209009b71d449a04ca31555c18b65c0891c63238edef142f4076b166a895a1d2cade508635634fc7f62e85b657c639092ace123e87d2f4983c98f0c929b1084c5f01860851d32c5cac06d365c0d66720ad17b0334e59153e4085193dc62b6979e9959380f5d1abb03c5f47c4e87f66b687d581b48876fcfd6", 0xea}, {&(0x7f0000000380)="934380cd1ef32ec247ce8817751fc590b509cd728aaaf31f105d1ba74bc8bfaa49f0a5dbce5a2484f400e883b03a19360ed61f9e12dd89d4ad569fe252b2a36903f2cc63c470e0246cb81bfe", 0x4c}, {&(0x7f0000000400)="b5261b531d338ce2f626b3ac1af6d16bad7f672ed3067202cd30026bcb23de430b624dfad2c14aa34f1b66cfcaec4e83a051bb76e857a42d7ea97b025bf85cd06c2ddc8da302fd8fe55fdffd61da75a64949e1ecf6e6f93282cbf30dc37bf4d1", 0x60}], 0x5, 0x10000, 0x0, 0x11, 0x81, 0x7, 0x2, 0x800})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4m44.854859952s ago: executing program 1 (id=3929):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0xf0ffffff, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

4m44.734371634s ago: executing program 1 (id=3930):
r0 = socket(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d2", 0x1, 0xfffffffffffffffe)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x80805)
writev(r0, &(0x7f00000001c0), 0x0)
syz_usb_connect(0x5, 0x27, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7)

4m43.853767517s ago: executing program 1 (id=3933):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x120000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
socket(0x2b, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r3, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0xffffffffffffff90, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xc0000, 0x0, 0x10]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}]}, 0x58}}, 0x4004094)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

4m43.705000966s ago: executing program 1 (id=3935):
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) (async)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd4, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x12, {0x9, 0x21, 0x6, 0xf0, 0x1, {0x22, 0x8f0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xa6, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xfa, 0x3, 0x5, 0x10, 0xf2}, 0xd1, &(0x7f0000000080)={0x5, 0xf, 0xd1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x3, 0xf0f, 0x2db, [0xff0000, 0x3f0f, 0xc0, 0x3fc0, 0xc000]}, @generic={0xa9, 0x10, 0x1, "1c546ebe5d2bae3f683c071eb6ec5100773735efe03ccdb3f9cb8f7ae868de256a6792d3d0b2edc3e1af7f6fcb563e9f967ae2a573cce18f7f7ee9f752dbba5bd0677f5de61f9ab853d0125ac64c0c3c36957c188a4506ae7a43d8f0c3657aa5aee0d9df4ad43c8dc742a660fda4917bf95061a65c5931c9938a1d4fbc060e554d5cdf5e002cd12633a8a2ea1ef2cf4f311df6732dab604ad68fffc947e0d0dbf8ead5edeebb"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x22, &(0x7f0000000200)=@string={0x22, 0x3, "e92a11c64fa6c4117b33d6e74d9560ccdab3db019ab2556f025524014280041d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x447}}]})
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x60, 0x7d2e08f18ae44f0f, 0xd, {0xd, 0x1, "99bfa84d751ef6b8794c69"}}, &(0x7f0000000400)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "28fb365e539fffd574f634a57dd9224331a9209d6ecb4e34e9cfa4b72edc3a3b28390e26268dfdf78ba0d48b658312583820e96a8a76fd1948a9e5c58296a4e8fc247de20555e9d0fa5c6c6299db12f9e0bf65525108ee0cc6a15f44ae21a74ff2063cefb79527bb3266b2e703e00fe11fc354d2a8695d270c81796b953de5e4bf8c6f425811725c2077ff7a1de4118bab00e6fe50c069d748ab5b2f0be7bb77c4456837a1d3f4fa2521195f703273a3b2c27da6501c84e06c179157b38354375ca17e4878d3da25130e7f"}}, &(0x7f0000000500)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x5, 0x9df5}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x46, 0xe4, 0x8, 0x6, "e2901058", "51bdaf28"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2d, 0x18, 0x40, 0x33, 0x5, 0xfffd, 0x3ff}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x40, 0x14, 0xd3, "a89144be25d8181359b39952492fcfa0a21f0501b99b4189c722d38b0ee2c6d7efdc7b76d73ba2320826a2778ac3c43721b337e9db1004d35525f00d4c631d738fdc1065436e7b3d4b875a1ba707c48a2b04fe3aacb0396ec0aab0959c50a3903c732f9b36a0851ebef1ec2cc305581fd6d819af0efdbbd4976609d1b017baa2aa199e0783c8fe2c711a0258d3077138af5837dc75e1df8d1ef1a996a3a28b9b4a2981b549eca4c267a816f21da7248126150ba62abe42056fd39666698c3d8390abf3c474a77a97d551685856851153378700"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x80, [0xf]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0xb, 0x2, "9033"}, &(0x7f00000008c0)={0x40, 0xf, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "b447"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x89}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x10}})

4m42.473224267s ago: executing program 1 (id=3938):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
sendto$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

4m42.098121221s ago: executing program 35 (id=3938):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
sendto$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

4m17.941875729s ago: executing program 7 (id=3940):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x2000000)

4m17.740388411s ago: executing program 7 (id=4007):
r0 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001280)={&(0x7f00000001c0)=[{0x0, 0x8011, 0xffff, 0x0}], 0x1})

4m17.067075756s ago: executing program 7 (id=4009):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x4a00, 0xff, @remote, 0x48}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf}, 0x2000000)

4m16.499219458s ago: executing program 36 (id=4009):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x4a00, 0xff, @remote, 0x48}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf}, 0x2000000)

2m34.849218261s ago: executing program 6 (id=4455):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x55af)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r3 = memfd_secret(0x0)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000140)=0x6, 0x4)
timerfd_gettime(r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000200)=0x2c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2m33.954629521s ago: executing program 6 (id=4460):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xe6, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x99, {0x99, 0x5, "8a8ebb3a54df85a00300dd38b81ed1b2c7896f3d3f192efe45ebc151728a402a6374ca5fafd772531a08947badaddc832ed524b71edddc06a5e082d507f83ede5ef2c3292e5278464711c8fc0a70d37d0c43ec7d0eb8cd3f2ea5f5353fa1cac16a45af874315d1eec0713486fcc3348e43553fc2d89b047aa29092101114e5692f1a7ff3be318f19c276fc3acf4c50ad2081a50c02d3ad"}}, &(0x7f0000000280)={0x0, 0x3, 0x19, @string={0x19, 0x3, "66c95a310dced389fdd3e7fa72383b7648d000080b57c8"}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x4, 0x5, "b36ba7a1", "af87a2af"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x2, 0x0, 0x6, 0x7fff, 0xcfb3}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x6, 0xfe, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x4}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf00]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000680)={0x40, 0xb, 0x2, "a38d"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "5b14"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x90}})

2m30.712805729s ago: executing program 6 (id=4476):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x140})
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r2 = socket(0x2c, 0x6, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0)

2m29.52775359s ago: executing program 6 (id=4479):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getuid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200002, &(0x7f0000002540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'm'}}, {@fscache}, {@debug={'debug', 0x3d, 0x8}}, {@dfltuid={'dfltuid', 0x3d, r2}}], [{@uid_gt={'uid>', r3}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '%)%*{@'}}, {@euid_eq={'euid', 0x3d, r4}}, {@permit_directio}]}})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

2m28.463793464s ago: executing program 6 (id=4484):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000a40000000000a01"], 0x34}, 0x1, 0x2000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x50)
recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xf338}], 0x1, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000000)=r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x5, 0x7fff0003}]})

2m27.159997673s ago: executing program 6 (id=4488):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="f20c04000000ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003600)={0x84, &(0x7f0000003000)={0x0, 0x15, 0x4, "7843d984"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x20, 0x23, 0x4d, {0x4d, 0xa, "46d21ae9c12eef743209242811719021b6b33a05bb41b4b68e15ca151456498b01b6b329b9e3e1b081b917778142735aa3efb488bb5758c2a65532c241fe58568fc5177e8ffb2553d6778b"}}, &(0x7f00000007c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "1a631cadcfda7b5110d2ea5a014e086111bd7087a7e510dcb571fcfc48fe5bb270a5c83167ea8c9ceb67275ff0f6955f30ae96e8c07eb10e69694cbe07dd04b410d38318a22a13247d9a66ddb9f29a6ecc2757a48506771304a4fda539ce6c9e073ab431bebaaccfd2c32ab9341f2d41e3ee01303695229fb29ebd1e783ce5851c018ade64dea844b6e2ff5b24e9ab29b85f44ba5f8658df9ed47a248668d410bd72a7c00127ee0204c6ef515a6615293f03fbaeb8d863b5622f7267a8b585469d00fecf0caf7405e7e48ba33063c99c60c90dbadd2c13cbf1ace0932fa05f020d898e813ca396b06d2c3268e7441bb89b163d"}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x40, 0xf, 0xca, "1654e0bc0c2ab5f5fd9e21c83d611660558274dbc8f76d15ca4509380e627f72647db97552abd8fc884f68f37fe8357d7c5968a75d2073a8e169e06f0cec751416aacae8651d3f3ed147e763cb709e69ba817056d3af7c8f0a9d4c02f7cad1825b15127f08eb551ad1a79eb6c53b90babf1cdd5eb2bce4616b3c1b9797014d203714096b6271b3cbc2569f2d08931c82a9cc459d2f606bea202cc616c274d60958feaaf8d3a34183d375b228f6c929851c8b4a81bc9342920133273a2862e4bc6352efddf882872a5f94"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0xc0, 0x5, 0x4, "6f458dea"}, &(0x7f0000000b40)={0x40, 0x5, 0x3, "579e50"}})

2m12.021210747s ago: executing program 37 (id=4488):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="f20c04000000ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003600)={0x84, &(0x7f0000003000)={0x0, 0x15, 0x4, "7843d984"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x20, 0x23, 0x4d, {0x4d, 0xa, "46d21ae9c12eef743209242811719021b6b33a05bb41b4b68e15ca151456498b01b6b329b9e3e1b081b917778142735aa3efb488bb5758c2a65532c241fe58568fc5177e8ffb2553d6778b"}}, &(0x7f00000007c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "1a631cadcfda7b5110d2ea5a014e086111bd7087a7e510dcb571fcfc48fe5bb270a5c83167ea8c9ceb67275ff0f6955f30ae96e8c07eb10e69694cbe07dd04b410d38318a22a13247d9a66ddb9f29a6ecc2757a48506771304a4fda539ce6c9e073ab431bebaaccfd2c32ab9341f2d41e3ee01303695229fb29ebd1e783ce5851c018ade64dea844b6e2ff5b24e9ab29b85f44ba5f8658df9ed47a248668d410bd72a7c00127ee0204c6ef515a6615293f03fbaeb8d863b5622f7267a8b585469d00fecf0caf7405e7e48ba33063c99c60c90dbadd2c13cbf1ace0932fa05f020d898e813ca396b06d2c3268e7441bb89b163d"}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x40, 0xf, 0xca, "1654e0bc0c2ab5f5fd9e21c83d611660558274dbc8f76d15ca4509380e627f72647db97552abd8fc884f68f37fe8357d7c5968a75d2073a8e169e06f0cec751416aacae8651d3f3ed147e763cb709e69ba817056d3af7c8f0a9d4c02f7cad1825b15127f08eb551ad1a79eb6c53b90babf1cdd5eb2bce4616b3c1b9797014d203714096b6271b3cbc2569f2d08931c82a9cc459d2f606bea202cc616c274d60958feaaf8d3a34183d375b228f6c929851c8b4a81bc9342920133273a2862e4bc6352efddf882872a5f94"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0xc0, 0x5, 0x4, "6f458dea"}, &(0x7f0000000b40)={0x40, 0x5, 0x3, "579e50"}})

6.743945928s ago: executing program 8 (id=5106):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000000000008ec13060000000000000109022400010000200209040000090300000009210b00020122250009058103"], 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6erspan0\x00', @random="fd098089812b"})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200629000000a94b9f7c68ab79826e311a48f804a661552fdfc565b0b0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.335872632s ago: executing program 4 (id=5113):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0)
r1 = timerfd_create(0x8, 0x80800)
socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080))
ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000680)=0x200)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb)
recvfrom(r0, &(0x7f0000000040)=""/197, 0xc5, 0x1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80)

4.389277442s ago: executing program 0 (id=5115):
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sysinfo(&(0x7f0000000000)=""/196)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"})
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xfffffffffffffffc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000080)="1da648e31f19242ab5d81adafb21d7324deaa0e03fec793a07c26ef05b1466fd22206619edca228ee46d130f57964ed3a81106dc69076a56308192a882cf1aa5176ec7434ba0dd381e4bb14142a330657d4d98eb636e823e6f09b6f75570120aa49a55d96e9e7f91c57651d040911e5184d54caeacd4fe172d1b7d50d707fd72aeefbef028c81bcea060a0c501058c390180f8b9cbe2cb278414ce98304333a64e2df7c50f0627ed40dd479cc0", 0xad, 0xfffffffffffffffe)

4.223714758s ago: executing program 4 (id=5116):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0xb, 0x7e, {0x7e, 0x0, "e77b60b79c24037e9eed6444346a447996d8a521e0319515ff5c15b22783bc16dc0b17682568b0e16aebf810dbf4ff4398cd3d69b664416adc185d62ea929e2a458a242adba543d2f74bd2bfeddde13c935b567bdda00a61da827c58f1a34cb62c54dbd7ca08ec78c1b54763bf9e5f73237362ef3a7f05dc1a46549b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "7d6e317f4a60ec6d2b1efc692c689e071a73db634d0093e6215821a41f2b3566c2"}}, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_012={0x1, 0x2, 0x8, "cd"}, @global=@item_4={0x3, 0x1, 0x8, "54898440"}, @local=@item_4={0x3, 0x2, 0x2, "49630625"}, @local=@item_4={0x3, 0x2, 0xa, "a94ccf14"}, @local=@item_4={0x3, 0x2, 0x1, "1e868f44"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x42c}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x20, 0x14, 0xe2, "7bdbf1bd2b24e888733a428cba9a70d7637339e92953c92be5517eb3343818a1db4e825e3e32327a63e18f5c0642a78d7399a376ddaca378f54b52ecf88e8f22ad6902b0550100000055129fe7a2e0922c1e439013c3a599ab4b1436cfb89df749ab84562459a05cb0376f80d4cb68b749ee2d4fec9715221798ee315ecf90601cf9079363feacbde432ab9ac2cb5915abb36435111d2eb7f34e41e8057953090eddaff442eb45d8791ee33c9073dd0c383834513390466afedebfb05ac8e56dd72f069364f010f7710da0bbe92af02b4fa06b00"/226}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x38, "9e3215d9ab615f2fde408492054efe4a67ab5bad8b0c7a241c677a223d96a9fc472080f969e53d7b6f7c292ccfc3f7ebed724bedb7672fc1"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0x2, "e0cd"}, 0x0, 0x0, 0x0, 0x0})

3.442617664s ago: executing program 8 (id=5117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x4000009a, 0x0, 0x0})

3.055395567s ago: executing program 9 (id=5118):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @netrom, @default, @rose, @null, @default, @default, @null]}, &(0x7f0000000080)=0x48)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x408002, 0x0)
r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = memfd_create(&(0x7f0000000200)='!%:\'$\x00', 0x0)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x6aac42, 0x0)
ppoll(&(0x7f0000000280)=[{r0, 0x1940}, {r1, 0x12}, {r2, 0x208}, {r3, 0x401}, {0xffffffffffffffff, 0x20}, {r4, 0x202}, {r5, 0x200}, {r6, 0x4149}, {r7, 0x8}], 0x9, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x9]}, 0x8)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000380)={'xfrm0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r9=>r3, {0x2}}, './file0\x00'})
ioctl$NILFS_IOCTL_SYNC(r7, 0x80086e8a, &(0x7f0000000400))
ioctl$KDSETMODE(r9, 0x4b3a, 0x1)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f00000004c0)={r4, r0, 0x1, 0x47, &(0x7f0000000440)="c72cc80ebd3a1bd556247a1a7e19b28a95709252f3d5e037d56c6859476bcb36be4f79e2f5397e974582692ae4334eb71b38841ed78c6dfbd4a5cb12dc4e7ce5319c3b551eeeac", 0x5, 0x1c, 0x4, 0x4, 0xd, 0x1, 0x5, 'syz1\x00'})
recvfrom$inet_nvme(r9, &(0x7f0000000580)=""/74, 0x4a, 0x10000, &(0x7f0000000600)=@generic={0x18, "5175b0778db4e7c5fb80db77e79d920e62f4840b4b23091ef8269ae962ffff7d1d5a26b44c8f30ef32a642d8b830f8921364987703106f051a82faf136920d5c233f5188e789e145a218a88e697abb5a4fd9aaaef8a1829dc3a6d2b70ca7730a5b24c08e349e42a9259299bce757c2a1716ad92de0c69da5acad04c031f4"}, 0x80)
r10 = syz_open_dev$dri(&(0x7f0000000680), 0xb, 0x280100)
ioctl$DRM_IOCTL_CONTROL(r10, 0x40086414, &(0x7f00000006c0)={0x1, 0x8000})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000700)={0x0, @raw_data="3b137b2f8399321e972ad475c2eb5832d525c4b965ec70677d00b71523669fc7c1bfc7680cd9350e53fcd78b9571193ebc8b35385575658624a05f1be843a1f3f9f90483f1a996d8c4c0350f22460df63989488e5ae17090951896077b92b95f034e1a82b3e76c62219f6b9b31ed6d567a633012587fafcfca7c46c8af0c17efadf88237b33616e43118a228504b033a5246ead9444333b5ed371f11c3b6c4e932ccf03f85766ef6e552a95253d38708984ac5e409dce47fb6b2f7f4a210abd1c91f03004ea083b1"})
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000800)=0x8)
r11 = syz_open_dev$rtc(&(0x7f0000000840), 0x80, 0x200000)
ioctl$FIONCLEX(r11, 0x5450)
r12 = syz_io_uring_setup(0x347, &(0x7f0000000d40)={0x0, 0x6c1a, 0x40, 0x1, 0x13a}, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40))
sendmsg$unix(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="6b92c64280c0cb605fe7a6e80e9197417cacf0a3dd6bef81e0f9d0f38cf65b3b0b301b0732334298848836f210092db79ba8e66f68860c909e0b4377eb89e31846be0cd652ffd7db321319df23bbffe9a70f04bd263e5b894875d71950330c8447aab08b8e0a9f8960930bdae208ce1e79ba8d65", 0x74}, {&(0x7f0000000900)="072fa7756414e61a1afa7aef5fcd19ba375d80ef4b1965bbb5f18e993a78058b171831058995c13a4478d0f7c7701afc5d0c88f3b59ed75e1faa12b743eb7ef33ee47f34cf511a565c3a02b951aa432659b4aac5d43e1cafd47bdbfa274a132d71648cfc9b9ebbc0d540749803e6e2882b042a35d6f6b32a100755f0e4dbfce56beb4c55633470e7509d321345d4c64ba7a2950b43e2e82a723a083772ef8480fc556202b2c1de751f9547497e288ee11c5d30b2970ec4066b6c53ba4eca93ca6c6ab9016ec9adda5fb52648c257c18c87d2d0d6b1", 0xd5}, {&(0x7f0000000a00)="df5359393b59eb32f5735ce78fa10e1331bfccd4bd2312afc307492ded3db6d2d44607711998673faedd5d6b967053220cdb05f0c5ba5b2e5c2ccf06904c58870d13f47e725177af92fb1db5ff6d5f73b1ee7ad7289459751cac31c80d04277a9948c6ea797b58875f7eabf38fe68c45b4990e42ca9b6a2dc30960c5fc7e5e32460a3284f004e15a0b8acd4cee25891fea27c2", 0x93}, {&(0x7f0000000ac0)="8d46e35f9bab0e5e557fa9080d64d7895d517e1057d4882aca3a33a9521ad4eeb8e165229d444906441cb919bc361494754afddb636f8e7bb253956747d050af2b56ff9ccdc16beab0950872f6158378ea1850f8e44dbb13272ad9be8d88e47d29d6a4b771c9b2c7e4adcbc9", 0x6c}, {&(0x7f0000000b40)="51170d5ff0a448e5ae61eefe72199cbafb244c92dd1944f621395090deb06fb229139490bcd73dbae498f2dd04610fa44dda00c43613507ba09d0bbeb4c175584cc7ebcc676f47f1193071cdcb20cad0722852e2a515fdd9ba6c491ac1f338fd66f0e3be92844a194011acc244f95278831ae1e8f2", 0x75}, {&(0x7f0000000bc0)="97b4aabf6f2774289271725c6a7ec5dae298782dc0f992520abe18b78b7a186553e03e1078c1fc3dd8f7a55f15652541cf9999f879ffd4d5f286ba5d07040c725f88e9e54561950652e1f6c5e4566c96645da057bbd20ee057bacefea7a038adaa2b87ce70616e1b63dc9dbb8c99686027aa85d67c0af9fc6501161c7a2dbb446f3d37322eaf7264e16295c1f00cd5fe23af344bfddd193e3b9cbfaff4fbe82aced8d32806aa8c8c3f7c21a1f4e0cc06d59759e5d7272e97410a2ff1c06f6f4b7fea035f31bfb0da3718476a7e388119297afdc0e4fd", 0xd6}], 0x6, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [r12]}}], 0x18, 0x90}, 0x800)
ioctl$KDGKBENT(r9, 0x4b46, &(0x7f0000000f00)={0x73, 0x8, 0x7})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, <r13=>r11}, './file0/file0\x00'})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2)
sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, r14, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10)
dup(r10)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r13, 0xc01864b1, &(0x7f0000001200)={0x0, 0x2, 0x3, 0x5, &(0x7f00000011c0)=[{0x4, 0x6, 0x8, 0xc}, {0x1, 0x4, 0x0, 0x2}, {0x9, 0x8000, 0x6, 0x4}, {0x5, 0xc2, 0x100, 0x84}, {0x9, 0x8, 0x8, 0x4}]})

2.991077362s ago: executing program 8 (id=5119):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701"], 0x2c}}, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000500), &(0x7f00000000c0)=0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x8, 0xbbf, 0x4a732f64, 0x4, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc721, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x4000001, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x4, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0xffffffff, 0x200b398, 0x400080, 0x1, 0x4, 0x1f, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff82, 0x400, 0x6, 0x4c2336d3, 0x4, 0x993, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x8, 0x2e6bf783, 0x80000001, 0x40005, 0x5, 0x491, 0x6, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x5, 0x6, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x7, 0xc7, 0xfbf, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x7ff, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x83, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x4, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x403, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x80000, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8000000000008], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x5, 0x0, [{}, {}, {}, {}, {}]}}})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x700, 0x7, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x800, 0x1, {0x0}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x800})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="c4c17c13adb2ff0000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x3d}], 0x1, 0xf, 0x0, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC(r9, 0x3a, 0xcd, 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_REINJECT_CONTROL(r11, 0xae71, 0xfffffffffffffffe)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)

2.524007395s ago: executing program 9 (id=5120):
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8)

2.30996599s ago: executing program 9 (id=5121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0xfd7f)

1.943551715s ago: executing program 9 (id=5122):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x6000000)

1.811994803s ago: executing program 9 (id=5123):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT=r2])

1.751497891s ago: executing program 4 (id=5124):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffffa, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000003c80), 0x8)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="100000001000090500007518e6ab"], 0x10}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000"], 0x70}}, 0x0)
sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0)

1.587328426s ago: executing program 8 (id=5125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc42009", 0x4}], 0x4}, 0x20008b88)

1.318167594s ago: executing program 8 (id=5126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0xbfffd000, 0x4002000000}], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x459, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
chmod(&(0x7f0000000040)='.\x00', 0x35e)

1.280554585s ago: executing program 4 (id=5127):
socket$rds(0x15, 0x5, 0x0) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/188, 0xbc}], 0x2, &(0x7f0000000500)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000200)=""/87, 0x57}, &(0x7f0000000280), 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x9}, {&(0x7f00000002c0)=""/180, 0xb4}, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000400)=""/178, 0xb2}], 0x2, 0x21, 0xffffffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x401}], 0xd8}, 0x8000)
getsockname(r0, &(0x7f0000000640)=@ax25={{0x3, @default}, [@rose, @netrom, @netrom, @remote, @bcast, @null, @default, @rose]}, &(0x7f00000006c0)=0x80)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, r0, 0x82455000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, r0, 0x82455000)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) (async)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000740))
r2 = socket(0x9, 0x800, 0x5)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000780))
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000007c0)=0x1) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000007c0)=0x1)
bind$bt_l2cap(r2, &(0x7f0000000800)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) (async)
bind$bt_l2cap(r2, &(0x7f0000000800)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe)
syz_emit_vhci(&(0x7f0000000840)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xee}, "d316e14a602b2c1b7edbdaddf7829cc51fab42e3f1ac60e8897314d0dec9b2af4cb38b6427ed7d464f631d620fcf4d86e5ba8fcd6b5a45a379b5cf2e61a81a73a2613a26bedb7f53f7ef622b847fd5efda2adee030f7a98d13cdd6c6f31fc96d317670f23d6d4e713d45fb21d939645da3020962421485038766153be8cc2006fcd6f2224c128a87850aab304e63b4ef9f5c46e5a284388de1b660fc3e98eb460f1144ac790e5356e877ef6cf5b8871ba0d0879a18dfd4fd0413422ee55626ce9884ad65f93568f9c4d1d0cc880a3b343045dbdc6416d1589dc00dcb34d88a5678b4bd26cfde39e46e526f2b70c7"}, 0xf2)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000001e80)={&(0x7f0000001dc0)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="0f5acd5885de06f6ee27aae35f2a28233265972989c2f32956fa1dc677950155fa1db7da3292f966cf17bc66ce86a00bdd2227230b97d68df4e5aa57314ce6678682e551eaf608da05e830c3dd282ce9", 0x50}, {&(0x7f00000019c0)="63085625db871b34655cfce99b5993b2364ec63d7f336a2826331d4a0e2cf8fbce7cc33b7342611b9318a70720e1cea0c14336080c93c3c86e2e8fb9af567691cebd7a59ae23132b20ae84236a933c2ad688632ba1ef8fd8c73e20fb6a68564e27c58ecb54708f6d98db73531402e3f6fffb61a8989e6fdfbaf1a4bac5d22e8ed03b468135a663d7b4e84abf1ed88de9fec0e7d81eb4737844e118159797293cf0a7390567d976213df12c80a667e5ecf195b9827bee778bcae727c864f47172af5b6ceeb3c81c314d5afb635427e7c5654194548edd6dd1b6fe5017afbf1f80aceaa1132a8e1c78d7", 0xe9}, {&(0x7f0000001ac0)="a40eb7a6cfd6023485947480518ee30d83132cb7b84fb7f4c50bb19a0e978b5da1a6bbb4925012e4c2da56bbf4cbb249d3dc16bf2133efaf5e9ed11e936182a499a94387", 0x44}, {&(0x7f0000001b40)="34266dd658dc583566131ac975522ff5a05879191de3fe58ad999b60de238cc2e99c3d475fa772c8d32ddd6a26d364708f8742d95939c9dcad5ef86d8ed79a00328c8c58a8ef394339ab6f22769a461011821ecef97ca340936d24fc16c469d36251c3a8819ea72a720552fa188fc5097126f342521f186b27f50175ac4e935080ceb04288c7bcb155a303a91a288a38978e7844e429e87b1d05a9a91fe41c5718fe0e120a2aa7167de82dcdec9d24726dbb36d9e5318f8785", 0xb9}, {&(0x7f0000001c00)="7020eb59ae561f2f61c634362af36fb95b7529a5c4f132e14b6c28a8331cdee0843d9656aee2ecb594f938c0ae90063de43d54433b3abcf71d3289cd0744f193f1f2b42c557e755a38ec1a018d82bcd1679201dd46280b172e8a283f9cec96ff1b604938cfa641a9dcfb0b2a4239f384c4e77ab19e70b771adbba35c642dc090a0759aa1efc3f26aff8c5713eada56f33b0a9bd57474eea7ebc19740631b7a10e3bad14f1ca546e73d280b5df0eae3b6cbd43fc2818565eec83023cb9405417dd0a0f3f1ab60b6cc", 0xc8}, {&(0x7f0000001d00)="13d5904c4f9d72dd5fa5f15d1ddb643a10c55887faa9158932d135fe58fed6cda340f034387a5b2a9e8cbe62e6c6f2756634557516cbac84fd90222eaf1ec649", 0x40}, {&(0x7f0000001d40)="34f8b81859f1c188cc416c52f3b4dc92d95baaf02eac21b369bdab32", 0x1c}, {&(0x7f0000001d80)="288e508fe0aa850977fe1e03ef", 0xd}], 0x9, 0x1, 0x0, 0x6ec, 0x58, 0xfff, 0xa})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001f00), 0x424400, 0x0)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000001f40))
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001f80)) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001f80))
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001fc0)=""/255)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000020c0))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8c800010}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x5c, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x89, 0x3b}}}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x6}}, @dsss={0x3, 0x1, 0xb1}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x9a, @device_a, 0x4, 0x1, 0x5}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) (async)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8c800010}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x5c, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x89, 0x3b}}}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x6}}, @dsss={0x3, 0x1, 0xb1}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x9a, @device_a, 0x4, 0x1, 0x5}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000002300))
syz_emit_vhci(&(0x7f0000002340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x5c}, @l2cap_cid_signaling={{0x58}, [@l2cap_move_chan_rsp={{0xf, 0x5c, 0x4}, {0x0, 0x4afb}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x7, 0x7}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x8, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x1000}}, @l2cap_disconn_rsp={{0x7, 0xfa, 0x4}, {0xffff, 0x1ff}}, @l2cap_info_req={{0xa, 0xf4, 0x2}, {0xfffe}}, @l2cap_conf_rsp={{0x5, 0x7, 0x28}, {0x140, 0x1, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x7, 0x101, 0x8, 0x463}}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x3, 0x3, 0x9, 0x8000, 0x1ff}}, @l2cap_conf_flushto={0x2, 0x2, 0xc2e3}, @l2cap_conf_mtu={0x1, 0x2}]}}]}}, 0x61)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000023c0)) (async)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000023c0))
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000002400)=0x58)
shmdt(0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000002440)) (async)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000002440))
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3)
ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000002480)={0x1}) (async)
ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000002480)={0x1})
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)

1.263341088s ago: executing program 8 (id=5128):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x1, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x1, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xdd, 0x228240)
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x8008550e, &(0x7f0000000040))
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
close(0xffffffffffffffff)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4004000)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r12}, './file0\x00'})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

1.21637866s ago: executing program 0 (id=5129):
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04ff070000038106174e0664a07429beecbf800ef20745ec9046269bea6422a6a783dd3b91de5a1b2007542f26ca1dc27f2effb27b04de30be32d31b4adea67fc40f68baca88923522fe3315f3caf4e409381aedcd7b9d9dd75a82c1d0bc1b6696d1485caf7b0f462e5118d49cfc0f4a3cbc1d8e72b81300f0fa331410fb89cc984537e9ab60f555daa302d7b2f51db109038209d42c4a2ed13a0f600b5bcf661d07daaf2c0c0925dda056a2c09fd794edc72c9edf41a8b72bf5b838a5dd5c4425afb3abf38cffb03e46242a90db936340389b83fb9063b90770ee2e398a87fc816cae7592cc31fc53d871437256f9801651bf8ec18c78de386908b4626b964883548d9a59eef357b4dbbc9fde6852a7ff663ea7e7ebe1ea176b2069083abee08c9ea2bebdaac8b15ad029329028dcae9b356bd2aad8cb75c072b18c0f777c6ef042672553053a142766f176651633caa610033c481c5f6a2f2895d5a9f3f17b4d5fb6e292d61628a60726d33928131964b6d625cabe8346cbc91cbea3e84a2e769661583761ee981779afb6fd83ad2e8c09e04547b69a4a223e9d8121872500c8e265a28e71fee480798a7c48bff7cc8f862e2aaa535635ff5732b01788e65ec0fa59d5012e08899c0dcb9ad049d1f090b2e2a2d0d85aa2db93016ea215c27485b23b96fc38904efa167fd948395e891fa7e67ea1c9c26f2f038cd1f4c21e39f81a5bc4c16caf6ab9327bd066dddf9ee073daabe9ed89e7b37c98f238a04e468f39415bc8d215ce83be858d49b4adae7bcec95aa27759fb27c147b43bb88c2559"], 0x8)

1.031764534s ago: executing program 4 (id=5130):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
r4 = socket(0x2, 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESOCT=r4, @ANYRES32=r2, @ANYRESOCT, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES8=r6, @ANYRESOCT=r3, @ANYRESDEC=r0], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x101, 0x0, 0x83, "000000ffff000000010100"})
r8 = syz_open_pts(r7, 0x0)
r9 = dup3(r8, r7, 0x0)
read$FUSE(r9, &(0x7f0000003f80)={0x2020}, 0x2020)

994.689183ms ago: executing program 0 (id=5131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x80)

878.921095ms ago: executing program 0 (id=5132):
r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="3ed46e413b6972bfb19245abfd9b54226b4361ead249030b86f97c80", 0x1c, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)=@secondary)
r1 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x4, 0x20000002, 0x101)
r2 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x1ff)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001280)={&(0x7f00000001c0)=[{0x0, 0x8011, 0x0, 0x0}], 0x1})

818.703776ms ago: executing program 9 (id=5133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffe4)

406.647457ms ago: executing program 38 (id=5133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffe4)

389.986557ms ago: executing program 0 (id=5135):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
close_range(r1, 0xffffffffffffffff, 0xffff000000000000)

53.097357ms ago: executing program 4 (id=5136):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x5, 0x34524742, 0x140, 0x168, 0x3, @stepwise={{0x1, 0x3}, {0x0, 0x92e}, {0xa, 0x6}}})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0xd, 0x101, 0x0, {0x4, 0x10, 0x6, 0x8}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00'})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00'})
sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x4788, r5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00')
read$FUSE(r6, &(0x7f0000000dc0)={0x2020}, 0x2020)

0s ago: executing program 0 (id=5137):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10000000)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000006c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

1166.149064][T21436] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1166.149741][T21436] bridge_slave_1: entered allmulticast mode
[ 1166.161168][ T5895] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[ 1166.168968][T21436] bridge_slave_1: entered promiscuous mode
[ 1166.268333][T21436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1166.295388][T21436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1166.320570][ T5895] usb 9-1: not running at top speed; connect to a high speed hub
[ 1166.329195][ T5895] usb 9-1: config 1 has an invalid interface number: 190 but max is 0
[ 1166.329224][ T5895] usb 9-1: config 1 has no interface number 0
[ 1166.329273][ T5895] usb 9-1: config 1 interface 190 has no altsetting 0
[ 1166.347874][ T5895] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=2b.85
[ 1166.347906][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.347929][ T5895] usb 9-1: Product: syz
[ 1166.347944][ T5895] usb 9-1: Manufacturer: syz
[ 1166.347960][ T5895] usb 9-1: SerialNumber: syz
[ 1166.495981][T21436] team0: Port device team_slave_0 added
[ 1166.520516][T21436] team0: Port device team_slave_1 added
[ 1166.659053][T21436] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.659072][T21436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.659106][T21436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.766099][T21436] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1166.766119][T21436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.766151][T21436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1166.845339][T21461] chnl_net:caif_netlink_parms(): no params data found
[ 1166.893699][ T5895] kobil_sct 9-1:1.190: KOBIL USB smart card terminal converter detected
[ 1166.899801][ T5895] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1166.925712][ T5895] usb 9-1: USB disconnect, device number 44
[ 1166.950362][ T5895] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1166.953859][T21481] netlink: 'syz.4.4576': attribute type 2 has an invalid length.
[ 1166.972584][ T5895] kobil_sct 9-1:1.190: device disconnected
[ 1166.977878][T21481] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4576'.
[ 1167.431196][ T5145] Bluetooth: hci4: command tx timeout
[ 1167.431421][T21436] hsr_slave_0: entered promiscuous mode
[ 1167.435492][T21436] hsr_slave_1: entered promiscuous mode
[ 1168.076933][ T5145] Bluetooth: hci3: command tx timeout
[ 1168.095657][T21461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1168.095903][T21461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.096419][T21461] bridge_slave_0: entered allmulticast mode
[ 1168.099498][T21461] bridge_slave_0: entered promiscuous mode
[ 1168.135208][T21461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1168.135485][T21461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1168.135962][T21461] bridge_slave_1: entered allmulticast mode
[ 1168.139226][T21461] bridge_slave_1: entered promiscuous mode
[ 1168.246685][T21461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1168.280295][T21461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1168.625239][T21461] team0: Port device team_slave_0 added
[ 1168.649439][T21461] team0: Port device team_slave_1 added
[ 1168.814196][T21461] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1168.814216][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.814246][T21461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1168.827838][T21461] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1168.827900][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.827977][T21461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1169.375124][T21436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1169.522435][ T5145] Bluetooth: hci4: command tx timeout
[ 1169.649534][T21461] hsr_slave_0: entered promiscuous mode
[ 1169.663616][T21461] hsr_slave_1: entered promiscuous mode
[ 1169.665873][T21461] debugfs: 'hsr0' already exists in 'hsr'
[ 1169.665901][T21461] Cannot create hsr debugfs directory
[ 1169.876577][T21436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.162076][ T5145] Bluetooth: hci3: command tx timeout
[ 1170.445919][T21436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.545035][T19991] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1170.691148][T19991] usb 9-1: Using ep0 maxpacket: 8
[ 1170.694391][T19991] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1170.708552][T19991] usb 9-1: config 4 interface 0 has no altsetting 0
[ 1170.723468][T19991] usb 9-1: string descriptor 0 read error: -22
[ 1170.723569][T19991] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1170.723596][T19991] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1170.785212][T19991] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1170.845552][T19991] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1170.846098][T19991] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1170.846152][T19991] usb 9-1: media controller created
[ 1170.890260][T19991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1171.001187][T19991] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1171.078766][T19991] usb 9-1: USB disconnect, device number 45
[ 1171.420839][T21436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.592889][   T60] Bluetooth: hci4: command tx timeout
[ 1171.626991][   T37] kauditd_printk_skb: 3 callbacks suppressed
[ 1171.627011][   T37] audit: type=1400 audit(1777153111.530:74): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=E5C668C0042F pid=21523 comm="syz.8.4589"
[ 1171.629846][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4589'.
[ 1172.234770][T21461] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1172.248172][   T60] Bluetooth: hci3: command tx timeout
[ 1172.350013][T21461] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1172.359319][T21461] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1172.387988][T21461] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1172.390192][T21461] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1172.431269][T21461] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1172.432816][T21461] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1172.492740][T21461] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1172.870339][T21436] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1172.935642][T21436] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1172.968311][T21436] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1173.006926][T21436] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1173.152845][T21436] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1173.186184][T21436] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1173.202341][T21436] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1173.274740][T21436] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1173.517868][T21461] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1173.668126][T21461] 8021q: adding VLAN 0 to HW filter on device team0
[ 1173.674251][   T60] Bluetooth: hci4: command tx timeout
[ 1173.691798][   T44] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1173.718896][T18809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.719014][T18809] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1173.750821][T18809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1173.763356][T18809] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1173.871149][   T44] usb 5-1: Using ep0 maxpacket: 8
[ 1173.875038][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1173.880371][   T44] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1173.880408][   T44] usb 5-1: can't read configurations, error -61
[ 1173.975183][T21436] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1174.121308][   T44] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1174.173272][T21436] 8021q: adding VLAN 0 to HW filter on device team0
[ 1174.200562][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1174.200734][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1174.269549][ T1548] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1174.269714][ T1548] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1174.291369][   T44] usb 5-1: Using ep0 maxpacket: 8
[ 1174.295317][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1174.298480][   T44] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1174.298517][   T44] usb 5-1: can't read configurations, error -61
[ 1174.298961][   T44] usb usb5-port1: attempt power cycle
[ 1174.743076][   T44] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1174.763603][   T44] usb 5-1: Using ep0 maxpacket: 8
[ 1174.769319][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1174.787195][   T44] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1174.787248][   T44] usb 5-1: can't read configurations, error -61
[ 1174.962483][   T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1174.983409][   T44] usb 5-1: Using ep0 maxpacket: 8
[ 1174.985899][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1174.988081][   T44] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1174.988119][   T44] usb 5-1: can't read configurations, error -61
[ 1174.988521][   T44] usb usb5-port1: unable to enumerate USB device
[ 1175.518378][T21461] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.686522][T21436] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.384324][T21436] veth0_vlan: entered promiscuous mode
[ 1176.462252][T21436] veth1_vlan: entered promiscuous mode
[ 1176.675844][T21436] veth0_macvtap: entered promiscuous mode
[ 1176.734421][T21436] veth1_macvtap: entered promiscuous mode
[ 1176.788897][T21461] veth0_vlan: entered promiscuous mode
[ 1176.887647][T21436] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1176.916263][T21461] veth1_vlan: entered promiscuous mode
[ 1176.976999][T21436] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1177.023164][T14752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.024911][T14752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.026274][T14752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.028852][T14752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.381817][T21461] veth0_macvtap: entered promiscuous mode
[ 1177.676440][T21461] veth1_macvtap: entered promiscuous mode
[ 1178.070161][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.070281][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.622621][ T5895] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1178.921177][ T5895] usb 9-1: Using ep0 maxpacket: 16
[ 1178.933844][ T5895] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1178.938447][ T5895] usb 9-1: config 8 has an invalid interface number: 68 but max is 0
[ 1178.938528][ T5895] usb 9-1: config 8 has no interface number 0
[ 1178.938618][ T5895] usb 9-1: config 8 interface 68 has no altsetting 0
[ 1178.958619][ T5895] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=95.9e
[ 1178.958700][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.958769][ T5895] usb 9-1: Product: syz
[ 1178.958816][ T5895] usb 9-1: Manufacturer: syz
[ 1178.958862][ T5895] usb 9-1: SerialNumber: syz
[ 1179.439593][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4605'.
[ 1179.460010][T21461] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1179.602823][ T1548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.602846][ T1548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.777492][T21461] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1179.954069][ T2884] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.970203][ T2884] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.040564][ T2884] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.079217][ T2884] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.166821][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.166844][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.587528][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:8.68/input/input71
[ 1181.687597][ T5181] bcm5974 9-1:8.68: could not read from device
[ 1181.749854][ T5895] usb 9-1: USB disconnect, device number 46
[ 1182.624894][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.624918][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1182.969104][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.969124][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.698594][T21628] syz.8.4612 (21628) used greatest stack depth: 17264 bytes left
[ 1184.158778][T21640] MTD: Attempt to mount non-MTD device "./file0"
[ 1184.165367][T21640] ./file0: Can't open blockdev
[ 1184.309923][T21647] overlayfs: conflicting options: userxattr,metacopy=on
[ 1184.714174][T12844] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1184.861156][T12844] usb 5-1: Using ep0 maxpacket: 8
[ 1184.863550][T12844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1184.863581][T12844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1184.863620][T12844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10118, setting to 1024
[ 1184.863652][T12844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1184.863680][T12844] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1184.863728][T12844] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1184.863755][T12844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.169048][T12844] usb 5-1: usb_control_msg returned -71
[ 1185.169092][T12844] usbtmc 5-1:16.0: can't read capabilities
[ 1185.220483][T12844] usb 5-1: USB disconnect, device number 65
[ 1185.597430][T21668] tmpfs: Bad value for 'mpol'
[ 1187.046554][T21692] kAFS: No cell specified
[ 1187.683547][ T5946] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1187.813195][ T5946] usb 10-1: device descriptor read/64, error -71
[ 1188.084552][ T5946] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1188.211149][ T5946] usb 10-1: device descriptor read/64, error -71
[ 1188.331614][ T5946] usb usb10-port1: attempt power cycle
[ 1188.721918][ T5946] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1188.742687][ T5946] usb 10-1: device descriptor read/8, error -71
[ 1188.981128][ T5946] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1189.003043][ T5946] usb 10-1: device descriptor read/8, error -71
[ 1189.111879][ T5946] usb usb10-port1: unable to enumerate USB device
[ 1189.397697][T21734] FAULT_INJECTION: forcing a failure.
[ 1189.397697][T21734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1189.397738][T21734] CPU: 1 UID: 0 PID: 21734 Comm: syz.8.4644 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1189.397770][T21734] Tainted: [L]=SOFTLOCKUP
[ 1189.397779][T21734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1189.397794][T21734] Call Trace:
[ 1189.397803][T21734]  <TASK>
[ 1189.397813][T21734]  dump_stack_lvl+0xe8/0x150
[ 1189.397844][T21734]  should_fail_ex+0x46b/0x600
[ 1189.397884][T21734]  strncpy_from_user+0x36/0x2b0
[ 1189.397917][T21734]  do_getname+0x77/0x250
[ 1189.397946][T21734]  user_path_at+0x2a/0x160
[ 1189.397979][T21734]  __se_sys_inotify_add_watch+0x18d/0xf60
[ 1189.398008][T21734]  ? fput+0xa0/0xd0
[ 1189.398034][T21734]  ? ksys_write+0x248/0x270
[ 1189.398067][T21734]  ? __pfx___se_sys_inotify_add_watch+0x10/0x10
[ 1189.398115][T21734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1189.398139][T21734]  do_syscall_64+0x15f/0xf80
[ 1189.398162][T21734]  ? trace_irq_disable+0x3b/0x140
[ 1189.398188][T21734]  ? clear_bhb_loop+0x40/0x90
[ 1189.398216][T21734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1189.398239][T21734] RIP: 0033:0x7f829947c819
[ 1189.398259][T21734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1189.398280][T21734] RSP: 002b:00007f82976ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[ 1189.398317][T21734] RAX: ffffffffffffffda RBX: 00007f82996f5fa0 RCX: 00007f829947c819
[ 1189.398333][T21734] RDX: 00000000810009c0 RSI: 00002000000001c0 RDI: 0000000000000004
[ 1189.398349][T21734] RBP: 00007f82976ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1189.398363][T21734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1189.398377][T21734] R13: 00007f82996f6038 R14: 00007f82996f5fa0 R15: 00007ffeb73459d8
[ 1189.398411][T21734]  </TASK>
[ 1190.631973][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4654'.
[ 1191.106555][T21766] netlink: 'syz.9.4656': attribute type 23 has an invalid length.
[ 1191.220867][T21768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4657'.
[ 1191.831377][   T60] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1191.831968][ T5145] Bluetooth: hci5: command 0x1003 tx timeout
[ 1191.964550][T21785] binder: BINDER_SET_CONTEXT_MGR already set
[ 1191.964567][T21785] binder: 21784:21785 ioctl 4018620d 200000000040 returned -16
[ 1192.333272][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4667'.
[ 1194.011279][ T5835] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1194.163955][ T5835] usb 5-1: config 2 has an invalid interface number: 19 but max is 0
[ 1194.163986][ T5835] usb 5-1: config 2 has no interface number 0
[ 1194.164019][ T5835] usb 5-1: config 2 interface 19 has no altsetting 0
[ 1194.170712][ T5835] usb 5-1: New USB device found, idVendor=05ac, idProduct=fdc3, bcdDevice=2f.a6
[ 1194.170744][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.170767][ T5835] usb 5-1: Product: syz
[ 1194.170783][ T5835] usb 5-1: Manufacturer: syz
[ 1194.170800][ T5835] usb 5-1: SerialNumber: syz
[ 1194.455775][ T5835] ipheth 5-1:2.19: Unable to find alternate settings interface
[ 1194.480680][ T5835] usb 5-1: USB disconnect, device number 66
[ 1194.841104][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1194.951099][  T821] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1194.991103][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1194.994545][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1194.994599][   T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1194.994618][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.039393][   T10] usb 1-1: config 0 descriptor??
[ 1195.122529][  T821] usb 10-1: Using ep0 maxpacket: 8
[ 1195.127039][  T821] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1195.127076][  T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1195.127103][  T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1195.127128][  T821] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1195.127169][  T821] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1195.127202][  T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.263901][   T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1195.381109][T19991] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1195.409908][  T821] usb 10-1: GET_CAPABILITIES returned 0
[ 1195.409942][  T821] usbtmc 10-1:16.0: can't read capabilities
[ 1195.534174][T19991] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1195.535745][T19991] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1195.562089][T19991] usb 5-1: string descriptor 0 read error: -22
[ 1195.562245][T19991] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40
[ 1195.562276][T19991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.028002][T19991] hid_parser_main: 4007 callbacks suppressed
[ 1196.028031][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028067][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028098][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028128][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028156][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028186][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028215][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028246][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028275][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.028304][T19991] aquacomputer_d5next 0003:0C70:F014.0035: unknown main item tag 0x0
[ 1196.153115][T19991] aquacomputer_d5next 0003:0C70:F014.0035: hidraw0: USB HID vff.7f Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0
[ 1196.389584][T19991] usb 5-1: USB disconnect, device number 67
[ 1196.433306][T21840] fido_id[21840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1197.215559][   T44] usb 10-1: USB disconnect, device number 6
[ 1197.251185][ T5895] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1197.401096][ T5895] usb 5-1: Using ep0 maxpacket: 16
[ 1197.427720][ T5895] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1197.430555][ T5895] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1197.430627][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.430723][ T5895] usb 5-1: Product: syz
[ 1197.430777][ T5895] usb 5-1: Manufacturer: syz
[ 1197.430824][ T5895] usb 5-1: SerialNumber: syz
[ 1197.540329][ T5895] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1197.540358][ T5895] r8152-cfgselector 5-1: config 0 descriptor??
[ 1197.642330][T19833] usb 1-1: USB disconnect, device number 22
[ 1198.064899][ T5895] r8152-cfgselector 5-1: USB disconnect, device number 68
[ 1198.351231][T12844] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[ 1198.505845][T12844] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1198.506463][T12844] usb 10-1: not running at top speed; connect to a high speed hub
[ 1198.510192][T12844] usb 10-1: config 1 has an invalid interface number: 212 but max is 0
[ 1198.510223][T12844] usb 10-1: config 1 has an invalid interface number: 138 but max is 0
[ 1198.510246][T12844] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 1198.510270][T12844] usb 10-1: config 1 has no interface number 0
[ 1198.510288][T12844] usb 10-1: config 1 has no interface number 1
[ 1198.510350][T12844] usb 10-1: config 1 interface 212 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64
[ 1198.510392][T12844] usb 10-1: config 1 interface 212 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[ 1198.510418][T12844] usb 10-1: config 1 interface 212 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[ 1198.510442][T12844] usb 10-1: config 1 interface 212 altsetting 7 has a duplicate endpoint with address 0xC, skipping
[ 1198.510468][T12844] usb 10-1: config 1 interface 212 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1198.510498][T12844] usb 10-1: config 1 interface 212 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[ 1198.510527][T12844] usb 10-1: config 1 interface 212 altsetting 7 has an endpoint descriptor with address 0x7F, changing to 0xF
[ 1198.510557][T12844] usb 10-1: config 1 interface 212 altsetting 7 endpoint 0xF has invalid maxpacket 16820, setting to 64
[ 1198.510586][T12844] usb 10-1: config 1 interface 212 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[ 1198.510612][T12844] usb 10-1: config 1 interface 212 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[ 1198.510637][T12844] usb 10-1: config 1 interface 212 altsetting 7 has 13 endpoint descriptors, different from the interface descriptor's value: 15
[ 1198.510668][T12844] usb 10-1: too many endpoints for config 1 interface 138 altsetting 247: 164, using maximum allowed: 30
[ 1198.510736][T12844] usb 10-1: config 1 interface 138 altsetting 247 has a duplicate endpoint with address 0xD, skipping
[ 1198.510764][T12844] usb 10-1: config 1 interface 138 altsetting 247 has an endpoint descriptor with address 0x41, changing to 0x1
[ 1198.510792][T12844] usb 10-1: config 1 interface 138 altsetting 247 has a duplicate endpoint with address 0x1, skipping
[ 1198.510819][T12844] usb 10-1: config 1 interface 138 altsetting 247 has 3 endpoint descriptors, different from the interface descriptor's value: 164
[ 1198.510850][T12844] usb 10-1: config 1 interface 212 has no altsetting 0
[ 1198.510870][T12844] usb 10-1: config 1 interface 138 has no altsetting 0
[ 1198.590529][T12844] usb 10-1: New USB device found, idVendor=19d2, idProduct=1283, bcdDevice=2a.17
[ 1198.590562][T12844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.590585][T12844] usb 10-1: Product: syz
[ 1198.590602][T12844] usb 10-1: Manufacturer: syz
[ 1198.590619][T12844] usb 10-1: SerialNumber: syz
[ 1199.168926][T12844] option 10-1:1.212: GSM modem (1-port) converter detected
[ 1199.203900][T12844] usb 10-1: USB disconnect, device number 7
[ 1199.238556][T12844] option 10-1:1.212: device disconnected
[ 1199.518793][T21879] netlink: 'syz.0.4690': attribute type 4 has an invalid length.
[ 1200.061139][T19991] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1200.211161][T19991] usb 10-1: Using ep0 maxpacket: 16
[ 1200.215995][T19991] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1200.216027][T19991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.216051][T19991] usb 10-1: Product: syz
[ 1200.216068][T19991] usb 10-1: Manufacturer: syz
[ 1200.216086][T19991] usb 10-1: SerialNumber: syz
[ 1200.240687][T19991] usb 10-1: config 0 descriptor??
[ 1200.270111][T19991] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[ 1200.289588][T19991] usb 10-1: Detected FT-X
[ 1200.578893][   T60] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[ 1200.591627][T21893] netlink: 'syz.8.4695': attribute type 11 has an invalid length.
[ 1200.735878][T19991] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1200.736415][T19991] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71
[ 1200.851506][T19991] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1200.868969][T19991] usb 10-1: USB disconnect, device number 8
[ 1200.910162][T19991] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1200.911217][T19991] ftdi_sio 10-1:0.0: device disconnected
[ 1201.116070][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4696'.
[ 1201.226761][T21900] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4697'.
[ 1201.226846][T21900] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4697'.
[ 1201.255608][T21902] netlink: 'syz.0.4698': attribute type 11 has an invalid length.
[ 1201.255631][T21902] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4698'.
[ 1201.468638][T21905] syzkaller1: entered promiscuous mode
[ 1201.468664][T21905] syzkaller1: entered allmulticast mode
[ 1201.494722][T21905] FAULT_INJECTION: forcing a failure.
[ 1201.494722][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1201.494761][T21905] CPU: 1 UID: 0 PID: 21905 Comm: syz.9.4699 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1201.494793][T21905] Tainted: [L]=SOFTLOCKUP
[ 1201.494810][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1201.494824][T21905] Call Trace:
[ 1201.494834][T21905]  <TASK>
[ 1201.494844][T21905]  dump_stack_lvl+0xe8/0x150
[ 1201.494872][T21905]  should_fail_ex+0x46b/0x600
[ 1201.494907][T21905]  _copy_from_iter+0x1d3/0x1670
[ 1201.494943][T21905]  ? __lock_acquire+0x6b5/0x2cf0
[ 1201.494976][T21905]  ? __pfx__copy_from_iter+0x10/0x10
[ 1201.495022][T21905]  tun_get_user+0x264/0x4400
[ 1201.495052][T21905]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1201.495079][T21905]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1201.495103][T21905]  ? rt_mutex_slowunlock+0x450/0x8b0
[ 1201.495134][T21905]  ? reacquire_held_locks+0x104/0x190
[ 1201.495166][T21905]  ? rt_spin_lock+0x1e0/0x400
[ 1201.495200][T21905]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1201.495232][T21905]  ? __pfx_tun_get_user+0x10/0x10
[ 1201.495253][T21905]  ? rt_spin_unlock+0x14f/0x200
[ 1201.495288][T21905]  ? rt_spin_unlock+0x160/0x200
[ 1201.495323][T21905]  ? save_netdev_trace_buffer+0x4ba/0x5f0
[ 1201.495365][T21905]  ? ref_tracker_alloc+0x332/0x4a0
[ 1201.495400][T21905]  ? tun_get+0x157/0x2f0
[ 1201.495422][T21905]  ? vfs_write+0x629/0xba0
[ 1201.495451][T21905]  ? ksys_write+0x156/0x270
[ 1201.495482][T21905]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1201.495520][T21905]  ? tun_get+0x1c/0x2f0
[ 1201.495548][T21905]  ? tun_get+0x1c/0x2f0
[ 1201.495571][T21905]  ? tun_get+0x1c/0x2f0
[ 1201.495600][T21905]  tun_chr_write_iter+0x119/0x210
[ 1201.495626][T21905]  vfs_write+0x629/0xba0
[ 1201.495667][T21905]  ? __pfx_vfs_write+0x10/0x10
[ 1201.495710][T21905]  ? __fget_files+0x2a/0x420
[ 1201.495746][T21905]  ksys_write+0x156/0x270
[ 1201.495780][T21905]  ? __pfx_ksys_write+0x10/0x10
[ 1201.495839][T21905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.495863][T21905]  do_syscall_64+0x15f/0xf80
[ 1201.495905][T21905]  ? clear_bhb_loop+0x40/0x90
[ 1201.495934][T21905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.495958][T21905] RIP: 0033:0x7f015c40c819
[ 1201.495979][T21905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.496011][T21905] RSP: 002b:00007f015a666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1201.496034][T21905] RAX: ffffffffffffffda RBX: 00007f015c685fa0 RCX: 00007f015c40c819
[ 1201.496051][T21905] RDX: 00000000000000be RSI: 0000200000000d40 RDI: 0000000000000003
[ 1201.496066][T21905] RBP: 00007f015a666090 R08: 0000000000000000 R09: 0000000000000000
[ 1201.496080][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1201.496093][T21905] R13: 00007f015c686038 R14: 00007f015c685fa0 R15: 00007ffc1b158ee8
[ 1201.496127][T21905]  </TASK>
[ 1202.531164][ T5835] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1202.599462][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4706'.
[ 1202.693063][ T5835] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1202.693097][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.728627][ T5835] usb 10-1: config 0 descriptor??
[ 1202.742402][ T5835] cp210x 10-1:0.0: cp210x converter detected
[ 1202.971847][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4709'.
[ 1203.229767][ T5835] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1203.432637][T21924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1203.433189][T21924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1203.457482][   T10] usb 10-1: USB disconnect, device number 9
[ 1203.478981][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1203.621367][   T10] cp210x 10-1:0.0: device disconnected
[ 1204.244287][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4716'.
[ 1204.417464][T21953] binder_alloc: 21952: pid 21952 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1204.417937][T21953] binder_alloc: 21952: pid 21952 spamming oneway? 2 buffers allocated for a total size of 5120
[ 1204.611239][T19991] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1204.761096][T19991] usb 9-1: Using ep0 maxpacket: 16
[ 1204.768670][T19991] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02
[ 1204.768703][T19991] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3
[ 1204.768727][T19991] usb 9-1: Manufacturer: syz
[ 1204.768744][T19991] usb 9-1: SerialNumber: syz
[ 1204.814989][T19991] usb 9-1: config 0 descriptor??
[ 1204.842013][T19991] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[ 1204.843966][T19991] usb 9-1: Detected SIO
[ 1204.846268][T19991] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1205.042573][T21951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1205.043243][T21951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1205.072577][T21951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1205.073215][T21951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1205.119652][ T5835] usb 9-1: USB disconnect, device number 48
[ 1205.201452][ T5835] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1205.206257][ T5835] ftdi_sio 9-1:0.0: device disconnected
[ 1206.038467][T21983] Invalid logical block size (4194304)
[ 1206.287827][T21992] netlink: 'syz.9.4731': attribute type 2 has an invalid length.
[ 1206.287850][T21992] netlink: 'syz.9.4731': attribute type 2 has an invalid length.
[ 1206.765291][T22000] loop8: detected capacity change from 0 to 7
[ 1206.779273][T22000] Dev loop8: unable to read RDB block 7
[ 1206.779310][T22000]  loop8: unable to read partition table
[ 1206.779513][T22000] loop8: partition table beyond EOD, truncated
[ 1206.779561][T22000] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1207.851266][ T5835] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1207.912752][T19833] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1208.015066][ T5835] usb 9-1: Using ep0 maxpacket: 32
[ 1208.046004][ T5835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1208.046041][ T5835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 1208.046062][ T5835] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1208.046079][ T5835] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8
[ 1208.046097][ T5835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1208.046117][ T5835] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88
[ 1208.084741][ T5835] usb 9-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40
[ 1208.084841][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.084898][ T5835] usb 9-1: Product: ␉
[ 1208.084944][ T5835] usb 9-1: Manufacturer: ຑ䮥繡湥泒욱魹镹ᄭ鏂舴퓷즫㙂붱폴⭄憚䂲领헫檷앇蹉ࠆ悬໛탭㻃䳳慲絰額ꘐ㦎珁䲵ꌔ涖籍쓹ᇏ涜㣙⁐径ﱅ≹큽騴ݳ،ﵲ틉젲ꬒ凹멟짻跽ί䠥ੈ䅋䁈ֽ쏼캠篑奰鿦꧰祿趲遾ਡ부䖗⤤鱖黼뷼╒꺷㳽羽⵭ꩈ⼆띀ݜ膼ࣰ裻៣袲尴䵖鼼喣伓騟い
[ 1208.085064][ T5835] usb 9-1: SerialNumber: ᐁ
[ 1208.186145][T19833] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1208.186192][T19833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1208.186212][T19833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1208.186229][T19833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1208.189599][T19833] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1208.189621][T19833] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1208.189637][T19833] usb 1-1: Manufacturer: syz
[ 1208.266096][T22020] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1208.291315][T19833] usb 1-1: config 0 descriptor??
[ 1208.470173][   T60] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 1208.470767][   T60] Bluetooth: hci0: SCO packet for unknown connection handle 200
[ 1208.700018][T22020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.700652][T22020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.790698][T19833] hid_parser_main: 2440 callbacks suppressed
[ 1208.790717][T19833] appleir 0003:05AC:8243.0036: unknown main item tag 0x0
[ 1208.811569][ T5835] usb 9-1: Invalid firmware size=161.
[ 1208.821850][T19833] appleir 0003:05AC:8243.0036: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1208.858515][ T5835] usb 9-1: USB disconnect, device number 49
[ 1209.161890][ T5835] usb 1-1: USB disconnect, device number 23
[ 1210.111649][T19991] usb 9-1: new low-speed USB device number 50 using dummy_hcd
[ 1210.140090][T22046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4752'.
[ 1210.262819][T19991] usb 9-1: Invalid ep0 maxpacket: 64
[ 1210.391154][T19991] usb 9-1: new low-speed USB device number 51 using dummy_hcd
[ 1210.541141][T19991] usb 9-1: Invalid ep0 maxpacket: 64
[ 1210.541559][T19991] usb usb9-port1: attempt power cycle
[ 1210.881136][T19991] usb 9-1: new low-speed USB device number 52 using dummy_hcd
[ 1210.902355][T19991] usb 9-1: Invalid ep0 maxpacket: 64
[ 1211.032602][T19991] usb 9-1: new low-speed USB device number 53 using dummy_hcd
[ 1211.075523][T19991] usb 9-1: Invalid ep0 maxpacket: 64
[ 1211.075843][T19991] usb usb9-port1: unable to enumerate USB device
[ 1213.587135][T22095] overlay: Unknown parameter 'hash'
[ 1213.607149][T22095] i2c i2c-0: dtv_property_process_set: SET cmd 0xe7d4f533 undefined
[ 1214.461364][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4772'.
[ 1214.461904][T22111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4772'.
[ 1216.321211][   T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1216.476445][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1216.477973][   T10] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[ 1216.478001][   T10] usb 5-1: config 0 has no interface number 0
[ 1216.478035][   T10] usb 5-1: config 0 interface 175 has no altsetting 0
[ 1216.480510][   T10] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=22.1a
[ 1216.480540][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.480562][   T10] usb 5-1: Product: syz
[ 1216.480582][   T10] usb 5-1: Manufacturer: syz
[ 1216.480599][   T10] usb 5-1: SerialNumber: syz
[ 1216.511443][T12844] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1216.511549][   T10] usb 5-1: config 0 descriptor??
[ 1216.731118][T12844] usb 9-1: Using ep0 maxpacket: 32
[ 1216.745700][T12844] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1216.747291][T12844] usb 9-1: config 128 has an invalid interface number: 6 but max is 3
[ 1216.747317][T12844] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1216.747337][T12844] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1216.747363][T12844] usb 9-1: config 128 has no interface number 0
[ 1216.747407][T12844] usb 9-1: config 128 interface 6 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1216.750745][T12844] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1216.750775][T12844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.750799][T12844] usb 9-1: Product: syz
[ 1216.750814][T12844] usb 9-1: Manufacturer: syz
[ 1216.750854][T12844] usb 9-1: SerialNumber: syz
[ 1220.621432][T12844] usb 9-1: USB disconnect, device number 54
[ 1220.841969][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1221.653722][   T10] usb_ehset_test 5-1:0.175: probe with driver usb_ehset_test failed with error -32
[ 1221.715172][ T5946] usb 5-1: USB disconnect, device number 69
[ 1223.066234][T22197] netlink: 'syz.4.4799': attribute type 29 has an invalid length.
[ 1223.066256][T22197] netlink: 'syz.4.4799': attribute type 3 has an invalid length.
[ 1223.066271][T22197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4799'.
[ 1223.501196][ T5946] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1223.651255][ T5946] usb 10-1: Using ep0 maxpacket: 8
[ 1223.655610][ T5946] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.655665][ T5946] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1223.657235][ T5946] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1223.657267][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1223.657314][ T5946] usb 10-1: SerialNumber: syz
[ 1223.754854][ T5946] usb 10-1: No union descriptors
[ 1223.841210][ T5912] usb 9-1: new full-speed USB device number 55 using dummy_hcd
[ 1224.020852][ T5912] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1224.029621][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1224.042894][ T5912] usb 9-1: language id specifier not provided by device, defaulting to English
[ 1224.049428][ T5912] usb 9-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40
[ 1224.049458][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.049481][ T5912] usb 9-1: Product: ꭪␮ᘛҌl€
[ 1224.049497][ T5912] usb 9-1: SerialNumber: syz
[ 1224.113349][ T5912] usb 9-1: Audio class v2/v3 interfaces need an interface association
[ 1224.170249][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4798'.
[ 1224.192003][ T5912] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1224.196916][ T5912] snd_usb_pod 9-1:1.0: Line 6 BassPODxt found
[ 1224.196939][ T5912] usb 9-1: selecting invalid altsetting 5
[ 1224.196956][ T5912] snd_usb_pod 9-1:1.0: set_interface failed
[ 1224.197312][ T5912] snd_usb_pod 9-1:1.0: Line 6 BassPODxt now disconnected
[ 1224.197656][ T5912] snd_usb_pod 9-1:1.0: probe with driver snd_usb_pod failed with error -22
[ 1224.254005][ T5912] snd_usb_pod 9-1:1.1: Line 6 BassPODxt found
[ 1224.254031][ T5912] usb 9-1: selecting invalid altsetting 5
[ 1224.254049][ T5912] snd_usb_pod 9-1:1.1: set_interface failed
[ 1224.254344][ T5912] snd_usb_pod 9-1:1.1: Line 6 BassPODxt now disconnected
[ 1224.254560][ T5912] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1224.298833][ T5912] snd_usb_pod 9-1:1.2: Line 6 BassPODxt found
[ 1224.298862][ T5912] usb 9-1: selecting invalid altsetting 5
[ 1224.298881][ T5912] snd_usb_pod 9-1:1.2: set_interface failed
[ 1224.299153][ T5912] snd_usb_pod 9-1:1.2: Line 6 BassPODxt now disconnected
[ 1224.299800][ T5912] snd_usb_pod 9-1:1.2: probe with driver snd_usb_pod failed with error -22
[ 1224.384933][ T5946] usb 9-1: USB disconnect, device number 55
[ 1224.422509][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1225.275262][ T5912] usb 10-1: USB disconnect, device number 10
[ 1225.311084][   T10] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1225.474763][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1225.474825][   T10] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1225.474851][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.480600][   T10] usb 9-1: config 0 descriptor??
[ 1225.504499][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[ 1225.923832][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1225.924644][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[ 1226.134398][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[ 1226.143593][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[ 1226.158740][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[ 1226.159472][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[ 1226.160886][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[ 1226.178339][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[ 1226.187050][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[ 1226.212999][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[ 1226.217248][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[ 1226.226941][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[ 1226.234792][   T10] pwc: recv_control_msg error -32 req 02 val 2800
[ 1226.244201][T22240] netlink: 'syz.8.4812': attribute type 21 has an invalid length.
[ 1226.260354][T22240] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1226.260672][T22240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1226.260681][T22240] IPv6: NLM_F_CREATE should be set when creating new route
[ 1226.315462][T22240] IPv6: NLM_F_CREATE should be set when creating new route
[ 1226.334089][T22256] netlink: 'syz.8.4812': attribute type 21 has an invalid length.
[ 1226.361610][T22240] IPv6: NLM_F_CREATE should be set when creating new route
[ 1226.369300][T22256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1226.387071][T22255] CIFS mount error: No usable UNC path provided in device string!
[ 1226.387071][T22255] 
[ 1226.387094][T22255] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1226.586307][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[ 1226.596396][   T10] pwc: Registered as video103.
[ 1226.608441][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input72
[ 1226.697574][   T10] usb 9-1: USB disconnect, device number 56
[ 1226.841893][T22263] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1227.575329][T22282] netlink: 19 bytes leftover after parsing attributes in process `syz.9.4825'.
[ 1228.391236][   T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1228.449798][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4831'.
[ 1228.449823][T22300] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4831'.
[ 1228.449838][T22300] netlink: 'syz.4.4831': attribute type 3 has an invalid length.
[ 1228.449852][T22300] netlink: 'syz.4.4831': attribute type 2 has an invalid length.
[ 1228.449866][T22300] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4831'.
[ 1228.596890][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1228.598814][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.598840][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1228.630311][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1228.630346][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.630362][   T10] usb 1-1: Product: syz
[ 1228.630373][   T10] usb 1-1: Manufacturer: syz
[ 1228.630384][   T10] usb 1-1: SerialNumber: syz
[ 1229.092770][   T37] audit: type=1326 audit(1777153169.030:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37edd6c819 code=0x0
[ 1229.504050][T22320] binder: Unknown parameter 'sta�C����V5ς�w�ts'
[ 1229.867513][ T5923] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1230.001225][T12844] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1230.025327][ T5923] usb 10-1: Using ep0 maxpacket: 8
[ 1230.028069][ T5923] usb 10-1: config 6 has an invalid interface number: 220 but max is 0
[ 1230.028100][ T5923] usb 10-1: config 6 has no interface number 0
[ 1230.028136][ T5923] usb 10-1: config 6 interface 220 has no altsetting 0
[ 1230.043394][ T5923] usb 10-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[ 1230.043494][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.043519][ T5923] usb 10-1: Product: syz
[ 1230.043536][ T5923] usb 10-1: Manufacturer: syz
[ 1230.043583][ T5923] usb 10-1: SerialNumber: syz
[ 1230.181149][T12844] usb 5-1: Using ep0 maxpacket: 8
[ 1230.185500][T12844] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1230.185655][T12844] usb 5-1: too many configurations: 157, using maximum allowed: 8
[ 1230.187378][T12844] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 155
[ 1230.187418][T12844] usb 5-1: can't read configurations, error -22
[ 1230.311593][T12844] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1230.489131][T12844] usb 5-1: Using ep0 maxpacket: 8
[ 1230.503760][T12844] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1230.503920][T12844] usb 5-1: too many configurations: 157, using maximum allowed: 8
[ 1230.521711][T12844] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 155
[ 1230.521755][T12844] usb 5-1: can't read configurations, error -22
[ 1230.524687][T12844] usb usb5-port1: attempt power cycle
[ 1230.634437][   T10] usb 1-1: Unsupported UAC3 BADD profile
[ 1230.773168][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1230.787070][   T10] usb 1-1: USB disconnect, device number 24
[ 1230.806601][ T5921] udevd[5921]: setting mode of /dev/bus/usb/001/024 to 020664 failed: No such file or directory
[ 1230.807361][ T5921] udevd[5921]: setting owner of /dev/bus/usb/001/024 to uid=0, gid=0 failed: No such file or directory
[ 1230.875053][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1230.941849][T12844] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1230.972397][T12844] usb 5-1: Using ep0 maxpacket: 8
[ 1230.976000][T12844] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1230.976290][T12844] usb 5-1: too many configurations: 157, using maximum allowed: 8
[ 1230.980716][T12844] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 155
[ 1230.980745][T12844] usb 5-1: can't read configurations, error -22
[ 1231.150731][T12844] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1231.195297][T12844] usb 5-1: Using ep0 maxpacket: 8
[ 1231.216081][T12844] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1231.216145][T12844] usb 5-1: too many configurations: 157, using maximum allowed: 8
[ 1231.218472][T12844] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 155
[ 1231.218512][T12844] usb 5-1: can't read configurations, error -22
[ 1231.219711][T12844] usb usb5-port1: unable to enumerate USB device
[ 1231.584950][T22346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4843'.
[ 1231.584980][T22346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4843'.
[ 1232.308264][ T5923] uvcvideo 10-1:6.220: Found multiple Units with ID 4
[ 1232.308959][ T5923] uvcvideo 10-1:6.220: Found Unit with invalid ID 0
[ 1232.309002][ T5923] uvcvideo 10-1:6.220: Found UVC 7.ff device syz (174f:5212)
[ 1232.309091][ T5923] uvcvideo 10-1:6.220: No valid video chain found.
[ 1232.328730][ T5923] usb 10-1: USB disconnect, device number 11
[ 1232.372543][T12844] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1232.431083][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1232.524700][T12844] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1232.525920][T12844] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.525947][T12844] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1232.525990][T12844] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[ 1232.526018][T12844] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[ 1232.526048][T12844] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1232.526068][T12844] usb 9-1: config 1 interface 1 has no altsetting 0
[ 1232.529460][T12844] usb 9-1: string descriptor 0 read error: -22
[ 1232.529572][T12844] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 1232.529608][T12844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.581065][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1232.645769][   T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1232.645801][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.645825][   T10] usb 1-1: Product: syz
[ 1232.645841][   T10] usb 1-1: Manufacturer: syz
[ 1232.645857][   T10] usb 1-1: SerialNumber: syz
[ 1232.685743][   T10] usb 1-1: config 0 descriptor??
[ 1232.696445][   T10] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1232.845163][T12844] usb 9-1: 2:0: failed to get current value for ch 0 (-32)
[ 1232.845621][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[ 1232.858303][T12844] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1232.858335][T12844] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1232.858401][T12844] usb 9-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[ 1232.924125][   T10] gspca_spca508: reg_read err -32
[ 1232.929332][   T10] gspca_spca508: reg_read err -32
[ 1232.932453][   T10] gspca_spca508: reg_read err -32
[ 1232.959156][   T10] gspca_spca508: reg_read err -32
[ 1233.055041][T12844] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1233.149844][T12844] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1233.166881][   T10] gspca_spca508: reg write: error -71
[ 1233.166975][   T10] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[ 1233.184159][   T10] usb 1-1: USB disconnect, device number 25
[ 1233.250882][ T5925] udevd[5925]: setting mode of /dev/bus/usb/001/025 to 020664 failed: No such file or directory
[ 1233.251496][ T5925] udevd[5925]: setting owner of /dev/bus/usb/001/025 to uid=0, gid=0 failed: No such file or directory
[ 1233.287762][T12844] usb 9-1: USB disconnect, device number 57
[ 1233.604838][T22374] XFS (nbd4): SB validate failed with error -5.
[ 1234.801146][   T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1234.957607][   T10] usb 5-1: config 9 has an invalid interface number: 181 but max is 0
[ 1234.957645][   T10] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.957666][   T10] usb 5-1: config 9 has no interface number 0
[ 1234.957698][   T10] usb 5-1: config 9 interface 181 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1234.957719][   T10] usb 5-1: config 9 interface 181 has no altsetting 0
[ 1234.960218][   T10] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6
[ 1234.960249][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.960273][   T10] usb 5-1: Product: syz
[ 1234.960284][   T10] usb 5-1: Manufacturer: syz
[ 1234.960295][   T10] usb 5-1: SerialNumber: syz
[ 1234.964606][T12844] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1235.211214][T12844] usb 10-1: Using ep0 maxpacket: 32
[ 1235.214285][T12844] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1235.215884][T12844] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.215910][T12844] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1235.219103][T12844] usb 10-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1235.219131][T12844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.219152][T12844] usb 10-1: Product: syz
[ 1235.219167][T12844] usb 10-1: Manufacturer: syz
[ 1235.219181][T12844] usb 10-1: SerialNumber: syz
[ 1235.657201][   T10] em28xx 5-1:9.181: audio device (eb1a:e310): interface 181, class 1
[ 1235.692928][   T10] usb 5-1: USB disconnect, device number 74
[ 1235.931598][T12844] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor
[ 1235.931649][T12844] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1235.932624][T22415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4861'.
[ 1235.949043][T12844] usb 10-1: unit 37 not found!
[ 1235.949102][T12844] usb 10-1: unit 0 not found!
[ 1236.095495][T12844] usb 10-1: USB disconnect, device number 12
[ 1236.441097][   T10] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1236.593718][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1236.593756][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1236.593786][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1236.593812][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1236.593858][   T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1236.593884][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.605083][   T10] usb 9-1: config 0 descriptor??
[ 1236.647210][ T5895] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1236.811320][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1236.814140][T12844] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1237.001605][T12844] usb 10-1: Using ep0 maxpacket: 16
[ 1237.004112][T12844] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1237.004140][T12844] usb 10-1: config 0 has no interface number 0
[ 1237.007538][T12844] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1237.007569][T12844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.007593][T12844] usb 10-1: Product: syz
[ 1237.007609][T12844] usb 10-1: Manufacturer: syz
[ 1237.007627][T12844] usb 10-1: SerialNumber: syz
[ 1237.036847][T12844] usb 10-1: config 0 descriptor??
[ 1237.063053][ T5895] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1237.087547][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087586][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087616][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087646][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087675][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087703][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087732][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087761][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087790][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.087818][   T10] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0
[ 1237.113331][T12844] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1237.241077][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1237.242048][   T10] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1237.352508][ T5895] usb usb5-port1: attempt power cycle
[ 1237.412430][   T44] usb 9-1: USB disconnect, device number 58
[ 1237.525978][T22423] evm: overlay not supported
[ 1237.691223][ T5895] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1237.722321][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1237.961301][ T5895] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1237.983513][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1238.091641][ T5895] usb usb5-port1: unable to enumerate USB device
[ 1238.360610][T12844] gspca_spca1528: reg_r err -71
[ 1238.360680][T12844] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71
[ 1238.384588][T12844] usb 10-1: USB disconnect, device number 13
[ 1239.018935][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4871'.
[ 1239.018983][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4871'.
[ 1239.437559][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.437663][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.461114][   T10] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[ 1239.594602][T22459] program syz.0.4875 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1239.636426][   T10] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1239.636459][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.636482][   T10] usb 9-1: Product: syz
[ 1239.636499][   T10] usb 9-1: Manufacturer: syz
[ 1239.636516][   T10] usb 9-1: SerialNumber: syz
[ 1239.680122][   T10] r8152-cfgselector 9-1: Unknown version 0x0000
[ 1239.680148][   T10] r8152-cfgselector 9-1: config 0 descriptor??
[ 1239.891393][   T44] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1239.923272][  T821] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1240.081780][   T44] usb 5-1: Using ep0 maxpacket: 32
[ 1240.088336][   T44] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1240.088370][   T44] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1240.088401][   T44] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1240.088451][   T44] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[ 1240.088477][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.105579][  T821] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1240.154298][  T821] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[ 1240.154330][  T821] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.154353][  T821] usb 1-1: config 63 has no interface number 0
[ 1240.154402][  T821] usb 1-1: config 63 interface 66 has no altsetting 0
[ 1240.208377][   T44] usb 5-1: config 0 descriptor??
[ 1240.211558][  T821] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1240.211640][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.211700][  T821] usb 1-1: Product: syz
[ 1240.211746][  T821] usb 1-1: Manufacturer: syz
[ 1240.211791][  T821] usb 1-1: SerialNumber: syz
[ 1240.503815][  T821] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1240.503967][  T821] uvcvideo 1-1:63.66: No valid video chain found.
[ 1240.544352][  T821] usb 1-1: USB disconnect, device number 26
[ 1240.761205][ T5895] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1240.847688][   T44] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1240.918965][ T5895] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1240.919002][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.919034][ T5895] usb 10-1: Product: syz
[ 1240.919052][ T5895] usb 10-1: Manufacturer: syz
[ 1240.919068][ T5895] usb 10-1: SerialNumber: syz
[ 1240.932352][ T5895] usb 10-1: config 0 descriptor??
[ 1240.971545][ T5895] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1241.053644][T22457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1241.081477][T22457] netlink: 'syz.4.4874': attribute type 21 has an invalid length.
[ 1241.081551][T22457] netlink: 'syz.4.4874': attribute type 1 has an invalid length.
[ 1241.213968][   T44] uclogic 0003:5543:3031.0038: failed retrieving Huion firmware version: -71
[ 1241.214041][   T44] uclogic 0003:5543:3031.0038: failed probing parameters: -71
[ 1241.214159][   T44] uclogic 0003:5543:3031.0038: probe with driver uclogic failed with error -71
[ 1241.251197][   T44] usb 5-1: USB disconnect, device number 79
[ 1241.877653][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1241.899025][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1241.899634][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1241.900216][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1241.900865][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1241.939722][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[ 1242.241453][T22482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4883'.
[ 1242.242119][T22482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4883'.
[ 1242.242576][T22482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4883'.
[ 1242.243125][T22482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4883'.
[ 1242.324429][   T10] r8152-cfgselector 9-1: USB disconnect, device number 59
[ 1242.411235][ T5895] gspca_sunplus: reg_w_riv err -71
[ 1242.411332][ T5895] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[ 1242.441209][  T821] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[ 1242.511692][ T5895] usb 10-1: USB disconnect, device number 14
[ 1242.575638][  T821] usb 5-1: device descriptor read/64, error -71
[ 1242.811465][  T821] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[ 1242.943191][  T821] usb 5-1: device descriptor read/64, error -71
[ 1243.052016][  T821] usb usb5-port1: attempt power cycle
[ 1243.401188][  T821] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[ 1243.422957][  T821] usb 5-1: device descriptor read/8, error -71
[ 1243.671215][  T821] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[ 1243.694253][  T821] usb 5-1: device descriptor read/8, error -71
[ 1243.711169][ T5912] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1243.806062][  T821] usb usb5-port1: unable to enumerate USB device
[ 1243.867715][ T5912] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[ 1243.867746][ T5912] usb 9-1: config 1 has no interface number 0
[ 1243.867795][ T5912] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1243.867821][ T5912] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 1243.867850][ T5912] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11
[ 1243.893657][ T5912] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1243.898111][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.898178][ T5912] usb 9-1: Product: syz
[ 1243.898227][ T5912] usb 9-1: Manufacturer: syz
[ 1243.898270][ T5912] usb 9-1: SerialNumber: syz
[ 1243.981585][ T5912] usb 9-1: Error in usbnet_get_endpoints (-22)
[ 1244.191365][T22505] binder: 22503:22505 ioctl c018620c 200000000380 returned -22
[ 1244.194310][   T44] usb 9-1: USB disconnect, device number 60
[ 1244.581101][ T5895] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 1244.591580][ T5946] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1244.711861][ T5895] usb 1-1: device descriptor read/64, error -71
[ 1244.751094][ T5946] usb 10-1: Using ep0 maxpacket: 16
[ 1244.759701][ T5946] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1244.759734][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.788895][ T5946] usb 10-1: config 0 descriptor??
[ 1244.803097][ T5946] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1244.951142][ T5895] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 1245.081128][ T5895] usb 1-1: device descriptor read/64, error -71
[ 1245.091195][   T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 1245.193889][ T5895] usb usb1-port1: attempt power cycle
[ 1245.253622][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1245.253719][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1245.253751][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1245.256368][   T10] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1245.256400][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.256480][   T10] usb 9-1: Product: syz
[ 1245.256498][   T10] usb 9-1: Manufacturer: syz
[ 1245.256514][   T10] usb 9-1: SerialNumber: syz
[ 1245.346033][   T10] usb 9-1: config 0 descriptor??
[ 1245.347004][T22514] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1245.347133][T22514] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1245.373075][   T10] usb 9-1: ucan: probing device on interface #0
[ 1245.601116][ T5895] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[ 1245.623464][ T5895] usb 1-1: device descriptor read/8, error -71
[ 1245.861130][ T5895] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[ 1245.885118][ T5895] usb 1-1: device descriptor read/8, error -71
[ 1245.938095][ T5946] usb 10-1: USB disconnect, device number 15
[ 1245.993802][ T5895] usb usb1-port1: unable to enumerate USB device
[ 1246.053938][   T10] ucan 9-1:0.0 can0: registered device
[ 1246.164050][   T10] ucan 9-1:0.0 can0: firmware string: b������>�V3�
[ 1246.372101][   T44] usb 9-1: USB disconnect, device number 61
[ 1247.017071][T22547] __nla_validate_parse: 31 callbacks suppressed
[ 1247.017093][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4899'.
[ 1248.279376][T22579] x_tables: ip_tables: DNAT.0 target: invalid size 24 (kernel) != (user) 32
[ 1248.640545][T22593] fuse: Bad value for 'group_id'
[ 1248.640566][T22593] fuse: Bad value for 'group_id'
[ 1248.821158][ T5946] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 1248.975837][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1248.975891][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1248.975911][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1248.976009][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1248.976036][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1248.978510][ T5946] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1248.978539][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1248.978562][ T5946] usb 5-1: Product: syz
[ 1248.978578][ T5946] usb 5-1: Manufacturer: syz
[ 1248.978594][ T5946] usb 5-1: SerialNumber: syz
[ 1249.080874][ T5946] usb 5-1: config 0 descriptor??
[ 1249.322847][ T5946] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1249.322875][ T5946] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1249.482747][T22605] /dev/sg0: Can't lookup blockdev
[ 1249.526895][ T5946] radio-si470x 5-1:0.0: software version 0, hardware version 0
[ 1249.526925][ T5946] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1249.526948][ T5946] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1249.738924][ T5946] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[ 1249.784748][T22609] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4916'.
[ 1250.185095][T22614] SQUASHFS error: Failed to read block 0x0: -5
[ 1250.185156][T22614] unable to read squashfs_super_block
[ 1250.455570][T22625] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4922'.
[ 1250.734163][ T5946] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1250.734496][ T5946] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[ 1250.778639][ T5946] usb 5-1: USB disconnect, device number 84
[ 1251.101206][  T821] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[ 1251.231182][  T821] usb 10-1: device descriptor read/64, error -71
[ 1251.481115][  T821] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[ 1251.613113][  T821] usb 10-1: device descriptor read/64, error -71
[ 1251.721791][  T821] usb usb10-port1: attempt power cycle
[ 1251.761169][ T5946] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1251.892720][ T5946] usb 9-1: device descriptor read/64, error -71
[ 1252.061184][  T821] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1252.082844][  T821] usb 10-1: device descriptor read/8, error -71
[ 1252.131168][ T5946] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1252.261162][ T5946] usb 9-1: device descriptor read/64, error -71
[ 1252.331177][  T821] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[ 1252.352098][  T821] usb 10-1: device descriptor read/8, error -71
[ 1252.373212][ T5946] usb usb9-port1: attempt power cycle
[ 1252.461642][  T821] usb usb10-port1: unable to enumerate USB device
[ 1252.566687][T22654] binder_alloc: binder_alloc_mmap_handler: 22653 200000735000-200000736000 already mapped failed -16
[ 1252.713841][ T5946] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1252.732111][ T5946] usb 9-1: device descriptor read/8, error -71
[ 1252.971236][ T5946] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1252.995112][ T5946] usb 9-1: device descriptor read/8, error -71
[ 1253.103978][ T5946] usb usb9-port1: unable to enumerate USB device
[ 1253.401651][  T821] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[ 1253.541372][  T821] usb 1-1: device descriptor read/64, error -71
[ 1253.781077][  T821] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 1253.912065][  T821] usb 1-1: device descriptor read/64, error -71
[ 1254.034117][  T821] usb usb1-port1: attempt power cycle
[ 1254.389576][T22684] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[ 1254.401123][  T821] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[ 1254.421964][  T821] usb 1-1: device descriptor read/8, error -71
[ 1254.662094][  T821] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[ 1254.684503][  T821] usb 1-1: device descriptor read/8, error -71
[ 1254.792408][  T821] usb usb1-port1: unable to enumerate USB device
[ 1254.872795][ T5912] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[ 1254.981070][   T10] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 1255.025497][ T5912] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1255.030853][ T5912] usb 10-1: string descriptor 0 read error: -22
[ 1255.031096][ T5912] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.40
[ 1255.031126][ T5912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.141117][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1255.143535][   T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1255.143570][   T10] usb 9-1: config 0 has no interface number 0
[ 1255.175292][   T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1255.175333][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.175355][   T10] usb 9-1: Product: syz
[ 1255.175371][   T10] usb 9-1: Manufacturer: syz
[ 1255.175392][   T10] usb 9-1: SerialNumber: syz
[ 1255.210673][   T10] usb 9-1: config 0 descriptor??
[ 1255.233128][   T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1255.499829][T22688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1255.516536][   T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1255.519402][T22688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1255.588471][   T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1255.621152][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 16
[ 1255.956240][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1255.957966][ T5946] usb 9-1: USB disconnect, device number 66
[ 1256.025277][ T5946] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1256.043572][ T5946] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1256.044585][ T5946] quatech2 9-1:0.51: device disconnected
[ 1256.098472][ T5912] saitek 0003:06A3:0CCB.0039: collection stack underflow
[ 1256.098507][ T5912] saitek 0003:06A3:0CCB.0039: item 0 0 0 12 parsing failed
[ 1256.121385][ T5912] saitek 0003:06A3:0CCB.0039: parse failed
[ 1256.121479][ T5912] saitek 0003:06A3:0CCB.0039: probe with driver saitek failed with error -22
[ 1256.671893][ T5912] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1256.831044][ T5912] usb 5-1: Using ep0 maxpacket: 16
[ 1256.836203][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1256.836249][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1256.836292][ T5912] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1256.836316][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.887398][ T5912] usb 5-1: config 0 descriptor??
[ 1257.226504][T22718] nfs: Deprecated parameter 'intr'
[ 1257.300810][ T5912] hid_parser_main: 5 callbacks suppressed
[ 1257.300831][ T5912] ntrig 0003:1B96:0008.003A: unknown main item tag 0x1
[ 1257.300855][ T5912] ntrig 0003:1B96:0008.003A: unknown main item tag 0x5
[ 1257.327612][ T5912] ntrig 0003:1B96:0008.003A: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0
[ 1257.451396][ T5946] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 1257.497754][ T5912] ntrig 0003:1B96:0008.003A: Firmware version: 2.2.30.12.3 (4be5 8bc9)
[ 1257.602166][ T5946] usb 1-1: too many configurations: 151, using maximum allowed: 8
[ 1257.628760][ T5946] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[ 1257.628785][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[ 1257.628801][ T5946] usb 1-1: Product: syz
[ 1257.628832][ T5946] usb 1-1: Manufacturer: syz
[ 1257.628849][ T5946] usb 1-1: SerialNumber: syz
[ 1257.643072][ T5946] usb 1-1: config 0 descriptor??
[ 1257.765479][T22709] input: syz0 as /devices/virtual/input/input75
[ 1257.895571][ T5946] usb 1-1: USB disconnect, device number 35
[ 1257.940406][ T5912] usb 10-1: USB disconnect, device number 20
[ 1257.972121][   T10] usb 5-1: USB disconnect, device number 85
[ 1258.062974][T22722] gfs2: not a GFS2 filesystem
[ 1258.571936][   T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1258.665092][T22738] FAULT_INJECTION: forcing a failure.
[ 1258.665092][T22738] name failslab, interval 1, probability 0, space 0, times 0
[ 1258.665132][T22738] CPU: 1 UID: 0 PID: 22738 Comm: syz.0.4961 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1258.665162][T22738] Tainted: [L]=SOFTLOCKUP
[ 1258.665170][T22738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1258.665184][T22738] Call Trace:
[ 1258.665202][T22738]  <TASK>
[ 1258.665211][T22738]  dump_stack_lvl+0xe8/0x150
[ 1258.665240][T22738]  should_fail_ex+0x46b/0x600
[ 1258.665275][T22738]  should_failslab+0xa8/0x100
[ 1258.665310][T22738]  kmem_cache_alloc_noprof+0x87/0x680
[ 1258.665342][T22738]  ? __inet_hash_connect+0x1657/0x2630
[ 1258.665371][T22738]  __inet_hash_connect+0x1657/0x2630
[ 1258.665409][T22738]  ? __inet_hash_connect+0x60d/0x2630
[ 1258.665442][T22738]  ? __pfx___inet_hash_connect+0x10/0x10
[ 1258.665468][T22738]  ? inet6_ehashfn+0x2f/0x3b0
[ 1258.665503][T22738]  ? inet6_hash_connect+0xeb/0x170
[ 1258.665542][T22738]  tcp_v6_connect+0x1062/0x1b10
[ 1258.665570][T22738]  ? kasan_save_track+0x3e/0x80
[ 1258.665598][T22738]  ? __kasan_kmalloc+0x93/0xb0
[ 1258.665625][T22738]  ? __kmalloc_cache_noprof+0x3a6/0x690
[ 1258.665674][T22738]  ? __pfx_tcp_v6_connect+0x10/0x10
[ 1258.665713][T22738]  __inet_stream_connect+0x25a/0xdd0
[ 1258.665755][T22738]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1258.665789][T22738]  ? __kasan_kmalloc+0x93/0xb0
[ 1258.665821][T22738]  ? __kmalloc_cache_noprof+0x3a6/0x690
[ 1258.665852][T22738]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[ 1258.665891][T22738]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[ 1258.665933][T22738]  tcp_sendmsg_locked+0x4a8e/0x5370
[ 1258.665988][T22738]  ? __lock_acquire+0x6b5/0x2cf0
[ 1258.666019][T22738]  ? tcp_sendmsg_locked+0x2f1/0x5370
[ 1258.666074][T22738]  ? __lock_acquire+0x6b5/0x2cf0
[ 1258.666117][T22738]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1258.666143][T22738]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1258.666168][T22738]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1258.666202][T22738]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1258.666243][T22738]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[ 1258.666291][T22738]  ? __local_bh_enable_ip+0x1ae/0x2b0
[ 1258.666316][T22738]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1258.666347][T22738]  tcp_sendmsg+0x2f/0x50
[ 1258.666380][T22738]  ? __pfx_inet6_sendmsg+0x10/0x10
[ 1258.666404][T22738]  sock_sendmsg_nosec+0x90/0x150
[ 1258.666446][T22738]  __sys_sendto+0x402/0x590
[ 1258.666481][T22738]  ? __pfx___sys_sendto+0x10/0x10
[ 1258.666540][T22738]  ? ksys_write+0x248/0x270
[ 1258.666577][T22738]  ? __pfx_ksys_write+0x10/0x10
[ 1258.666624][T22738]  __x64_sys_sendto+0xde/0x100
[ 1258.666653][T22738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1258.666679][T22738]  do_syscall_64+0x15f/0xf80
[ 1258.666702][T22738]  ? trace_irq_disable+0x3b/0x140
[ 1258.666729][T22738]  ? clear_bhb_loop+0x40/0x90
[ 1258.666759][T22738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1258.666784][T22738] RIP: 0033:0x7f8b726dc819
[ 1258.666806][T22738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1258.666832][T22738] RSP: 002b:00007f8b7092e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1258.666856][T22738] RAX: ffffffffffffffda RBX: 00007f8b72955fa0 RCX: 00007f8b726dc819
[ 1258.666874][T22738] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1258.666888][T22738] RBP: 00007f8b7092e090 R08: 0000200000000140 R09: 000000000000001c
[ 1258.666905][T22738] R10: 0000000020040045 R11: 0000000000000246 R12: 0000000000000001
[ 1258.666920][T22738] R13: 00007f8b72956038 R14: 00007f8b72955fa0 R15: 00007fffd3d64148
[ 1258.666959][T22738]  </TASK>
[ 1258.721108][   T10] usb 10-1: Using ep0 maxpacket: 32
[ 1258.818197][   T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1258.818227][   T10] usb 10-1: config 0 has no interface number 0
[ 1259.061862][   T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1259.061896][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.061919][   T10] usb 10-1: Product: syz
[ 1259.061936][   T10] usb 10-1: Manufacturer: syz
[ 1259.061953][   T10] usb 10-1: SerialNumber: syz
[ 1259.138850][   T10] usb 10-1: config 0 descriptor??
[ 1259.392957][ T5912] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1259.551283][ T5912] usb 5-1: Using ep0 maxpacket: 16
[ 1259.558017][ T5912] usb 5-1: config 4 has an invalid interface number: 209 but max is 0
[ 1259.558047][ T5912] usb 5-1: config 4 has no interface number 0
[ 1259.558104][ T5912] usb 5-1: config 4 interface 209 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 8
[ 1259.558133][ T5912] usb 5-1: config 4 interface 209 has no altsetting 0
[ 1259.567539][   T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1259.567572][   T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1259.626442][ T5912] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=75.db
[ 1259.626472][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.626493][ T5912] usb 5-1: Product: syz
[ 1259.626509][ T5912] usb 5-1: Manufacturer: syz
[ 1259.626523][ T5912] usb 5-1: SerialNumber: syz
[ 1259.739457][T22740] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1259.994978][   T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[ 1259.995293][   T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[ 1259.997713][ T5912] aircable 5-1:4.209: aircable converter detected
[ 1260.048702][   T10] usb 10-1: USB disconnect, device number 21
[ 1260.061635][ T5912] usb 5-1: aircable converter now attached to ttyUSB0
[ 1260.120191][ T5912] usb 5-1: USB disconnect, device number 86
[ 1260.163581][ T5912] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[ 1260.200995][ T5912] aircable 5-1:4.209: device disconnected
[ 1260.655366][T22762] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4971'.
[ 1260.976223][T22773] syzkaller0: entered promiscuous mode
[ 1260.976251][T22773] syzkaller0: entered allmulticast mode
[ 1261.000049][T22773] syzkaller0: refused to change device tx_queue_len
[ 1261.401212][ T5912] usb 9-1: new full-speed USB device number 67 using dummy_hcd
[ 1261.748148][T22790] dlm: non-version read from control device 2
[ 1261.939182][T22795] FAULT_INJECTION: forcing a failure.
[ 1261.939182][T22795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1261.939221][T22795] CPU: 0 UID: 0 PID: 22795 Comm: syz.9.4982 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1261.939252][T22795] Tainted: [L]=SOFTLOCKUP
[ 1261.939261][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1261.939276][T22795] Call Trace:
[ 1261.939285][T22795]  <TASK>
[ 1261.939295][T22795]  dump_stack_lvl+0xe8/0x150
[ 1261.939326][T22795]  should_fail_ex+0x46b/0x600
[ 1261.939363][T22795]  strncpy_from_user+0x36/0x2b0
[ 1261.939397][T22795]  do_getname+0x77/0x250
[ 1261.939425][T22795]  do_sys_openat2+0xca/0x200
[ 1261.939456][T22795]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1261.939485][T22795]  ? ksys_write+0x248/0x270
[ 1261.939520][T22795]  ? __pfx_ksys_write+0x10/0x10
[ 1261.939551][T22795]  ? __task_pid_nr_ns+0x28/0x470
[ 1261.939587][T22795]  __x64_sys_openat+0x138/0x170
[ 1261.939627][T22795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.939651][T22795]  do_syscall_64+0x15f/0xf80
[ 1261.939677][T22795]  ? clear_bhb_loop+0x40/0x90
[ 1261.939714][T22795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.939739][T22795] RIP: 0033:0x7f015c40c819
[ 1261.939760][T22795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.939781][T22795] RSP: 002b:00007f015a645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1261.939805][T22795] RAX: ffffffffffffffda RBX: 00007f015c686090 RCX: 00007f015c40c819
[ 1261.939823][T22795] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c
[ 1261.939839][T22795] RBP: 00007f015a645090 R08: 0000000000000000 R09: 0000000000000000
[ 1261.939858][T22795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1261.939872][T22795] R13: 00007f015c686128 R14: 00007f015c686090 R15: 00007ffc1b158ee8
[ 1261.939908][T22795]  </TASK>
[ 1262.431152][   T44] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1262.463801][ T5895] usb 5-1: new low-speed USB device number 87 using dummy_hcd
[ 1262.583624][   T44] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[ 1262.583657][   T44] usb 1-1: config 0 has no interface number 0
[ 1262.586434][   T44] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1262.586466][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.586488][   T44] usb 1-1: Product: syz
[ 1262.586509][   T44] usb 1-1: Manufacturer: syz
[ 1262.586521][   T44] usb 1-1: SerialNumber: syz
[ 1262.619404][ T5895] usb 5-1: Invalid ep0 maxpacket: 64
[ 1262.643149][   T44] usb 1-1: config 0 descriptor??
[ 1262.762656][ T5895] usb 5-1: new low-speed USB device number 88 using dummy_hcd
[ 1262.781146][ T5912] usb 9-1: new full-speed USB device number 68 using dummy_hcd
[ 1262.921088][ T5895] usb 5-1: Invalid ep0 maxpacket: 64
[ 1262.923115][ T5895] usb usb5-port1: attempt power cycle
[ 1262.945332][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1262.947105][ T5912] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1262.947171][ T5912] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1262.950603][ T5912] usb 9-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1262.950629][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.950697][ T5912] usb 9-1: Product: syz
[ 1262.950708][ T5912] usb 9-1: Manufacturer: ш
[ 1262.950719][ T5912] usb 9-1: SerialNumber: syz
[ 1263.058537][   T44] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823)
[ 1263.058856][   T44] uvcvideo 1-1:0.64: No valid video chain found.
[ 1263.083613][   T44] usb 1-1: USB disconnect, device number 36
[ 1263.247414][ T5912] usb 9-1: 1:1 : bogus bTerminalLink 14
[ 1263.247932][ T5912] usb 9-1: unit 217 not found!
[ 1263.250888][ T5912] usb 9-1: unit 3 not found!
[ 1263.264035][ T5895] usb 5-1: new low-speed USB device number 89 using dummy_hcd
[ 1263.274429][ T5912] usb 9-1: unit 8 not found!
[ 1263.286571][ T5895] usb 5-1: Invalid ep0 maxpacket: 64
[ 1263.345351][ T5912] usb 9-1: USB disconnect, device number 68
[ 1263.431189][ T5895] usb 5-1: new low-speed USB device number 90 using dummy_hcd
[ 1263.453352][ T5895] usb 5-1: Invalid ep0 maxpacket: 64
[ 1263.455149][ T5895] usb usb5-port1: unable to enumerate USB device
[ 1263.506402][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1263.761191][  T821] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[ 1263.917270][  T821] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1263.917305][  T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.944514][  T821] usb 10-1: config 0 descriptor??
[ 1263.955511][  T821] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1264.163310][  T821] gp8psk: usb in 128 operation failed.
[ 1264.611093][  T821] gp8psk: usb in 146 operation failed.
[ 1264.611114][  T821] gp8psk: failed to get FW version
[ 1264.613119][  T821] gp8psk: usb in 149 operation failed.
[ 1264.613136][  T821] gp8psk: failed to get FPGA version
[ 1264.658108][  T821] gp8psk: usb in 138 operation failed.
[ 1264.658130][  T821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1264.658173][  T821] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1264.708239][  T821] usb 10-1: USB disconnect, device number 22
[ 1265.632885][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1265.691123][  T821] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[ 1265.771190][   T44] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1265.781107][ T5895] usb 1-1: Using ep0 maxpacket: 32
[ 1265.783044][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.783076][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1265.783116][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1265.783134][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.788691][ T5895] usb 1-1: config 0 descriptor??
[ 1265.832763][ T5912] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1265.852432][ T5895] hub 1-1:0.0: USB hub found
[ 1265.869152][  T821] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1265.869185][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.869209][  T821] usb 5-1: Product: syz
[ 1265.869226][  T821] usb 5-1: Manufacturer: syz
[ 1265.869244][  T821] usb 5-1: SerialNumber: syz
[ 1265.900157][  T821] usb 5-1: config 0 descriptor??
[ 1265.939922][   T44] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1265.949963][   T44] usb 10-1: config 63 has an invalid interface number: 66 but max is 0
[ 1265.949994][   T44] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.950078][   T44] usb 10-1: config 63 has no interface number 0
[ 1265.950116][   T44] usb 10-1: config 63 interface 66 has no altsetting 0
[ 1265.981352][ T5912] usb 9-1: device descriptor read/64, error -71
[ 1266.002496][   T44] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1266.002554][ T5895] hub 1-1:0.0: 1 port detected
[ 1266.003567][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.003655][   T44] usb 10-1: Product: syz
[ 1266.004605][   T44] usb 10-1: Manufacturer: syz
[ 1266.004661][   T44] usb 10-1: SerialNumber: syz
[ 1266.120325][  T821] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1266.231212][ T5912] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1266.293826][   T44] uvcvideo 10-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1266.294551][   T44] uvcvideo 10-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[ 1266.295142][   T44] uvcvideo 10-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[ 1266.296474][   T44] uvcvideo 10-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[ 1266.310120][   T44] uvcvideo 10-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[ 1266.319099][   T44] uvcvideo 10-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[ 1266.321726][   T44] uvcvideo 10-1:63.66: No streaming interface found for terminal 29.
[ 1266.322722][   T44] uvcvideo 10-1:63.66: Entity type for entity Output 32773 was not initialized!
[ 1266.374694][   T44] usb 10-1: USB disconnect, device number 23
[ 1266.384379][ T5912] usb 9-1: device descriptor read/64, error -71
[ 1266.419971][ T5895] hub 1-1:0.0: activate --> -90
[ 1266.504420][ T5912] usb usb9-port1: attempt power cycle
[ 1266.629484][ T5895] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1266.728052][ T5895] usb 1-1: USB disconnect, device number 37
[ 1266.766855][ T1516] usb 1-1: Failed to suspend device, error -71
[ 1266.874695][ T5912] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1266.883680][   T44] usb 10-1: new full-speed USB device number 24 using dummy_hcd
[ 1266.905562][ T5912] usb 9-1: device descriptor read/8, error -71
[ 1267.045229][   T44] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1267.046044][   T44] usb 10-1: not running at top speed; connect to a high speed hub
[ 1267.047346][   T44] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1267.054446][   T44] usb 10-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[ 1267.086611][   T44] usb 10-1: string descriptor 0 read error: -22
[ 1267.086820][   T44] usb 10-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=3d.a2
[ 1267.087069][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.171315][ T5912] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1267.192492][ T5912] usb 9-1: device descriptor read/8, error -71
[ 1267.286998][T22844] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5000'.
[ 1267.304564][T22844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5000'.
[ 1267.318474][ T5912] usb usb9-port1: unable to enumerate USB device
[ 1267.675679][  T821] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1267.703139][  T821] usb 5-1: USB disconnect, device number 91
[ 1268.101616][T22852] Invalid ELF header len 16
[ 1268.426049][T22859] binder: 22857:22859 ioctl 4018620d 200000004a80 returned -22
[ 1268.624228][T22855] binder: 22854:22855 ioctl c0306201 200000001a80 returned -14
[ 1268.662084][ T5895] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1268.791452][ T5895] usb 1-1: device descriptor read/64, error -71
[ 1268.816946][ T5912] usb 10-1: USB disconnect, device number 24
[ 1268.851709][   T60] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 1269.041686][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1269.201104][ T5895] usb 1-1: device descriptor read/64, error -71
[ 1269.312313][ T5895] usb usb1-port1: attempt power cycle
[ 1269.793131][ T5895] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1269.811827][ T5895] usb 1-1: device descriptor read/8, error -71
[ 1269.851615][ T5946] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1270.005638][ T5946] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1270.005671][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.005699][ T5946] usb 10-1: Product: syz
[ 1270.005710][ T5946] usb 10-1: Manufacturer: syz
[ 1270.005722][ T5946] usb 10-1: SerialNumber: syz
[ 1270.010230][ T5946] usb 10-1: config 0 descriptor??
[ 1270.051062][ T5895] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1270.054360][ T5946] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1270.073201][ T5895] usb 1-1: device descriptor read/8, error -71
[ 1270.181609][ T5895] usb usb1-port1: unable to enumerate USB device
[ 1270.558203][T22889] bridge0: port 3(erspan0) entered blocking state
[ 1270.560180][T22889] bridge0: port 3(erspan0) entered disabled state
[ 1270.562536][T22889] erspan0: entered allmulticast mode
[ 1270.593322][T22889] erspan0: entered promiscuous mode
[ 1270.657920][T22889] bridge0: port 3(erspan0) entered blocking state
[ 1270.658193][T22889] bridge0: port 3(erspan0) entered forwarding state
[ 1270.750244][T22891] erspan0: left allmulticast mode
[ 1270.750267][T22891] erspan0: left promiscuous mode
[ 1270.782794][T22891] bridge0: port 3(erspan0) entered disabled state
[ 1271.158017][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5022'.
[ 1271.878747][T22925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.891417][T22925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.925941][T22925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.926585][T22925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1272.575677][T22931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5030'.
[ 1273.022646][ T5912] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[ 1273.176911][ T5912] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1273.176950][ T5912] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1273.176995][ T5912] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1273.177022][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.822950][ T5912] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[ 1273.824534][   T10] usb 10-1: USB disconnect, device number 25
[ 1273.881796][ T5912] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input76
[ 1273.993114][ T5912] input: failed to attach handler kbd to device input76, error: -5
[ 1274.238213][ T5912] usb 1-1: USB disconnect, device number 42
[ 1274.603292][T22965] netlink: 'syz.0.5041': attribute type 9 has an invalid length.
[ 1275.741130][   T44] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1275.791504][  T821] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1275.906767][   T44] usb 5-1: Using ep0 maxpacket: 8
[ 1275.909415][   T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1275.909457][   T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1275.909487][   T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1275.909514][   T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1275.909561][   T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1275.909587][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1275.987282][  T821] usb 10-1: Using ep0 maxpacket: 32
[ 1276.010740][  T821] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1276.010782][  T821] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1276.036518][  T821] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1276.036542][  T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.036603][  T821] usb 10-1: Product: syz
[ 1276.036615][  T821] usb 10-1: Manufacturer: О
[ 1276.036626][  T821] usb 10-1: SerialNumber: syz
[ 1276.210004][   T44] usb 5-1: GET_CAPABILITIES returned 0
[ 1276.210115][   T44] usbtmc 5-1:16.0: can't read capabilities
[ 1276.484668][T22983] serio: Serial port ttyS3
[ 1276.568481][T22981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1276.570551][T22981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1276.720403][  T821] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1276.720457][  T821] usb 10-1: MIDIStreaming interface descriptor not found
[ 1276.936035][ T5946] usb 9-1: new full-speed USB device number 73 using dummy_hcd
[ 1276.997000][  T821] usb 10-1: USB disconnect, device number 26
[ 1277.109430][ T5946] usb 9-1: not running at top speed; connect to a high speed hub
[ 1277.132788][ T5946] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1277.132827][ T5946] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1277.140766][ T5946] usb 9-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1277.140799][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.140839][ T5946] usb 9-1: Product: syz
[ 1277.140856][ T5946] usb 9-1: Manufacturer: ш
[ 1277.140874][ T5946] usb 9-1: SerialNumber: syz
[ 1277.222249][T22999] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5047'.
[ 1277.288789][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1277.336367][T22999] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5047'.
[ 1277.528562][ T5946] usb 9-1: 1:1 : bogus bTerminalLink 14
[ 1277.529076][ T5946] usb 9-1: unit 217 not found!
[ 1277.530143][ T5946] usb 9-1: unit 3 not found!
[ 1277.530158][ T5946] usb 9-1: unit 8 not found!
[ 1277.582727][T23007] vivid-007: disconnect
[ 1277.597831][T23005] vivid-007: reconnect
[ 1277.944058][ T5946] usb 9-1: USB disconnect, device number 73
[ 1278.097245][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1278.293253][T23020] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5057'.
[ 1278.329333][   T10] usb 5-1: USB disconnect, device number 92
[ 1278.541201][   T44] usb 10-1: new low-speed USB device number 27 using dummy_hcd
[ 1278.696729][   T44] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1278.699461][   T44] usb 10-1: config 1 interface 0 altsetting 241 endpoint 0x81 has invalid maxpacket 64, setting to 8
[ 1278.699496][   T44] usb 10-1: config 1 interface 0 altsetting 241 endpoint 0x82 is Bulk; changing to Interrupt
[ 1278.699521][   T44] usb 10-1: config 1 interface 0 altsetting 241 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1278.699551][   T44] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1278.752549][   T44] usb 10-1: string descriptor 0 read error: -22
[ 1278.752701][   T44] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1278.752729][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.761768][T23020] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1278.761995][T23020] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1278.762269][T23020] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1278.813382][   T44] cdc_ether 10-1:1.0: missing cdc ether descriptor
[ 1278.976304][ T5946] usb 10-1: USB disconnect, device number 27
[ 1279.411063][   T44] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1279.566566][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.566628][   T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1279.566656][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.627299][   T44] usb 5-1: config 0 descriptor??
[ 1279.644270][   T44] pwc: Askey VC010 type 2 USB webcam detected.
[ 1279.779910][T23039] netlink: 'syz.9.5062': attribute type 4 has an invalid length.
[ 1280.277061][   T44] pwc: recv_control_msg error -32 req 02 val 2700
[ 1280.278179][   T44] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1280.279461][   T44] pwc: recv_control_msg error -32 req 04 val 1000
[ 1280.280096][   T44] pwc: recv_control_msg error -32 req 04 val 1300
[ 1280.309186][   T44] pwc: recv_control_msg error -32 req 04 val 1400
[ 1280.310568][   T44] pwc: recv_control_msg error -32 req 02 val 2000
[ 1280.311972][   T44] pwc: recv_control_msg error -32 req 02 val 2100
[ 1280.331227][   T44] pwc: recv_control_msg error -32 req 04 val 1500
[ 1280.332955][   T44] pwc: recv_control_msg error -32 req 02 val 2500
[ 1280.345675][   T44] pwc: recv_control_msg error -32 req 02 val 2400
[ 1280.436166][T23049] Invalid logical block size (8704)
[ 1280.692552][ T5912] usb 9-1: new full-speed USB device number 74 using dummy_hcd
[ 1280.755227][   T44] pwc: recv_control_msg error -71 req 02 val 2800
[ 1280.757650][   T44] pwc: recv_control_msg error -71 req 04 val 1100
[ 1280.758118][   T44] pwc: recv_control_msg error -71 req 04 val 1200
[ 1280.775239][   T44] pwc: Registered as video103.
[ 1280.791752][   T44] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input77
[ 1280.830327][   T44] usb 5-1: USB disconnect, device number 93
[ 1280.864850][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1280.866596][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1280.866634][ T5912] usb 9-1: can't read configurations, error -61
[ 1280.881428][ T5895] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1280.911129][  T821] usb 10-1: new full-speed USB device number 28 using dummy_hcd
[ 1280.997147][ T5912] usb 9-1: new full-speed USB device number 75 using dummy_hcd
[ 1281.031181][ T5895] usb 1-1: Using ep0 maxpacket: 16
[ 1281.046570][ T5895] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1281.046604][ T5895] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1281.046634][ T5895] usb 1-1: Product: syz
[ 1281.046649][ T5895] usb 1-1: Manufacturer: syz
[ 1281.046665][ T5895] usb 1-1: SerialNumber: syz
[ 1281.100033][ T5895] usb 1-1: config 0 descriptor??
[ 1281.113838][  T821] usb 10-1: not running at top speed; connect to a high speed hub
[ 1281.124909][  T821] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1281.124934][  T821] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1281.127354][  T821] usb 10-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1281.127386][  T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.127402][  T821] usb 10-1: Product: syz
[ 1281.127413][  T821] usb 10-1: Manufacturer: ш
[ 1281.127424][  T821] usb 10-1: SerialNumber: syz
[ 1281.194605][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1281.207684][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1281.207832][ T5912] usb 9-1: can't read configurations, error -61
[ 1281.213769][ T5912] usb usb9-port1: attempt power cycle
[ 1281.310151][ T5895] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[ 1281.477729][  T821] usb 10-1: 1:1 : bogus bTerminalLink 14
[ 1281.478276][  T821] usb 10-1: unit 217 not found!
[ 1281.479739][  T821] usb 10-1: unit 3 not found!
[ 1281.479760][  T821] usb 10-1: unit 8 not found!
[ 1281.511711][ T5895] peak_usb 1-1:0.0 can0: sending command failure: -22
[ 1281.511740][ T5895] peak_usb 1-1:0.0 can0: sending command failure: -22
[ 1281.511774][ T5895] peak_usb 1-1:0.0 can0: sending command failure: -22
[ 1281.561113][ T5912] usb 9-1: new full-speed USB device number 76 using dummy_hcd
[ 1281.583785][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1281.585595][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1281.585628][ T5912] usb 9-1: can't read configurations, error -61
[ 1281.658564][  T821] usb 10-1: USB disconnect, device number 28
[ 1281.702046][ T5895] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22
[ 1281.731188][ T5912] usb 9-1: new full-speed USB device number 77 using dummy_hcd
[ 1281.760612][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[ 1281.777635][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1281.777664][ T5912] usb 9-1: can't read configurations, error -61
[ 1281.777926][ T5912] usb usb9-port1: unable to enumerate USB device
[ 1281.829923][T12844] usb 1-1: USB disconnect, device number 43
[ 1282.024871][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1282.091410][T23059] veth1_to_batadv: entered promiscuous mode
[ 1282.091444][T23059] veth1_to_batadv: entered allmulticast mode
[ 1283.581201][T12844] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1283.736072][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1283.736135][T12844] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1283.736163][T12844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.777226][T12844] usb 1-1: config 0 descriptor??
[ 1283.791464][T12844] pwc: Askey VC010 type 2 USB webcam detected.
[ 1283.873449][T23092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5081'.
[ 1283.873477][T23092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5081'.
[ 1284.141086][ T5946] usb 10-1: new full-speed USB device number 29 using dummy_hcd
[ 1284.294732][ T5946] usb 10-1: not running at top speed; connect to a high speed hub
[ 1284.296601][ T5946] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1284.296636][ T5946] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1284.301128][ T5946] usb 10-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1284.301159][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.301182][ T5946] usb 10-1: Product: syz
[ 1284.301199][ T5946] usb 10-1: Manufacturer: ш
[ 1284.301215][ T5946] usb 10-1: SerialNumber: syz
[ 1284.387677][T12844] pwc: recv_control_msg error -32 req 02 val 2700
[ 1284.388780][T12844] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1284.390091][T12844] pwc: recv_control_msg error -32 req 04 val 1000
[ 1284.411512][T12844] pwc: recv_control_msg error -32 req 04 val 1300
[ 1284.429449][T12844] pwc: recv_control_msg error -32 req 04 val 1400
[ 1284.437698][T12844] pwc: recv_control_msg error -32 req 02 val 2000
[ 1284.439286][T12844] pwc: recv_control_msg error -32 req 02 val 2100
[ 1284.440475][T12844] pwc: recv_control_msg error -32 req 04 val 1500
[ 1284.461644][T12844] pwc: recv_control_msg error -32 req 02 val 2500
[ 1284.470749][T12844] pwc: recv_control_msg error -32 req 02 val 2400
[ 1284.622386][ T5946] usb 10-1: 1:1 : bogus bTerminalLink 14
[ 1284.622927][ T5946] usb 10-1: unit 217 not found!
[ 1284.624309][ T5946] usb 10-1: unit 3 not found!
[ 1284.624354][ T5946] usb 10-1: unit 8 not found!
[ 1284.687546][T12844] pwc: recv_control_msg error -71 req 02 val 2900
[ 1284.688031][T12844] pwc: recv_control_msg error -71 req 02 val 2800
[ 1284.688595][T12844] pwc: recv_control_msg error -71 req 04 val 1100
[ 1284.690313][T12844] pwc: recv_control_msg error -71 req 04 val 1200
[ 1284.733143][T12844] pwc: Registered as video103.
[ 1284.745037][T12844] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input78
[ 1284.779866][T12844] usb 1-1: USB disconnect, device number 44
[ 1284.984541][ T5946] usb 10-1: USB disconnect, device number 29
[ 1285.259083][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1286.382770][  T821] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1286.531204][  T821] usb 1-1: Using ep0 maxpacket: 16
[ 1286.534014][  T821] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1286.534053][  T821] usb 1-1: can't read configurations, error -61
[ 1286.815533][  T821] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1287.165872][  T821] usb 1-1: Using ep0 maxpacket: 16
[ 1287.258438][   T60] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1287.591095][  T821] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1287.591137][  T821] usb 1-1: can't read configurations, error -61
[ 1287.591718][  T821] usb usb1-port1: attempt power cycle
[ 1287.812149][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[ 1287.812200][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[ 1287.987940][  T821] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1288.022419][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.022932][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.023405][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.027442][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.027924][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.028400][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.031983][T23140] netlink: 'syz.9.5094': attribute type 8 has an invalid length.
[ 1288.215300][  T821] usb 1-1: Using ep0 maxpacket: 16
[ 1288.290939][  T821] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1288.290985][  T821] usb 1-1: can't read configurations, error -61
[ 1288.453432][  T821] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1288.559433][  T821] usb 1-1: Using ep0 maxpacket: 16
[ 1288.569178][  T821] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1288.569219][  T821] usb 1-1: can't read configurations, error -61
[ 1288.569620][  T821] usb usb1-port1: unable to enumerate USB device
[ 1289.121182][   T10] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[ 1289.278649][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[ 1289.282337][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1289.282435][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1289.317885][   T10] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1289.317910][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.317926][   T10] usb 5-1: Product: syz
[ 1289.317938][   T10] usb 5-1: Manufacturer: ш
[ 1289.317949][   T10] usb 5-1: SerialNumber: syz
[ 1289.584644][T23165] FAULT_INJECTION: forcing a failure.
[ 1289.584644][T23165] name failslab, interval 1, probability 0, space 0, times 0
[ 1289.584685][T23165] CPU: 1 UID: 0 PID: 23165 Comm: syz.0.5103 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1289.584717][T23165] Tainted: [L]=SOFTLOCKUP
[ 1289.584727][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1289.584742][T23165] Call Trace:
[ 1289.584752][T23165]  <TASK>
[ 1289.584762][T23165]  dump_stack_lvl+0xe8/0x150
[ 1289.584792][T23165]  should_fail_ex+0x46b/0x600
[ 1289.584828][T23165]  should_failslab+0xa8/0x100
[ 1289.584866][T23165]  __kmalloc_noprof+0xdf/0x7b0
[ 1289.584900][T23165]  ? kfree+0x4d/0x6c0
[ 1289.584928][T23165]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1289.584966][T23165]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1289.585000][T23165]  ? tomoyo_domain+0xd7/0x130
[ 1289.585047][T23165]  ? tomoyo_path_number_perm+0x219/0x630
[ 1289.585074][T23165]  tomoyo_path_number_perm+0x246/0x630
[ 1289.585104][T23165]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1289.585130][T23165]  ? __lock_acquire+0x6b5/0x2cf0
[ 1289.585163][T23165]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1289.585224][T23165]  ? __fget_files+0x2a/0x420
[ 1289.585255][T23165]  ? __fget_files+0x2a/0x420
[ 1289.585283][T23165]  ? __fget_files+0x3a6/0x420
[ 1289.585309][T23165]  ? __fget_files+0x2a/0x420
[ 1289.585341][T23165]  security_file_ioctl+0xc3/0x2a0
[ 1289.585369][T23165]  __se_sys_ioctl+0x47/0x170
[ 1289.585404][T23165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.585431][T23165]  do_syscall_64+0x15f/0xf80
[ 1289.585454][T23165]  ? trace_irq_disable+0x3b/0x140
[ 1289.585485][T23165]  ? clear_bhb_loop+0x40/0x90
[ 1289.585513][T23165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.585537][T23165] RIP: 0033:0x7f8b726dc819
[ 1289.585559][T23165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.585579][T23165] RSP: 002b:00007f8b7092e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1289.585604][T23165] RAX: ffffffffffffffda RBX: 00007f8b72955fa0 RCX: 00007f8b726dc819
[ 1289.585622][T23165] RDX: 0000200000000000 RSI: 0000000080045518 RDI: 0000000000000003
[ 1289.585638][T23165] RBP: 00007f8b7092e090 R08: 0000000000000000 R09: 0000000000000000
[ 1289.585654][T23165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1289.585668][T23165] R13: 00007f8b72956038 R14: 00007f8b72955fa0 R15: 00007fffd3d64148
[ 1289.585705][T23165]  </TASK>
[ 1289.587054][T23165] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1289.597162][   T10] usb 5-1: 1:1 : bogus bTerminalLink 14
[ 1289.604452][   T10] usb 5-1: unit 217 not found!
[ 1289.614630][   T10] usb 5-1: unit 3 not found!
[ 1289.614713][   T10] usb 5-1: unit 8 not found!
[ 1290.169022][T23175] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1290.174778][   T10] usb 5-1: USB disconnect, device number 94
[ 1290.304779][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1290.313048][ T5912] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1290.482065][ T5912] usb 9-1: Using ep0 maxpacket: 8
[ 1290.484652][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1290.484688][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1290.484705][ T5912] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1290.484745][ T5912] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1290.484763][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.572792][ T5912] usb 9-1: config 0 descriptor??
[ 1290.841066][   T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1290.991058][   T10] usb 10-1: Using ep0 maxpacket: 8
[ 1291.016121][   T10] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1291.016153][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.016176][   T10] usb 10-1: Product: syz
[ 1291.016192][   T10] usb 10-1: Manufacturer: syz
[ 1291.016209][   T10] usb 10-1: SerialNumber: syz
[ 1291.057412][ T5912] zydacron 0003:13EC:0006.003B: unknown main item tag 0x7
[ 1291.057449][ T5912] zydacron 0003:13EC:0006.003B: unknown main item tag 0x6
[ 1291.057478][ T5912] zydacron 0003:13EC:0006.003B: item fetching failed at offset 36/37
[ 1291.059924][ T5912] zydacron 0003:13EC:0006.003B: parse failed
[ 1291.060050][ T5912] zydacron 0003:13EC:0006.003B: probe with driver zydacron failed with error -22
[ 1291.085894][   T10] usb 10-1: config 0 descriptor??
[ 1291.122289][   T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1291.122347][   T10] dvb-usb: bulk message failed: -22 (2/0)
[ 1291.154353][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1291.155001][   T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1291.155067][   T10] usb 10-1: media controller created
[ 1291.258525][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1291.313393][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1291.387155][   T10] DVB: Unable to find symbol mt352_attach()
[ 1291.387172][   T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1291.631089][   T10] rc_core: IR keymap rc-dvico-portable not found
[ 1291.631112][   T10] Registered IR keymap rc-empty
[ 1291.638931][   T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0
[ 1291.677999][   T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input79
[ 1291.724837][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[ 1291.724863][   T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1291.832879][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1291.945767][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1291.960876][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5114'.
[ 1292.051111][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.160996][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.280966][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.391321][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.504729][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.614360][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.664281][   T10] usb 9-1: USB disconnect, device number 78
[ 1292.729240][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.804950][ T5912] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1292.834547][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.941326][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1292.971890][ T5912] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1292.971923][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.971946][ T5912] usb 5-1: Product: syz
[ 1292.971962][ T5912] usb 5-1: Manufacturer: syz
[ 1292.971978][ T5912] usb 5-1: SerialNumber: syz
[ 1293.036888][ T5912] usb 5-1: config 0 descriptor??
[ 1293.051227][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1293.161954][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[ 1293.291420][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1293.469224][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[ 1293.571286][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[ 1293.688003][   T10] usb 10-1: USB disconnect, device number 30
[ 1294.007254][T23211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1294.010587][T23211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1294.240405][ T5912] usb 5-1: unexpected transceiver, part 0x00 version 0xe0
[ 1294.328621][   T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1294.462896][ T5912] usb 5-1: Firmware version (0.0) predates our first public release.
[ 1294.462924][ T5912] usb 5-1: Please update to version 0.2 or newer
[ 1294.464191][ T5912] usb 5-1: atusb_probe: initialization failed, error = -19
[ 1294.536142][ T5912] usb 5-1: USB disconnect, device number 95
[ 1295.579589][T15024] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 1295.583991][T15024] Bluetooth: hci1: ACL packet for unknown connection handle 200
[ 1295.967864][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5128'.
[ 1296.956609][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1297.048921][   T38] INFO: task syz-executor:18834 blocked for more than 143 seconds.
[ 1297.048950][   T38]       Tainted: G             L      syzkaller #0
[ 1297.048962][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1297.048972][   T38] task:syz-executor    state:D stack:18720 pid:18834 tgid:18834 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1297.049032][   T38] Call Trace:
[ 1297.049041][   T38]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1297.049054][   T38]  __schedule+0x169e/0x54f0
[ 1297.049116][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1297.049139][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1297.049161][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1297.049187][   T38]  ? __pfx___schedule+0x10/0x10
[ 1297.049223][   T38]  ? schedule+0x90/0x360
[ 1297.049254][   T38]  schedule+0x164/0x360
[ 1297.049284][   T38]  fuse_chan_wait_aborted+0x15b/0x250
[ 1297.049310][   T38]  ? __pfx_fuse_chan_wait_aborted+0x10/0x10
[ 1297.049334][   T38]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1297.049359][   T38]  ? __pfx_fuse_chan_abort+0x10/0x10
[ 1297.049380][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1297.049411][   T38]  fuse_conn_destroy+0x1e7/0x3e0
[ 1297.049438][   T38]  ? __pfx_fuse_conn_destroy+0x10/0x10
[ 1297.049462][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1297.049481][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1297.049501][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1297.049527][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1297.049552][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1297.049572][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1297.049591][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1297.049612][   T38]  fuse_kill_sb_anon+0x1ef/0x270
[ 1297.049644][   T38]  deactivate_locked_super+0xbc/0x130
[ 1297.049672][   T38]  cleanup_mnt+0x437/0x4d0
[ 1297.049699][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1297.049721][   T38]  task_work_run+0x1d9/0x270
[ 1297.049751][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 1297.049786][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.049786][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.049808][   T38]  exit_to_user_mode_loop+0xed/0x480
[ 1297.049833][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1297.049864][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.049886][   T38]  do_syscall_64+0x33e/0xf80
[ 1297.049907][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1297.049930][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1297.049954][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.049973][   T38] RIP: 0033:0x7f26ab85da57
[ 1297.049991][   T38] RSP: 002b:00007fff519d8708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1297.050013][   T38] RAX: 0000000000000000 RBX: 00007f26ab8f2048 RCX: 00007f26ab85da57
[ 1297.050028][   T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff519d87c0
[ 1297.050041][   T38] RBP: 00007fff519d87c0 R08: 00007fff519d97c0 R09: 00000000ffffffff
[ 1297.050064][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff519d9850
[ 1297.050079][   T38] R13: 00007f26ab8f2048 R14: 0000000000118579 R15: 00007fff519d9890
[ 1297.050109][   T38]  </TASK>
[ 1297.050196][   T38] 
[ 1297.050196][   T38] Showing all locks held in the system:
[ 1297.050207][   T38] 1 lock held by khungtaskd/38:
[ 1297.050219][   T38]  #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1297.050313][   T38] 3 locks held by kworker/u8:12/1516:
[ 1297.050325][   T38]  #0: ffff888033b41938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.050368][   T38]  #1: ffffc90006a37c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.050411][   T38]  #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1297.050465][   T38] 3 locks held by kworker/u8:17/4510:
[ 1297.050475][   T38]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.050521][   T38]  #1: ffffc90010c87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.052731][   T38]  #2: ffffffff8f7a2b38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1297.052792][   T38] 4 locks held by kworker/u9:1/5145:
[ 1297.052804][   T38]  #0: ffff888046c9c938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.060513][   T38]  #1: ffffc90010d07c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.060558][   T38]  #2: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[ 1297.060602][   T38]  #3: ffff8880b86246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1297.060647][   T38] 2 locks held by getty/5581:
[ 1297.060658][   T38]  #0: ffff88803808b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1297.060714][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1297.060773][   T38] 6 locks held by kworker/0:3/5815:
[ 1297.060785][   T38]  #0: ffff88801af9d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.060837][   T38]  #1: ffffc90004397c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.061310][   T38]  #2: ffff88802b478210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[ 1297.061375][   T38]  #3: ffff88802b48b658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60
[ 1297.061437][   T38]  #4: ffff8880297e8758 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60
[ 1297.061492][   T38]  #5: ffffffff8f039ca0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820
[ 1297.061557][   T38] 5 locks held by kworker/u8:1/14720:
[ 1297.061569][   T38]  #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.061616][   T38]  #1: ffffc90004147c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.061668][   T38]  #2: ffffffff8e257c10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[ 1297.061728][   T38]  #3: ffffffff8e49b8b8 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240
[ 1297.061779][   T38]  #4: ffffffff8e26e298 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[ 1297.061835][   T38] 7 locks held by kworker/u8:9/14758:
[ 1297.061846][   T38]  #0: ffff88801be86138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.061886][   T38]  #1: ffffc90004d47c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.061927][   T38]  #2: ffffffff8f793ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1297.061972][   T38]  #3: ffff8880392f3160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 1297.062045][   T38]  #4: ffff8880217ea310 (&devlink->lock_key#14){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 1297.062116][   T38]  #5: ffffffff8f7a2b38 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830
[ 1297.062167][   T38]  #6: ffff888051afcf50 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1197/0x22b0
[ 1297.062233][   T38] 3 locks held by kworker/u9:2/15024:
[ 1297.062244][   T38]  #0: ffff888046c99138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.062285][   T38]  #1: ffffc9000593fc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.062330][   T38]  #2: 
[ 1297.108058][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1297.151032][ T5815] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1297.159118][   T38] ffff88805b090f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x710
[ 1297.159179][   T38] 4 locks held by kworker/u8:21/18809:
[ 1297.159191][   T38]  #0: ffff888033b41938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[ 1297.159236][   T38]  #1: ffffc90006557c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[ 1297.159282][   T38]  #2: ffff888070693910 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xef/0xf60
[ 1297.159344][   T38]  #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x45c/0xf60
[ 1297.159397][   T38] 1 lock held by syz-executor/18834:
[ 1297.159408][   T38]  #0: ffff88802aa900d0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[ 1297.159475][   T38] 2 locks held by syz.8.5128/23244:
[ 1297.159486][   T38]  #0: ffff8880121df578 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[ 1297.159542][   T38]  #1: ffff88806bec1358 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x970
[ 1297.159585][   T38] 4 locks held by syz.4.5136/23261:
[ 1297.159596][   T38]  #0: ffff888038f01db0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[ 1297.159646][   T38]  #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 1297.159695][   T38]  #2: ffff8880635aa598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[ 1297.159752][   T38]  #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1297.159806][   T38] 3 locks held by syz.0.5137/23263:
[ 1297.159818][   T38]  #0: ffffffff8eae7878 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x630
[ 1297.159865][   T38]  #1: ffffffff8e50c1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[ 1297.159913][   T38]  #2: ffff88801e2c5758 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[ 1297.159970][   T38] 
[ 1297.159976][   T38] =============================================
[ 1297.159976][   T38] 
[ 1297.159998][   T38] NMI backtrace for cpu 1
[ 1297.160017][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1297.160041][   T38] Tainted: [L]=SOFTLOCKUP
[ 1297.160054][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1297.160066][   T38] Call Trace:
[ 1297.160074][   T38]  <TASK>
[ 1297.160081][   T38]  dump_stack_lvl+0xe8/0x150
[ 1297.160104][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1297.160128][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1297.160149][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1297.160175][   T38]  sys_info+0x135/0x170
[ 1297.160196][   T38]  watchdog+0xfd3/0x1030
[ 1297.160222][   T38]  ? watchdog+0x1c9/0x1030
[ 1297.160246][   T38]  kthread+0x388/0x470
[ 1297.160270][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1297.160288][   T38]  ? __pfx_kthread+0x10/0x10
[ 1297.160316][   T38]  ret_from_fork+0x514/0xb70
[ 1297.160339][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1297.160359][   T38]  ? __switch_to+0xc79/0x1410
[ 1297.160388][   T38]  ? __pfx_kthread+0x10/0x10
[ 1297.160413][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1297.160455][   T38]  </TASK>
[ 1297.160464][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1297.160497][    C0] NMI backtrace for cpu 0
[ 1297.160515][    C0] CPU: 0 UID: 0 PID: 5145 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1297.160540][    C0] Tainted: [L]=SOFTLOCKUP
[ 1297.160547][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1297.160561][    C0] Workqueue: hci4 hci_cmd_work
[ 1297.160582][    C0] RIP: 0010:__lock_acquire+0x197b/0x2cf0
[ 1297.160609][    C0] Code: 14 25 ff 0f 00 00 39 05 0f da 22 12 73 06 89 05 07 da 22 12 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 10 54 29
[ 1297.160628][    C0] RSP: 0018:ffffc90010d07340 EFLAGS: 00000006
[ 1297.160644][    C0] RAX: ffffffff96614018 RBX: 0000000000000101 RCX: 0000000000000002
[ 1297.160657][    C0] RDX: ffffffff96482d18 RSI: ffff888037c28c70 RDI: 0000000000000101
[ 1297.160671][    C0] RBP: fc83eddddf6a8c15 R08: ffffc90010d07308 R09: 0000000000000020
[ 1297.160684][    C0] R10: 0000000000000100 R11: ffffffff81a12ed0 R12: ffffc90010d073d0
[ 1297.160698][    C0] R13: ffffffff93653128 R14: ffff888037c28000 R15: 0000000000000001
[ 1297.160712][    C0] FS:  0000000000000000(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000
[ 1297.160727][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1297.160740][    C0] CR2: 00007fb32fba3890 CR3: 0000000038bfa000 CR4: 00000000003526f0
[ 1297.160757][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1297.160770][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1297.160783][    C0] Call Trace:
[ 1297.160790][    C0]  <TASK>
[ 1297.160809][    C0]  ? ktime_get+0x45/0x220
[ 1297.160829][    C0]  lock_acquire+0x106/0x350
[ 1297.160851][    C0]  ? ktime_get+0x45/0x220
[ 1297.160877][    C0]  ? ktime_get+0x45/0x220
[ 1297.160899][    C0]  seqcount_lockdep_reader_access+0x55/0x100
[ 1297.160923][    C0]  ? ktime_get+0x45/0x220
[ 1297.160943][    C0]  ktime_get+0x45/0x220
[ 1297.160964][    C0]  clockevents_program_event+0x290/0x630
[ 1297.160994][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[ 1297.161020][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1297.161051][    C0]  ? tick_program_event+0x8f/0x120
[ 1297.161073][    C0]  __hrtimer_rearm_deferred+0x273/0x460
[ 1297.161104][    C0]  irqentry_exit+0x6a0/0x730
[ 1297.161122][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1297.161145][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1297.161166][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1297.161186][    C0] Code: f7 e8 6d 61 5c f6 f7 c3 00 02 00 00 74 05 e8 b0 0b 88 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b4 f0 4e f6 65 8b 05 cd c3 76 07 85 c0 74 18 5b 41 5e c3 cc cc
[ 1297.161201][    C0] RSP: 0018:ffffc90010d07788 EFLAGS: 00000206
[ 1297.161216][    C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000002
[ 1297.161228][    C0] RDX: 0000000000000006 RSI: ffffffff8d998329 RDI: 0000000000000001
[ 1297.161240][    C0] RBP: ffffc90010d07890 R08: ffffffff8fcf47f7 R09: 1ffffffff1f9e8fe
[ 1297.161254][    C0] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: dffffc0000000000
[ 1297.161267][    C0] R13: 1ffff920021a0efc R14: ffff88801e2c5700 R15: ffffc90010d07800
[ 1297.161289][    C0]  rt_mutex_slowunlock+0x5a4/0x8b0
[ 1297.161321][    C0]  ? reacquire_held_locks+0x104/0x190
[ 1297.161351][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1297.161376][    C0]  ? rt_spin_unlock+0x14f/0x200
[ 1297.161402][    C0]  ? rt_spin_unlock+0x160/0x200
[ 1297.161427][    C0]  __refill_objects_node+0x1e7/0x560
[ 1297.161451][    C0]  ? rt_spin_trylock+0x10c/0x2b0
[ 1297.161476][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1297.161502][    C0]  refill_objects+0x62/0x3d0
[ 1297.161522][    C0]  ? rt_spin_unlock+0x160/0x200
[ 1297.161551][    C0]  __pcs_replace_empty_main+0x373/0x720
[ 1297.161573][    C0]  ? rt_spin_trylock+0x13a/0x2b0
[ 1297.161599][    C0]  kmem_cache_alloc_noprof+0x433/0x680
[ 1297.161625][    C0]  ? skb_clone+0x212/0x3a0
[ 1297.161650][    C0]  skb_clone+0x212/0x3a0
[ 1297.161675][    C0]  hci_cmd_work+0x38b/0x7e0
[ 1297.161696][    C0]  ? process_one_work+0x8b7/0x1710
[ 1297.161713][    C0]  process_one_work+0x9a3/0x1710
[ 1297.161740][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1297.161756][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1297.161783][    C0]  worker_thread+0xba8/0x11e0
[ 1297.161814][    C0]  kthread+0x388/0x470
[ 1297.161836][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1297.161854][    C0]  ? __pfx_kthread+0x10/0x10
[ 1297.161878][    C0]  ret_from_fork+0x514/0xb70
[ 1297.161898][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1297.161917][    C0]  ? __switch_to+0xc79/0x1410
[ 1297.161944][    C0]  ? __pfx_kthread+0x10/0x10
[ 1297.161968][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1297.161997][    C0]  </TASK>
[ 1297.230318][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1297.306113][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1297.306153][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1297.306185][   T38] Tainted: [L]=SOFTLOCKUP
[ 1297.306192][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1297.306204][   T38] Call Trace:
[ 1297.306212][   T38]  <TASK>
[ 1297.306221][   T38]  vpanic+0x56c/0xa60
[ 1297.306250][   T38]  ? __pfx___schedule+0x10/0x10
[ 1297.306284][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1297.306315][   T38]  panic+0xc5/0xd0
[ 1297.306336][   T38]  ? __pfx_panic+0x10/0x10
[ 1297.306360][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 1297.306394][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1297.306423][   T38]  watchdog+0x102c/0x1030
[ 1297.306451][   T38]  ? watchdog+0x1c9/0x1030
[ 1297.306478][   T38]  kthread+0x388/0x470
[ 1297.306506][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1297.306526][   T38]  ? __pfx_kthread+0x10/0x10
[ 1297.306556][   T38]  ret_from_fork+0x514/0xb70
[ 1297.306582][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1297.306602][   T38]  ? __switch_to+0xc79/0x1410
[ 1297.306631][   T38]  ? __pfx_kthread+0x10/0x10
[ 1297.306656][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1297.306696][   T38]  </TASK>
[ 1297.309572][   T38] Kernel Offset: disabled