last executing test programs:

5.524300151s ago: executing program 2 (id=952):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r3 = eventfd2(0x156, 0x0)
r4 = dup2(r3, r2)
write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

5.31306189s ago: executing program 0 (id=956):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x1e8, 0x3a8, 0x3a8, 0x1e8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
r2 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, 0x0, &(0x7f0000000000))
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000004c0)=0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000a00000008000300", @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x4e8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x800}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x9, 0x1b, 0xe8}}}}, @NL80211_ATTR_FTM_RESPONDER={0x26c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe7, 0x2, "3b2d7f7748941533c996f4bd646f38c50f67d9e442e448b49289f2a956c6d2590fccc698b17cbd0405a3efc935050e2efcd4b82d90b6186ae50fa4c03354b2e760cd303df6a9e9adcc3c0f6da3183caa80f50615e31a80aa8e2cd77fdecc9870d5ee8e722b0c423d95c1ca6f40f0acf7f375d8705319898cef572c3efcbae4c317ea70797708e16773a07a8d8bd4d63ce5940b07f7d867f76835ead9556ab43a048a21d4a36de4c2c709beb28c75f3d366e8a9e53179b3628aae89c741050621bbd89024931c144db0473133ae94b7edbbfa8a18f43be560181fc4b6d40cc803d016ec"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "d2f3cc6ca8a23a9bd56156d9463b8686e9ad4edf9f4f5185cddc1b8481933b8a164240454351e5afe88cdb8c5768a9281b46dbc910a3733c3d1899ce588a20aaa90894aa920d646bac78e54655388af5f10d9803ffd0fc01957c226ee32bc406cd3cd130ed580b2d439f9e6f65bedb05b075c4a3710cf3c8d8a0f47c10cdc682d62ce3bf4b311cb6529ff1e5d35462e797f0b79e51437714064dd3d90b1d331ea417d6b297f41520959780e7e9ceb25e2d8a83a05efc1f030ee2ba08ab5b5e6d3622"}, @NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "32e0b604ea5779aaea77d9d5fc22f2af1b0fb6a9a72f270b06532cca1ebc5e3394978f5a342f27f0aca4edb7a1c2a8e0e5dde7e10be22510d35847666e64fdaad97b199c4d3cd08f89861d948b76df1d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "b319c4038cd5c4375c02de9e83ea6c89590788b9c18652cb4a4b43e327d54e9cc4943c08362159426826ebe2835ebb4f1d485469ad5d24aa0d062dbe0494ecd555cc5b81a1e25ca40524ff25"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x223, 0x7f, [@cf={0x4, 0x6, {0xef, 0xc, 0x4562, 0x1}}, @random={0x51, 0xc9, "fce48ff8ba68bf591ec73ac21e788bd20635be4e16ba912ef9a6f376ae11dc190160700767cfa8dd33d6027c51213eeeda7d2297c11d896c8d115f91496bb96bec52d85e692247f4213df68f674c956d033d1d3e0a508501f811e821bb71438c9ca5b25cbc22946dfbd945d1cbbd06df7713bca56c2bcacf0783c2fb1d73cccd11b33471e6c0011675ac3d0b815e23852f095a9ea726427491f76aaab274629fc3b46b88c79f3148526aabfcf5ff9eeb99a3d5648dd0dee34657a2a073e29a3e88be5f75d7746b5353"}, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xe, 0x6, 0x3}}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0xb}}, @preq={0x82, 0x62, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x81, 0x2, 0x0, @broadcast, 0xfffffff5, @value=@device_b, 0x7, 0x2, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xb}, {{0x0, 0x0, 0x1}, @device_b, 0x7d}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_a, 0x3dad}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x480, 0x0, 0x1, 0x0, {0x6, 0xe4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x6, 0x4}}, @fast_bss_trans={0x37, 0xb2, {0x7, 0x4, "c99f0a79410e18a996d5ee610f7c0f42", "84d6ca45b13c731cdefdf30965c597b1022060ca3434fa4b986fa6558e70143f", "e8e44378fe9f54af49a6ac248f0e47afdcd2ee1d02261d5bc606570333d56367", [{0x1, 0x23, "e47b89384bc0a9a35631f6f18902d0638576ddc26c9c3245d99ad631d72eb162eef786"}, {0x1, 0x1b, "0292f3ace55f62c412720690cd7416c92eaccc5b3cdb0f7e76a3a5"}, {0x3, 0x1a, "b39d0410bac144e9bf74aeb4c291d09b62bc1576b30fbf6b852f"}, {0x1}]}}, @measure_req={0x26, 0x3, {0x1, 0x0, 0x7}}]}]}, 0x4e8}}, 0x0) (fail_nth: 5)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000100)={r9, 0x6}, 0x8)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

4.724898235s ago: executing program 1 (id=960):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.613903598s ago: executing program 1 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
mlock(&(0x7f0000368000/0x4000)=nil, 0x4000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000480))
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002c00000018000180140002"], 0x2c}}, 0x0)
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000003c0)={0x40, 0xb, 0x1c, "2a2722a5a6a98a776f5272819b61717e4d79e1b69785d0618a5be714"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
syz_usb_control_io$lan78xx(r7, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "302805ffacf0d973c73efb304dc5e9f2d44ed133512099e4996865eba1aaac8eb617e905338a0ed84190b03b1b573391cf63f23d6fae9fd5"}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000005c0)={0x40, 0x17, 0xba, "063f3c3cdd4b6c2c221b31f2cb5dcb5179ff9d2129d1e280597f915af48051982a6de76b5e9300922650385b970a233e5ca3326713e05efcc0ab7b5fb350ad347d0fcea615d1ab364dc22ee0bdd3077212a8f90bd7e98799b55c93abffb7cb56430cfe8665b4bb10dda3b27c41932224034084703fa6917be20dda98d1cd465d7149b5173e5f1b1ea00cbde990c81ee1d97f1c755a7727f8962a72ba9bd1728b3634be39828db466ddb2b8284b1bdca2754c27be7214301d80e9"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "974bb43707145b2184c71c7c62dd28363a5959a64d66d0a5d0023436b36a0c6223525b1dceca7b2ed5a2e8aee49e6c"}})
ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)

4.424750913s ago: executing program 3 (id=963):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='/,0x400000,0x401000,0,-', 0x17)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)
getdents64(r4, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000063c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bf5795b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf3053260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e770778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a495f0f0000000000004d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bb44545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc761f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda25a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111f9b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0082eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0})
futex(&(0x7f0000000040), 0x105, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)=0x1, 0x1)
getdents64(r4, 0x0, 0x0)
readlinkat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=""/199, 0xc7)
symlinkat(&(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000400)='./file0\x00')
syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10}, 0x0, 0x0, 0x0, 0x0})

4.424499945s ago: executing program 0 (id=964):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r4, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.424318656s ago: executing program 2 (id=965):
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket(0x1d, 0x2, 0x6)
r3 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000040)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0))
setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0xc)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001640)=ANY=[], 0xd8}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

4.1747835s ago: executing program 2 (id=966):
r0 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x340, 0x0)
ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000000c0)={0x3, 0x6, 0x6e, 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x488e03, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014d9ec29bd7000fcce1bc7b3004c000000000008004b0013000000"], 0x52}, 0x1, 0x0, 0x0, 0xc0d5}, 0x44090)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
iopl(0x3)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
chdir(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x199042, 0xbe)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r5, 0x3)
accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800)

3.904374964s ago: executing program 0 (id=967):
r0 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x340, 0x0)
ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f00000000c0)={0x3, 0x6, 0x6e, 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x488e03, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014d9ec29bd7000fcce1bc7b3004c000000000008004b0013000000"], 0x52}, 0x1, 0x0, 0x0, 0xc0d5}, 0x44090)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
iopl(0x3)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x199042, 0xbe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r3, &(0x7f0000000240)="c7", 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x3)
accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800)

3.57859126s ago: executing program 3 (id=968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0)

3.474642642s ago: executing program 3 (id=969):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

3.283314973s ago: executing program 3 (id=970):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000005ec0)="b9", 0x1)
read$rfkill(r0, &(0x7f0000000040), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={<r3=>0x0})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x10})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r3, 0x5, 0x4000003})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0)

3.282307564s ago: executing program 2 (id=971):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3f45, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x32f})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb64950be2ff212dfb5c980195e", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x30000001})
epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r6, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf2508000000050033000200000005002d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40012}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xe, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMVOLCTRL(r8, 0x2275, &(0x7f0000000340)={0x22, 0x5, 0x48, 0x7})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r9, r9, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)

2.384165934s ago: executing program 3 (id=972):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r3 = eventfd2(0x156, 0x0)
r4 = dup2(r3, r2)
write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

2.382058867s ago: executing program 0 (id=980):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x7, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}, {}, {}, {}, {0x0, 0x5}]}})
r2 = socket(0x2a, 0x2, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001540)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @remote, 0x6}, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xb583}, @in={0x2, 0x4e20, @multicast2}], 0x58)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8003}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="e904a20000002280c20000008100020008004500001c0000e0000011"], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1d}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001240), 0x5e1f22, 0x0)
sendfile(r8, r9, 0x0, 0x201f00)
write$UHID_CREATE(r3, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/37, 0x25, 0x5, 0x10, 0x10000, 0x2, 0x9}}, 0x120)
write$UHID_INPUT(r3, &(0x7f0000000200)={0x8, {"7d597223cf15f1eb70a7a7199c644019cea0d3125c66e054e0d32d1799b7f6125726b686a3e5610a8b4731a4c0ad535fb997049c9d3302fbd2782fd91fa71ef86f8f2646d52f13aedf891093121b509c3b66d1e808aee62f9606daf8e8a21d9194a920d54fe876e2788fcc55223e69dcac4b5520f6fc781fae2f65b097796f60fbe256cbab614109069bd853b23ea5b38148d4dc5b2d031f15ab906dad935100310299280786d2b9fff48bb7fd5a670d62dbcb2535fd2e68af53745891e0033cf910dcd4a89d9c04c27a780fe17bebbc1d279e945a623ec544fa855852d1a069d357de25693a441c574e94bd406ddd3646ebd81af0d8fa5ed1a390226a50ff0cab28c40bc34d63ace51e8bb4f1593ba05bdd08aa08ac2d2a5bfabace58de2292a81a9e71334d73b739124a353821f70e3ebc789044a52ac6cac15c2f8fd156614d1d19d068c1756c69d4c128c0bdff916cf74bac5ef7fbc4cfac6da5fd83353820ceded2427de2162c38a5e3e029c9a84af9a145988074019c331e43ec19bb7a7989c5e01a73a1cf4944b203d060f6a14501f76b31c56c7cd4c3d8f2d405fffb502cc99a30a9daf0509267ccce8abaa98512c9529933ce634d9b28ba2bb2eacb7b358e6ed1f9e949ccd05eeda9a18f79920c062e652dce2a945121649fe60d4b6ea3d8583ee65e549ac583132167be6ce305b84da989fadb616bc3ff1cb12ddc26ad41d7ff18c1f810a7dd2913639acf506bc31697c9bd9176c8f268bd7fac596e69698f9601719932ab6bb8f44149c09b81cabe0239ae11081a0223b2e3dc5c162cb619ced1cdd7d8c8cd47749fef9c0c39b408fa85dccce10d81a28b6dae7debde1a1bc24fe26c6c77c50a0a3d9d03d8f4e13a3822d1c3e9594f3e9ad73b21cf017f452bf98aff49cdd8def1407874117e2562131d6f7448781ed1aaef5966306b48cc9b45744c05e556ea0d24a13b622114d14916d871f72b8b4f6eec1c4e52a5e7183a0f1546f319f04bf8958f9616d055846a4a1898793280f56618028a5be9d8b28fa737d4c66ca4d3a3449a8e93427f3385410573ff2b3331a67268f06e7d2ec0d37b43f9d0ec23c05983be90b7f2d376d52e80714c85006f0a179f94df2c3f6cb434ce7f0beed8d4e3a83bc9810cfdc4f1d4c6b693b803be8994aa1d1879a634f84655065f9cd7439090192348ef47a7f1c9309f7b68ea389773ab9bc5d14577555e32c2ea6cc273fcc70e0a5bf38922c7ef7a3d6626451de82cd0451e77651487abda0ad5338f876092e57add4892c4ea55c055c1a5fc68af48a1c5922b4e8e248989d94809a0de8faa80c55d7c17a6c3960a43f8728b546e425cc10940f3564e2b2d05a99c0e6c7838946648f4ea8099ae10b179125ddd64b30f0920dbb070f80c1a61dd2b3551565dba478c52540a78fc230b979e5f78d8a340ebba5dddafdc6032560666f702bc601bed0238cfc7f3a1df9095f9a74e73444f39c54661a56fbe774d42aa72a910999032a0e65ba599825e62d02c5378baf0f3aa6c59643bab5028607c17cb252648008e23d1c750bdf322b672239cf4f5be6c40d189c647bfb3c241465991fd9b3243fc0688e8dc4113efa88bddd47ff2a8207c73c5821f243988ade9d2df3a5e32ed6bc7e935674e36bce224d856426b3deefca794616096b82d981d8eec71079fe4adff4634491300566be6caac2b4c3e276ba37897d9f6a60376babe7c95910b4634b5ea7a2c7920ef165ff8dba943b35a6467c739167a23ad597e52f04f1edc282187463dc48d678062dafbfde040afc4ebb2d41eef4fec4829f1ee896d9c7adea20dcf2e26c6b5d22a8292b565eed8af6e93ea5109d708e8d3a986449fe403db650a1acacbef8857f07fc2a0d8c11224ec1b7898ea4dd05625cf7400f7bd557f86edec8cea7db1c3288bb04871978e386f0b51919bcc00edf2a395e4f577b34e2432a4009c7540240ec646c89c143bc6232946f49c100f92fb9763b1b8272e72a289718a73f3eaef1c65ed9069cf094f06e56d1d2eaea33c1c7ffc1ce7d2846037ebef3b532ac757a80007c783e4b33aa97f44be8aa845c340d7a93ea9f35b48835e2d9b5ec970e4699d00db65c2625164ab1bff02d7532ac44aee803b3b292e37acf98c236b3a796fff7bbaa097bfa1ba4dd6d5614e1641c96c7bd98c8ac0742167ca7be2865a2f419c7c42f7b0f93be8e201267d52f3ba7bc790fe2e9e833ff7627e6beab7e8b962e50764a953f40cfb41bb8ac2d809ea341cb413f7367c59b03e6f8310e771dceec42fedd99afd403ae4cb9b684bb007ca8f82b205d2b37b3ba7da19843dab9082eb4ae4573ac7ed136a9349705bed8d67b938efd835a56d660984ec8e1e6f726328ebdc6ca81bd9dffbeead35c31c4b6c333112b7b1cf9772d7acbeda21d05aaf401bf011a53ec431c0b236fb06ec089d01920562b628af41326721ff9d98ee4e1dac28315113d7bc48e14cbf97521dcd3c7d3b3a97b0cd184de1824e3994364f9ca131eb782a26d5cb0d5a22dc98d296feececc23f7b6da0018120e862a481279419a726cab22c189affa4718889d1eaff1911d403f62ef1d35d2d9f9d410a1974a23a41e2f8e7a6bf9c94e50e654238b4d65682857c1693427f80172a586cc42f199454a6fa670c855d5fd2fc2f9acddc4d9c8a5379a04d0912f1621e1ddb895c44e8a1de81220f26f8e4f08d257f3a0830eac85a152cf82e355f39f8b2de0d295a11b1eb599188dfa16f3a5e759542d829e299c127a2c6cb87d92be68744d71d7ca3aa45ea3fa3c468488ada0ec2fd44241168c4f462f7d6c14eac3b2bfbcee4ca2e199d7c4bd9872703320f309485b2cf64505fc4b6612dd25540aa876e83bbcde60a44e7b6b2866b0f31f175b0b54bb8890370d86112c4076084e93340d39ec56fd1757a25ece5bf0cc82e26e559d0d2c29a8113358b45355e6de26df36eebdb7ed436545bda0cd36004f3c8055508f4de766b103093a04bbfff1f87d441b36e77ed422737636a17e1ce2e6b22d83f09a51f141b1ccfd7003fe52d2c7137491f454c838f61824e30904455d899a21a5b7387251d79848d91e39bd9478765426dd93dbc66116eb3b8f73742e3e6fac23d51472e450acff862b256ab3b635971c5027d970262869167f025dbee52d35ad081755ec125e77ddded85366b91ae48287b4b2fb208cc8a1f32a999c992b507d4a363be0ae3555d74b522a28293bc718e3b0d6b39a3b14fda08185df5f4a2b4cd8498dadc5a8d5f444530014b24f1d13cc92e42350a22c4fb026771f2d14265a32726f925bb575407bfa9611c740206f90313ae59cf7e6c92f5f5c0003b2feb26151684036ca9bb8f2199982a17a2f639df56a091e6fca1fa6e9c98f21dd22da030b769afc838e58a004473b093b6f2e73070d14134b6ce7b72c86ffe1771505bf34843b18135e07bd02e8660f10d45559d56800cc438202177f1011b7f3c3b98ef5fb9d2fa53ed34d02290afa716135791f84295518f2d5735ae86460840a60e5056f637506c9883c90e42b778ae1842715ff780d04be061ce7aabb5a599de32f1d6605caa3601e9592b5c77d7bc1019858ebd4f93c3f6ccae149737c46ce55328fd350d006f392805eea0a1cc111e5778c982197f1ef6a7ce203fc4496915e2a48e23a52ce0e413a73e926dc1b50d94bcc5a244ff437e5739cfdaf5a226d26b4963d864bafd51c1d39f7d2e83f6fcd2305afd3ab6f314cac0120e49e0635a7f3d4f2f02a3ab03017f58cfd9c5bb979d71a6318e9cadf8f1532e6a580a6488b481b18307cd7aec2ce95436626d024cce2f299d9e8b8e084080c4f68bb5f90123cb0866b0a06484e0219678d55c33aab3863186f036656bcf03ff8eb288e720b976a6135e6528906d3d63dbf77d525fec5bd3e558ba9e9c29c81fe7dc5993098cca977d71045dddc3fda7c1331ae807b76fad3d71ca5eeff9219c0e427199fa6161b3d3c71f8b26a9225a4ffb903631e8d1bf00979391d6294de1dcf27526e1a0cdd68ba801fdfce32d048cd0729192912ed3412b72b60016bd40082522c88ab0f77bd086995cb73479db516eb113b50e78b49c7b1509d859da309571d038c4816b0b3657c815375afbc25e333ab19f24ae80853a2468a60669f14aa11c2b5ebfc36accece6f0b5b79bb54bdf5b105d8bc72f0a5385390ce122a9547192592962e5b32d0a48471e29d918ee0e2eab33e17a6c9a4dad415ff27cb98996a78ad3db6af0e14f291bf06c1376b022687ace502947e8471533a40336ac61f268cead52359e85668e9a1a6c574e80d8e99fe8a6e24aa441a9257f54b4fec3416f5680f616298038c5b893c01cb14bb55985f08b5aa34924574de25c58a8a1583b3745823ec7f650032c15a038909854a18e695300c5565bf4e15fcb5ed8ba326a50c383678e2feb6174a0594119b8dfe232e1103eb5cb634990296548111216da9767dd0badc29cea4e32de477bd26183ef903c4bed25b576bfbd057b3a86a89d4f9443b3d125b11a087c4d45fb5e0b5629bf1b8466afcb2f6448ee8676aaed062d7ba7efa094c550d6fbe081a0d8d8688f2b59bce3eee4fd5d11df3ce861ce71882b7131aa6e3df8b143df4a4c924e513f2844829b7f7efc210d439a7dcfba86f02e5001ad4eb5c101608d586c0ecef4b59ddc7cd23d11f596da9b304eda35d2ebc3b4af49fb44a52d06a0eb2dd420751a0a07289d1ab69d318896c0ab64d39d793e66326d02ae4de8ba1fbf33a01faa9b23a0552420b0efa055ddc01f6cf2e8ab1a34ea7d365bb9d1a55c73200bd51a71073331a500fa4a506ec2f54f5c2a78dc9442c4117debee6f3a4bc0970ca34d0c80389c0c45552ec17880bf246e4788648f5e13d69626b373a2ea0a070bf83a2fe0c317f4fd97681b1f3a8e4d2181d4e1d9b79654ec4928e799c2c9d8e45c01bb3bf45c8c1baace2930d6101612a9112d109665f33bb6fa34b70ca19b1c9c8011addaf1b6e493a69fb7acd095edae7ab0feebaf4f88656fb1d9a9f9e65c2bcbe37cf6800c01d4efcee38336acdea0281d18828faadd865813c0b4b31f5d08e105cd3e204996a8860520835974c37caa48f674f809ec43d28d9d9b0d70cdcc4e6cca68ae1ab517e2f1ebf0cc212609ed57ee593fdb8bae4a0a0cad2b40f85692d052fc7e8ebedf8038265a5b36617a2c9b681e5db2ddc6b3dd118a734105b6af6868eee60d36d438d1cc92f461f048da928ebe00925c48814461b01058790fd5f1b8902369318a08123e01c2c43a7648feb3485247e05e0b08756054472c03b4b6f1176c62b836da514de1d3dceebef4689947a11e2806f801077752e2779598a16a5b848aa9b175b73a33472743b9eb155560ac1668ff9b22ecfda82fa144d739cb82525e1bb8cab7a0601fa3d46258478b6c9614d151aaebae64230f85462f5377d4657d8edae36af2fc9d15eecf910d76ffe88e868f59cae46bcfecc315bbd38d78107788e965dfd13819dc2b54bd7cbccc15fcd07719437e435ddaf01bbf8a336b2c7ded804525a53dfc0675ca42558401457ad3640d87d811873056d69436a390bb78687af73b74d136d815a330eecf9a5ce8bc84bcf3f18bc695809ae4fe32e4e220434ce9d72221d07d4b61baef25a20d59c4ea5cae6fb121cd9954e85032e5ed52412aaf7aca6ab0b171a5df49f9b529e94da7a6149d0d79df7f3bcb74a03553e67457c77181c79cc02900f928007d311ab05c2418a1443b53207de9ccd86c54a9aed01bbb", 0x1000}}, 0x1006)
r10 = syz_genetlink_get_family_id$ipvs(0x0, r2)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYRES8=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x37}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40)

2.378390068s ago: executing program 2 (id=973):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x1e8, 0x3a8, 0x3a8, 0x1e8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
r2 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, 0x0, &(0x7f0000000000))
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000004c0)=0x3, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000000000000f0001006f76732d7379737465"], 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0800050003000000f3e31ead1ab7e7cf359481fe9bf244a682223d4635b20ca6c460a10c542e6c8bec3c67ef03235547414a24c33f7f65ac12e03ff623c28900fec438687f4e38414d1619424ced7aba50544c3b4d9293204bec72cfc1088aa90747becf0b7e2e1d77f75b3e13ab7d40f959debda4c38ea9e316ecca3c858238d61eb63d03cb73a1d6e393a5b07592e3cf2128d6fb68691e8b2fbac728b81a23a74cbc59", @ANYRES16=r6], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000a00000008000300", @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x4e8, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x800}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x9, 0x1b, 0xe8}}}}, @NL80211_ATTR_FTM_RESPONDER={0x26c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe7, 0x2, "3b2d7f7748941533c996f4bd646f38c50f67d9e442e448b49289f2a956c6d2590fccc698b17cbd0405a3efc935050e2efcd4b82d90b6186ae50fa4c03354b2e760cd303df6a9e9adcc3c0f6da3183caa80f50615e31a80aa8e2cd77fdecc9870d5ee8e722b0c423d95c1ca6f40f0acf7f375d8705319898cef572c3efcbae4c317ea70797708e16773a07a8d8bd4d63ce5940b07f7d867f76835ead9556ab43a048a21d4a36de4c2c709beb28c75f3d366e8a9e53179b3628aae89c741050621bbd89024931c144db0473133ae94b7edbbfa8a18f43be560181fc4b6d40cc803d016ec"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "d2f3cc6ca8a23a9bd56156d9463b8686e9ad4edf9f4f5185cddc1b8481933b8a164240454351e5afe88cdb8c5768a9281b46dbc910a3733c3d1899ce588a20aaa90894aa920d646bac78e54655388af5f10d9803ffd0fc01957c226ee32bc406cd3cd130ed580b2d439f9e6f65bedb05b075c4a3710cf3c8d8a0f47c10cdc682d62ce3bf4b311cb6529ff1e5d35462e797f0b79e51437714064dd3d90b1d331ea417d6b297f41520959780e7e9ceb25e2d8a83a05efc1f030ee2ba08ab5b5e6d3622"}, @NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "32e0b604ea5779aaea77d9d5fc22f2af1b0fb6a9a72f270b06532cca1ebc5e3394978f5a342f27f0aca4edb7a1c2a8e0e5dde7e10be22510d35847666e64fdaad97b199c4d3cd08f89861d948b76df1d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "b319c4038cd5c4375c02de9e83ea6c89590788b9c18652cb4a4b43e327d54e9cc4943c08362159426826ebe2835ebb4f1d485469ad5d24aa0d062dbe0494ecd555cc5b81a1e25ca40524ff25"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x223, 0x7f, [@cf={0x4, 0x6, {0xef, 0xc, 0x4562, 0x1}}, @random={0x51, 0xc9, "fce48ff8ba68bf591ec73ac21e788bd20635be4e16ba912ef9a6f376ae11dc190160700767cfa8dd33d6027c51213eeeda7d2297c11d896c8d115f91496bb96bec52d85e692247f4213df68f674c956d033d1d3e0a508501f811e821bb71438c9ca5b25cbc22946dfbd945d1cbbd06df7713bca56c2bcacf0783c2fb1d73cccd11b33471e6c0011675ac3d0b815e23852f095a9ea726427491f76aaab274629fc3b46b88c79f3148526aabfcf5ff9eeb99a3d5648dd0dee34657a2a073e29a3e88be5f75d7746b5353"}, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xe, 0x6, 0x3}}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0xb}}, @preq={0x82, 0x62, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x81, 0x2, 0x0, @broadcast, 0xfffffff5, @value=@device_b, 0x7, 0x2, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0xb}, {{0x0, 0x0, 0x1}, @device_b, 0x7d}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_a, 0x3dad}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x480, 0x0, 0x1, 0x0, {0x6, 0xe4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x6, 0x4}}, @fast_bss_trans={0x37, 0xb2, {0x7, 0x4, "c99f0a79410e18a996d5ee610f7c0f42", "84d6ca45b13c731cdefdf30965c597b1022060ca3434fa4b986fa6558e70143f", "e8e44378fe9f54af49a6ac248f0e47afdcd2ee1d02261d5bc606570333d56367", [{0x1, 0x23, "e47b89384bc0a9a35631f6f18902d0638576ddc26c9c3245d99ad631d72eb162eef786"}, {0x1, 0x1b, "0292f3ace55f62c412720690cd7416c92eaccc5b3cdb0f7e76a3a5"}, {0x3, 0x1a, "b39d0410bac144e9bf74aeb4c291d09b62bc1576b30fbf6b852f"}, {0x1}]}}, @measure_req={0x26, 0x3, {0x1, 0x0, 0x7}}]}]}, 0x4e8}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={r10, 0x6}, 0x8)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

2.324623258s ago: executing program 1 (id=974):
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket(0x1d, 0x2, 0x6)
r3 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000040)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0))
setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0xc)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001640)=ANY=[], 0xd8}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

2.207350889s ago: executing program 0 (id=975):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r4, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.71936381s ago: executing program 1 (id=976):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x68000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000000)={0x6000004, 0x0, 0x0, 0x1, 0x82}) (fail_nth: 1)

1.332229038s ago: executing program 2 (id=977):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000005ec0)="b9", 0x1)
read$rfkill(r0, &(0x7f0000000040), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={<r3=>0x0})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x10})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r3, 0x5, 0x4000003})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

1.194445754s ago: executing program 1 (id=978):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.137710822s ago: executing program 0 (id=979):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba)
syz_usb_disconnect(r3)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'das6402\x00', [0x3, 0x3, 0x10001, 0x0, 0x3, 0xcc6, 0x8, 0xb, 0x201, 0xff, 0x2, 0x5, 0x1, 0x2, 0x9, 0xfffffffc, 0xbc76146, 0x9, 0x43, 0x40000003, 0x8c, 0x8, 0x5, 0xa, 0x800c, 0x48, 0x5, 0x6, 0x80, 0x0, 0x8000, 0xfffffffe]})
write(r5, &(0x7f0000000480)='dummy_udc.0', 0xb)
write(r5, &(0x7f00000004c0)='\n', 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000700"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r8 = socket(0x15, 0x5, 0x0)
msgsnd(0x0, &(0x7f0000000240)={0x0, "c8cae376b7ec6f3e04df9ce253a02af584d9ef3a49cbc6925730151734dce09e0e1067189932701b84232c8656e7888ee27650278b790e43cf5acf33d5ea1cf5848ecfeffab9f3534a1bd3541fc9b098e64a81ad1f731d4962bd40a3ba01d048a4e284782447d1717d1a48eceeb7745c8e7a5eecf1387be8e10f042480bf388147c30e0e"}, 0x88, 0x800)
getsockopt(r8, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
close_range(r7, 0xffffffffffffffff, 0x0)

695.5625ms ago: executing program 3 (id=981):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3f45, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x32f})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb64950be2ff212dfb5c980195e", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x30000001})
epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r6, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf2508000000050033000200000005002d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40012}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xe, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMVOLCTRL(r8, 0x2275, &(0x7f0000000340)={0x22, 0x5, 0x48, 0x7})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r9, r9, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)

0s ago: executing program 1 (id=982):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200023)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)

kernel console output (not intermixed with test programs):

 netlink: 'syz.1.426': attribute type 2 has an invalid length.
[  261.754129][ T5433] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  261.953405][ T5433] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  261.958559][ T5433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.004393][ T5433] usb 6-1: config 0 descriptor??
[  262.068060][ T5433] gspca_main: cpia1-2.14.0 probing 0813:0001
[  262.315431][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  262.315549][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  262.507307][ T5433] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  262.968670][ T8671] netlink: 'syz.3.429': attribute type 2 has an invalid length.
[  263.008873][ T5433] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  263.466922][ T7635] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  263.654623][ T7635] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  263.657649][ T7635] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.661903][ T7635] usb 8-1: config 0 descriptor??
[  263.680840][ T5433] usb 6-1: USB disconnect, device number 8
[  263.718616][ T7635] gspca_main: cpia1-2.14.0 probing 0813:0001
[  264.198543][ T7635] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  264.623491][ T7635] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  266.105591][ T7635] usb 8-1: USB disconnect, device number 8
[  267.416526][ T8724] netlink: 112 bytes leftover after parsing attributes in process `syz.3.434'.
[  267.832226][  T859] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  268.023041][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  268.182309][  T859] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  268.338753][ T8741] bridge1: entered promiscuous mode
[  268.353893][ T8741] sctp: [Deprecated]: syz.2.437 (pid 8741) Use of int in maxseg socket option.
[  268.353893][ T8741] Use struct sctp_assoc_value instead
[  268.370223][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  268.391342][  T859] usb usb6-port1: attempt power cycle
[  268.730430][  T859] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  268.751257][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  268.852615][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'.
[  268.857584][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  268.885500][  T859] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  268.911682][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  268.912452][  T859] usb usb6-port1: unable to enumerate USB device
[  271.690924][ T8780] netlink: 'syz.2.444': attribute type 2 has an invalid length.
[  271.779078][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'.
[  271.793178][ T8782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.898682][ T8782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.995889][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.173181][ T8786] loop7: detected capacity change from 0 to 7
[  272.230745][ T7635] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  272.398062][ T7635] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  272.399197][ T7635] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.417069][ T7635] usb 7-1: config 0 descriptor??
[  272.420491][ T8786] Dev loop7: unable to read RDB block 7
[  272.420535][ T8786]  loop7: unable to read partition table
[  272.420740][ T8786] loop7: partition table beyond EOD, truncated
[  272.420830][ T8786] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  272.461201][ T7635] gspca_main: cpia1-2.14.0 probing 0813:0001
[  272.969503][ T7635] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  273.429336][ T7635] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  274.058467][ T8812] netlink: 112 bytes leftover after parsing attributes in process `syz.1.447'.
[  274.491526][ T3383] usb 7-1: USB disconnect, device number 14
[  275.110570][ T8843] netlink: 'syz.1.449': attribute type 2 has an invalid length.
[  275.139430][ T8846] netlink: 'syz.0.450': attribute type 2 has an invalid length.
[  275.209168][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.211149][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.422872][ T5433] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  275.560585][ T5433] usb 6-1: device descriptor read/64, error -71
[  275.854462][ T5433] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  276.010371][ T5433] usb 6-1: device descriptor read/64, error -71
[  276.110597][ T5433] usb usb6-port1: attempt power cycle
[  276.542925][ T5433] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  276.585823][ T5433] usb 6-1: device descriptor read/8, error -71
[  276.919323][ T5433] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  276.935715][ T5433] usb 6-1: device descriptor read/8, error -71
[  277.074518][ T5433] usb usb6-port1: unable to enumerate USB device
[  277.243548][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.244043][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.496816][ T8884] netlink: 'syz.3.456': attribute type 2 has an invalid length.
[  277.792317][   T66] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  277.971454][   T66] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  277.973068][   T66] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.991080][   T66] usb 8-1: config 0 descriptor??
[  278.031017][   T66] gspca_main: cpia1-2.14.0 probing 0813:0001
[  278.251599][ T8904] netlink: 112 bytes leftover after parsing attributes in process `syz.0.458'.
[  278.497010][   T66] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  278.983945][   T66] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  279.336121][ T8919] netlink: 'syz.0.460': attribute type 2 has an invalid length.
[  279.427239][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.442087][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.515621][   T57] usb 8-1: USB disconnect, device number 9
[  279.776815][ T8924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.777386][ T8924] syzkaller0: entered promiscuous mode
[  279.777402][ T8924] syzkaller0: entered allmulticast mode
[  279.920801][ T8927] tipc: Resetting bearer <eth:syzkaller0>
[  280.247493][   T57] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  280.433593][   T57] usb 6-1: Using ep0 maxpacket: 32
[  280.434446][   T57] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  280.435545][   T57] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  280.435574][   T57] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  280.435602][   T57] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  280.435624][   T57] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  280.435644][   T57] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.437729][   T57] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  280.437749][   T57] usb 6-1: Product: syz
[  280.437760][   T57] usb 6-1: Manufacturer: syz
[  280.437771][   T57] usb 6-1: SerialNumber: syz
[  280.752144][   T57] usb 6-1: config 0 descriptor??
[  280.765875][   T57] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  280.767655][   T57] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  281.026662][   T30] usb 6-1: USB disconnect, device number 17
[  281.076940][   T30] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  281.446265][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  281.585441][ T8923] tipc: Disabling bearer <eth:syzkaller0>
[  282.349336][ T8954] netlink: 'syz.3.468': attribute type 2 has an invalid length.
[  282.712033][   T66] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  282.944675][   T66] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  282.952163][   T66] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.957346][   T66] usb 8-1: config 0 descriptor??
[  283.936014][   T66] gspca_main: cpia1-2.14.0 probing 0813:0001
[  283.940468][   T66] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  284.162993][   T66] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  284.379298][ T1006] usb 8-1: USB disconnect, device number 10
[  285.077215][ T9019] loop7: detected capacity change from 0 to 7
[  285.099518][ T9020] netlink: 'syz.2.475': attribute type 2 has an invalid length.
[  285.150400][ T9025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.151023][ T9025] syzkaller0: entered promiscuous mode
[  285.151041][ T9025] syzkaller0: entered allmulticast mode
[  285.155971][ T9019] Dev loop7: unable to read RDB block 7
[  285.156008][ T9019]  loop7: unable to read partition table
[  285.156164][ T9019] loop7: partition table beyond EOD, truncated
[  285.156198][ T9019] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  285.198327][ T9025] tipc: Resetting bearer <eth:syzkaller0>
[  285.229550][ T6022] buffer_io_error: 11 callbacks suppressed
[  285.229570][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  285.230033][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  285.233203][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  285.233940][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  285.234386][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  285.450383][   T57] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  285.989745][   T57] usb 6-1: Using ep0 maxpacket: 32
[  286.079938][   T57] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  286.081503][   T57] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  286.081542][   T57] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  286.081571][   T57] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  286.081596][   T57] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  286.081618][   T57] usb 6-1: config 0 interface 0 has no altsetting 0
[  286.088235][   T57] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  286.088259][   T57] usb 6-1: Product: syz
[  286.088271][   T57] usb 6-1: Manufacturer: syz
[  286.088282][   T57] usb 6-1: SerialNumber: syz
[  286.091325][   T57] usb 6-1: config 0 descriptor??
[  286.103834][   T57] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  286.107463][   T57] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  286.333504][ T9065] netlink: 'syz.2.485': attribute type 2 has an invalid length.
[  286.507309][ T9025] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  286.509970][ T9067] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  286.520079][    C3] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  286.520140][ T2046] usb 6-1: USB disconnect, device number 18
[  286.650833][   T66] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  286.814629][   T66] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  286.824681][   T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.843659][   T66] usb 7-1: config 0 descriptor??
[  286.858076][ T2046] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  286.859801][   T66] gspca_main: cpia1-2.14.0 probing 0813:0001
[  286.993397][ T9022] tipc: Resetting bearer <eth:syzkaller0>
[  287.109408][ T9022] tipc: Disabling bearer <eth:syzkaller0>
[  287.256726][   T66] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  287.563926][ T9097] loop7: detected capacity change from 0 to 7
[  287.628650][ T9097] Dev loop7: unable to read RDB block 7
[  287.628706][ T9097]  loop7: unable to read partition table
[  287.628885][ T9097] loop7: partition table beyond EOD, truncated
[  287.628911][ T9097] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  287.664260][ T9101] netlink: 'syz.3.489': attribute type 2 has an invalid length.
[  287.674797][   T66] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  287.719414][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.490'.
[  287.720973][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.773685][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.826285][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.891264][ T3383] usb 7-1: USB disconnect, device number 15
[  287.895815][ T9106] loop7: detected capacity change from 0 to 7
[  287.947573][ T9106] Dev loop7: unable to read RDB block 7
[  287.947597][ T9106]  loop7: unable to read partition table
[  287.947695][ T9106] loop7: partition table beyond EOD, truncated
[  287.947735][ T9106] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  288.661427][ T9142] loop7: detected capacity change from 0 to 7
[  288.706240][ T9142] Dev loop7: unable to read RDB block 7
[  288.706282][ T9142]  loop7: unable to read partition table
[  288.706439][ T9142] loop7: partition table beyond EOD, truncated
[  288.712136][ T9142] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  288.775329][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  288.780539][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  288.781211][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  289.373958][ T9185] loop7: detected capacity change from 0 to 7
[  289.440747][ T9185] Dev loop7: unable to read RDB block 7
[  289.440809][ T9185]  loop7: unable to read partition table
[  289.440903][ T9185] loop7: partition table beyond EOD, truncated
[  289.440920][ T9185] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  289.539642][ T9189] netlink: 'syz.0.499': attribute type 2 has an invalid length.
[  289.568651][ T9191] netlink: 'syz.3.501': attribute type 2 has an invalid length.
[  289.793005][ T9199] netlink: 112 bytes leftover after parsing attributes in process `syz.0.504'.
[  289.860477][ T2046] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  289.914354][ T9209] netlink: 'syz.2.505': attribute type 2 has an invalid length.
[  290.013483][ T2046] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  290.014577][ T2046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.019040][ T2046] usb 8-1: config 0 descriptor??
[  290.023065][ T2046] gspca_main: cpia1-2.14.0 probing 0813:0001
[  290.170468][ T3383] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  290.323763][ T3383] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  290.325476][ T3383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.329261][ T3383] usb 7-1: config 0 descriptor??
[  290.343783][ T3383] gspca_main: cpia1-2.14.0 probing 0813:0001
[  290.427108][ T2046] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  290.697127][ T9225] loop7: detected capacity change from 0 to 7
[  290.745782][ T9225] Dev loop7: unable to read RDB block 7
[  290.745805][ T9225]  loop7: unable to read partition table
[  290.745906][ T9225] loop7: partition table beyond EOD, truncated
[  290.745942][ T9225] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  290.758221][ T3383] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  290.838598][ T2046] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  291.041233][   T58] usb 8-1: USB disconnect, device number 11
[  291.240424][ T3383] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  291.447718][ T3383] usb 7-1: USB disconnect, device number 16
[  292.873805][ T9335] netlink: 112 bytes leftover after parsing attributes in process `syz.2.517'.
[  293.845083][ T9365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.845871][ T9365] syzkaller0: entered promiscuous mode
[  293.845988][ T9365] syzkaller0: entered allmulticast mode
[  293.869218][ T9365] tipc: Resetting bearer <eth:syzkaller0>
[  294.120595][ T2046] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  294.310898][ T2046] usb 7-1: Using ep0 maxpacket: 32
[  294.319267][ T2046] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  294.328570][ T2046] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  294.328591][ T2046] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  294.328608][ T2046] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  294.328621][ T2046] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  294.328634][ T2046] usb 7-1: config 0 interface 0 has no altsetting 0
[  294.353348][ T2046] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  294.353365][ T2046] usb 7-1: Product: syz
[  294.353372][ T2046] usb 7-1: Manufacturer: syz
[  294.353379][ T2046] usb 7-1: SerialNumber: syz
[  294.463504][ T2046] usb 7-1: config 0 descriptor??
[  294.523075][ T2046] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  294.694810][ T2046] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  295.133239][ T3383] usb 7-1: USB disconnect, device number 17
[  295.152031][ T3383] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  295.277171][ T9397] loop7: detected capacity change from 0 to 7
[  295.325004][ T9397] Dev loop7: unable to read RDB block 7
[  295.325038][ T9397]  loop7: unable to read partition table
[  295.325206][ T9397] loop7: partition table beyond EOD, truncated
[  295.330454][ T9397] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  295.346536][ T9364] tipc: Resetting bearer <eth:syzkaller0>
[  295.407145][ T9364] tipc: Disabling bearer <eth:syzkaller0>
[  295.413102][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  295.413425][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  295.413788][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  295.414040][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  295.417024][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  296.020675][   T66] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  296.200357][   T66] usb 6-1: Invalid ep0 maxpacket: 64
[  296.350474][   T66] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  296.506572][   T66] usb 6-1: Invalid ep0 maxpacket: 64
[  296.508938][   T66] usb usb6-port1: attempt power cycle
[  296.880822][   T66] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  296.900989][   T66] usb 6-1: Invalid ep0 maxpacket: 64
[  296.967837][ T9428] loop7: detected capacity change from 0 to 7
[  297.042250][   T66] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  297.073763][   T66] usb 6-1: Invalid ep0 maxpacket: 64
[  297.075953][   T66] usb usb6-port1: unable to enumerate USB device
[  297.123124][ T9428] Dev loop7: unable to read RDB block 7
[  297.123211][ T9428]  loop7: unable to read partition table
[  297.124054][ T9428] loop7: partition table beyond EOD, truncated
[  297.124230][ T9428] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  297.160888][ T6022] Buffer I/O error on dev loop7, logical block 0, async page read
[  297.231046][ T9435] loop7: detected capacity change from 0 to 7
[  297.292611][ T9435] Dev loop7: unable to read RDB block 7
[  297.292633][ T9435]  loop7: unable to read partition table
[  297.292727][ T9435] loop7: partition table beyond EOD, truncated
[  297.292776][ T9435] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  297.480298][ T9452] netlink: 112 bytes leftover after parsing attributes in process `syz.0.537'.
[  298.699742][ T9511] loop7: detected capacity change from 0 to 7
[  298.771991][ T9511] Dev loop7: unable to read RDB block 7
[  298.772018][ T9511]  loop7: unable to read partition table
[  298.772110][ T9511] loop7: partition table beyond EOD, truncated
[  298.772120][ T9511] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  298.872883][ T5154] Buffer I/O error on dev loop7, logical block 0, async page read
[  298.872905][ T5154] Buffer I/O error on dev loop7, logical block 0, async page read
[  298.872920][ T5154] Buffer I/O error on dev loop7, logical block 0, async page read
[  298.872933][ T5154] Buffer I/O error on dev loop7, logical block 0, async page read
[  298.872973][ T5154] ldm_validate_partition_table(): Disk read failed.
[  298.873003][ T5154] Dev loop7: unable to read RDB block 0
[  298.873029][ T5154]  loop7: unable to read partition table
[  298.873113][ T5154] loop7: partition table beyond EOD, truncated
[  298.932597][ T9521] loop7: detected capacity change from 0 to 7
[  299.007129][ T9521] Dev loop7: unable to read RDB block 7
[  299.007166][ T9521]  loop7: unable to read partition table
[  299.007553][ T9521] loop7: partition table beyond EOD, truncated
[  299.007585][ T9521] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  299.529875][ T9538] netlink: 'syz.0.547': attribute type 2 has an invalid length.
[  299.589494][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.599126][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.914605][ T9549] netlink: 112 bytes leftover after parsing attributes in process `syz.2.548'.
[  300.198954][ T9559] FAULT_INJECTION: forcing a failure.
[  300.198954][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.198978][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.1.551 Not tainted syzkaller #0 PREEMPT(full) 
[  300.199001][ T9559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  300.199010][ T9559] Call Trace:
[  300.199014][ T9559]  <TASK>
[  300.199018][ T9559]  dump_stack_lvl+0x100/0x190
[  300.199039][ T9559]  should_fail_ex.cold+0x5/0xa
[  300.199054][ T9559]  _copy_from_iter+0x1f4/0x1690
[  300.199070][ T9559]  ? __asan_memset+0x23/0x50
[  300.199082][ T9559]  ? __pfx__copy_from_iter+0x10/0x10
[  300.199095][ T9559]  ? __pfx___alloc_skb+0x10/0x10
[  300.199116][ T9559]  netlink_sendmsg+0x808/0xda0
[  300.199132][ T9559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.199146][ T9559]  ? apparmor_socket_sendmsg+0x165/0x280
[  300.199163][ T9559]  ____sys_sendmsg+0xa4d/0xbe0
[  300.199173][ T9559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.199191][ T9559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.199208][ T9559]  ___sys_sendmsg+0x190/0x1e0
[  300.199221][ T9559]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.199239][ T9559]  ? find_held_lock+0x2b/0x80
[  300.199260][ T9559]  __sys_sendmsg+0x160/0x210
[  300.199276][ T9559]  ? __pfx___sys_sendmsg+0x10/0x10
[  300.199295][ T9559]  ? __pfx_ksys_write+0x10/0x10
[  300.199309][ T9559]  __do_fast_syscall_32+0x13a/0x8b0
[  300.199327][ T9559]  ? lockdep_hardirqs_on+0x7d/0x110
[  300.199345][ T9559]  do_fast_syscall_32+0x32/0x70
[  300.199362][ T9559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  300.199376][ T9559] RIP: 0023:0xf6fcefec
[  300.199389][ T9559] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  300.199394][ T9559] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  300.199406][ T9559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  300.199413][ T9559] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.199421][ T9559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.199427][ T9559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  300.199433][ T9559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.199447][ T9559]  </TASK>
[  300.612044][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.612242][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.246500][ T9604] loop7: detected capacity change from 0 to 7
[  301.289105][ T9604] Dev loop7: unable to read RDB block 7
[  301.289177][ T9604]  loop7: unable to read partition table
[  301.289320][ T9604] loop7: partition table beyond EOD, truncated
[  301.290471][ T9604] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  301.445117][ T9620] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.469158][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.470666][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.719886][ T9643] netlink: 'syz.1.561': attribute type 2 has an invalid length.
[  301.998326][ T9658] netlink: 112 bytes leftover after parsing attributes in process `syz.2.565'.
[  302.030340][   T30] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  302.217350][   T30] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  302.229448][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.255550][   T30] usb 6-1: config 0 descriptor??
[  302.263146][   T30] gspca_main: cpia1-2.14.0 probing 0813:0001
[  302.726725][   T30] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  303.319844][   T30] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  303.546455][   T30] usb 6-1: USB disconnect, device number 23
[  304.261215][ T9713] syzkaller0: entered promiscuous mode
[  304.261237][ T9713] syzkaller0: entered allmulticast mode
[  304.287286][ T9716] netlink: 112 bytes leftover after parsing attributes in process `syz.0.573'.
[  304.488747][ T9719] FAULT_INJECTION: forcing a failure.
[  304.488747][ T9719] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.488768][ T9719] CPU: 3 UID: 0 PID: 9719 Comm: syz.2.575 Not tainted syzkaller #0 PREEMPT(full) 
[  304.488782][ T9719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  304.488788][ T9719] Call Trace:
[  304.488792][ T9719]  <TASK>
[  304.488796][ T9719]  dump_stack_lvl+0x100/0x190
[  304.488814][ T9719]  should_fail_ex.cold+0x5/0xa
[  304.488830][ T9719]  _copy_from_user+0x2e/0xd0
[  304.488863][ T9719]  memdup_user+0x6b/0xe0
[  304.488875][ T9719]  sctp_getsockopt+0x3e53/0x7090
[  304.488892][ T9719]  ? aa_inet_opt_perm+0x30d/0x970
[  304.488908][ T9719]  ? __pfx_sctp_getsockopt+0x10/0x10
[  304.488922][ T9719]  ? lock_acquire+0x1d1/0x380
[  304.488940][ T9719]  ? find_held_lock+0x2b/0x80
[  304.488951][ T9719]  ? futex_unqueue+0x133/0x2c0
[  304.488968][ T9719]  ? futex_unqueue+0x133/0x2c0
[  304.488988][ T9719]  ? __futex_wait+0x256/0x300
[  304.489006][ T9719]  ? __pfx_futex_wake_mark+0x10/0x10
[  304.489022][ T9719]  ? find_held_lock+0x2b/0x80
[  304.489036][ T9719]  ? aa_sock_opt_perm+0x114/0x1e0
[  304.489050][ T9719]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  304.489068][ T9719]  do_sock_getsockopt+0x50a/0x6e0
[  304.489090][ T9719]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  304.489110][ T9719]  ? __fget_files+0x34/0x3d0
[  304.489123][ T9719]  ? find_held_lock+0x2b/0x80
[  304.489139][ T9719]  ? __fget_files+0x21f/0x3d0
[  304.489154][ T9719]  __sys_getsockopt+0x133/0x1d0
[  304.489173][ T9719]  ? __ia32_sys_getsockopt+0xbc/0x160
[  304.489187][ T9719]  __ia32_sys_getsockopt+0xbc/0x160
[  304.489201][ T9719]  ? __do_fast_syscall_32+0xb3/0x8b0
[  304.489218][ T9719]  ? lockdep_hardirqs_on+0x7d/0x110
[  304.489237][ T9719]  __do_fast_syscall_32+0x13a/0x8b0
[  304.489255][ T9719]  do_fast_syscall_32+0x32/0x70
[  304.489272][ T9719]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  304.489286][ T9719] RIP: 0023:0xf7f88fec
[  304.489299][ T9719] Code: Unable to access opcode bytes at 0xf7f88fc2.
[  304.489305][ T9719] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 000000000000016d
[  304.489316][ T9719] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000084
[  304.489323][ T9719] RDX: 000000000000006f RSI: 0000000080000040 RDI: 0000000080000180
[  304.489330][ T9719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.489336][ T9719] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  304.489342][ T9719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.489356][ T9719]  </TASK>
[  306.022157][ T9757] netlink: 112 bytes leftover after parsing attributes in process `syz.1.579'.
[  306.693324][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'.
[  306.822926][ T9768] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  306.868585][ T9770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.869208][ T9770] syzkaller0: entered promiscuous mode
[  306.869225][ T9770] syzkaller0: entered allmulticast mode
[  306.887234][ T9770] tipc: Resetting bearer <eth:syzkaller0>
[  307.120490][ T1006] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  307.280366][ T1006] usb 6-1: Using ep0 maxpacket: 32
[  307.280814][ T1006] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  307.281660][ T1006] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  307.281679][ T1006] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  307.281697][ T1006] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  307.281710][ T1006] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  307.281723][ T1006] usb 6-1: config 0 interface 0 has no altsetting 0
[  307.284325][ T1006] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  307.284341][ T1006] usb 6-1: Product: syz
[  307.284349][ T1006] usb 6-1: Manufacturer: syz
[  307.284356][ T1006] usb 6-1: SerialNumber: syz
[  307.286409][ T1006] usb 6-1: config 0 descriptor??
[  307.291960][ T1006] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  307.295343][ T1006] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  307.598171][   T58] usb 6-1: USB disconnect, device number 24
[  307.598281][    C1] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  307.606029][ T9770] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  307.609968][ T9771] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  307.610011][   T58] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  307.611836][ T9774] netlink: 112 bytes leftover after parsing attributes in process `syz.2.585'.
[  307.802589][ T9769] tipc: Resetting bearer <eth:syzkaller0>
[  307.809448][ T9769] tipc: Disabling bearer <eth:syzkaller0>
[  309.045284][ T9832] syz_tun: entered allmulticast mode
[  309.057374][ T9832] dvmrp6: entered allmulticast mode
[  309.179727][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.180028][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.211433][ T9828] syz_tun: left allmulticast mode
[  309.217437][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'.
[  309.270913][ T9840] netlink: 112 bytes leftover after parsing attributes in process `syz.2.598'.
[  309.297184][ T9838] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  310.305494][ T9858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.305963][ T9858] syzkaller0: entered promiscuous mode
[  310.305979][ T9858] syzkaller0: entered allmulticast mode
[  310.327029][ T9858] tipc: Resetting bearer <eth:syzkaller0>
[  310.617978][   T30] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  310.700402][   T57] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[  310.811094][   T30] usb 6-1: Using ep0 maxpacket: 32
[  310.811584][   T30] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  310.818211][   T30] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  310.818234][   T30] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  310.818251][   T30] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  310.818265][   T30] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  310.818278][   T30] usb 6-1: config 0 interface 0 has no altsetting 0
[  310.824557][   T30] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  310.824571][   T30] usb 6-1: Product: syz
[  310.824578][   T30] usb 6-1: Manufacturer: syz
[  310.824585][   T30] usb 6-1: SerialNumber: syz
[  310.829370][   T30] usb 6-1: config 0 descriptor??
[  310.851309][   T57] usb 8-1: Invalid ep0 maxpacket: 64
[  310.870882][   T30] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  310.890615][   T30] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  310.981149][   T57] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  311.040873][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.041210][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.140631][   T57] usb 8-1: Invalid ep0 maxpacket: 64
[  311.141705][   T57] usb usb8-port1: attempt power cycle
[  311.195944][ T9858] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  311.198832][   T30] usb 6-1: USB disconnect, device number 25
[  311.198863][    C2] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  311.212539][ T9891] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  311.220572][   T30] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  311.490443][   T57] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  311.512365][   T57] usb 8-1: Invalid ep0 maxpacket: 64
[  311.571381][ T9856] tipc: Resetting bearer <eth:syzkaller0>
[  311.644711][ T9856] tipc: Disabling bearer <eth:syzkaller0>
[  311.660536][   T57] usb 8-1: new low-speed USB device number 15 using dummy_hcd
[  311.682812][   T57] usb 8-1: Invalid ep0 maxpacket: 64
[  311.683006][   T57] usb usb8-port1: unable to enumerate USB device
[  313.271536][ T9947] netlink: 112 bytes leftover after parsing attributes in process `syz.1.616'.
[  314.769608][ T9962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.769804][ T9962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.198206][T10094] netlink: 'syz.3.638': attribute type 2 has an invalid length.
[  317.617248][   T58] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  317.911804][   T58] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  317.919800][   T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.925016][   T58] usb 8-1: config 0 descriptor??
[  317.937498][   T58] gspca_main: cpia1-2.14.0 probing 0813:0001
[  318.165525][T10122] netlink: 'syz.0.640': attribute type 2 has an invalid length.
[  318.183503][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.183806][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.342516][   T58] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  318.750169][   T58] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  319.020698][   T66] usb 8-1: USB disconnect, device number 16
[  320.029749][T10189] netlink: 'syz.1.648': attribute type 2 has an invalid length.
[  320.472204][T10199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  321.310350][ T5433] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  321.482591][ T5433] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  321.551444][ T5433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.595801][ T5433] usb 6-1: config 0 descriptor??
[  321.607886][ T5433] gspca_main: cpia1-2.14.0 probing 0813:0001
[  321.781010][T10232] netlink: 112 bytes leftover after parsing attributes in process `syz.2.656'.
[  322.043870][T10240] fuse: blksize only supported for fuseblk
[  322.189727][ T5433] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  322.598418][ T5433] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  322.758893][T10249] binder: 10248:10249 ioctl 400454ca 80000200 returned -22
[  322.802926][ T5433] usb 6-1: USB disconnect, device number 26
[  322.908499][T10252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.921606][T10252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.921818][T10252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.742829][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  323.742897][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  326.238133][T10299] binder: 10298:10299 ioctl 400454ca 80000200 returned -22
[  326.364283][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'.
[  326.388449][T10307] tipc: Started in network mode
[  326.388466][T10307] tipc: Node identity e61f24b153db, cluster identity 4711
[  326.388579][T10307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.389026][T10307] syzkaller0: entered promiscuous mode
[  326.389037][T10307] syzkaller0: entered allmulticast mode
[  326.399885][T10309] netlink: 'syz.0.676': attribute type 2 has an invalid length.
[  326.424900][T10307] tipc: Resetting bearer <eth:syzkaller0>
[  326.498973][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.501536][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.680454][   T66] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  326.870444][   T66] usb 8-1: Using ep0 maxpacket: 32
[  326.878359][   T66] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  326.883542][   T66] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  326.883577][   T66] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  326.883606][   T66] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  326.883627][   T66] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  326.883647][   T66] usb 8-1: config 0 interface 0 has no altsetting 0
[  326.898796][   T66] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  326.898909][   T66] usb 8-1: Product: syz
[  326.899004][   T66] usb 8-1: Manufacturer: syz
[  326.899017][   T66] usb 8-1: SerialNumber: syz
[  326.909071][   T66] usb 8-1: config 0 descriptor??
[  326.944239][   T66] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  326.952861][   T66] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  327.325448][T10307] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  327.325623][   T30] usb 8-1: USB disconnect, device number 17
[  327.325773][    C2] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  327.326505][T10324] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  327.330421][   T30] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  327.424077][   T66] tipc: Node number set to 3049530545
[  328.841143][T10306] tipc: Resetting bearer <eth:syzkaller0>
[  329.234493][T10306] tipc: Disabling bearer <eth:syzkaller0>
[  329.437913][T10381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.457984][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.458343][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.682217][T10392] Invalid ELF header magic: != ELF
[  330.006032][T10397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  330.600175][T10434] netlink: 112 bytes leftover after parsing attributes in process `syz.1.698'.
[  333.090913][T10478] netlink: 'syz.3.697': attribute type 2 has an invalid length.
[  333.806917][T10514] netlink: 'syz.1.707': attribute type 2 has an invalid length.
[  333.820364][ T7633] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  334.022158][ T7633] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  334.023356][ T7633] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.024690][ T7633] usb 8-1: config 0 descriptor??
[  334.033990][ T7633] gspca_main: cpia1-2.14.0 probing 0813:0001
[  334.090392][ T5433] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  334.252560][ T5433] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  334.254254][ T5433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.255720][ T5433] usb 6-1: config 0 descriptor??
[  334.258090][ T5433] gspca_main: cpia1-2.14.0 probing 0813:0001
[  334.422274][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.422646][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.430875][ T7633] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  334.665093][ T5433] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  334.833708][ T7633] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  334.860431][ T7635] usb 7-1: new low-speed USB device number 18 using dummy_hcd
[  335.010349][ T7635] usb 7-1: Invalid ep0 maxpacket: 64
[  335.040084][ T2046] usb 8-1: USB disconnect, device number 18
[  335.071365][ T5433] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  335.140450][ T7635] usb 7-1: new low-speed USB device number 19 using dummy_hcd
[  335.287247][ T5433] usb 6-1: USB disconnect, device number 27
[  335.291944][ T7635] usb 7-1: Invalid ep0 maxpacket: 64
[  335.292351][ T7635] usb usb7-port1: attempt power cycle
[  335.660555][ T7635] usb 7-1: new low-speed USB device number 20 using dummy_hcd
[  335.682348][ T7635] usb 7-1: Invalid ep0 maxpacket: 64
[  335.850519][ T7635] usb 7-1: new low-speed USB device number 21 using dummy_hcd
[  335.882192][ T7635] usb 7-1: Invalid ep0 maxpacket: 64
[  335.883612][ T7635] usb usb7-port1: unable to enumerate USB device
[  336.047083][T10539] netlink: 'syz.1.716': attribute type 2 has an invalid length.
[  336.360428][ T7635] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  336.541644][ T7635] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  336.542842][ T7635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.546850][ T7635] usb 6-1: config 0 descriptor??
[  336.556693][ T7635] gspca_main: cpia1-2.14.0 probing 0813:0001
[  336.955717][ T7635] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  337.040378][ T7633] usb 8-1: new low-speed USB device number 19 using dummy_hcd
[  337.220323][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  337.351246][ T7633] usb 8-1: new low-speed USB device number 20 using dummy_hcd
[  337.369209][ T7635] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  337.500367][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  337.500547][ T7633] usb usb8-port1: attempt power cycle
[  337.656158][ T3383] usb 6-1: USB disconnect, device number 28
[  337.870882][ T7633] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  337.891304][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  337.927008][T10575] netlink: 'syz.0.721': attribute type 2 has an invalid length.
[  337.933695][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.934134][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.030422][ T7633] usb 8-1: new low-speed USB device number 22 using dummy_hcd
[  338.061194][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  338.061553][ T7633] usb usb8-port1: unable to enumerate USB device
[  338.351575][T10581] netlink: 'syz.2.731': attribute type 2 has an invalid length.
[  338.537390][T10587] netlink: 'syz.0.734': attribute type 2 has an invalid length.
[  338.547183][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.547502][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.630432][   T58] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  338.760480][   T58] usb 7-1: device descriptor read/64, error -71
[  339.000406][   T58] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  339.130388][   T58] usb 7-1: device descriptor read/64, error -71
[  339.240546][   T58] usb usb7-port1: attempt power cycle
[  339.423526][T10595] netlink: 'syz.0.738': attribute type 2 has an invalid length.
[  339.458266][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.477620][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.580567][   T58] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  339.601619][   T58] usb 7-1: device descriptor read/8, error -71
[  339.758004][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'.
[  339.860757][   T58] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  339.881917][   T58] usb 7-1: device descriptor read/8, error -71
[  340.002770][   T58] usb usb7-port1: unable to enumerate USB device
[  342.995371][   T57] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  343.040829][T10682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.155067][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.155411][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.210376][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  343.340327][   T57] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  343.490330][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  343.490607][   T57] usb usb7-port1: attempt power cycle
[  343.630364][  T859] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  343.780557][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  343.830460][   T57] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  343.851115][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  343.910525][  T859] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[  343.982536][   T57] usb 7-1: new low-speed USB device number 29 using dummy_hcd
[  344.000829][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  344.001070][   T57] usb usb7-port1: unable to enumerate USB device
[  344.060526][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  344.060701][  T859] usb usb6-port1: attempt power cycle
[  344.300433][ T7633] usb 8-1: new low-speed USB device number 23 using dummy_hcd
[  344.401195][  T859] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[  344.431326][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  344.470381][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  344.570595][  T859] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  344.601292][  T859] usb 6-1: Invalid ep0 maxpacket: 64
[  344.601551][  T859] usb usb6-port1: unable to enumerate USB device
[  344.620429][ T7633] usb 8-1: new low-speed USB device number 24 using dummy_hcd
[  344.800341][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  344.800716][ T7633] usb usb8-port1: attempt power cycle
[  344.949142][T10716] netlink: 'syz.0.750': attribute type 2 has an invalid length.
[  345.050063][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.050420][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.140551][ T7633] usb 8-1: new low-speed USB device number 25 using dummy_hcd
[  345.161564][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  345.290408][ T7633] usb 8-1: new low-speed USB device number 26 using dummy_hcd
[  345.311181][ T7633] usb 8-1: Invalid ep0 maxpacket: 64
[  345.311694][ T7633] usb usb8-port1: unable to enumerate USB device
[  346.165362][T10766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.166108][T10766] syzkaller0: entered promiscuous mode
[  346.166125][T10766] syzkaller0: entered allmulticast mode
[  346.188804][T10766] tipc: Resetting bearer <eth:syzkaller0>
[  346.430352][   T58] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  346.701339][   T58] usb 7-1: Using ep0 maxpacket: 32
[  346.704907][   T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  346.708560][   T58] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  346.708582][   T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  346.708599][   T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  346.708612][   T58] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  346.708625][   T58] usb 7-1: config 0 interface 0 has no altsetting 0
[  346.712508][   T58] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  346.712522][   T58] usb 7-1: Product: syz
[  346.712530][   T58] usb 7-1: Manufacturer: syz
[  346.712537][   T58] usb 7-1: SerialNumber: syz
[  346.757676][   T58] usb 7-1: config 0 descriptor??
[  346.771543][   T58] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  346.861425][T10778] netlink: 'syz.3.759': attribute type 2 has an invalid length.
[  346.910358][   T58] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  347.230372][  T859] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  347.247376][   T58] usb 7-1: USB disconnect, device number 30
[  347.252699][   T58] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  347.380963][T10765] tipc: Resetting bearer <eth:syzkaller0>
[  347.383112][  T859] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  347.384087][  T859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.389593][  T859] usb 8-1: config 0 descriptor??
[  347.399956][  T859] gspca_main: cpia1-2.14.0 probing 0813:0001
[  347.409248][T10765] tipc: Disabling bearer <eth:syzkaller0>
[  347.499436][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.499684][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.804400][  T859] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  348.126722][T10808] netlink: 'syz.2.763': attribute type 2 has an invalid length.
[  348.223990][  T859] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  348.430569][ T1006] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  348.442604][   T66] usb 8-1: USB disconnect, device number 27
[  348.591301][ T1006] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  348.592414][ T1006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.594325][ T1006] usb 7-1: config 0 descriptor??
[  348.596490][ T1006] gspca_main: cpia1-2.14.0 probing 0813:0001
[  349.005959][ T1006] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  349.693726][ T1006] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  350.090314][   T66] usb 7-1: USB disconnect, device number 31
[  350.750399][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'.
[  351.405197][T10861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.406266][T10861] syzkaller0: entered promiscuous mode
[  351.406279][T10861] syzkaller0: entered allmulticast mode
[  351.432077][ T5103] Bluetooth: hci3: command 0x0406 tx timeout
[  351.436712][T10861] tipc: Resetting bearer <eth:syzkaller0>
[  351.712435][   T66] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  351.865843][   T66] usb 7-1: Using ep0 maxpacket: 32
[  351.888149][   T66] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  351.900054][   T66] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  351.900876][   T66] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  351.901158][   T66] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  351.901288][   T66] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  351.901441][   T66] usb 7-1: config 0 interface 0 has no altsetting 0
[  351.935325][   T66] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  351.935382][   T66] usb 7-1: Product: syz
[  351.935424][   T66] usb 7-1: Manufacturer: syz
[  351.935552][   T66] usb 7-1: SerialNumber: syz
[  352.066962][   T66] usb 7-1: config 0 descriptor??
[  352.119212][   T66] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  352.195425][   T66] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  352.468636][ T2046] usb 7-1: USB disconnect, device number 32
[  352.468739][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  352.472524][T10861] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  352.475836][T10863] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  352.478033][ T2046] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  352.706336][T10860] tipc: Resetting bearer <eth:syzkaller0>
[  352.742188][T10860] tipc: Disabling bearer <eth:syzkaller0>
[  352.981349][    T9] usb 8-1: new low-speed USB device number 28 using dummy_hcd
[  353.130374][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  353.270727][    T9] usb 8-1: new low-speed USB device number 29 using dummy_hcd
[  353.422147][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  353.422361][    T9] usb usb8-port1: attempt power cycle
[  353.770562][    T9] usb 8-1: new low-speed USB device number 30 using dummy_hcd
[  354.508562][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  354.628726][T10927] netlink: 'syz.2.780': attribute type 2 has an invalid length.
[  354.650436][    T9] usb 8-1: new low-speed USB device number 31 using dummy_hcd
[  354.671969][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  354.672320][    T9] usb usb8-port1: unable to enumerate USB device
[  354.930371][ T2046] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  355.081157][ T2046] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  355.082547][ T2046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.085639][ T2046] usb 7-1: config 0 descriptor??
[  355.088427][ T2046] gspca_main: cpia1-2.14.0 probing 0813:0001
[  355.507182][ T2046] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  355.805978][T10967] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.809149][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.809521][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.014052][ T2046] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  356.266280][  T859] usb 7-1: USB disconnect, device number 33
[  356.759511][T10973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.764710][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.765056][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.870683][    T9] usb 8-1: new low-speed USB device number 32 using dummy_hcd
[  356.957060][T10978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.957620][T10978] syzkaller0: entered promiscuous mode
[  356.957631][T10978] syzkaller0: entered allmulticast mode
[  356.993313][T10978] tipc: Resetting bearer <eth:syzkaller0>
[  357.020354][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  357.150520][    T9] usb 8-1: new low-speed USB device number 33 using dummy_hcd
[  357.300528][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  357.301068][    T9] usb usb8-port1: attempt power cycle
[  357.590528][ T3383] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  357.661702][    T9] usb 8-1: new low-speed USB device number 34 using dummy_hcd
[  357.680937][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  357.740611][ T3383] usb 7-1: Using ep0 maxpacket: 32
[  357.742298][ T3383] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  357.744838][ T3383] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  357.744870][ T3383] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  357.744899][ T3383] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  357.744920][ T3383] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  357.744940][ T3383] usb 7-1: config 0 interface 0 has no altsetting 0
[  357.746968][ T3383] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  357.746989][ T3383] usb 7-1: Product: syz
[  357.747001][ T3383] usb 7-1: Manufacturer: syz
[  357.747012][ T3383] usb 7-1: SerialNumber: syz
[  357.749215][ T3383] usb 7-1: config 0 descriptor??
[  357.753451][ T3383] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  357.756460][ T3383] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  357.820414][    T9] usb 8-1: new low-speed USB device number 35 using dummy_hcd
[  357.840880][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  357.841068][    T9] usb usb8-port1: unable to enumerate USB device
[  358.067396][T10978] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  358.067520][   T30] usb 7-1: USB disconnect, device number 34
[  358.067627][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  358.069813][T10995] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  358.075742][   T30] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  358.274356][T10977] tipc: Resetting bearer <eth:syzkaller0>
[  358.287704][T10977] tipc: Disabling bearer <eth:syzkaller0>
[  358.761796][   T30] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  359.130623][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  359.486247][   T30] usb 6-1: new low-speed USB device number 34 using dummy_hcd
[  359.576755][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.591655][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.120404][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  360.120611][   T30] usb usb6-port1: attempt power cycle
[  360.128276][T11045] netlink: 'syz.3.800': attribute type 2 has an invalid length.
[  360.460807][   T30] usb 6-1: new low-speed USB device number 35 using dummy_hcd
[  360.492701][    T9] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  360.511435][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  360.672619][   T30] usb 6-1: new low-speed USB device number 36 using dummy_hcd
[  360.692645][T11053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.693531][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  360.705085][    T9] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  360.706058][   T30] usb usb6-port1: unable to enumerate USB device
[  360.710848][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.755570][    T9] usb 8-1: config 0 descriptor??
[  360.789069][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.872561][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  360.896718][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.198666][    T9] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  361.488271][T11061] netlink: 'syz.1.806': attribute type 2 has an invalid length.
[  361.614209][    T9] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  361.770353][ T1006] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  361.878237][    T9] usb 8-1: USB disconnect, device number 36
[  361.930878][ T1006] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  361.933766][ T1006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.935042][ T1006] usb 6-1: config 0 descriptor??
[  361.938559][ T1006] gspca_main: cpia1-2.14.0 probing 0813:0001
[  362.348140][ T1006] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  362.758331][ T1006] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  362.966782][    T9] usb 6-1: USB disconnect, device number 37
[  364.070408][T11063] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  364.071099][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  364.072301][T11063] Bluetooth: hci0: Opcode 0x0406 failed: -110
[  364.851812][T11063] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.851927][T11063] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  364.856939][T11063] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.857003][T11063] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  364.864252][T11063] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  364.864339][T11063] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  364.875528][T11069] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  364.882090][T11081] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  365.089451][T11103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.092912][T11103] syzkaller0: entered promiscuous mode
[  365.093168][T11103] syzkaller0: entered allmulticast mode
[  365.228242][T11110] tipc: Resetting bearer <eth:syzkaller0>
[  365.471406][    T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  365.500374][ T1006] usb 7-1: new low-speed USB device number 35 using dummy_hcd
[  365.640454][    T9] usb 8-1: Using ep0 maxpacket: 32
[  365.642015][    T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  365.644139][    T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  365.644423][    T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  365.644529][    T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  365.644589][    T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  365.644641][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  365.648043][    T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  365.648058][    T9] usb 8-1: Product: syz
[  365.648065][    T9] usb 8-1: Manufacturer: syz
[  365.648072][    T9] usb 8-1: SerialNumber: syz
[  365.652475][    T9] usb 8-1: config 0 descriptor??
[  365.658201][    T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  365.661078][    T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  365.670659][ T1006] usb 7-1: Invalid ep0 maxpacket: 64
[  365.820392][ T1006] usb 7-1: new low-speed USB device number 36 using dummy_hcd
[  365.964607][   T30] usb 8-1: USB disconnect, device number 37
[  365.965414][    C0] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  365.967008][T11103] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  365.967175][T11110] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  365.967438][   T30] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  365.980543][ T1006] usb 7-1: Invalid ep0 maxpacket: 64
[  365.981742][ T1006] usb usb7-port1: attempt power cycle
[  366.140368][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  366.140486][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  366.175567][T11102] tipc: Resetting bearer <eth:syzkaller0>
[  366.191405][T11102] tipc: Disabling bearer <eth:syzkaller0>
[  366.330332][ T1006] usb 7-1: new low-speed USB device number 37 using dummy_hcd
[  366.362594][ T1006] usb 7-1: Invalid ep0 maxpacket: 64
[  366.510357][ T1006] usb 7-1: new low-speed USB device number 38 using dummy_hcd
[  366.542233][ T1006] usb 7-1: Invalid ep0 maxpacket: 64
[  366.542871][ T1006] usb usb7-port1: unable to enumerate USB device
[  366.775318][T11126] netlink: 'syz.1.820': attribute type 2 has an invalid length.
[  366.860364][ T5103] Bluetooth: hci2: command 0x0406 tx timeout
[  366.950716][ T5103] Bluetooth: hci3: command 0x0406 tx timeout
[  367.092832][ T1006] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  367.271050][ T1006] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  367.271898][ T1006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.279423][ T1006] usb 6-1: config 0 descriptor??
[  367.283937][ T1006] gspca_main: cpia1-2.14.0 probing 0813:0001
[  367.706328][ T1006] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  367.860814][   T43] audit: type=1326 audit(1789545485.273:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.861147][   T43] audit: type=1326 audit(1789545485.283:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.862914][   T43] audit: type=1326 audit(1789545485.283:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.863034][   T43] audit: type=1326 audit(1789545485.283:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.863137][   T43] audit: type=1326 audit(1789545485.283:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.863406][   T43] audit: type=1326 audit(1789545485.283:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.864522][   T43] audit: type=1326 audit(1789545485.283:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.864653][   T43] audit: type=1326 audit(1789545485.283:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.865735][   T43] audit: type=1326 audit(1789545485.283:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71775ab code=0x7ffc0000
[  367.866041][   T43] audit: type=1326 audit(1789545485.283:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.824" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703efec code=0x7ffc0000
[  367.868374][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.869085][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.142349][T11158] netlink: 'syz.0.824': attribute type 30 has an invalid length.
[  368.223625][ T1006] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  368.230988][ T5103] Bluetooth: hci1: command 0x0406 tx timeout
[  368.427181][  T859] usb 6-1: USB disconnect, device number 38
[  368.950353][ T5103] Bluetooth: hci2: command 0x0406 tx timeout
[  369.020436][ T5103] Bluetooth: hci3: command 0x0406 tx timeout
[  370.155375][T11188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.156078][T11188] syzkaller0: entered promiscuous mode
[  370.156137][T11188] syzkaller0: entered allmulticast mode
[  370.222853][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.223128][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.228393][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.228600][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.230923][T11188] tipc: Resetting bearer <eth:syzkaller0>
[  370.243665][T11190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.244348][T11190] syzkaller0: entered promiscuous mode
[  370.244367][T11190] syzkaller0: entered allmulticast mode
[  370.260762][T11190] tipc: Resetting bearer <eth:syzkaller0>
[  370.470547][   T57] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  370.500336][  T859] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  370.620459][   T57] usb 8-1: Using ep0 maxpacket: 32
[  370.626287][   T57] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  370.632434][   T57] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  370.632470][   T57] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  370.632504][   T57] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  370.632591][   T57] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  370.632665][   T57] usb 8-1: config 0 interface 0 has no altsetting 0
[  370.635806][   T57] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  370.635831][   T57] usb 8-1: Product: syz
[  370.635845][   T57] usb 8-1: Manufacturer: syz
[  370.635859][   T57] usb 8-1: SerialNumber: syz
[  370.639063][   T57] usb 8-1: config 0 descriptor??
[  370.641919][   T57] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  370.642890][   T57] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  370.650468][  T859] usb 6-1: Using ep0 maxpacket: 32
[  370.651001][  T859] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  370.652086][  T859] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  370.652115][  T859] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  370.652165][  T859] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  370.652186][  T859] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  370.652206][  T859] usb 6-1: config 0 interface 0 has no altsetting 0
[  370.654412][  T859] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  370.654434][  T859] usb 6-1: Product: syz
[  370.654445][  T859] usb 6-1: Manufacturer: syz
[  370.654456][  T859] usb 6-1: SerialNumber: syz
[  370.662840][  T859] usb 6-1: config 0 descriptor??
[  370.667844][  T859] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  370.670135][  T859] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  370.980576][ T2046] usb 6-1: USB disconnect, device number 39
[  371.060477][T11188] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  371.073209][   T30] usb 8-1: USB disconnect, device number 38
[  371.073228][    C2] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  371.073909][ T2046] ldusb 6-1:0.0: LD USB Device #1 now disconnected
[  371.074007][T11207] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  371.100672][   T30] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  371.204014][T11189] tipc: Resetting bearer <eth:syzkaller0>
[  371.223747][T11189] tipc: Disabling bearer <eth:syzkaller0>
[  371.238023][T11221] netlink: 'syz.2.832': attribute type 2 has an invalid length.
[  371.313729][T11187] tipc: Resetting bearer <eth:syzkaller0>
[  371.324438][T11187] tipc: Disabling bearer <eth:syzkaller0>
[  371.485711][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'.
[  371.580528][   T66] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  371.734093][   T66] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  371.735112][   T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.752327][   T66] usb 7-1: config 0 descriptor??
[  371.757745][   T66] gspca_main: cpia1-2.14.0 probing 0813:0001
[  372.158290][   T66] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  372.565985][   T66] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  372.773417][   T57] usb 7-1: USB disconnect, device number 39
[  373.493631][T11251] bridge3: entered promiscuous mode
[  373.493651][T11251] bridge3: entered allmulticast mode
[  373.500508][T11251] team0: Port device bridge3 added
[  373.616072][T11260] loop3: detected capacity change from 0 to 7
[  374.148224][T11268] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  374.379953][T11273] netlink: 124 bytes leftover after parsing attributes in process `syz.0.844'.
[  374.411328][T11260] Dev loop3: unable to read RDB block 7
[  374.411364][T11260]  loop3: unable to read partition table
[  374.411523][T11260] loop3: partition table beyond EOD, truncated
[  374.411569][T11260] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  374.454389][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'.
[  374.507116][T11273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.528549][T11273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.533485][T11273] bond0 (unregistering): Released all slaves
[  374.726155][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.726831][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.748643][T11286] syz.0.848 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  375.402503][T11315] netlink: 'syz.0.851': attribute type 2 has an invalid length.
[  375.514124][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.522427][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.677755][T11319] netlink: 'syz.3.852': attribute type 2 has an invalid length.
[  375.701373][   T43] kauditd_printk_skb: 71 callbacks suppressed
[  375.701386][   T43] audit: type=1326 audit(1789545493.113:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.701411][   T43] audit: type=1326 audit(1789545493.113:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.701431][   T43] audit: type=1326 audit(1789545493.123:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702060][   T43] audit: type=1326 audit(1789545493.123:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702090][   T43] audit: type=1326 audit(1789545493.123:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702116][   T43] audit: type=1326 audit(1789545493.123:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702148][   T43] audit: type=1326 audit(1789545493.123:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702178][   T43] audit: type=1326 audit(1789545493.123:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702436][   T43] audit: type=1326 audit(1789545493.123:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.702985][   T43] audit: type=1326 audit(1789545493.123:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.2.846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  375.940495][ T1006] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  376.091156][ T1006] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  376.093416][ T1006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.095026][ T1006] usb 8-1: config 0 descriptor??
[  376.100907][ T1006] gspca_main: cpia1-2.14.0 probing 0813:0001
[  376.155539][T11327] FAULT_INJECTION: forcing a failure.
[  376.155539][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.155570][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) 
[  376.155589][T11327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  376.155599][T11327] Call Trace:
[  376.155605][T11327]  <TASK>
[  376.155612][T11327]  dump_stack_lvl+0x100/0x190
[  376.155672][T11327]  should_fail_ex.cold+0x5/0xa
[  376.155694][T11327]  _copy_from_user+0x2e/0xd0
[  376.155722][T11327]  hci_get_conn_info+0xb5/0x600
[  376.155752][T11327]  ? do_raw_spin_lock+0x128/0x260
[  376.155780][T11327]  ? __pfx_hci_get_conn_info+0x10/0x10
[  376.155810][T11327]  ? __local_bh_enable_ip+0xa5/0x120
[  376.155838][T11327]  hci_sock_ioctl+0x747/0x7e0
[  376.155870][T11327]  ? __pfx_hci_sock_ioctl+0x10/0x10
[  376.155894][T11327]  ? do_vfs_ioctl+0x226/0x13e0
[  376.155923][T11327]  hci_sock_compat_ioctl+0x68/0x80
[  376.155947][T11327]  ? __pfx_hci_sock_compat_ioctl+0x10/0x10
[  376.155968][T11327]  compat_sock_ioctl+0x179/0x760
[  376.155983][T11327]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  376.155994][T11327]  ? hook_file_ioctl_common+0x140/0x440
[  376.156014][T11327]  ? __fget_files+0x21f/0x3d0
[  376.156028][T11327]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  376.156041][T11327]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  376.156060][T11327]  __do_fast_syscall_32+0x13a/0x8b0
[  376.156082][T11327]  ? lockdep_hardirqs_on+0x7d/0x110
[  376.156099][T11327]  do_fast_syscall_32+0x32/0x70
[  376.156117][T11327]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  376.156131][T11327] RIP: 0023:0xf7f88fec
[  376.156145][T11327] Code: Unable to access opcode bytes at 0xf7f88fc2.
[  376.156151][T11327] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  376.156162][T11327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800448d5
[  376.156169][T11327] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  376.156175][T11327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  376.156183][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.156193][T11327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  376.156214][T11327]  </TASK>
[  376.224121][   T30] usb 6-1: new low-speed USB device number 40 using dummy_hcd
[  376.400445][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  376.567977][ T1006] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  376.622251][   T30] usb 6-1: new low-speed USB device number 41 using dummy_hcd
[  377.049632][ T1006] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  377.263549][ T1006] usb 8-1: USB disconnect, device number 39
[  377.758044][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  377.758236][   T30] usb usb6-port1: attempt power cycle
[  378.110692][   T30] usb 6-1: new low-speed USB device number 42 using dummy_hcd
[  378.153364][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  378.320675][   T30] usb 6-1: new low-speed USB device number 43 using dummy_hcd
[  378.354703][   T30] usb 6-1: Invalid ep0 maxpacket: 64
[  378.360796][   T30] usb usb6-port1: unable to enumerate USB device
[  378.878121][T11383] FAULT_INJECTION: forcing a failure.
[  378.878121][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.878154][T11383] CPU: 3 UID: 0 PID: 11383 Comm: syz.0.861 Not tainted syzkaller #0 PREEMPT(full) 
[  378.878176][T11383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  378.878187][T11383] Call Trace:
[  378.878194][T11383]  <TASK>
[  378.878202][T11383]  dump_stack_lvl+0x100/0x190
[  378.878232][T11383]  should_fail_ex.cold+0x5/0xa
[  378.878258][T11383]  _copy_from_user+0x2e/0xd0
[  378.878282][T11383]  ioctl_standard_iw_point+0x4e2/0xc90
[  378.878313][T11383]  ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10
[  378.878340][T11383]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  378.878366][T11383]  ? wext_ioctl_dispatch.constprop.0+0xa3/0x3d0
[  378.878400][T11383]  ? __pfx___mutex_lock+0x10/0x10
[  378.878433][T11383]  compat_standard_call+0x222/0x360
[  378.878460][T11383]  ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10
[  378.878487][T11383]  ? __pfx_compat_standard_call+0x10/0x10
[  378.878511][T11383]  ? dev_load+0x8e/0x240
[  378.878539][T11383]  ? __pfx_compat_standard_call+0x10/0x10
[  378.878566][T11383]  ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10
[  378.878588][T11383]  wext_ioctl_dispatch.constprop.0+0x30f/0x3d0
[  378.878618][T11383]  compat_wext_handle_ioctl+0x15d/0x220
[  378.878645][T11383]  ? __pfx_compat_wext_handle_ioctl+0x10/0x10
[  378.878675][T11383]  ? do_vfs_ioctl+0x226/0x13e0
[  378.878706][T11383]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  378.878739][T11383]  compat_sock_ioctl+0x381/0x760
[  378.878764][T11383]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  378.878782][T11383]  ? hook_file_ioctl_common+0x140/0x440
[  378.878822][T11383]  ? __fget_files+0x21f/0x3d0
[  378.878849][T11383]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  378.878871][T11383]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  378.878904][T11383]  __do_fast_syscall_32+0x13a/0x8b0
[  378.878941][T11383]  ? lockdep_hardirqs_on+0x7d/0x110
[  378.878970][T11383]  do_fast_syscall_32+0x32/0x70
[  378.878997][T11383]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  378.879022][T11383] RIP: 0023:0xf703efec
[  378.879043][T11383] Code: Unable to access opcode bytes at 0xf703efc2.
[  378.879052][T11383] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  378.879076][T11383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b34
[  378.879088][T11383] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  378.879099][T11383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  378.879110][T11383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  378.879121][T11383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  378.879148][T11383]  </TASK>
[  378.898559][T11385] netlink: 'syz.2.863': attribute type 2 has an invalid length.
[  379.290473][   T30] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  379.442197][   T30] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  379.446765][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.458471][   T30] usb 7-1: config 0 descriptor??
[  379.463628][   T30] gspca_main: cpia1-2.14.0 probing 0813:0001
[  379.937008][   T30] cpia1 7-1:0.0: unexpected state after lo power cmd: 01
[  380.365050][   T30] cpia1 7-1:0.0: only firmware version 1 is supported (got: 42)
[  381.546706][   T30] usb 7-1: USB disconnect, device number 40
[  382.056879][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'.
[  383.934374][   T43] kauditd_printk_skb: 3 callbacks suppressed
[  383.934423][   T43] audit: type=1326 audit(1789545501.073:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.934454][   T43] audit: type=1326 audit(1789545501.073:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.935026][   T43] audit: type=1326 audit(1789545501.073:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.935074][   T43] audit: type=1326 audit(1789545501.073:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936105][   T43] audit: type=1326 audit(1789545501.073:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936163][   T43] audit: type=1326 audit(1789545501.073:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936184][   T43] audit: type=1326 audit(1789545501.073:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936325][   T43] audit: type=1326 audit(1789545501.073:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936345][   T43] audit: type=1326 audit(1789545501.073:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  383.936364][   T43] audit: type=1326 audit(1789545501.073:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  384.991891][   T57] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[  385.022327][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'.
[  385.140350][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  385.181668][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  385.181764][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  385.280038][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'.
[  385.573205][   T57] usb 7-1: new low-speed USB device number 42 using dummy_hcd
[  385.712133][T11522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.712538][T11522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.720361][   T57] usb 7-1: Invalid ep0 maxpacket: 64
[  385.720581][   T57] usb usb7-port1: attempt power cycle
[  385.810229][T11524] netlink: 'syz.3.884': attribute type 2 has an invalid length.
[  386.130680][ T5433] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  386.361763][ T5433] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  386.362922][ T5433] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.368005][ T5433] usb 8-1: config 0 descriptor??
[  386.371458][ T5433] gspca_main: cpia1-2.14.0 probing 0813:0001
[  386.392276][T11551] FAULT_INJECTION: forcing a failure.
[  386.392276][T11551] name failslab, interval 1, probability 0, space 0, times 0
[  386.392308][T11551] CPU: 2 UID: 0 PID: 11551 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) 
[  386.392411][T11551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  386.392426][T11551] Call Trace:
[  386.392433][T11551]  <TASK>
[  386.392440][T11551]  dump_stack_lvl+0x100/0x190
[  386.392471][T11551]  should_fail_ex.cold+0x5/0xa
[  386.392498][T11551]  should_failslab+0xc2/0x120
[  386.392525][T11551]  __kmalloc_noprof+0xfc/0x840
[  386.392547][T11551]  ? rcu_is_watching+0x13/0xc0
[  386.392565][T11551]  ? tomoyo_realpath_from_path+0xb6/0x690
[  386.392590][T11551]  tomoyo_realpath_from_path+0xb6/0x690
[  386.392613][T11551]  tomoyo_check_open_permission+0x2af/0x3c0
[  386.392643][T11551]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  386.392672][T11551]  ? __lock_acquire+0x5c0/0x1f40
[  386.392705][T11551]  ? hook_file_open+0x248/0x8e0
[  386.392750][T11551]  ? path_get+0x61/0x80
[  386.392780][T11551]  tomoyo_file_open+0x6b/0x90
[  386.392805][T11551]  security_file_open+0xb5/0x1e0
[  386.392825][T11551]  do_dentry_open+0x588/0x14d0
[  386.392854][T11551]  vfs_open+0x82/0x3f0
[  386.392883][T11551]  path_openat+0x19fa/0x2440
[  386.392910][T11551]  ? __pfx_path_openat+0x10/0x10
[  386.392946][T11551]  do_file_open+0x20e/0x430
[  386.392971][T11551]  ? __pfx_do_file_open+0x10/0x10
[  386.393014][T11551]  ? _raw_spin_unlock+0x28/0x50
[  386.393039][T11551]  ? alloc_fd+0x471/0x7a0
[  386.393069][T11551]  do_sys_openat2+0x10f/0x1e0
[  386.393096][T11551]  ? __pfx_do_sys_openat2+0x10/0x10
[  386.393131][T11551]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  386.393167][T11551]  __ia32_compat_sys_openat+0x12d/0x210
[  386.393196][T11551]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  386.393243][T11551]  ? fput+0x7c/0x100
[  386.393265][T11551]  ? ksys_write+0x1ac/0x250
[  386.393283][T11551]  ? __pfx_ksys_write+0x10/0x10
[  386.393305][T11551]  __do_fast_syscall_32+0x13a/0x8b0
[  386.393331][T11551]  ? lockdep_hardirqs_on+0x7d/0x110
[  386.393359][T11551]  do_fast_syscall_32+0x32/0x70
[  386.393385][T11551]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  386.393409][T11551] RIP: 0023:0xf703efec
[  386.393430][T11551] Code: Unable to access opcode bytes at 0xf703efc2.
[  386.393438][T11551] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  386.393458][T11551] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180
[  386.393471][T11551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  386.393482][T11551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  386.393491][T11551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  386.393503][T11551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  386.393529][T11551]  </TASK>
[  386.393602][T11551] ERROR: Out of memory at tomoyo_realpath_from_path.
[  386.446644][T11551] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  386.446985][T11551] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  386.447247][T11551] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  386.451789][T11551] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  386.797656][ T5433] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  387.187142][ T5433] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  387.403430][ T1006] usb 8-1: USB disconnect, device number 40
[  387.547467][T11580] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  387.547520][T11580] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  387.573606][T11580] FAULT_INJECTION: forcing a failure.
[  387.573606][T11580] name failslab, interval 1, probability 0, space 0, times 0
[  387.573639][T11580] CPU: 3 UID: 0 PID: 11580 Comm: syz.0.894 Not tainted syzkaller #0 PREEMPT(full) 
[  387.573662][T11580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  387.573674][T11580] Call Trace:
[  387.573712][T11580]  <TASK>
[  387.573721][T11580]  dump_stack_lvl+0x100/0x190
[  387.573754][T11580]  should_fail_ex.cold+0x5/0xa
[  387.573778][T11580]  should_failslab+0xc2/0x120
[  387.573806][T11580]  kmem_cache_alloc_noprof+0x92/0x6a0
[  387.573828][T11580]  ? fuse_request_alloc+0x22/0x200
[  387.573856][T11580]  fuse_request_alloc+0x22/0x200
[  387.574026][T11580]  fuse_get_req+0x20a/0x400
[  387.574255][T11580]  ? __pfx_fuse_get_req+0x10/0x10
[  387.574278][T11580]  ? from_kgid+0x8f/0xd0
[  387.574304][T11580]  ? __pfx_from_kgid+0x10/0x10
[  387.574332][T11580]  ? pid_nr_ns+0xe6/0x150
[  387.574353][T11580]  fuse_chan_send_bg+0x3ab/0x800
[  387.574379][T11580]  fuse_simple_background+0x273/0x2e0
[  387.574470][T11580]  cuse_channel_open+0x5e6/0x8f0
[  387.574529][T11580]  ? __pfx_cuse_channel_open+0x10/0x10
[  387.574555][T11580]  misc_open+0x26d/0x450
[  387.574581][T11580]  ? __pfx_misc_open+0x10/0x10
[  387.574604][T11580]  chrdev_open+0x234/0x6a0
[  387.574627][T11580]  ? __pfx_apparmor_file_open+0x10/0x10
[  387.574658][T11580]  ? __pfx_chrdev_open+0x10/0x10
[  387.574683][T11580]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  387.574739][T11580]  do_dentry_open+0x6ab/0x14d0
[  387.574764][T11580]  ? __pfx_chrdev_open+0x10/0x10
[  387.574795][T11580]  vfs_open+0x82/0x3f0
[  387.574824][T11580]  path_openat+0x19fa/0x2440
[  387.574852][T11580]  ? __pfx_path_openat+0x10/0x10
[  387.574884][T11580]  do_file_open+0x20e/0x430
[  387.574911][T11580]  ? __pfx_do_file_open+0x10/0x10
[  387.574952][T11580]  ? _raw_spin_unlock+0x28/0x50
[  387.574978][T11580]  ? alloc_fd+0x471/0x7a0
[  387.575010][T11580]  do_sys_openat2+0x10f/0x1e0
[  387.575039][T11580]  ? __pfx_do_sys_openat2+0x10/0x10
[  387.575075][T11580]  __ia32_compat_sys_openat+0x12d/0x210
[  387.575105][T11580]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  387.575146][T11580]  __do_fast_syscall_32+0x13a/0x8b0
[  387.575181][T11580]  do_fast_syscall_32+0x32/0x70
[  387.575212][T11580]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  387.575232][T11580] RIP: 0023:0xf703efec
[  387.575255][T11580] Code: Unable to access opcode bytes at 0xf703efc2.
[  387.575263][T11580] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  387.575284][T11580] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000
[  387.575299][T11580] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  387.575311][T11580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  387.575323][T11580] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  387.575335][T11580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  387.575362][T11580]  </TASK>
[  387.588561][T11580] lo: entered promiscuous mode
[  387.588585][T11580] lo: entered allmulticast mode
[  387.591189][T11580] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  387.591410][T11580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  387.752475][ T5433] usb 7-1: new low-speed USB device number 44 using dummy_hcd
[  387.902483][ T5433] usb 7-1: Invalid ep0 maxpacket: 64
[  388.030461][ T5433] usb 7-1: new low-speed USB device number 45 using dummy_hcd
[  388.260996][ T5433] usb 7-1: Invalid ep0 maxpacket: 64
[  388.288414][ T5433] usb usb7-port1: attempt power cycle
[  388.460423][ T5103] Bluetooth: hci3: command 0x0406 tx timeout
[  388.460466][ T5103] Bluetooth: hci2: command 0x0406 tx timeout
[  388.460494][ T5103] Bluetooth: hci0: command 0x0406 tx timeout
[  388.460552][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  388.831896][ T1006] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[  388.950409][ T5433] usb 7-1: new low-speed USB device number 46 using dummy_hcd
[  388.980474][ T5433] usb 7-1: Invalid ep0 maxpacket: 64
[  389.070322][ T1006] usb 6-1: Invalid ep0 maxpacket: 64
[  389.140455][ T5433] usb 7-1: new low-speed USB device number 47 using dummy_hcd
[  389.171074][ T5433] usb 7-1: Invalid ep0 maxpacket: 64
[  389.171509][ T5433] usb usb7-port1: unable to enumerate USB device
[  389.220951][ T1006] usb 6-1: new low-speed USB device number 45 using dummy_hcd
[  389.400718][ T1006] usb 6-1: Invalid ep0 maxpacket: 64
[  389.401110][ T1006] usb usb6-port1: attempt power cycle
[  389.730597][ T2046] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  389.740491][ T1006] usb 6-1: new low-speed USB device number 46 using dummy_hcd
[  389.761396][ T1006] usb 6-1: Invalid ep0 maxpacket: 64
[  389.810191][T11621] loop3: detected capacity change from 0 to 7
[  389.880955][ T2046] usb 8-1: Using ep0 maxpacket: 8
[  389.886827][ T2046] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  389.890593][ T1006] usb 6-1: new low-speed USB device number 47 using dummy_hcd
[  389.893506][ T2046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  389.893525][ T2046] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  389.893593][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  389.893608][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  389.893620][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  389.893632][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  389.893645][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  389.893658][ T2046] usb 8-1: config 168 interface 0 has no altsetting 0
[  389.904803][ T2046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  389.904825][ T2046] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  389.904890][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  389.904905][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  389.904917][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  389.904929][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  389.904942][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  389.904955][ T2046] usb 8-1: config 168 interface 0 has no altsetting 0
[  389.909490][ T2046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  389.909644][ T2046] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  389.909861][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  389.910014][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  389.910031][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  389.910163][ T2046] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  389.910446][ T2046] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  389.910620][ T2046] usb 8-1: config 168 interface 0 has no altsetting 0
[  389.911162][ T1006] usb 6-1: Invalid ep0 maxpacket: 64
[  389.911352][ T1006] usb usb6-port1: unable to enumerate USB device
[  389.923162][ T2046] usb 8-1: string descriptor 0 read error: -22
[  389.923340][ T2046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.940559][ T2046] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  390.194287][ T5433] usb 8-1: USB disconnect, device number 41
[  390.258348][T11621] Dev loop3: unable to read RDB block 7
[  390.258375][T11621]  loop3: unable to read partition table
[  390.258529][T11621] loop3: partition table beyond EOD, truncated
[  390.258621][T11621] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  390.399336][T11618] comedi comedi3: comedi_config --init_data is deprecated
[  390.401653][ T1006] usb 5-1: USB disconnect, device number 2
[  390.573421][T11636] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  390.740432][    T9] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  390.900663][    T9] usb 6-1: Invalid ep0 maxpacket: 64
[  391.030612][    T9] usb 6-1: new low-speed USB device number 49 using dummy_hcd
[  391.158893][T11642] netlink: 'syz.0.920': attribute type 2 has an invalid length.
[  391.190635][    T9] usb 6-1: Invalid ep0 maxpacket: 64
[  391.190999][    T9] usb usb6-port1: attempt power cycle
[  391.196979][T11644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.912'.
[  391.313438][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'.
[  391.355642][T11649] netlink: 'syz.3.914': attribute type 2 has an invalid length.
[  391.505424][T11652] FAULT_INJECTION: forcing a failure.
[  391.505424][T11652] name failslab, interval 1, probability 0, space 0, times 0
[  391.505455][T11652] CPU: 2 UID: 0 PID: 11652 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) 
[  391.505475][T11652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  391.505486][T11652] Call Trace:
[  391.505492][T11652]  <TASK>
[  391.505500][T11652]  dump_stack_lvl+0x100/0x190
[  391.505527][T11652]  should_fail_ex.cold+0x5/0xa
[  391.505552][T11652]  should_failslab+0xc2/0x120
[  391.505577][T11652]  __kmalloc_noprof+0xfc/0x840
[  391.505598][T11652]  ? fuse_readdir_uncached+0x285/0x1c00
[  391.505627][T11652]  fuse_readdir_uncached+0x285/0x1c00
[  391.505649][T11652]  ? unwind_get_return_address+0x59/0xa0
[  391.505721][T11652]  ? __pfx_fuse_readdir_uncached+0x10/0x10
[  391.505744][T11652]  ? __pfx_stack_trace_save+0x10/0x10
[  391.505778][T11652]  ? add_lock_to_list+0x9d/0x1d0
[  391.505802][T11652]  ? check_prev_add+0x354/0xe60
[  391.505841][T11652]  ? find_held_lock+0x2b/0x80
[  391.505859][T11652]  ? fuse_readdir+0x9a7/0x1f20
[  391.505878][T11652]  ? fuse_readdir+0x9a7/0x1f20
[  391.505904][T11652]  fuse_readdir+0x9bb/0x1f20
[  391.505942][T11652]  iterate_dir+0x296/0xae0
[  391.505966][T11652]  __ia32_sys_getdents64+0x13a/0x2c0
[  391.505986][T11652]  ? __pfx___ia32_sys_getdents64+0x10/0x10
[  391.506006][T11652]  ? __pfx_filldir64+0x10/0x10
[  391.506024][T11652]  ? ksys_write+0x1ac/0x250
[  391.506043][T11652]  ? __pfx_ksys_write+0x10/0x10
[  391.506066][T11652]  __do_fast_syscall_32+0x13a/0x8b0
[  391.506093][T11652]  ? lockdep_hardirqs_on+0x7d/0x110
[  391.506122][T11652]  do_fast_syscall_32+0x32/0x70
[  391.506151][T11652]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  391.506174][T11652] RIP: 0023:0xf6fcefec
[  391.506199][T11652] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  391.506208][T11652] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc
[  391.506228][T11652] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100
[  391.506239][T11652] RDX: 0000000000000086 RSI: 0000000000000000 RDI: 0000000000000000
[  391.506251][T11652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  391.506262][T11652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  391.506273][T11652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  391.506298][T11652]  </TASK>
[  391.512670][ T5433] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  391.630381][ T2046] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  391.661459][ T5433] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  391.662356][ T5433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.663832][ T5433] usb 5-1: config 0 descriptor??
[  391.665830][ T5433] gspca_main: cpia1-2.14.0 probing 0813:0001
[  391.781106][ T2046] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  391.782076][ T2046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.784398][ T2046] usb 8-1: config 0 descriptor??
[  391.787932][ T2046] gspca_main: cpia1-2.14.0 probing 0813:0001
[  392.074271][ T5433] cpia1 5-1:0.0: unexpected state after lo power cmd: 01
[  392.196533][ T2046] cpia1 8-1:0.0: unexpected state after lo power cmd: 01
[  392.543656][ T5433] cpia1 5-1:0.0: only firmware version 1 is supported (got: 42)
[  392.602279][ T2046] cpia1 8-1:0.0: only firmware version 1 is supported (got: 42)
[  392.747799][ T2046] usb 5-1: USB disconnect, device number 3
[  392.807605][   T30] usb 8-1: USB disconnect, device number 42
[  393.331017][T11684] FAULT_INJECTION: forcing a failure.
[  393.331017][T11684] name failslab, interval 1, probability 0, space 0, times 0
[  393.331050][T11684] CPU: 1 UID: 0 PID: 11684 Comm: syz.1.919 Not tainted syzkaller #0 PREEMPT(full) 
[  393.331072][T11684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  393.331088][T11684] Call Trace:
[  393.331096][T11684]  <TASK>
[  393.331105][T11684]  dump_stack_lvl+0x100/0x190
[  393.331137][T11684]  should_fail_ex.cold+0x5/0xa
[  393.331164][T11684]  should_failslab+0xc2/0x120
[  393.331189][T11684]  __kmalloc_cache_noprof+0x91/0x6d0
[  393.331218][T11684]  ? _raw_spin_unlock+0x28/0x50
[  393.331244][T11684]  ? cuse_channel_open+0x23c/0x8f0
[  393.331273][T11684]  cuse_channel_open+0x23c/0x8f0
[  393.331298][T11684]  ? __pfx_cuse_channel_open+0x10/0x10
[  393.331324][T11684]  misc_open+0x26d/0x450
[  393.331348][T11684]  ? __pfx_misc_open+0x10/0x10
[  393.331370][T11684]  chrdev_open+0x234/0x6a0
[  393.331395][T11684]  ? __pfx_apparmor_file_open+0x10/0x10
[  393.331429][T11684]  ? __pfx_chrdev_open+0x10/0x10
[  393.331454][T11684]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  393.331485][T11684]  do_dentry_open+0x6ab/0x14d0
[  393.331506][T11684]  ? __pfx_chrdev_open+0x10/0x10
[  393.331536][T11684]  vfs_open+0x82/0x3f0
[  393.331565][T11684]  path_openat+0x19fa/0x2440
[  393.331594][T11684]  ? __pfx_path_openat+0x10/0x10
[  393.331624][T11684]  do_file_open+0x20e/0x430
[  393.331648][T11684]  ? __pfx_do_file_open+0x10/0x10
[  393.331689][T11684]  ? _raw_spin_unlock+0x28/0x50
[  393.331713][T11684]  ? alloc_fd+0x471/0x7a0
[  393.331743][T11684]  do_sys_openat2+0x10f/0x1e0
[  393.331771][T11684]  ? __pfx_do_sys_openat2+0x10/0x10
[  393.331808][T11684]  __ia32_compat_sys_openat+0x12d/0x210
[  393.331835][T11684]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  393.331874][T11684]  ? ksys_write+0x1ac/0x250
[  393.331906][T11684]  __do_fast_syscall_32+0x13a/0x8b0
[  393.331944][T11684]  do_fast_syscall_32+0x32/0x70
[  393.331975][T11684]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  393.332000][T11684] RIP: 0023:0xf6fcefec
[  393.332021][T11684] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  393.332028][T11684] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  393.332048][T11684] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000
[  393.332068][T11684] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  393.332083][T11684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  393.332093][T11684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  393.332104][T11684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  393.332128][T11684]  </TASK>
[  393.357744][T11683] ��)��fl: entered promiscuous mode
[  393.357770][T11683] ��)��fl: entered allmulticast mode
[  393.358454][T11683] team0: Device 
0
4��)��fl is loopback device. Loopback devices can't be added as a team port
[  393.358725][T11683] A link change request failed with some changes committed already. Interface 
0
4��)��fl may have been left with an inconsistent configuration, please check.
[  393.837245][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.925'.
[  393.938794][T11712] netlink: 'syz.0.926': attribute type 2 has an invalid length.
[  394.051034][T11718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'.
[  394.210789][   T66] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  394.364966][   T66] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  394.369005][   T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.489026][   T66] usb 5-1: config 0 descriptor??
[  394.500337][   T66] gspca_main: cpia1-2.14.0 probing 0813:0001
[  394.612491][T11726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'.
[  394.750771][    T9] usb 8-1: new low-speed USB device number 43 using dummy_hcd
[  394.910323][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  394.941894][   T66] cpia1 5-1:0.0: unexpected state after lo power cmd: 01
[  394.972946][   T43] kauditd_printk_skb: 412 callbacks suppressed
[  394.972959][   T43] audit: type=1326 audit(1789545512.393:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  394.975036][   T43] audit: type=1326 audit(1789545512.393:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f88fec code=0x7fc00000
[  394.975108][   T43] audit: type=1326 audit(1789545512.393:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  394.975129][   T43] audit: type=1326 audit(1789545512.393:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  395.040578][    T9] usb 8-1: new low-speed USB device number 44 using dummy_hcd
[  395.221754][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  395.221927][    T9] usb usb8-port1: attempt power cycle
[  395.432627][   T66] cpia1 5-1:0.0: only firmware version 1 is supported (got: 42)
[  395.580417][    T9] usb 8-1: new low-speed USB device number 45 using dummy_hcd
[  395.610958][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  395.659347][   T66] usb 5-1: USB disconnect, device number 4
[  395.760376][    T9] usb 8-1: new low-speed USB device number 46 using dummy_hcd
[  395.781225][    T9] usb 8-1: Invalid ep0 maxpacket: 64
[  395.782685][    T9] usb usb8-port1: unable to enumerate USB device
[  396.410906][T11744] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  396.413244][T11744] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  396.415255][T11744] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  396.416782][T11744] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  396.633593][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'.
[  396.741855][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'.
[  397.040428][   T43] audit: type=1326 audit(1789545514.453:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11734 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7fc00000
[  397.040564][   T43] audit: type=1326 audit(1789545514.463:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11734 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7fc00000
[  397.100864][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'.
[  398.392767][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.944'.
[  398.472506][ T5773] Bluetooth: hci3: command 0x0406 tx timeout
[  398.472531][ T5773] Bluetooth: hci2: command 0x0406 tx timeout
[  398.472555][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  398.472558][ T5777] Bluetooth: hci1: command 0x0406 tx timeout
[  398.610374][   T30] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  398.780344][   T30] usb 5-1: Invalid ep0 maxpacket: 64
[  398.920377][   T30] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  399.070354][   T30] usb 5-1: Invalid ep0 maxpacket: 64
[  399.070647][   T30] usb usb5-port1: attempt power cycle
[  399.410418][   T30] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  399.431152][   T30] usb 5-1: Invalid ep0 maxpacket: 64
[  399.560421][   T30] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  399.585332][   T30] usb 5-1: Invalid ep0 maxpacket: 64
[  399.586342][   T30] usb usb5-port1: unable to enumerate USB device
[  399.835872][T11811] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  401.179832][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[  401.344147][T11858] FAULT_INJECTION: forcing a failure.
[  401.344147][T11858] name failslab, interval 1, probability 0, space 0, times 0
[  401.344178][T11858] CPU: 3 UID: 0 PID: 11858 Comm: syz.0.956 Not tainted syzkaller #0 PREEMPT(full) 
[  401.344199][T11858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  401.344210][T11858] Call Trace:
[  401.344216][T11858]  <TASK>
[  401.344224][T11858]  dump_stack_lvl+0x100/0x190
[  401.344272][T11858]  should_fail_ex.cold+0x5/0xa
[  401.344295][T11858]  should_failslab+0xc2/0x120
[  401.344319][T11858]  __kmalloc_noprof+0xfc/0x840
[  401.344346][T11858]  ? unwind_get_return_address+0x59/0xa0
[  401.344368][T11858]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  401.344401][T11858]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  401.344432][T11858]  genl_family_rcv_msg_doit+0xc7/0x300
[  401.344459][T11858]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  401.344483][T11858]  ? genl_get_cmd+0x3e7/0x760
[  401.344511][T11858]  ? bpf_lsm_capable+0x9/0x10
[  401.344536][T11858]  ? security_capable+0x80/0x260
[  401.344559][T11858]  ? ns_capable+0xd2/0xf0
[  401.344586][T11858]  genl_rcv_msg+0x560/0x800
[  401.344611][T11858]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.344634][T11858]  ? __lock_acquire+0x5c0/0x1f40
[  401.344656][T11858]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  401.344680][T11858]  ? __pfx_nl80211_set_beacon+0x10/0x10
[  401.344702][T11858]  ? __pfx_nl80211_post_doit+0x10/0x10
[  401.344729][T11858]  ? __lock_acquire+0x5c0/0x1f40
[  401.344757][T11858]  netlink_rcv_skb+0x159/0x420
[  401.344778][T11858]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.344816][T11858]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.344849][T11858]  ? netlink_deliver_tap+0x1ae/0xcc0
[  401.344871][T11858]  genl_rcv+0x28/0x40
[  401.344892][T11858]  netlink_unicast+0x585/0x850
[  401.344917][T11858]  ? __pfx_netlink_unicast+0x10/0x10
[  401.344946][T11858]  netlink_sendmsg+0x8b0/0xda0
[  401.344971][T11858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.344994][T11858]  ? apparmor_socket_sendmsg+0x165/0x280
[  401.345023][T11858]  ____sys_sendmsg+0xa4d/0xbe0
[  401.345039][T11858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.345063][T11858]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.345093][T11858]  ___sys_sendmsg+0x190/0x1e0
[  401.345114][T11858]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.345145][T11858]  ? find_held_lock+0x2b/0x80
[  401.345181][T11858]  __sys_sendmsg+0x160/0x210
[  401.345206][T11858]  ? __pfx___sys_sendmsg+0x10/0x10
[  401.345236][T11858]  ? __pfx_ksys_write+0x10/0x10
[  401.345261][T11858]  __do_fast_syscall_32+0x13a/0x8b0
[  401.345288][T11858]  ? lockdep_hardirqs_on+0x7d/0x110
[  401.345315][T11858]  do_fast_syscall_32+0x32/0x70
[  401.345347][T11858]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  401.345369][T11858] RIP: 0023:0xf703efec
[  401.345388][T11858] Code: Unable to access opcode bytes at 0xf703efc2.
[  401.345396][T11858] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  401.345414][T11858] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800003c0
[  401.345426][T11858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  401.345436][T11858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  401.345447][T11858] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  401.345457][T11858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  401.345482][T11858]  </TASK>
[  401.778033][T11861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  401.789678][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.957'.
[  401.823888][T11863] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  401.993533][T11873] netlink: 'syz.1.961': attribute type 2 has an invalid length.
[  402.390425][   T30] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  402.463240][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'.
[  402.551138][   T30] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  402.552460][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.554954][   T30] usb 6-1: config 0 descriptor??
[  402.559141][   T30] gspca_main: cpia1-2.14.0 probing 0813:0001
[  402.742186][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'.
[  402.969326][   T30] cpia1 6-1:0.0: unexpected state after lo power cmd: 01
[  403.415634][   T30] cpia1 6-1:0.0: only firmware version 1 is supported (got: 42)
[  403.678637][   T66] usb 6-1: USB disconnect, device number 51
[  404.175461][   T43] audit: type=1326 audit(1789545521.593:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.175546][   T43] audit: type=1326 audit(1789545521.593:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.175709][   T43] audit: type=1326 audit(1789545521.593:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.175819][   T43] audit: type=1326 audit(1789545521.593:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.175927][   T43] audit: type=1326 audit(1789545521.593:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.176309][   T43] audit: type=1326 audit(1789545521.593:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7fc00000
[  404.261410][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'.
[  404.263587][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'.
[  404.311811][T11929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'.
[  404.314823][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314858][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314878][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314897][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314916][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314935][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314954][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314973][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.314991][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.315010][    T9] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  404.340123][    T9] hid-generic 0005:0010:10000.0004: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on syz0
[  404.389321][T11933] fido_id[11933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  405.237020][T11950] FAULT_INJECTION: forcing a failure.
[  405.237020][T11950] name failslab, interval 1, probability 0, space 0, times 0
[  405.237050][T11950] CPU: 1 UID: 0 PID: 11950 Comm: syz.1.976 Not tainted syzkaller #0 PREEMPT(full) 
[  405.237070][T11950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  405.237081][T11950] Call Trace:
[  405.237088][T11950]  <TASK>
[  405.237095][T11950]  dump_stack_lvl+0x100/0x190
[  405.237124][T11950]  should_fail_ex.cold+0x5/0xa
[  405.237148][T11950]  should_failslab+0xc2/0x120
[  405.237172][T11950]  __kmalloc_noprof+0xfc/0x840
[  405.237191][T11950]  ? rcu_is_watching+0x13/0xc0
[  405.237208][T11950]  ? tomoyo_realpath_from_path+0xb6/0x690
[  405.237234][T11950]  tomoyo_realpath_from_path+0xb6/0x690
[  405.237256][T11950]  tomoyo_path_number_perm+0x23c/0x580
[  405.237277][T11950]  ? tomoyo_path_number_perm+0x22e/0x580
[  405.237304][T11950]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  405.237330][T11950]  ? get_pid_task+0x106/0x250
[  405.237353][T11950]  ? __lock_acquire+0x5c0/0x1f40
[  405.237386][T11950]  ? __fget_files+0x34/0x3d0
[  405.237407][T11950]  ? find_held_lock+0x2b/0x80
[  405.237426][T11950]  ? __fget_files+0x215/0x3d0
[  405.237444][T11950]  ? hook_file_ioctl_common+0x140/0x440
[  405.237469][T11950]  ? __fget_files+0x215/0x3d0
[  405.237492][T11950]  ? __fget_files+0x21f/0x3d0
[  405.237515][T11950]  security_file_ioctl_compat+0xd3/0x230
[  405.237543][T11950]  __ia32_compat_sys_ioctl+0xc2/0x360
[  405.237574][T11950]  __do_fast_syscall_32+0x13a/0x8b0
[  405.237627][T11950]  ? lockdep_hardirqs_on+0x7d/0x110
[  405.237656][T11950]  do_fast_syscall_32+0x32/0x70
[  405.237683][T11950]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  405.237705][T11950] RIP: 0023:0xf6fcefec
[  405.237727][T11950] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  405.237735][T11950] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  405.237761][T11950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008020640c
[  405.237773][T11950] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  405.237783][T11950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  405.237793][T11950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  405.237805][T11950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  405.237829][T11950]  </TASK>
[  405.237836][T11950] ERROR: Out of memory at tomoyo_realpath_from_path.
[  406.090785][  T859] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  406.250753][  T859] usb 5-1: Using ep0 maxpacket: 8
[  406.255316][  T859] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  406.270569][  T859] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  406.270596][  T859] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  406.270614][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  406.270628][  T859] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  406.270640][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  406.270653][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  406.270666][  T859] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  406.270678][  T859] usb 5-1: config 168 interface 0 has no altsetting 0
[  406.275105][  T859] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  406.275173][  T859] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  406.275269][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  406.275313][  T859] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  406.275355][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  406.275397][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  406.275440][  T859] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  406.275483][  T859] usb 5-1: config 168 interface 0 has no altsetting 0
[  406.277874][  T859] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  406.278007][  T859] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  406.278027][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  406.278042][  T859] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  406.278941][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  406.279062][  T859] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  406.279288][  T859] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  406.279320][  T859] usb 5-1: config 168 interface 0 has no altsetting 0
[  406.421437][  T859] usb 5-1: string descriptor 0 read error: -22
[  406.422057][  T859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.468050][  T859] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  406.530757][   T43] audit: type=1326 audit(1789545523.883:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  406.530842][   T43] audit: type=1326 audit(1789545523.883:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f88fec code=0x7fc00000
[  406.530915][   T43] audit: type=1326 audit(1789545523.883:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  406.530986][   T43] audit: type=1326 audit(1789545523.883:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7fc00000
[  406.649178][    C2] ==================================================================
[  406.649189][    C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  406.649208][    C2] Read of size 1 at addr ffff88805fbc70e8 by task swapper/2/0
[  406.649217][    C2] 
[  406.649223][    C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) 
[  406.649249][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  406.649256][    C2] Call Trace:
[  406.649260][    C2]  <IRQ>
[  406.649265][    C2]  dump_stack_lvl+0x100/0x190
[  406.649280][    C2]  print_report+0x13d/0x4b0
[  406.649296][    C2]  ? __virt_addr_valid+0x239/0x430
[  406.649311][    C2]  ? find_endpoint+0x2a3/0x2c0
[  406.649321][    C2]  kasan_report+0xdf/0x1c0
[  406.649335][    C2]  ? find_endpoint+0x2a3/0x2c0
[  406.649346][    C2]  find_endpoint+0x2a3/0x2c0
[  406.649356][    C2]  dummy_timer+0x500/0x3700
[  406.649368][    C2]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  406.649388][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  406.649402][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  406.649421][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  406.649435][    C2]  ? rcu_is_watching+0x13/0xc0
[  406.649446][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  406.649460][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  406.649471][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  406.649484][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  406.649496][    C2]  handle_softirqs+0x1e6/0x9d0
[  406.649513][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  406.649527][    C2]  ? _raw_spin_unlock+0x28/0x50
[  406.649540][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  406.649552][    C2]  __irq_exit_rcu+0x16a/0x210
[  406.649567][    C2]  irq_exit_rcu+0x9/0x30
[  406.649581][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  406.649618][    C2]  </IRQ>
[  406.649623][    C2]  <TASK>
[  406.649626][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  406.649639][    C2] RIP: 0010:sched_core_balance+0xa7/0xff0
[  406.649651][    C2] Code: 00 e8 5d bd f6 09 41 5b 85 c0 0f 85 3d 0b 00 00 e9 01 0a 00 00 49 8d 7c 24 48 e8 44 b6 f9 09 e8 3f 10 3c 00 fb 48 63 44 24 58 <48> c7 c3 40 c0 8d 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 6c
[  406.649662][    C2] RSP: 0000:ffffc9000048fb70 EFLAGS: 00000206
[  406.649672][    C2] RAX: 0000000000000002 RBX: ffff88801cbfa580 RCX: 0000000000000000
[  406.649679][    C2] RDX: 0000000000000002 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  406.649686][    C2] RBP: ffffc9000048fc90 R08: 0000000000000001 R09: 0000000000000000
[  406.649697][    C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b43c040
[  406.649703][    C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802b43c040
[  406.649713][    C2]  ? lock_acquire+0x1d1/0x380
[  406.649727][    C2]  ? finish_task_switch.isra.0+0x149/0x10d0
[  406.649744][    C2]  finish_task_switch.isra.0+0x535/0x10d0
[  406.649761][    C2]  __schedule+0x1261/0x6920
[  406.649774][    C2]  ? do_raw_spin_unlock+0x145/0x1e0
[  406.649786][    C2]  ? __pfx___schedule+0x10/0x10
[  406.649799][    C2]  ? rcu_is_watching+0x13/0xc0
[  406.649809][    C2]  ? tick_nohz_idle_exit+0x1a1/0x3f0
[  406.649825][    C2]  schedule_idle+0x54/0x80
[  406.649838][    C2]  do_idle+0x365/0x5b0
[  406.649847][    C2]  ? __pfx_do_idle+0x10/0x10
[  406.649855][    C2]  ? finish_task_switch.isra.0+0x149/0x10d0
[  406.649872][    C2]  cpu_startup_entry+0x4f/0x60
[  406.649881][    C2]  start_secondary+0x21d/0x2d0
[  406.649897][    C2]  ? __pfx_start_secondary+0x10/0x10
[  406.649916][    C2]  common_startup_64+0x13e/0x158
[  406.649931][    C2]  </TASK>
[  406.649935][    C2] 
[  406.649937][    C2] Allocated by task 5154:
[  406.649943][    C2]  kasan_save_stack+0x30/0x50
[  406.649955][    C2]  kasan_save_track+0x14/0x30
[  406.649969][    C2]  __kasan_kmalloc+0xaa/0xb0
[  406.649989][    C2]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  406.650011][    C2]  kernfs_fop_open+0x23d/0xd50
[  406.650034][    C2]  do_dentry_open+0x6ab/0x14d0
[  406.650050][    C2]  vfs_open+0x82/0x3f0
[  406.650062][    C2]  path_openat+0x19fa/0x2440
[  406.650073][    C2]  do_file_open+0x20e/0x430
[  406.650083][    C2]  do_sys_openat2+0x10f/0x1e0
[  406.650096][    C2]  __x64_sys_openat+0x12d/0x210
[  406.650108][    C2]  do_syscall_64+0x121/0x770
[  406.650138][    C2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.650148][    C2] 
[  406.650151][    C2] Freed by task 5154:
[  406.650156][    C2]  kasan_save_stack+0x30/0x50
[  406.650166][    C2]  kasan_save_track+0x14/0x30
[  406.650177][    C2]  kasan_save_free_info+0x3b/0x70
[  406.650191][    C2]  __kasan_slab_free+0x5f/0x80
[  406.650204][    C2]  kfree+0x22b/0x6d0
[  406.650217][    C2]  kernfs_fop_release+0x12c/0x1f0
[  406.650230][    C2]  __fput+0x3ff/0xb50
[  406.650242][    C2]  fput_close_sync+0x118/0x250
[  406.650254][    C2]  __x64_sys_close+0x8b/0x120
[  406.650270][    C2]  do_syscall_64+0x121/0x770
[  406.650283][    C2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.650292][    C2] 
[  406.650295][    C2] The buggy address belongs to the object at ffff88805fbc7000
[  406.650295][    C2]  which belongs to the cache kmalloc-512 of size 512
[  406.650303][    C2] The buggy address is located 232 bytes inside of
[  406.650303][    C2]  freed 512-byte region [ffff88805fbc7000, ffff88805fbc7200)
[  406.650313][    C2] 
[  406.650315][    C2] The buggy address belongs to the physical page:
[  406.650320][    C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805fbc7800 pfn:0x5fbc4
[  406.650330][    C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  406.650338][    C2] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff)
[  406.650348][    C2] page_type: f5(slab)
[  406.650357][    C2] raw: 04fff00000000240 ffff88801c042c80 ffffea00017e4710 ffffea00012dbd10
[  406.650366][    C2] raw: ffff88805fbc7800 0000000000100002 00000000f5000000 0000000000000000
[  406.650375][    C2] head: 04fff00000000240 ffff88801c042c80 ffffea00017e4710 ffffea00012dbd10
[  406.650384][    C2] head: ffff88805fbc7800 0000000000100002 00000000f5000000 0000000000000000
[  406.650393][    C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  406.650401][    C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  406.650407][    C2] page dumped because: kasan: bad access detected
[  406.650412][    C2] page_owner tracks the page as allocated
[  406.650415][    C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5995, tgid 5992 (syz.3.13), ts 121504923687
[  406.650432][    C2]  post_alloc_hook+0xfd/0x120
[  406.650460][    C2]  get_page_from_freelist+0x110d/0x35d0
[  406.650470][    C2]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  406.650479][    C2]  new_slab+0xa9/0x6e0
[  406.650487][    C2]  refill_objects+0xe3/0x410
[  406.650495][    C2]  __pcs_replace_empty_main+0x35e/0x650
[  406.650509][    C2]  __kmalloc_cache_noprof+0x4f4/0x6d0
[  406.650523][    C2]  snd_mixer_oss_build_test+0x7a/0x380
[  406.650539][    C2]  snd_mixer_oss_build_test_all+0x54c/0x6e0
[  406.650553][    C2]  snd_mixer_oss_build_input+0x139/0xd50
[  406.650567][    C2]  snd_mixer_oss_notify_handler+0x48d/0x990
[  406.650580][    C2]  snd_card_register+0x2af/0x760
[  406.650589][    C2]  f_midi2_bind+0x1198/0x2770
[  406.650602][    C2]  usb_add_function+0x219/0x890
[  406.650612][    C2]  configfs_composite_bind+0xd83/0x1960
[  406.650621][    C2]  gadget_bind_driver+0x28c/0xbf0
[  406.650632][    C2] page last free pid 5962 tgid 5962 ts 117867944338 stack trace:
[  406.650639][    C2]  __free_frozen_pages+0x79f/0x10f0
[  406.650652][    C2]  qlist_free_all+0x47/0xf0
[  406.650662][    C2]  kasan_quarantine_reduce+0x1a0/0x1f0
[  406.650672][    C2]  __kasan_slab_alloc+0x69/0x90
[  406.650683][    C2]  kmem_cache_alloc_noprof+0x269/0x6a0
[  406.650699][    C2]  ptlock_alloc+0x1f/0x70
[  406.650712][    C2]  pte_alloc_one+0x82/0x3d0
[  406.650723][    C2]  __do_fault+0x26c/0x440
[  406.650733][    C2]  do_fault+0x585/0x1830
[  406.650743][    C2]  __handle_mm_fault+0x150b/0x2f60
[  406.650756][    C2]  handle_mm_fault+0x363/0xa20
[  406.650769][    C2]  do_user_addr_fault+0x59c/0x12f0
[  406.650779][    C2]  exc_page_fault+0x6f/0xd0
[  406.650792][    C2]  asm_exc_page_fault+0x26/0x30
[  406.650801][    C2] 
[  406.650803][    C2] Memory state around the buggy address:
[  406.650808][    C2]  ffff88805fbc6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  406.650815][    C2]  ffff88805fbc7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  406.650822][    C2] >ffff88805fbc7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  406.650827][    C2]                                                           ^
[  406.650833][    C2]  ffff88805fbc7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  406.650840][    C2]  ffff88805fbc7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  406.650845][    C2] ==================================================================
[  406.650851][    C2] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  406.941275][    C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) 
[  406.944118][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  406.947433][    C2] Call Trace:
[  406.948632][    C2]  <IRQ>
[  406.949746][    C2]  dump_stack_lvl+0x100/0x190
[  406.951440][    C2]  vpanic+0x553/0x970
[  406.952768][    C2]  ? __pfx_vpanic+0x10/0x10
[  406.954248][    C2]  ? __pfx_vprintk_emit+0x10/0x10
[  406.955772][    C2]  ? find_endpoint+0x2a3/0x2c0
[  406.957256][    C2]  panic+0xd1/0xe0
[  406.958566][    C2]  ? __pfx_panic+0x10/0x10
[  406.960038][    C2]  ? end_report.part.0+0x23/0x90
[  406.961645][    C2]  ? rcu_is_watching+0x13/0xc0
[  406.963362][    C2]  ? end_report.part.0+0x23/0x90
[  406.964919][    C2]  check_panic_on_warn.cold+0x19/0x34
[  406.966734][    C2]  end_report.part.0+0x3a/0x90
[  406.968472][    C2]  kasan_report.cold+0xe/0x18
[  406.970817][    C2]  ? find_endpoint+0x2a3/0x2c0
[  406.973092][    C2]  find_endpoint+0x2a3/0x2c0
[  406.974634][    C2]  dummy_timer+0x500/0x3700
[  406.976103][    C2]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  406.978200][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  406.980068][    C2]  ? debug_object_deactivate+0x2e4/0x3b0
[  406.981846][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  406.983492][    C2]  ? rcu_is_watching+0x13/0xc0
[  406.985026][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  406.986976][    C2]  ? __pfx_dummy_timer+0x10/0x10
[  406.988553][    C2]  __hrtimer_run_queues+0x462/0x9c0
[  406.990207][    C2]  hrtimer_run_softirq+0x1ca/0x360
[  406.991821][    C2]  handle_softirqs+0x1e6/0x9d0
[  406.993360][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  406.995086][    C2]  ? _raw_spin_unlock+0x28/0x50
[  406.996631][    C2]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  406.998412][    C2]  __irq_exit_rcu+0x16a/0x210
[  406.999912][    C2]  irq_exit_rcu+0x9/0x30
[  407.001232][    C2]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  407.003035][    C2]  </IRQ>
[  407.004010][    C2]  <TASK>
[  407.004957][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  407.006927][    C2] RIP: 0010:sched_core_balance+0xa7/0xff0
[  407.008954][    C2] Code: 00 e8 5d bd f6 09 41 5b 85 c0 0f 85 3d 0b 00 00 e9 01 0a 00 00 49 8d 7c 24 48 e8 44 b6 f9 09 e8 3f 10 3c 00 fb 48 63 44 24 58 <48> c7 c3 40 c0 8d 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 6c
[  407.015440][    C2] RSP: 0000:ffffc9000048fb70 EFLAGS: 00000206
[  407.017354][    C2] RAX: 0000000000000002 RBX: ffff88801cbfa580 RCX: 0000000000000000
[  407.019834][    C2] RDX: 0000000000000002 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[  407.022305][    C2] RBP: ffffc9000048fc90 R08: 0000000000000001 R09: 0000000000000000
[  407.024796][    C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b43c040
[  407.027348][    C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802b43c040
[  407.029944][    C2]  ? lock_acquire+0x1d1/0x380
[  407.031496][    C2]  ? finish_task_switch.isra.0+0x149/0x10d0
[  407.033548][    C2]  finish_task_switch.isra.0+0x535/0x10d0
[  407.035434][    C2]  __schedule+0x1261/0x6920
[  407.036909][    C2]  ? do_raw_spin_unlock+0x145/0x1e0
[  407.038590][    C2]  ? __pfx___schedule+0x10/0x10
[  407.040079][    C2]  ? rcu_is_watching+0x13/0xc0
[  407.041544][    C2]  ? tick_nohz_idle_exit+0x1a1/0x3f0
[  407.043195][    C2]  schedule_idle+0x54/0x80
[  407.044655][    C2]  do_idle+0x365/0x5b0
[  407.046017][    C2]  ? __pfx_do_idle+0x10/0x10
[  407.047840][    C2]  ? finish_task_switch.isra.0+0x149/0x10d0
[  407.049805][    C2]  cpu_startup_entry+0x4f/0x60
[  407.051382][    C2]  start_secondary+0x21d/0x2d0
[  407.052912][    C2]  ? __pfx_start_secondary+0x10/0x10
[  407.054648][    C2]  common_startup_64+0x13e/0x158
[  407.056254][    C2]  </TASK>
[  407.058017][    C2] Kernel Offset: disabled
[  407.059387][    C2] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:58:45  Registers:
info registers vcpu 0

CPU#0
RAX=00000000003d96c7 RBX=ffffffff8ea91540 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=fffffbfff1d522a8 RSP=ffffffff8ea07cf0
R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096960000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f74192f0 CR3=0000000067c68000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1100cfbae80 RBX=0000000000000018 RCX=dffffc0000000000 RDX=ffff888027a7a580
RSI=ffffffff82624edd RDI=ffff888027a7a580 RBP=0000000000000008 RSP=ffffc9000645f4d8
R8 =0000000000000005 R9 =000000000000001f R10=0000000000000018 R11=0000000000000001
R12=0000000000000001 R13=0000000000000000 R14=ffff888067dd7400 R15=00000000f6a00000
RIP=ffffffff82624ef2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f755c0 CR3=0000000067dcb000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff85aeb500 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90000548430
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=1ffff920000a9090 R14=0000000000000018 R15=0000000000000000
RIP=ffffffff85aeb527 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000034e14ff8 CR3=000000006c8d3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000041d3d3 RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001
RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00
R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000
RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096c60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c31485c CR3=0000000051928000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000