last executing test programs:

2m31.925724211s ago: executing program 4 (id=1156):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x7, 0x1a, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd86"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

2m31.471409773s ago: executing program 2 (id=1159):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000300)={0x20, 0xfa59ebfcb3c59761}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

2m28.848106125s ago: executing program 4 (id=1180):
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2m28.776722463s ago: executing program 4 (id=1182):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)

2m27.779606688s ago: executing program 2 (id=1185):
r0 = openat$random(0xffffffffffffff9c, 0x0, 0x4a280, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

2m27.728537947s ago: executing program 4 (id=1187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m27.352595049s ago: executing program 2 (id=1189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240008e0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')

2m27.261132976s ago: executing program 2 (id=1190):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x7, 0x1a, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd86"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

2m26.61766146s ago: executing program 3 (id=1192):
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x420, 0x3e9, 0x8, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x2b, [0x7, 0x5, 0x2, 0x3, 0x6, 0x4, 0xfffffffd, 0xf, 0x8, 0x8, 0x800, 0xffffffff, 0xffffffff, 0x10, 0x43400, 0x10000, 0x800, 0xfffffff9, 0x1ff800, 0x0, 0x1, 0x6, 0x8, 0x2, 0x10, 0xffffff00, 0x86, 0x101, 0x3, 0x39a4, 0x7, 0x3, 0x7, 0x75, 0xe1, 0x9, 0x101, 0x5, 0x2, 0xef, 0x7, 0x5881, 0x9, 0x3, 0xffff, 0x7fff, 0x4, 0x8, 0x1, 0x7, 0x7, 0x2, 0x4, 0xfff, 0x1, 0x482, 0x9, 0xe, 0xff, 0x8, 0x2, 0x5, 0x8, 0xe2], [0x5, 0x8, 0xfffffffa, 0x8001, 0x102, 0x10, 0x7aa1, 0x6, 0x0, 0x7f5, 0xd, 0x9, 0xffffffff, 0x7, 0xfffffff9, 0x1, 0x4, 0x6, 0x0, 0x8, 0x3, 0x364, 0x1, 0x0, 0x5, 0x3, 0xffff, 0x10001, 0x7, 0x9, 0x3, 0x9, 0x4, 0x8, 0x2, 0x7f, 0x8, 0x400, 0xc85, 0xc11, 0x5, 0x8, 0x6, 0x101, 0xffffffee, 0x8, 0x5, 0x0, 0xffff, 0x1, 0x868, 0x9, 0xffff, 0x5, 0x76, 0x3, 0xffff7fff, 0x2b, 0x7, 0x3, 0x800, 0x1, 0x2, 0xffc], [0x7f, 0x9, 0x8, 0x2, 0x800, 0x2, 0x100005, 0xeaf9, 0x8, 0x10003, 0x8, 0x297, 0x7, 0x3, 0xffff8001, 0x4, 0x3, 0x2, 0x3, 0xb2, 0x0, 0xfffff001, 0x5, 0xffffffff, 0x6, 0x6, 0x917, 0x6, 0x476b, 0xfffffffa, 0x7fffffff, 0xd, 0x1, 0xf71, 0x2, 0x5, 0x1ff, 0x6, 0x9, 0x80000001, 0xb85, 0x6, 0x7, 0x1, 0x572, 0xe, 0x3, 0x0, 0x1000, 0x8, 0xff, 0x83, 0x6, 0x3, 0x1, 0xfffffff8, 0x1, 0x8, 0x5, 0x0, 0x4, 0x1ff, 0x6, 0x9], [0x7, 0x1ce, 0x4, 0xe, 0x5, 0xc, 0x80000001, 0x5, 0x401, 0x1ff, 0xfffff800, 0xe709, 0xa, 0x9, 0xd9386438, 0x1, 0x3, 0x7, 0x0, 0x800, 0x81, 0x0, 0x5, 0x6, 0x0, 0x1, 0x40, 0xed9e, 0x3ef, 0x39a, 0x101, 0xfffffffe, 0x3a8fb48b, 0x5, 0x5, 0x3, 0xd1bf, 0x1fc00, 0x8001, 0x7, 0xf4, 0x5, 0x8, 0x800, 0x3, 0xdf3, 0xd4d, 0x6f05, 0x101, 0x7f, 0x80000001, 0x5, 0x7f, 0x10000, 0x5, 0x2, 0x81, 0x3, 0x1ff, 0x9, 0x10000, 0xfffffffc, 0x2000000, 0x4]}}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x8050)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1})
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0)

2m26.481318623s ago: executing program 1 (id=1193):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x35c5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m26.401588291s ago: executing program 1 (id=1194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000280)="6e616d65207e20221d2226", 0xb)

2m25.886673926s ago: executing program 1 (id=1196):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0x1}, 0x5})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$TIOCEXCL(r2, 0x540c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
r3 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bind$tipc(r3, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})

2m25.26377863s ago: executing program 3 (id=1197):
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
write(r0, &(0x7f0000000300)="89", 0x3f80)

2m24.920040937s ago: executing program 3 (id=1198):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000001600))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='13', 0x2)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800000000800000000000000ffffffffffdfffff010400000000000006000000080010089eaf82a71326"], 0x0, 0x0, 0x0})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0})
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
socket$inet_tcp(0x2, 0x1, 0x0)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2m24.900162372s ago: executing program 1 (id=1199):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
dup(r1)
pwrite64(r0, &(0x7f0000000040)='F', 0x1, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000940)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

2m24.794369572s ago: executing program 3 (id=1200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa)

2m22.538214143s ago: executing program 3 (id=1201):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84)

2m22.412705546s ago: executing program 4 (id=1202):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='raid1', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2\n', 0x2)

2m21.05975051s ago: executing program 2 (id=1203):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r0, &(0x7f0000000300)="89", 0x3f80)

2m18.817893834s ago: executing program 1 (id=1205):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x3dc}, 0x0, 0x0, 0x0)

2m14.962014629s ago: executing program 2 (id=1206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='270', 0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x5821c98b097a09f2)

2m14.853912662s ago: executing program 4 (id=1207):
r0 = io_uring_setup(0x5ac6, &(0x7f0000000400)={0x0, 0xf631, 0x0, 0x3, 0x28c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x40010, 0x5140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1}, 0x3)
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xfec00000, 0x115000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]})
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x8080000, 0x3000, 0xc, 0x2, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

2m14.688212643s ago: executing program 3 (id=1208):
r0 = io_uring_setup(0x5ac6, &(0x7f0000000400)={0x0, 0xf631, 0x0, 0x3, 0x28c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x40010, 0x5140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1}, 0x3)
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]})
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x8080000, 0x3000, 0xc, 0x2, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

2m10.839464386s ago: executing program 1 (id=1209):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0x1}, 0x5})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$TIOCEXCL(r2, 0x540c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
r3 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bind$tipc(r3, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})

1m57.642986027s ago: executing program 32 (id=1206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='270', 0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x5821c98b097a09f2)

1m55.998299517s ago: executing program 33 (id=1208):
r0 = io_uring_setup(0x5ac6, &(0x7f0000000400)={0x0, 0xf631, 0x0, 0x3, 0x28c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x40010, 0x5140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1}, 0x3)
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]})
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x8080000, 0x3000, 0xc, 0x2, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

1m53.960409475s ago: executing program 34 (id=1207):
r0 = io_uring_setup(0x5ac6, &(0x7f0000000400)={0x0, 0xf631, 0x0, 0x3, 0x28c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x40010, 0x5140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1}, 0x3)
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xfec00000, 0x115000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]})
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x8080000, 0x3000, 0xc, 0x2, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

1m50.827258524s ago: executing program 35 (id=1209):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0x1}, 0x5})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$TIOCEXCL(r2, 0x540c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
r3 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bind$tipc(r3, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})

47.575425243s ago: executing program 0 (id=1223):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

38.833148022s ago: executing program 0 (id=1224):
r0 = userfaultfd(0x80001)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001480)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x428, 0x1b8, 0x428, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'lo\x00', 'vcan0\x00', {}, {0xff}, 0x2f, 0x6, 0x2, 0x50}, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002140)="487d5be11f16f3305344affe5555b61d1ace1ab74206000b60e914e16e22ad69b58747915158cf12de875b71172ee3f95689fb03c80e9a832464baf041e8a832a29e000000008000", 0x0, 0x48)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)

30.91857705s ago: executing program 0 (id=1225):
prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffeff7)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0)

18.011457137s ago: executing program 0 (id=1226):
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x800003d7})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

7.396011395s ago: executing program 0 (id=1227):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

0s ago: executing program 0 (id=1228):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwrite64(r0, 0x0, 0x0, 0x4)

kernel console output (not intermixed with test programs):

pped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  271.921411][ T7908] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.921462][ T7908] lowmem_reserve[]: 0 2452 2452 2452 2452
[  271.921495][ T7908] Node 0 DMA32 free:1082804kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:124544kB inactive_anon:0kB active_file:0kB inactive_file:248404kB unevictable:0kB writepending:2200kB zspages:0kB present:3129332kB managed:2510960kB mlocked:0kB bounce:0kB free_pcp:49680kB local_pcp:27176kB free_cma:0kB
[  271.921547][ T7908] lowmem_reserve[]: 0 0 0 0 0
[  271.921578][ T7908] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.921626][ T7908] lowmem_reserve[]: 0 0 0 0 0
[  271.921656][ T7908] Node 1 Normal free:3935052kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:2048kB free_cma:0kB
[  271.921706][ T7908] lowmem_reserve[]: 0 0 0 0 0
[  271.921737][ T7908] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  271.921890][ T7908] Node 0 DMA32: 1107*4kB (UME) 131*8kB (UME) 79*16kB (UME) 221*32kB (UME) 72*64kB (UME) 176*128kB (UME) 112*256kB (UME) 61*512kB (UM) 17*1024kB (UME) 11*2048kB (M) 230*4096kB (UM) = 1082868kB
[  271.922040][ T7908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  271.922129][ T7908] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 9*16kB (UM) 4*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 958*4096kB (M) = 3935052kB
[  272.085521][ T7908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.085536][ T7908] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  272.085549][ T7908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.085562][ T7908] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.085575][ T7908] 81614 total pagecache pages
[  272.085582][ T7908] 0 pages in swap cache
[  272.085588][ T7908] Free swap  = 124996kB
[  272.085594][ T7908] Total swap = 124996kB
[  272.085601][ T7908] 2097051 pages RAM
[  272.085607][ T7908] 0 pages HighMem/MovableOnly
[  272.085613][ T7908] 437679 pages reserved
[  272.085618][ T7908] 0 pages cma reserved
[  272.334463][   T31] audit: type=1326 audit(1791526368.737:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7911 comm="syz.3.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc8bdf97f57 code=0x0
[  273.424528][   T31] audit: type=1326 audit(1791526369.827:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.1.630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3283f97f57 code=0x0
[  273.697303][   T31] audit: type=1400 audit(1791526370.097:391): avc:  denied  { write } for  pid=7919 comm="syz.3.632" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  274.643960][ T7940] kAFS: bad VL server IP address
[  274.653317][ T7940] kAFS: No cell specified
[  275.038622][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  275.185602][    T9] usb 5-1: device descriptor read/64, error -71
[  275.480540][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  275.635253][    T9] usb 5-1: device descriptor read/64, error -71
[  275.747419][    T9] usb usb5-port1: attempt power cycle
[  276.082554][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  276.115830][    T9] usb 5-1: device descriptor read/8, error -71
[  276.151515][   T31] audit: type=1326 audit(1791526372.547:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7953 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fbc5bb97f57 code=0x0
[  276.764838][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  276.793446][    T9] usb 5-1: device descriptor read/8, error -71
[  276.823671][ T7965] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  276.823708][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.1.644 Not tainted syzkaller #0 PREEMPT(full) 
[  276.823731][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  276.823742][ T7965] Call Trace:
[  276.823750][ T7965]  <TASK>
[  276.823757][ T7965]  dump_stack_lvl+0x100/0x190
[  276.823789][ T7965]  sysfs_warn_dup.cold+0x1c/0x28
[  276.823826][ T7965]  sysfs_create_dir_ns+0x24b/0x2b0
[  276.823855][ T7965]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  276.823883][ T7965]  ? find_held_lock+0x2b/0x80
[  276.823909][ T7965]  ? kobject_add_internal+0x25f/0x930
[  276.823928][ T7965]  ? kobject_add_internal+0x25f/0x930
[  276.823950][ T7965]  ? class_dir_child_ns_type+0xd/0x60
[  276.823974][ T7965]  kobject_add_internal+0x2c8/0x930
[  276.823998][ T7965]  kobject_add+0x16a/0x1e0
[  276.824024][ T7965]  ? __pfx_kobject_add+0x10/0x10
[  276.824045][ T7965]  ? get_device_parent+0x1b3/0x4c0
[  276.824075][ T7965]  ? kobject_put+0xb9/0x640
[  276.824100][ T7965]  device_add+0x294/0x1970
[  276.824123][ T7965]  ? lockdep_init_map_type+0x5c/0x250
[  276.824148][ T7965]  ? __pfx_device_add+0x10/0x10
[  276.824169][ T7965]  ? lockdep_init_map_type+0x5c/0x250
[  276.824194][ T7965]  ? __init_waitqueue_head+0xca/0x150
[  276.824227][ T7965]  tty_register_device_attr+0x388/0x810
[  276.824265][ T7965]  ? lockdep_init_map_type+0x5c/0x250
[  276.824291][ T7965]  ? __pfx_tty_register_device_attr+0x10/0x10
[  276.824322][ T7965]  ? tty_port_init+0x156/0x1c0
[  276.824357][ T7965]  gsm_activate_mux+0x155/0x2a0
[  276.824389][ T7965]  gsmld_ioctl+0xbbc/0x15c0
[  276.824417][ T7965]  ? __pfx_gsmld_ioctl+0x10/0x10
[  276.824455][ T7965]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  276.824480][ T7965]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  276.824506][ T7965]  ? __pfx_gsmld_ioctl+0x10/0x10
[  276.824523][ T7965]  tty_ioctl+0x12f0/0x1800
[  276.824549][ T7965]  ? __pfx_tty_ioctl+0x10/0x10
[  276.824572][ T7965]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  276.824601][ T7965]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  276.824631][ T7965]  ? __fget_files+0x34/0x3d0
[  276.824667][ T7965]  ? selinux_file_ioctl+0x13b/0x290
[  276.824692][ T7965]  ? selinux_file_ioctl+0xb6/0x290
[  276.824719][ T7965]  ? __pfx_tty_ioctl+0x10/0x10
[  276.824746][ T7965]  __x64_sys_ioctl+0x18e/0x210
[  276.824772][ T7965]  do_syscall_64+0x123/0x790
[  276.824807][ T7965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.824828][ T7965] RIP: 0033:0x7f3283f9e1d9
[  276.824846][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.824866][ T7965] RSP: 002b:00007f3284f11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  276.824886][ T7965] RAX: ffffffffffffffda RBX: 00007f3284226090 RCX: 00007f3283f9e1d9
[  276.824898][ T7965] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007
[  276.824909][ T7965] RBP: 00007f3284035888 R08: 0000000000000000 R09: 0000000000000000
[  276.824920][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.824931][ T7965] R13: 00007f3284226128 R14: 00007f3284226090 R15: 00007ffd60830a18
[  276.824958][ T7965]  </TASK>
[  276.826267][ T7965] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  276.907038][    T9] usb usb5-port1: unable to enumerate USB device
[  278.366457][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.648'.
[  278.637004][ T7985] netlink: 'syz.4.648': attribute type 10 has an invalid length.
[  278.637024][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.648'.
[  278.988819][ T7985] dummy0: entered promiscuous mode
[  281.193906][ T7999] CIFS: Attempting to mount //127.0.0.1/share
[  281.197354][ T7999] CIFS: VFS: Error connecting to socket. Aborting operation.
[  281.197375][ T7999] CIFS: VFS: cifs_mount failed w/return code = -111
[  281.875205][ T8018] syz.1.660 uses obsolete (PF_INET,SOCK_PACKET)
[  281.973935][ T2325] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  282.102788][ T2325] usb 5-1: device descriptor read/64, error -71
[  282.356781][ T2325] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  282.504791][ T2325] usb 5-1: device descriptor read/64, error -71
[  282.624066][ T2325] usb usb5-port1: attempt power cycle
[  283.003911][ T2325] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  283.023666][ T2325] usb 5-1: device descriptor read/8, error -71
[  283.262817][ T2325] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  283.283786][ T2325] usb 5-1: device descriptor read/8, error -71
[  283.395443][ T2325] usb usb5-port1: unable to enumerate USB device
[  283.842684][ T1600] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  283.997842][ T1600] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  284.015916][ T1600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.015965][ T1600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  284.015986][ T1600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  284.016007][ T1600] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  284.016042][ T1600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.247878][ T8044] CIFS: Attempting to mount //127.0.0.1/share
[  284.597525][   T31] audit: type=1326 audit(1791526380.987:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.671" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4909997f57 code=0x0
[  284.958933][ T8044] CIFS: VFS: Error connecting to socket. Aborting operation.
[  284.958970][ T8044] CIFS: VFS: cifs_mount failed w/return code = -4
[  285.123414][   T30] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  285.173415][ T1600] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1
[  285.283164][   T30] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  285.284029][   T30] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  285.284071][   T30] usb 1-1: config 0 has no interface number 0
[  285.284102][   T30] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  285.287148][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.287169][   T30] usb 1-1: Product: syz
[  285.287183][   T30] usb 1-1: Manufacturer: syz
[  285.287196][   T30] usb 1-1: SerialNumber: syz
[  285.291720][   T30] usb 1-1: config 0 descriptor??
[  285.361868][   T30] yurex 1-1:0.50: Could not find endpoints
[  285.692770][   T30] usb 1-1: USB disconnect, device number 30
[  285.876479][ T1600] Console: switching to colour frame buffer device 128x48
[  285.907740][ T1600] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  285.938496][ T1600] usb 2-1: USB disconnect, device number 22
[  285.969552][ T1600] Console: switching to colour VGA+ 80x25
[  286.258151][   T31] audit: type=1400 audit(1791526382.657:394): avc:  denied  { create } for  pid=8076 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  286.295911][   T31] audit: type=1400 audit(1791526382.697:395): avc:  denied  { ioctl } for  pid=8076 comm="syz.0.681" path="socket:[17208]" dev="sockfs" ino=17208 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  286.327229][ T5736] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  286.412376][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  286.423795][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  286.434171][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  286.439067][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  286.502822][ T5736] usb 5-1: Using ep0 maxpacket: 16
[  286.505029][ T5736] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  286.534084][ T5736] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  286.534143][ T5736] usb 5-1: config 0 has no interface number 0
[  286.534302][ T5736] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.534330][ T5736] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.534358][ T5736] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.534385][ T5736] usb 5-1: config 0 interface 1 has no altsetting 0
[  286.534525][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.634639][ T5736] usb 5-1: config 0 descriptor??
[  286.697070][ T5736] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  288.002921][ T5703] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  288.012428][ T5601] ffs_data_put(): freeing
[  288.156213][ T5703] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  288.160189][ T5703] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  288.160220][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  288.160241][ T5703] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.160264][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  288.160286][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.161432][ T5703] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  288.161467][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  288.161489][ T5703] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.161505][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  288.161518][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.166033][ T5703] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  288.166065][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  288.166086][ T5703] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.166106][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  288.166124][ T5703] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.176698][ T5703] usb 1-1: string descriptor 0 read error: -22
[  288.176784][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.336294][ T1600] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  288.391728][ T5703] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  288.492524][ T1600] usb 3-1: Using ep0 maxpacket: 16
[  288.493291][ T1600] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  288.496273][ T1600] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[  288.497429][ T1600] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.497445][ T1600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  288.497459][ T1600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  288.497473][ T1600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.497494][ T1600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.501929][ T1600] usb 3-1: config 0 descriptor??
[  288.525938][ T8094] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  288.612069][ T1600] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11
[  288.802341][ T1600] usb 3-1: USB disconnect, device number 28
[  288.802510][    C0] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  288.946297][ T8096] ip_tables: iptables: counters copy to user failed while replacing table
[  289.218324][ T5736] usbhid 5-1:0.1: can't add hid device: -71
[  289.218376][ T5736] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  289.223492][ T5736] usb 5-1: USB disconnect, device number 31
[  289.394197][ T8100] Process accounting resumed
[  289.732564][ T5736] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  289.782602][ T1600] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  289.904329][ T5736] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  289.929951][ T5736] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  289.930010][ T5736] usb 3-1: config 0 has no interface number 0
[  289.930152][ T5736] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  289.963770][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.963821][ T5736] usb 3-1: Product: syz
[  289.963871][ T5736] usb 3-1: Manufacturer: syz
[  289.963907][ T5736] usb 3-1: SerialNumber: syz
[  290.000995][ T1600] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  290.039565][ T1600] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  290.039653][ T1600] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  290.039679][ T1600] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  290.039770][ T1600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.155647][ T8106] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  290.156068][ T8106] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  290.219348][ T5736] usb 3-1: config 0 descriptor??
[  290.618901][ T1600] pl2303 5-1:1.0: pl2303 converter detected
[  290.639156][ T5736] yurex 3-1:0.50: Could not find endpoints
[  291.061749][ T1600] usb 5-1: pl2303 converter now attached to ttyUSB0
[  291.159110][ T1600] usb 5-1: USB disconnect, device number 32
[  291.159222][ T5736] usb 3-1: USB disconnect, device number 29
[  291.372351][ T1600] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  291.381095][ T1600] pl2303 5-1:1.0: device disconnected
[  291.507823][ T8119] bond4: Unable to set up delay as MII monitoring is disabled
[  291.615021][ T8119] bond4 (unregistering): Released all slaves
[  292.394174][ T8119] dummy0: left promiscuous mode
[  292.412345][ T8119] netlink: 'syz.3.695': attribute type 10 has an invalid length.
[  292.412366][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.695'.
[  292.412544][ T8119] dummy0: entered promiscuous mode
[  292.982099][ T8130] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  293.234316][ T5736] usb 1-1: USB disconnect, device number 31
[  293.504224][ T2325] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  293.854548][ T2325] usb 4-1: Using ep0 maxpacket: 16
[  293.887272][ T2325] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  293.930462][ T2325] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  293.930569][ T2325] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  293.930600][ T2325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  293.930649][ T2325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  293.930680][ T2325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.930770][ T2325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.296199][ T2325] usb 4-1: config 0 descriptor??
[  294.337874][ T8146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  294.356356][ T4922] Bluetooth: hci2: command 0x0406 tx timeout
[  294.515641][ T2325] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  294.680806][ T2325] usb 4-1: USB disconnect, device number 33
[  294.680861][    C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  295.152569][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  295.304294][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  295.305336][    T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  295.305359][    T9] usb 1-1: config 0 has no interface number 0
[  295.305390][    T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  295.307411][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.307433][    T9] usb 1-1: Product: syz
[  295.307448][    T9] usb 1-1: Manufacturer: syz
[  295.307462][    T9] usb 1-1: SerialNumber: syz
[  295.309669][    T9] usb 1-1: config 0 descriptor??
[  295.390465][    T9] yurex 1-1:0.50: Could not find endpoints
[  295.542979][ T5736] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  295.863940][    T9] usb 1-1: USB disconnect, device number 32
[  296.052513][ T5736] usb 3-1: Using ep0 maxpacket: 8
[  296.067570][ T5736] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  296.141117][ T5736] usb 3-1: config 0 has no interfaces?
[  296.141155][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.431793][ T5736] usb 3-1: config 0 descriptor??
[  296.509738][ T8177] 9p: Bad value for 'rfdno'
[  296.531353][ T8178] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  296.599301][ T8178] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.600844][ T8183] dummy0: left promiscuous mode
[  296.611908][ T8183] bond1: (slave dummy0): Enslaving as a backup interface with an up link
[  296.626689][ T8178] netlink: 'syz.0.715': attribute type 10 has an invalid length.
[  296.626707][ T8178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'.
[  296.626767][ T8178] dummy0: entered promiscuous mode
[  296.630001][ T8178] bond1: (slave dummy0): Releasing backup interface
[  296.650903][ T1600] usb 3-1: USB disconnect, device number 30
[  296.685464][   T31] audit: type=1326 audit(1791526393.077:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.4.717" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f490999e1d9 code=0x0
[  296.792533][ T2325] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[  296.947847][ T2325] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  296.950431][ T2325] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  296.950468][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  296.950492][ T2325] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.950515][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  296.950537][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  296.952324][ T2325] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  296.952359][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  296.952383][ T2325] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.952406][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  296.952429][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  296.992510][ T5780] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  297.053338][ T2325] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  297.053377][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  297.053398][ T2325] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.053417][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  297.053435][ T2325] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  297.138195][ T2325] usb 4-1: string descriptor 0 read error: -22
[  297.138291][ T2325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.144261][ T5780] usb 2-1: Using ep0 maxpacket: 16
[  297.146065][ T5780] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  297.148418][ T5780] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  297.148452][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.148474][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  297.148494][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  297.148514][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  297.148550][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.153448][ T5780] usb 2-1: config 0 descriptor??
[  297.153966][ T8189] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  297.176485][ T5780] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  297.267603][ T2325] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  297.366799][ T5780] usb 2-1: USB disconnect, device number 23
[  297.510871][   T31] audit: type=1400 audit(1791526393.907:397): avc:  denied  { setopt } for  pid=8201 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  298.074686][ T8215] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks!
[  298.204165][ T8217] 9p: Bad value for 'rfdno'
[  298.311704][ T8219] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  298.371454][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.396347][ T8219] dummy0: left promiscuous mode
[  298.418037][ T8219] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  298.432422][ T8219] netlink: 'syz.1.730': attribute type 10 has an invalid length.
[  298.432544][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.730'.
[  298.432600][ T8219] dummy0: entered promiscuous mode
[  298.434415][ T8219] bond2: (slave dummy0): Releasing backup interface
[  298.439819][ T8223] tipc: Cannot configure node identity twice
[  300.182494][ T8260] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  300.250468][ T8260] 8021q: adding VLAN 0 to HW filter on device bond2
[  300.274210][ T8264] dummy0: left promiscuous mode
[  300.279987][ T8264] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  300.352623][  T513] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  300.377773][ T8260] netlink: 'syz.0.743': attribute type 10 has an invalid length.
[  300.377794][ T8260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'.
[  300.379526][ T8260] dummy0: entered promiscuous mode
[  300.396947][ T8260] bond2: (slave dummy0): Removing an active aggregator
[  300.405503][ T8260] bond2: (slave dummy0): Releasing backup interface
[  300.544521][ T8267] fuse: Bad value for 'fd'
[  302.127673][ T2325] usb 4-1: USB disconnect, device number 34
[  303.293324][   T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  303.456207][ T8290] ip_tables: iptables: counters copy to user failed while replacing table
[  303.461403][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.481669][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.108345][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  305.108388][   T25] usb 5-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  305.108610][   T25] usb 5-1: no configurations
[  305.108622][   T25] usb 5-1: can't read configurations, error -22
[  306.042521][ T2325] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  306.223349][ T2325] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  306.224287][ T2325] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  306.224312][ T2325] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  306.224334][ T2325] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  306.224368][ T2325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.240296][ T8307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  306.240392][ T8307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  306.253541][ T2325] pl2303 4-1:1.0: pl2303 converter detected
[  306.270671][ T2325] usb 4-1: pl2303 converter now attached to ttyUSB0
[  306.325387][ T8315] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.759'.
[  306.867096][ T2325] usb 4-1: USB disconnect, device number 35
[  306.922029][ T2325] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  306.935277][ T2325] pl2303 4-1:1.0: device disconnected
[  309.044754][   T31] audit: type=1400 audit(1791526405.447:398): avc:  denied  { setopt } for  pid=8347 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  309.152713][ T1600] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  309.316540][ T1600] usb 3-1: Using ep0 maxpacket: 16
[  309.357469][ T1600] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  309.868198][ T1600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.868281][ T1600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  309.868339][ T1600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  309.868382][ T1600] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  309.868541][ T1600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.290932][ T1600] usb 3-1: config 0 descriptor??
[  311.127458][ T1600] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0
[  311.373000][ T1600] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-90
[  311.373018][ T1600] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-90
[  311.373028][ T1600] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-90
[  311.415889][ T1600] nintendo 0003:057E:2019.0003: probe - fail = -90
[  311.416074][ T1600] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -90
[  311.541848][   T31] audit: type=1400 audit(1791526407.937:399): avc:  denied  { bind } for  pid=8359 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  311.549941][ T2325] usb 3-1: USB disconnect, device number 31
[  311.557069][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  311.557109][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  311.599745][ T8360] syz_tun: left allmulticast mode
[  311.599761][ T8360] syz_tun: left promiscuous mode
[  311.599859][ T8360] bridge0: port 3(syz_tun) entered disabled state
[  311.606385][ T8364] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.773'.
[  311.621330][   T31] audit: type=1400 audit(1791526408.017:400): avc:  denied  { execute } for  pid=8362 comm="syz.3.775" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  311.698222][ T8360] bridge_slave_0: left allmulticast mode
[  311.698240][ T8360] bridge_slave_0: left promiscuous mode
[  311.698338][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.736869][ T8360] bridge_slave_1: left allmulticast mode
[  311.736895][ T8360] bridge_slave_1: left promiscuous mode
[  311.738042][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.803776][ T8360] bond0: (slave bond_slave_0): Releasing backup interface
[  311.883325][ T8360] bond0: (slave bond_slave_1): Releasing backup interface
[  311.938570][ T8360] team0: Port device team_slave_0 removed
[  311.951266][ T8360] team0: Port device team_slave_1 removed
[  311.951649][ T8360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.951661][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.978320][ T8360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.978338][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.991640][ T8360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  312.142651][   T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  312.302967][   T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  312.304408][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.304446][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  312.304466][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  312.306190][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.306211][   T25] usb 2-1: Product: syz
[  312.306225][   T25] usb 2-1: Manufacturer: syz
[  312.306239][   T25] usb 2-1: SerialNumber: syz
[  312.309116][   T25] usb 2-1: config 0 descriptor??
[  312.406101][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'.
[  312.465226][   T25] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  312.508041][ T7314] udevd[7314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.654945][ T5710] usb 2-1: USB disconnect, device number 24
[  312.874532][ T8382] dummy0: left promiscuous mode
[  312.876026][ T8382] netlink: 'syz.0.780': attribute type 10 has an invalid length.
[  312.876038][ T8382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'.
[  312.876118][ T8382] dummy0: entered promiscuous mode
[  312.981444][   T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  313.147358][ T8390] ip_tables: iptables: counters copy to user failed while replacing table
[  313.164196][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.167268][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.515220][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  313.515262][   T25] usb 5-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  313.515290][   T25] usb 5-1: no configurations
[  313.515307][   T25] usb 5-1: can't read configurations, error -22
[  315.104698][ T8412] CIFS: Attempting to mount //127.0.0.1/share
[  315.108097][ T8412] CIFS: VFS: Error connecting to socket. Aborting operation.
[  315.108133][ T8412] CIFS: VFS: cifs_mount failed w/return code = -111
[  316.153745][ T5736] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  316.158549][ T4922] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  316.307103][ T8417] Cannot find set identified by id 0 to match
[  316.308210][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.308947][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.502864][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  316.605759][ T8432] syz_tun: entered allmulticast mode
[  316.882581][   T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  316.906358][ T5736] usb 2-1: unable to get BOS descriptor or descriptor too short
[  316.906398][ T5736] usb 2-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  316.906428][ T5736] usb 2-1: no configurations
[  316.906439][ T5736] usb 2-1: can't read configurations, error -22
[  317.075257][ T8434] ip_tables: iptables: counters copy to user failed while replacing table
[  317.104413][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.106548][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.337261][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[  317.337306][   T25] usb 3-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  317.337337][   T25] usb 3-1: no configurations
[  317.337349][   T25] usb 3-1: can't read configurations, error -22
[  317.656605][ T8446] ERROR: Out of memory at tomoyo_realpath_from_path.
[  317.952372][ T8462] FAULT_INJECTION: forcing a failure.
[  317.952372][ T8462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.952406][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: syz.2.809 Not tainted syzkaller #0 PREEMPT(full) 
[  317.952428][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  317.952441][ T8462] Call Trace:
[  317.952446][ T8462]  <TASK>
[  317.952453][ T8462]  dump_stack_lvl+0x100/0x190
[  317.952484][ T8462]  should_fail_ex.cold+0x5/0xa
[  317.952512][ T8462]  _copy_from_user+0x2e/0xd0
[  317.952539][ T8462]  __sys_bpf+0x2f5/0x4a30
[  317.952567][ T8462]  ? __pfx___sys_bpf+0x10/0x10
[  317.952586][ T8462]  ? find_held_lock+0x2b/0x80
[  317.952615][ T8462]  ? futex_wake+0x4ea/0x5e0
[  317.952652][ T8462]  ? rcu_read_lock_any_held+0x6a/0x90
[  317.952681][ T8462]  ? find_held_lock+0x2b/0x80
[  317.952708][ T8462]  ? ksys_write+0x190/0x250
[  317.952731][ T8462]  ? ksys_write+0x190/0x250
[  317.952775][ T8462]  ? __x64_sys_futex+0x34f/0x4d0
[  317.952803][ T8462]  ? __x64_sys_futex+0x358/0x4d0
[  317.952835][ T8462]  ? xfd_validate_state+0x129/0x190
[  317.952859][ T8462]  ? __x64_sys_bpf+0xce/0x140
[  317.952878][ T8462]  __x64_sys_bpf+0xce/0x140
[  317.952899][ T8462]  ? do_syscall_64+0xae/0x790
[  317.952925][ T8462]  do_syscall_64+0x123/0x790
[  317.952952][ T8462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.952972][ T8462] RIP: 0033:0x7f6df179e1d9
[  317.952988][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.953005][ T8462] RSP: 002b:00007f6df2701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  317.953025][ T8462] RAX: ffffffffffffffda RBX: 00007f6df1a25fa0 RCX: 00007f6df179e1d9
[  317.953039][ T8462] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  317.953051][ T8462] RBP: 00007f6df1835888 R08: 0000000000000000 R09: 0000000000000000
[  317.953062][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.953072][ T8462] R13: 00007f6df1a26038 R14: 00007f6df1a25fa0 R15: 00007ffd9ab1def8
[  317.953097][ T8462]  </TASK>
[  318.082616][ T5736] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  318.142664][ T8460] lo: entered allmulticast mode
[  318.308371][ T5736] usb 2-1: Using ep0 maxpacket: 16
[  318.313059][ T5736] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  318.337859][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.337888][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  318.337911][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  318.337930][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  318.337962][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.340183][ T5736] usb 2-1: config 0 descriptor??
[  318.405728][ T4922] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  318.510056][   T31] audit: type=1400 audit(1791526414.907:401): avc:  denied  { call } for  pid=8475 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  318.510195][ T8478] binder_alloc: 8475: binder_alloc_buf, no vma
[  318.766986][   T31] audit: type=1400 audit(1791526415.167:402): avc:  denied  { create } for  pid=8481 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  318.770634][   T31] audit: type=1400 audit(1791526415.167:403): avc:  denied  { bind } for  pid=8481 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  318.771711][ T5736] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0
[  318.772056][   T31] audit: type=1400 audit(1791526415.167:404): avc:  denied  { accept } for  pid=8481 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  318.783076][   T31] audit: type=1400 audit(1791526415.177:405): avc:  denied  { write } for  pid=8481 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  318.825878][ T5736] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-90
[  318.825901][ T5736] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-90
[  318.825932][ T5736] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-90
[  318.894848][ T5736] nintendo 0003:057E:2019.0004: probe - fail = -90
[  318.895007][ T5736] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -90
[  319.170223][ T5736] usb 2-1: USB disconnect, device number 27
[  319.743623][ T1600] usb 1-1: new low-speed USB device number 33 using dummy_hcd
[  319.860117][ T8506] syz_tun: entered allmulticast mode
[  319.893239][ T1600] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  319.894283][ T1600] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  319.894323][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  319.894346][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.895296][ T1600] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  319.895341][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  319.895364][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.896360][ T1600] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  319.896394][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  319.896417][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.899521][ T1600] usb 1-1: string descriptor 0 read error: -22
[  319.899619][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.063534][ T1600] adutux 1-1:168.0: interrupt endpoints not found
[  320.104425][ T8493] Process accounting paused
[  321.432724][ T5804] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  321.433594][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  321.596652][    T9] usb 5-1: Using ep0 maxpacket: 8
[  321.597714][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  321.600772][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.600813][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.615745][ T8525] ip_tables: iptables: counters copy to user failed while replacing table
[  321.619490][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.619834][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.658204][    T9] usb 5-1: config 0 descriptor??
[  321.663874][    T9] iowarrior 5-1:0.0: no interrupt-in endpoint found
[  321.673203][ T5710] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  321.738639][ T8533] team0: No ports can be present during mode change
[  321.874742][ T8529] Cannot find set identified by id 0 to match
[  321.893428][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.893790][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.932474][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  323.216672][   T25] usb 1-1: USB disconnect, device number 33
[  323.394062][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short
[  323.394124][ T5804] usb 3-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  323.394157][ T5804] usb 3-1: no configurations
[  323.394170][ T5804] usb 3-1: can't read configurations, error -22
[  323.519032][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short
[  323.519073][ T5710] usb 2-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  323.519103][ T5710] usb 2-1: no configurations
[  323.519115][ T5710] usb 2-1: can't read configurations, error -22
[  323.955779][ T8547] md: array md0 already initialised!
[  324.180260][   T25] usb 5-1: USB disconnect, device number 37
[  324.222540][ T5804] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  324.276281][   T31] audit: type=1400 audit(1791526420.677:406): avc:  denied  { setopt } for  pid=8562 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  324.382508][ T5804] usb 3-1: Using ep0 maxpacket: 16
[  324.382950][ T5804] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  324.384317][ T5804] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  324.384331][ T5804] usb 3-1: config 0 has no interface number 0
[  324.384350][ T5804] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.384364][ T5804] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.384375][ T5804] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.384390][ T5804] usb 3-1: config 0 interface 1 has no altsetting 0
[  324.384405][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.393197][ T5804] usb 3-1: config 0 descriptor??
[  324.485140][ T5804] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count
[  324.492510][ T5736] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  324.643286][ T5736] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  324.644353][ T5736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  324.644377][ T5736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  324.644397][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  324.644426][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.649893][ T8561] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  324.649984][ T8561] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  324.721139][ T5736] pl2303 1-1:1.0: required interrupt-in endpoint missing
[  324.866875][   T31] audit: type=1400 audit(1791526421.267:407): avc:  denied  { read write } for  pid=8549 comm="syz.2.841" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  324.866919][   T31] audit: type=1400 audit(1791526421.267:408): avc:  denied  { open } for  pid=8549 comm="syz.2.841" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  324.928840][ T5736] usb 1-1: USB disconnect, device number 34
[  325.118504][ T8569] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  325.623967][ T8569] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  325.773980][ T8577] md: array md0 already initialised!
[  326.008815][ T8584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.091877][ T8585] dummy0: left promiscuous mode
[  326.102204][ T8585] netlink: 'syz.0.850': attribute type 10 has an invalid length.
[  326.102225][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.850'.
[  326.102371][ T8585] dummy0: entered promiscuous mode
[  326.204032][ T8584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.276813][ T8584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.319094][ T8584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.422539][  T549] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.422578][  T549] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.441042][  T549] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.441081][  T549] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.508167][   T31] audit: type=1400 audit(1791526422.907:409): avc:  denied  { create } for  pid=8598 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  326.509747][   T31] audit: type=1400 audit(1791526422.907:410): avc:  denied  { write } for  pid=8598 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  326.732628][   T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  326.882545][   T25] usb 5-1: Using ep0 maxpacket: 8
[  326.882986][   T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  326.885337][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.885373][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  326.885406][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.888203][   T25] usb 5-1: config 0 descriptor??
[  326.890579][   T25] iowarrior 5-1:0.0: no interrupt-in endpoint found
[  326.968962][ T5804] usbhid 3-1:0.1: can't add hid device: -71
[  326.969047][ T5804] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  326.976806][ T5804] usb 3-1: USB disconnect, device number 35
[  327.352537][ T5804] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  327.474080][ T8615] md: array md0 already initialised!
[  327.504415][ T5804] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  327.507055][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.507077][ T5804] usb 3-1: Product: syz
[  327.507090][ T5804] usb 3-1: Manufacturer: syz
[  327.507104][ T5804] usb 3-1: SerialNumber: syz
[  327.611002][ T5804] ums-karma 3-1:1.0: USB Mass Storage device detected
[  327.626212][ T5804] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  327.626212][ T5804]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  327.781401][ T8625] syz_tun: left allmulticast mode
[  328.186695][ T8630] CIFS: Attempting to mount //127.0.0.1/share
[  328.848441][ T5804] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5
[  328.852339][ T5804] usb 3-1: USB disconnect, device number 36
[  328.909580][ T8635] 9pnet_fd: Insufficient options for proto=fd
[  328.960718][ T8630] CIFS: VFS: Error connecting to socket. Aborting operation.
[  328.960743][ T8630] CIFS: VFS: cifs_mount failed w/return code = -4
[  329.053321][ T8644] md: array md0 already initialised!
[  329.305115][ T2325] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  329.457460][ T5804] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  329.457586][ T2325] usb 1-1: Using ep0 maxpacket: 16
[  329.470394][ T2325] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  329.485447][ T2325] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  329.485491][ T2325] usb 1-1: config 0 has no interface number 0
[  329.485523][ T2325] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.485546][ T2325] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.485559][ T2325] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.485573][ T2325] usb 1-1: config 0 interface 1 has no altsetting 0
[  329.485591][ T2325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.487787][ T2325] usb 1-1: config 0 descriptor??
[  329.519504][ T2325] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count
[  329.603624][   T10] usb 5-1: USB disconnect, device number 38
[  330.032552][   T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  330.122770][ T8674] md: array md0 already initialised!
[  330.197353][ T8663] ip_tables: iptables: counters copy to user failed while replacing table
[  330.199067][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.199479][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.687830][   T31] audit: type=1400 audit(1791526427.087:411): avc:  denied  { create } for  pid=8677 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  330.688592][   T31] audit: type=1400 audit(1791526427.087:412): avc:  denied  { connect } for  pid=8677 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  330.784784][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  330.784827][   T25] usb 5-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00
[  330.784859][   T25] usb 5-1: no configurations
[  330.784870][   T25] usb 5-1: can't read configurations, error -22
[  331.098727][ T8685] dummy0: left promiscuous mode
[  331.113683][ T8685] netlink: 'syz.3.890': attribute type 10 has an invalid length.
[  331.113703][ T8685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.890'.
[  331.113822][ T8685] dummy0: entered promiscuous mode
[  331.342533][ T5804] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  331.494687][ T5804] usb 3-1: Using ep0 maxpacket: 8
[  331.495209][ T5804] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  331.497142][ T5804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.497178][ T5804] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  331.497200][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.503010][ T5804] usb 3-1: config 0 descriptor??
[  331.506327][ T5804] iowarrior 3-1:0.0: no interrupt-in endpoint found
[  331.702663][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  331.852617][    T9] usb 2-1: Using ep0 maxpacket: 16
[  331.855024][    T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  331.856521][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  331.856566][    T9] usb 2-1: config 0 has no interface number 0
[  331.856596][    T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.856611][    T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.856624][    T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  331.856638][    T9] usb 2-1: config 0 interface 1 has no altsetting 0
[  331.856654][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.862251][    T9] usb 2-1: config 0 descriptor??
[  331.918197][    T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count
[  332.129597][ T2325] usbhid 1-1:0.1: can't add hid device: -71
[  332.129699][ T2325] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  332.135026][ T2325] usb 1-1: USB disconnect, device number 35
[  333.955440][ T8726] fuse: Bad value for 'user_id'
[  333.955458][ T8726] fuse: Bad value for 'user_id'
[  333.973257][ T8726] jffs2: notice: (8726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  333.996337][   T31] audit: type=1400 audit(1791526430.397:413): avc:  denied  { write } for  pid=8725 comm="syz.0.901" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  334.285350][ T2325] usb 3-1: USB disconnect, device number 38
[  334.829940][ T8738] No source specified
[  335.384246][   T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  335.725862][   T25] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  335.799233][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  335.799267][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  335.799287][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  335.799309][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  335.799338][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.920223][ T8742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.920333][ T8742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.921953][   T25] pl2303 3-1:1.0: pl2303 converter detected
[  335.925583][   T25] usb 3-1: pl2303 converter now attached to ttyUSB0
[  336.032535][ T2325] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  336.038724][    T9] usbhid 2-1:0.1: can't add hid device: -71
[  336.038800][    T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  336.057290][ T8749] tipc: Started in network mode
[  336.057306][ T8749] tipc: Node identity 4, cluster identity 4711
[  336.057315][ T8749] tipc: Node number set to 4
[  336.095217][    T9] usb 2-1: USB disconnect, device number 30
[  336.182565][ T2325] usb 5-1: Using ep0 maxpacket: 16
[  336.183056][ T2325] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  336.183892][ T2325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  336.183914][ T2325] usb 5-1: config 0 has no interface number 0
[  336.183946][ T2325] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.183970][ T2325] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.183997][ T2325] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.184020][ T2325] usb 5-1: config 0 interface 1 has no altsetting 0
[  336.184047][ T2325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.188422][ T2325] usb 5-1: config 0 descriptor??
[  336.208279][ T2325] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  336.277165][ T8742] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  336.277434][ T8742] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  336.277748][ T8742] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  336.278027][ T8742] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  336.278066][ T8742] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  336.285516][   T25] usb 3-1: USB disconnect, device number 39
[  336.299385][   T25] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  336.308498][   T25] pl2303 3-1:1.0: device disconnected
[  336.423719][ T8761] fuse: Bad value for 'user_id'
[  336.423737][ T8761] fuse: Bad value for 'user_id'
[  336.425197][ T8761] jffs2: notice: (8761) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  336.428508][   T31] audit: type=1400 audit(1791526432.827:414): avc:  denied  { write } for  pid=8760 comm="syz.1.914" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  336.552712][ T5731] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  336.716194][   T31] audit: type=1400 audit(1791526433.087:415): avc:  denied  { setopt } for  pid=8763 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  336.717520][   T31] audit: type=1400 audit(1791526433.087:416): avc:  denied  { bind } for  pid=8763 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  336.717553][   T31] audit: type=1400 audit(1791526433.087:417): avc:  denied  { write } for  pid=8763 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  336.717593][   T31] audit: type=1400 audit(1791526433.087:418): avc:  denied  { read } for  pid=8763 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  336.832635][ T5731] usb 1-1: Using ep0 maxpacket: 16
[  336.962397][ T5731] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  336.998373][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.998406][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  336.998431][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  336.998468][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.338210][ T5731] usb 1-1: config 0 descriptor??
[  338.173832][ T5731] nintendo 0003:057E:2019.0005: unknown main item tag 0x0
[  338.173860][ T5731] nintendo 0003:057E:2019.0005: unknown main item tag 0x0
[  338.173879][ T5731] nintendo 0003:057E:2019.0005: unknown main item tag 0x0
[  338.183300][ T5731] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0
[  338.299070][ T5780] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  338.340619][    C1] usb 1-1: input irq status -75 received
[  338.451467][ T5780] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  338.472074][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  338.472240][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  338.498361][ T5780] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  338.498503][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  338.498589][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  338.549932][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  338.550631][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  338.550740][ T5780] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  338.550936][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  338.550999][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  338.621142][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  338.621184][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  338.621207][ T5780] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  338.621227][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  338.621248][ T5780] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  338.680037][ T5731] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71
[  338.680060][ T5731] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71
[  338.680098][ T5731] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71
[  338.707143][ T2325] usbhid 5-1:0.1: can't add hid device: -71
[  338.707215][ T2325] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  338.720481][ T2325] usb 5-1: USB disconnect, device number 41
[  338.723117][ T5780] usb 3-1: string descriptor 0 read error: -22
[  338.723229][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.770205][ T5731] nintendo 0003:057E:2019.0005: probe - fail = -71
[  338.770321][ T5731] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71
[  338.791202][ T5731] usb 1-1: USB disconnect, device number 36
[  338.811118][ T5780] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  339.200236][ T8798] fuse: Bad value for 'fd'
[  339.210412][ T8798] jffs2: notice: (8798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  339.235053][   T31] audit: type=1400 audit(1791526435.637:419): avc:  denied  { write } for  pid=8797 comm="syz.1.925" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  340.435952][ T8807] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.928'.
[  340.722504][ T5710] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  340.772534][ T5780] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  340.873458][ T5710] usb 1-1: Using ep0 maxpacket: 16
[  340.873945][ T5710] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  340.880740][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  340.880757][ T5710] usb 1-1: config 0 has no interface number 0
[  340.880776][ T5710] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.880793][ T5710] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.880806][ T5710] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  340.880818][ T5710] usb 1-1: config 0 interface 1 has no altsetting 0
[  340.880834][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.892576][ T5710] usb 1-1: config 0 descriptor??
[  340.968947][ T5780] usb 2-1: Using ep0 maxpacket: 16
[  340.969707][ T5780] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  340.971171][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.971211][ T5780] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  340.971240][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.980938][ T5710] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count
[  341.023300][    T9] usb 3-1: USB disconnect, device number 40
[  341.037753][ T5780] usb 2-1: config 0 descriptor??
[  341.532587][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  341.683205][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  341.704381][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  341.704400][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  341.704418][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  341.725278][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.725301][    T9] usb 3-1: Product: syz
[  341.725313][    T9] usb 3-1: Manufacturer: syz
[  341.725324][    T9] usb 3-1: SerialNumber: syz
[  341.743656][    T9] usb 3-1: config 0 descriptor??
[  341.744872][ T8819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  341.744981][ T8819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  341.751304][    T9] usb 3-1: ucan: probing device on interface #0
[  342.367191][ T8830] binder: BINDER_SET_CONTEXT_MGR already set
[  342.367206][ T8830] binder: 8828:8830 ioctl 4018620d 200000000040 returned -16
[  342.656632][    T9] ucan 3-1:0.0 can0: registered device
[  342.930911][    T9] ucan 3-1:0.0 can0: firmware string: unknown
[  343.746506][    T9] usb 3-1: USB disconnect, device number 41
[  343.861932][ T5710] usbhid 1-1:0.1: can't add hid device: -71
[  343.862015][ T5710] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  343.890792][ T5710] usb 1-1: USB disconnect, device number 37
[  343.891386][ T5731] usb 2-1: USB disconnect, device number 31
[  344.037584][ T8846] syz_tun: left allmulticast mode
[  344.062595][ T5780] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  344.098421][   T31] audit: type=1400 audit(1791526440.497:420): avc:  denied  { write } for  pid=8840 comm="syz.3.939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  344.213294][ T5780] usb 5-1: Using ep0 maxpacket: 16
[  344.213903][ T5780] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  344.214939][ T5780] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  344.214961][ T5780] usb 5-1: config 0 has no interface number 0
[  344.214994][ T5780] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.215016][ T5780] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.215042][ T5780] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  344.215065][ T5780] usb 5-1: config 0 interface 1 has no altsetting 0
[  344.215091][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.217800][ T5780] usb 5-1: config 0 descriptor??
[  344.319411][ T5780] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  344.412950][ T5731] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  344.583266][ T5731] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  344.584270][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  344.584310][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  344.584333][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.584375][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  344.584399][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  344.585525][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  344.585561][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  344.585585][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.585607][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  344.585650][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  344.586662][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  344.586697][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  344.586719][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.586742][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  344.586816][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  344.589973][ T5731] usb 2-1: string descriptor 0 read error: -22
[  344.590100][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.809200][ T5731] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  347.106284][    T9] usb 2-1: USB disconnect, device number 32
[  348.103855][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  348.255870][    T9] usb 4-1: Using ep0 maxpacket: 8
[  348.257175][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  348.268603][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.268625][    T9] usb 4-1: Product: syz
[  348.268637][    T9] usb 4-1: Manufacturer: syz
[  348.268650][    T9] usb 4-1: SerialNumber: syz
[  348.296785][    T9] usb 4-1: config 0 descriptor??
[  348.526342][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  348.901117][ T5780] usbhid 5-1:0.1: can't add hid device: -71
[  348.901202][ T5780] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  348.910475][ T5780] usb 5-1: USB disconnect, device number 42
[  349.558237][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  349.592308][ T8892] bridge0: port 3(vlan2) entered blocking state
[  349.592406][ T8892] bridge0: port 3(vlan2) entered disabled state
[  349.608298][ T8892] vlan2: entered allmulticast mode
[  349.608325][ T8892] geneve0: entered allmulticast mode
[  349.609217][ T8892] vlan2: entered promiscuous mode
[  349.609232][ T8892] geneve0: entered promiscuous mode
[  350.072513][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  350.202504][ T5780] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  350.222508][    T9] usb 2-1: Using ep0 maxpacket: 16
[  350.223146][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  350.223996][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.224015][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  350.224044][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.233260][    T9] usb 2-1: config 0 descriptor??
[  350.365938][ T5780] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  350.366793][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  350.366835][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  350.366859][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  350.366882][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  350.366905][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  350.367779][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  350.367819][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  350.367842][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  350.367865][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  350.367888][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  350.368694][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  350.368726][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  350.368750][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  350.368772][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  350.368794][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  350.371302][ T5780] usb 1-1: string descriptor 0 read error: -22
[  350.371400][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.404646][ T5780] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  350.754446][ T8912] Process accounting resumed
[  350.755237][ T5780] usb 4-1: USB disconnect, device number 37
[  350.901852][ T8919] team0: No ports can be present during mode change
[  352.323908][ T5780] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  352.486744][ T5780] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  352.487987][ T5780] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  352.488013][ T5780] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  352.491610][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.491631][ T5780] usb 5-1: Product: syz
[  352.491645][ T5780] usb 5-1: Manufacturer: syz
[  352.491659][ T5780] usb 5-1: SerialNumber: syz
[  352.495689][ T5780] usb 5-1: config 0 descriptor??
[  352.496209][ T8931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  352.500895][ T5780] usb 5-1: ucan: probing device on interface #0
[  352.500911][ T5780] usb 5-1: ucan: invalid EP count (1)
[  352.500923][ T5780] usb 5-1: ucan: probe failed; try to update the device firmware
[  352.674178][ T5780] usb 1-1: USB disconnect, device number 38
[  352.898718][ T5710] usb 2-1: USB disconnect, device number 33
[  354.152291][ T5614] ffs_data_put(): freeing
[  354.724716][ T8973] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  354.761465][   T31] audit: type=1400 audit(1791526451.147:421): avc:  denied  { connect } for  pid=8971 comm="syz.2.984" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  355.137459][   T31] audit: type=1400 audit(1791526451.337:422): avc:  denied  { write } for  pid=8971 comm="syz.2.984" laddr=fe80::13 lport=60 faddr=fe80::bb fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  355.663158][ T5804] usb 5-1: USB disconnect, device number 43
[  355.860270][   T31] audit: type=1400 audit(1791526452.257:423): avc:  denied  { execute } for  pid=8982 comm="syz.4.988" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  355.988697][   T31] audit: type=1400 audit(1791526452.387:424): avc:  denied  { ioctl } for  pid=8982 comm="syz.4.988" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x7506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  356.102703][ T5780] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  356.264227][ T5780] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  356.265101][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  356.265145][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  356.265169][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  356.265202][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  356.265226][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  356.266057][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  356.266092][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  356.266116][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  356.266138][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  356.266162][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  356.267007][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  356.267041][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  356.267065][ T5780] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  356.267088][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  356.267111][ T5780] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  356.453977][ T5780] usb 1-1: string descriptor 0 read error: -22
[  356.454086][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.483533][ T5780] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  356.661434][ T5601] ffs_data_put(): freeing
[  356.661561][ T8998] 9p: Bad value for 'wfdno'
[  356.754826][ T5780] usb 1-1: USB disconnect, device number 39
[  357.742609][ T5736] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  357.908253][ T5736] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  358.159562][ T5736] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  358.171968][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  358.433052][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.433079][ T5736] usb 1-1: Product: syz
[  358.433093][ T5736] usb 1-1: Manufacturer: syz
[  358.433107][ T5736] usb 1-1: SerialNumber: syz
[  358.491161][ T5736] usb 1-1: config 0 descriptor??
[  358.493581][ T9015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  358.548823][ T5736] usb 1-1: ucan: probing device on interface #0
[  358.548854][ T5736] usb 1-1: ucan: invalid EP count (1)
[  358.548915][ T5736] usb 1-1: ucan: probe failed; try to update the device firmware
[  359.617630][   T31] audit: type=1400 audit(1791526456.017:425): avc:  denied  { recv } for  pid=10 comm="kworker/0:1" saddr=10.128.0.169 src=41818 daddr=10.128.0.128 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  359.837691][ T9040] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  359.972495][ T5710] usb 5-1: new low-speed USB device number 44 using dummy_hcd
[  360.152993][ T5710] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  360.155000][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  360.155040][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  360.155065][ T5710] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.155090][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.155113][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  360.155934][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  360.155968][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  360.155993][ T5710] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.156015][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.156039][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  360.156983][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  360.157020][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  360.157044][ T5710] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.157066][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.157091][ T5710] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  360.159617][ T5710] usb 5-1: string descriptor 0 read error: -22
[  360.159722][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.177819][ T5710] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  360.382140][ T5710] usb 5-1: USB disconnect, device number 44
[  360.487233][ T5736] usb 1-1: USB disconnect, device number 40
[  360.535093][   T31] audit: type=1400 audit(1791526456.937:426): avc:  denied  { bind } for  pid=9044 comm="syz.0.1012" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  360.536202][   T31] audit: type=1400 audit(1791526456.937:427): avc:  denied  { name_bind } for  pid=9044 comm="syz.0.1012" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  360.536375][   T31] audit: type=1400 audit(1791526456.937:428): avc:  denied  { node_bind } for  pid=9044 comm="syz.0.1012" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  360.644234][   T31] audit: type=1400 audit(1791526457.047:429): avc:  denied  { allowed } for  pid=9048 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  360.705550][ T9051] No source specified
[  360.763345][ T9055] syzkaller0: entered promiscuous mode
[  360.763368][ T9055] syzkaller0: entered allmulticast mode
[  361.230001][ T9069] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  362.381090][ T9077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.680044][ T9077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.342520][ T5736] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  363.494316][ T5736] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  363.495205][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  363.495245][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  363.495269][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.495293][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  363.495317][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  363.496208][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  363.496243][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  363.496266][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.496289][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  363.496312][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  363.497115][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  363.497155][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  363.497177][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.497199][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  363.497222][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  363.501626][ T5736] usb 4-1: string descriptor 0 read error: -22
[  363.501722][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.716904][ T5736] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  363.911219][ T9077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.956573][ T5736] usb 4-1: USB disconnect, device number 38
[  364.169860][ T9077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.442656][ T1481] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.534689][  T480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.582604][  T480] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.584331][  T480] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.612034][ T9100] FAULT_INJECTION: forcing a failure.
[  364.612034][ T9100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.612064][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.3.1034 Not tainted syzkaller #0 PREEMPT(full) 
[  364.612085][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  364.612095][ T9100] Call Trace:
[  364.612102][ T9100]  <TASK>
[  364.612109][ T9100]  dump_stack_lvl+0x100/0x190
[  364.612142][ T9100]  should_fail_ex.cold+0x5/0xa
[  364.612170][ T9100]  strncpy_from_user+0x3b/0x2d0
[  364.612201][ T9100]  __do_sys_add_key+0xd4/0x460
[  364.612222][ T9100]  ? __pfx___do_sys_add_key+0x10/0x10
[  364.612252][ T9100]  do_syscall_64+0x123/0x790
[  364.612282][ T9100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.612300][ T9100] RIP: 0033:0x7fc8bdf9e1d9
[  364.612316][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.612334][ T9100] RSP: 002b:00007fc8bedd9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  364.612352][ T9100] RAX: ffffffffffffffda RBX: 00007fc8be225fa0 RCX: 00007fc8bdf9e1d9
[  364.612365][ T9100] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  364.612376][ T9100] RBP: 00007fc8be035888 R08: ffffffffffffffff R09: 0000000000000000
[  364.612388][ T9100] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  364.612399][ T9100] R13: 00007fc8be226038 R14: 00007fc8be225fa0 R15: 00007ffe62980d08
[  364.612427][ T9100]  </TASK>
[  364.881636][ T9103] CIFS: Attempting to mount //127.0.0.1/share
[  365.233519][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'.
[  365.512109][ T9103] CIFS: VFS: Error connecting to socket. Aborting operation.
[  365.512135][ T9103] CIFS: VFS: cifs_mount failed w/return code = -4
[  365.918224][ T4922] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  366.566823][ T9157] tipc: Cannot configure node identity twice
[  366.591504][ T9159] CIFS: Attempting to mount //127.0.0.1/share
[  367.012617][ T5736] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  367.095270][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'.
[  367.097010][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'.
[  367.195940][ T5736] usb 2-1: Using ep0 maxpacket: 16
[  367.196542][ T5736] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  367.197465][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.201137][ T5736] usb 2-1: config 0 descriptor??
[  367.236746][ T5736] gspca_main: sonixj-2.14.0 probing 0471:0327
[  367.407290][ T9159] CIFS: VFS: Error connecting to socket. Aborting operation.
[  367.407319][ T9159] CIFS: VFS: cifs_mount failed w/return code = -4
[  367.653332][ T5736] gspca_sonixj: reg_r err -32
[  367.653398][ T5736] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  367.812870][ T5731] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  367.962585][ T5731] usb 1-1: Using ep0 maxpacket: 16
[  367.963143][ T5731] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  367.964054][ T5731] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  367.964075][ T5731] usb 1-1: config 0 has no interface number 0
[  367.964107][ T5731] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.964129][ T5731] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.964148][ T5731] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  367.964170][ T5731] usb 1-1: config 0 interface 1 has no altsetting 0
[  367.964195][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.968279][ T5731] usb 1-1: config 0 descriptor??
[  368.015831][ T5731] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count
[  368.186497][ T9199] netlink: 'syz.4.1073': attribute type 1 has an invalid length.
[  368.238216][ T9199] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.302154][ T9201] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  368.311744][ T9199] netlink: 'syz.4.1073': attribute type 10 has an invalid length.
[  368.311762][ T9199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1073'.
[  368.916128][ T9224] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  369.428819][ T9239] FAULT_INJECTION: forcing a failure.
[  369.428819][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.428849][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.4.1085 Not tainted syzkaller #0 PREEMPT(full) 
[  369.428870][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  369.428882][ T9239] Call Trace:
[  369.428888][ T9239]  <TASK>
[  369.428895][ T9239]  dump_stack_lvl+0x100/0x190
[  369.428928][ T9239]  should_fail_ex.cold+0x5/0xa
[  369.428957][ T9239]  strncpy_from_user+0x3b/0x2d0
[  369.428991][ T9239]  do_getname+0x78/0x390
[  369.429014][ T9239]  __x64_sys_mkdirat+0x78/0xc0
[  369.429044][ T9239]  do_syscall_64+0x123/0x790
[  369.429080][ T9239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.429101][ T9239] RIP: 0033:0x7f490999e1d9
[  369.429118][ T9239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.429138][ T9239] RSP: 002b:00007f490a79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  369.429160][ T9239] RAX: ffffffffffffffda RBX: 00007f4909c25fa0 RCX: 00007f490999e1d9
[  369.429174][ T9239] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  369.429188][ T9239] RBP: 00007f4909a35888 R08: 0000000000000000 R09: 0000000000000000
[  369.429200][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.429212][ T9239] R13: 00007f4909c26038 R14: 00007f4909c25fa0 R15: 00007fff33a8a888
[  369.429239][ T9239]  </TASK>
[  369.880462][    T9] usb 2-1: USB disconnect, device number 34
[  370.462600][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  370.616799][    T9] usb 3-1: Using ep0 maxpacket: 8
[  370.618983][    T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  370.621725][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  370.621760][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.623889][    T9] usb 3-1: config 0 descriptor??
[  370.628843][    T9] iowarrior 3-1:0.0: no interrupt-in endpoint found
[  370.686209][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'.
[  370.690770][ T5731] usbhid 1-1:0.1: can't add hid device: -71
[  370.690847][ T5731] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  370.719617][ T5731] usb 1-1: USB disconnect, device number 41
[  370.922016][   T31] audit: type=1400 audit(1791526467.317:430): avc:  denied  { cmd } for  pid=9260 comm="iou-wrk-9274" path="socket:[24703]" dev="sockfs" ino=24703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  370.982623][ T9261] dummy0: left promiscuous mode
[  370.983250][ T9261] netlink: 'syz.1.1093': attribute type 10 has an invalid length.
[  370.983266][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1093'.
[  371.007817][ T9261] dummy0: entered promiscuous mode
[  371.192495][ T5731] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  371.342493][ T5731] usb 1-1: Using ep0 maxpacket: 16
[  371.343231][ T5731] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  371.344146][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.347537][ T5731] usb 1-1: config 0 descriptor??
[  371.381669][ T5731] gspca_main: sonixj-2.14.0 probing 0471:0327
[  371.762736][ T5731] gspca_sonixj: reg_r err -32
[  371.762810][ T5731] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  372.123327][ T9304] jffs2: notice: (9304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  372.153143][   T31] audit: type=1400 audit(1791526468.557:431): avc:  denied  { write } for  pid=9303 comm="syz.4.1105" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  373.003528][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  373.004041][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  373.540553][ T5780] usb 3-1: USB disconnect, device number 42
[  373.620344][   T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  373.766646][   T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  373.768355][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.768377][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  373.770219][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.770240][   T10] usb 4-1: Product: syz
[  373.770253][   T10] usb 4-1: Manufacturer: syz
[  373.770268][   T10] usb 4-1: SerialNumber: syz
[  373.772911][   T10] usb 4-1: config 0 descriptor??
[  373.990340][    T9] usb 1-1: USB disconnect, device number 42
[  374.056431][ T9342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  374.269736][ T9359] CIFS: Attempting to mount //127.0.0.1/share
[  374.532519][ T1600] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  375.278426][ T9359] CIFS: VFS: Error connecting to socket. Aborting operation.
[  375.278461][ T9359] CIFS: VFS: cifs_mount failed w/return code = -4
[  375.662558][ T5780] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  376.153066][ T5780] usb 2-1: Using ep0 maxpacket: 16
[  376.183645][ T5780] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  376.282930][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.286817][ T5780] usb 2-1: config 0 descriptor??
[  376.309801][ T5780] gspca_main: sonixj-2.14.0 probing 0471:0327
[  376.310863][   T10] usb 4-1: USB disconnect, device number 39
[  376.438968][ T9386] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.612839][ T1600] usb 1-1: new low-speed USB device number 44 using dummy_hcd
[  376.688524][ T9396] syzkaller0: entered promiscuous mode
[  376.688563][ T9396] syzkaller0: entered allmulticast mode
[  376.707293][ T5780] gspca_sonixj: reg_r err -32
[  376.707425][ T5780] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  376.763050][ T1600] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  376.764688][ T1600] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  376.764726][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  376.764748][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  376.764770][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  376.764793][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  376.765743][ T1600] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  376.765780][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  376.765804][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  376.765826][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  376.765847][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  376.766634][ T1600] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  376.766664][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  376.766686][ T1600] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  376.766707][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  376.766728][ T1600] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  376.769060][ T1600] usb 1-1: string descriptor 0 read error: -22
[  376.769158][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.784468][ T1600] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  376.898112][ T9400] syzkaller0: entered promiscuous mode
[  376.898130][ T9400] syzkaller0: entered allmulticast mode
[  376.985745][ T1600] usb 1-1: USB disconnect, device number 44
[  377.038593][ T9402] FAULT_INJECTION: forcing a failure.
[  377.038593][ T9402] name fail_futex, interval 1, probability 0, space 0, times 1
[  377.038623][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.3.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  377.038644][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  377.038655][ T9402] Call Trace:
[  377.038661][ T9402]  <TASK>
[  377.038669][ T9402]  dump_stack_lvl+0x100/0x190
[  377.038703][ T9402]  should_fail_ex.cold+0x5/0xa
[  377.038731][ T9402]  get_futex_key+0x1d0/0x14f0
[  377.038762][ T9402]  ? __pfx_get_futex_key+0x10/0x10
[  377.038789][ T9402]  ? vfs_writev+0x1d5/0xdd0
[  377.038810][ T9402]  ? rcu_is_watching+0x13/0xc0
[  377.038837][ T9402]  ? vfs_writev+0x1d5/0xdd0
[  377.038857][ T9402]  ? kfree+0x1e5/0x6d0
[  377.038875][ T9402]  ? import_iovec+0x101/0x130
[  377.038906][ T9402]  futex_wake+0xf4/0x5e0
[  377.038929][ T9402]  ? __pfx_futex_wake+0x10/0x10
[  377.038949][ T9402]  ? __pfx_vfs_writev+0x10/0x10
[  377.038971][ T9402]  ? find_held_lock+0x2b/0x80
[  377.039005][ T9402]  ? do_writev+0x214/0x340
[  377.039026][ T9402]  ? do_writev+0x214/0x340
[  377.039052][ T9402]  do_futex+0x2b2/0x440
[  377.039082][ T9402]  ? __pfx_do_futex+0x10/0x10
[  377.039112][ T9402]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  377.039142][ T9402]  ? __fget_files+0x21f/0x3d0
[  377.039172][ T9402]  __x64_sys_futex+0x34f/0x4d0
[  377.039204][ T9402]  ? __pfx___x64_sys_futex+0x10/0x10
[  377.039231][ T9402]  ? __pfx_do_writev+0x10/0x10
[  377.039259][ T9402]  do_syscall_64+0x123/0x790
[  377.039287][ T9402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.039307][ T9402] RIP: 0033:0x7fc8bdf9e1d9
[  377.039323][ T9402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.039341][ T9402] RSP: 002b:00007fc8bedd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  377.039360][ T9402] RAX: ffffffffffffffda RBX: 00007fc8be225fa8 RCX: 00007fc8bdf9e1d9
[  377.039373][ T9402] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc8be225fac
[  377.039384][ T9402] RBP: 00007fc8be225fa0 R08: 0000000000000001 R09: 0000000000000000
[  377.039395][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.039406][ T9402] R13: 00007fc8be226038 R14: 00007ffe62980c20 R15: 00007ffe62980d08
[  377.039432][ T9402]  </TASK>
[  377.070510][ T9405] jffs2: notice: (9405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  377.077709][   T31] audit: type=1400 audit(1791526473.467:432): avc:  denied  { write } for  pid=9403 comm="syz.4.1142" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  378.568313][   T25] usb 2-1: USB disconnect, device number 35
[  379.121983][ T9447] jffs2: notice: (9447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  379.192648][   T31] audit: type=1400 audit(1791526475.547:433): avc:  denied  { write } for  pid=9446 comm="syz.2.1154" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  379.320792][ T9453] FAULT_INJECTION: forcing a failure.
[  379.320792][ T9453] name fail_futex, interval 1, probability 0, space 0, times 0
[  379.320823][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.2.1157 Not tainted syzkaller #0 PREEMPT(full) 
[  379.320844][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  379.320855][ T9453] Call Trace:
[  379.320861][ T9453]  <TASK>
[  379.320869][ T9453]  dump_stack_lvl+0x100/0x190
[  379.320903][ T9453]  should_fail_ex.cold+0x5/0xa
[  379.320932][ T9453]  get_futex_key+0x1d0/0x14f0
[  379.320963][ T9453]  ? __pfx_get_futex_key+0x10/0x10
[  379.320989][ T9453]  ? find_held_lock+0x2b/0x80
[  379.321019][ T9453]  ? futex_wake+0x4ea/0x5e0
[  379.321047][ T9453]  futex_wake+0xf4/0x5e0
[  379.321068][ T9453]  ? __lock_acquire+0x5c0/0x1f40
[  379.321091][ T9453]  ? __pfx_futex_wake+0x10/0x10
[  379.321118][ T9453]  ? lock_acquire+0x1d1/0x380
[  379.321142][ T9453]  do_futex+0x2b2/0x440
[  379.321172][ T9453]  ? __pfx_do_futex+0x10/0x10
[  379.321201][ T9453]  ? __fget_files+0x21f/0x3d0
[  379.321231][ T9453]  __x64_sys_futex+0x34f/0x4d0
[  379.321262][ T9453]  ? __pfx___x64_sys_futex+0x10/0x10
[  379.321301][ T9453]  do_syscall_64+0x123/0x790
[  379.321331][ T9453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.321350][ T9453] RIP: 0033:0x7f6df179e1d9
[  379.321365][ T9453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.321384][ T9453] RSP: 002b:00007f6df27010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  379.321404][ T9453] RAX: ffffffffffffffda RBX: 00007f6df1a25fa8 RCX: 00007f6df179e1d9
[  379.321418][ T9453] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6df1a25fac
[  379.321429][ T9453] RBP: 00007f6df1a25fa0 R08: 0000000000000001 R09: 0000000000000000
[  379.321442][ T9453] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  379.321460][ T9453] R13: 00007f6df1a26038 R14: 00007ffd9ab1de10 R15: 00007ffd9ab1def8
[  379.321486][ T9453]  </TASK>
[  379.498694][   T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  379.664136][   T25] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  379.665021][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  379.665046][   T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  379.665068][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  379.665088][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  379.667810][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.667830][   T25] usb 5-1: Product: syz
[  379.667844][   T25] usb 5-1: Manufacturer: syz
[  379.667858][   T25] usb 5-1: SerialNumber: syz
[  379.669082][   T31] audit: type=1400 audit(1791526476.067:434): avc:  denied  { write } for  pid=9454 comm="syz.0.1158" lport=35590 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  379.681923][   T25] usb 5-1: config 0 descriptor??
[  379.732787][ T9451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  379.741380][   T31] audit: type=1400 audit(1791526476.137:435): avc:  denied  { setopt } for  pid=9454 comm="syz.0.1158" lport=35590 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  379.912496][ T5780] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  380.392463][ T5780] usb 3-1: Using ep0 maxpacket: 16
[  380.393471][ T5780] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  380.419876][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.455762][ T5780] usb 3-1: config 0 descriptor??
[  380.559240][   T25] usb 5-1: ucan: probing device on interface #0
[  380.559266][   T25] usb 5-1: ucan: invalid in_ep MaxPacketSize
[  380.559278][   T25] usb 5-1: ucan: probe failed; try to update the device firmware
[  380.716998][ T5780] gspca_main: sonixj-2.14.0 probing 0471:0327
[  380.797228][ T9465] Process accounting paused
[  380.800183][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1162'.
[  380.801096][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1162'.
[  380.875035][ T9473] netlink: 'syz.3.1165': attribute type 1 has an invalid length.
[  380.906738][ T9473] 8021q: adding VLAN 0 to HW filter on device bond4
[  380.920164][ T5780] gspca_sonixj: reg_r err -32
[  380.920227][ T5780] sonixj 3-1:0.0: probe with driver sonixj failed with error -32
[  380.945986][ T9473] bond4: (slave veth3): Enslaving as a backup interface with a down link
[  380.949035][ T9473] dummy0: left promiscuous mode
[  380.976627][ T9473] bond4: (slave dummy0): Enslaving as a backup interface with an up link
[  381.012513][ T1481] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  381.123060][  T586] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  382.133664][ T9505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.133679][ T9505] IPv6: NLM_F_CREATE should be set when creating new route
[  382.157499][   T10] kernel write not supported for file /input/event0 (pid: 10 comm: kworker/0:1)
[  382.215338][ T5804] usb 5-1: USB disconnect, device number 45
[  382.390629][ T9516] 8021q: VLANs not supported on xfrm0
[  382.412719][   T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  382.562733][   T25] usb 1-1: Using ep0 maxpacket: 16
[  382.564879][   T25] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  382.569665][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.569847][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  382.570026][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  382.570481][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.718575][   T25] usb 1-1: config 0 descriptor??
[  383.251349][ T5731] usb 3-1: USB disconnect, device number 43
[  383.418209][ T9526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  383.421395][ T9525] jffs2: notice: (9525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  383.432393][   T31] audit: type=1400 audit(1791526479.827:436): avc:  denied  { write } for  pid=9523 comm="syz.1.1186" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.537063][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  383.537147][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  383.541893][   T25] usb 1-1: USB disconnect, device number 45
[  384.802539][   T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  384.953178][   T25] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  384.954178][   T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  384.954202][   T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  384.954222][   T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  384.956221][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.956241][   T25] usb 3-1: Product: syz
[  384.956255][   T25] usb 3-1: Manufacturer: syz
[  384.956267][   T25] usb 3-1: SerialNumber: syz
[  384.959723][   T25] usb 3-1: config 0 descriptor??
[  384.961302][ T9544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  384.961390][ T9544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  385.017649][   T25] usb 3-1: ucan: probing device on interface #0
[  385.192548][   T25] usb 3-1: ucan: could not read protocol version, ret=-32
[  385.192572][   T25] usb 3-1: ucan: probe failed; try to update the device firmware
[  385.317472][ T9554] 8021q: VLANs not supported on xfrm0
[  385.362489][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  385.512532][    T9] usb 1-1: Using ep0 maxpacket: 16
[  385.514148][    T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  385.520073][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.618144][    T9] usb 1-1: config 0 descriptor??
[  385.699072][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  386.131694][    T9] gspca_sonixj: reg_r err -32
[  386.131763][    T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  386.205484][ T9559] jffs2: notice: (9559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  386.232671][   T31] audit: type=1400 audit(1791526482.637:437): avc:  denied  { write } for  pid=9558 comm="syz.3.1198" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  386.516757][ T5731] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  386.829086][ T5731] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  386.954917][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  386.955267][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  386.955435][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  386.955461][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  386.955486][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  387.078188][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  387.078608][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  387.084936][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.084965][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  387.084989][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  387.289348][ T5731] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  387.289732][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  387.289765][ T5731] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.291109][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  387.291149][ T5731] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  387.582597][ T5731] usb 2-1: string descriptor 0 read error: -22
[  387.587175][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.569321][ T5731] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  389.214588][ T5731] usb 2-1: USB disconnect, device number 36
[  389.733148][   T25] usb 3-1: USB disconnect, device number 44
[  391.111009][ T2325] usb 1-1: USB disconnect, device number 46
[  409.590375][ T9587] bond2: entered promiscuous mode
[  409.590540][ T9587] bond2: entered allmulticast mode
[  409.639298][ T9587] 8021q: adding VLAN 0 to HW filter on device bond2
[  409.686078][ T9601] 8021q: VLANs not supported on xfrm0
[  417.778539][ T5602] Process accounting resumed
[  428.326091][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  428.354408][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  428.374295][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  428.456718][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  428.516459][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  429.102628][   T31] audit: type=1400 audit(1791526525.497:438): avc:  denied  { mounton } for  pid=9621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  430.252729][ T4922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  430.275737][ T4922] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  430.298326][ T4922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  430.329989][ T4922] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  430.381274][ T4922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  430.844503][ T5604] Bluetooth: hci5: command tx timeout
[  431.932130][   T31] audit: type=1400 audit(1791526528.307:439): avc:  denied  { execute } for  pid=9625 comm="syz.0.1217" path="/241/file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  432.549066][ T4922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  432.603584][ T4922] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  432.631096][ T4922] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  432.683505][ T4922] Bluetooth: hci6: command tx timeout
[  432.745023][ T4922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  432.836134][ T4922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  432.923887][ T4922] Bluetooth: hci5: command tx timeout
[  434.471573][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  434.472051][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  434.753892][ T4922] Bluetooth: hci6: command tx timeout
[  434.993642][ T4922] Bluetooth: hci5: command tx timeout
[  435.164871][ T4922] Bluetooth: hci7: command tx timeout
[  436.834721][ T5604] Bluetooth: hci6: command tx timeout
[  436.927504][ T5604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  436.989099][ T5604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  436.999003][ T5604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  437.031109][ T5604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  437.087080][ T5604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  437.088055][ T5611] Bluetooth: hci5: command tx timeout
[  437.243248][ T5604] Bluetooth: hci7: command tx timeout
[  438.915101][ T5604] Bluetooth: hci6: command tx timeout
[  439.243493][ T5604] Bluetooth: hci8: command tx timeout
[  439.322993][ T5604] Bluetooth: hci7: command tx timeout
[  441.314352][ T5604] Bluetooth: hci8: command tx timeout
[  441.402970][ T5604] Bluetooth: hci7: command tx timeout
[  442.747404][   T31] audit: type=1400 audit(1791526539.047:440): avc:  denied  { listen } for  pid=9646 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  443.405759][ T5604] Bluetooth: hci8: command tx timeout
[  445.474117][ T5604] Bluetooth: hci8: command tx timeout
[  458.947890][ T6879] bridge0: port 3(syz_tun) entered disabled state
[  459.526522][ T6879] syz_tun (unregistering): left allmulticast mode
[  459.526576][ T6879] syz_tun (unregistering): left promiscuous mode
[  459.529698][ T6879] bridge0: port 3(syz_tun) entered disabled state
[  461.819435][ T5602] syz_tun (unregistering): left allmulticast mode
[  464.684448][  T549] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.740718][  T549] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.082671][  T549] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.810870][  T549] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.660606][ T4922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  485.682343][ T4922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  485.738052][ T4922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  485.762140][ T4922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  485.797861][ T4922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  488.033059][ T5604] Bluetooth: hci0: command tx timeout
[  489.991311][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  490.006500][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  490.065961][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  490.096075][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  490.118610][ T4922] Bluetooth: hci0: command tx timeout
[  490.226116][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  491.879352][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  491.909448][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  491.916264][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  491.949121][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  492.002929][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  492.204143][ T5604] Bluetooth: hci0: command tx timeout
[  492.353983][ T5604] Bluetooth: hci1: command tx timeout
[  494.196210][ T5604] Bluetooth: hci2: command tx timeout
[  494.272709][ T5604] Bluetooth: hci0: command tx timeout
[  494.444621][ T5604] Bluetooth: hci1: command tx timeout
[  495.835472][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  495.846265][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  495.895806][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  495.922264][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  495.930791][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  495.951747][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  496.002869][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  496.282293][ T4922] Bluetooth: hci2: command tx timeout
[  496.517813][ T4922] Bluetooth: hci1: command tx timeout
[  498.123706][ T4922] Bluetooth: hci3: command tx timeout
[  498.353566][ T4922] Bluetooth: hci2: command tx timeout
[  498.602609][ T4922] Bluetooth: hci1: command tx timeout
[  500.202926][ T4922] Bluetooth: hci3: command tx timeout
[  500.433646][ T4922] Bluetooth: hci2: command tx timeout
[  502.276033][ T4922] Bluetooth: hci3: command tx timeout
[  504.372779][ T5604] Bluetooth: hci3: command tx timeout
[  510.536603][ T9733] syz_tun: entered allmulticast mode
[  516.905238][  T549] bridge_slave_1: left allmulticast mode
[  516.905305][  T549] bridge_slave_1: left promiscuous mode
[  516.932290][  T549] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.626084][  T549] bridge_slave_0: left allmulticast mode
[  517.626123][  T549] bridge_slave_0: left promiscuous mode
[  517.628129][  T549] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.134798][  T549] lo: left allmulticast mode
[  531.082625][   T32] INFO: task kworker/1:2:1600 blocked for more than 143 seconds.
[  531.082659][   T32]       Not tainted syzkaller #0
[  531.082680][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  531.082699][   T32] task:kworker/1:2     state:D stack:20496 pid:1600  tgid:1600  ppid:2      task_flags:0x4208160 flags:0x00080000
[  531.082790][   T32] Workqueue: events drain_vmap_area_work
[  531.082871][   T32] Call Trace:
[  531.082891][   T32]  <TASK>
[  531.082999][   T32]  __schedule+0x1259/0x6920
[  531.083076][   T32]  ? lock_acquire+0x1d1/0x380
[  531.083404][   T32]  ? mark_held_locks+0x40/0x70
[  531.083475][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  531.083522][   T32]  ? lockdep_hardirqs_on+0x7d/0x110
[  531.083670][   T32]  ? __pfx___schedule+0x10/0x10
[  531.083720][   T32]  ? find_held_lock+0x2b/0x80
[  531.083854][   T32]  ? schedule+0x225/0x2c0
[  531.084074][   T32]  schedule+0xdd/0x2c0
[  531.091002][   T32]  schedule_timeout+0x1b2/0x280
[  531.091076][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  531.091464][   T32]  ? mark_held_locks+0x40/0x70
[  531.091664][   T32]  __wait_for_common+0x2e7/0x4c0
[  531.091757][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  531.091975][   T32]  ? __pfx___wait_for_common+0x10/0x10
[  531.092017][   T32]  ? __flush_work+0x4ca/0xcb0
[  531.092106][   T32]  ? find_held_lock+0x2b/0x80
[  531.092180][   T32]  ? __flush_work+0x928/0xcb0
[  531.092252][   T32]  ? __flush_work+0x928/0xcb0
[  531.162019][   T32]  ? __flush_work+0x4ca/0xcb0
[  531.162108][   T32]  __flush_work+0x7c7/0xcb0
[  531.162229][   T32]  ? __print_lock_name+0x60/0x80
[  531.162304][   T32]  ? purge_vmap_node+0x810/0xb40
[  531.164670][   T32]  ? __pfx___flush_work+0x10/0x10
[  531.164780][   T32]  ? __pfx_wq_barrier_func+0x10/0x10
[  531.165173][   T32]  ? __pfx___might_resched+0x10/0x10
[  531.165250][   T32]  ? queue_work_on+0x11b/0x1e0
[  531.165314][   T32]  ? lockdep_hardirqs_on+0x7d/0x110
[  531.165490][   T32]  __purge_vmap_area_lazy+0x879/0xc00
[  531.218886][   T32]  drain_vmap_area_work+0x27/0x40
[  531.218942][   T32]  process_one_work+0xac7/0x1b10
[  531.219324][   T32]  ? __pfx_process_one_work+0x10/0x10
[  531.219435][   T32]  ? lock_acquire+0x1d1/0x380
[  531.219703][   T32]  ? __pfx_drain_vmap_area_work+0x10/0x10
[  531.219853][   T32]  worker_thread+0x5ef/0xe50
[  531.220196][   T32]  ? kthread+0x13a/0x450
[  531.220244][   T32]  ? __pfx_worker_thread+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  531.220287][   T32]  kthread+0x373/0x450
[  531.220370][   T32]  ? __pfx_kthread+0x10/0x10
[  531.220500][   T32]  ret_from_fork+0x730/0xd60
[  531.220583][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  531.220716][   T32]  ? __switch_to+0x800/0x10f0
[  531.220831][   T32]  ? __pfx_kthread+0x10/0x10
[  531.220953][   T32]  ret_from_fork_asm+0x1a/0x30
[  531.250795][   T32]  </TASK>
[  531.250922][   T32] 
[  531.250922][   T32] Showing all locks held in the system:
[  531.250946][   T32] locks held by kworker/0:0/9: 3, on CPU#0:
[  531.250969][   T32]  #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.251101][   T32]  #1: ffffc900000e7d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.251181][   T32]  #2: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  531.251274][   T32] locks held by kworker/0:1/10: 2, last CPU#0:
[  531.251292][   T32]  #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.251401][   T32]  #1: ffffc900000f7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.251521][   T32] locks held by pr/ttyS0/16: 2, last CPU#0:
[  531.251542][   T32]  #0: ffffffff8fdd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  531.251675][   T32]  #1: ffffffff9cc7d638 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  531.251760][   T32] locks held by kworker/1:0/25: 3, on CPU#1:
[  531.251776][   T32]  #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.251861][   T32]  #1: ffffc900001f7d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.251960][   T32]  #2: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880
[  531.252073][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  531.252094][   T32]  #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  531.252225][   T32] locks held by kworker/u8:3/50: 3, last CPU#1:
[  531.252247][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.307500][   T32]  #1: ffffc90000ba7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.307609][   T32]  #2: ffff88807d0e3258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  531.307730][   T32] locks held by kworker/0:2/189: 2, last CPU#0:
[  531.307750][   T32]  #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.307876][   T32]  #1: ffffc9000303fd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.308016][   T32] locks held by kworker/u8:6/207: 3, last CPU#1:
[  531.308040][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.308115][   T32]  #1: ffffc9000308fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.308203][   T32]  #2: ffff8880554b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  531.308305][   T32] locks held by kworker/u8:7/480: 3, on CPU#0:
[  531.308324][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.308441][   T32]  #1: ffffc9000376fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
** replaying previous printk message **
[  531.308441][   T32]  #1: ffffc9000376fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.308571][   T32]  #2: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  531.308679][   T32] locks held by kworker/u8:9/513: 4, last CPU#1:
[  531.308693][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.308774][   T32]  #1: ffffc9000395fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.308869][   T32]  #2: ffff888055740800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  531.308977][   T32]  #3: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  531.309101][   T32] locks held by kworker/u8:10/549: 7, last CPU#1:
[  531.309123][   T32]  #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.309261][   T32]  #1: ffffc9000397fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.309340][   T32]  #2: ffffffff91cbcd08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  531.309419][   T32]  #3: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  531.309511][   T32]  #4: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120
[  531.362083][   T32]  #5: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120
[  531.362191][   T32]  #6: ffff8880b833bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140
[  531.362302][   T32] locks held by kworker/u8:11/586: 3, last CPU#1:
[  531.362323][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.362550][   T32]  #1: ffffc90003aafd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.362660][   T32]  #2: ffff888055750800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  531.362785][   T32] locks held by kworker/u8:12/595: 3, last CPU#1:
[  531.362808][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.362948][   T32]  #1: ffffc9000353fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.363022][   T32]  #2: ffff888031b71258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  531.363125][   T32] locks held by kworker/u8:13/1481: 3, last CPU#1:
[  531.363142][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.363247][   T32]  #1: ffffc90006277d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.363365][   T32]  #2: ffff888076e2f258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  531.363489][   T32] locks held by kworker/1:2/1600: 3, on CPU#1:
[  531.363512][   T32]  #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.363610][   T32]  #1: ffffc900067a7d08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.363692][   T32]  #2: ffffffff8ffc2aa0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40
[  531.363800][   T32] locks held by klogd/4962: 1, last CPU#1:
[  531.363819][   T32]  #0: ffffffff8fffd618 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0
[  531.603507][   T32] locks held by getty/5356: 2, on CPU#0:
[  531.603532][   T32]  #0: ffff88803810b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  531.603668][   T32]  #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  531.603817][   T32] locks held by syz-executor/5590: 2, last CPU#0:
[  531.603844][   T32]  #0: ffff888039362800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  531.603962][   T32]  #1: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  531.604052][   T32] locks held by syz-executor/5614: 1, last CPU#0:
[  531.604071][   T32]  #0: ffff888057614740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  531.604197][   T32] locks held by kworker/0:8/5804: 2, last CPU#0:
[  531.604219][   T32]  #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.604356][   T32]  #1: ffffc9000476fd08 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.604509][   T32] locks held by kworker/u8:17/9604: 4, last CPU#0:
[  531.604536][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  531.604672][   T32]  #1: ffffc90003bafd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  531.604764][   T32]  #2: ffff888056e60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  531.643891][   T32]  #3: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140
[  531.643995][   T32] locks held by syz-executor/9621: 1, last CPU#0:
[  531.644014][   T32]  #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  531.644119][   T32] locks held by syz-executor/9624: 1, last CPU#0:
[  531.644140][   T32]  #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x7a/0x410
[  531.644261][   T32] locks held by syz-executor/9631: 1, last CPU#0:
[  531.644284][   T32]  #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  531.644418][   T32] locks held by syz-executor/9640: 1, last CPU#0:
[  531.644442][   T32]  #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x7a/0x410
[  531.644521][   T32] locks held by syz-executor/9698: 1, on CPU#1:
[  531.644537][   T32]  #0: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[  531.644618][   T32] locks held by syz-executor/9707: 1, on CPU#0:
[  531.644636][   T32]  #0: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[  531.644732][   T32] locks held by syz-executor/9711: 1, on CPU#0:
[  531.644752][   T32]  #0: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[  531.644864][   T32] locks held by syz-executor/9717: 1, on CPU#0:
[  531.644885][   T32]  #0: ffffffff91cd5840 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[  531.645017][   T32] locks held by sed/9762: 1, last CPU#0:
[  531.645040][   T32]  #0: ffff88802ae8f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00
[  531.654848][   T32] 
[  531.654871][   T32] =============================================
[  531.654871][   T32] 
[  531.674953][   T32] NMI backtrace for cpu 0
[  531.674983][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  531.675017][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  531.675042][   T32] Call Trace:
[  531.675081][   T32]  <TASK>
[  531.675099][   T32]  dump_stack_lvl+0x100/0x190
[  531.675200][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[  531.675319][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  531.675407][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  531.675548][   T32]  sys_info+0x141/0x190
[  531.675600][   T32]  watchdog+0xcb1/0x1030
[  531.675837][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  531.675939][   T32]  ? __pfx_watchdog+0x10/0x10
[  531.676006][   T32]  ? __kthread_parkme+0x18f/0x230
[  531.676164][   T32]  ? kthread+0x13a/0x450
[  531.676212][   T32]  ? __pfx_watchdog+0x10/0x10
[  531.676259][   T32]  kthread+0x373/0x450
[  531.676346][   T32]  ? __pfx_kthread+0x10/0x10
[  531.676450][   T32]  ret_from_fork+0x730/0xd60
[  531.676540][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  531.676671][   T32]  ? __switch_to+0x800/0x10f0
[  531.676792][   T32]  ? __pfx_kthread+0x10/0x10
[  531.676889][   T32]  ret_from_fork_asm+0x1a/0x30
[  531.677291][   T32]  </TASK>
[  531.677363][   T32] Sending NMI from CPU 0 to CPUs 1:
[  531.677399][    C1] NMI backtrace for cpu 1
[  531.677418][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  531.677444][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  531.677466][    C1] RIP: 0010:io_serial_in+0x87/0xb0
[  531.677507][    C1] Code: b5 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 18 f6 cd fc eb a2 e8 a1 f6
[  531.677523][    C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[  531.677542][    C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  531.677554][    C1] RDX: 00000000000003fd RSI: ffffffff85b29540 RDI: ffffffff9cc7d660
[  531.677566][    C1] RBP: ffffffff9cc7d620 R08: 0000000000000001 R09: 000000000000001f
[  531.677578][    C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000
[  531.677590][    C1] R13: 0000000000000020 R14: fffffbfff398fb21 R15: dffffc0000000000
[  531.677604][    C1] FS:  0000000000000000(0000) GS:ffff888122a47000(0000) knlGS:0000000000000000
[  531.677622][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  531.677635][    C1] CR2: 00007fbc5bdef158 CR3: 000000000fb96000 CR4: 00000000003526f0
[  531.677649][    C1] Call Trace:
[  531.677663][    C1]  <TASK>
[  531.677709][    C1]  wait_for_lsr+0x13a/0x210
[  531.677944][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  531.678022][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[  531.678064][    C1]  ? __pfx_io_serial_out+0x10/0x10
[  531.678268][    C1]  serial8250_console_write+0x1108/0x14f0
[  531.678390][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  531.678435][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  531.678553][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  531.678780][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[  531.678979][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  531.679045][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  531.679077][    C1]  ? do_raw_spin_lock+0xf0/0x260
[  531.679332][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  531.679397][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[  531.679497][    C1]  nbcon_emit_one+0x1a8/0x2b0
[  531.679565][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[  531.679792][    C1]  nbcon_kthread_func+0x613/0x7d0
[  531.679958][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  531.680144][    C1]  ? __kthread_parkme+0x18f/0x230
[  531.680295][    C1]  ? kthread+0x13a/0x450
[  531.680340][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  531.680382][    C1]  kthread+0x373/0x450
[  531.680454][    C1]  ? __pfx_kthread+0x10/0x10
[  531.680525][    C1]  ret_from_fork+0x730/0xd60
[  531.680615][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  531.680748][    C1]  ? __switch_to+0x800/0x10f0
[  531.680840][    C1]  ? __pfx_kthread+0x10/0x10
[  531.680915][    C1]  ret_from_fork_asm+0x1a/0x30
[  531.681262][    C1]  </TASK>
[  531.869945][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  532.892764][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  532.901879][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  532.911938][   T32] Call Trace:
[  532.915248][   T32]  <TASK>
[  532.918211][   T32]  dump_stack_lvl+0x100/0x190
[  532.922989][   T32]  vpanic+0x553/0x970
[  532.927020][   T32]  ? __pfx_vpanic+0x10/0x10
[  532.931864][   T32]  panic+0xd1/0xe0
[  532.935619][   T32]  ? __pfx_panic+0x10/0x10
[  532.940256][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  532.946503][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  532.952690][   T32]  ? watchdog.cold+0x1ec/0x234
[  532.957540][   T32]  watchdog.cold+0x1fd/0x234
[  532.962410][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  532.968265][   T32]  ? __pfx_watchdog+0x10/0x10
[  532.973003][   T32]  ? __kthread_parkme+0x18f/0x230
[  532.978216][   T32]  ? kthread+0x13a/0x450
[  532.982490][   T32]  ? __pfx_watchdog+0x10/0x10
[  532.987198][   T32]  kthread+0x373/0x450
[  532.991342][   T32]  ? __pfx_kthread+0x10/0x10
[  532.995995][   T32]  ret_from_fork+0x730/0xd60
[  533.000684][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  533.005939][   T32]  ? __switch_to+0x800/0x10f0
[  533.010722][   T32]  ? __pfx_kthread+0x10/0x10
[  533.015374][   T32]  ret_from_fork_asm+0x1a/0x30
[  533.020594][   T32]  </TASK>
[  533.023810][   T32] Kernel Offset: disabled
[  533.028140][   T32] Rebooting in 86400 seconds..