last executing test programs:

2m58.66736279s ago: executing program 1 (id=149):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
socket$kcm(0xa, 0x2, 0x73)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="eb"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x107001)

2m57.097776423s ago: executing program 1 (id=154):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4, 0xcd06, 0x2, [0xffffffff, 0x5, 0x9, 0xb, 0xe16, 0x1]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000})
write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0xfffffffffffffc70}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000), 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884800000c0003000800170004"]}, 0x58}}, 0x0)

2m55.812103482s ago: executing program 1 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000040))
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)

2m54.916528434s ago: executing program 1 (id=164):
r0 = gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a00010000000904010000010230000904010101010230000905010940000303100a252508000000030b00090402000001023000090400010101023000090582"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x102b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x10, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xde, 0xb, 0x2, {0xa, 0x25, 0x25, 0xfd32, 0x7, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x1, 0x4, {0xa, 0x25, 0x25, 0x4, 0x7, 0x6}}}}}}}}]}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x44, 0x8}]}, 0x10)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
wait4(r0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x800001a, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000000c0)={&(0x7f0000000000)=""/172, 0xac})

2m53.852600351s ago: executing program 1 (id=169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="ffffffffffff02112233445508060001b7d6ac574973ce9a4280cddb9b371d080006fb00024205430512", 0x2a, 0x24048800, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@remote, <r2=>0x0}, &(0x7f0000000600)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000640)={'tunl0\x00', r1, 0x7800, 0x20, 0x6, 0x4d, {{0x34, 0x4, 0x1, 0x0, 0xd0, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x1f, 0xd8, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @remote]}, @lsrr={0x83, 0x1b, 0x6c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010101, @rand_addr=0x64010102, @broadcast]}, @generic={0x0, 0x3, "88"}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0xe, [0x6, 0x80, 0x4, 0x401, 0x2, 0xfffffffd]}, @timestamp_prespec={0x44, 0x14, 0x1c, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x1f, 0x16, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x3, [0x9, 0x6, 0x3, 0x2, 0x4, 0x3, 0x99, 0xa]}, @noop, @generic={0x83, 0xb, "2290428e1a11ceb742"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000640)={'tunl0\x00', <r3=>r1, 0x7800, 0x20, 0x6, 0x4d, {{0x34, 0x4, 0x1, 0x0, 0xd0, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x1f, 0xd8, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @remote]}, @lsrr={0x83, 0x1b, 0x6c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010101, @rand_addr=0x64010102, @broadcast]}, @generic={0x0, 0x3, "88"}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0xe, [0x6, 0x80, 0x4, 0x401, 0x2, 0xfffffffd]}, @timestamp_prespec={0x44, 0x14, 0x1c, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x1f, 0x16, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x3, [0x9, 0x6, 0x3, 0x2, 0x4, 0x3, 0x99, 0xa]}, @noop, @generic={0x83, 0xb, "2290428e1a11ceb742"}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000780)={@empty, @dev, <r4=>0x0}, &(0x7f00000007c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000800)={0x5e8, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfc}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3d, 0x1, 0x10, 0x2}, {0x2, 0xc, 0x6, 0xc437}, {0x0, 0xf3, 0x80, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x70b6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd2c}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x94a}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000380)={&(0x7f0000000280)="87afe3488a162cecc57ab259953464111fa0aeb300b72fe25cd66dce0b3deee674cc35aa001ac2b1078131778f04b52a36836064275f4bda558d42c6356290b7c15ae5fe1049a878794b0f927b56f5fc5654dd73163f24a6d38840d2729dc019609a6e52e35362a81ca0c7031bf2aecfa4ec5fe45195f771a4cd4ccfead5bbfdeff2320ca100513ee2c322ebc15bf3cf1e918a5f26ffaa624098da98746fd33ec0d8632991821a59fb4621bd7af10ce4dce868ab4211e6e48c9be90bf6342f77b450106c7629d567e0bd082c427bc33d94d9f9da864d9646d3f791bb000000000000", 0xe2}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
write(r5, &(0x7f0000000000)='3', 0x1) (async)
write(r5, &(0x7f0000000000)='3', 0x1)
socket$alg(0x26, 0x5, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x4, {0xa, 0x4e21, 0x80000001, @mcast1, 0x7}}}, 0x80)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r9, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) (async)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000})
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0x0, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0x4000, 0x1354})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
epoll_create1(0x80000)

2m53.542911383s ago: executing program 1 (id=171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f0000010000000000000000000000000000000000000900"/128, 0x80)

2m38.0560395s ago: executing program 32 (id=171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f0000010000000000000000000000000000000000000900"/128, 0x80)

1m26.737482552s ago: executing program 4 (id=537):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r0, 0x0, 0x5a) (async)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000700), 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4) (async)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f00000005c0)={[], 0xf000}, 0x1000)

1m26.690519955s ago: executing program 4 (id=538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r4 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_usb_ep_read(r3, 0x1, 0x0, 0x0)
syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m24.68648314s ago: executing program 4 (id=544):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="efa0d1426bc1f08d48ce1e8176ab237698476ed7bde3bd68ccdff913076b196bffa790252a342147816eb0d2dc0e7305159bf4a31fc2a9180586a999e78aca6bf8dedb90be30aa93e112ecaa1c39ac9b3e4cd06e1ca3f53864828e6e7837fb04d271b552a6d92ad0b7626f67db60efba27f069f1b6f8cc34c4515e52c24c6e05ea0ffe51ec46aa6910f38e7bbe1b256d775a1895713f3ac3aec28084c37a79c466448c77b0f889fe62b436530a9cf5e7c62d538816b54b0f18972c53e1cdc03d8ebe285387bb43699c38789be76570011bdf383f457f35058a1dfdebb8692a3b3888a927dc40d9", &(0x7f0000000200)="2bb5dace49ac8b44db68c43a6e42d52f422e968314316fda4bb411a72ba7c5130822ecf64f91620302cca26758b6c9300ba20b62e0e06e2e3b948dd8b4005a3e3c3f29b0b92b4c83cc7f1f8412fe924d1c9a79fe033e580e7cdec3975b4578ef29325a5892d711520deda5ee1da310338b969e1aa81ed7f5f3209b9c0940b2516d1329ab80f21fd32bd03f34e2a6866e51215a9b6904426bcafbbfd0676d7d33d32db0bc4741bbedc359e09c10afa7eccb07c57f784df63e0e103847083029e19344b4ec5a53dbfc701e893ccf03"}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0)

1m23.736644992s ago: executing program 4 (id=546):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f0000010000000000000000000000000000000000000000000000000000000900"/128, 0x80)

1m23.619886449s ago: executing program 4 (id=547):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x301, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]})

1m23.589050407s ago: executing program 4 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x1, 0x100000003, 0x0, 0x7c, 0x100000, 0xf, 0x2004c8, 0x7fffffd, 0x0, 0x0, 0x7, 0x0, 0xd0, 0xf279, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010000000004000000000200"], 0x1c}}, 0x0) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc2, 0x1, {<r4=>0x0}, {0xee01}, 0x4, 0x8}) (rerun: 32)
r5 = socket(0x18, 0x6, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000400)) (async)
r6 = syz_pidfd_open(r4, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r6, 0x40106e80, &(0x7f0000000000)={0x6}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m15.75894379s ago: executing program 2 (id=591):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x803, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa11939000c883"], 0xd)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x4, 0xda, &(0x7f0000000100)="4e2ad9f669d4fec6a96c031e8470f582f085a7b1036e9087b930aa027b31f858e69fb4c9680d129c8ebdae1294dce227790302d01b7a16664df07999660c813188915148ad9cf90488a3e3f34a35d4a9053041bc3be75b4c9685af290ff203b9f0a4c19465dd095680bfd87fbbaf2f91fa57793700edbfabdfbf183d3da199bbf77e3d153fd78bdb2a1e06f7ce1c4a7f5d282214d95953b9cb827d94d92748aadb4695e8bba9cd55750fa14c2e1c493e2ba240326d82d565c8e72c1bedb61a8b3c74131879b94a62cf5c84d430f34c215525318d6309c237d725", 0x0, 0x1}, {0x40e, 0x75, &(0x7f0000000200)="105d2e3ea0f322acd08351558f2182d3aef5105dcb00d88e6c28dabe13bdfdb657718c4dcef65ac3831fe43fcd5ec2b401eda552aacf7165a5e1105e3620e21e9ce775babbdaf9a972b4525ff772e86123bfdb88d92da6e790f74c792524264fbd6b5a01a13ea5190d75bd6eb3add2397ba851687c", 0x1, 0x1}]})
read(r0, &(0x7f0000000080)=""/48, 0x30)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03010016d891ea9fccb4c849f7cf133072df20b6bc1b768ab809"], 0x1a)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x20050800)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000080000000000000ff020000000000000000000000000001fe8000000000000000000000000000aaffff00000000000000000020020000008005c56722939e473489f4a82fe98cb50f4006b455b1e268345d28deebbef3dda2ceae66b2749a6c44c262f459f4a84c454d5ae32ab3112bffa5b1b4a2e4c0dbd262bed636d624054d8070b613c7c5c82075ae252e56885d1b93d204665ea5d8d2f4225ef601d2727eef1066c9a5ea25c6487378e2d148544f547672743e74e33ac4705f34103e53e5cd38236535382f5d86780f8da68c44eac0328ef968b8c94e0a3882544f530f0262de9c9d5fcc925c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e00fc010000000000000000000000000001"], 0x104}}, 0x4055)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0)

1m15.169251628s ago: executing program 2 (id=592):
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
inotify_init()
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
pipe(&(0x7f00000000c0))
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r3, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e008900000dfb6c575b43f86dd6067", 0x46}, {&(0x7f00000001c0)="0000ff00000000f814a74cb3addda147fb682a6bf9d594503d1009f073dab11b65a5923005721bdb241e8d85776cd4e532d4543f13358194a29ef2c3250f711b376e118f9fcde39dc565dad7cd4cd8e1bd9c82bcd5487086c7526da173ede49db4cee9c474f190c231", 0x69}, {&(0x7f0000000280)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c", 0x1f}, {&(0x7f0000000380)="08a2", 0x2}], 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000480)={0x80000001, {{0xa, 0x4e21, 0x80000000, @local, 0x3}}, {{0xa, 0x4e24, 0x6, @empty, 0x2}}}, 0x108)
r7 = dup(r5)
syz_ublk_setup_queues(r7, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m14.741746349s ago: executing program 2 (id=593):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x3}, 0x1c) (async, rerun: 32)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) (rerun: 32)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0xb, 0x2, 0x100, 0x2, 0x6, 0x7ffdfffd, 0x19f, 0x38, 0x36e, 0x7fffffff, 0xd, 0x20, 0x2, 0x3, 0xc, 0xf6d}, [{0x1, 0x5, 0x5, 0x7, 0x9, 0x63, 0x6, 0x6}, {0x6474e551, 0x9, 0x3a, 0x200, 0xfffffffa, 0x4, 0xbf, 0xd2a2}]}, 0x78) (async)
close(r2)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x40, 0x4) (rerun: 32)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000001240)='{', 0x1}], 0x1)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x4, 0x0, 0x52424752, 0x6, 0x4, 0x0, 0xa, 0x6, 0x0, 0x4, 0x1, 0x5}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x14, 0xbf, "e48a534c520985777cb5727e517cf61c5dc4fad6aaf1a6b4783862ec5ac84ceeb0f2661f52b24264bb04230015ef2cf6cc4437de9791341e36240e9861c65c6fd141f94fb9480437ee36b473ff8a0612e0252e1eb703f93b5103276f984f35f170e551f8ba46b36131ffd5d4bf12cc1da4419b9bc7a34535d792fb4277eb36af105212b27c56d647b49998aefa150e5340b4ce6caa44e97306a4eb3f0cb0db30bba79598c88434c481cd74275b023f83a11945754519d9f090f1fd9b2733fa"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

1m11.588030248s ago: executing program 2 (id=604):
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000400000000000000000100000024000180060005004e23006c350001000a00000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

1m11.45974176s ago: executing program 2 (id=605):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='auto', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='on', 0x2)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0b062dbd70000000000030000000050035000700000005003300030000000a0001007770616e30000000"], 0x30}}, 0x40)

1m11.223023701s ago: executing program 2 (id=606):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110035e159808fd0704003e59010203010902120001090360090904ca0100ff23c101d9083fc8b0165933746437be28"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

1m10.936422262s ago: executing program 33 (id=606):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110035e159808fd0704003e59010203010902120001090360090904ca0100ff23c101d9083fc8b0165933746437be28"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

1m7.869961411s ago: executing program 34 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x1, 0x100000003, 0x0, 0x7c, 0x100000, 0xf, 0x2004c8, 0x7fffffd, 0x0, 0x0, 0x7, 0x0, 0xd0, 0xf279, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010000000004000000000200"], 0x1c}}, 0x0) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc2, 0x1, {<r4=>0x0}, {0xee01}, 0x4, 0x8}) (rerun: 32)
r5 = socket(0x18, 0x6, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000400)) (async)
r6 = syz_pidfd_open(r4, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r6, 0x40106e80, &(0x7f0000000000)={0x6}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

49.397709945s ago: executing program 5 (id=645):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x88, 0x3}}}}}]}}]}}, 0x0) (async)
r4 = socket(0x2, 0x3, 0xff)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x101002)
ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000100)={0x3, 0x200, 0x7fff, 0x7, 0x1, 0x8})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x4, 0x400, 0x800, 0x400, 0x8000001000000000, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x1ff, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)

47.727986787s ago: executing program 5 (id=650):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x3a0})
mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x5, 0x2012, r0, 0x0)

47.614954955s ago: executing program 5 (id=651):
r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0)
ftruncate(r0, 0x6400000)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0)
ftruncate(r2, 0x6400000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300), 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x101081, 0x0)
write(r5, &(0x7f0000000500)="3002", 0x2)
r6 = openat(r3, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x113401, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
syz_usb_control_io$hid(r7, 0x0, 0x0)
write(r6, &(0x7f0000000580)='1\x00', 0x2)
r8 = openat(r4, 0x0, 0x1, 0x40)
write(r8, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000800)='readonly', 0x8)

45.647855646s ago: executing program 5 (id=656):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

45.586332043s ago: executing program 5 (id=657):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000000)={0x5, 0x5, 0x20000038, 0x1, 'syz0\x00', 0x6})
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020)

45.365886947s ago: executing program 5 (id=658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f0000010000000000000000000000000000000000000000000000000000000000000200"/128, 0x80)

44.767996043s ago: executing program 35 (id=658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f0000010000000000000000000000000000000000000000000000000000000000000200"/128, 0x80)

37.409138413s ago: executing program 0 (id=676):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="020000007f000001000000000000000000000000000000000000000000000000000000000000000200"/128, 0x80)

37.036573763s ago: executing program 0 (id=678):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1})
write(r0, &(0x7f0000001840), 0x0)
close(0x3)

36.707783229s ago: executing program 0 (id=680):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x8c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

35.935886559s ago: executing program 0 (id=683):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r0, &(0x7f0000000600)='dir .', 0x5) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000000201020000000000000000000000030a000600512e393331000000060007400000000038000a800108000000001e0101060003400001000006000340000000000c00028005000100"/96], 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0xd0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090065bd70f201dcdf250600000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async)
chdir(&(0x7f0000000100)='./file0\x00')
write(r0, &(0x7f0000000700)='bind', 0x4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0}) (rerun: 32)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x19, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='-bond0', 0x6)

35.100197563s ago: executing program 0 (id=684):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f00000001c0)={0xd4, 0x0, 0x2})
r2 = socket(0x28, 0x5, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
setns(r3, 0x10000000)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
capset(&(0x7f00000002c0)={0x20080522, r5}, &(0x7f0000000300)={0xff, 0x10000, 0x1, 0x6, 0x4, 0x3})
r6 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x10, 0xc, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r7], 0xfe33)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x8b)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})
ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f00000000c0)={'veth0_to_team\x00', {0x2, 0x0, @dev}})
timerfd_create(0x9, 0x800)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020)
r9 = fsopen(&(0x7f0000000280)='devpts\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x8, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

33.679788424s ago: executing program 0 (id=686):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000011c0)='./file0/../file0/file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r1, 0x4b49, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b5f090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006e090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2)
r3 = socket(0x10, 0x80002, 0x2)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='-', @ANYRESDEC=r6], 0x27)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001140)={<r7=>r1, &(0x7f0000001040)='\x00', 0x43, &(0x7f0000001080)={@align=0x4, {0x0, 0xfffd, 0x5, 0x10}}, 0x3af8, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0xe44})
write(r7, &(0x7f0000001180)="aca7225567e5dc3b3d501b0925369854ff93c5946c74640dd2beeebca21b92bfa10a3ebc12ded8f4098743f5520deb4f5d48657807286de946", 0x39)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x40, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0xc, 0x6, "d65839", 0x0, 0x2c, 0xff, @rand_addr=' \x01\x00', @loopback, [], "e78a6fc261380536"}}}}}}, 0x76)
sendto$inet(r3, &(0x7f0000000000)="c9", 0x1, 0x4080, 0x0, 0x0)

32.965759839s ago: executing program 36 (id=686):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000011c0)='./file0/../file0/file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r1, 0x4b49, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b5f090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006e090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2)
r3 = socket(0x10, 0x80002, 0x2)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='-', @ANYRESDEC=r6], 0x27)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001140)={<r7=>r1, &(0x7f0000001040)='\x00', 0x43, &(0x7f0000001080)={@align=0x4, {0x0, 0xfffd, 0x5, 0x10}}, 0x3af8, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0xe44})
write(r7, &(0x7f0000001180)="aca7225567e5dc3b3d501b0925369854ff93c5946c74640dd2beeebca21b92bfa10a3ebc12ded8f4098743f5520deb4f5d48657807286de946", 0x39)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x40, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0xc, 0x6, "d65839", 0x0, 0x2c, 0xff, @rand_addr=' \x01\x00', @loopback, [], "e78a6fc261380536"}}}}}}, 0x76)
sendto$inet(r3, &(0x7f0000000000)="c9", 0x1, 0x4080, 0x0, 0x0)

6.931051523s ago: executing program 6 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)

6.279994322s ago: executing program 3 (id=795):
r0 = socket$inet6(0xa, 0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)

6.279794561s ago: executing program 6 (id=796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098", 0x38}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a", 0x1b}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f00000000c0)=""/97, 0x61}], 0x2}, 0x1)

6.070907061s ago: executing program 6 (id=797):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)

5.79600749s ago: executing program 3 (id=799):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x28, 0x7, '.\x00'}})

3.920227081s ago: executing program 7 (id=801):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x14)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xe84c0, 0x83)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000040)=0x2b)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x10000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

3.823957801s ago: executing program 6 (id=802):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x14e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100c010, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './debug'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})

3.587807813s ago: executing program 3 (id=804):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0xfc}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}, 0x1b, 0x7}, 0x0)

3.456055176s ago: executing program 6 (id=805):
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r4, 0x4, 0x42000)
read$FUSE(r4, &(0x7f0000000d00)={0x2020}, 0x2020)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r7 = fanotify_init(0xf00, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)

2.1947266s ago: executing program 3 (id=807):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x0, 0x0, 0x0, 0x0, 0x8}})

2.044076315s ago: executing program 7 (id=808):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x86e, 0x1, 0x2800, 0xd59f7f, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x1ff, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})

2.04383228s ago: executing program 8 (id=809):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
socket(0x23, 0x2, 0x7)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

1.572805589s ago: executing program 7 (id=810):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000080)="f4ae", 0x2, 0xe3}])
write(r0, &(0x7f0000000300)="b0", 0x1)

1.429399223s ago: executing program 3 (id=811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, 0x0, 0x300)

1.307404245s ago: executing program 6 (id=812):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05})
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0)
mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x2, 0x0)

1.302695139s ago: executing program 8 (id=813):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000240)={0x0, 0x1, 0x8000000000000000, 0x4000418da845})

1.083385607s ago: executing program 7 (id=814):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x7c, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x7c}}, 0x0)

1.008025676s ago: executing program 8 (id=815):
close(0x3)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendfile(r6, r5, 0x0, 0x100000002)

937.665114ms ago: executing program 3 (id=816):
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

811.491409ms ago: executing program 7 (id=817):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c0002"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

587.969383ms ago: executing program 8 (id=818):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4620, @empty}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x50, 0x60, 0x0, 0x0)

566.826543ms ago: executing program 7 (id=819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b5ffeb963c78632", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x22004000)

329.564801ms ago: executing program 8 (id=820):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r1, 0x1, 0x204}, 0x8)

0s ago: executing program 8 (id=821):
ftruncate(0xffffffffffffffff, 0x100000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x44444', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='1\n', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.268600][ T5726] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  203.268625][ T5726] usb 3-1: Product: syz
[  203.268635][ T5726] usb 3-1: Manufacturer: syz
[  203.268646][ T5726] usb 3-1: SerialNumber: syz
[  203.278268][ T7702] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  203.293745][ T7709] ieee802154 phy0 wpan0: encryption failed: -22
[  203.297153][ T7709] rust_binder: 7706:7709 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found
[  203.297298][ T7709] rust_binder: Write failure EINVAL in pid:462
[  203.359671][ T5726] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46
[  203.481905][   T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  203.489764][  T987] usb 3-1: USB disconnect, device number 55
[  203.515356][  T987] appletouch 3-1:1.0: input: appletouch disconnected
[  203.591241][   T30] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  203.641170][   T25] usb 5-1: Using ep0 maxpacket: 8
[  203.641735][   T25] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  203.642782][   T25] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  203.642801][   T25] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  203.642815][   T25] usb 5-1: config 135 has no interface number 0
[  203.642843][   T25] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  203.644760][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.644775][   T25] usb 5-1: Product: syz
[  203.644784][   T25] usb 5-1: Manufacturer: syz
[  203.644794][   T25] usb 5-1: SerialNumber: syz
[  203.655159][   T25] uvcvideo 5-1:135.230: Found Unit with invalid ID 0
[  203.655473][   T25] uvcvideo 5-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  203.655551][   T25] uvcvideo 5-1:135.230: No valid video chain found.
[  203.761192][   T30] usb 4-1: Using ep0 maxpacket: 16
[  203.763047][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.763104][   T30] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  203.763945][   T30] usb 4-1: config 4 has an invalid interface number: 127 but max is 0
[  203.763962][   T30] usb 4-1: config 4 has no interface number 0
[  203.763982][   T30] usb 4-1: config 4 interface 127 has no altsetting 0
[  203.764403][   T30] usb 4-1: language id specifier not provided by device, defaulting to English
[  203.768030][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.768057][   T30] usb 4-1: Product: syz
[  203.768072][   T30] usb 4-1: SerialNumber: syz
[  203.852115][ T7708] x_tables: duplicate underflow at hook 1
[  204.072497][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'.
[  204.074390][ T7715] Invalid argument reading file caps for ./file0
[  204.248701][ T7717] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  204.489268][ T7726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  204.738554][ T7733] kvm [7732]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  204.738736][ T7733] kvm [7732]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  204.921042][   T25] usb 1-1: USB disconnect, device number 65
[  205.261217][ T5624] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  205.401292][   T25] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  205.421222][ T5624] usb 3-1: Using ep0 maxpacket: 32
[  205.422322][ T5624] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  205.423315][ T5624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34030, setting to 1024
[  205.423337][ T5624] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.425099][ T5624] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  205.425116][ T5624] usb 3-1: Product: syz
[  205.425125][ T5624] usb 3-1: Manufacturer: syz
[  205.425135][ T5624] usb 3-1: SerialNumber: syz
[  205.429341][ T7743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  205.462240][ T5624] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input47
[  205.554289][   T25] usb 1-1: device descriptor read/64, error -71
[  205.639138][  T987] usb 3-1: USB disconnect, device number 56
[  205.658936][  T987] appletouch 3-1:1.0: input: appletouch disconnected
[  205.811278][   T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  205.941209][   T25] usb 1-1: device descriptor read/64, error -71
[  206.051684][   T25] usb usb1-port1: attempt power cycle
[  206.255816][    T9] usb 5-1: USB disconnect, device number 35
[  206.322602][   T30] usb 4-1: USB disconnect, device number 40
[  206.401631][   T25] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  206.423824][   T25] usb 1-1: device descriptor read/8, error -71
[  206.661235][   T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  206.671766][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  206.688030][   T25] usb 1-1: device descriptor read/8, error -71
[  206.801481][   T25] usb usb1-port1: unable to enumerate USB device
[  206.823610][    T9] usb 5-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  206.824804][    T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 33, changing to 9
[  206.824837][    T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  206.824865][    T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.824893][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.824937][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.830246][    T9] usb 5-1: config 0 descriptor??
[  206.832011][ T7750] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  206.916055][ T1402] IPVS: starting estimator thread 0...
[  207.011281][ T7765] IPVS: using max 29 ests per chain, 69600 per kthread
[  207.242064][    T9] hid_parser_main: 1228 callbacks suppressed
[  207.242091][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242122][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242149][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242186][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242213][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242240][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242265][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242292][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242318][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.242345][    T9] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0
[  207.246588][    T9] viewsonic 0003:0543:E621.0010: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.4-1/input0
[  207.423408][   T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  207.442983][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.443596][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.581244][   T25] usb 4-1: Using ep0 maxpacket: 32
[  207.582766][   T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  207.584065][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34030, setting to 1024
[  207.584089][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.586104][   T25] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  207.586123][   T25] usb 4-1: Product: syz
[  207.586134][   T25] usb 4-1: Manufacturer: syz
[  207.586144][   T25] usb 4-1: SerialNumber: syz
[  207.589357][ T7769] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  207.646538][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.653828][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.665080][   T31] audit: type=1326 audit(1789781395.612:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc18319e159 code=0x0
[  207.706789][   T25] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input48
[  207.798027][    T9] usb 4-1: USB disconnect, device number 41
[  207.818375][    T9] appletouch 4-1:1.0: input: appletouch disconnected
[  207.828989][   T52] Bluetooth: hci1: status 0x6c
[  207.829015][   T52] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  207.871287][  T987] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  208.021970][  T987] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  208.023128][  T987] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  208.023151][  T987] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  208.023167][  T987] usb 3-1: config 0 interface 0 has no altsetting 0
[  208.024911][  T987] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  208.024928][  T987] usb 3-1: Product: syz
[  208.024938][  T987] usb 3-1: Manufacturer: syz
[  208.024949][  T987] usb 3-1: SerialNumber: syz
[  208.027465][  T987] usb 3-1: config 0 descriptor??
[  208.044321][  T987] usb 3-1: selecting invalid altsetting 0
[  208.278568][ T7782] syzkaller1: entered allmulticast mode
[  208.280850][ T7782] syzkaller1: entered promiscuous mode
[  208.450892][ T7786] mtrr: base(0x4527651d000) is not aligned on a size(0xaa4099f8000) boundary
[  208.985664][ T7808] netlink: 'syz.0.525': attribute type 21 has an invalid length.
[  208.985690][ T7808] netlink: 100 bytes leftover after parsing attributes in process `syz.0.525'.
[  209.247761][ T7819] syzkaller1: entered promiscuous mode
[  209.247778][ T7819] syzkaller1: entered allmulticast mode
[  209.340582][    T9] usb 5-1: USB disconnect, device number 36
[  209.341295][  T987] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  209.511520][  T987] usb 4-1: Using ep0 maxpacket: 32
[  209.512261][  T987] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  209.513288][  T987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34030, setting to 1024
[  209.513318][  T987] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.515341][  T987] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  209.515364][  T987] usb 4-1: Product: syz
[  209.515378][  T987] usb 4-1: Manufacturer: syz
[  209.515395][  T987] usb 4-1: SerialNumber: syz
[  209.518422][ T7814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  209.532037][  T987] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input49
[  209.728107][    C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  209.751917][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  209.754292][ T5628] usb 4-1: USB disconnect, device number 42
[  209.754314][    C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  209.790396][ T5628] appletouch 4-1:1.0: input: appletouch disconnected
[  209.832830][ T7779] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  209.901178][    T9] usb 5-1: Using ep0 maxpacket: 8
[  209.902052][    T9] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  209.903238][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.903262][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 19
[  209.906039][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.906064][    T9] usb 5-1: Product: syz
[  209.906079][    T9] usb 5-1: Manufacturer: syz
[  209.906093][    T9] usb 5-1: SerialNumber: syz
[  209.931795][  T987] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  210.081937][  T987] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  210.083277][  T987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.085192][  T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  210.085217][  T987] usb 1-1: Product: syz
[  210.085238][  T987] usb 1-1: Manufacturer: syz
[  210.109253][  T987] usb 1-1: selecting invalid altsetting 1
[  210.109973][  T987] dvb_ttusb_budget: ttusb_init_controller: error
[  210.110067][  T987] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  210.158130][   T31] audit: type=1400 audit(1789781398.102:9): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=7822 comm="syz.4.529" name="p" offset=92
[  210.214640][  T987] DVB: Unable to find symbol cx22700_attach()
[  210.265598][  T987] DVB: Unable to find symbol tda10046_attach()
[  210.265611][  T987] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  210.309982][ T7825] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  210.327449][   T25] usb 1-1: USB disconnect, device number 70
[  210.420556][ T7831] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  210.420734][ T7831] exFAT-fs (nullb0): invalid boot record signature
[  210.420744][ T7831] exFAT-fs (nullb0): failed to read boot sector
[  210.420751][ T7831] exFAT-fs (nullb0): failed to recognize exfat type
[  210.455057][ T7831] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  210.455248][ T7831] exFAT-fs (nullb0): invalid boot record signature
[  210.455257][ T7831] exFAT-fs (nullb0): failed to read boot sector
[  210.455264][ T7831] exFAT-fs (nullb0): failed to recognize exfat type
[  210.545081][ T7837] loop9: detected capacity change from 0 to 7
[  210.582725][ T7837] Dev loop9: unable to read RDB block 7
[  210.582764][ T7837]  loop9: unable to read partition table
[  210.582918][ T7837] loop9: partition table beyond EOD, truncated
[  210.582956][ T7837] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  210.586285][    C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  210.586511][    C0] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  210.687836][    T9] usb 5-1: unit 3 not found!
[  210.790851][    T9] usb 5-1: USB disconnect, device number 37
[  210.836783][ T5776] usb 3-1: USB disconnect, device number 57
[  210.876278][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  211.057207][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.176909][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.177091][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.177271][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.177435][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.177594][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.179777][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.185525][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.189651][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'.
[  211.490889][ T7861] nvme_fcloop: unknown parameter or missing value 'ww'
[  211.541400][   T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  211.551535][ T5776] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  211.692682][   T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  211.693873][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.693925][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  211.693960][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  211.694010][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.723737][ T5776] usb 1-1: Using ep0 maxpacket: 32
[  211.724318][    T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  211.727927][ T5776] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  211.732631][   T30] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  211.736644][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34030, setting to 1024
[  211.736713][ T5776] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.748906][ T5776] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  211.748989][ T5776] usb 1-1: Product: syz
[  211.749029][ T5776] usb 1-1: Manufacturer: syz
[  211.749069][ T5776] usb 1-1: SerialNumber: syz
[  211.762077][ T7858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  211.841035][ T5776] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input50
[  211.891181][   T30] usb 3-1: device descriptor read/64, error -71
[  211.898137][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  211.898188][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  211.900604][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.900629][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  211.900684][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 7
[  211.900711][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 9272, setting to 1024
[  211.922732][    T9] usb 4-1: string descriptor 0 read error: -22
[  211.923061][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.015570][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  212.037901][    C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  212.039372][ T5776] usb 1-1: USB disconnect, device number 71
[  212.095008][ T5776] appletouch 1-1:1.0: input: appletouch disconnected
[  212.131206][   T30] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  212.211566][ T7856] kvm [7855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  212.261225][   T30] usb 3-1: device descriptor read/64, error -71
[  212.371847][   T30] usb usb3-port1: attempt power cycle
[  212.399680][   T25] cxacru 5-1:1.0: send of cm 0x91 failed (-71)
[  212.399745][   T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  212.399760][   T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  212.435238][   T25] cxacru 5-1:1.0: probe with driver cxacru failed with error -71
[  212.440314][   T25] usb 5-1: USB disconnect, device number 38
[  212.545290][    T9] usb 4-1: USB disconnect, device number 43
[  212.562252][ T5629] Bluetooth: hci4: command 0x0405 tx timeout
[  212.721174][   T30] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  212.741813][   T30] usb 3-1: device descriptor read/8, error -71
[  212.861343][ T5776] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  212.982240][   T30] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  213.003576][   T30] usb 3-1: device descriptor read/8, error -71
[  213.018188][ T5776] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  213.019314][ T5776] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  213.019347][ T5776] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  213.020401][ T5776] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  213.020443][ T5776] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  213.074554][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.074585][ T5776] usb 1-1: Product: syz
[  213.074600][ T5776] usb 1-1: Manufacturer: syz
[  213.074615][ T5776] usb 1-1: SerialNumber: syz
[  213.106839][ T5776] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  213.113838][   T30] usb usb3-port1: unable to enumerate USB device
[  213.131989][ T5776] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  213.138998][ T5776] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  213.307305][ T7872] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  213.511256][   T30] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  213.661371][   T30] usb 4-1: Using ep0 maxpacket: 32
[  213.661995][   T30] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  213.663289][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.663319][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.663358][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.668727][   T30] usb 4-1: config 0 descriptor??
[  214.118752][   T30] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  214.230887][ T7885] comedi comedi1: dt2814: I/O base address not correctly aligned
[  214.337979][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.338491][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.901248][ T5776] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  215.051224][ T5776] usb 3-1: Using ep0 maxpacket: 32
[  215.052716][ T5776] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  215.053809][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34030, setting to 1024
[  215.053838][ T5776] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  215.055741][ T5776] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  215.055760][ T5776] usb 3-1: Product: syz
[  215.055775][ T5776] usb 3-1: Manufacturer: syz
[  215.055786][ T5776] usb 3-1: SerialNumber: syz
[  215.059046][ T7896] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  215.098686][ T5776] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input51
[  215.265901][ T5712] usb 3-1: USB disconnect, device number 62
[  215.287103][ T5712] appletouch 3-1:1.0: input: appletouch disconnected
[  215.512314][   T30] usb 4-1: reset high-speed USB device number 44 using dummy_hcd
[  215.645637][ T5776] usb 1-1: USB disconnect, device number 72
[  215.670328][ T5776] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  215.687249][ T5776] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  215.707318][ T5776] ti_usb_3410_5052 1-1:2.0: device disconnected
[  215.766580][ T7904] pvfs2: Unknown parameter 'lowerdir'
[  215.784385][ T7904] netlink: 'syz.0.552': attribute type 15 has an invalid length.
[  215.784407][ T7904] __nla_validate_parse: 24 callbacks suppressed
[  215.784420][ T7904] netlink: 156 bytes leftover after parsing attributes in process `syz.0.552'.
[  216.133167][ T5624] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  216.229403][ T7923] usb usb9: usbfs: process 7923 (syz.0.557) did not claim interface 0 before use
[  216.281505][ T5624] usb 3-1: Using ep0 maxpacket: 32
[  216.283850][ T5624] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff4c, bcdDevice=3e.e5
[  216.284986][ T5624] usb 3-1: config 8 has an invalid interface number: 72 but max is 1
[  216.285014][ T5624] usb 3-1: config 8 has an invalid interface number: 204 but max is 1
[  216.285037][ T5624] usb 3-1: config 8 has an invalid interface number: 3 but max is 1
[  216.285057][ T5624] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 2
[  216.285087][ T5624] usb 3-1: config 8 has no interface number 0
[  216.285104][ T5624] usb 3-1: config 8 has no interface number 1
[  216.285121][ T5624] usb 3-1: config 8 has no interface number 2
[  216.285200][ T5624] usb 3-1: config 8 interface 72 altsetting 129 endpoint 0xD has invalid maxpacket 1040, setting to 64
[  216.285230][ T5624] usb 3-1: config 8 interface 72 altsetting 129 has an invalid descriptor for endpoint zero, skipping
[  216.285256][ T5624] usb 3-1: config 8 interface 72 altsetting 129 has a duplicate endpoint with address 0x7, skipping
[  216.285280][ T5624] usb 3-1: config 8 interface 72 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  216.285309][ T5624] usb 3-1: config 8 interface 72 altsetting 129 endpoint 0x2 has an invalid bInterval 129, changing to 7
[  216.285339][ T5624] usb 3-1: config 8 interface 72 altsetting 129 has a duplicate endpoint with address 0xB, skipping
[  216.285365][ T5624] usb 3-1: config 8 interface 72 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 15
[  216.285394][ T5624] usb 3-1: too many endpoints for config 8 interface 204 altsetting 12: 163, using maximum allowed: 30
[  216.285431][ T5624] usb 3-1: config 8 interface 204 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  216.285454][ T5624] usb 3-1: config 8 interface 204 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  216.285476][ T5624] usb 3-1: config 8 interface 204 altsetting 12 has a duplicate endpoint with address 0x4, skipping
[  216.285503][ T5624] usb 3-1: config 8 interface 204 altsetting 12 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  216.285550][ T5624] usb 3-1: config 8 interface 204 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 163
[  216.285593][ T5624] usb 3-1: config 8 interface 3 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  216.285616][ T5624] usb 3-1: config 8 interface 72 has no altsetting 0
[  216.285636][ T5624] usb 3-1: config 8 interface 204 has no altsetting 0
[  216.285655][ T5624] usb 3-1: config 8 interface 3 has no altsetting 0
[  216.290540][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.290566][ T5624] usb 3-1: Product: ж
[  216.290582][ T5624] usb 3-1: Manufacturer: Ñ—
[  216.290597][ T5624] usb 3-1: SerialNumber: syz
[  216.567283][   T25] usb 4-1: USB disconnect, device number 44
[  216.877498][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.880484][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.914178][ T5624] option 3-1:8.72: GSM modem (1-port) converter detected
[  216.949881][ T5624] usb 3-1: USB disconnect, device number 63
[  216.977700][ T5624] option 3-1:8.72: device disconnected
[  217.027638][   T30] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  217.171178][   T30] usb 1-1: Using ep0 maxpacket: 16
[  217.171743][   T30] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  217.172941][   T30] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.172974][   T30] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.173012][   T30] usb 1-1: config 0 interface 0 has no altsetting 0
[  217.173035][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.174968][   T30] usb 1-1: config 0 descriptor??
[  217.371218][  T987] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  217.522004][  T987] usb 4-1: Using ep0 maxpacket: 32
[  217.523414][  T987] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  217.524487][  T987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.524520][  T987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.524545][  T987] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.530208][  T987] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  217.530234][  T987] usb 4-1: Product: syz
[  217.530249][  T987] usb 4-1: Manufacturer: syz
[  217.530264][  T987] usb 4-1: SerialNumber: syz
[  217.622757][  T987] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input52
[  217.820031][   T30] usbhid 1-1:0.0: can't add hid device: -71
[  217.820158][   T30] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  217.844305][   T30] usb 1-1: USB disconnect, device number 73
[  217.847795][   T25] usb 4-1: USB disconnect, device number 45
[  217.889133][   T25] appletouch 4-1:1.0: input: appletouch disconnected
[  218.084707][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.566'.
[  218.596663][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  218.618285][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  218.681160][   T30] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  218.832178][   T30] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  218.833307][   T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  218.833383][   T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  218.835386][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.835424][   T30] usb 4-1: Product: syz
[  218.835439][   T30] usb 4-1: Manufacturer: syz
[  218.835454][   T30] usb 4-1: SerialNumber: syz
[  219.102045][   T30] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  219.526023][   T25] usb 4-1: USB disconnect, device number 46
[  219.543054][   T25] usblp0: removed
[  219.582447][ T7982] FAULT_INJECTION: forcing a failure.
[  219.582447][ T7982] name failslab, interval 1, probability 0, space 0, times 0
[  219.582484][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.2.576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  219.582516][ T7982] Tainted: [L]=SOFTLOCKUP
[  219.582525][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.582539][ T7982] Call Trace:
[  219.582549][ T7982]  <TASK>
[  219.582558][ T7982]  dump_stack_lvl+0xe8/0x150
[  219.582594][ T7982]  should_fail_ex+0x3eb/0x540
[  219.582627][ T7982]  should_failslab+0xa8/0x100
[  219.582654][ T7982]  __kmalloc_noprof+0xf9/0x710
[  219.582690][ T7982]  ? tomoyo_encode+0x2ad/0x570
[  219.582729][ T7982]  ? tomoyo_encode+0x2ad/0x570
[  219.582766][ T7982]  tomoyo_encode+0x2ad/0x570
[  219.582802][ T7982]  tomoyo_realpath_from_path+0x5fa/0x640
[  219.582847][ T7982]  tomoyo_mount_permission+0x3e9/0x9e0
[  219.582875][ T7982]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  219.582909][ T7982]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  219.582936][ T7982]  ? kasan_save_track+0x4f/0x80
[  219.583023][ T7982]  ? kasan_quarantine_put+0xbb/0x1f0
[  219.583061][ T7982]  security_sb_mount+0xe4/0x320
[  219.583094][ T7982]  path_mount+0xbc/0x1050
[  219.583127][ T7982]  ? user_path_at+0xd4/0x160
[  219.583161][ T7982]  __se_sys_mount+0x31d/0x420
[  219.583196][ T7982]  ? __pfx___se_sys_mount+0x10/0x10
[  219.583232][ T7982]  ? __x64_sys_mount+0x20/0xc0
[  219.583263][ T7982]  do_syscall_64+0x166/0x520
[  219.583285][ T7982]  ? trace_irq_disable+0x3b/0x140
[  219.583320][ T7982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.583344][ T7982]  ? clear_bhb_loop+0x70/0xc0
[  219.583374][ T7982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.583398][ T7982] RIP: 0033:0x7fc18319e159
[  219.583419][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.583440][ T7982] RSP: 002b:00007fc183fcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  219.583470][ T7982] RAX: ffffffffffffffda RBX: 00007fc183425fa0 RCX: 00007fc18319e159
[  219.583488][ T7982] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[  219.583504][ T7982] RBP: 00007fc18323506b R08: 0000000000000000 R09: 0000000000000000
[  219.583518][ T7982] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000
[  219.583533][ T7982] R13: 00007fc183426038 R14: 00007fc183425fa0 R15: 00007fff393904e8
[  219.583568][ T7982]  </TASK>
[  219.583603][ T7982] ERROR: Out of memory at tomoyo_realpath_from_path.
[  219.944337][ T7986] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  219.944364][ T7986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  219.944677][ T7986] vhci_hcd vhci_hcd.0: Device attached
[  219.980308][ T7987] vhci_hcd: connection closed
[  219.983862][   T50] vhci_hcd vhci_hcd.2: stop threads
[  219.983881][   T50] vhci_hcd vhci_hcd.2: release socket
[  219.983895][   T50] vhci_hcd vhci_hcd.2: disconnect device
[  220.591191][ T5624] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  220.742045][ T5624] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  220.744087][ T5624] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  220.744121][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  220.744141][ T5624] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.744159][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  220.744177][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  220.745418][ T5624] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  220.745464][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  220.745484][ T5624] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.745506][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  220.745525][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  220.746498][ T5624] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  220.746544][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  220.746584][ T5624] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.746611][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  220.746639][ T5624] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  220.749837][ T5624] usb 4-1: string descriptor 0 read error: -22
[  220.750038][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.827023][ T5624] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  221.785867][ T8039] loop5: detected capacity change from 0 to 4095
[  221.817692][ T5630] Buffer I/O error on dev loop5, logical block 511, async page read
[  222.143295][   T52] Bluetooth: hci1: connection err: -111
[  222.144717][   T52] Bluetooth: hci1: SCO packet for unknown connection handle 1
[  222.211188][    T9] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  222.371921][    T9] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  222.373438][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  222.373470][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.373493][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  222.373525][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.379332][    T9] usb 1-1: config 0 descriptor??
[  222.586861][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.587378][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.735263][ T8053] futex_wake_op: syz.2.592 tries to shift op by 144; fix this program
[  222.835859][    T9] hid_parser_main: 14 callbacks suppressed
[  222.835885][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.835916][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.835941][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.835967][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.835991][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.836016][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.836041][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.836066][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.836091][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.836115][    T9] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0
[  222.939875][    T9] waterforce 0003:1044:7A4D.0012: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0
[  223.002437][    T9] waterforce 0003:1044:7A4D.0012: fw version request failed with -38
[  223.033931][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.034391][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.087079][   T30] usb 1-1: USB disconnect, device number 74
[  223.091699][ T8054] fido_id[8054]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1044:7A4D.0012/report_descriptor': No such device
[  223.158794][ T5624] usb 4-1: USB disconnect, device number 47
[  223.472899][   T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  223.641921][   T25] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  223.643252][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.643878][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'.
[  223.650203][   T25] usb 3-1: config 0 descriptor??
[  223.699614][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.714769][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.881355][    T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  224.011178][    T9] usb 1-1: device descriptor read/64, error -71
[  224.071205][  T987] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  224.221849][  T987] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[  224.223201][  T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.223253][  T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.227022][  T987] usb 4-1: config 0 descriptor??
[  224.264418][    T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  224.312159][   T25] usb 3-1: Cannot set autoneg
[  224.312346][   T25] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  224.411226][    T9] usb 1-1: device descriptor read/64, error -71
[  224.521532][    T9] usb usb1-port1: attempt power cycle
[  224.642311][  T987] speedlink 0003:1AE7:9001.0013: hidraw0: USB HID v0.00 Joystick [HID 1ae7:9001] on usb-dummy_hcd.3-1/input0
[  224.836761][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.837164][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.838685][ T5712] usb 4-1: USB disconnect, device number 48
[  224.864133][    T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  224.882001][    T9] usb 1-1: device descriptor read/8, error -71
[  225.122108][    T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  225.141866][    T9] usb 1-1: device descriptor read/8, error -71
[  225.252088][    T9] usb usb1-port1: unable to enumerate USB device
[  225.732876][ T8093] kvm: apic: phys broadcast and lowest prio
[  226.251014][   T25] usb 3-1: USB disconnect, device number 64
[  226.698498][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.866716][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.955266][ T8115] comedi comedi2: comedi_config --init_data is deprecated
[  226.958035][ T8115] netlink: 'syz.0.608': attribute type 11 has an invalid length.
[  226.996532][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.017128][ T8113] input: syz1 as /devices/virtual/input/input54
[  227.135303][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.140700][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.143370][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.146288][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.166902][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.188995][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.295864][    T9] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  227.350443][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'.
[  227.373222][ T8130] veth1_macvtap: left promiscuous mode
[  227.441960][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0213, bcdDevice= 0.00
[  227.456580][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  227.456630][    T9] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  227.456659][    T9] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.456683][    T9] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  227.456713][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  227.456748][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.543932][    T9] usb 1-1: config 0 descriptor??
[  227.567841][ T8129] lo speed is unknown, defaulting to 1000
[  227.657721][ T1116] bridge0: port 3(team0) entered disabled state
[  227.676147][ T1116] bridge_slave_1: left allmulticast mode
[  227.676173][ T1116] bridge_slave_1: left promiscuous mode
[  227.676371][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.707244][ T1116] bridge_slave_0: left allmulticast mode
[  227.707286][ T1116] bridge_slave_0: left promiscuous mode
[  227.708765][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.755031][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  227.755153][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  227.799948][    T9] usb 1-1: USB disconnect, device number 79
[  228.154469][ T1116] bond0 (unregistering): Released all slaves
[  228.265436][ T1116] tipc: Disabling bearer <udp:syz0>
[  228.265948][ T1116] tipc: Left network mode
[  228.565905][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  228.761457][ T8123] lo speed is unknown, defaulting to 1000
[  229.272113][   T52] Bluetooth: hci1: command tx timeout
[  229.552147][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  229.642784][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6
[  229.711693][    T9] usb 4-1: Using ep0 maxpacket: 32
[  229.712400][    T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  229.713467][    T9] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  229.713510][    T9] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  229.713536][    T9] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  229.713562][    T9] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  229.718185][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.718210][    T9] usb 4-1: Product: syz
[  229.718226][    T9] usb 4-1: Manufacturer: syz
[  229.718241][    T9] usb 4-1: SerialNumber: syz
[  229.827803][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  229.842808][    T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input55
[  229.865803][ T1116] hsr_slave_0: left promiscuous mode
[  229.876945][ T1116] hsr_slave_1: left promiscuous mode
[  229.877860][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.877897][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.909311][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.909335][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.974399][ T1116] veth1_macvtap: left promiscuous mode
[  229.974441][ T1116] veth0_macvtap: left promiscuous mode
[  229.974552][ T1116] veth1_vlan: left promiscuous mode
[  229.974581][ T1116] veth0_vlan: left promiscuous mode
[  230.051166][    T9] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  230.051187][    T9]  (id 0x00)
[  230.092609][ T8187] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  230.301159][    T9] rc_core: IR keymap rc-imon-pad not found
[  230.301178][    T9] Registered IR keymap rc-empty
[  230.301253][    T9] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  230.301271][    T9] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  230.362341][    T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  230.381869][    T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input56
[  230.392147][   T30] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  230.422408][    T9] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:49> initialized
[  230.521148][   T30] usb 1-1: device descriptor read/64, error -71
[  230.522816][ T5624] usb 4-1: USB disconnect, device number 49
[  230.761361][   T30] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  230.776278][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.807690][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.810105][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.825596][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.826409][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.901665][   T30] usb 1-1: device descriptor read/64, error -71
[  231.022199][ T5624] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  231.022724][   T30] usb usb1-port1: attempt power cycle
[  231.175921][ T1116] team_slave_1 (unregistering): left promiscuous mode
[  231.175950][ T1116] team_slave_1 (unregistering): left allmulticast mode
[  231.180316][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  231.183656][ T5624] usb 4-1: Using ep0 maxpacket: 16
[  231.188266][ T5624] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.190851][ T5624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.190920][ T5624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  231.202871][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.202928][ T5624] usb 4-1: Product: syz
[  231.202965][ T5624] usb 4-1: Manufacturer: syz
[  231.203003][ T5624] usb 4-1: SerialNumber: syz
[  231.289056][ T1116] team_slave_0 (unregistering): left promiscuous mode
[  231.289085][ T1116] team_slave_0 (unregistering): left allmulticast mode
[  231.290890][ T5624] usb 4-1: 0:2 : does not exist
[  231.310543][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  231.351281][ T5629] Bluetooth: hci1: command tx timeout
[  231.381765][   T30] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  231.406505][   T30] usb 1-1: device descriptor read/8, error -71
[  231.652768][   T30] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  231.672063][   T30] usb 1-1: device descriptor read/8, error -71
[  231.783842][   T30] usb usb1-port1: unable to enumerate USB device
[  232.122444][ T5624] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  232.168121][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.168359][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.168501][ T8123] bridge_slave_0: entered allmulticast mode
[  232.206070][ T8123] bridge_slave_0: entered promiscuous mode
[  232.224247][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.225391][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.225525][ T8123] bridge_slave_1: entered allmulticast mode
[  232.230684][ T8123] bridge_slave_1: entered promiscuous mode
[  232.371050][ T5624] usb 4-1: USB disconnect, device number 50
[  232.497709][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.520377][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.596116][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.766783][ T8123] team0: Port device team_slave_0 added
[  232.769725][ T8123] team0: Port device team_slave_1 added
[  232.819274][ T8224] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in;
[  232.819274][ T8224]    program syz.3.617 not setting count and/or reply_len properly
[  232.844084][ T8224] rust_binder: 8222: undelivered TRANSACTION_COMPLETE
[  232.870649][  T987] rust_binder: 8222: undelivered transaction 10, process died
[  232.873001][ T5629] Bluetooth: hci3: command tx timeout
[  233.029976][ T1116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.052712][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.052728][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.052751][ T8123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.057687][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.057702][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.057730][ T8123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.381026][ T1116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.426678][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  233.433503][ T5629] Bluetooth: hci1: command tx timeout
[  233.457242][ T8123] hsr_slave_0: entered promiscuous mode
[  233.459962][ T8123] hsr_slave_1: entered promiscuous mode
[  233.460992][ T8123] debugfs: 'hsr0' already exists in 'hsr'
[  233.461013][ T8123] Cannot create hsr debugfs directory
[  233.461412][ T8194] lo speed is unknown, defaulting to 1000
[  233.726282][ T1116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.868711][ T8232] netlink: 80 bytes leftover after parsing attributes in process `syz.0.620'.
[  233.885352][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  234.069835][ T1116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.216800][ T8237] kvm: user requested TSC rate below hardware speed
[  234.820769][ T1116] bridge_slave_1: left allmulticast mode
[  234.820796][ T1116] bridge_slave_1: left promiscuous mode
[  234.820995][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.846392][ T1116] bridge_slave_0: left allmulticast mode
[  234.846417][ T1116] bridge_slave_0: left promiscuous mode
[  234.846635][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.962349][ T5629] Bluetooth: hci3: command tx timeout
[  235.005126][ T5712] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  235.132939][ T5712] usb 1-1: device descriptor read/64, error -71
[  235.179465][ T8258] netlink: NAT attribute has 1 unknown bytes
[  235.179504][ T8258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.367375][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.371576][ T5712] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  235.382802][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.404789][ T1116] bond0 (unregistering): Released all slaves
[  235.434284][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8
[  235.511388][ T5629] Bluetooth: hci1: command tx timeout
[  235.513216][ T5712] usb 1-1: device descriptor read/64, error -71
[  235.633297][ T5712] usb usb1-port1: attempt power cycle
[  235.806699][ T8123] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  235.838795][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  235.870240][ T8123] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  235.885892][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  235.887090][ T8123] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  235.898220][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  235.991430][ T5712] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  235.991841][ T8123] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  235.999260][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  236.022654][ T5712] usb 1-1: device descriptor read/8, error -71
[  236.273676][ T5712] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  236.299295][ T5712] usb 1-1: device descriptor read/8, error -71
[  236.356393][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.395487][ T8123] 8021q: adding VLAN 0 to HW filter on device team0
[  236.403277][ T5712] usb usb1-port1: unable to enumerate USB device
[  236.420378][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.420466][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.450321][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.450422][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.577095][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'.
[  236.660994][ T8279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.850968][ T1116] hsr_slave_0: left promiscuous mode
[  236.858083][ T1116] hsr_slave_1: left promiscuous mode
[  236.859147][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.859167][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.886395][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.886417][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.925994][ T1116] veth1_macvtap: left promiscuous mode
[  236.926034][ T1116] veth0_macvtap: left promiscuous mode
[  236.926139][ T1116] veth1_vlan: left promiscuous mode
[  236.926207][ T1116] veth0_vlan: left promiscuous mode
[  237.031307][ T5629] Bluetooth: hci3: command tx timeout
[  237.358612][ T8296] isofs_fill_super: bread failed, dev=mtdblock0, iso_blknum=64, block=128
[  237.660686][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  237.704821][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  237.856507][ T8307] smpboot: CPU 1 is now offline
[  238.234468][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9
[  238.297254][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.297393][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.297492][ T8194] bridge_slave_0: entered allmulticast mode
[  238.300151][ T8194] bridge_slave_0: entered promiscuous mode
[  238.406511][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.406585][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.406706][ T8194] bridge_slave_1: entered allmulticast mode
[  238.435978][ T8194] bridge_slave_1: entered promiscuous mode
[  238.704294][ T8318] netlink: 292 bytes leftover after parsing attributes in process `syz.3.631'.
[  238.704314][ T8318] netlink: 292 bytes leftover after parsing attributes in process `syz.3.631'.
[  238.759746][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.780290][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.943209][ T8194] team0: Port device team_slave_0 added
[  238.972500][ T8194] team0: Port device team_slave_1 added
[  239.071329][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  239.098539][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.098553][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.098572][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.134529][ T5629] Bluetooth: hci3: command tx timeout
[  239.160239][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.160251][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.160271][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.231991][    T9] usb 4-1: Using ep0 maxpacket: 32
[  239.233749][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  239.233780][    T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  239.234626][    T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  239.234642][    T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  239.234655][    T9] usb 4-1: config 14 has no interface number 0
[  239.234666][    T9] usb 4-1: config 14 has no interface number 1
[  239.234704][    T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  239.234720][    T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  239.234736][    T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  239.234754][    T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  239.234772][    T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  239.234789][    T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  239.234806][    T9] usb 4-1: config 14 interface 57 has no altsetting 0
[  239.234817][    T9] usb 4-1: config 14 interface 228 has no altsetting 0
[  239.240868][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.240886][    T9] usb 4-1: Product: syz
[  239.240897][    T9] usb 4-1: Manufacturer: syz
[  239.240907][    T9] usb 4-1: SerialNumber: syz
[  239.488927][ T8327] jffs2: notice: (8327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  239.629220][ T8194] hsr_slave_0: entered promiscuous mode
[  239.630111][ T8194] hsr_slave_1: entered promiscuous mode
[  239.853136][  T987] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  240.004666][  T987] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40
[  240.006067][  T987] usb 1-1: config 1 interface 0 has no altsetting 0
[  240.038081][  T987] usb 1-1: string descriptor 0 read error: -22
[  240.038192][  T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.485479][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.946881][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10
[  240.993472][ T8194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  241.039445][ T8194] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  241.051926][ T8194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  241.093209][ T8194] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  241.096195][ T8194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  241.129482][ T8194] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  241.145197][ T8194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  241.178420][ T8194] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  241.630068][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.661796][   T31] audit: type=1326 audit(1789781429.602:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.631" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4379e159 code=0x7fc00000
[  241.729977][ T8123] veth0_vlan: entered promiscuous mode
[  241.796936][ T8194] 8021q: adding VLAN 0 to HW filter on device team0
[  241.826574][ T8123] veth1_vlan: entered promiscuous mode
[  241.846800][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.846877][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.903414][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.903501][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.076370][ T8123] veth0_macvtap: entered promiscuous mode
[  242.129442][ T8123] veth1_macvtap: entered promiscuous mode
[  242.159933][    T9] legousbtower 4-1:14.57: interrupt endpoints not found
[  242.230124][    T9] legousbtower 4-1:14.228: get version request failed: -71
[  242.230279][    T9] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71
[  242.288990][    T9] usb 4-1: USB disconnect, device number 51
[  242.378165][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.418824][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.535688][ T1116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.535722][ T1116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.535766][ T1116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.612229][ T1116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.907510][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.907534][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.062623][  T987] usbhid 1-1:1.0: can't add hid device: -71
[  243.062698][  T987] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  243.069101][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.069114][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.114154][  T987] usb 1-1: USB disconnect, device number 88
[  243.244292][    T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  243.392579][    T9] usb 4-1: Using ep0 maxpacket: 8
[  243.394555][    T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  243.396839][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.396855][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.396884][    T9] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  243.396900][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  243.396918][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  243.396945][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.507848][    T9] hub 4-1:1.0: bad descriptor, ignoring hub
[  243.507869][    T9] hub 4-1:1.0: probe with driver hub failed with error -5
[  243.508278][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  243.508289][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  243.508297][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  243.508352][    T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  243.765196][ T8391] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.765222][ T8391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  243.765572][ T8391] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.765588][ T8391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  243.811866][  T987] usb 4-1: USB disconnect, device number 52
[  243.862565][    T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  243.937981][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11
[  244.011688][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  244.013163][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  244.013187][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.013226][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.020383][    T9] usb 1-1: config 0 descriptor??
[  244.538289][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.571893][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.572219][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.612034][    C0] Unknown status report in ack skb
[  244.732448][    T9] wacom 0003:056A:0331.0014: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  244.840592][    T9] usb 1-1: USB disconnect, device number 89
[  245.077736][ T8413] fido_id[8413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  245.181469][ T5705] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  245.342353][ T5705] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  245.375197][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.375216][ T5705] usb 6-1: Product: syz
[  245.375226][ T5705] usb 6-1: Manufacturer: syz
[  245.375235][ T5705] usb 6-1: SerialNumber: syz
[  245.605714][ T8424] openvswitch: netlink: IP tunnel dst address not specified
[  245.610652][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.647530][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.700900][ T5705] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  245.700942][ T5705] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  245.700957][ T5705] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  245.757570][ T5705] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  245.895430][ T8194] veth0_vlan: entered promiscuous mode
[  245.925680][ T8194] veth1_vlan: entered promiscuous mode
[  245.999996][ T8194] veth0_macvtap: entered promiscuous mode
[  246.016659][ T8194] veth1_macvtap: entered promiscuous mode
[  246.063185][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.065345][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.065640][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.124293][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.166880][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.167169][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.191770][ T1116] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.192058][ T1116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.192111][ T1116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.192137][ T1116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.505813][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12
[  246.577127][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.577144][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.708740][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.708756][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.731162][ T5776] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  246.883682][ T5776] usb 4-1: unable to get BOS descriptor or descriptor too short
[  246.883723][ T5776] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  246.888635][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.888654][ T5776] usb 4-1: Product: syz
[  246.888664][ T5776] usb 4-1: Manufacturer: syz
[  246.888675][ T5776] usb 4-1: SerialNumber: syz
[  247.160127][ T5776] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  247.287662][ T8454] sock: sock_set_timeout: `syz.6.614' (pid 8454) tries to set negative timeout
[  247.310805][ T8454] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.614'.
[  247.359225][ T8451] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  247.384872][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.385299][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.428569][ T8441] loop2: detected capacity change from 0 to 2640
[  247.548061][ T8441] Buffer I/O error on dev loop2, logical block 0, lost async page write
[  247.548092][ T8441] Buffer I/O error on dev loop2, logical block 1, lost async page write
[  247.548126][ T8441] Buffer I/O error on dev loop2, logical block 2, lost async page write
[  247.548145][ T8441] Buffer I/O error on dev loop2, logical block 3, lost async page write
[  247.548162][ T8441] Buffer I/O error on dev loop2, logical block 4, lost async page write
[  247.548179][ T8441] Buffer I/O error on dev loop2, logical block 5, lost async page write
[  247.548197][ T8441] Buffer I/O error on dev loop2, logical block 6, lost async page write
[  247.548227][ T8441] Buffer I/O error on dev loop2, logical block 7, lost async page write
[  247.550089][ T8441] Buffer I/O error on dev loop2, logical block 8, lost async page write
[  247.550110][ T8441] Buffer I/O error on dev loop2, logical block 9, lost async page write
[  247.770333][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.770707][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.806241][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.806618][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.870661][ T5776] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  247.925319][ T8459] FAULT_INJECTION: forcing a failure.
[  247.925319][ T8459] name failslab, interval 1, probability 0, space 0, times 0
[  247.925345][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.6.643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  247.925366][ T8459] Tainted: [L]=SOFTLOCKUP
[  247.925372][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.925381][ T8459] Call Trace:
[  247.925388][ T8459]  <TASK>
[  247.925394][ T8459]  dump_stack_lvl+0xe8/0x150
[  247.925420][ T8459]  should_fail_ex+0x3eb/0x540
[  247.925441][ T8459]  should_failslab+0xa8/0x100
[  247.925461][ T8459]  __kmalloc_cache_noprof+0x9e/0x600
[  247.925484][ T8459]  ? __pfx_kobject_init_and_add+0x10/0x10
[  247.925503][ T8459]  ? kobject_uevent_env+0x289/0x9e0
[  247.925522][ T8459]  ? kobject_uevent_env+0x289/0x9e0
[  247.925542][ T8459]  ? __kmalloc_cache_noprof+0x148/0x600
[  247.925567][ T8459]  kobject_uevent_env+0x289/0x9e0
[  247.925592][ T8459]  ? nfs_net_init+0x29/0x2b0
[  247.925609][ T8459]  nfs_net_init+0x207/0x2b0
[  247.925628][ T8459]  ops_init+0x35d/0x5d0
[  247.925650][ T8459]  setup_net+0x118/0x350
[  247.925675][ T8459]  ? __pfx_setup_net+0x10/0x10
[  247.925699][ T8459]  ? down_read_killable+0x1b6/0x3b0
[  247.925718][ T8459]  ? __ns_common_init+0x38a/0x590
[  247.925740][ T8459]  copy_net_ns+0x536/0x770
[  247.925766][ T8459]  create_new_namespaces+0x3f0/0x6b0
[  247.925786][ T8459]  ? security_capable+0x7e/0x2c0
[  247.925809][ T8459]  unshare_nsproxy_namespaces+0x144/0x190
[  247.925829][ T8459]  ksys_unshare+0x5a7/0x950
[  247.925854][ T8459]  ? __pfx_ksys_unshare+0x10/0x10
[  247.925874][ T8459]  ? rcu_is_watching+0x16/0xb0
[  247.925897][ T8459]  __x64_sys_unshare+0x38/0x50
[  247.925918][ T8459]  do_syscall_64+0x166/0x520
[  247.925932][ T8459]  ? trace_irq_disable+0x3b/0x140
[  247.925954][ T8459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.925977][ T8459]  ? clear_bhb_loop+0x70/0xc0
[  247.925997][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.926013][ T8459] RIP: 0033:0x7f7b9719e159
[  247.926028][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.926042][ T8459] RSP: 002b:00007f7b980ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  247.926059][ T8459] RAX: ffffffffffffffda RBX: 00007f7b97425fa0 RCX: 00007f7b9719e159
[  247.926071][ T8459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  247.926081][ T8459] RBP: 00007f7b9723506b R08: 0000000000000000 R09: 0000000000000000
[  247.926091][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.926100][ T8459] R13: 00007f7b97426038 R14: 00007f7b97425fa0 R15: 00007ffcdc0b9888
[  247.926123][ T8459]  </TASK>
[  248.417924][    T9] usb 6-1: USB disconnect, device number 2
[  248.475813][ T8459] lo speed is unknown, defaulting to 1000
[  248.809477][ T8482] afs: Unknown parameter 'äyB¥Ú¼Þ͘?dÖH +íÛ8áÓða¿o+L3ãx©Á'
[  248.819849][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.820185][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.914608][ T8485] 9p: Bad value for 'rfdno'
[  249.031582][ T5705] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  249.033772][ T5776] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  249.077430][ T5776] usb 4-1: USB disconnect, device number 53
[  249.146995][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.192715][ T5705] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  249.195804][ T5705] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.195828][ T5705] usb 6-1: config 0 interface 0 has no altsetting 0
[  249.195850][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.212348][ T5705] usb 6-1: config 0 descriptor??
[  249.372040][ T5625] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  249.486118][ T5705] usbhid 6-1:0.0: can't add hid device: -71
[  249.493425][ T5705] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  249.500604][ T5705] usb 6-1: USB disconnect, device number 3
[  249.543719][ T5625] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  249.548971][ T5625] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  249.548992][ T5625] usb 1-1: config 0 interface 0 has no altsetting 0
[  249.587979][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  249.588003][ T5625] usb 1-1: Product: syz
[  249.588014][ T5625] usb 1-1: Manufacturer: syz
[  249.588025][ T5625] usb 1-1: SerialNumber: syz
[  249.602066][ T5625] usb 1-1: config 0 descriptor??
[  249.643811][ T5625] usb 1-1: selecting invalid altsetting 0
[  249.967959][ T5625] usb 1-1: USB disconnect, device number 90
[  250.307949][ T8505] loop0: detected capacity change from 0 to 204800
[  250.312766][ T5705] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  250.461192][ T5705] usb 4-1: device descriptor read/64, error -71
[  250.613626][ T5773] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  250.702939][ T5705] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  250.739867][ T5629] Bluetooth: hci3: Malformed Event: 0x13
[  250.762197][ T5773] usb 6-1: Using ep0 maxpacket: 32
[  250.762769][ T5773] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  250.763706][ T5773] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  250.763722][ T5773] usb 6-1: config 0 has no interface number 0
[  250.765422][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.765440][ T5773] usb 6-1: Product: syz
[  250.765450][ T5773] usb 6-1: Manufacturer: syz
[  250.765461][ T5773] usb 6-1: SerialNumber: syz
[  250.770670][ T5773] usb 6-1: config 0 descriptor??
[  250.829912][ T5773] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  250.862689][ T5705] usb 4-1: device descriptor read/64, error -71
[  250.974394][ T5705] usb usb4-port1: attempt power cycle
[  251.311466][ T5705] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  251.340494][ T5705] usb 4-1: device descriptor read/8, error -71
[  251.362180][ T5773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  251.385090][ T5773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  251.571371][ T5705] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  251.592865][ T5705] usb 4-1: device descriptor read/8, error -71
[  251.616673][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  251.617713][ T5773] usb 6-1: USB disconnect, device number 4
[  251.656359][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  251.686278][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  251.686750][ T5773] quatech2 6-1:0.51: device disconnected
[  251.702888][ T5705] usb usb4-port1: unable to enumerate USB device
[  251.922232][  T987] usb 1-1: new low-speed USB device number 91 using dummy_hcd
[  252.072320][  T987] usb 1-1: Invalid ep0 maxpacket: 64
[  252.202098][  T987] usb 1-1: new low-speed USB device number 92 using dummy_hcd
[  252.352639][  T987] usb 1-1: Invalid ep0 maxpacket: 64
[  252.352929][  T987] usb usb1-port1: attempt power cycle
[  252.662116][   T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.694186][  T987] usb 1-1: new low-speed USB device number 93 using dummy_hcd
[  252.714006][  T987] usb 1-1: Invalid ep0 maxpacket: 64
[  252.846242][  T987] usb 1-1: new low-speed USB device number 94 using dummy_hcd
[  252.881637][  T987] usb 1-1: Invalid ep0 maxpacket: 64
[  252.881827][  T987] usb usb1-port1: unable to enumerate USB device
[  252.909420][   T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.080888][   T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.209270][   T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.406473][ T5625] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  253.410426][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.432878][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.442834][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.458665][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.466535][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.562110][ T5625] usb 4-1: Using ep0 maxpacket: 8
[  253.564952][ T5625] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  253.570784][ T5625] usb 4-1: config 0 interface 0 has no altsetting 0
[  253.570810][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.629461][ T5625] usb 4-1: config 0 descriptor??
[  253.770189][   T43] bridge_slave_1: left allmulticast mode
[  253.770211][   T43] bridge_slave_1: left promiscuous mode
[  253.770399][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.804154][   T43] bridge_slave_0: left allmulticast mode
[  253.804194][   T43] bridge_slave_0: left promiscuous mode
[  253.804371][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.219701][ T5625] kye 0003:0458:5019.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  254.220178][ T5625] hid_parser_main: 827 callbacks suppressed
[  254.220192][ T5625] kye 0003:0458:5019.0015: unknown main item tag 0x6
[  254.220247][ T5625] kye 0003:0458:5019.0015: ignoring exceeding usage max
[  254.279870][ T5625] kye 0003:0458:5019.0015: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0
[  254.279894][ T5625] kye 0003:0458:5019.0015: tablet-enabling feature report not found
[  254.279904][ T5625] kye 0003:0458:5019.0015: tablet enabling failed
[  254.566253][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.600856][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.628057][   T43] bond0 (unregistering): Released all slaves
[  254.677854][    T9] usb 4-1: USB disconnect, device number 58
[  254.969907][ T8564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  255.291403][ T5625] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  255.443352][ T5625] usb 1-1: Using ep0 maxpacket: 32
[  255.444176][ T5625] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  255.447414][ T5625] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  255.447436][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  255.447454][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  255.447471][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  255.447490][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  255.516022][   T52] Bluetooth: hci1: command tx timeout
[  255.541903][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.541922][ T5625] usb 1-1: Product: syz
[  255.541932][ T5625] usb 1-1: Manufacturer: syz
[  255.541943][ T5625] usb 1-1: SerialNumber: syz
[  255.582365][ T5625] usb 1-1: config 0 descriptor??
[  255.678016][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.678059][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.850297][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13
[  255.943090][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  256.008350][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -32
[  256.008397][ T5625] input input60: Device does not respond to id packet M
[  256.008965][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -32
[  256.008996][ T5625] input input60: Device does not respond to id packet P
[  256.010519][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -32
[  256.010551][ T5625] input input60: Device does not respond to id packet B
[  256.123260][    T9] usb 4-1: Using ep0 maxpacket: 32
[  256.130159][    T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  256.140557][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[  256.140579][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  256.149886][ T5705] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  256.184132][    T9] usb 4-1: string descriptor 0 read error: -22
[  256.184238][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.188767][ T8543] lo speed is unknown, defaulting to 1000
[  256.219697][ T8580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  256.254295][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  256.254332][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  256.369277][   T43] hsr_slave_0: left promiscuous mode
[  256.398030][   T43] hsr_slave_1: left promiscuous mode
[  256.398887][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.398903][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.399946][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.400067][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.446928][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.458186][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.459191][ T5625] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.525639][   T43] veth1_macvtap: left promiscuous mode
[  256.525671][   T43] veth0_macvtap: left promiscuous mode
[  256.525767][   T43] veth1_vlan: left promiscuous mode
[  256.525812][   T43] veth0_vlan: left promiscuous mode
[  256.537443][ T5625] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input60
[  256.602449][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.602843][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.631426][ T5625] usb 1-1: USB disconnect, device number 95
[  256.666953][ T8592] FAULT_INJECTION: forcing a failure.
[  256.666953][ T8592] name failslab, interval 1, probability 0, space 0, times 0
[  256.666979][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.3.664 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  256.667007][ T8592] Tainted: [L]=SOFTLOCKUP
[  256.667015][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.667024][ T8592] Call Trace:
[  256.667030][ T8592]  <TASK>
[  256.667037][ T8592]  dump_stack_lvl+0xe8/0x150
[  256.667063][ T8592]  should_fail_ex+0x3eb/0x540
[  256.667084][ T8592]  should_failslab+0xa8/0x100
[  256.667102][ T8592]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  256.667127][ T8592]  ? __d_alloc+0x37/0x6f0
[  256.667147][ T8592]  ? __d_alloc+0x37/0x6f0
[  256.667172][ T8592]  __d_alloc+0x37/0x6f0
[  256.667197][ T8592]  d_alloc_pseudo+0x21/0xc0
[  256.667220][ T8592]  alloc_path_pseudo+0x107/0x220
[  256.667240][ T8592]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  256.667259][ T8592]  ? do_raw_spin_lock+0x12b/0x2f0
[  256.667283][ T8592]  alloc_file_pseudo+0xa8/0x1e0
[  256.667302][ T8592]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  256.667321][ T8592]  ? _raw_spin_unlock+0x28/0x50
[  256.667343][ T8592]  ? alloc_fd+0x651/0x6c0
[  256.667364][ T8592]  sock_alloc_file+0xb8/0x2e0
[  256.667384][ T8592]  ? __sys_socket+0x12b/0x1b0
[  256.667408][ T8592]  __sys_socket+0x13f/0x1b0
[  256.667444][ T8592]  __x64_sys_socket+0x7a/0x90
[  256.667467][ T8592]  do_syscall_64+0x166/0x520
[  256.667479][ T8592]  ? trace_irq_disable+0x3b/0x140
[  256.667500][ T8592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.667515][ T8592]  ? clear_bhb_loop+0x70/0xc0
[  256.667533][ T8592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.667547][ T8592] RIP: 0033:0x7fcc4379e159
[  256.667560][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.667573][ T8592] RSP: 002b:00007fcc419d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  256.667588][ T8592] RAX: ffffffffffffffda RBX: 00007fcc43a26090 RCX: 00007fcc4379e159
[  256.667598][ T8592] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  256.667607][ T8592] RBP: 00007fcc4383506b R08: 0000000000000000 R09: 0000000000000000
[  256.667616][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.667625][ T8592] R13: 00007fcc43a26128 R14: 00007fcc43a26090 R15: 00007fff02569b78
[  256.667646][ T8592]  </TASK>
[  257.127118][    T9] usb 4-1: USB disconnect, device number 59
[  257.591715][   T52] Bluetooth: hci1: command tx timeout
[  258.200071][   T43] team0 (unregistering): Port device team_slave_1 removed
[  258.246385][   T43] team0 (unregistering): Port device team_slave_0 removed
[  258.363100][ T5773] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  258.514752][ T5773] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  258.516030][ T5773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.519839][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  258.519858][ T5773] usb 4-1: Product: syz
[  258.519868][ T5773] usb 4-1: Manufacturer: syz
[  258.777451][ T5773] usb 4-1: selecting invalid altsetting 1
[  258.777469][ T5773] speedtch 4-1:1.0: speedtch_bind: setting interface to  1 failed (-22)!
[  258.777507][ T5773] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -22!
[  258.777555][ T5773] speedtch 4-1:1.0: probe with driver speedtch failed with error -22
[  258.821384][    T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd
[  258.863868][ T5773] usb 4-1: selecting invalid altsetting 1
[  258.863885][ T5773] speedtch 4-1:1.1: speedtch_bind: setting interface to  1 failed (-22)!
[  258.865350][ T5773] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -22!
[  258.865384][ T5773] speedtch 4-1:1.1: probe with driver speedtch failed with error -22
[  258.906442][ T5773] usb 4-1: USB disconnect, device number 60
[  259.005558][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  259.006845][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  259.049998][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.050019][    T9] usb 1-1: Product: syz
[  259.050030][    T9] usb 1-1: Manufacturer: syz
[  259.050040][    T9] usb 1-1: SerialNumber: syz
[  259.357539][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input61
[  259.397292][ T4972] bcm5974 1-1:1.0: could not read from device
[  259.414813][ T4972] bcm5974 1-1:1.0: could not read from device
[  259.472853][ T4972] bcm5974 1-1:1.0: could not read from device
[  259.473310][    T9] usb 1-1: USB disconnect, device number 96
[  259.534337][ T4972] bcm5974 1-1:1.0: could not read from device
[  259.671194][   T52] Bluetooth: hci1: command tx timeout
[  259.726255][   T31] audit: type=1800 audit(1789781447.672:11): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.671" name="/" dev="sockfs" ino=30222 res=0 errno=0
[  260.165334][ T8630] syzkaller0: entered promiscuous mode
[  260.165436][ T8630] syzkaller0: entered allmulticast mode
[  260.572385][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.572455][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.572572][ T8543] bridge_slave_0: entered allmulticast mode
[  260.580951][ T8543] bridge_slave_0: entered promiscuous mode
[  260.619532][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.622821][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.622933][ T8543] bridge_slave_1: entered allmulticast mode
[  260.630840][ T8543] bridge_slave_1: entered promiscuous mode
[  260.776079][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.830791][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.850903][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.675'.
[  261.039785][ T8543] team0: Port device team_slave_0 added
[  261.057738][ T8543] team0: Port device team_slave_1 added
[  261.057785][ T8641] lo speed is unknown, defaulting to 1000
[  261.223860][ T8658] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  261.249940][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.249954][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.249973][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.309145][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.309160][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.309180][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.518716][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14
[  261.566354][ T8543] hsr_slave_0: entered promiscuous mode
[  261.581834][ T8543] hsr_slave_1: entered promiscuous mode
[  261.582299][ T8543] debugfs: 'hsr0' already exists in 'hsr'
[  261.582314][ T8543] Cannot create hsr debugfs directory
[  261.751248][   T52] Bluetooth: hci1: command tx timeout
[  262.032764][ T8680] CacheFiles: Failed to register: -30
[  262.187694][ T8680] bonding: bond0 is being deleted...
[  262.244160][ T5628] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  262.368467][ T8680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.394061][ T8680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.397700][ T8680] bond0 (unregistering): Released all slaves
[  262.424498][ T5628] usb 4-1: not running at top speed; connect to a high speed hub
[  262.424523][ T5628] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  262.427382][ T5628] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[  262.427400][ T5628] usb 4-1: config 1 has no interface number 0
[  262.464338][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.464358][ T5628] usb 4-1: Product: syz
[  262.464370][ T5628] usb 4-1: Manufacturer: syz
[  262.464380][ T5628] usb 4-1: SerialNumber: syz
[  262.518645][ T5628] usb 4-1: selecting invalid altsetting 1
[  262.757883][ T5628] dvb_ttusb_budget: ttusb_init_controller: error
[  262.757914][ T5628] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  262.965574][ T5628] DVB: Unable to find symbol cx22700_attach()
[  263.086918][ T5628] DVB: Unable to find symbol tda10046_attach()
[  263.086930][ T5628] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  263.144811][ T5628] usb 4-1: USB disconnect, device number 61
[  263.517075][ T8543] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  263.547120][ T8543] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  263.565705][ T8543] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  263.594653][ T8543] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  263.597632][ T8543] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  263.643027][ T8543] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  263.775041][ T8543] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  263.799639][ T8543] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  264.115799][ T8709] netlink: 'syz.3.685': attribute type 1 has an invalid length.
[  264.115817][ T8709] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.685'.
[  264.171543][ T5705] kernel read not supported for file /comedi4 (pid: 5705 comm: kworker/0:5)
[  264.232541][   T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.233750][ T5628] kernel read not supported for file /comedi4 (pid: 5628 comm: kworker/0:4)
[  264.329331][ T8713] netlink: 'syz.3.685': attribute type 1 has an invalid length.
[  264.329349][ T8713] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.685'.
[  264.629552][   T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.766561][   T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.959950][   T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.017533][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.096415][ T8543] 8021q: adding VLAN 0 to HW filter on device team0
[  265.124659][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.124741][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.164788][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.164861][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.213865][ T8729] afs: Unknown parameter 'fowner>00000000000000000000'
[  265.436508][ T8732] FAULT_INJECTION: forcing a failure.
[  265.436508][ T8732] name failslab, interval 1, probability 0, space 0, times 0
[  265.436532][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.6.690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.436552][ T8732] Tainted: [L]=SOFTLOCKUP
[  265.436560][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.436570][ T8732] Call Trace:
[  265.436576][ T8732]  <TASK>
[  265.436582][ T8732]  dump_stack_lvl+0xe8/0x150
[  265.436606][ T8732]  should_fail_ex+0x3eb/0x540
[  265.436627][ T8732]  should_failslab+0xa8/0x100
[  265.436645][ T8732]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  265.436669][ T8732]  ? _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x26e/0x1700
[  265.436687][ T8732]  ? _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x26e/0x1700
[  265.436706][ T8732]  ? _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x26e/0x1700
[  265.436725][ T8732]  krealloc_node_align_noprof+0x19a/0x390
[  265.436752][ T8732]  _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x26e/0x1700
[  265.436776][ T8732]  ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10
[  265.436797][ T8732]  ? apparmor_file_open+0x523/0x6c0
[  265.436825][ T8732]  ? __pfx_apparmor_file_open+0x10/0x10
[  265.436850][ T8732]  ? tomoyo_file_open+0x163/0x220
[  265.436869][ T8732]  ? fsnotify_open_perm_and_set_mode+0x13c/0x6b0
[  265.436892][ T8732]  ? devcgroup_check_permission+0x31/0x8f0
[  265.436928][ T8732]  ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10
[  265.436946][ T8732]  do_dentry_open+0x80e/0x1360
[  265.436969][ T8732]  vfs_open_consume+0x4a/0x350
[  265.436984][ T8732]  ? path_openat+0x14bb/0x1e40
[  265.437007][ T8732]  path_openat+0x14d7/0x1e40
[  265.437042][ T8732]  do_file_open+0x23e/0x4a0
[  265.437067][ T8732]  ? __pfx_do_file_open+0x10/0x10
[  265.437103][ T8732]  ? _raw_spin_unlock+0x28/0x50
[  265.437122][ T8732]  ? alloc_fd+0x651/0x6c0
[  265.437146][ T8732]  do_sys_openat2+0x115/0x200
[  265.437163][ T8732]  ? __se_sys_futex+0x3a8/0x450
[  265.437180][ T8732]  ? __pfx_do_sys_openat2+0x10/0x10
[  265.437200][ T8732]  ? rcu_is_watching+0x16/0xb0
[  265.437218][ T8732]  __x64_sys_openat+0x138/0x170
[  265.437239][ T8732]  do_syscall_64+0x166/0x520
[  265.437252][ T8732]  ? trace_irq_disable+0x3b/0x140
[  265.437273][ T8732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.437288][ T8732]  ? clear_bhb_loop+0x70/0xc0
[  265.437306][ T8732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.437320][ T8732] RIP: 0033:0x7f7b9719e159
[  265.437334][ T8732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.437347][ T8732] RSP: 002b:00007f7b980ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  265.437363][ T8732] RAX: ffffffffffffffda RBX: 00007f7b97425fa0 RCX: 00007f7b9719e159
[  265.437374][ T8732] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  265.437383][ T8732] RBP: 00007f7b9723506b R08: 0000000000000000 R09: 0000000000000000
[  265.437393][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.437401][ T8732] R13: 00007f7b97426038 R14: 00007f7b97425fa0 R15: 00007ffcdc0b9888
[  265.437422][ T8732]  </TASK>
[  265.830560][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.847471][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.860767][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  265.872774][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  265.881271][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  265.997263][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15
[  266.261039][ T8740] program syz.6.691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.316061][   T43] bridge_slave_1: left allmulticast mode
[  266.316094][   T43] bridge_slave_1: left promiscuous mode
[  266.316237][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.346733][   T43] bridge_slave_0: left allmulticast mode
[  266.346753][   T43] bridge_slave_0: left promiscuous mode
[  266.350098][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.453586][ T8740] program syz.6.691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.081365][ T5625] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  267.247120][ T5625] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  267.263666][ T5625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.263685][ T5625] usb 7-1: Product: syz
[  267.263696][ T5625] usb 7-1: Manufacturer: syz
[  267.263706][ T5625] usb 7-1: SerialNumber: syz
[  267.301596][ T5776] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  267.405216][  T987] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  267.451721][ T5776] usb 4-1: device descriptor read/64, error -71
[  267.691462][ T5776] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  267.821367][ T5776] usb 4-1: device descriptor read/64, error -71
[  267.918245][   T52] Bluetooth: hci0: command tx timeout
[  267.933048][ T5776] usb usb4-port1: attempt power cycle
[  268.271362][ T5776] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  268.293773][ T5776] usb 4-1: device descriptor read/8, error -71
[  268.479016][  T987] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  268.479175][  T987] ath9k_htc: Failed to initialize the device
[  268.533570][ T5776] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  268.553480][ T5776] usb 4-1: device descriptor read/8, error -71
[  268.578362][ T8733] lo speed is unknown, defaulting to 1000
[  268.664767][ T5776] usb usb4-port1: unable to enumerate USB device
[  268.825438][   T43] hsr_slave_0: left promiscuous mode
[  268.830235][   T43] hsr_slave_1: left promiscuous mode
[  268.830789][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.830803][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.860522][  T987] usb 7-1: ath9k_htc: USB layer deinitialized
[  268.874371][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.874387][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.904698][   T43] veth1_macvtap: left promiscuous mode
[  268.904727][   T43] veth0_macvtap: left promiscuous mode
[  268.904878][   T43] veth1_vlan: left promiscuous mode
[  268.904936][   T43] veth0_vlan: left promiscuous mode
[  269.249969][  T987] usb 7-1: USB disconnect, device number 3
[  269.602528][   T43] team0 (unregistering): Port device team_slave_1 removed
[  269.629896][   T43] team0 (unregistering): Port device team_slave_0 removed
[  269.914785][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.992518][   T52] Bluetooth: hci0: command tx timeout
[  270.111304][  T987] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  270.262436][  T987] usb 7-1: Using ep0 maxpacket: 32
[  270.265717][  T987] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  270.283022][  T987] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  270.283043][  T987] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  270.283060][  T987] usb 7-1: config 0 interface 0 has no altsetting 0
[  270.288641][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.288661][  T987] usb 7-1: Product: syz
[  270.288672][  T987] usb 7-1: Manufacturer: syz
[  270.288682][  T987] usb 7-1: SerialNumber: syz
[  270.339201][  T987] usb 7-1: config 0 descriptor??
[  270.394791][   T43] IPVS: stop unused estimator thread 0...
[  270.621723][ T8808] UHID_CREATE from different security context by process 57 (syz.6.697), this is not allowed.
[  270.825953][  T987] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  271.411868][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.411942][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.412061][ T8733] bridge_slave_0: entered allmulticast mode
[  271.448346][ T8733] bridge_slave_0: entered promiscuous mode
[  271.476972][  T987] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO)
[  271.493072][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.493145][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.493267][ T8733] bridge_slave_1: entered allmulticast mode
[  271.537186][ T8733] bridge_slave_1: entered promiscuous mode
[  271.554919][ T8841] tmpfs: Using encoding : utf8-12.1.0
[  271.637721][ T8543] veth0_vlan: entered promiscuous mode
[  271.722079][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.747818][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.919824][ T8733] team0: Port device team_slave_0 added
[  271.921111][ T8543] veth1_vlan: entered promiscuous mode
[  271.958092][ T8733] team0: Port device team_slave_1 added
[  272.071701][   T52] Bluetooth: hci0: command tx timeout
[  272.118225][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.118239][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.118258][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.202524][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.202539][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.202559][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.412139][ T8733] hsr_slave_0: entered promiscuous mode
[  272.414585][ T8733] hsr_slave_1: entered promiscuous mode
[  272.417568][ T8733] debugfs: 'hsr0' already exists in 'hsr'
[  272.417582][ T8733] Cannot create hsr debugfs directory
[  272.512664][ T5773] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  272.593413][ T5779] usb 7-1: USB disconnect, device number 4
[  272.598533][ T8543] veth0_macvtap: entered promiscuous mode
[  272.661784][ T5773] usb 4-1: Using ep0 maxpacket: 32
[  272.663541][ T5773] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  272.669403][ T5773] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.669426][ T5773] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.713029][ T5773] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  272.713050][ T5773] usb 4-1: Product: syz
[  272.713060][ T5773] usb 4-1: Manufacturer: syz
[  272.713070][ T5773] usb 4-1: SerialNumber: syz
[  272.789023][ T5773] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input62
[  272.850001][ T8543] veth1_macvtap: entered promiscuous mode
[  273.012658][ T5779] usb 4-1: USB disconnect, device number 66
[  273.057245][ T5779] appletouch 4-1:1.0: input: appletouch disconnected
[  273.200937][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.234025][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.304463][   T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.304683][   T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.304875][   T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.461517][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.874594][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.874611][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.036272][ T8733] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  274.081007][ T8733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.098224][ T8733] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  274.113115][ T8733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  274.117104][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.117118][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.119684][ T8733] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  274.154381][   T52] Bluetooth: hci0: command tx timeout
[  274.175732][ T8733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  274.176391][ T8733] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  274.208054][ T8733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  274.629156][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.710616][ T8733] 8021q: adding VLAN 0 to HW filter on device team0
[  274.752752][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.752825][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.795778][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.795859][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.348763][ T8912] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  275.398487][ T8912] CIFS: Attempting to mount //127.0.0.1/share
[  275.518525][ T8912] CIFS: VFS: Error connecting to socket. Aborting operation.
[  275.518643][ T8912] CIFS: VFS: cifs_mount failed w/return code = -111
[  275.541471][ T5776] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  275.572468][ T5779] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  275.702839][ T5776] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  275.707855][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  275.707877][ T5776] usb 4-1: Product: syz
[  275.707887][ T5776] usb 4-1: SerialNumber: syz
[  275.740506][ T5779] usb 8-1: Using ep0 maxpacket: 8
[  275.746749][ T5779] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  275.750572][ T5776] usb 4-1: config 0 descriptor??
[  275.770160][ T5779] usb 8-1: config 0 has an invalid interface number: 186 but max is 0
[  275.770254][ T5779] usb 8-1: config 0 has no interface number 0
[  275.770282][ T5779] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  275.770298][ T5779] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  275.770319][ T5779] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  275.770336][ T5779] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  275.770354][ T5779] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  275.861107][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.861127][ T5779] usb 8-1: Product: syz
[  275.861138][ T5779] usb 8-1: Manufacturer: syz
[  275.861148][ T5779] usb 8-1: SerialNumber: syz
[  275.870702][ T5779] usb 8-1: config 0 descriptor??
[  276.043286][ T5776] usb 4-1: USB disconnect, device number 67
[  276.148201][ T5779] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  276.339545][    T9] usb 8-1: USB disconnect, device number 2
[  276.730126][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.786738][ T8733] veth0_vlan: entered promiscuous mode
[  277.816027][ T8733] veth1_vlan: entered promiscuous mode
[  277.973657][ T8733] veth0_macvtap: entered promiscuous mode
[  277.998522][ T8733] veth1_macvtap: entered promiscuous mode
[  278.093893][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.124172][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.171247][   T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.172526][   T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.172553][   T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.172576][   T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.230071][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.723'.
[  278.540255][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.540271][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.596764][ T8984] xt_cgroup: path and classid specified
[  278.669029][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.669047][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.211483][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16
[  280.440317][ T9033] netlink: 32 bytes leftover after parsing attributes in process `syz.7.739'.
[  282.753952][ T9090] block nbd6: NBD_DISCONNECT
[  284.433241][   T31] audit: type=1800 audit(1789781472.382:12): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.763" name="file0" dev="overlay" ino=73 res=0 errno=0
[  284.559371][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17
[  284.642087][ T5773] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  284.825508][ T5773] usb 7-1: unable to get BOS descriptor or descriptor too short
[  284.825542][ T5773] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  284.825565][ T5773] usb 7-1: no configurations
[  284.825572][ T5773] usb 7-1: can't read configurations, error -22
[  285.641259][ T5776] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  285.791380][ T5776] usb 9-1: Using ep0 maxpacket: 32
[  285.807475][ T5776] usb 9-1: unable to get BOS descriptor or descriptor too short
[  285.807512][ T5776] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  285.828411][ T5776] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  285.828430][ T5776] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  285.828445][ T5776] usb 9-1: config 14 has no interface number 0
[  285.828456][ T5776] usb 9-1: config 14 has no interface number 1
[  285.828497][ T5776] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  285.828514][ T5776] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  285.828532][ T5776] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  285.828550][ T5776] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  285.828569][ T5776] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  285.828587][ T5776] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  285.828605][ T5776] usb 9-1: config 14 interface 57 has no altsetting 0
[  285.828618][ T5776] usb 9-1: config 14 interface 228 has no altsetting 0
[  285.966927][ T5776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.966947][ T5776] usb 9-1: Product: syz
[  285.966957][ T5776] usb 9-1: Manufacturer: syz
[  285.966967][ T5776] usb 9-1: SerialNumber: syz
[  286.021790][ T5628] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  286.173526][ T5628] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  286.174928][ T5628] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  286.174949][ T5628] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  286.174964][ T5628] usb 8-1: config 0 interface 0 has no altsetting 0
[  286.203195][ T5628] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  286.203214][ T5628] usb 8-1: Product: syz
[  286.203224][ T5628] usb 8-1: Manufacturer: syz
[  286.203255][ T5628] usb 8-1: SerialNumber: syz
[  286.256662][ T5628] usb 8-1: config 0 descriptor??
[  286.295073][ T5628] usb 8-1: selecting invalid altsetting 0
[  286.660040][ T5776] legousbtower 9-1:14.57: interrupt endpoints not found
[  287.712287][ T5628] usb 8-1: USB disconnect, device number 3
[  287.833557][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.836247][ T5776] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178
[  287.839323][ T5776] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  288.143164][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18
[  288.646718][ T5628] usb 9-1: USB disconnect, device number 2
[  288.729788][ T5628] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected
[  289.508334][ T9164] syzkaller1: entered promiscuous mode
[  289.508352][ T9164] syzkaller1: entered allmulticast mode
[  290.374009][ T9184] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  290.515730][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19
[  291.081962][ T5628] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  291.128573][   T31] audit: type=1800 audit(1789781479.072:13): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.791" name="file0" dev="overlay" ino=224 res=0 errno=0
[  291.232600][ T5628] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  291.237917][ T5628] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.237953][ T5628] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.285170][ T5628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.285189][ T5628] usb 8-1: Product: syz
[  291.285200][ T5628] usb 8-1: Manufacturer: syz
[  291.285210][ T5628] usb 8-1: SerialNumber: syz
[  291.804328][ T5776] usb 8-1: USB disconnect, device number 4
[  292.150096][ T9228] FAULT_INJECTION: forcing a failure.
[  292.150096][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.150123][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.6.797 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  292.150143][ T9228] Tainted: [L]=SOFTLOCKUP
[  292.150148][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.150157][ T9228] Call Trace:
[  292.150163][ T9228]  <TASK>
[  292.150170][ T9228]  dump_stack_lvl+0xe8/0x150
[  292.150195][ T9228]  should_fail_ex+0x3eb/0x540
[  292.150215][ T9228]  copy_fpstate_to_sigframe+0xa83/0xd20
[  292.150236][ T9228]  ? copy_fpstate_to_sigframe+0x188/0xd20
[  292.150259][ T9228]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  292.150294][ T9228]  ? ktime_get+0x45/0x220
[  292.150314][ T9228]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  292.150334][ T9228]  ? ktime_get+0x1f5/0x220
[  292.150353][ T9228]  ? lapic_next_event+0x11/0x20
[  292.150373][ T9228]  ? clockevents_program_event+0x491/0x630
[  292.150391][ T9228]  ? fpu__alloc_mathframe+0xac/0x130
[  292.150410][ T9228]  get_sigframe+0x603/0x830
[  292.150432][ T9228]  ? __pfx_get_sigframe+0x10/0x10
[  292.150448][ T9228]  ? irqentry_exit+0x218/0x910
[  292.150468][ T9228]  ? trace_irq_disable+0x3b/0x140
[  292.150514][ T9228]  x64_setup_rt_frame+0x163/0xc50
[  292.150550][ T9228]  ? _raw_spin_unlock_irq+0x29/0x50
[  292.150571][ T9228]  ? _raw_spin_unlock_irq+0x2e/0x50
[  292.150589][ T9228]  ? get_signal+0x10d8/0x12c0
[  292.150609][ T9228]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  292.150650][ T9228]  arch_do_signal_or_restart+0x456/0x860
[  292.150671][ T9228]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  292.150702][ T9228]  exit_to_user_mode_loop+0x10e/0x770
[  292.150724][ T9228]  ? rcu_is_watching+0x16/0xb0
[  292.150741][ T9228]  do_syscall_64+0x328/0x520
[  292.150754][ T9228]  ? trace_irq_disable+0x3b/0x140
[  292.150774][ T9228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.150789][ T9228]  ? clear_bhb_loop+0x70/0xc0
[  292.150807][ T9228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.150821][ T9228] RIP: 0033:0x7f7b9719e159
[  292.150834][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.150847][ T9228] RSP: 002b:00007f7b980ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  292.150862][ T9228] RAX: 0000000000000001 RBX: 00007f7b97425fa8 RCX: 00007f7b9719e159
[  292.150897][ T9228] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b97425fac
[  292.150908][ T9228] RBP: 00007f7b97425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  292.150918][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.150928][ T9228] R13: 00007f7b97426038 R14: 00007ffcdc0b97a0 R15: 00007ffcdc0b9888
[  292.150951][ T9228]  </TASK>
[  294.179557][ T9243] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  294.179574][ T9243] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  294.646629][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20
[  295.944526][ T9266] FAULT_INJECTION: forcing a failure.
[  295.944526][ T9266] name failslab, interval 1, probability 0, space 0, times 0
[  295.944552][ T9266] CPU: 0 UID: 0 PID: 9266 Comm: syz.8.809 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.944570][ T9266] Tainted: [L]=SOFTLOCKUP
[  295.944576][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.944584][ T9266] Call Trace:
[  295.944590][ T9266]  <TASK>
[  295.944596][ T9266]  dump_stack_lvl+0xe8/0x150
[  295.944619][ T9266]  should_fail_ex+0x3eb/0x540
[  295.944638][ T9266]  should_failslab+0xa8/0x100
[  295.944655][ T9266]  __kmalloc_cache_noprof+0x9e/0x600
[  295.944677][ T9266]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  295.944698][ T9266]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  295.944723][ T9266]  tcp_sendmsg_fastopen+0x1e7/0x5f0
[  295.944747][ T9266]  tcp_sendmsg_locked+0x4d3d/0x5640
[  295.944780][ T9266]  ? __lock_acquire+0x747/0x2de0
[  295.944810][ T9266]  ? __pfx_futex_wake_mark+0x10/0x10
[  295.944836][ T9266]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  295.944861][ T9266]  ? tcp_sendmsg+0x21/0x50
[  295.944883][ T9266]  ? __local_bh_enable_ip+0xd6/0x140
[  295.944901][ T9266]  tcp_sendmsg+0x2f/0x50
[  295.944922][ T9266]  ? __pfx_inet6_sendmsg+0x10/0x10
[  295.944957][ T9266]  sock_sendmsg_nosec+0x90/0x180
[  295.944979][ T9266]  __sys_sendto+0x408/0x5a0
[  295.944997][ T9266]  ? __pfx___sys_sendto+0x10/0x10
[  295.945029][ T9266]  ? rcu_is_watching+0x16/0xb0
[  295.945047][ T9266]  __x64_sys_sendto+0xde/0x100
[  295.945064][ T9266]  do_syscall_64+0x166/0x520
[  295.945078][ T9266]  ? trace_irq_disable+0x3b/0x140
[  295.945098][ T9266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.945113][ T9266]  ? clear_bhb_loop+0x70/0xc0
[  295.945131][ T9266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.945146][ T9266] RIP: 0033:0x7f1aa9d9e159
[  295.945159][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.945172][ T9266] RSP: 002b:00007f1aaac92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  295.945187][ T9266] RAX: ffffffffffffffda RBX: 00007f1aaa025fa0 RCX: 00007f1aa9d9e159
[  295.945197][ T9266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  295.945206][ T9266] RBP: 00007f1aa9e3506b R08: 00002000000001c0 R09: 000000000000001c
[  295.945216][ T9266] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000
[  295.945225][ T9266] R13: 00007f1aaa026038 R14: 00007f1aaa025fa0 R15: 00007ffd93aa53a8
[  295.945246][ T9266]  </TASK>
[  297.165437][ T9290] netlink: 328 bytes leftover after parsing attributes in process `syz.7.817'.
[  297.165470][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.817'.
[  297.985625][ T9302] nvmet: adding nsid 1 to subsystem testsubsys
[  298.012392][ T9302] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  298.024301][ T9302] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  298.032723][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.8.821 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.043492][ T9302] Tainted: [L]=SOFTLOCKUP
[  298.047840][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.057906][ T9302] RIP: 0010:strlen+0x29/0x70
[  298.062502][ T9302] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  298.082120][ T9302] RSP: 0018:ffffc900039f7978 EFLAGS: 00010246
[  298.088188][ T9302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  298.096151][ T9302] RDX: ffffc9000fb01000 RSI: 000000000000004d RDI: 0000000000000000
[  298.104124][ T9302] RBP: ffffc900039f7ab8 R08: ffffffff909bb37f R09: 1ffffffff213766f
[  298.112105][ T9302] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff9200073ef40
[  298.120072][ T9302] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  298.128037][ T9302] FS:  00007f1aaac926c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
[  298.136964][ T9302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.143546][ T9302] CR2: 0000000000000000 CR3: 000000005a756000 CR4: 00000000003526f0
[  298.151528][ T9302] Call Trace:
[  298.154802][ T9302]  <TASK>
[  298.157724][ T9302]  do_getname_kernel+0x1d/0x230
[  298.162569][ T9302]  ? getname_kernel+0xd/0x20
[  298.167155][ T9302]  filp_open+0x87/0x1d0
[  298.171334][ T9302]  ? __pfx_filp_open+0x10/0x10
[  298.176112][ T9302]  ? __pfx___mutex_lock+0x10/0x10
[  298.181151][ T9302]  nvmet_file_ns_enable+0x74/0x350
[  298.186291][ T9302]  nvmet_ns_enable+0xaa/0x780
[  298.190961][ T9302]  ? lock_acquire+0x115/0x350
[  298.195634][ T9302]  nvmet_ns_enable_store+0xd7/0x170
[  298.200830][ T9302]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  298.206635][ T9302]  ? down_read+0x2b9/0x320
[  298.211127][ T9302]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  298.216931][ T9302]  configfs_write_iter+0x337/0x430
[  298.222052][ T9302]  vfs_write+0x612/0xba0
[  298.226293][ T9302]  ? __pfx_vfs_write+0x10/0x10
[  298.231054][ T9302]  ? __fget_files+0x2a/0x420
[  298.235660][ T9302]  ksys_write+0x150/0x270
[  298.239988][ T9302]  ? __pfx_ksys_write+0x10/0x10
[  298.244851][ T9302]  do_syscall_64+0x166/0x520
[  298.249432][ T9302]  ? trace_irq_disable+0x3b/0x140
[  298.254452][ T9302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.260525][ T9302]  ? clear_bhb_loop+0x70/0xc0
[  298.265195][ T9302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.271077][ T9302] RIP: 0033:0x7f1aa9d9e159
[  298.275479][ T9302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.295075][ T9302] RSP: 002b:00007f1aaac92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  298.303497][ T9302] RAX: ffffffffffffffda RBX: 00007f1aaa025fa0 RCX: 00007f1aa9d9e159
[  298.311457][ T9302] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000005
[  298.319504][ T9302] RBP: 00007f1aa9e3506b R08: 0000000000000000 R09: 0000000000000000
[  298.327467][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.335526][ T9302] R13: 00007f1aaa026038 R14: 00007f1aaa025fa0 R15: 00007ffd93aa53a8
[  298.343497][ T9302]  </TASK>
[  298.346520][ T9302] Modules linked in:
[  298.351685][ T9302] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  298.726479][ T9302] RIP: 0010:strlen+0x29/0x70
[  298.726507][ T9302] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  298.726521][ T9302] RSP: 0018:ffffc900039f7978 EFLAGS: 00010246
[  298.726536][ T9302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  298.726546][ T9302] RDX: ffffc9000fb01000 RSI: 000000000000004d RDI: 0000000000000000
[  298.726556][ T9302] RBP: ffffc900039f7ab8 R08: ffffffff909bb37f R09: 1ffffffff213766f
[  298.726568][ T9302] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff9200073ef40
[  298.726579][ T9302] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  298.726591][ T9302] FS:  00007f1aaac926c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
[  298.726604][ T9302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.726614][ T9302] CR2: 00007f4a8e5c0fe8 CR3: 000000005a756000 CR4: 00000000003526f0
[  298.726630][ T9302] Kernel panic - not syncing: Fatal exception
[  298.826244][ T9302] Kernel Offset: disabled
[  298.830571][ T9302] Rebooting in 86400 seconds..