last executing test programs:

8m52.732616946s ago: executing program 2 (id=439):
r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r0, 0x1)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r1, 0x1)
close(0x3)

8m52.28801322s ago: executing program 2 (id=441):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x400100, 0x0)
bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x2)
ioctl$FE_READ_STATUS(r1, 0x80046f45, &(0x7f00000000c0))
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x4, 0x4, 0x10005, 0x77, 0x0, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7ff, 0x1539b804, 0x6, 0x1, 0x4002]})
r3 = accept4(r0, 0x0, 0x0, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
close(r5)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2500000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="04020000", @ANYRES16=r7, @ANYBLOB="000226bd7000fedbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000500)={0xa93d, 0x28, '\x00', 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733f726403c31d14289f43353d30783030f0ac8d8ffb0f04e87b091fc50a1b340c928a5a2073cf4efc5c11f4f24649ad14a95132a39e4049c5dffb19dee1973008a8509689eb"])
r9 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000000010008000000000000007500018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010000000000000072004fc569fa46a9f8e600705b0aa19caccf439a91b5be326b11e8ba8b04b5f210dd463872e04c09443d22b906ad856431727c0f1d78d2b0eb468ba8f18a1df5133669e063dd26fc0ccd2d0aa2621289ba299a42d5d60c045b9976a1d4d01cd47930e99af41dca2a54db82434dbf3feb4203890537c940a448804984fcf3b88d43a72a72391b273f0beedf9c"], 0x44}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

8m46.371103084s ago: executing program 2 (id=450):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
getsockname$packet(r0, 0x0, &(0x7f0000000140))
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0x23, 0xfffffffffffffdd8, {0x91, 0x31, "93dd424cf44ad840456c65b72599da65b5be93654fa7c70232cb203bb5f4be027cd2f905ecb9ba75602bbb07e3f20536cb6e96b6142a47dc582d756f43eb6ae57ad7d012147b90fd534a49f5c76a4d24fff9549876507a84a0195e9a335e680970bd6d76eb65e028e1ee30a5e5710c43bbd66580b0192107e36c705831da718f614ae7341a421bcece460d072fa8c2"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0033c7000000b0d71920e52bf5460130d469d4dafb9233d14a4d3aaa4d2d9245cbc2a0523f9b71e97f6ad60faece39c70e61cd040f2e8b0f1db09041799bb99641ec6d1c19796f9b2b40785924ef80700ac27d7b333bdbf5f292d33809be89a7dacae9591fbb07169fe4b2982833069238b3ecca11a7870562b107916133134b95a558adb8d981636ebf515b585b63a5aed86d26f637050089602e4fd9b6ea38157fbbd51adc5ed5de601bb6363ac693d1b0e25a2dee9d1ee51c77c4eed8c8b653ac31507bd9f50a9ef55df457"], &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x4827, 0x0, 0xc46, 0x4, 0x7, 0xc0f0, 0x1, 0x0, 0xfff8, 0x1, 0x8001}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x89, 0x2}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3)
syz_usb_connect$uac2(0x5, 0xda, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xe, 0x10, 0xa9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x8, 0x18, 0xf9}, [@effect_unit={0xf, 0x24, 0x7, 0x4, 0x0, 0x5, [0x3, 0x0, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x10}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x36, 0x1, 0x0, 'q<1'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe1, 0x6, 0x7f, 0xc4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x40e4, 0x3, "e3466660"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x5, "96a2201b52d2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf8, 0x10, 0x2, {0x8, 0x25, 0x1, 0xc1, 0x3c, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2c, 0xf8, "94e2d7", "5a70cf"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x8, 0x7, {0x8, 0x25, 0x1, 0x81, 0x3c, 0xb, 0xd8}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0x7, 0x9, 0x3, 0x8, 0x9}, 0xf, &(0x7f0000000880)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x72, 0x0, 0x9}]}, 0x4, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x809}}]})
syz_usb_connect$uac2(0x6, 0xd6, &(0x7f0000000a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1940, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x9, 0x30, 0x80, {0x8, 0xb, 0x0, 0x1, 0x1, 0x11}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xc, 0x20, 0x2}, [@extension_unit={0xc, 0x24, 0x9, 0x6, 0x8, 0xf, "2cae790470"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, [0x5, 0xc, 0x8]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x3, 0x7, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0xf, 0x2, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0xde, 0x4, 0x56, 0xfc}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x9, 0x0, {0x8, 0x25, 0x1, 0x0, 0x3c, 0xbc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0xfd, 0x1, 0x0, 0xa9, 0xfff, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x6, 0x0, "89b025d430c6179a46"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4b, 0x2, 0x0, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0xf, 0x6, 0x5, 0x20, 0x10}, 0xc, &(0x7f0000000bc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x3, 0x7}]}, 0x1, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x445}}]})
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}})
syz_usb_disconnect(r4)
syz_usb_control_io$uac2(r4, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000d40)={0x24, &(0x7f0000000640)={0x40, 0x23, 0x12, {0x12, 0xc, "a15f1b6d3bc80af126c97d574e0d2fb4"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, &(0x7f0000000cc0)={0x0, 0x22, 0x23, {[@main=@item_012={0x2, 0x0, 0xb, "fcc8"}, @main=@item_4={0x3, 0x0, 0x8, "295c6ecd"}, @local=@item_4={0x3, 0x2, 0x1, "79695ec9"}, @global=@item_4={0x3, 0x1, 0x1, "973ba5ed"}, @local=@item_012={0x1, 0x2, 0x7, "bc"}, @local=@item_4={0x3, 0x2, 0x0, "8e019306"}, @local=@item_4={0x3, 0x2, 0x7, "042f1dd9"}, @main=@item_4={0x3, 0x0, 0xc, "637d5fed"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x1, 0x1, {0x22, 0xae0}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x17, 0x56, "c290d78c8ee66559e59b5fcc1fb8d970b1e7ec93b8052429fbc58024f33f936e533efc8bcb0bfca8b089584945870afbc43dd49f8d7e2267f31e97b1cffbbca66dd6ea0e31dd9c1e159106c4f992ae8f6c8d4ca3ebe9"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000e40)={0x0, 0x8, 0x1}, &(0x7f0000000e80)={0x20, 0x1, 0xdd, "7d0b8e2d82bb5f38f270a4778ac21aeca89a33b14a899bd71e59fdcf82cbf7a18a22401e51d1937ff21877d53f0cac577b2436dcabdc40b112972b46f78cf52f39954a2d0153cbe7552abe02e6a5950f1d6c210f0bbcf62b23e8e53421042323304874ca4f4197515512d9f04cebc43ca7cd5f52865f7fa6baec7f843479a7bc5b4642a61fd79ecb9b68133dd89a36494c7b5b784dd6671cfb9cedf9d8b2914ddd2eb1c00a5299bbb7bb07dc91c2cae979e5e068a8bf6f89bf8c3b304f1c72ae5864773a4f7cbb79812b336757202441b6cc01d5bc4c2a3abb765efd07"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x40}})

8m43.058769957s ago: executing program 2 (id=454):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000020032000004400000008000300", @ANYRES32=r0, @ANYBLOB="0c00238008001500f700000033086417539b199c93f2e3bc282f10e3e174d384792bf592936aa0d05ad8d7d8079a07ccafea41aa726bb757a68db7652fef91c4b6bff8b77e9e3af591d58efe7e74aa174c24fdac2456c9617eef9ced7024f46dca158cf506094d2667c29989870b3827d14ca9d674cf6f5713ca94ad305184da878211090cc0f20ec15468a4a04feae99eb5d7a0eac75e77"], 0x28}, 0x1, 0x0, 0x0, 0x40488d0}, 0x14)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xb, 0x30}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x756}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x42000}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af25, &(0x7f00000002c0)={0x1, 0xa})
r4 = fsmount(r2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
getsockname$unix(r5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xfe)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x6, 0x0, 0x5, @mcast1, @mcast2={0xff, 0x3}, 0x80, 0x40, 0x1000, 0x3fffff}})
fchdir(r2)
r7 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x153042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
r8 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4)
fallocate(r8, 0x0, 0x0, 0x8fff9)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req={0x3, 0x3, 0xc1, 0x7ff}, 0x10)
r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000440), 0x300680)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
r10 = memfd_create(&(0x7f0000000180)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe\x02\x00\x00\x00\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\x17_ d\vn\xd4&\xf6\x1b\xe5C\xd99\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7\x00\x00\x00\x00.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4B5\x04\x15\xb6\x01_\b', 0x0)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x800000000000000, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r13=>0x0})
connect$can_bcm(r11, &(0x7f00000003c0)={0x1d, r13}, 0x10)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000100)=0x40000000)
write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)

8m37.726317311s ago: executing program 2 (id=460):
r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r0, 0x1)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x1)
flock(r1, 0x1)
close(0x3)

8m37.108276634s ago: executing program 2 (id=462):
r0 = syz_clone(0xc0080200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000701020002001400040045ef002800650000012e9070e00000010a010100c5cc708f3e53abc4a40217070361a21b7fa1717f"], 0x36)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, <r2=>r0})
ioprio_set$pid(0x3, r2, 0x6000)
tkill(r0, 0x12)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
accept(r3, 0x0, 0x0)
ptrace(0x4208, r0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000019100), 0x0, &(0x7f0000019180)="13")
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mlockall(0x2)
r5 = socket(0x2d, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r5)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a118001500060014fd030000120800044343000000a8001600a400014020000600fef65cf07db3d1a4693dffff7fb94dcf5c0461c100046f94007134cf6ee08000a0e408e8d8ef52a9d7c7c097a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c", 0xd8}], 0x1}, 0x804)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$peeksig(0x4212, r7, &(0x7f0000000040)={0x2}, &(0x7f0000000140))
lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0, 0x1)

8m20.951936842s ago: executing program 32 (id=462):
r0 = syz_clone(0xc0080200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000701020002001400040045ef002800650000012e9070e00000010a010100c5cc708f3e53abc4a40217070361a21b7fa1717f"], 0x36)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, <r2=>r0})
ioprio_set$pid(0x3, r2, 0x6000)
tkill(r0, 0x12)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
accept(r3, 0x0, 0x0)
ptrace(0x4208, r0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000019100), 0x0, &(0x7f0000019180)="13")
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mlockall(0x2)
r5 = socket(0x2d, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r5)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a118001500060014fd030000120800044343000000a8001600a400014020000600fef65cf07db3d1a4693dffff7fb94dcf5c0461c100046f94007134cf6ee08000a0e408e8d8ef52a9d7c7c097a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c", 0xd8}], 0x1}, 0x804)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$peeksig(0x4212, r7, &(0x7f0000000040)={0x2}, &(0x7f0000000140))
lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0, 0x1)

7m27.21980707s ago: executing program 3 (id=535):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0)
write(r0, &(0x7f0000000040)="393424cdd8839bbce4f2b14d1e9c9fe2f5140ec1328ed03641671651ccfbd7afaf8dca9f500ff358e1f294c67a81c6c8fb08a45ef0796c7fa390b833a8b0f6b1fe3ee836b17444cc89f8cbfd00", 0x4d)
syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b0200010520080904"], 0x0)

7m21.553452681s ago: executing program 3 (id=540):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8083001, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]})

7m21.494031624s ago: executing program 0 (id=541):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) (fail_nth: 7)
sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x43855)

7m19.391444178s ago: executing program 0 (id=542):
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffffffffffb}, &(0x7f0000000300)={&(0x7f00000002c0)=""/13})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r0, 0x0, 0x4, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r3 = signalfd4(r2, &(0x7f0000000100)={[0x9]}, 0x8, 0x0)
mq_notify(r3, &(0x7f0000000240)={0x0, 0x16, 0x1, @thr={&(0x7f0000000140)="1bfa4d62e134eee50b29ef60c252ad2efca130d0d95e40683febde679b3f49a40b8d8f1b61189718fec39819dee1e6932b3c4c117ee62213152dfaf718eae0a96bc987fe99005160fdcde5cd99332c10ec", &(0x7f0000000200)="e847d9c86207fc45a22b568575c7dc2378537b9edd0eb55cf53a37f5c81b1150f2f28e7903764b40d770ff"}})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r4 = accept4$alg(r2, 0x0, 0x0, 0x0)
read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020)
sendmmsg$alg(r4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x43855)

7m17.779863388s ago: executing program 0 (id=543):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

7m17.176568865s ago: executing program 0 (id=544):
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_clone(0xb9044400, &(0x7f0000000080)="2aa5e5f3aa8fceac9493e40753ccb1fe9d937840517c4c855437349e2819cefa9966f8052d331a24538b373e44ccaf26b5895b4a67f13da31f17c6f5006ee785d250babb23c85e2b99b73e8e7f4fc225061fb8b1e504d148e024c2233947a05d45ae4a81c6445ea3d672f5f7c1aa71536ccc4cef5e8ee9eb25875260aac31314f5942ac6432c45c219b14c", 0x8b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="46b37ded9474d0a1f6b08e4d69f504dbb65e0b6423d7b83fdbbeba29f2f55d773536474eca1f0ae99b7069b791c2871868711652199a9578cb0a84f9805cf05c880d6fd20ca86ac747f4c1a0")

7m14.818811927s ago: executing program 3 (id=545):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)="c8f152d53a2717681beea41ec97af037bc61e669ba44a37dab341df6d8be0276b9a27abf94293915c47b1e138028dd15c1758e6beb2d311baeb4c82e51ad6b0eb3a13e78861bad98c2abc449783bb14ba44e35cf73dabe746cdddb12836f938973c0e33a9df707894a94e9dc1ffe8321aa9968")
mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2200044, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r1, &(0x7f0000000080)="0535931d16d809d39df08fb6640ceb39469fa6c65107bbabdeffbead4d74b6c1c603cd6d67cdd04aeac62ceb301e26bb8b28a3f33b2b69c257c3d60b90323b76ea2b690b49328bbbde13d4eb8da09a72c0e79b32f72371255ff090c7e06e01f5413d7c7271f3a43121418ac616a6e68947228be9a00cf9106fa5bf60fca2fe68f46f7f0720ad6b3975f1e4fe841d4346d3722e5fb8085a3a18405f53c25b3c3d54f5ca8907e03617cea0ebabcd1727734a352d8114215a03b679b13fd3576e01", 0xc0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)

7m13.805797433s ago: executing program 0 (id=547):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x84400, 0x0)
fstatfs(r0, &(0x7f0000000340)=""/69)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf253d00000008005d0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000890)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf25440000000400080108000d00060000000400080108000c00ff7f00001c00238005001e000000000005001e000000000005001104000000000a001800030303030303000008000c00e0070000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r8, 0x6}, &(0x7f0000000080)=0x8)

7m13.706763018s ago: executing program 3 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0xe5c, 0x80000)
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0xc, 0x0, r2})

7m13.393879904s ago: executing program 0 (id=550):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x101800)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xc70, 0x6, &(0x7f0000000080)="f7e9028a4373fd79f0ca737b99aad83106bd13d21b2ad5b8149b2d312a569b00b46b12506dbc68b44debf58e7737cb2057007e7d2589d4eeb770744c65c3c947b4fc2b033864e1b9d37418ffab87834d0d280163ca25e91a08d2e767deedf807064ec84988e7443d84223580b25162573aac0ba4ea2155c58dccfba18d352eb5ec7420f1b4170a595233ea26be5e267d4c9b8e34adaeb21108a1c7e0ba70b981c97bc1bb15a6b2b541e70e559afe8338f9b09b4811d870748f736cb3a77091e9ce6a5d83aae3b6569bc85db2c7e8c1980f124185af6af633a60a59d81ac80c9a402308f4bc1b62df", 0xe8, 0x2, 0x4dee7484, 0x39, 0x7c3, 0xffffffff, &(0x7f0000000180)="3045a70bc5af634f57d9ee8fee24613aaf18284472aad2d6b59010f9612e128984c535989b2744a75db97bb0019c08d2f666a3a6e731f7c18a8ff773c3adbe47e9859680cebabcd9f2b8e6d3dbdde6598a00e00fd8d9b559864cf31f2935e1e0d148e3664598f5719ea6b40b2482434b4a070ef1e0597fa0f1d7b78cbb759c4b7af21e2d8c51b401fa21860818d27f9af9802999e01bda6d1607200e1d3c53dec1d36b16925a", [{0x4, 0xb73, 0x4}, {0x6, 0x2, 0x5}, {0x100, 0x200, 0xc0f4}, {0x1, 0x80, 0x3}, {0x1, 0x3, 0x711}, {0x9, 0x4}, {0x0, 0xfffffffd, 0x771}, {0x493, 0x0, 0x2}, {0xe, 0x4, 0x9}, {0x6, 0x40, 0x1}, {0xfffff07e, 0x6, 0x34}, {0x7ff, 0x8, 0x3}, {0x7f, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x40, 0x7fffffff, 0x6}, {0x8, 0x2, 0x9}, {0x401, 0x5, 0x80}, {0x8000, 0xffffffff, 0x10}, {0xca7f, 0x1, 0x3}, {0x3, 0x0, 0x1000}, {0x28e5ae0f, 0x3, 0x2}, {0x2, 0x80000000, 0xfffffffd}, {0x9, 0x2, 0x5}, {0x9, 0x6, 0x3}, {0x7fff, 0x4, 0x2c}, {0x3, 0x0, 0x7}, {0x7f, 0x5, 0x7fffffff}, {0x8, 0xfffff801, 0x60000000}, {0x5, 0x1dc9}, {0x4, 0x40, 0x101}, {0xff, 0xffca, 0x7ff}, {0x80000001, 0x720ba8eb, 0x8}, {0x3, 0x4, 0x3ff}, {0x3, 0x2, 0x7}, {0x4, 0x4, 0xed}, {0x7, 0x2, 0x6}, {0x1, 0xee8, 0x9}, {0xff, 0x3f, 0x1}, {0x5bcd4af3, 0x7, 0x9}, {0xf9d, 0x4, 0x101}, {0x9, 0x9, 0x5}, {0x6, 0x8, 0x4}, {0x6, 0x77}, {0x5, 0x90df, 0x3}, {0x1, 0xfff, 0x19}, {0x100, 0x5, 0x80000000}, {0x8, 0xff, 0xf95}, {0x4, 0xfc8, 0x6}, {0x2658e3f6, 0x80000001, 0xfffffffa}, {0x311a, 0xfffffc29, 0x7}, {0x6e, 0x0, 0x8}, {0xed, 0x101, 0x4}, {0x8, 0x80, 0x8}, {0xffffffff, 0x6, 0x7}, {0x8, 0x5, 0x2}, {0x7fff, 0x7ff, 0x3}, {0x3, 0x9, 0x101}]})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
fchmod(r1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e08acff9cfe598c9457a0b0a2a"], 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x400, 0x0, 0x1ff}, 0x10)
write(r3, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f0000000000000000000efff4000d40ff000000", 0x24)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)

7m12.718166601s ago: executing program 3 (id=551):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab)
mount$9p_unix(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=unix,noextend=4'])
symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7m12.395583734s ago: executing program 3 (id=552):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x0, 0x100000, 0x10, 0xfc, 0x2, 0x0, 0x4, 0x80, 0x5, 0xa}, {0x60000, 0x7000, 0xb, 0x8, 0x4, 0xf0, 0x6e, 0x4, 0x6, 0x3, 0x7, 0x10}, {0x26000, 0x4000, 0x4, 0xff, 0x5, 0x10, 0x6, 0x9, 0x1, 0x5, 0xf8, 0x6}, {0xffffffff, 0x8080000, 0x10, 0x9, 0x9, 0x1, 0x7f, 0x0, 0x10, 0xff, 0x5, 0x8}, {0x54000, 0x4, 0xe, 0x6, 0xf, 0xe6, 0x8, 0x7, 0x9, 0xfb, 0xa4, 0x7}, {0x6f000, 0xa000, 0x4, 0x80, 0x0, 0x3, 0xf, 0xf, 0x69, 0x4, 0x8, 0x8}, {0xf000, 0xd000, 0x9, 0x0, 0x7, 0x2, 0x4, 0x8, 0x6, 0x0, 0x5, 0x6}, {0x100000, 0x100000, 0x8, 0x3, 0x91, 0x5e, 0x1, 0x3, 0xe, 0x9, 0x5, 0x3}, {0xb000, 0x8}, {0x7000, 0xb7d}, 0x20, 0x0, 0xe000, 0x200000, 0x0, 0x4001, 0xfec00000, 0x1, [0x3, 0x7, 0xebf9, 0x1]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x0, 0x100000, 0x10, 0xfc, 0x2, 0x0, 0x4, 0x80, 0x5, 0xa}, {0x60000, 0x7000, 0xb, 0x8, 0x4, 0xf0, 0x6e, 0x4, 0x6, 0x3, 0x7, 0x10}, {0x26000, 0x4000, 0x4, 0xff, 0x5, 0x10, 0x6, 0x9, 0x1, 0x5, 0xf8, 0x6}, {0xffffffff, 0x8080000, 0x10, 0x9, 0x9, 0x1, 0x7f, 0x0, 0x10, 0xff, 0x5, 0x8}, {0x54000, 0x4, 0xe, 0x6, 0xf, 0xe6, 0x8, 0x7, 0x9, 0xfb, 0xa4, 0x7}, {0x6f000, 0xa000, 0x4, 0x80, 0x0, 0x3, 0xf, 0xf, 0x69, 0x4, 0x8, 0x8}, {0xf000, 0xd000, 0x9, 0x0, 0x7, 0x2, 0x4, 0x8, 0x6, 0x0, 0x5, 0x6}, {0x100000, 0x100000, 0x8, 0x3, 0x91, 0x5e, 0x1, 0x3, 0xe, 0x9, 0x5, 0x3}, {0xb000, 0x8}, {0x7000, 0xb7d}, 0x20, 0x0, 0xe000, 0x200000, 0x0, 0x4001, 0xfec00000, 0x1, [0x3, 0x7, 0xebf9, 0x1]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)

6m56.237721722s ago: executing program 33 (id=550):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x101800)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xc70, 0x6, &(0x7f0000000080)="f7e9028a4373fd79f0ca737b99aad83106bd13d21b2ad5b8149b2d312a569b00b46b12506dbc68b44debf58e7737cb2057007e7d2589d4eeb770744c65c3c947b4fc2b033864e1b9d37418ffab87834d0d280163ca25e91a08d2e767deedf807064ec84988e7443d84223580b25162573aac0ba4ea2155c58dccfba18d352eb5ec7420f1b4170a595233ea26be5e267d4c9b8e34adaeb21108a1c7e0ba70b981c97bc1bb15a6b2b541e70e559afe8338f9b09b4811d870748f736cb3a77091e9ce6a5d83aae3b6569bc85db2c7e8c1980f124185af6af633a60a59d81ac80c9a402308f4bc1b62df", 0xe8, 0x2, 0x4dee7484, 0x39, 0x7c3, 0xffffffff, &(0x7f0000000180)="3045a70bc5af634f57d9ee8fee24613aaf18284472aad2d6b59010f9612e128984c535989b2744a75db97bb0019c08d2f666a3a6e731f7c18a8ff773c3adbe47e9859680cebabcd9f2b8e6d3dbdde6598a00e00fd8d9b559864cf31f2935e1e0d148e3664598f5719ea6b40b2482434b4a070ef1e0597fa0f1d7b78cbb759c4b7af21e2d8c51b401fa21860818d27f9af9802999e01bda6d1607200e1d3c53dec1d36b16925a", [{0x4, 0xb73, 0x4}, {0x6, 0x2, 0x5}, {0x100, 0x200, 0xc0f4}, {0x1, 0x80, 0x3}, {0x1, 0x3, 0x711}, {0x9, 0x4}, {0x0, 0xfffffffd, 0x771}, {0x493, 0x0, 0x2}, {0xe, 0x4, 0x9}, {0x6, 0x40, 0x1}, {0xfffff07e, 0x6, 0x34}, {0x7ff, 0x8, 0x3}, {0x7f, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x40, 0x7fffffff, 0x6}, {0x8, 0x2, 0x9}, {0x401, 0x5, 0x80}, {0x8000, 0xffffffff, 0x10}, {0xca7f, 0x1, 0x3}, {0x3, 0x0, 0x1000}, {0x28e5ae0f, 0x3, 0x2}, {0x2, 0x80000000, 0xfffffffd}, {0x9, 0x2, 0x5}, {0x9, 0x6, 0x3}, {0x7fff, 0x4, 0x2c}, {0x3, 0x0, 0x7}, {0x7f, 0x5, 0x7fffffff}, {0x8, 0xfffff801, 0x60000000}, {0x5, 0x1dc9}, {0x4, 0x40, 0x101}, {0xff, 0xffca, 0x7ff}, {0x80000001, 0x720ba8eb, 0x8}, {0x3, 0x4, 0x3ff}, {0x3, 0x2, 0x7}, {0x4, 0x4, 0xed}, {0x7, 0x2, 0x6}, {0x1, 0xee8, 0x9}, {0xff, 0x3f, 0x1}, {0x5bcd4af3, 0x7, 0x9}, {0xf9d, 0x4, 0x101}, {0x9, 0x9, 0x5}, {0x6, 0x8, 0x4}, {0x6, 0x77}, {0x5, 0x90df, 0x3}, {0x1, 0xfff, 0x19}, {0x100, 0x5, 0x80000000}, {0x8, 0xff, 0xf95}, {0x4, 0xfc8, 0x6}, {0x2658e3f6, 0x80000001, 0xfffffffa}, {0x311a, 0xfffffc29, 0x7}, {0x6e, 0x0, 0x8}, {0xed, 0x101, 0x4}, {0x8, 0x80, 0x8}, {0xffffffff, 0x6, 0x7}, {0x8, 0x5, 0x2}, {0x7fff, 0x7ff, 0x3}, {0x3, 0x9, 0x101}]})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
fchmod(r1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e08acff9cfe598c9457a0b0a2a"], 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x400, 0x0, 0x1ff}, 0x10)
write(r3, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f0000000000000000000efff4000d40ff000000", 0x24)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)

6m55.830883219s ago: executing program 34 (id=552):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x0, 0x100000, 0x10, 0xfc, 0x2, 0x0, 0x4, 0x80, 0x5, 0xa}, {0x60000, 0x7000, 0xb, 0x8, 0x4, 0xf0, 0x6e, 0x4, 0x6, 0x3, 0x7, 0x10}, {0x26000, 0x4000, 0x4, 0xff, 0x5, 0x10, 0x6, 0x9, 0x1, 0x5, 0xf8, 0x6}, {0xffffffff, 0x8080000, 0x10, 0x9, 0x9, 0x1, 0x7f, 0x0, 0x10, 0xff, 0x5, 0x8}, {0x54000, 0x4, 0xe, 0x6, 0xf, 0xe6, 0x8, 0x7, 0x9, 0xfb, 0xa4, 0x7}, {0x6f000, 0xa000, 0x4, 0x80, 0x0, 0x3, 0xf, 0xf, 0x69, 0x4, 0x8, 0x8}, {0xf000, 0xd000, 0x9, 0x0, 0x7, 0x2, 0x4, 0x8, 0x6, 0x0, 0x5, 0x6}, {0x100000, 0x100000, 0x8, 0x3, 0x91, 0x5e, 0x1, 0x3, 0xe, 0x9, 0x5, 0x3}, {0xb000, 0x8}, {0x7000, 0xb7d}, 0x20, 0x0, 0xe000, 0x200000, 0x0, 0x4001, 0xfec00000, 0x1, [0x3, 0x7, 0xebf9, 0x1]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x0, 0x100000, 0x10, 0xfc, 0x2, 0x0, 0x4, 0x80, 0x5, 0xa}, {0x60000, 0x7000, 0xb, 0x8, 0x4, 0xf0, 0x6e, 0x4, 0x6, 0x3, 0x7, 0x10}, {0x26000, 0x4000, 0x4, 0xff, 0x5, 0x10, 0x6, 0x9, 0x1, 0x5, 0xf8, 0x6}, {0xffffffff, 0x8080000, 0x10, 0x9, 0x9, 0x1, 0x7f, 0x0, 0x10, 0xff, 0x5, 0x8}, {0x54000, 0x4, 0xe, 0x6, 0xf, 0xe6, 0x8, 0x7, 0x9, 0xfb, 0xa4, 0x7}, {0x6f000, 0xa000, 0x4, 0x80, 0x0, 0x3, 0xf, 0xf, 0x69, 0x4, 0x8, 0x8}, {0xf000, 0xd000, 0x9, 0x0, 0x7, 0x2, 0x4, 0x8, 0x6, 0x0, 0x5, 0x6}, {0x100000, 0x100000, 0x8, 0x3, 0x91, 0x5e, 0x1, 0x3, 0xe, 0x9, 0x5, 0x3}, {0xb000, 0x8}, {0x7000, 0xb7d}, 0x20, 0x0, 0xe000, 0x200000, 0x0, 0x4001, 0xfec00000, 0x1, [0x3, 0x7, 0xebf9, 0x1]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)

6m26.249766627s ago: executing program 1 (id=572):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000080)=0x80, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2ac1c2, 0x115)
sendmmsg$unix(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4040095}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m22.747139621s ago: executing program 1 (id=573):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x400100, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x4, 0x4, 0x10005, 0x77, 0x0, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7ff, 0x1539b804, 0x6, 0x1, 0x4002]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52)

6m11.417966066s ago: executing program 1 (id=574):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="ebed8d"], 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x107001)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

6m7.221397975s ago: executing program 1 (id=575):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb9", 0x41}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/75, 0x4b}], 0x2}, 0x0)

6m6.890916351s ago: executing program 1 (id=576):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

6m3.423230773s ago: executing program 1 (id=577):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r0 = socket$inet(0x2, 0x1, 0x6)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de92684a3e1ac765967623f0244a41cb9d7a1441909a5679b5fe088a4422e77db13", 0x87}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f", 0x8d}, {&(0x7f0000000840)="37df6e48d5abd55f6b04a4aca97bba51c87aa3f6b01e3fbe283d8019f748b5ad67ae505cd6b7e6868ff81aa817ba4434821cc6132e114e4cec2353e912d23d05a8421a10a2a72a5d514a05235ca57e714888fd", 0x53}], 0x3}}], 0x1, 0x800)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fc", 0x4a}, {&(0x7f0000000a40)="6e1be7cad520a0841d111ea6e5331394badbf041eb1ff738c4cdc2518094edf6fb75990e5de4c5465ea2bb07dfb97fe0b2ea473e7db53d9719facd8dc99d1484be1803ed2d3aea2a3e80262113bf835e96682018a4a5aede22d0febc6347ee2c7c52313f8a7ad65f002e37c09736574e6bea88f9c8f7eb8bed4ed9ec49661e806d92ba5c0ba5c533c391bcc6b1f7980992806a80fab3fbd0e88c3ae46e60ca4e966f7358f198243a012f76b9706aaef378891b965e758afb2986f07f277431ce8eef068f0be7cd8d059784764685575beb44ee91494e1e6da2f322a3736c13894927de0bd5009f2cdc", 0xe9}, {&(0x7f0000000b40)="5051a8c0982b3b2dde64310aa3c76b31d1807add88136c7893922aa2aa40f1e81d2b13012b09bfceb3c97c458382f6bfe1a8c4e8309e32a6938bdf171cca83729eaf4fd561b352b1b4a456c168a3b4dd4d542388717f53f228eb78d512236cef90ef3a3f5d04988103c4e72f8d4ebfaf3c1e40e8b1e93db62285", 0x7a}, {&(0x7f0000000bc0)="05859a90752395d69c69e05a460931b3296c9f0e7bae5ca3bceb496491e5b49e2bf9e4134d2b1082af07c96d1456dc3ddd83f7e553f53b0aa1466a18b3d50ae74a17091fa8c74fc4ab3dd2390f95aeaac9573404ec941427c9c8d9d21b225dc218fcbf67f3e0490a27af620f2b51d92643d3c96599064a4340c96ce9a553346c6caec72e9a16f9f49a04a43019f757709c6ae4af022cbeef561de3e2026d2c4933ae097fba526e3d3fb38b81bd8722f78f50fffb7141d9335a896d6ef64ca445779597891411f21337251e2527818b26e2c36826300407a7f0e76c5ed2cb3b", 0xdf}, {&(0x7f0000000d40)="43146f", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3b391c9b3005d6ab1ba83b799", 0x155}], 0x1}}], 0x2, 0x42054)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4090)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x9)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x400009, 0xf, r7}, 0x20)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r7, 0x4}, 0x8)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)

5m47.830592376s ago: executing program 35 (id=577):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r0 = socket$inet(0x2, 0x1, 0x6)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de92684a3e1ac765967623f0244a41cb9d7a1441909a5679b5fe088a4422e77db13", 0x87}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f", 0x8d}, {&(0x7f0000000840)="37df6e48d5abd55f6b04a4aca97bba51c87aa3f6b01e3fbe283d8019f748b5ad67ae505cd6b7e6868ff81aa817ba4434821cc6132e114e4cec2353e912d23d05a8421a10a2a72a5d514a05235ca57e714888fd", 0x53}], 0x3}}], 0x1, 0x800)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fc", 0x4a}, {&(0x7f0000000a40)="6e1be7cad520a0841d111ea6e5331394badbf041eb1ff738c4cdc2518094edf6fb75990e5de4c5465ea2bb07dfb97fe0b2ea473e7db53d9719facd8dc99d1484be1803ed2d3aea2a3e80262113bf835e96682018a4a5aede22d0febc6347ee2c7c52313f8a7ad65f002e37c09736574e6bea88f9c8f7eb8bed4ed9ec49661e806d92ba5c0ba5c533c391bcc6b1f7980992806a80fab3fbd0e88c3ae46e60ca4e966f7358f198243a012f76b9706aaef378891b965e758afb2986f07f277431ce8eef068f0be7cd8d059784764685575beb44ee91494e1e6da2f322a3736c13894927de0bd5009f2cdc", 0xe9}, {&(0x7f0000000b40)="5051a8c0982b3b2dde64310aa3c76b31d1807add88136c7893922aa2aa40f1e81d2b13012b09bfceb3c97c458382f6bfe1a8c4e8309e32a6938bdf171cca83729eaf4fd561b352b1b4a456c168a3b4dd4d542388717f53f228eb78d512236cef90ef3a3f5d04988103c4e72f8d4ebfaf3c1e40e8b1e93db62285", 0x7a}, {&(0x7f0000000bc0)="05859a90752395d69c69e05a460931b3296c9f0e7bae5ca3bceb496491e5b49e2bf9e4134d2b1082af07c96d1456dc3ddd83f7e553f53b0aa1466a18b3d50ae74a17091fa8c74fc4ab3dd2390f95aeaac9573404ec941427c9c8d9d21b225dc218fcbf67f3e0490a27af620f2b51d92643d3c96599064a4340c96ce9a553346c6caec72e9a16f9f49a04a43019f757709c6ae4af022cbeef561de3e2026d2c4933ae097fba526e3d3fb38b81bd8722f78f50fffb7141d9335a896d6ef64ca445779597891411f21337251e2527818b26e2c36826300407a7f0e76c5ed2cb3b", 0xdf}, {&(0x7f0000000d40)="43146f", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x155}], 0x1}}], 0x2, 0x42054)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4090)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x9)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x400009, 0xf, r7}, 0x20)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r7, 0x4}, 0x8)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)

3m3.672394165s ago: executing program 6 (id=581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x20, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

3m3.484117791s ago: executing program 6 (id=583):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$VT_WAITACTIVE(r0, 0x5607)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x1a, 0x7, 0x870bd2a, 0x0, {{@in=@remote, @in=@empty, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_io_uring_setup(0x457f, &(0x7f0000000080)={0x0, 0x182a, 0x800, 0x1, 0x37e}, 0xfffffffffffffffc, 0x0, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1", 0x1}], 0x2)
lsm_set_self_attr(0x66, &(0x7f0000000140)={0x69, 0x10, 0x20}, 0x20, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4)

3m0.108927965s ago: executing program 6 (id=589):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900290000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2002, 0x3a, '\n7\xf4pA3\xd4\xb4\x04\x10\xa6\x84\xaf\xbe\x90\\xa3_#\x91\xbd\xd9\b\\x\xc4\x0e\xa5\x19rH\"\xc6\xafC\xfad\x0e\xf4Q:m\xd1\xa1\xb0\xe5ti\xe7\xcc\x9dXN\"\x81\x98\xf4\xa6,\x81E\xbd\xc0J\x98\xcd\x0f\xd4j\x96?\x01\xf8\xae$\xad\xa7\x13\xc7\xeb\xb8I\x8f\xb5o%\x14u\xc2\xdf\t\xae\x18\b\xf5\xcf\x9c=\xb2=~\x00'/117, 0x3a, '\xd8\x94\x8cbroE\xd8u\xb8{\xa2)\xc2\xc6\xb3\n\xeb\xdd`6\xce\x84\xbe\xbd7B\xe8\x8e\xc0R\xd1?\xf8\r\xc6\xad\x0f\x91@*9eX\xb1\xa6~7\xa4\x19&\x04y\xf9\xfc\xdf\xc7o\x05\x02\x8b\xc8\xfc\xd7\x9b\xfd$\x04\xe2\x10>\xbaz\xe8vJR\x1csf\x88\xfc\x91Te\x19\xb3\x82\xfa\x19n\x89i7\xf8\xe8\f\xe9#\xa7`e\xfe=\xd7\x17\xab\xa3\x16\x00\xa12\xd5\t\xe3\x17}\xbe\xf9\f@y\xba\xe32\xa2O\xb7\xb9\xa8\x11yr\xe6\x87\xe1\xbf\\\xb9\xb9\xaf@\x98h\xd5\xbe\xc8\x85\xa9{\x19\v\x9a\xfb\x80\xe3\xc2\xde\xdb\xd9\xa2b\a}\xd3\x89\xcb\x8e\xca\xf1j\x18p%w\xe3\x06\x88\xec\xc4\xe8f\xf6\xc6q\xd5\"\x14\x15\x85\xeb\x7f2Yq\x7fv\x02[Z\x93U\xa2\x19\xe4|\xc1q\xc7\xb9\x8f\v\xbeWYSY\xa87\xcd\xed\xb4Y\xaa\x8drI\xb7A\x03w\xc6\x87\xcb\x1e$\xba\xda\xbfg\xcfs\xda\xee\x1d\xf4\x88\xaaEf\xa4', 0x3a, './file0'}, 0x197)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX, @ANYBLOB="010710e226a6529bd90f34"], 0x14}, 0x1, 0x0, 0x0, 0x2404c055}, 0x4000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="bf6eca48e2b5976ae627bd0200fedbdf256d0000003acaf3a86eaf00e5a7fe9c2d59af7c9189b70159346c7d3b8a0c3eb5d1cb48fa5dc26f559252a239905303c2eed3e2120785bb18a59da6a93e9ca01d45f5768592af4b09ee5d42ff148dc75ef1a6758450326fc263ad40baa7dd7f8892aa0cd80f38472db40fdde40181868b289e581ccb9381d2569f1c8ec2356c6f01f56c5c135660b9a36e592a82eb5ede9611c04056806c7586e96b366fb941a1708effbd22d4bee0f9d12d05a3a131a5308cf9bc2facb39e34a996775d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4)
r4 = mq_open(&(0x7f00000003c0)='\x00', 0x80, 0x4, &(0x7f0000000400)={0x9, 0x5, 0x7f, 0x81})
mq_notify(r4, &(0x7f0000000440)={0x0, 0x1, 0x4})

2m59.616221216s ago: executing program 6 (id=590):
mkdir(&(0x7f0000000040)='./bus\x00', 0x49)
move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file2\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file2\x00', 0x220)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000700)=[{0x4, 0x8c01, 0x45, &(0x7f0000000440)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404a3169b921fe2c0b93c0e66e21421bd29fcb0c911a"}, {0x3, 0x0, 0x0, 0x0}, {0xff01, 0x2000, 0x0, 0x0}], 0x3})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

2m57.400872053s ago: executing program 6 (id=597):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000340))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000700))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002fc0100000000000000000000000000014e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000440)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000001900)={0xfffffffffffffffc, 0x418, 0x40})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={<r6=>0x0, 0xcd}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r6, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x10}}}, &(0x7f00000006c0)=0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800)

2m54.554185537s ago: executing program 6 (id=602):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x15, 0x3240, 0x37}, {@loopback, 0x4e23, 0x2000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x300, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x1000, 0x2, 0x0, 0xa, 0xa0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44)

2m54.069726179s ago: executing program 7 (id=604):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f2", 0x30, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000040))
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000400)={0x0, "b38cd663df37cba6622c88b6c4b40e900184ae9eb54c1c0a8732e31dc72753ac", 0x2})
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m52.388047427s ago: executing program 7 (id=606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000002060108000000000000000027000001050005000a000000050001000700000005000400000000000d00020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r3, 0x0, 0x0, 0x96495, 0x0, 0x0, 0x10001})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$video4linux(0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmmsg$sock(r0, &(0x7f0000001e40)=[{{&(0x7f0000000400)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)="646d90dbeeb270ef", 0x8}, {&(0x7f0000000500)="81ad7ab6571f77f7a2c853bfa388a1bb5093faa82bb51f32bae6377c119cc644dcad", 0x22}, {&(0x7f0000000540)="85385436b9106ca63c46569334498ecb8d9b7c59f08e2d3fbec7106c4205372307290cab4bd2b95c72be8373cbd2a4736d8e3765fe22eaf866bbe556b2c3869d7282677f1de4bf0bdb2b07c0d955e888db4bb2bf0d26906213d84aeba474e831ec930f4283b8796197b33c831e66256fd9958e03125fd38a716bf5a4791cc2e32ff68e38fcf9cf336a6fa0b286c11c947b45603c1f912c4c987b32b4a63cdd1a698df22458e71ca12587bde735ac1c79e3c2c47f719f231c6c9cdc4fff9b9d5dc8c16339c72a6d5bbb807cd4fe88", 0xce}, {&(0x7f0000000680)="eadda453f1955572eaab8b4c35b76baed2db936c5e7ee03afbe41792176d7656e9906be876dd36294e6de76f2a5a1a1ddd4fc1c61f2d1245052352df9a7972523c5c48ecc2b35cf972c774dc3e49652338d6c6683144427824d649fd6ea9ad2429da6f515c502c2c73d2f772a48b852d09651b", 0x73}, {&(0x7f0000000800)="66d7a236d6233a7ea5aeb092d2c18189f65f886e3bc6144a224d0760a28a4f8b176d478d34824d84c88c8d007c10971b4979b544a62b200a244f67800e7cd1d1eb950af0f45cfa16a8ecb52721b810e7799e49d866f767431df547c438587e1b6473b03879967521080841fabdec2fe0d6b1e71818914cdc6a27516558f0928fe75b44109c134e3fbb9742dc8da5a1b0f17c266c9f1d508ac7cc97d3c5e2bfdb566b4e2a375b13de8c23454f43ba77a6f95b4de2cd56c1ef22b26f9149c0ff861fe742a7af595d7586554d25275e4a324062fbfe9df3bf6e20eb774af51cc437da2b9eaf4026cc46aed3b313", 0xec}, {&(0x7f0000000980)="21a5249aa583c3b4c6c8241ccca2c21100d9cde7c366f21bd041a560c44b52a95c882d1c7fe3b7800804de02e74ce32e28c63db61ba38554e0d7bdc9615030b78f49df7eb4cf39ba718bf199394b4fc9f38d07fd280f79d09477b387cd7f3066c938a67b61a3b7e297892a54354505771bc2a5a509b1bcdff01e69a807d15fe9e12f3cbe9cdded7fa70e9b17847e756691778aed6a367eb7bbb600b55478b7c41d015350e889b8d6316fb2257ad88674d51a601cd8f3603ae4050c2cd3f2570e0c74d29e03d174392e4719156aa72bd719cc801934187a723a", 0xd9}, {&(0x7f0000000a80)="ee02e9e31cf3bcc491a74af7ba3e47b986ec51cca5edc0ded0fd25fa84e10ac91c9de6b219a9c4d729fb75de38f480ae478023f7b95ba108b2379b312b1cb2b488b419a0482a273bcf32904c35ed1ff5218b6b80bba18d506e5f7d30f25b403a4bd40f968b2138042af8e1cfba03109490c98274fa076d", 0x77}], 0x7, &(0x7f0000000b80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x49c0}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x48}}, {{&(0x7f0000000c00)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000c80)="463abd26f6c78f6e7b4a13e1cfc607013d26c94a9121ea014e77caf21f2b7147339b9c94941590af0a2cce94965789db0b1e81c4d14988afb20b43454484ce7e1e24da4733e86ded73643883cf5ba457da4cd1652b7172737f250a1799469641378914d356d70baecbb39831c66557dd62234acfdf9579cb7838cc60a5f68ab2528024462b8e01bd", 0x88}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="760a5866554e9f109e4bad7f8be8b5ecce2ecd016f75b213f460cb3d4543674bc0475ffa69385d047d492af764f956b22aed0c6d812dc800ad3a877a8e8fecf227fa6a2f3adc48c566473b7cad65a2043c8ec76e6a8349d578bb41e7f015df88f426c6b1c5bcdbb405979738fe7aa281abf8400786b575bcb2c2d96d60c030a00c02b07603f5931cdb6dc831b36ff804d665e28d4f58e77d876cd88b5831d52633c0bea849293b9b219aabb2026eb1a06775", 0xb2}], 0x3}}], 0x2, 0x40)
syz_open_dev$usbfs(0x0, 0x11, 0x1)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x20440, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r8=>0x0, 0x6}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000001c0)={r8, 0x9}, 0x8)
eventfd2(0x103, 0x80801)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000000c0))
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa, 0x0)

2m50.880485704s ago: executing program 7 (id=614):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x9) (async)
landlock_restrict_self(r3, 0x9)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x50}]}, 0x40}}, 0x4000)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xc1, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f0000000080)={0x2})
landlock_restrict_self(r3, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) (async)
r9 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r9, 0x0) (async)
landlock_restrict_self(r9, 0x0)
landlock_restrict_self(r9, 0x8) (async)
landlock_restrict_self(r9, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r11 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r11, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x83)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2m50.607403083s ago: executing program 7 (id=616):
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000129bd7000fddbdf255d0000000c00990000300000380000004000a6800a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000800a50000000000ac6b6b5cf143a10b98452d7609d69b5f61c517abd92a07350b1ae9d5ec2c51228376da174b384c86a5428b5407505b4c75dd3d52bf3b86c65a9285fb8da2f1a06e69c7e2c84a8bd86c0cd6968aae81248a"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m50.360309572s ago: executing program 7 (id=618):
r0 = socket(0xa, 0x2400000001, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f00000002c0)=@pppol2tpv3, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000000580)=""/79, 0x4f}], 0x2, &(0x7f0000000640)=""/183, 0xb7}, 0x0) (async)
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x10}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4, 0x4002, @remote, 0x6}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0xb, {{0xa, 0x4e21, 0x100003, @mcast2, 0x10000000}}}, 0x88)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400944534487900050038925a01000000800000007a04000000ff0109000000fff5dd000000080003000604fcff0000000000000000", 0x58}], 0x1) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000280)=0x3)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0xbd4, 0x0, 0x5eb}, {0xbf0, 0x0, 0x7}, {0x1a6, 0x0, 0x8000000000000001}, {0x88b, 0x0, 0x3}]}) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000001c0)=0xdb3, 0xb)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
sendmsg$can_raw(r10, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) (async)
recvmmsg(r10, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002042, 0x0) (async, rerun: 64)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) (async, rerun: 64)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108)

2m49.820141187s ago: executing program 7 (id=621):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3b12, 0x0, 0x4}})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x81, 0xffffffff})
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)

2m39.469349312s ago: executing program 36 (id=602):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x15, 0x3240, 0x37}, {@loopback, 0x4e23, 0x2000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x300, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x1000, 0x2, 0x0, 0xa, 0xa0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44)

2m34.019499124s ago: executing program 37 (id=621):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3b12, 0x0, 0x4}})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x81, 0xffffffff})
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)

25.923840506s ago: executing program 5 (id=1241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x2, 0x0, 0x1}, {0x3, 0x0, 0xae}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x27}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]})
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000480)={[0x2a, 0x6, 0x1, 0xffffffff, 0xdf90, 0xf7, 0x9, 0x800, 0x7, 0x8001, 0xc20, 0x5, 0x8, 0x800, 0x3, 0x101, 0x3ff, 0xa1, 0x1, 0x2, 0xf, 0x0, 0x0, 0x101, 0x8001, 0x6, 0x721b, 0xf8a0, 0x200, 0x10001, 0xb, 0x1, 0x5, 0x0, 0x8, 0x7, 0x8, 0x2, 0xfffffffb, 0x7, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x3, 0x9, 0x6, 0x8, 0x1, 0x10001, 0x80000001, 0x1, 0x7, 0x5, 0x2, 0x4, 0x3, 0x3, 0x8001, 0x5, 0x1, 0x10, 0x10001, 0x2, 0x91, 0x3bf, 0x6, 0x8, 0xfff, 0x101, 0x570, 0x3, 0x1, 0x3, 0x2, 0x0, 0x5, 0x1, 0x400, 0x6, 0x5, 0x7, 0x9, 0x5, 0x74c, 0x6a6, 0x3, 0x2, 0xfffffff9, 0x5, 0x7, 0x9, 0xb, 0x9, 0x7, 0x10, 0x58, 0x5, 0x2, 0x9, 0x6, 0xd6, 0x101, 0x4, 0xffff, 0x3, 0xd, 0x3, 0x7f, 0x6, 0x9, 0x101, 0x8001, 0x800, 0xffffffff, 0x960e, 0xffffff92, 0x1, 0x7f, 0x5, 0x800, 0x7, 0xf1, 0x7f, 0x4, 0x9a, 0x0, 0x0, 0x4, 0x9a2, 0x8, 0xfffffff7, 0x4, 0x101, 0x5, 0x3, 0x5, 0x5, 0x4, 0x27, 0x7, 0x80000001, 0x5, 0x8, 0x1, 0x8, 0x8000, 0x9, 0x880, 0xffffffff, 0xffff0000, 0x5e7, 0x6, 0x5, 0x5, 0x0, 0x4, 0x7, 0xfffff000, 0x1, 0x9, 0x0, 0x2, 0xfff, 0x7, 0x2479, 0x2ef, 0x9, 0xffff, 0x2, 0x2, 0x7, 0x8, 0x7, 0xffffff6b, 0xe, 0xb, 0x8, 0x9, 0x6, 0x3, 0x2, 0xc, 0x1, 0x5, 0x84e5, 0xfffffffe, 0x4c1, 0x2, 0x0, 0x1437, 0x8, 0xc, 0x7ff, 0x4, 0x801c, 0x8, 0xa, 0x400, 0x100, 0x2, 0x9, 0x1, 0x7, 0x48bb, 0x8, 0x7, 0x2, 0x1, 0x8001, 0x3, 0x1, 0x1, 0x806b, 0x8, 0x81, 0x3, 0x3ff, 0x8, 0x1, 0x2f, 0x10001, 0x9e, 0x8000, 0x8, 0xf, 0x5, 0x6, 0x3, 0xfffffff9, 0x6, 0xffff47ea, 0x6, 0x4121, 0x1c0000, 0xe52, 0x0, 0xf, 0xd40, 0x2, 0xfffffffc, 0x9, 0x1, 0x30, 0xc21, 0x3ff, 0xffff, 0x6cb6, 0x6, 0x8, 0x8, 0xfff, 0x2, 0xf, 0x7, 0x6, 0x9, 0x8, 0x4297559e, 0x116af931, 0x8, 0x5, 0x7761, 0x3, 0x5, 0x700000, 0x6, 0x8, 0x1ab1, 0xfffffff3, 0x10001, 0x5a, 0x6, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x2, 0x6, 0x3602, 0xa, 0x6, 0x4, 0x2, 0x8, 0xdac, 0x81, 0x5, 0x6, 0x401, 0x401, 0x7, 0x4, 0x0, 0xffffffff, 0x4, 0x19c, 0x8001, 0xe192, 0xff, 0x9, 0x9, 0x5b, 0x4, 0x6, 0x11df, 0x5375, 0x9, 0x1, 0x5, 0x8, 0xfffffff3, 0x5, 0x15d3, 0x84da, 0x4, 0x7f, 0x5, 0x3, 0xd3d, 0x5, 0x7f, 0x3, 0x80000001, 0x7fffffff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x10001, 0xfffffffa, 0x7, 0x5, 0xfffffff3, 0x5d, 0x4, 0x0, 0x8, 0x4, 0xfff, 0x10, 0xdde, 0x5, 0x8, 0x5, 0x4, 0x3, 0x0, 0x7, 0x3, 0x8c, 0x1cd, 0x1f26, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x9, 0xb5, 0x289, 0x0, 0x81, 0x68, 0xed4, 0x7, 0x1000, 0x685a, 0xbd6, 0xd, 0xfffffffe, 0x6, 0x8, 0xfffffffb, 0xb, 0xee0a, 0x6, 0x2, 0x8, 0xb, 0x8000, 0x4, 0x6, 0x7, 0x9, 0x9, 0x5, 0xffffffc0, 0x7fff, 0x7, 0xc39, 0x3ff, 0x6, 0x3, 0x1, 0x6, 0x8, 0x4, 0x8, 0x80, 0x0, 0x7, 0x7, 0x1, 0x401, 0xb, 0x800, 0x4, 0x5, 0x8, 0xfffffaed, 0x8f92, 0x7, 0x5, 0x1, 0xb, 0x7f, 0x3, 0x8000, 0x8, 0x5, 0xa0, 0x1, 0x9, 0xfffffe01, 0xffff, 0x8, 0x1, 0x0, 0xad9, 0x4, 0xc, 0xffff, 0x9, 0x5, 0x5, 0x2, 0xaa0, 0x8, 0x2444, 0x8, 0x855, 0x5, 0x5, 0x180, 0xac5, 0x5f, 0x2, 0x5, 0x8, 0x7, 0xded1, 0x1, 0x3, 0x7fffffff, 0x2, 0x4, 0x3, 0x9, 0x5, 0x0, 0x3, 0x24, 0x35, 0x10000, 0x40, 0x298, 0x9, 0xfffffffe, 0x5, 0xfffffbff, 0x9, 0x401, 0x8, 0xe12c, 0x9, 0x1, 0x7, 0x6, 0x0, 0x64, 0x6, 0x40, 0x9, 0x1, 0x80000000, 0x5, 0x1, 0x9, 0x4, 0x400000, 0x8c, 0x80000001, 0x42, 0x2, 0xa, 0x6, 0x9, 0x7, 0xa, 0x3, 0x3, 0x70eb, 0x8001, 0x6dd, 0xfffffffa, 0x1, 0x6, 0x5, 0xf, 0x2, 0x9, 0x3, 0x5, 0x3, 0x7ff, 0x7de8, 0x9, 0x3, 0xdd, 0x100, 0xfff, 0x5, 0x3, 0x25b7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x3, 0xf2, 0xffff, 0xede, 0x7, 0x80000000, 0x7ff, 0x400, 0xffffff01, 0x4, 0xfffffffd, 0x9, 0x7ff, 0x6, 0xa03e, 0xcf, 0x9, 0x9, 0x800, 0x6, 0x6, 0xffff0000, 0x3, 0xffffffff, 0x40, 0x1ff, 0x2, 0x4, 0x6, 0x0, 0x400, 0x8378, 0x1000, 0x0, 0x2d80, 0x6, 0xffff0000, 0x9413, 0x8000, 0x8, 0xfff, 0x0, 0x5a27, 0xc, 0x1, 0xfffffffa, 0xfffffffc, 0x8bb1, 0x9, 0x80000001, 0x10000, 0x200, 0x5, 0xe, 0xf2, 0xc8bf, 0x3, 0x2, 0xb1f6, 0x7, 0x4, 0x1, 0xffffffb0, 0x7, 0x101, 0x5, 0xfc, 0x6, 0x401, 0x2, 0x3ff, 0xcf72, 0x1, 0x3, 0x0, 0x7, 0x6, 0xffff, 0x2, 0xfffffffe, 0xb7, 0x6, 0x40, 0xf161, 0x3ff, 0xffff, 0x7, 0x7fffffff, 0x80000000, 0x5, 0xc3, 0x9f, 0x9, 0x81, 0x1, 0x9, 0x8, 0x2, 0x200, 0xfffffffc, 0xfffffff9, 0x1, 0x3, 0xff, 0x8, 0x800, 0x0, 0x3, 0xc2, 0x3b6, 0x3, 0x4, 0x0, 0x400, 0x8, 0x7, 0x1, 0x4, 0x7, 0x6fa, 0x9, 0x4, 0x4, 0x3, 0xfa26, 0xa, 0x10000000, 0x6b889fed, 0x1, 0x5, 0x2, 0xffff1f5a, 0x8, 0x8, 0xfffffffd, 0x1, 0x5, 0x4, 0x4, 0x24000, 0x9, 0x10000, 0x27, 0x80000000, 0x2, 0x8, 0x3, 0x3, 0x1, 0x48, 0x80, 0x2, 0x2, 0x5, 0x1, 0x80, 0x2, 0x1, 0x9, 0x7, 0x80000000, 0x18b9, 0x8001, 0x40, 0xfffffc00, 0x4, 0x7fff, 0x1875, 0x837, 0x9, 0x6, 0x10, 0x5, 0x0, 0x3, 0xf, 0x454d, 0x1000, 0x7, 0x8, 0x78, 0xc7a, 0x5, 0xc, 0x8, 0x6, 0xa, 0x6, 0x8000, 0x4, 0x3, 0x5, 0xffff7fff, 0x4, 0x1d, 0x200, 0x7, 0x6, 0x1, 0x5, 0x8, 0x7, 0x80, 0x5, 0x57c5, 0x295c, 0xff, 0x884a, 0x4, 0x7, 0x5, 0x8, 0x18, 0xffffffff, 0x1ff, 0x2bac, 0xf, 0x0, 0x5, 0xc, 0x2, 0x7f, 0x9, 0xe0, 0x1000, 0x4, 0xffffffff, 0x9, 0x3, 0x9, 0x7, 0xfffffff8, 0xfff, 0x179202a3, 0xb, 0x5, 0xfffffffc, 0x7, 0x1ff, 0x1, 0x0, 0x5, 0x7fff, 0xee, 0x3, 0x4, 0x0, 0x3, 0xd321, 0xa9aa, 0xf5, 0x10666f42, 0x1, 0x10, 0x9, 0x0, 0x82d, 0x5, 0x80, 0x4, 0x9, 0xc67, 0xe, 0xf7a8, 0xfffffff9, 0x400, 0x9, 0x1, 0x8, 0xfffff800, 0x6, 0x26a, 0x0, 0x1, 0x4, 0x401, 0x8, 0x8, 0xd4, 0x1, 0x6, 0x0, 0x3, 0x80000001, 0xce, 0x5, 0x50, 0x6, 0x2, 0x1, 0x7, 0x8, 0x6, 0x10000, 0x1, 0x2e, 0x0, 0xff, 0x10, 0x9, 0xa, 0x2, 0x8d, 0x3, 0x9, 0x4, 0x1800, 0xb, 0x0, 0x5, 0x8, 0xf316, 0x2, 0xcf24, 0x3, 0x0, 0x993, 0x1, 0x3, 0x7, 0x2, 0x7029, 0x88, 0x0, 0x200, 0x0, 0x32e4198b, 0x77a, 0xd, 0xd4b8, 0xffff, 0x7, 0x6, 0x1, 0x5, 0xe365, 0xff, 0x28, 0xa, 0x9, 0x5, 0x2, 0x7, 0x3, 0x79abd905, 0x2, 0x9, 0x6, 0x4, 0x6, 0x2, 0x7, 0x40, 0x1, 0x44, 0x200, 0x100, 0x4, 0x8, 0x7f, 0x8, 0xffffaaf1, 0x200, 0x4, 0x9, 0x2, 0xea3, 0x80000001, 0x80000001, 0x4, 0x3, 0x0, 0x2, 0x6, 0x3, 0x4, 0x9, 0x2, 0x4, 0x7, 0x80000000, 0x5, 0x2, 0x5, 0xffff3115, 0x6, 0x5, 0x3, 0xe, 0x29, 0x8, 0x0, 0x3, 0x100, 0x1, 0x8000, 0x9, 0x10000, 0x64a0, 0x5, 0x7a33, 0x54, 0x3, 0x0, 0x1, 0x8, 0x10000, 0x7f, 0xf, 0x1, 0x10001, 0x6, 0x1, 0xfffff000, 0x3, 0x8c72, 0x1, 0xffffff00, 0x1, 0x80000001, 0xff, 0x101, 0x800, 0x0, 0x6, 0x8, 0xa, 0x8000, 0x1, 0x4, 0x8001, 0x4, 0xfffffff4, 0x477, 0x80000001, 0x5, 0xfa, 0x6, 0x3, 0x9, 0x4, 0x8, 0x4, 0x1, 0x7, 0x101, 0x7, 0xb4, 0x7, 0x77e8, 0x1, 0x9185, 0x7b99, 0x9, 0x1, 0x2, 0x10000, 0xa33a, 0x6, 0xffffffff, 0x1, 0xc6ed, 0x0, 0x1000, 0x1, 0x8, 0x7, 0x5, 0x40, 0x80000001, 0x9, 0xfffffffb, 0x5, 0x8000, 0x8, 0x7fffffff, 0x40, 0x2, 0x2d87e325, 0x10, 0x6, 0x2, 0xffffcb9b, 0xc, 0x80000001, 0xc, 0xfffffff9, 0xfffffc01, 0x6bc]})

25.637528862s ago: executing program 5 (id=1243):
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000180)=ANY=[], 0x86)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

25.585327069s ago: executing program 5 (id=1244):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x68}}, 0x81)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r0, 0x1, 0x170bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x90}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)

25.480598853s ago: executing program 5 (id=1245):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1})
socket$netlink(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
r1 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b)
sendfile(r3, r1, 0x0, 0x4000000053d2)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
mmap(&(0x7f0000570000/0x3000)=nil, 0x3000, 0x5, 0x28011, r0, 0x4000)

25.32566219s ago: executing program 5 (id=1246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014)

25.022681657s ago: executing program 5 (id=1247):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000000c0)="05000000010021020dd9ae53dd2a834b3a0ab45549a830e8d3d8833fb101d38ca9ef34a2fe74a73cc249f0fc6044be2b505e298ad314ead77bcbe3a89860caf136ed1a466ea3ae793bba70aa7edf1202ca9892f3d76055b5d72b8586879a141fd6e32555f44a80ac13ada196fb3534e7bf72d1dff7368b6e33a51a6cbc60566821a3fa5c69ab475e2b6f5acd6de9b046ee096644a9a183d0950b0f31f21c32aba9f1c975600e30ca3a0f9a50253fe927af4f4646695500a1aaba06a9801955dfde37263dbe57c34792fa11761b4901", 0xcf)

9.469518272s ago: executing program 38 (id=1247):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000000c0)="05000000010021020dd9ae53dd2a834b3a0ab45549a830e8d3d8833fb101d38ca9ef34a2fe74a73cc249f0fc6044be2b505e298ad314ead77bcbe3a89860caf136ed1a466ea3ae793bba70aa7edf1202ca9892f3d76055b5d72b8586879a141fd6e32555f44a80ac13ada196fb3534e7bf72d1dff7368b6e33a51a6cbc60566821a3fa5c69ab475e2b6f5acd6de9b046ee096644a9a183d0950b0f31f21c32aba9f1c975600e30ca3a0f9a50253fe927af4f4646695500a1aaba06a9801955dfde37263dbe57c34792fa11761b4901", 0xcf)

4.654917791s ago: executing program 9 (id=1347):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x10, 0x7}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8)

4.371559138s ago: executing program 9 (id=1348):
add_key$user(&(0x7f0000001cc0), 0x0, 0x0, 0x0, 0xfffffffffffffff8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000005)
r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x90000)
ppoll(&(0x7f0000000040)=[{r6, 0x200}, {r0, 0x300}, {r2, 0x2020}, {r7, 0x1}, {r8, 0x824c}], 0x5, 0x0, 0x0, 0x0)
close(0x5)

4.148259812s ago: executing program 9 (id=1352):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@fd={0x100, 0x1, 0xfffffffffffffe17, 0x400, 0x1, {0x77359400}, {0x2, 0x1, 0x6, 0x7, 0x8, 0xd7, "79f5db37"}, 0x2, 0x4, {}, 0x0, 0x0, r3})
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x8f, 0x5f, 0x4, 0x10, 0x7a6, 0x986, 0x579c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0x40, 0x6, "", [{{0x9, 0x4, 0xc7, 0x5, 0x0, 0xe9, 0x85, 0xb4, 0xeb}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x34}}, 0x0)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x8, 0x0, 0x8, 0xd13e, 0x4, 0x2, "55c799fa9efa88afad769ab115199085", 0x2, 0x76, 0x4, 0xe2, 0x0, 0x4, 0x7})
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.099313709s ago: executing program 4 (id=1353):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="39b9de0700392f27c5af5ff22d4d564f05cec7e9f4fc6423153131762caa458e8a20f99835c412eb873ff1b05bfeb384511896071572750246ee4ab195c9da4ffcef922a5d3da8d918ad56887c86138a4c8455f00e0151b415db54cd2aed9ffd4e5868d5de9cf31ac9cc6c4e55c7ea2be216776ca4346aa0c309c6cedfa5e77a93027372c67166cf68991766e32d4788a9fa3e1eccdf712819794600"/165, 0xa5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000004c0)={0x6, 0x2, 0x1, {0x3, 0x0, 0x0, 0x6}})
recvmmsg$unix(r1, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/6, 0x6}, {0x0}, {&(0x7f0000000f80)=""/75, 0x4b}, {&(0x7f0000001000)=""/120, 0x78}], 0x4}}], 0x2, 0x40000200, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

2.81214123s ago: executing program 8 (id=1358):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000480)={[0x2a, 0x6, 0x1, 0xffffffff, 0xdf90, 0xf7, 0x9, 0x800, 0x7, 0x8001, 0xc20, 0x5, 0x8, 0x800, 0x3, 0x101, 0x3ff, 0xa1, 0x1, 0x2, 0xf, 0x0, 0x0, 0x101, 0x8001, 0x6, 0x721b, 0xf8a0, 0x200, 0x10001, 0xb, 0x1, 0x5, 0x0, 0x8, 0x7, 0x8, 0x2, 0xfffffffb, 0x7, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x3, 0x9, 0x6, 0x8, 0x1, 0x10001, 0x80000001, 0x1, 0x7, 0x5, 0x2, 0x4, 0x3, 0x3, 0x8001, 0x5, 0x1, 0x10, 0x10001, 0x2, 0x91, 0x3bf, 0x6, 0x8, 0xfff, 0x101, 0x570, 0x3, 0x1, 0x3, 0x2, 0x0, 0x5, 0x1, 0x400, 0x6, 0x5, 0x7, 0x9, 0x5, 0x74c, 0x6a6, 0x3, 0x2, 0xfffffff9, 0x5, 0x7, 0x9, 0xb, 0x9, 0x7, 0x10, 0x58, 0x5, 0x2, 0x9, 0x6, 0xd6, 0x101, 0x4, 0xffff, 0x3, 0xd, 0x3, 0x7f, 0x6, 0x9, 0x101, 0x8001, 0x800, 0xffffffff, 0x960e, 0xffffff92, 0x1, 0x7f, 0x5, 0x800, 0x7, 0xf1, 0x7f, 0x4, 0x9a, 0x0, 0x0, 0x4, 0x9a2, 0x8, 0xfffffff7, 0x4, 0x101, 0x5, 0x3, 0x5, 0x5, 0x4, 0x27, 0x7, 0x80000001, 0x5, 0x8, 0x1, 0x8, 0x8000, 0x9, 0x880, 0xffffffff, 0xffff0000, 0x5e7, 0x6, 0x5, 0x5, 0x0, 0x4, 0x7, 0xfffff000, 0x1, 0x9, 0x0, 0x2, 0xfff, 0x7, 0x2479, 0x2ef, 0x9, 0xffff, 0x2, 0x2, 0x7, 0x8, 0x7, 0xffffff6b, 0xe, 0xb, 0x8, 0x9, 0x6, 0x3, 0x2, 0xc, 0x1, 0x5, 0x84e5, 0xfffffffe, 0x4c1, 0x2, 0x0, 0x1437, 0x8, 0xc, 0x7ff, 0x4, 0x801c, 0x8, 0xa, 0x400, 0x100, 0x2, 0x9, 0x1, 0x7, 0x48bb, 0x8, 0x7, 0x2, 0x1, 0x8001, 0x3, 0x1, 0x1, 0x806b, 0x8, 0x81, 0x3, 0x3ff, 0x8, 0x1, 0x2f, 0x10001, 0x9e, 0x8000, 0x8, 0xf, 0x5, 0x6, 0x3, 0xfffffff9, 0x6, 0xffff47ea, 0x6, 0x4121, 0x1c0000, 0xe52, 0x0, 0xf, 0xd40, 0x2, 0xfffffffc, 0x9, 0x1, 0x30, 0xc21, 0x3ff, 0xffff, 0x6cb6, 0x6, 0x8, 0x8, 0xfff, 0x2, 0xf, 0x7, 0x6, 0x9, 0x8, 0x4297559e, 0x116af931, 0x8, 0x5, 0x7761, 0x3, 0x5, 0x700000, 0x6, 0x8, 0x1ab1, 0xfffffff3, 0x10001, 0x5a, 0x6, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x2, 0x6, 0x3602, 0xa, 0x6, 0x4, 0x2, 0x8, 0xdac, 0x81, 0x5, 0x6, 0x401, 0x401, 0x7, 0x4, 0x0, 0xffffffff, 0x4, 0x19c, 0x8001, 0xe192, 0xff, 0x9, 0x9, 0x5b, 0x4, 0x6, 0x11df, 0x5375, 0x9, 0x1, 0x5, 0x8, 0xfffffff3, 0x5, 0x15d3, 0x84da, 0x4, 0x7f, 0x5, 0x3, 0xd3d, 0x5, 0x7f, 0x3, 0x80000001, 0x7fffffff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x10001, 0xfffffffa, 0x7, 0x5, 0xfffffff3, 0x5d, 0x4, 0x0, 0x8, 0x4, 0xfff, 0x10, 0xdde, 0x5, 0x8, 0x5, 0x4, 0x3, 0x0, 0x7, 0x3, 0x8c, 0x1cd, 0x1f26, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x9, 0xb5, 0x289, 0x0, 0x81, 0x68, 0xed4, 0x7, 0x1000, 0x685a, 0xbd6, 0xd, 0xfffffffe, 0x6, 0x8, 0xfffffffb, 0xb, 0xee0a, 0x6, 0x2, 0x8, 0xb, 0x8000, 0x4, 0x6, 0x7, 0x9, 0x9, 0x5, 0xffffffc0, 0x7fff, 0x7, 0xc39, 0x3ff, 0x6, 0x3, 0x1, 0x6, 0x8, 0x4, 0x8, 0x80, 0x0, 0x7, 0x7, 0x1, 0x401, 0xb, 0x800, 0x4, 0x5, 0x8, 0xfffffaed, 0x8f92, 0x7, 0x5, 0x1, 0xb, 0x7f, 0x3, 0x8000, 0x8, 0x5, 0xa0, 0x1, 0x9, 0xfffffe01, 0xffff, 0x8, 0x1, 0x0, 0xad9, 0x4, 0xc, 0xffff, 0x9, 0x5, 0x5, 0x2, 0xaa0, 0x8, 0x2444, 0x8, 0x855, 0x5, 0x5, 0x180, 0xac5, 0x5f, 0x2, 0x5, 0x8, 0x7, 0xded1, 0x1, 0x3, 0x7fffffff, 0x2, 0x4, 0x3, 0x9, 0x5, 0x0, 0x3, 0x24, 0x35, 0x10000, 0x40, 0x298, 0x9, 0xfffffffe, 0x5, 0xfffffbff, 0x9, 0x401, 0x8, 0xe12c, 0x9, 0x1, 0x7, 0x6, 0x0, 0x64, 0x6, 0x40, 0x9, 0x1, 0x80000000, 0x5, 0x1, 0x9, 0x4, 0x400000, 0x8c, 0x80000001, 0x42, 0x2, 0xa, 0x6, 0x9, 0x7, 0xa, 0x3, 0x3, 0x70eb, 0x8001, 0x6dd, 0xfffffffa, 0x1, 0x6, 0x5, 0xf, 0x2, 0x9, 0x3, 0x5, 0x3, 0x7ff, 0x7de8, 0x9, 0x3, 0xdd, 0x100, 0xfff, 0x5, 0x3, 0x25b7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x3, 0xf2, 0xffff, 0xede, 0x7, 0x80000000, 0x7ff, 0x400, 0xffffff01, 0x4, 0xfffffffd, 0x9, 0x7ff, 0x6, 0xa03e, 0xcf, 0x9, 0x9, 0x800, 0x6, 0x6, 0xffff0000, 0x3, 0xffffffff, 0x40, 0x1ff, 0x2, 0x4, 0x6, 0x0, 0x400, 0x8378, 0x1000, 0x0, 0x2d80, 0x6, 0xffff0000, 0x9413, 0x8000, 0x8, 0xfff, 0x0, 0x5a27, 0xc, 0x1, 0xfffffffa, 0xfffffffc, 0x8bb1, 0x9, 0x80000001, 0x10000, 0x200, 0x5, 0xe, 0xf2, 0xc8bf, 0x3, 0x2, 0xb1f6, 0x7, 0x4, 0x1, 0xffffffb0, 0x7, 0x101, 0x5, 0xfc, 0x6, 0x401, 0x2, 0x3ff, 0xcf72, 0x1, 0x3, 0x0, 0x7, 0x6, 0xffff, 0x2, 0xfffffffe, 0xb7, 0x6, 0x40, 0xf161, 0x3ff, 0xffff, 0x7, 0x7fffffff, 0x80000000, 0x5, 0xc3, 0x9f, 0x9, 0x81, 0x1, 0x9, 0x8, 0x2, 0x200, 0xfffffffc, 0xfffffff9, 0x1, 0x3, 0xff, 0x8, 0x800, 0x0, 0x3, 0xc2, 0x3b6, 0x3, 0x4, 0x0, 0x400, 0x8, 0x7, 0x1, 0x4, 0x7, 0x6fa, 0x9, 0x4, 0x4, 0x3, 0xfa26, 0xa, 0x10000000, 0x6b889fed, 0x1, 0x5, 0x2, 0xffff1f5a, 0x8, 0x8, 0xfffffffd, 0x1, 0x5, 0x4, 0x4, 0x24000, 0x9, 0x10000, 0x27, 0x80000000, 0x2, 0x8, 0x3, 0x3, 0x1, 0x48, 0x80, 0x2, 0x2, 0x5, 0x1, 0x80, 0x2, 0x1, 0x9, 0x7, 0x80000000, 0x18b9, 0x8001, 0x40, 0xfffffc00, 0x4, 0x7fff, 0x1875, 0x837, 0x9, 0x6, 0x10, 0x5, 0x0, 0x3, 0xf, 0x454d, 0x1000, 0x7, 0x8, 0x78, 0xc7a, 0x5, 0xc, 0x8, 0x6, 0xa, 0x6, 0x8000, 0x4, 0x3, 0x5, 0xffff7fff, 0x4, 0x1d, 0x200, 0x7, 0x6, 0x1, 0x5, 0x8, 0x7, 0x80, 0x5, 0x57c5, 0x295c, 0xff, 0x884a, 0x4, 0x7, 0x5, 0x8, 0x18, 0xffffffff, 0x1ff, 0x2bac, 0xf, 0x0, 0x5, 0xc, 0x2, 0x7f, 0x9, 0xe0, 0x1000, 0x4, 0xffffffff, 0x9, 0x3, 0x9, 0x7, 0xfffffff8, 0xfff, 0x179202a3, 0xb, 0x5, 0xfffffffc, 0x7, 0x1ff, 0x1, 0x0, 0x5, 0x7fff, 0xee, 0x3, 0x4, 0x0, 0x3, 0xd321, 0xa9aa, 0xf5, 0x10666f42, 0x1, 0x10, 0x9, 0x0, 0x82d, 0x5, 0x80, 0x4, 0x9, 0xc67, 0xe, 0xf7a8, 0xfffffff9, 0x400, 0x9, 0x1, 0x8, 0xfffff800, 0x6, 0x26a, 0x0, 0x1, 0x4, 0x401, 0x8, 0x8, 0xd4, 0x1, 0x6, 0x0, 0x3, 0x80000001, 0xce, 0x5, 0x50, 0x6, 0x2, 0x1, 0x7, 0x8, 0x6, 0x10000, 0x1, 0x2e, 0x0, 0xff, 0x10, 0x9, 0xa, 0x2, 0x8d, 0x3, 0x9, 0x4, 0x1800, 0xb, 0x0, 0x5, 0x8, 0xf316, 0x2, 0xcf24, 0x3, 0x0, 0x993, 0x1, 0x3, 0x7, 0x2, 0x7029, 0x88, 0x0, 0x200, 0x0, 0x32e4198b, 0x77a, 0xd, 0xd4b8, 0xffff, 0x7, 0x6, 0x1, 0x5, 0xe365, 0xff, 0x28, 0xa, 0x9, 0x5, 0x2, 0x7, 0x3, 0x79abd905, 0x2, 0x9, 0x6, 0x4, 0x6, 0x2, 0x7, 0x40, 0x1, 0x44, 0x200, 0x100, 0x4, 0x8, 0x7f, 0x8, 0xffffaaf1, 0x200, 0x4, 0x9, 0x2, 0xea3, 0x80000001, 0x80000001, 0x4, 0x3, 0x0, 0x2, 0x6, 0x3, 0x4, 0x9, 0x2, 0x4, 0x7, 0x80000000, 0x5, 0x2, 0x5, 0xffff3115, 0x6, 0x5, 0x3, 0xe, 0x29, 0x8, 0x0, 0x3, 0x100, 0x1, 0x8000, 0x9, 0x10000, 0x64a0, 0x5, 0x7a33, 0x54, 0x3, 0x0, 0x1, 0x8, 0x10000, 0x7f, 0xf, 0x1, 0x10001, 0x6, 0x1, 0xfffff000, 0x3, 0x8c72, 0x1, 0xffffff00, 0x1, 0x80000001, 0xff, 0x101, 0x800, 0x0, 0x6, 0x8, 0xa, 0x8000, 0x1, 0x4, 0x8001, 0x4, 0xfffffff4, 0x477, 0x80000001, 0x5, 0xfa, 0x6, 0x3, 0x9, 0x4, 0x8, 0x4, 0x1, 0x7, 0x101, 0x7, 0xb4, 0x7, 0x77e8, 0x1, 0x9185, 0x7b99, 0x9, 0x1, 0x2, 0x10000, 0xa33a, 0x6, 0xffffffff, 0x1, 0xc6ed, 0x0, 0x1000, 0x1, 0x8, 0x7, 0x5, 0x40, 0x80000001, 0x9, 0xfffffffb, 0x5, 0x8000, 0x8, 0x7fffffff, 0x40, 0x2, 0x2d87e325, 0x10, 0x6, 0x2, 0xffffcb9b, 0xc, 0x80000001, 0xc, 0xfffffff9, 0xfffffc01, 0x6bc]})

2.737275174s ago: executing program 8 (id=1359):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x1)
flock(r0, 0x1)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@pptp={0x18, 0x2, {0x1, @local}}, {&(0x7f0000000600)=""/105, 0x69}, &(0x7f00000002c0), 0x50}, 0xa0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200)=0xfffffffb, 0x4)
r6 = fsmount(r5, 0x0, 0x2)
fchdir(r6)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0x40049366, 0x0)
fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresuid(0x0, r8, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r3, &(0x7f0000000040)='{/]^.\x00', 0x80, &(0x7f00000001c0)={@align=0x3, {0x6, 0x7, 0x4, 0x8000000000000000}}, 0xb01e, &(0x7f0000000480), &(0x7f00000004c0)=0x10000})
ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f00000005c0)={0x0, 0x40000005, 0x7ff, 0x800001})
mount$9p_unix(0x0, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180), 0x3034c00, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0)
acct(0x0)

2.429656194s ago: executing program 8 (id=1360):
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nC'], 0x86)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

2.31816608s ago: executing program 8 (id=1361):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000100)) (async)
getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000100))
getrlimit(0x5d8c14f57b6356a6, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x10, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x21}, 0x800) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x10, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x21}, 0x800)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

2.240469888s ago: executing program 8 (id=1362):
r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f928c"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x5)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
io_setup(0x202, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
ioctl$TCFLSH(r2, 0x40087101, 0x20001100)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$cgroup_pid(r3, &(0x7f0000000000), 0x12)
recvmsg$kcm(r3, &(0x7f0000004680)={&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/88, 0x58}], 0x6, &(0x7f0000004580)=""/198, 0xc6}, 0x100)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

2.155666931s ago: executing program 4 (id=1363):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x402001)
flistxattr(r0, &(0x7f0000000080)=""/196, 0xc4)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r1, &(0x7f0000000300)="f617a8ea0700ffffffffffff810016fe0806", 0x12, 0x40088d0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9a41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
write$tun(r2, &(0x7f0000000280)=ANY=[], 0xfdef)

2.027039877s ago: executing program 4 (id=1364):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1214042, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', 'devtmpfs\x00'}) (async)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')

1.878591297s ago: executing program 4 (id=1365):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
mount$9p_unix(0x0, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180), 0x3034c00, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x803, 0x5, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0x2, 0x4})

1.470761823s ago: executing program 4 (id=1366):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000480)={[0x2a, 0x6, 0x1, 0xffffffff, 0xdf90, 0xf7, 0x9, 0x800, 0x7, 0x8001, 0xc20, 0x5, 0x8, 0x800, 0x3, 0x101, 0x3ff, 0xa1, 0x1, 0x2, 0xf, 0x0, 0x0, 0x101, 0x8001, 0x6, 0x721b, 0xf8a0, 0x200, 0x10001, 0xb, 0x1, 0x5, 0x0, 0x8, 0x7, 0x8, 0x2, 0xfffffffb, 0x7, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x3, 0x9, 0x6, 0x8, 0x1, 0x10001, 0x80000001, 0x1, 0x7, 0x5, 0x2, 0x4, 0x3, 0x3, 0x8001, 0x5, 0x1, 0x10, 0x10001, 0x2, 0x91, 0x3bf, 0x6, 0x8, 0xfff, 0x101, 0x570, 0x3, 0x1, 0x3, 0x2, 0x0, 0x5, 0x1, 0x400, 0x6, 0x5, 0x7, 0x9, 0x5, 0x74c, 0x6a6, 0x3, 0x2, 0xfffffff9, 0x5, 0x7, 0x9, 0xb, 0x9, 0x7, 0x10, 0x58, 0x5, 0x2, 0x9, 0x6, 0xd6, 0x101, 0x4, 0xffff, 0x3, 0xd, 0x3, 0x7f, 0x6, 0x9, 0x101, 0x8001, 0x800, 0xffffffff, 0x960e, 0xffffff92, 0x1, 0x7f, 0x5, 0x800, 0x7, 0xf1, 0x7f, 0x4, 0x9a, 0x0, 0x0, 0x4, 0x9a2, 0x8, 0xfffffff7, 0x4, 0x101, 0x5, 0x3, 0x5, 0x5, 0x4, 0x27, 0x7, 0x80000001, 0x5, 0x8, 0x1, 0x8, 0x8000, 0x9, 0x880, 0xffffffff, 0xffff0000, 0x5e7, 0x6, 0x5, 0x5, 0x0, 0x4, 0x7, 0xfffff000, 0x1, 0x9, 0x0, 0x2, 0xfff, 0x7, 0x2479, 0x2ef, 0x9, 0xffff, 0x2, 0x2, 0x7, 0x8, 0x7, 0xffffff6b, 0xe, 0xb, 0x8, 0x9, 0x6, 0x3, 0x2, 0xc, 0x1, 0x5, 0x84e5, 0xfffffffe, 0x4c1, 0x2, 0x0, 0x1437, 0x8, 0xc, 0x7ff, 0x4, 0x801c, 0x8, 0xa, 0x400, 0x100, 0x2, 0x9, 0x1, 0x7, 0x48bb, 0x8, 0x7, 0x2, 0x1, 0x8001, 0x3, 0x1, 0x1, 0x806b, 0x8, 0x81, 0x3, 0x3ff, 0x8, 0x1, 0x2f, 0x10001, 0x9e, 0x8000, 0x8, 0xf, 0x5, 0x6, 0x3, 0xfffffff9, 0x6, 0xffff47ea, 0x6, 0x4121, 0x1c0000, 0xe52, 0x0, 0xf, 0xd40, 0x2, 0xfffffffc, 0x9, 0x1, 0x30, 0xc21, 0x3ff, 0xffff, 0x6cb6, 0x6, 0x8, 0x8, 0xfff, 0x2, 0xf, 0x7, 0x6, 0x9, 0x8, 0x4297559e, 0x116af931, 0x8, 0x5, 0x7761, 0x3, 0x5, 0x700000, 0x6, 0x8, 0x1ab1, 0xfffffff3, 0x10001, 0x5a, 0x6, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x2, 0x6, 0x3602, 0xa, 0x6, 0x4, 0x2, 0x8, 0xdac, 0x81, 0x5, 0x6, 0x401, 0x401, 0x7, 0x4, 0x0, 0xffffffff, 0x4, 0x19c, 0x8001, 0xe192, 0xff, 0x9, 0x9, 0x5b, 0x4, 0x6, 0x11df, 0x5375, 0x9, 0x1, 0x5, 0x8, 0xfffffff3, 0x5, 0x15d3, 0x84da, 0x4, 0x7f, 0x5, 0x3, 0xd3d, 0x5, 0x7f, 0x3, 0x80000001, 0x7fffffff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x10001, 0xfffffffa, 0x7, 0x5, 0xfffffff3, 0x5d, 0x4, 0x0, 0x8, 0x4, 0xfff, 0x10, 0xdde, 0x5, 0x8, 0x5, 0x4, 0x3, 0x0, 0x7, 0x3, 0x8c, 0x1cd, 0x1f26, 0x4, 0x7, 0xffffffff, 0x2, 0xff, 0x9, 0xb5, 0x289, 0x0, 0x81, 0x68, 0xed4, 0x7, 0x1000, 0x685a, 0xbd6, 0xd, 0xfffffffe, 0x6, 0x8, 0xfffffffb, 0xb, 0xee0a, 0x6, 0x2, 0x8, 0xb, 0x8000, 0x4, 0x6, 0x7, 0x9, 0x9, 0x5, 0xffffffc0, 0x7fff, 0x7, 0xc39, 0x3ff, 0x6, 0x3, 0x1, 0x6, 0x8, 0x4, 0x8, 0x80, 0x0, 0x7, 0x7, 0x1, 0x401, 0xb, 0x800, 0x4, 0x5, 0x8, 0xfffffaed, 0x8f92, 0x7, 0x5, 0x1, 0xb, 0x7f, 0x3, 0x8000, 0x8, 0x5, 0xa0, 0x1, 0x9, 0xfffffe01, 0xffff, 0x8, 0x1, 0x0, 0xad9, 0x4, 0xc, 0xffff, 0x9, 0x5, 0x5, 0x2, 0xaa0, 0x8, 0x2444, 0x8, 0x855, 0x5, 0x5, 0x180, 0xac5, 0x5f, 0x2, 0x5, 0x8, 0x7, 0xded1, 0x1, 0x3, 0x7fffffff, 0x2, 0x4, 0x3, 0x9, 0x5, 0x0, 0x3, 0x24, 0x35, 0x10000, 0x40, 0x298, 0x9, 0xfffffffe, 0x5, 0xfffffbff, 0x9, 0x401, 0x8, 0xe12c, 0x9, 0x1, 0x7, 0x6, 0x0, 0x64, 0x6, 0x40, 0x9, 0x1, 0x80000000, 0x5, 0x1, 0x9, 0x4, 0x400000, 0x8c, 0x80000001, 0x42, 0x2, 0xa, 0x6, 0x9, 0x7, 0xa, 0x3, 0x3, 0x70eb, 0x8001, 0x6dd, 0xfffffffa, 0x1, 0x6, 0x5, 0xf, 0x2, 0x9, 0x3, 0x5, 0x3, 0x7ff, 0x7de8, 0x9, 0x3, 0xdd, 0x100, 0xfff, 0x5, 0x3, 0x25b7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x3, 0xf2, 0xffff, 0xede, 0x7, 0x80000000, 0x7ff, 0x400, 0xffffff01, 0x4, 0xfffffffd, 0x9, 0x7ff, 0x6, 0xa03e, 0xcf, 0x9, 0x9, 0x800, 0x6, 0x6, 0xffff0000, 0x3, 0xffffffff, 0x40, 0x1ff, 0x2, 0x4, 0x6, 0x0, 0x400, 0x8378, 0x1000, 0x0, 0x2d80, 0x6, 0xffff0000, 0x9413, 0x8000, 0x8, 0xfff, 0x0, 0x5a27, 0xc, 0x1, 0xfffffffa, 0xfffffffc, 0x8bb1, 0x9, 0x80000001, 0x10000, 0x200, 0x5, 0xe, 0xf2, 0xc8bf, 0x3, 0x2, 0xb1f6, 0x7, 0x4, 0x1, 0xffffffb0, 0x7, 0x101, 0x5, 0xfc, 0x6, 0x401, 0x2, 0x3ff, 0xcf72, 0x1, 0x3, 0x0, 0x7, 0x6, 0xffff, 0x2, 0xfffffffe, 0xb7, 0x6, 0x40, 0xf161, 0x3ff, 0xffff, 0x7, 0x7fffffff, 0x80000000, 0x5, 0xc3, 0x9f, 0x9, 0x81, 0x1, 0x9, 0x8, 0x2, 0x200, 0xfffffffc, 0xfffffff9, 0x1, 0x3, 0xff, 0x8, 0x800, 0x0, 0x3, 0xc2, 0x3b6, 0x3, 0x4, 0x0, 0x400, 0x8, 0x7, 0x1, 0x4, 0x7, 0x6fa, 0x9, 0x4, 0x4, 0x3, 0xfa26, 0xa, 0x10000000, 0x6b889fed, 0x1, 0x5, 0x2, 0xffff1f5a, 0x8, 0x8, 0xfffffffd, 0x1, 0x5, 0x4, 0x4, 0x24000, 0x9, 0x10000, 0x27, 0x80000000, 0x2, 0x8, 0x3, 0x3, 0x1, 0x48, 0x80, 0x2, 0x2, 0x5, 0x1, 0x80, 0x2, 0x1, 0x9, 0x7, 0x80000000, 0x18b9, 0x8001, 0x40, 0xfffffc00, 0x4, 0x7fff, 0x1875, 0x837, 0x9, 0x6, 0x10, 0x5, 0x0, 0x3, 0xf, 0x454d, 0x1000, 0x7, 0x8, 0x78, 0xc7a, 0x5, 0xc, 0x8, 0x6, 0xa, 0x6, 0x8000, 0x4, 0x3, 0x5, 0xffff7fff, 0x4, 0x1d, 0x200, 0x7, 0x6, 0x1, 0x5, 0x8, 0x7, 0x80, 0x5, 0x57c5, 0x295c, 0xff, 0x884a, 0x4, 0x7, 0x5, 0x8, 0x18, 0xffffffff, 0x1ff, 0x2bac, 0xf, 0x0, 0x5, 0xc, 0x2, 0x7f, 0x9, 0xe0, 0x1000, 0x4, 0xffffffff, 0x9, 0x3, 0x9, 0x7, 0xfffffff8, 0xfff, 0x179202a3, 0xb, 0x5, 0xfffffffc, 0x7, 0x1ff, 0x1, 0x0, 0x5, 0x7fff, 0xee, 0x3, 0x4, 0x0, 0x3, 0xd321, 0xa9aa, 0xf5, 0x10666f42, 0x1, 0x10, 0x9, 0x0, 0x82d, 0x5, 0x80, 0x4, 0x9, 0xc67, 0xe, 0xf7a8, 0xfffffff9, 0x400, 0x9, 0x1, 0x8, 0xfffff800, 0x6, 0x26a, 0x0, 0x1, 0x4, 0x401, 0x8, 0x8, 0xd4, 0x1, 0x6, 0x0, 0x3, 0x80000001, 0xce, 0x5, 0x50, 0x6, 0x2, 0x1, 0x7, 0x8, 0x6, 0x10000, 0x1, 0x2e, 0x0, 0xff, 0x10, 0x9, 0xa, 0x2, 0x8d, 0x3, 0x9, 0x4, 0x1800, 0xb, 0x0, 0x5, 0x8, 0xf316, 0x2, 0xcf24, 0x3, 0x0, 0x993, 0x1, 0x3, 0x7, 0x2, 0x7029, 0x88, 0x0, 0x200, 0x0, 0x32e4198b, 0x77a, 0xd, 0xd4b8, 0xffff, 0x7, 0x6, 0x1, 0x5, 0xe365, 0xff, 0x28, 0xa, 0x9, 0x5, 0x2, 0x7, 0x3, 0x79abd905, 0x2, 0x9, 0x6, 0x4, 0x6, 0x2, 0x7, 0x40, 0x1, 0x44, 0x200, 0x100, 0x4, 0x8, 0x7f, 0x8, 0xffffaaf1, 0x200, 0x4, 0x9, 0x2, 0xea3, 0x80000001, 0x80000001, 0x4, 0x3, 0x0, 0x2, 0x6, 0x3, 0x4, 0x9, 0x2, 0x4, 0x7, 0x80000000, 0x5, 0x2, 0x5, 0xffff3115, 0x6, 0x5, 0x3, 0xe, 0x29, 0x8, 0x0, 0x3, 0x100, 0x1, 0x8000, 0x9, 0x10000, 0x64a0, 0x5, 0x7a33, 0x54, 0x3, 0x0, 0x1, 0x8, 0x10000, 0x7f, 0xf, 0x1, 0x10001, 0x6, 0x1, 0xfffff000, 0x3, 0x8c72, 0x1, 0xffffff00, 0x1, 0x80000001, 0xff, 0x101, 0x800, 0x0, 0x6, 0x8, 0xa, 0x8000, 0x1, 0x4, 0x8001, 0x4, 0xfffffff4, 0x477, 0x80000001, 0x5, 0xfa, 0x6, 0x3, 0x9, 0x4, 0x8, 0x4, 0x1, 0x7, 0x101, 0x7, 0xb4, 0x7, 0x77e8, 0x1, 0x9185, 0x7b99, 0x9, 0x1, 0x2, 0x10000, 0xa33a, 0x6, 0xffffffff, 0x1, 0xc6ed, 0x0, 0x1000, 0x1, 0x8, 0x7, 0x5, 0x40, 0x80000001, 0x9, 0xfffffffb, 0x5, 0x8000, 0x8, 0x7fffffff, 0x40, 0x2, 0x2d87e325, 0x10, 0x6, 0x2, 0xffffcb9b, 0xc, 0x80000001, 0xc, 0xfffffff9, 0xfffffc01, 0x6bc]})

1.180310585s ago: executing program 4 (id=1367):
r0 = syz_usb_connect(0x4, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x68, 0x95, 0x98, 0xff, 0x733, 0x1311, 0xabbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x2f, 0x2, 0x10, 0x80, "", [{{0x9, 0x4, 0x2d, 0x0, 0x3, 0x16, 0xd1, 0xd9, 0x1f, [@uac_as, @uac_control={{0xa, 0x24, 0x1, 0xa9ac, 0x4a}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xfe00, 0x9, "f0a334"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x4, 0x8, "9f633873aae5"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x5, 0x1, "175464"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x6, 0xa, 0x0, 0xc, 0x3}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0xd4, "d5d9694c88"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x6, 0x1}]}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x3b, 0x9, 0x40}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xf, 0x2f, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x5, 0xb3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x400}, @generic={0x52, 0xa, "5bda76a3dcb167818eebe4e5fd20ad3ccdc6492563ddbcf46c13f820e6c713ab5e0c1f0cd00956e4f6f23b0827e30de20b65b5e6509ae73d40591bf2aaba556055b4d36dcbbbb53175ea1115205d1717"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x7, 0x3, 0x0, 0x3}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x423}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ecm(0x4, 0x9e, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x1, 0x1, 0x40, 0x40, 0xa, "", [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0xf9, {{0x8, 0x24, 0x6, 0x0, 0x0, "ec4fb3"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x9, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x36, 0x8, 0x10, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x8000, 0x10}, @mdlm_detail={0x33, 0x24, 0x13, 0x3a, "4772a57639dd5ef1de6c5376a5dab54a1e3660f13c47173c41ccbf7b4a0f2c49fd04e1d7c622048863970a33acaff6"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xd, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x9, 0x26}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xcb, 0x6, 0x0, 0x40, 0xc1}, 0x80, &(0x7f0000000380)={0x5, 0xf, 0x80, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "fbc2c8fc2f241444fa65e72c85a83fe5"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x0, 0x541}, @generic={0x4c, 0x10, 0xa, "ddba10595ffb3e5a8ad7d5f75a04263b61abf4f93538d3736bf6f35da963edf7d2f30edf488dfc6fb4d6d916c4af358a4f449b56c15ab9f7d2b764141e02d0f32fd70b6fa8acbb0382"}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40d}}]})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl(r2, 0x800, &(0x7f00000004c0)="4dc3ada44513804cab3d093ce7fe87dcf18e1bb9fd1847b9e79666c060faab62a75c4c1dffce08e9480029fb8a48c2ef78a2c253095fb4a28084f24ff991216927fed3e0704304377db22fff510a52fa666ccbac972c62d7b6b213b983a39376fe3826ba1f62e68fea4b9efb8a5fd26c871a63fadcc151f6e2d62956e66d6f9422da8c6e5f4916452f0ded4c824abebffdd52fb22701e623911cd83a3caa0af19c10135c0ae8b97496aff9b2135d746c2eaf0383")
ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000580))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_ep_write(r1, 0x5, 0xff, &(0x7f0000000980)="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")
syz_usb_control_io$lan78xx(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000a80)={0x0, 0x30, 0x8, {0x8, 0xa, "00e74b2bc3e7"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000d80)={0x34, &(0x7f0000000b40)={0x40, 0x0, 0xcb, "cf4e68dac2959ba403a2df998a3d9af0b3b329fe46f0239b2d57cdc2920ad3f417b303fd4b1b12f0b2211199c295b0ce3e08cceefca2e20679f4b74f2077db067083993212352ef907de37189587fe16a8a06e304eda1d550f800b91163847e69cf62b5a4b621df05f36b9b100f98e1f1c736306c19ca97dea9efa5afc94681f2d8074d5ef476b2ed7fcddf7d437f7d853e7c3c23c3bd15e5562b7351c4e168a857394571181d41565d2b367636d928b72bb479f41db7c7cee76e0ea24dfe360bc7ec84ff15aa1dbdc5c95"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xb6}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000cc0)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000000d00)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000d40)={0xc0, 0xa2, 0x2f, "4aaf17cb18765cb6040d807ef33d92551c60f7f9dd978df4f6b0175c2d29d175e50a1d924741cdf6700b65770e6342"}})
ioctl$DVB_DVR_DMX_QBUF(r2, 0xc0186f3f, &(0x7f0000000dc0)={0x8000, 0x6, 0x200, 0xffffffff, 0x1d, 0x9})
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381)
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f0000000e40))
syz_usb_control_io$printer(r0, &(0x7f0000000f40)={0x14, &(0x7f0000000e80)={0x40, 0x21, 0x7a, {0x7a, 0x23, "39e21ed9c98ceda6bf954ce1fd6420cbe6cb1807260e95cca7260f9124a755f7e4b82a00907e87b675d0547121e52ce2b99843da400a1ffb95e36eac53b131f77b7b56118ef25afc3de6de6dd0eb5241b1b8fcd9069315bf579403fa916959f189548e81b895e593ddfda9a2006bad9166b74cc9baa06b98"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000001140)={0x34, &(0x7f0000000f80)={0x0, 0x6, 0x99, "0a6ef15e4f57f9266fd54d11a5e69520818ac88ea69fa8f8fee0fe12529bc35dce7025049e43cffdbfefcc8c7771d33a40993da8cf81e1d046223ab77863474ac7296a6da71bc00380fd7e74cfc4ca949d5b27e3d5e807bb5349cd399fca2d77df22f273a47e14dda011a72107d6f9956fadbcf9c43cc44264164442f061ee5f1d89b65a4200eae21867e9a86009c557e98b7b4ebec540c7ad"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5d}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0xf1}, 0xfffffffffffffffe, &(0x7f00000010c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000001100)={0x20, 0x0, 0x1, 0x3}})
pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
write$P9_RCREATE(r4, &(0x7f00000011c0)={0x18, 0x73, 0x2, {{0x10, 0x7, 0x3}, 0x9}}, 0x18)
syz_usb_control_io$rtl8150(r0, &(0x7f00000012c0)={0x14, &(0x7f0000001200)={0x20, 0x1, 0x72, {0x72, 0xb, "f0a4735a1d68b2e59f9add4637ddb8f25f1c85b215902740df490ccfc2467e8947d1aa8d872500648016228dd67148e8860db6db2db5d73d392ec7fc3b3e2d96a3e6a414c4ed67e2ef86e3da47b7014daf5f58241d964e01233a0302f9e01f56a9170069ba79d5f0f6fb276f38e9266f"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f00000014c0)={0x2c, &(0x7f0000001300)={0x0, 0x16, 0x99, "37934d2de184f8043e77526cac065aa2af8e768c77367bea710fc2c29a7a9aedef1ddb5ed19bb60fc8737886b16ebbc6bd1237eb0123a64958baea8eb150e6c8bba85191c024ac90be251e0b18c0943aa403ea5333f7ba9838ab05f2632a6db255f04009175fc984e230192a3012e9c7d88e4cd61fab9ea50e937cc793b15ef292cd8af6755e0c1857db85dba3e0a9a14d61b17e723d349ed8"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001440)={0xc0, 0x5, 0x6, "f3afcf2ef410"}, &(0x7f0000001480)={0x40, 0x5, 0x4, "47289199"}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x1a0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0xfffffffb, 0xd}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7f}, @NL80211_ATTR_VENDOR_DATA={0xff, 0xc5, "e4bafc7544e7ec32d0156d88cb956eeb8eec27ad1d874694ed4c5f2b6c3e4bd020c10fe42f34b9299e562623b5f9a5960a42e35acd5c8e2161f82a7d9cf69ea8a6cbde421d02a6c4710a6ee72b5c87eaa9b65a19f2a72b8f45069ce459eb866384570cda505e1803a7d400740dfff682ced074145cdae99e80554b599cf4b1848929d5599bebe5a1ed33328c475dd3654567ecaab258de7d19f93207d7b5f461cf0483679c9f884e66468530b0fa06cb7017df3ef031c6559d725c2e50737eeace297bccb64d742480b0eb5ea0c15de45ee5deb1f799fede25f718f0ac2aad2ea161498cab62c37691bfb191b65cff0ff9f04d801eaee4b1064ee6"}, @NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "fa59f04c411f3a002189675efbf8cc931c650167a7125ae42605ad91e2f53870701d40d74d9a305cc6dbac018ceaea762f558babc2e5181b3023b11a2b58b1af621d6935713c37c2af59"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4890)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001940)={<r9=>0x0, 0x10, &(0x7f0000001900)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000001980)=0x10)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000019c0)={r9, 0x1000, "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"}, &(0x7f0000002a00)=0x1008)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002a40), 0x2000, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

842.951089ms ago: executing program 9 (id=1368):
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nC'], 0x86)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

797.988218ms ago: executing program 9 (id=1369):
syz_usb_connect(0x6, 0x2d, &(0x7f0000000a40)=ANY=[], 0x0)

493.979659ms ago: executing program 8 (id=1370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, &(0x7f0000000040)="b91d020000147d6466430f38814a368fe87087a2f5ffffff750f205f450f01cac4e121db3ff3ab2e0f7e08490fc79900100000c481f1f117", 0x38}], 0x1, 0x20, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 9 (id=1371):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xa4}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0) (async)
ioctl$TIOCNOTTY(r2, 0x5422)
close_range(r1, r0, 0x2)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000140)={0x8000, 0x0, 0x9})
r3 = socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x7f, 0x0, 0x80000001, 0x0, @loopback, @mcast1, 0x10, 0x20, 0x100}})
sendto$packet(r3, &(0x7f0000000180), 0x0, 0x40, &(0x7f0000000280)={0x11, 0xc, r4}, 0x14) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r6=>r5, {0x7fffffff}}, './file0\x00'})
ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000000380)={'bond_slave_1\x00', @ifru_settings={0xf, 0x1, @fr_pvc_info=&(0x7f0000000340)={0xf9, 'bond_slave_1\x00'}}}) (async)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000003c0)=0x1, 0x4) (async)
ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000000400)=""/252) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r5) (rerun: 64)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x410040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r7, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x6, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x3, 0x5, 0x7, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800)
syz_usb_connect$cdc_ecm(0x3, 0x8d, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x0, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "2e1805"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7800, 0x5, 0x2}, [@country_functional={0x6, 0x24, 0x7, 0x6, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xd1, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x2, [0x7, 0x1, 0x6, 0x6]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x5, 0xa, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x80, 0x0, 0x6, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x7f, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x250, 0x2, 0xfb, 0xb, 0x40, 0xf}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x861}}, {0x74, &(0x7f0000000880)=@string={0x74, 0x3, "ca6780b1b13132fcfa0e7e9c07d1a0abbcecb8da90249bdc4b5bae87e46414d42660e0a0365999146859551331f6304975d1bf25f063cbc18175a4a331a9fdf918db2e9ea02ae4f58fee9d244a041beb6225a011c29d1489d42e74c4553b34bfb3667fea9a44ebac2ee58bccd63a0a9cae3a"}}, {0x49, &(0x7f0000000900)=@string={0x49, 0x3, "7367b39135ebbea895e5914bb207a4f2f3047865aa225c1f37f202e46e146cb13abae91e29cf45be9ef2ab67b975322a4ec5d2fb7c7627ff235a93b496573d34d59ad5f6938878"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x400a}}, {0x4e, &(0x7f00000009c0)=@string={0x4e, 0x3, "50630c3529f2c826bb992a6c039e03f31dc5037e7b9bd30324afab430fec043505a1b8403c592df6578769fe1bdbc7630378dbe9b95402d05e497debf28936d6a8dee2ea911fc609d3e33317"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1409}}]}) (async)
fsync(r5) (async)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0x42, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x2a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x22, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0xd5, 0x2, 0x7f, 0xff, 0x2}, 0x2b, &(0x7f0000000b80)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x7ffffb5, 0xf00, 0x4, [0xf0, 0xc000, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x9, 0x3f5}]}, 0x7, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x425}}, {0x40, &(0x7f0000000cc0)=@string={0x40, 0x3, "3666371f0793cbf317071529181a620fdfcf038a39b8c9bf668e1453affc66605cab2664b79a9bf364b00672c4789cc6e3785419701f54a07bd4948770ba"}}, {0xc9, &(0x7f0000000d00)=@string={0xc9, 0x3, "78724ffec8547155153d27ccff42465aa4c3e1d5f1dc4e10df0cc9778a9a2c9ba780dab2f4b036dd1d4ac8d7e60e1805f452ef04f7887756a98775d839dc5872628132e71997645f0dd8f2b0aa6e3b6f9b9186c86b98f0f1fabde2422042fcd82e4ef569729b082f7be585b96db62ba5ba9f9bf2411be3bbb2b72bcce87a5727b89a5de997e63c563de619ac9a2e72d5a334828b77eaaaf8121764418e3b8e914186ec89497dfdd00b623373d943410ab5ab0bbf84e999a876d186a407099e192fa1f51c0cced7"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x44c}}]}) (async)
write$nci(r6, &(0x7f0000000ec0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0xbe, 0x1}, 0x4)
fstat(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, r8, &(0x7f0000000f80)) (async)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000001140))
getdents(r6, &(0x7f0000001180)=""/177, 0xb1) (async, rerun: 64)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000001240)={{0x2, @name="8b4c9a31ed8e6182945f294958603c13cafefc0f17e0b12119fc47b359a92b7b"}, "8012e628048107bb3aae199ede3b13a6d2a6bfd5262447b9aca87682fa9a83ce", 0x3}) (rerun: 64)
setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000001340)=0x4, 0x4)

kernel console output (not intermixed with test programs):

permission+0x3e8/0x9d0
[  667.546162][T10265]  ? tomoyo_mount_permission+0x2b3/0x9d0
[  667.546172][T10265]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  667.546209][T10265]  security_sb_mount+0xe4/0x320
[  667.546222][T10265]  path_mount+0xbc/0x10e0
[  667.546232][T10265]  ? user_path_at+0xd4/0x160
[  667.546246][T10265]  ? user_path_at+0xd4/0x160
[  667.546259][T10265]  __se_sys_mount+0x31d/0x420
[  667.546272][T10265]  ? __pfx___se_sys_mount+0x10/0x10
[  667.546285][T10265]  ? __x64_sys_mount+0x20/0xc0
[  667.546295][T10265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.546306][T10265]  do_syscall_64+0x174/0x580
[  667.546320][T10265]  ? trace_irq_disable+0x3b/0x140
[  667.546333][T10265]  ? clear_bhb_loop+0x40/0x90
[  667.546346][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.546357][T10265] RIP: 0033:0x7f92ecefce59
[  667.546367][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.546377][T10265] RSP: 002b:00007f92eb14e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  667.546389][T10265] RAX: ffffffffffffffda RBX: 00007f92ed175fa0 RCX: 00007f92ecefce59
[  667.546397][T10265] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  667.546404][T10265] RBP: 00007f92eb14e090 R08: 0000200000000100 R09: 0000000000000000
[  667.546411][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.546417][T10265] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  667.546433][T10265]  </TASK>
[  667.546437][T10265] ERROR: Out of memory at tomoyo_realpath_from_path.
[  668.758168][ T7108] Bluetooth: hci5: command 0x0c1a tx timeout
[  668.758463][T10256] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  669.627745][T10256] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  669.639516][T10256] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  669.639600][T10256] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  669.701210][T10256] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  669.759480][T10256] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  669.759553][T10256] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  669.859183][T10256] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  670.208601][ T5717] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  670.361918][ T9119] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  670.374307][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  670.388137][ T5717] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  670.388170][ T5717] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  670.388195][ T5717] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32894, setting to 1024
[  670.388247][ T5717] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  670.388271][ T5717] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  670.388322][ T5717] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  670.388344][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.508508][ T8322] usb 10-1: new full-speed USB device number 32 using dummy_hcd
[  670.528157][ T9119] usb 9-1: Using ep0 maxpacket: 8
[  670.530812][ T9119] usb 9-1: unable to get BOS descriptor or descriptor too short
[  670.531975][ T9119] usb 9-1: config 86 has an invalid interface number: 78 but max is 0
[  670.531999][ T9119] usb 9-1: config 86 has no interface number 0
[  670.532044][ T9119] usb 9-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024
[  670.532071][ T9119] usb 9-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 255
[  670.532095][ T9119] usb 9-1: config 86 interface 78 has no altsetting 0
[  670.534537][ T9119] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d
[  670.534564][ T9119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.534583][ T9119] usb 9-1: Product: syz
[  670.534597][ T9119] usb 9-1: Manufacturer: syz
[  670.534612][ T9119] usb 9-1: SerialNumber: syz
[  670.549136][T10275] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  670.549313][T10275] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  670.656556][ T5717] usb 5-1: GET_CAPABILITIES returned 0
[  670.656596][ T5717] usbtmc 5-1:16.0: can't read capabilities
[  670.731635][ T8322] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 105, changing to 4
[  670.731669][ T8322] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  670.733984][ T8322] usb 10-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  670.734012][ T8322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.734033][ T8322] usb 10-1: Product: syz
[  670.734048][ T8322] usb 10-1: Manufacturer: syz
[  670.734063][ T8322] usb 10-1: SerialNumber: syz
[  670.806559][ T9119] kvaser_usb 9-1:86.78: error -EPROTO: Cannot get software info
[  670.806852][ T9119] kvaser_usb 9-1:86.78: probe with driver kvaser_usb failed with error -71
[  670.823451][ T9119] usb 9-1: USB disconnect, device number 24
[  670.838568][ T7108] Bluetooth: hci1: command 0x0c1a tx timeout
[  670.867798][ T5716] usb 5-1: USB disconnect, device number 42
[  671.143826][ T8322] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  671.144267][ T8322] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  671.246879][T10287] binder: 10286:10287 ioctl 4004662b 200000000040 returned -22
[  671.269462][ T8322] usb 10-1: USB disconnect, device number 32
[  671.325348][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.449312][T10291] binder: BINDER_SET_CONTEXT_MGR already set
[  671.449328][T10291] binder: 10289:10291 ioctl 4018620d 200000003280 returned -16
[  671.450884][T10291] binder: 10289:10291 ioctl c0306201 200000000080 returned -14
[  671.452856][T10291] binder: BINDER_SET_CONTEXT_MGR already set
[  671.452864][T10291] binder: 10289:10291 ioctl 4018620d 200000000040 returned -16
[  671.453100][T10291] binder: 10289:10291 ioctl c0306201 2000000003c0 returned -14
[  671.453795][T10291] FAULT_INJECTION: forcing a failure.
[  671.453795][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.453826][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.4.1093 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  671.453851][T10291] Tainted: [L]=SOFTLOCKUP
[  671.453859][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  671.453870][T10291] Call Trace:
[  671.453877][T10291]  <TASK>
[  671.453885][T10291]  dump_stack_lvl+0xe8/0x150
[  671.453911][T10291]  should_fail_ex+0x46b/0x600
[  671.453942][T10291]  _copy_from_user+0x2d/0xb0
[  671.453964][T10291]  binder_ioctl_write_read+0x167/0xa470
[  671.453989][T10291]  ? is_bpf_text_address+0x26/0x2b0
[  671.454027][T10291]  ? try_to_take_rt_mutex+0x840/0xb00
[  671.454049][T10291]  ? __kernel_text_address+0xd/0x30
[  671.454077][T10291]  ? __lock_acquire+0x6b5/0x2d10
[  671.454094][T10291]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  671.454107][T10291]  ? stack_depot_save_flags+0x33/0x810
[  671.454133][T10291]  ? do_raw_spin_lock+0x12b/0x2f0
[  671.454150][T10291]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  671.454163][T10291]  ? lockdep_hardirqs_on+0x7a/0x110
[  671.454177][T10291]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  671.454189][T10291]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  671.454199][T10291]  ? reacquire_held_locks+0x104/0x190
[  671.454214][T10291]  ? rt_spin_lock+0x1e0/0x400
[  671.454224][T10291]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  671.454236][T10291]  ? rt_spin_unlock+0x14f/0x200
[  671.454250][T10291]  ? binder_get_thread+0x177/0x6d0
[  671.454262][T10291]  binder_ioctl+0x426/0x1b10
[  671.454273][T10291]  ? tomoyo_path_number_perm+0x219/0x630
[  671.454291][T10291]  ? tomoyo_path_number_perm+0x219/0x630
[  671.454307][T10291]  ? do_vfs_ioctl+0x117b/0x1540
[  671.454321][T10291]  ? __pfx_binder_ioctl+0x10/0x10
[  671.454332][T10291]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  671.454361][T10291]  ? __fget_files+0x2a/0x420
[  671.454373][T10291]  ? __fget_files+0x2a/0x420
[  671.454383][T10291]  ? __fget_files+0x3a6/0x420
[  671.454393][T10291]  ? __fget_files+0x2a/0x420
[  671.454404][T10291]  ? bpf_lsm_file_ioctl+0x9/0x20
[  671.454420][T10291]  ? __pfx_binder_ioctl+0x10/0x10
[  671.454431][T10291]  __se_sys_ioctl+0xff/0x170
[  671.454444][T10291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.454455][T10291]  do_syscall_64+0x174/0x580
[  671.454468][T10291]  ? trace_irq_disable+0x3b/0x140
[  671.454482][T10291]  ? clear_bhb_loop+0x40/0x90
[  671.454494][T10291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.454505][T10291] RIP: 0033:0x7f92ecefce59
[  671.454516][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.454525][T10291] RSP: 002b:00007f92eb14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  671.454537][T10291] RAX: ffffffffffffffda RBX: 00007f92ed175fa0 RCX: 00007f92ecefce59
[  671.454545][T10291] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003
[  671.454552][T10291] RBP: 00007f92eb14e090 R08: 0000000000000000 R09: 0000000000000000
[  671.454558][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.454565][T10291] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  671.454580][T10291]  </TASK>
[  671.456241][T10291] binder: 10289:10291 ioctl c0306201 200000000000 returned -14
[  671.520064][ T9119] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  671.586232][T10297] binder: BINDER_SET_CONTEXT_MGR already set
[  671.586247][T10297] binder: 10295:10297 ioctl 4018620d 200000003280 returned -16
[  671.615894][T10297] binder: 10295:10297 ioctl c0306201 200000000080 returned -14
[  671.634275][T10297] binder: BINDER_SET_CONTEXT_MGR already set
[  671.634293][T10297] binder: 10295:10297 ioctl 4018620d 200000000040 returned -16
[  671.636014][T10297] binder: 10295:10297 ioctl c0306201 2000000003c0 returned -14
[  671.678107][ T9119] usb 6-1: Using ep0 maxpacket: 8
[  671.680614][ T9119] usb 6-1: unable to get BOS descriptor or descriptor too short
[  671.722425][ T7108] Bluetooth: hci3: command 0x0c1a tx timeout
[  671.746876][ T9119] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  671.746904][ T9119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.746925][ T9119] usb 6-1: Product: syz
[  671.746939][ T9119] usb 6-1: Manufacturer: syz
[  671.746954][ T9119] usb 6-1: SerialNumber: syz
[  671.798159][ T7108] Bluetooth: hci2: command 0x0c1a tx timeout
[  671.992360][T10301] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  672.060669][T10301] cramfs: wrong magic
[  672.092125][ T9119] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  672.094031][ T9119] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  672.301193][ T9119] usb 6-1: USB disconnect, device number 46
[  672.493434][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  672.518636][ T8322] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  672.698300][ T8322] usb 10-1: Using ep0 maxpacket: 16
[  672.701880][ T8322] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  672.701909][ T8322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  672.737684][ T8322] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  672.737700][ T8322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.737712][ T8322] usb 10-1: Product: syz
[  672.737719][ T8322] usb 10-1: Manufacturer: syz
[  672.737727][ T8322] usb 10-1: SerialNumber: syz
[  672.748583][ T8322] usb 10-1: config 0 descriptor??
[  672.765362][ T8322] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  672.765397][ T8322] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  672.857674][T10311] dummy0: entered allmulticast mode
[  672.927572][T10310] dummy0: left allmulticast mode
[  673.257206][T10315] netlink: 'syz.4.1102': attribute type 5 has an invalid length.
[  673.388269][   T37] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  673.420760][ T8322] em28xx 10-1:0.0: unknown em28xx chip ID (220)
[  673.564339][   T37] usb 6-1: Using ep0 maxpacket: 16
[  673.574533][   T37] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  673.574615][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  673.578579][   T37] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  673.578606][   T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.578627][   T37] usb 6-1: Product: syz
[  673.578642][   T37] usb 6-1: Manufacturer: syz
[  673.578656][   T37] usb 6-1: SerialNumber: syz
[  673.621435][   T37] usb 6-1: config 0 descriptor??
[  673.684873][   T37] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  673.684910][   T37] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  673.798789][ T7108] Bluetooth: hci3: command 0x0c1a tx timeout
[  673.876327][ T8322] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  673.876813][ T8322] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[  673.876831][ T8322] em28xx 10-1:0.0: No AC97 audio processor
[  673.891267][ T7108] Bluetooth: hci2: command 0x0c1a tx timeout
[  673.960336][ T8322] usb 10-1: USB disconnect, device number 33
[  673.974015][ T8322] em28xx 10-1:0.0: Disconnecting em28xx
[  674.154716][ T8322] em28xx 10-1:0.0: Freeing device
[  674.236330][   T37] em28xx 6-1:0.0: chip ID is em2800
[  674.322985][   T38] audit: type=1326 audit(1781995672.220:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10317 comm="syz.4.1103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ecefce59 code=0x0
[  674.504857][   T37] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  674.505273][   T37] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  674.505290][   T37] em28xx 6-1:0.0: No AC97 audio processor
[  674.517663][   T37] usb 6-1: USB disconnect, device number 47
[  674.521187][   T37] em28xx 6-1:0.0: Disconnecting em28xx
[  674.525696][   T37] em28xx 6-1:0.0: Freeing device
[  674.640361][ T8322] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  674.787851][T10336] binder: BINDER_SET_CONTEXT_MGR already set
[  674.787863][T10336] binder: 10335:10336 ioctl 4018620d 200000000100 returned -16
[  674.806476][T10336] binder: 10335:10336 ioctl 4004662b 200000000040 returned -22
[  674.807216][T10336] binder: BINDER_SET_CONTEXT_MGR already set
[  674.807224][T10336] binder: 10335:10336 ioctl 4018620d 200000001000 returned -16
[  674.819616][ T8322] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 105, changing to 4
[  674.819648][ T8322] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  674.825548][ T8322] usb 9-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  674.825575][ T8322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.825595][ T8322] usb 9-1: Product: syz
[  674.825609][ T8322] usb 9-1: Manufacturer: syz
[  674.825623][ T8322] usb 9-1: SerialNumber: syz
[  675.009086][ T9119] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  675.089607][ T8322] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  675.093910][   T37] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  675.094287][ T8322] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  675.132308][ T8322] usb 9-1: USB disconnect, device number 25
[  675.161834][ T9119] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  675.165395][ T9119] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  675.165418][ T9119] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.165437][ T9119] usb 10-1: Product: syz
[  675.165449][ T9119] usb 10-1: Manufacturer: syz
[  675.165464][ T9119] usb 10-1: SerialNumber: syz
[  675.177566][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  675.256796][   T37] usb 5-1: Using ep0 maxpacket: 8
[  675.264659][   T37] usb 5-1: unable to get BOS descriptor or descriptor too short
[  675.277734][   T37] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  675.277763][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.277783][   T37] usb 5-1: Product: syz
[  675.277798][   T37] usb 5-1: Manufacturer: syz
[  675.277821][   T37] usb 5-1: SerialNumber: syz
[  675.542404][   T37] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  675.547891][   T37] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  675.696656][   T37] usb 5-1: USB disconnect, device number 43
[  675.786093][ T8305] udevd[8305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  675.878650][ T7108] Bluetooth: hci3: command 0x0c1a tx timeout
[  675.958163][ T7108] Bluetooth: hci2: command 0x0c1a tx timeout
[  676.165034][T10348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  676.282759][   T38] audit: type=1804 audit(1781995674.160:36): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1112" name="/newroot/182/cgroup.controllers" dev="tmpfs" ino=1014 res=1 errno=0
[  676.293101][   T38] audit: type=1800 audit(1781995674.190:37): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1112" name="cgroup.controllers" dev="tmpfs" ino=1014 res=0 errno=0
[  676.294490][T10350] fuse: fd is not a fuse device
[  676.337690][T10350] 9p: Could not find request transport: fVêrfdno=0x0000000000000007
[  677.097062][T10368] binder: 10367:10368 ioctl 4004662b 200000000040 returned -22
[  677.348646][   T37] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  677.530664][   T37] usb 9-1: Using ep0 maxpacket: 8
[  677.534116][   T37] usb 9-1: unable to get BOS descriptor or descriptor too short
[  677.575834][   T37] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  677.575864][   T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.575885][   T37] usb 9-1: Product: syz
[  677.575899][   T37] usb 9-1: Manufacturer: syz
[  677.575915][   T37] usb 9-1: SerialNumber: syz
[  677.719023][ T9119] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  677.719156][ T9119] usb 10-1: MIDIStreaming interface descriptor not found
[  677.893154][ T9119] usb 10-1: USB disconnect, device number 34
[  678.075705][ T8315] udevd[8315]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  678.099306][ T8318] usb 5-1: new low-speed USB device number 44 using dummy_hcd
[  678.116552][   T37] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  678.117702][   T37] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  678.216587][   T37] usb 9-1: USB disconnect, device number 26
[  678.248141][ T8318] usb 5-1: Invalid ep0 maxpacket: 64
[  678.252248][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  678.388184][ T8318] usb 5-1: new low-speed USB device number 45 using dummy_hcd
[  678.505126][ T9119] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  678.548193][ T8318] usb 5-1: Invalid ep0 maxpacket: 64
[  678.549122][ T8318] usb usb5-port1: attempt power cycle
[  678.679631][ T9119] usb 10-1: Using ep0 maxpacket: 32
[  678.684242][ T9119] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  678.686841][ T9119] usb 10-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=ed.3b
[  678.686869][ T9119] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.686889][ T9119] usb 10-1: Product: syz
[  678.686905][ T9119] usb 10-1: Manufacturer: syz
[  678.686920][ T9119] usb 10-1: SerialNumber: syz
[  678.888232][ T8318] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[  678.908863][ T8318] usb 5-1: Invalid ep0 maxpacket: 64
[  678.947451][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.957103][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.967300][T10383] hpfs: Bad magic ... probably not HPFS
[  678.977155][T10383] netlink: 'syz.9.1123': attribute type 7 has an invalid length.
[  679.019258][ T9119] usb 10-1: USB disconnect, device number 35
[  679.038276][ T8318] usb 5-1: new low-speed USB device number 47 using dummy_hcd
[  679.060754][ T8318] usb 5-1: Invalid ep0 maxpacket: 64
[  679.062193][ T8318] usb usb5-port1: unable to enumerate USB device
[  679.318138][ T8318] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  679.488111][ T8318] usb 9-1: Using ep0 maxpacket: 8
[  679.491819][ T8318] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  679.491846][ T8318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.491857][ T8318] usb 9-1: Product: syz
[  679.491865][ T8318] usb 9-1: Manufacturer: syz
[  679.491873][ T8318] usb 9-1: SerialNumber: syz
[  679.497519][ T8318] usb 9-1: config 0 descriptor??
[  679.744739][ T8318] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  680.243206][T10401] netlink: 'syz.9.1130': attribute type 10 has an invalid length.
[  680.256373][T10401] 8021q: adding VLAN 0 to HW filter on device team0
[  680.265537][T10401] bond0: (slave team0): Enslaving as an active interface with an up link
[  680.535463][T10405] binder: 10404:10405 ioctl 4004662b 200000000040 returned -22
[  680.788230][ T1255] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  680.883034][ T7108] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  680.889631][ T7108] Bluetooth: hci1: unexpected event for opcode 0x2062
[  680.938407][ T1255] usb 10-1: Using ep0 maxpacket: 8
[  680.942128][ T1255] usb 10-1: unable to get BOS descriptor or descriptor too short
[  680.945772][ T1255] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  680.945798][ T1255] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.945818][ T1255] usb 10-1: Product: syz
[  680.945832][ T1255] usb 10-1: Manufacturer: syz
[  680.945845][ T1255] usb 10-1: SerialNumber: syz
[  681.061634][ T8318] usb write operation failed. (-71)
[  681.077185][ T8318] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  681.077770][ T8318] dvbdev: DVB: registering new adapter (Terratec H7)
[  681.077820][ T8318] usb 9-1: media controller created
[  681.083277][ T8318] usb read operation failed. (-71)
[  681.143390][ T8318] usb write operation failed. (-71)
[  681.185554][ T7108] Bluetooth: hci1: Malformed HCI Event
[  681.218915][ T8318] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  681.243170][ T8318] usb 9-1: USB disconnect, device number 27
[  681.262700][ T1255] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  681.263174][ T1255] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  681.395787][ T1255] usb 10-1: USB disconnect, device number 36
[  682.089479][ T8318] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  682.118167][ T1255] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  682.258113][ T8318] usb 9-1: Using ep0 maxpacket: 32
[  682.259777][ T8318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.259808][ T8318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.259842][ T8318] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  682.259855][ T8318] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.263252][ T8318] usb 9-1: config 0 descriptor??
[  682.270562][ T8318] hub 9-1:0.0: USB hub found
[  682.312130][ T1255] usb 10-1: Using ep0 maxpacket: 16
[  682.348401][ T1255] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  682.348426][ T1255] usb 10-1: config 0 has no interface number 0
[  682.348469][ T1255] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  682.348495][ T1255] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  682.351046][ T1255] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  682.351073][ T1255] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.351094][ T1255] usb 10-1: Product: syz
[  682.351109][ T1255] usb 10-1: Manufacturer: syz
[  682.351123][ T1255] usb 10-1: SerialNumber: syz
[  682.431039][ T1255] usb 10-1: config 0 descriptor??
[  682.433205][T10428] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  682.433750][T10428] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  682.499583][ T8318] hub 9-1:0.0: 1 port detected
[  682.618184][  T824] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  682.641278][T10428] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  682.641449][T10428] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  682.727296][ T8318] hub 9-1:0.0: hub_hub_status failed (err = -71)
[  682.727433][ T8318] hub 9-1:0.0: config failed, can't get hub status (err -71)
[  682.737563][ T8318] usbhid 9-1:0.0: can't add hid device: -71
[  682.737679][ T8318] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  682.758498][  T824] usb 5-1: device descriptor read/64, error -71
[  682.789051][ T8318] usb 9-1: USB disconnect, device number 28
[  682.881988][ T1255] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  682.882214][ T1255] asix 10-1:0.34: probe with driver asix failed with error -61
[  683.008138][  T824] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  683.138258][  T824] usb 5-1: device descriptor read/64, error -71
[  683.262300][  T824] usb usb5-port1: attempt power cycle
[  683.297398][ T7108] Bluetooth: hci3: unexpected event for opcode 0x2002
[  683.300112][ T7108] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  683.439945][T10439] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1144'.
[  683.618117][  T824] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  683.638965][  T824] usb 5-1: device descriptor read/8, error -71
[  683.718218][ T9119] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  683.878165][ T9119] usb 9-1: Using ep0 maxpacket: 32
[  683.879589][  T824] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  683.881853][ T9119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.886910][ T9119] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  683.886936][ T9119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.886956][ T9119] usb 9-1: Product: syz
[  683.886970][ T9119] usb 9-1: Manufacturer: syz
[  683.886984][ T9119] usb 9-1: SerialNumber: syz
[  683.897302][ T9119] usb 9-1: config 0 descriptor??
[  683.904436][ T9119] cdc_ether 9-1:0.0: skipping garbage
[  683.904455][ T9119] cdc_ether 9-1:0.0: missing cdc header descriptor
[  683.905879][ T9119] usb 9-1: unsupported MDLM descriptors
[  683.945143][  T824] usb 5-1: device descriptor read/8, error -71
[  684.059022][  T824] usb usb5-port1: unable to enumerate USB device
[  684.106801][ T9119] usb 9-1: USB disconnect, device number 29
[  684.804316][T10456] binder: BINDER_SET_CONTEXT_MGR already set
[  684.804332][T10456] binder: 10455:10456 ioctl 4018620d 200000000100 returned -16
[  684.805849][T10456] binder: 10455:10456 ioctl 4004662b 200000000040 returned -22
[  684.806673][T10456] binder: BINDER_SET_CONTEXT_MGR already set
[  684.806685][T10456] binder: 10455:10456 ioctl 4018620d 200000001000 returned -16
[  684.922599][ T7108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  684.946363][ T7108] Bluetooth: hci1: Injecting HCI hardware error event
[  684.957149][ T4923] Bluetooth: hci1: hardware error 0x00
[  685.098276][  T824] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  685.249365][  T824] usb 9-1: Using ep0 maxpacket: 8
[  685.251661][  T824] usb 9-1: unable to get BOS descriptor or descriptor too short
[  685.255069][  T824] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  685.255097][  T824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.255117][  T824] usb 9-1: Product: syz
[  685.255131][  T824] usb 9-1: Manufacturer: syz
[  685.255141][  T824] usb 9-1: SerialNumber: syz
[  685.380960][ T9119] usb 10-1: USB disconnect, device number 37
[  685.544997][  T824] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  685.545318][  T824] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  685.636962][  T824] usb 9-1: USB disconnect, device number 30
[  685.729246][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  686.089532][T10478] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  686.203768][T10482] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1157'.
[  686.451176][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'.
[  686.793734][T10498] FAULT_INJECTION: forcing a failure.
[  686.793734][T10498] name failslab, interval 1, probability 0, space 0, times 0
[  686.793772][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.9.1163 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  686.793800][T10498] Tainted: [L]=SOFTLOCKUP
[  686.793808][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  686.793820][T10498] Call Trace:
[  686.793827][T10498]  <TASK>
[  686.793836][T10498]  dump_stack_lvl+0xe8/0x150
[  686.793885][T10498]  should_fail_ex+0x46b/0x600
[  686.793918][T10498]  should_failslab+0xa8/0x100
[  686.793943][T10498]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  686.793973][T10498]  ? p9_client_prepare_req+0x16a/0xab0
[  686.794098][T10498]  ? p9_client_prepare_req+0x16a/0xab0
[  686.794127][T10498]  p9_client_prepare_req+0x16a/0xab0
[  686.794158][T10498]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  686.794179][T10498]  ? __lock_acquire+0x6b5/0x2d10
[  686.794208][T10498]  ? do_raw_spin_lock+0x12b/0x2f0
[  686.794240][T10498]  p9_client_rpc+0x1a5/0xe80
[  686.794259][T10498]  ? lockdep_hardirqs_on+0x7a/0x110
[  686.794285][T10498]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  686.794304][T10498]  ? rt_spin_lock+0x1e0/0x400
[  686.794327][T10498]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  686.794350][T10498]  ? __pfx_p9_client_rpc+0x10/0x10
[  686.794369][T10498]  ? rt_spin_unlock+0x160/0x200
[  686.794447][T10498]  ? unix_poll+0x33a/0x3f0
[  686.794482][T10498]  ? __pfx_sock_poll+0x10/0x10
[  686.794510][T10498]  ? p9_conn_create+0x54c/0x5d0
[  686.794539][T10498]  ? p9_fd_create+0x341/0x450
[  686.794575][T10498]  p9_client_create+0x586/0xcc0
[  686.794666][T10498]  ? __pfx_p9_client_create+0x10/0x10
[  686.794715][T10498]  v9fs_session_init+0x46/0xd60
[  686.794771][T10498]  ? __kasan_kmalloc+0x93/0xb0
[  686.794801][T10498]  ? __kmalloc_cache_noprof+0x3d0/0x6d0
[  686.794822][T10498]  ? v9fs_get_tree+0xaa/0xac0
[  686.794842][T10498]  ? v9fs_get_tree+0xaa/0xac0
[  686.794869][T10498]  v9fs_get_tree+0xbd/0xac0
[  686.794891][T10498]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  686.794926][T10498]  ? __pfx_v9fs_get_tree+0x10/0x10
[  686.794962][T10498]  vfs_get_tree+0x92/0x2a0
[  686.794990][T10498]  do_new_mount+0x341/0xd30
[  686.795008][T10498]  ? apparmor_capable+0x126/0x170
[  686.795038][T10498]  ? __pfx_do_new_mount+0x10/0x10
[  686.795057][T10498]  ? ns_capable+0x89/0xe0
[  686.795088][T10498]  ? path_mount+0x690/0x10e0
[  686.795106][T10498]  ? user_path_at+0xd4/0x160
[  686.795132][T10498]  ? user_path_at+0xd4/0x160
[  686.795156][T10498]  __se_sys_mount+0x31d/0x420
[  686.795182][T10498]  ? __pfx___se_sys_mount+0x10/0x10
[  686.795207][T10498]  ? __x64_sys_mount+0x20/0xc0
[  686.795226][T10498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.795248][T10498]  do_syscall_64+0x174/0x580
[  686.795272][T10498]  ? trace_irq_disable+0x3b/0x140
[  686.795297][T10498]  ? clear_bhb_loop+0x40/0x90
[  686.795321][T10498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.795341][T10498] RIP: 0033:0x7f135786ce59
[  686.795360][T10498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.795376][T10498] RSP: 002b:00007f1355abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  686.795398][T10498] RAX: ffffffffffffffda RBX: 00007f1357ae5fa0 RCX: 00007f135786ce59
[  686.795412][T10498] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  686.795425][T10498] RBP: 00007f1355abe090 R08: 0000200000000440 R09: 0000000000000000
[  686.795439][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  686.795451][T10498] R13: 00007f1357ae6038 R14: 00007f1357ae5fa0 R15: 00007ffcfa4bde48
[  686.795481][T10498]  </TASK>
[  687.000755][ T4923] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  687.167044][T10508] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  687.167044][T10508] The task syz.4.1161 (10508) triggered the difference, watch for misbehavior.
[  687.211614][T10507] binder: BINDER_SET_CONTEXT_MGR already set
[  687.211629][T10507] binder: 10506:10507 ioctl 4018620d 200000000100 returned -16
[  687.214179][T10507] binder: 10506:10507 ioctl 4004662b 200000000040 returned -22
[  687.215015][T10507] binder: BINDER_SET_CONTEXT_MGR already set
[  687.215027][T10507] binder: 10506:10507 ioctl 4018620d 200000001000 returned -16
[  687.418209][ T8318] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  687.458200][   T37] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  687.488235][ T1255] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  687.588241][ T8318] usb 5-1: Using ep0 maxpacket: 16
[  687.592055][ T8318] usb 5-1: unable to get BOS descriptor or descriptor too short
[  687.593165][ T8318] usb 5-1: config 3 has an invalid interface number: 100 but max is 0
[  687.593189][ T8318] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  687.593209][ T8318] usb 5-1: config 3 has no interface number 0
[  687.593248][ T8318] usb 5-1: config 3 interface 100 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  687.593263][ T8318] usb 5-1: config 3 interface 100 has no altsetting 0
[  687.595337][ T8318] usb 5-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=72.de
[  687.595364][ T8318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.595384][ T8318] usb 5-1: Product: syz
[  687.595399][ T8318] usb 5-1: Manufacturer: syz
[  687.595413][ T8318] usb 5-1: SerialNumber: syz
[  687.608091][   T37] usb 10-1: Using ep0 maxpacket: 16
[  687.635025][   T37] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  687.635117][   T37] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00
[  687.635142][   T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.649891][   T37] usb 10-1: config 0 descriptor??
[  687.688408][  T824] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  687.696350][ T1255] usb 9-1: Using ep0 maxpacket: 8
[  687.743825][ T1255] usb 9-1: unable to get BOS descriptor or descriptor too short
[  687.747386][ T1255] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  687.747413][ T1255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.747434][ T1255] usb 9-1: Product: syz
[  687.747448][ T1255] usb 9-1: Manufacturer: syz
[  687.747462][ T1255] usb 9-1: SerialNumber: syz
[  687.858506][  T824] usb 6-1: Using ep0 maxpacket: 32
[  687.866381][  T824] usb 6-1: config 38 has an invalid descriptor of length 254, skipping remainder of the config
[  687.866406][  T824] usb 6-1: config 38 has 0 interfaces, different from the descriptor's value: 1
[  687.882487][  T824] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  687.882516][  T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.882782][  T824] usb 6-1: Product: syz
[  687.882797][  T824] usb 6-1: Manufacturer: syz
[  687.882811][  T824] usb 6-1: SerialNumber: syz
[  688.019832][ T1255] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  688.020281][ T1255] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  688.087888][ T1255] usb 9-1: USB disconnect, device number 31
[  688.164544][ T8305] udevd[8305]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  688.275599][   T37] usbhid 10-1:0.0: can't add hid device: -71
[  688.275929][   T37] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  688.295839][   T37] usb 10-1: USB disconnect, device number 38
[  688.469063][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.470657][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.141366][T10524] FAULT_INJECTION: forcing a failure.
[  689.141366][T10524] name failslab, interval 1, probability 0, space 0, times 0
[  689.141391][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.9.1173 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  689.141408][T10524] Tainted: [L]=SOFTLOCKUP
[  689.141412][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  689.141419][T10524] Call Trace:
[  689.141424][T10524]  <TASK>
[  689.141429][T10524]  dump_stack_lvl+0xe8/0x150
[  689.141445][T10524]  should_fail_ex+0x46b/0x600
[  689.141466][T10524]  should_failslab+0xa8/0x100
[  689.141479][T10524]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  689.141497][T10524]  ? skb_clone+0x212/0x3a0
[  689.141510][T10524]  ? skb_clone+0x212/0x3a0
[  689.141526][T10524]  skb_clone+0x212/0x3a0
[  689.141540][T10524]  __netlink_deliver_tap+0x424/0x8b0
[  689.141560][T10524]  ? netlink_deliver_tap+0x2e/0x1b0
[  689.141574][T10524]  netlink_deliver_tap+0x19c/0x1b0
[  689.141588][T10524]  netlink_sendskb+0x68/0x140
[  689.141607][T10524]  netlink_rcv_skb+0x2b6/0x4b0
[  689.141621][T10524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  689.141637][T10524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  689.141661][T10524]  genl_rcv+0x28/0x40
[  689.141676][T10524]  netlink_unicast+0x780/0x920
[  689.141693][T10524]  netlink_sendmsg+0x813/0xb40
[  689.141711][T10524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.141725][T10524]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  689.141741][T10524]  ? aa_sock_msg_perm+0x122/0x200
[  689.141753][T10524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.141766][T10524]  sock_sendmsg_nosec+0x13a/0x180
[  689.141783][T10524]  ____sys_sendmsg+0x55c/0x870
[  689.141799][T10524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  689.141816][T10524]  ? import_iovec+0x73/0xa0
[  689.141830][T10524]  ___sys_sendmsg+0x2a5/0x360
[  689.141842][T10524]  ? __lock_acquire+0x6b5/0x2d10
[  689.141858][T10524]  ? __pfx____sys_sendmsg+0x10/0x10
[  689.141887][T10524]  ? __fget_files+0x2a/0x420
[  689.141898][T10524]  ? __fget_files+0x3a6/0x420
[  689.141914][T10524]  __x64_sys_sendmsg+0x1b7/0x290
[  689.141928][T10524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  689.141950][T10524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.141961][T10524]  do_syscall_64+0x174/0x580
[  689.141975][T10524]  ? trace_irq_disable+0x3b/0x140
[  689.141989][T10524]  ? clear_bhb_loop+0x40/0x90
[  689.142010][T10524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.142029][T10524] RIP: 0033:0x7f135786ce59
[  689.142046][T10524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.142062][T10524] RSP: 002b:00007f1355abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  689.142082][T10524] RAX: ffffffffffffffda RBX: 00007f1357ae5fa0 RCX: 00007f135786ce59
[  689.142097][T10524] RDX: 0000000024000000 RSI: 0000200000000180 RDI: 0000000000000003
[  689.142110][T10524] RBP: 00007f1355abe090 R08: 0000000000000000 R09: 0000000000000000
[  689.142119][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.142125][T10524] R13: 00007f1357ae6038 R14: 00007f1357ae5fa0 R15: 00007ffcfa4bde48
[  689.142141][T10524]  </TASK>
[  689.248420][  T824] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[  689.419456][  T824] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  689.419486][  T824] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  689.419506][  T824] usb 9-1: Product: syz
[  689.419521][  T824] usb 9-1: Manufacturer: syz
[  689.419535][  T824] usb 9-1: SerialNumber: syz
[  689.435758][  T824] usb 9-1: config 0 descriptor??
[  689.562962][   T37] usb 10-1: new full-speed USB device number 39 using dummy_hcd
[  689.642075][  T824] peak_usb 9-1:0.0: PEAK-System PCAN-Chip USB v100 fw v194.95.0 (1 channels)
[  689.709785][   T37] usb 10-1: config 0 has an invalid interface number: 199 but max is 1
[  689.709811][   T37] usb 10-1: config 0 has no interface number 1
[  689.709843][   T37] usb 10-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  689.709903][   T37] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  689.710930][   T37] usb 10-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  689.710946][   T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  689.710956][   T37] usb 10-1: SerialNumber: syz
[  689.727870][   T37] usb 10-1: config 0 descriptor??
[  689.880202][ T8318] usb 5-1: USB disconnect, device number 52
[  689.947156][  T824] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  689.947186][  T824] peak_usb 9-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  689.981529][   T37] uvcvideo 10-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  689.981573][   T37] uvcvideo 10-1:0.199: No valid video chain found.
[  690.108458][  T824] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71
[  690.115610][  T824] usb 9-1: USB disconnect, device number 32
[  690.189054][ T5620] usb 10-1: USB disconnect, device number 39
[  690.228267][ T8318] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  690.381667][ T8318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  690.381699][ T8318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  690.381723][ T8318] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  690.381735][ T8318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.386380][ T8318] usb 5-1: config 0 descriptor??
[  690.592590][T10531] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1175'.
[  690.646523][T10537] binder: BINDER_SET_CONTEXT_MGR already set
[  690.646537][T10537] binder: 10536:10537 ioctl 4018620d 200000000100 returned -16
[  690.650762][T10537] binder: 10536:10537 ioctl 4004662b 200000000040 returned -22
[  690.652725][T10537] binder: BINDER_SET_CONTEXT_MGR already set
[  690.652737][T10537] binder: 10536:10537 ioctl 4018620d 200000001000 returned -16
[  690.835882][T10539] FAULT_INJECTION: forcing a failure.
[  690.835882][T10539] name failslab, interval 1, probability 0, space 0, times 0
[  690.835905][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.9.1178 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.835921][T10539] Tainted: [L]=SOFTLOCKUP
[  690.835928][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  690.835943][T10539] Call Trace:
[  690.835951][T10539]  <TASK>
[  690.835960][T10539]  dump_stack_lvl+0xe8/0x150
[  690.835988][T10539]  should_fail_ex+0x46b/0x600
[  690.836020][T10539]  should_failslab+0xa8/0x100
[  690.836042][T10539]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  690.836059][T10539]  ? skb_clone+0x212/0x3a0
[  690.836072][T10539]  ? skb_clone+0x212/0x3a0
[  690.836090][T10539]  skb_clone+0x212/0x3a0
[  690.836117][T10539]  __netlink_deliver_tap+0x424/0x8b0
[  690.836153][T10539]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.836179][T10539]  netlink_deliver_tap+0x19c/0x1b0
[  690.836205][T10539]  netlink_sendskb+0x68/0x140
[  690.836220][T10539]  netlink_rcv_skb+0x2b6/0x4b0
[  690.836233][T10539]  ? __pfx_genl_rcv_msg+0x10/0x10
[  690.836250][T10539]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  690.836281][T10539]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.836305][T10539]  ? netlink_deliver_tap+0x2e/0x1b0
[  690.836334][T10539]  genl_rcv+0x28/0x40
[  690.836361][T10539]  netlink_unicast+0x780/0x920
[  690.836392][T10539]  netlink_sendmsg+0x813/0xb40
[  690.836425][T10539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.836453][T10539]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  690.836479][T10539]  ? aa_sock_msg_perm+0x122/0x200
[  690.836502][T10539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.836526][T10539]  sock_sendmsg_nosec+0x13a/0x180
[  690.836551][T10539]  ____sys_sendmsg+0x55c/0x870
[  690.836567][T10539]  ? __pfx_____sys_sendmsg+0x10/0x10
[  690.836599][T10539]  ? import_iovec+0x73/0xa0
[  690.836632][T10539]  ___sys_sendmsg+0x2a5/0x360
[  690.836655][T10539]  ? __lock_acquire+0x6b5/0x2d10
[  690.836683][T10539]  ? __pfx____sys_sendmsg+0x10/0x10
[  690.836714][T10539]  ? __fget_files+0x2a/0x420
[  690.836725][T10539]  ? __fget_files+0x3a6/0x420
[  690.836747][T10539]  __x64_sys_sendmsg+0x1b7/0x290
[  690.836775][T10539]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  690.836817][T10539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.836839][T10539]  do_syscall_64+0x174/0x580
[  690.836855][T10539]  ? trace_irq_disable+0x3b/0x140
[  690.836869][T10539]  ? clear_bhb_loop+0x40/0x90
[  690.836882][T10539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.836893][T10539] RIP: 0033:0x7f135786ce59
[  690.836909][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.836926][T10539] RSP: 002b:00007f1355abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  690.836947][T10539] RAX: ffffffffffffffda RBX: 00007f1357ae5fa0 RCX: 00007f135786ce59
[  690.836961][T10539] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003
[  690.836975][T10539] RBP: 00007f1355abe090 R08: 0000000000000000 R09: 0000000000000000
[  690.836988][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.837000][T10539] R13: 00007f1357ae6038 R14: 00007f1357ae5fa0 R15: 00007ffcfa4bde48
[  690.837021][T10539]  </TASK>
[  690.898205][ T5620] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  691.048154][ T5620] usb 9-1: Using ep0 maxpacket: 8
[  691.118717][ T5620] usb 9-1: unable to get BOS descriptor or descriptor too short
[  691.125346][ T5620] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  691.125373][ T5620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.125393][ T5620] usb 9-1: Product: syz
[  691.125408][ T5620] usb 9-1: Manufacturer: syz
[  691.125423][ T5620] usb 9-1: SerialNumber: syz
[  691.316924][ T5717] usb 6-1: USB disconnect, device number 48
[  691.396472][ T8318] usbhid 5-1:0.0: can't add hid device: -71
[  691.396568][ T8318] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  691.434289][ T8318] usb 5-1: USB disconnect, device number 53
[  691.501636][ T5620] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  691.504064][ T5620] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  691.618745][ T5620] usb 9-1: USB disconnect, device number 33
[  691.771133][T10558] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in;
[  691.771133][T10558]    program syz.5.1183 not setting count and/or reply_len properly
[  691.812061][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  692.066441][T10562] FAULT_INJECTION: forcing a failure.
[  692.066441][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.066476][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.8.1185 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.066503][T10562] Tainted: [L]=SOFTLOCKUP
[  692.066511][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.066523][T10562] Call Trace:
[  692.066531][T10562]  <TASK>
[  692.066540][T10562]  dump_stack_lvl+0xe8/0x150
[  692.066568][T10562]  should_fail_ex+0x46b/0x600
[  692.066601][T10562]  _copy_to_user+0x31/0xb0
[  692.066625][T10562]  simple_read_from_buffer+0xe1/0x170
[  692.066651][T10562]  proc_fail_nth_read+0x1be/0x230
[  692.066676][T10562]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  692.066700][T10562]  ? rw_verify_area+0x2ac/0x4e0
[  692.066722][T10562]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  692.066744][T10562]  vfs_read+0x212/0xa80
[  692.066775][T10562]  ? __pfx_vfs_read+0x10/0x10
[  692.066800][T10562]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  692.066825][T10562]  ? lockdep_hardirqs_on+0x7a/0x110
[  692.066850][T10562]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  692.066874][T10562]  ? mutex_lock_nested+0x152/0x1d0
[  692.066902][T10562]  ? fdget_pos+0x252/0x320
[  692.066930][T10562]  ksys_read+0x156/0x270
[  692.066956][T10562]  ? __pfx_ksys_read+0x10/0x10
[  692.066987][T10562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.067010][T10562]  do_syscall_64+0x174/0x580
[  692.067033][T10562]  ? trace_irq_disable+0x3b/0x140
[  692.067057][T10562]  ? clear_bhb_loop+0x40/0x90
[  692.067081][T10562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.067100][T10562] RIP: 0033:0x7f81e799d68e
[  692.067119][T10562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.067136][T10562] RSP: 002b:00007f81e5c35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  692.067157][T10562] RAX: ffffffffffffffda RBX: 00007f81e5c366c0 RCX: 00007f81e799d68e
[  692.067171][T10562] RDX: 000000000000000f RSI: 00007f81e5c360a0 RDI: 0000000000000004
[  692.067184][T10562] RBP: 00007f81e5c36090 R08: 0000000000000000 R09: 0000000000000000
[  692.067197][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.067209][T10562] R13: 00007f81e7c56038 R14: 00007f81e7c55fa0 R15: 00007fffeee97a48
[  692.067240][T10562]  </TASK>
[  692.199818][T10564] FAULT_INJECTION: forcing a failure.
[  692.199818][T10564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.199852][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.4.1187 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.199879][T10564] Tainted: [L]=SOFTLOCKUP
[  692.199887][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.199899][T10564] Call Trace:
[  692.199906][T10564]  <TASK>
[  692.199914][T10564]  dump_stack_lvl+0xe8/0x150
[  692.199939][T10564]  should_fail_ex+0x46b/0x600
[  692.199970][T10564]  _copy_to_user+0x31/0xb0
[  692.199994][T10564]  simple_read_from_buffer+0xe1/0x170
[  692.200019][T10564]  proc_fail_nth_read+0x1be/0x230
[  692.200042][T10564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  692.200065][T10564]  ? rw_verify_area+0x2ac/0x4e0
[  692.200087][T10564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  692.200108][T10564]  vfs_read+0x212/0xa80
[  692.200136][T10564]  ? __pfx_vfs_read+0x10/0x10
[  692.200161][T10564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  692.200185][T10564]  ? lockdep_hardirqs_on+0x7a/0x110
[  692.200208][T10564]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  692.200229][T10564]  ? mutex_lock_nested+0x152/0x1d0
[  692.200256][T10564]  ? fdget_pos+0x252/0x320
[  692.200283][T10564]  ksys_read+0x156/0x270
[  692.200307][T10564]  ? __pfx_ksys_read+0x10/0x10
[  692.200337][T10564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.200358][T10564]  do_syscall_64+0x174/0x580
[  692.200380][T10564]  ? trace_irq_disable+0x3b/0x140
[  692.200404][T10564]  ? clear_bhb_loop+0x40/0x90
[  692.200433][T10564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.200452][T10564] RIP: 0033:0x7f92ecebd68e
[  692.200470][T10564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.200486][T10564] RSP: 002b:00007f92eb14dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  692.200506][T10564] RAX: ffffffffffffffda RBX: 00007f92eb14e6c0 RCX: 00007f92ecebd68e
[  692.200520][T10564] RDX: 000000000000000f RSI: 00007f92eb14e0a0 RDI: 0000000000000004
[  692.200532][T10564] RBP: 00007f92eb14e090 R08: 0000000000000000 R09: 0000000000000000
[  692.200544][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.200555][T10564] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  692.200585][T10564]  </TASK>
[  692.327149][ T8318] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  692.590639][ T8318] usb 6-1: unable to get BOS descriptor or descriptor too short
[  692.591733][ T8318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  692.591772][ T8318] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  692.591801][ T8318] usb 6-1: config 1 interface 0 has no altsetting 1
[  692.594124][ T8318] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  692.594152][ T8318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.594172][ T8318] usb 6-1: Product: syz
[  692.594187][ T8318] usb 6-1: Manufacturer: syz
[  692.594202][ T8318] usb 6-1: SerialNumber: syz
[  692.667030][ T8318] smsusb:smsusb_probe: board id=8, interface number 0
[  692.906046][ T8318] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  692.906087][ T8318] smsusb 6-1:1.0: probe with driver smsusb failed with error -71
[  692.928412][ T8318] usb 6-1: USB disconnect, device number 49
[  693.036748][T10574] FAULT_INJECTION: forcing a failure.
[  693.036748][T10574] name failslab, interval 1, probability 0, space 0, times 0
[  693.036785][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.8.1189 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.036824][T10574] Tainted: [L]=SOFTLOCKUP
[  693.036832][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.036843][T10574] Call Trace:
[  693.036851][T10574]  <TASK>
[  693.036860][T10574]  dump_stack_lvl+0xe8/0x150
[  693.036890][T10574]  should_fail_ex+0x46b/0x600
[  693.036923][T10574]  should_failslab+0xa8/0x100
[  693.036948][T10574]  __kmalloc_node_track_caller_noprof+0xfe/0x820
[  693.036971][T10574]  ? lockdep_hardirqs_on+0x7a/0x110
[  693.036996][T10574]  ? ovl_lookup+0x6af/0x1c80
[  693.037036][T10574]  ? ovl_lookup+0x6af/0x1c80
[  693.037063][T10574]  kstrdup+0x42/0x100
[  693.037090][T10574]  ovl_lookup+0x6af/0x1c80
[  693.037117][T10574]  ? do_raw_spin_lock+0x12b/0x2f0
[  693.037160][T10574]  ? __pfx_ovl_lookup+0x10/0x10
[  693.037180][T10574]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  693.037203][T10574]  ? rt_spin_unlock+0x14f/0x200
[  693.037226][T10574]  ? rt_spin_unlock+0x160/0x200
[  693.037248][T10574]  ? d_alloc+0x144/0x190
[  693.037272][T10574]  lookup_one_qstr_excl+0x12d/0x360
[  693.037299][T10574]  filename_create+0x20e/0x370
[  693.037330][T10574]  ? __pfx_filename_create+0x10/0x10
[  693.037365][T10574]  filename_linkat+0x17c/0x600
[  693.037403][T10574]  ? __pfx_filename_linkat+0x10/0x10
[  693.037435][T10574]  ? do_getname+0x151/0x250
[  693.037467][T10574]  __se_sys_linkat+0x60/0x2d0
[  693.037497][T10574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.037519][T10574]  do_syscall_64+0x174/0x580
[  693.037544][T10574]  ? trace_irq_disable+0x3b/0x140
[  693.037571][T10574]  ? clear_bhb_loop+0x40/0x90
[  693.037596][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.037617][T10574] RIP: 0033:0x7f81e79dce59
[  693.037636][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.037655][T10574] RSP: 002b:00007f81e5c15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  693.037677][T10574] RAX: ffffffffffffffda RBX: 00007f81e7c56090 RCX: 00007f81e79dce59
[  693.037693][T10574] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  693.037708][T10574] RBP: 00007f81e5c15090 R08: 0000000000001000 R09: 0000000000000000
[  693.037723][T10574] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[  693.037737][T10574] R13: 00007f81e7c56128 R14: 00007f81e7c56090 R15: 00007fffeee97a48
[  693.037769][T10574]  </TASK>
[  693.206729][T10578] FAULT_INJECTION: forcing a failure.
[  693.206729][T10578] name failslab, interval 1, probability 0, space 0, times 0
[  693.206763][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.8.1191 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.206798][T10578] Tainted: [L]=SOFTLOCKUP
[  693.206805][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.206817][T10578] Call Trace:
[  693.206825][T10578]  <TASK>
[  693.206834][T10578]  dump_stack_lvl+0xe8/0x150
[  693.206861][T10578]  should_fail_ex+0x46b/0x600
[  693.206896][T10578]  should_failslab+0xa8/0x100
[  693.206919][T10578]  __kvmalloc_node_noprof+0x181/0x910
[  693.206941][T10578]  ? rcu_is_watching+0x15/0xb0
[  693.206970][T10578]  ? __rhashtable_init_noprof+0x56d/0xae0
[  693.206998][T10578]  ? __rhashtable_init_noprof+0x56d/0xae0
[  693.207032][T10578]  __rhashtable_init_noprof+0x56d/0xae0
[  693.207066][T10578]  __rhltable_init_noprof+0x26/0x70
[  693.207087][T10578]  nf_tables_newtable+0x696/0x1910
[  693.207123][T10578]  nfnetlink_rcv+0x1247/0x27b0
[  693.207175][T10578]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  693.207209][T10578]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  693.207236][T10578]  ? ref_tracker_free+0x673/0x820
[  693.207288][T10578]  ? __netlink_deliver_tap+0x866/0x8b0
[  693.207319][T10578]  ? netlink_deliver_tap+0x2e/0x1b0
[  693.207342][T10578]  ? netlink_deliver_tap+0x2e/0x1b0
[  693.207371][T10578]  netlink_unicast+0x780/0x920
[  693.207402][T10578]  netlink_sendmsg+0x813/0xb40
[  693.207433][T10578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.207459][T10578]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  693.207486][T10578]  ? aa_sock_msg_perm+0x122/0x200
[  693.207507][T10578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.207530][T10578]  sock_sendmsg_nosec+0x13a/0x180
[  693.207560][T10578]  ____sys_sendmsg+0x55c/0x870
[  693.207588][T10578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  693.207620][T10578]  ? import_iovec+0x73/0xa0
[  693.207643][T10578]  ___sys_sendmsg+0x2a5/0x360
[  693.207665][T10578]  ? __lock_acquire+0x6b5/0x2d10
[  693.207692][T10578]  ? __pfx____sys_sendmsg+0x10/0x10
[  693.207746][T10578]  ? __fget_files+0x2a/0x420
[  693.207765][T10578]  ? __fget_files+0x3a6/0x420
[  693.207799][T10578]  __x64_sys_sendmsg+0x1b7/0x290
[  693.207825][T10578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  693.207864][T10578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.207885][T10578]  do_syscall_64+0x174/0x580
[  693.207909][T10578]  ? trace_irq_disable+0x3b/0x140
[  693.207932][T10578]  ? clear_bhb_loop+0x40/0x90
[  693.207956][T10578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.207975][T10578] RIP: 0033:0x7f81e79dce59
[  693.207991][T10578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.208007][T10578] RSP: 002b:00007f81e5c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  693.208026][T10578] RAX: ffffffffffffffda RBX: 00007f81e7c55fa0 RCX: 00007f81e79dce59
[  693.208040][T10578] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  693.208051][T10578] RBP: 00007f81e5c36090 R08: 0000000000000000 R09: 0000000000000000
[  693.208063][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  693.208074][T10578] R13: 00007f81e7c56038 R14: 00007f81e7c55fa0 R15: 00007fffeee97a48
[  693.208101][T10578]  </TASK>
[  693.268280][ T5716] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[  693.304271][T10581] FAULT_INJECTION: forcing a failure.
[  693.304271][T10581] name failslab, interval 1, probability 0, space 0, times 0
[  693.304307][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.4.1193 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.304334][T10581] Tainted: [L]=SOFTLOCKUP
[  693.304341][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.304353][T10581] Call Trace:
[  693.304361][T10581]  <TASK>
[  693.304369][T10581]  dump_stack_lvl+0xe8/0x150
[  693.304398][T10581]  should_fail_ex+0x46b/0x600
[  693.304429][T10581]  should_failslab+0xa8/0x100
[  693.304454][T10581]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  693.304483][T10581]  ? skb_clone+0x212/0x3a0
[  693.304505][T10581]  ? skb_clone+0x212/0x3a0
[  693.304534][T10581]  skb_clone+0x212/0x3a0
[  693.304561][T10581]  __netlink_deliver_tap+0x424/0x8b0
[  693.304596][T10581]  ? netlink_deliver_tap+0x2e/0x1b0
[  693.304621][T10581]  netlink_deliver_tap+0x19c/0x1b0
[  693.304646][T10581]  netlink_sendskb+0x68/0x140
[  693.304669][T10581]  netlink_rcv_skb+0x2b6/0x4b0
[  693.304693][T10581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  693.304722][T10581]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  693.304758][T10581]  ? netlink_deliver_tap+0x2e/0x1b0
[  693.304787][T10581]  ? netlink_deliver_tap+0x2e/0x1b0
[  693.304814][T10581]  genl_rcv+0x28/0x40
[  693.304839][T10581]  netlink_unicast+0x780/0x920
[  693.304870][T10581]  netlink_sendmsg+0x813/0xb40
[  693.304902][T10581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.304927][T10581]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  693.304955][T10581]  ? aa_sock_msg_perm+0x122/0x200
[  693.304977][T10581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.304999][T10581]  sock_sendmsg_nosec+0x13a/0x180
[  693.305030][T10581]  ____sys_sendmsg+0x55c/0x870
[  693.305059][T10581]  ? __pfx_____sys_sendmsg+0x10/0x10
[  693.305091][T10581]  ? import_iovec+0x73/0xa0
[  693.305115][T10581]  ___sys_sendmsg+0x2a5/0x360
[  693.305137][T10581]  ? __lock_acquire+0x6b5/0x2d10
[  693.305165][T10581]  ? __pfx____sys_sendmsg+0x10/0x10
[  693.305221][T10581]  ? __fget_files+0x2a/0x420
[  693.305239][T10581]  ? __fget_files+0x3a6/0x420
[  693.305268][T10581]  __x64_sys_sendmsg+0x1b7/0x290
[  693.305294][T10581]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  693.305333][T10581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.305354][T10581]  do_syscall_64+0x174/0x580
[  693.305378][T10581]  ? trace_irq_disable+0x3b/0x140
[  693.305401][T10581]  ? clear_bhb_loop+0x40/0x90
[  693.305425][T10581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.305444][T10581] RIP: 0033:0x7f92ecefce59
[  693.305463][T10581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.305479][T10581] RSP: 002b:00007f92eb14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  693.305500][T10581] RAX: ffffffffffffffda RBX: 00007f92ed175fa0 RCX: 00007f92ecefce59
[  693.305514][T10581] RDX: 0000000004000010 RSI: 0000200000000480 RDI: 0000000000000003
[  693.305527][T10581] RBP: 00007f92eb14e090 R08: 0000000000000000 R09: 0000000000000000
[  693.305539][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  693.305551][T10581] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  693.305582][T10581]  </TASK>
[  693.418084][ T5716] usb 10-1: Using ep0 maxpacket: 16
[  693.420303][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.420333][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.420369][ T5716] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  693.420393][ T5716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.435949][ T5716] usb 10-1: config 0 descriptor??
[  693.486374][T10584] binder: BINDER_SET_CONTEXT_MGR already set
[  693.486388][T10584] binder: 10583:10584 ioctl 4018620d 200000000100 returned -16
[  693.490547][T10584] binder: 10583:10584 ioctl 4004662b 200000000040 returned -22
[  693.517587][T10584] binder: BINDER_SET_CONTEXT_MGR already set
[  693.517602][T10584] binder: 10583:10584 ioctl 4018620d 200000001000 returned -16
[  693.820255][ T5620] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  693.972028][ T5716] hid_parser_main: 8 callbacks suppressed
[  693.972051][ T5716] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  693.972081][ T5716] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  693.972109][ T5716] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  693.972135][ T5716] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  693.972161][ T5716] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[  693.978606][ T5620] usb 5-1: Using ep0 maxpacket: 8
[  693.981803][ T5716] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[  693.981953][ T5620] usb 5-1: unable to get BOS descriptor or descriptor too short
[  693.996782][ T5620] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  693.996811][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.996830][ T5620] usb 5-1: Product: syz
[  693.996845][ T5620] usb 5-1: Manufacturer: syz
[  693.996858][ T5620] usb 5-1: SerialNumber: syz
[  694.327951][ T5620] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  694.360616][ T5620] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  694.521819][ T5620] usb 5-1: USB disconnect, device number 54
[  694.608171][ T8318] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  694.633761][ T5716] usb 10-1: USB disconnect, device number 40
[  694.666087][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.738148][ T8318] usb 9-1: device descriptor read/64, error -71
[  694.984630][ T8318] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  695.049597][T10611] netlink: 'syz.9.1204': attribute type 1 has an invalid length.
[  695.108164][ T8318] usb 9-1: device descriptor read/64, error -71
[  695.135229][T10614] netlink: 1380 bytes leftover after parsing attributes in process `syz.9.1205'.
[  695.218702][ T8318] usb usb9-port1: attempt power cycle
[  695.415633][T10620] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  695.415662][T10620] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  695.417255][T10620] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  695.417277][T10620] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  695.559809][ T8318] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  695.578944][ T8318] usb 9-1: device descriptor read/8, error -71
[  695.637223][T10626] binder: BINDER_SET_CONTEXT_MGR already set
[  695.637239][T10626] binder: 10625:10626 ioctl 4018620d 200000000100 returned -16
[  695.640919][T10626] binder: 10625:10626 ioctl 4004662b 200000000040 returned -22
[  695.641734][T10626] binder: BINDER_SET_CONTEXT_MGR already set
[  695.641746][T10626] binder: 10625:10626 ioctl 4018620d 200000001000 returned -16
[  695.702091][T10628] FAULT_INJECTION: forcing a failure.
[  695.702091][T10628] name failslab, interval 1, probability 0, space 0, times 0
[  695.702127][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.4.1212 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  695.702155][T10628] Tainted: [L]=SOFTLOCKUP
[  695.702163][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  695.702174][T10628] Call Trace:
[  695.702182][T10628]  <TASK>
[  695.702192][T10628]  dump_stack_lvl+0xe8/0x150
[  695.702220][T10628]  should_fail_ex+0x46b/0x600
[  695.702254][T10628]  should_failslab+0xa8/0x100
[  695.702279][T10628]  kmem_cache_alloc_node_noprof+0xae/0x710
[  695.702310][T10628]  ? __alloc_skb+0x1d0/0x7d0
[  695.702330][T10628]  ? __alloc_skb+0x1d0/0x7d0
[  695.702357][T10628]  __alloc_skb+0x1d0/0x7d0
[  695.702382][T10628]  tipc_msg_create+0x51/0x4d0
[  695.702490][T10628]  tipc_group_proto_xmit+0xce/0x790
[  695.702559][T10628]  tipc_group_cong+0x4fe/0x600
[  695.702588][T10628]  ? __pfx_tipc_group_cong+0x10/0x10
[  695.702628][T10628]  ? kfree+0x1c5/0x6c0
[  695.702654][T10628]  ? tipc_dest_pop+0x19c/0x230
[  695.702687][T10628]  ? tipc_dest_pop+0x19c/0x230
[  695.702717][T10628]  __tipc_sendmsg+0x1073/0x2c00
[  695.702747][T10628]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  695.702780][T10628]  ? __pfx___tipc_sendmsg+0x10/0x10
[  695.702806][T10628]  ? try_to_take_rt_mutex+0x840/0xb00
[  695.702839][T10628]  ? __lock_acquire+0x6b5/0x2d10
[  695.702871][T10628]  ? __lock_acquire+0x6b5/0x2d10
[  695.702943][T10628]  ? __local_bh_enable+0x1e1/0x2f0
[  695.702977][T10628]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  695.703006][T10628]  ? lockdep_hardirqs_on+0x7a/0x110
[  695.703035][T10628]  tipc_sendmsg+0x55/0x70
[  695.703059][T10628]  ? __pfx_tipc_sendmsg+0x10/0x10
[  695.703087][T10628]  sock_sendmsg_nosec+0x13a/0x180
[  695.703119][T10628]  ____sys_sendmsg+0x55c/0x870
[  695.703149][T10628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  695.703182][T10628]  ? import_iovec+0x73/0xa0
[  695.703208][T10628]  ___sys_sendmsg+0x2a5/0x360
[  695.703231][T10628]  ? __lock_acquire+0x6b5/0x2d10
[  695.703259][T10628]  ? __pfx____sys_sendmsg+0x10/0x10
[  695.703321][T10628]  ? __fget_files+0x2a/0x420
[  695.703341][T10628]  ? __fget_files+0x3a6/0x420
[  695.703371][T10628]  __x64_sys_sendmsg+0x1b7/0x290
[  695.703401][T10628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  695.703443][T10628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.703465][T10628]  do_syscall_64+0x174/0x580
[  695.703489][T10628]  ? trace_irq_disable+0x3b/0x140
[  695.703513][T10628]  ? clear_bhb_loop+0x40/0x90
[  695.703537][T10628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.703557][T10628] RIP: 0033:0x7f92ecefce59
[  695.703575][T10628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.703591][T10628] RSP: 002b:00007f92eb14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  695.703612][T10628] RAX: ffffffffffffffda RBX: 00007f92ed175fa0 RCX: 00007f92ecefce59
[  695.703627][T10628] RDX: 0000000004000004 RSI: 00002000000000c0 RDI: 0000000000000004
[  695.703640][T10628] RBP: 00007f92eb14e090 R08: 0000000000000000 R09: 0000000000000000
[  695.703652][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.703664][T10628] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  695.703695][T10628]  </TASK>
[  695.840389][ T8318] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  695.864933][ T8318] usb 9-1: device descriptor read/8, error -71
[  695.898140][ T8322] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  695.970344][ T8318] usb usb9-port1: unable to enumerate USB device
[  696.048096][ T8322] usb 10-1: Using ep0 maxpacket: 8
[  696.050334][ T8322] usb 10-1: unable to get BOS descriptor or descriptor too short
[  696.056093][ T8322] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  696.056121][ T8322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.056141][ T8322] usb 10-1: Product: syz
[  696.056156][ T8322] usb 10-1: Manufacturer: syz
[  696.056170][ T8322] usb 10-1: SerialNumber: syz
[  696.088648][T10632] FAULT_INJECTION: forcing a failure.
[  696.088648][T10632] name failslab, interval 1, probability 0, space 0, times 0
[  696.088735][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.4.1213 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  696.088763][T10632] Tainted: [L]=SOFTLOCKUP
[  696.088769][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  696.088780][T10632] Call Trace:
[  696.088788][T10632]  <TASK>
[  696.088796][T10632]  dump_stack_lvl+0xe8/0x150
[  696.088824][T10632]  should_fail_ex+0x46b/0x600
[  696.088857][T10632]  should_failslab+0xa8/0x100
[  696.088880][T10632]  kmem_cache_alloc_lru_noprof+0xa7/0x6b0
[  696.088908][T10632]  ? __d_alloc+0x37/0x6f0
[  696.088927][T10632]  ? __d_alloc+0x37/0x6f0
[  696.088951][T10632]  __d_alloc+0x37/0x6f0
[  696.088977][T10632]  d_alloc_parallel+0xe3/0x1630
[  696.089015][T10632]  ? __d_lookup+0x66/0x780
[  696.089042][T10632]  ? __d_lookup+0x66/0x780
[  696.089067][T10632]  ? __pfx_d_alloc_parallel+0x10/0x10
[  696.089090][T10632]  ? d_lookup+0x1f/0xc0
[  696.089115][T10632]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  696.089142][T10632]  path_openat+0xbe5/0x37e0
[  696.089172][T10632]  ? kmem_cache_alloc_noprof+0x354/0x6c0
[  696.089221][T10632]  do_file_open+0x23e/0x4a0
[  696.089243][T10632]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  696.089271][T10632]  ? __pfx_do_file_open+0x10/0x10
[  696.089291][T10632]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  696.089318][T10632]  ? __pfx_kfree_link+0x10/0x10
[  696.089347][T10632]  ? alloc_fd+0x679/0x6f0
[  696.089373][T10632]  do_sys_openat2+0x115/0x200
[  696.089394][T10632]  ? __pfx_do_sys_openat2+0x10/0x10
[  696.089414][T10632]  ? ksys_write+0x248/0x270
[  696.089439][T10632]  ? __pfx_ksys_write+0x10/0x10
[  696.089465][T10632]  __x64_sys_openat+0x138/0x170
[  696.089487][T10632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.089506][T10632]  do_syscall_64+0x174/0x580
[  696.089529][T10632]  ? trace_irq_disable+0x3b/0x140
[  696.089552][T10632]  ? clear_bhb_loop+0x40/0x90
[  696.089575][T10632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.089594][T10632] RIP: 0033:0x7f92ecebd68e
[  696.089612][T10632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  696.089628][T10632] RSP: 002b:00007f92eb14df18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  696.089649][T10632] RAX: ffffffffffffffda RBX: 00007f92eb14e6c0 RCX: 00007f92ecebd68e
[  696.089664][T10632] RDX: 0000000000000000 RSI: 00007f92ecf925aa RDI: ffffffffffffff9c
[  696.089677][T10632] RBP: 00007f92eb14e090 R08: 0000000000000000 R09: 0000000000000000
[  696.089689][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  696.089701][T10632] R13: 00007f92ed176038 R14: 00007f92ed175fa0 R15: 00007fffc50d2018
[  696.089730][T10632]  </TASK>
[  696.372171][ T8322] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  696.375562][ T8322] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  696.541798][ T8322] usb 10-1: USB disconnect, device number 41
[  696.635453][T10641] ALSA: mixer_oss: invalid OSS volume ''
[  696.835640][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  697.508512][ T5717] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  697.564327][ T8322] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  697.682363][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.682415][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  697.682435][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  697.682449][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  697.682460][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  697.684862][ T5717] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  697.684889][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  697.684909][ T5717] usb 5-1: Product: syz
[  697.684918][ T5717] usb 5-1: Manufacturer: syz
[  697.684925][ T5717] usb 5-1: SerialNumber: syz
[  697.692388][ T5717] usb 5-1: config 0 descriptor??
[  697.748933][ T8322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.749029][ T8322] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  697.749054][ T8322] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  697.749074][ T8322] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  697.769366][ T8322] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  697.769395][ T8322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.769416][ T8322] usb 6-1: Product: syz
[  697.769478][ T8322] usb 6-1: Manufacturer: syz
[  697.769493][ T8322] usb 6-1: SerialNumber: syz
[  697.816931][ T8322] cdc_mbim 6-1:1.0: skipping garbage
[  697.905661][ T5717] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  697.905677][ T5717] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  698.128537][T10653] binder: BINDER_SET_CONTEXT_MGR already set
[  698.128554][T10653] binder: 10652:10653 ioctl 4018620d 200000000100 returned -16
[  698.130956][T10653] binder: BINDER_SET_CONTEXT_MGR already set
[  698.130969][T10653] binder: 10652:10653 ioctl 4018620d 200000001000 returned -16
[  698.259758][T10657] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  698.405411][ T5717] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  698.405429][ T5717] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  698.416354][ T5717] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  698.434700][ T5717] usb 5-1: USB disconnect, device number 55
[  698.931285][T10671] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  699.106042][T10676] ALSA: mixer_oss: invalid OSS volume ''
[  699.133465][ T8322] cdc_mbim 6-1:1.0: bind() failure
[  699.173806][ T8322] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  699.173851][ T8322] cdc_ncm 6-1:1.1: bind() failure
[  699.271816][T10678] binder: 10677:10678 ioctl c0306201 2000000006c0 returned -14
[  699.272697][T10681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'.
[  699.273272][T10682] binder: BINDER_SET_CONTEXT_MGR already set
[  699.273280][T10682] binder: 10679:10682 ioctl 4018620d 200000000100 returned -16
[  699.276197][T10682] binder: 10679:10682 ioctl 4004662b 200000000040 returned -22
[  699.276881][T10682] binder: BINDER_SET_CONTEXT_MGR already set
[  699.276889][T10682] binder: 10679:10682 ioctl 4018620d 200000001000 returned -16
[  699.500556][   T38] audit: type=1326 audit(1781995697.400:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.9.1229" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f135786ce59 code=0x0
[  699.518382][ T8322] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  699.552248][T10689] fuse: Bad value for 'rootmode'
[  699.668177][ T8322] usb 9-1: Using ep0 maxpacket: 8
[  699.674551][ T8322] usb 9-1: unable to get BOS descriptor or descriptor too short
[  699.699850][ T8322] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  699.699879][ T8322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.699906][ T8322] usb 9-1: Product: syz
[  699.699922][ T8322] usb 9-1: Manufacturer: syz
[  699.699937][ T8322] usb 9-1: SerialNumber: syz
[  699.791835][ T5620] usb 6-1: USB disconnect, device number 50
[  699.812859][ T5716] usb 10-1: new full-speed USB device number 42 using dummy_hcd
[  699.942911][ T8322] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  699.943231][ T8322] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  699.978205][ T5716] usb 10-1: device descriptor read/64, error -71
[  700.027559][ T8322] usb 9-1: USB disconnect, device number 38
[  700.228278][ T5716] usb 10-1: new full-speed USB device number 43 using dummy_hcd
[  700.368257][ T5716] usb 10-1: device descriptor read/64, error -71
[  700.474913][T10704] ALSA: mixer_oss: invalid OSS volume ''
[  700.484196][ T5716] usb usb10-port1: attempt power cycle
[  700.828179][ T5716] usb 10-1: new full-speed USB device number 44 using dummy_hcd
[  700.828954][T10716] digital: digital_start_poll: Unknown protocol
[  700.853852][ T5716] usb 10-1: device descriptor read/8, error -71
[  700.905722][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.906203][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.999452][T10724] binder: BINDER_SET_CONTEXT_MGR already set
[  700.999467][T10724] binder: 10723:10724 ioctl 4018620d 200000000100 returned -16
[  701.000983][T10724] binder: 10723:10724 ioctl 4004662b 200000000040 returned -22
[  701.001811][T10724] binder: BINDER_SET_CONTEXT_MGR already set
[  701.001823][T10724] binder: 10723:10724 ioctl 4018620d 200000001000 returned -16
[  701.108258][ T5716] usb 10-1: new full-speed USB device number 45 using dummy_hcd
[  701.128618][ T5716] usb 10-1: device descriptor read/8, error -71
[  701.138179][ T8322] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  701.196141][T10726] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  701.238148][   T37] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  701.239254][ T5716] usb usb10-port1: unable to enumerate USB device
[  701.288561][ T8322] usb 9-1: Using ep0 maxpacket: 32
[  701.290962][ T8322] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  701.290993][ T8322] usb 9-1: config 0 interface 0 has no altsetting 0
[  701.291105][ T8322] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  701.291129][ T8322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.316767][ T8322] usb 9-1: config 0 descriptor??
[  701.388272][   T37] usb 5-1: Using ep0 maxpacket: 8
[  701.390413][   T37] usb 5-1: unable to get BOS descriptor or descriptor too short
[  701.395464][   T37] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  701.395490][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.395509][   T37] usb 5-1: Product: syz
[  701.395734][   T37] usb 5-1: Manufacturer: syz
[  701.395750][   T37] usb 5-1: SerialNumber: syz
[  701.572485][ T8322] usbhid 9-1:0.0: can't add hid device: -71
[  701.572773][ T8322] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  701.586246][ T8322] usb 9-1: USB disconnect, device number 39
[  701.716523][   T37] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  701.716885][   T37] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  701.877971][   T37] usb 5-1: USB disconnect, device number 56
[  701.935639][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  702.358459][  T824] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  702.456563][T10741] netlink: 'syz.4.1251': attribute type 5 has an invalid length.
[  702.456584][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'.
[  702.456604][T10741] netlink: 'syz.4.1251': attribute type 1 has an invalid length.
[  702.520885][  T824] usb 9-1: Using ep0 maxpacket: 32
[  702.528207][  T824] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[  702.528236][  T824] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  702.528256][  T824] usb 9-1: config 0 has no interface number 0
[  702.528299][  T824] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.530866][  T824] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  702.530893][  T824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.530915][  T824] usb 9-1: Product: syz
[  702.530928][  T824] usb 9-1: Manufacturer: syz
[  702.530941][  T824] usb 9-1: SerialNumber: syz
[  702.536203][T10743] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  702.595889][  T824] usb 9-1: config 0 descriptor??
[  702.810938][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.813331][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.822163][  T824] usbhid 9-1:0.35: couldn't find an input interrupt endpoint
[  702.936489][T10747] FAULT_INJECTION: forcing a failure.
[  702.936489][T10747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.936524][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.9.1254 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  702.936552][T10747] Tainted: [L]=SOFTLOCKUP
[  702.936559][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  702.936571][T10747] Call Trace:
[  702.936580][T10747]  <TASK>
[  702.936588][T10747]  dump_stack_lvl+0xe8/0x150
[  702.936618][T10747]  should_fail_ex+0x46b/0x600
[  702.936651][T10747]  strncpy_from_user+0x36/0x2b0
[  702.936681][T10747]  do_getname+0x77/0x250
[  702.936713][T10747]  user_path_at+0x2a/0x160
[  702.936738][T10747]  __se_sys_mount+0x2dc/0x420
[  702.936764][T10747]  ? __pfx___se_sys_mount+0x10/0x10
[  702.936789][T10747]  ? __x64_sys_mount+0x20/0xc0
[  702.936808][T10747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.936831][T10747]  do_syscall_64+0x174/0x580
[  702.936856][T10747]  ? trace_irq_disable+0x3b/0x140
[  702.936880][T10747]  ? clear_bhb_loop+0x40/0x90
[  702.936903][T10747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.936923][T10747] RIP: 0033:0x7f135786ce59
[  702.936949][T10747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.936967][T10747] RSP: 002b:00007f1355abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  702.936988][T10747] RAX: ffffffffffffffda RBX: 00007f1357ae5fa0 RCX: 00007f135786ce59
[  702.937003][T10747] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000
[  702.937016][T10747] RBP: 00007f1355abe090 R08: 0000200000000000 R09: 0000000000000000
[  702.937029][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.937042][T10747] R13: 00007f1357ae6038 R14: 00007f1357ae5fa0 R15: 00007ffcfa4bde48
[  702.937072][T10747]  </TASK>
[  703.074830][  T824] usb 9-1: USB disconnect, device number 40
[  703.448126][ T5716] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  703.538157][  T824] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  703.598128][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  703.602633][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  703.602656][ T5716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  703.605156][ T5716] usb 5-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40
[  703.605185][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.605206][ T5716] usb 5-1: Product: syz
[  703.605220][ T5716] usb 5-1: Manufacturer: syz
[  703.605234][ T5716] usb 5-1: SerialNumber: syz
[  703.633271][T10753] binder: BINDER_SET_CONTEXT_MGR already set
[  703.633287][T10753] binder: 10752:10753 ioctl 4018620d 200000000100 returned -16
[  703.634773][T10753] binder: 10752:10753 ioctl 4004662b 200000000040 returned -22
[  703.635655][T10753] binder: BINDER_SET_CONTEXT_MGR already set
[  703.635666][T10753] binder: 10752:10753 ioctl 4018620d 200000001000 returned -16
[  703.729807][  T824] usb 10-1: Using ep0 maxpacket: 16
[  703.737606][  T824] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.737632][  T824] usb 10-1: config 0 has no interfaces?
[  703.760573][  T824] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  703.760604][  T824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.760625][  T824] usb 10-1: Product: syz
[  703.760639][  T824] usb 10-1: Manufacturer: syz
[  703.760654][  T824] usb 10-1: SerialNumber: syz
[  703.803063][  T824] r8152-cfgselector 10-1: Unknown version 0x0000
[  703.803084][  T824] r8152-cfgselector 10-1: config 0 descriptor??
[  703.889183][   T37] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  703.895574][ T5716] usb 5-1: 0:1 : does not exist
[  703.895654][ T5716] usb 5-1: unit 5 not found!
[  703.895671][ T5716] usb 5-1: unit 3 not found!
[  703.977173][ T5716] usb 5-1: USB disconnect, device number 57
[  704.031897][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  704.038227][   T37] usb 9-1: Using ep0 maxpacket: 8
[  704.040623][   T37] usb 9-1: unable to get BOS descriptor or descriptor too short
[  704.072755][   T37] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  704.072786][   T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.072806][   T37] usb 9-1: Product: syz
[  704.072821][   T37] usb 9-1: Manufacturer: syz
[  704.072835][   T37] usb 9-1: SerialNumber: syz
[  704.210918][T10755] tmpfs: Bad value for 'mpol'
[  704.273859][  T824] r8152-cfgselector 10-1: USB disconnect, device number 46
[  704.345877][   T37] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  704.346198][   T37] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  704.430484][   T37] usb 9-1: USB disconnect, device number 41
[  704.525444][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  704.808141][  T824] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  704.994902][T10761] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  705.000240][  T824] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  705.002464][  T824] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  705.002491][  T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.002511][  T824] usb 5-1: Product: syz
[  705.002525][  T824] usb 5-1: Manufacturer: syz
[  705.002540][  T824] usb 5-1: SerialNumber: syz
[  705.185244][T10763] FAULT_INJECTION: forcing a failure.
[  705.185244][T10763] name failslab, interval 1, probability 0, space 0, times 0
[  705.185281][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.8.1260 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  705.185312][T10763] Tainted: [L]=SOFTLOCKUP
[  705.185320][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.185332][T10763] Call Trace:
[  705.185340][T10763]  <TASK>
[  705.185349][T10763]  dump_stack_lvl+0xe8/0x150
[  705.185378][T10763]  should_fail_ex+0x46b/0x600
[  705.185412][T10763]  should_failslab+0xa8/0x100
[  705.185435][T10763]  __kmalloc_noprof+0xfe/0x7e0
[  705.185454][T10763]  ? rcu_is_watching+0x15/0xb0
[  705.185482][T10763]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  705.185504][T10763]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  705.185533][T10763]  tomoyo_realpath_from_path+0xe3/0x5d0
[  705.185558][T10763]  ? tomoyo_domain+0xd7/0x130
[  705.185585][T10763]  ? tomoyo_path_number_perm+0x219/0x630
[  705.185615][T10763]  tomoyo_path_number_perm+0x246/0x630
[  705.185645][T10763]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  705.185673][T10763]  ? __lock_acquire+0x6b5/0x2d10
[  705.185701][T10763]  ? do_raw_spin_lock+0x12b/0x2f0
[  705.185751][T10763]  ? __fget_files+0x2a/0x420
[  705.185775][T10763]  ? __fget_files+0x2a/0x420
[  705.185793][T10763]  ? __fget_files+0x3a6/0x420
[  705.185811][T10763]  ? __fget_files+0x2a/0x420
[  705.185835][T10763]  security_file_ioctl+0xc3/0x2a0
[  705.185864][T10763]  __se_sys_ioctl+0x47/0x170
[  705.185897][T10763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.185919][T10763]  do_syscall_64+0x174/0x580
[  705.185946][T10763]  ? clear_bhb_loop+0x40/0x90
[  705.185970][T10763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.185990][T10763] RIP: 0033:0x7f81e79dce59
[  705.186008][T10763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.186025][T10763] RSP: 002b:00007f81e5c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  705.186046][T10763] RAX: ffffffffffffffda RBX: 00007f81e7c55fa0 RCX: 00007f81e79dce59
[  705.186060][T10763] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000005
[  705.186072][T10763] RBP: 00007f81e5c36090 R08: 0000000000000000 R09: 0000000000000000
[  705.186085][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.186097][T10763] R13: 00007f81e7c56038 R14: 00007f81e7c55fa0 R15: 00007fffeee97a48
[  705.186127][T10763]  </TASK>
[  705.194088][T10763] ERROR: Out of memory at tomoyo_realpath_from_path.
[  705.324130][  T824] usb 5-1: Cannot retrieve CPort count: -71
[  705.324177][  T824] usb 5-1: Cannot retrieve CPort count: -71
[  705.324269][  T824] es2_ap_driver 5-1:246.0: probe with driver es2_ap_driver failed with error -71
[  705.335583][  T824] usb 5-1: USB disconnect, device number 58
[  705.941987][T10771] use of bytesused == 0 is deprecated and will be removed in the future,
[  705.942004][T10771] use the actual size instead.
[  706.141323][T10776] netlink: 'syz.9.1265': attribute type 10 has an invalid length.
[  706.170842][T10776] syz_tun: entered promiscuous mode
[  706.221652][T10776] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  706.773554][T10788] binder: BINDER_SET_CONTEXT_MGR already set
[  706.773570][T10788] binder: 10787:10788 ioctl 4018620d 200000000100 returned -16
[  706.775145][T10788] binder: 10787:10788 ioctl 4004662b 200000000040 returned -22
[  706.776158][T10788] binder: BINDER_SET_CONTEXT_MGR already set
[  706.776170][T10788] binder: 10787:10788 ioctl 4018620d 200000001000 returned -16
[  706.944834][T10791] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  707.048147][ T5717] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  707.198245][ T5717] usb 9-1: Using ep0 maxpacket: 8
[  707.200655][ T5717] usb 9-1: unable to get BOS descriptor or descriptor too short
[  707.204505][ T5717] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  707.204533][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.204553][ T5717] usb 9-1: Product: syz
[  707.204565][ T5717] usb 9-1: Manufacturer: syz
[  707.204589][ T5717] usb 9-1: SerialNumber: syz
[  707.308144][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'.
[  707.316120][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1274'.
[  707.398159][ T5716] usb 10-1: new full-speed USB device number 47 using dummy_hcd
[  707.449314][ T5717] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  707.449668][ T5717] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  707.551590][ T5716] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  707.551626][ T5716] usb 10-1: config 0 interface 0 has no altsetting 0
[  707.551659][ T5716] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  707.551684][ T5716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.600707][ T5716] usb 10-1: config 0 descriptor??
[  707.608619][ T5717] usb 9-1: USB disconnect, device number 42
[  707.799445][T10805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  708.055234][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055271][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055299][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055323][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055349][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055373][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055400][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055426][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055512][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.055539][ T5716] logitech 0003:046D:C626.0016: unknown main item tag 0x0
[  708.136017][T10810] Invalid logical block size (6)
[  708.152615][ T5716] logitech 0003:046D:C626.0016: hidraw0: USB HID v0.81 Device [HID 046d:c626] on usb-dummy_hcd.9-1/input0
[  708.266363][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1272'.
[  708.414219][T10823] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  708.583361][ T5716] usb 10-1: USB disconnect, device number 47
[  709.118390][ T5620] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  709.203545][T10838] binder: BINDER_SET_CONTEXT_MGR already set
[  709.203561][T10838] binder: 10837:10838 ioctl 4018620d 200000000100 returned -16
[  709.207818][T10838] binder: 10837:10838 ioctl 4004662b 200000000040 returned -22
[  709.234192][T10838] binder: BINDER_SET_CONTEXT_MGR already set
[  709.234206][T10838] binder: 10837:10838 ioctl 4018620d 200000001000 returned -16
[  709.268208][ T5620] usb 9-1: Using ep0 maxpacket: 16
[  709.275873][ T5620] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.275898][ T5620] usb 9-1: config 0 has no interfaces?
[  709.295800][ T5620] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  709.295828][ T5620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.295848][ T5620] usb 9-1: Product: syz
[  709.295863][ T5620] usb 9-1: Manufacturer: syz
[  709.295877][ T5620] usb 9-1: SerialNumber: syz
[  709.340246][ T5620] r8152-cfgselector 9-1: Unknown version 0x0000
[  709.340271][ T5620] r8152-cfgselector 9-1: config 0 descriptor??
[  709.508166][ T5717] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  709.660367][ T5717] usb 10-1: Using ep0 maxpacket: 8
[  709.664868][ T5717] usb 10-1: unable to get BOS descriptor or descriptor too short
[  709.680703][ T5717] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  709.680731][ T5717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.680750][ T5717] usb 10-1: Product: syz
[  709.680764][ T5717] usb 10-1: Manufacturer: syz
[  709.680779][ T5717] usb 10-1: SerialNumber: syz
[  709.762515][T10836] tmpfs: Bad value for 'mpol'
[  709.816944][   T37] r8152-cfgselector 9-1: USB disconnect, device number 43
[  709.958650][T10841] overlayfs: failed to resolve '/2': -2
[  709.985212][ T5717] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  709.985998][ T5717] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  710.012974][T10841] overlayfs: missing 'lowerdir'
[  710.158202][T10843] kvm: kvm [10842]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x800087
[  710.160027][ T5717] usb 10-1: USB disconnect, device number 48
[  710.242376][ T8295] udevd[8295]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  710.385725][T10845] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  710.452797][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'.
[  710.452882][T10847] netlink: del zone limit has 8 unknown bytes
[  710.998897][ T5717] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  711.159059][ T5717] usb 9-1: Using ep0 maxpacket: 16
[  711.198750][ T5717] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.198820][ T5717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  711.198848][ T5717] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  711.198871][ T5717] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  711.200100][ T5717] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  711.200128][ T5717] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  711.200148][ T5717] usb 9-1: Manufacturer: syz
[  711.306819][ T5717] usb 9-1: config 0 descriptor??
[  711.978933][ T5620] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  711.979839][ T5716] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  712.120009][ T5716] usb 10-1: device descriptor read/64, error -71
[  712.138879][ T5620] usb 5-1: Using ep0 maxpacket: 16
[  712.142441][ T5620] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.142464][ T5620] usb 5-1: config 0 has no interfaces?
[  712.144712][ T5620] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  712.144739][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.144757][ T5620] usb 5-1: Product: syz
[  712.144765][ T5620] usb 5-1: Manufacturer: syz
[  712.144773][ T5620] usb 5-1: SerialNumber: syz
[  712.204951][ T5620] r8152-cfgselector 5-1: Unknown version 0x0000
[  712.204974][ T5620] r8152-cfgselector 5-1: config 0 descriptor??
[  712.369300][ T5716] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  712.474712][T10879] tmpfs: Bad value for 'mpol'
[  712.508154][ T5716] usb 10-1: device descriptor read/64, error -71
[  712.619888][ T5716] usb usb10-port1: attempt power cycle
[  712.640800][   T37] r8152-cfgselector 5-1: USB disconnect, device number 59
[  712.978156][ T5716] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  713.010136][ T5716] usb 10-1: device descriptor read/8, error -71
[  713.236847][T10887] binder: BINDER_SET_CONTEXT_MGR already set
[  713.236858][T10887] binder: 10886:10887 ioctl 4018620d 200000000100 returned -16
[  713.253954][T10887] binder: 10886:10887 ioctl 4004662b 200000000040 returned -22
[  713.254882][T10887] binder: BINDER_SET_CONTEXT_MGR already set
[  713.254894][T10887] binder: 10886:10887 ioctl 4018620d 200000001000 returned -16
[  713.261825][ T5716] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[  713.288170][ T5716] usb 10-1: device descriptor read/8, error -71
[  713.402477][ T5716] usb usb10-port1: unable to enumerate USB device
[  713.832172][   T37] usb 9-1: USB disconnect, device number 44
[  714.456370][T10908] binder: BINDER_SET_CONTEXT_MGR already set
[  714.456381][T10908] binder: 10907:10908 ioctl 4018620d 200000000100 returned -16
[  714.473186][T10908] binder: 10907:10908 ioctl 4004662b 200000000040 returned -22
[  714.474139][T10908] binder: BINDER_SET_CONTEXT_MGR already set
[  714.474152][T10908] binder: 10907:10908 ioctl 4018620d 200000001000 returned -16
[  714.941967][T10924] FAULT_INJECTION: forcing a failure.
[  714.941967][T10924] name failslab, interval 1, probability 0, space 0, times 0
[  714.942002][T10924] CPU: 1 UID: 0 PID: 10924 Comm: syz.9.1318 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  714.942030][T10924] Tainted: [L]=SOFTLOCKUP
[  714.942037][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  714.942048][T10924] Call Trace:
[  714.942056][T10924]  <TASK>
[  714.942065][T10924]  dump_stack_lvl+0xe8/0x150
[  714.942092][T10924]  should_fail_ex+0x46b/0x600
[  714.942128][T10924]  should_failslab+0xa8/0x100
[  714.942152][T10924]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  714.942183][T10924]  ? skb_clone+0x212/0x3a0
[  714.942206][T10924]  ? skb_clone+0x212/0x3a0
[  714.942236][T10924]  skb_clone+0x212/0x3a0
[  714.942264][T10924]  __netlink_deliver_tap+0x424/0x8b0
[  714.942301][T10924]  ? netlink_deliver_tap+0x2e/0x1b0
[  714.942327][T10924]  netlink_deliver_tap+0x19c/0x1b0
[  714.942352][T10924]  netlink_sendskb+0x68/0x140
[  714.942385][T10924]  netlink_rcv_skb+0x2b6/0x4b0
[  714.942410][T10924]  ? __pfx_genl_rcv_msg+0x10/0x10
[  714.942441][T10924]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  714.942477][T10924]  ? netlink_deliver_tap+0x2e/0x1b0
[  714.942500][T10924]  ? netlink_deliver_tap+0x2e/0x1b0
[  714.942528][T10924]  genl_rcv+0x28/0x40
[  714.942554][T10924]  netlink_unicast+0x780/0x920
[  714.942587][T10924]  netlink_sendmsg+0x813/0xb40
[  714.942620][T10924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.942646][T10924]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  714.942675][T10924]  ? aa_sock_msg_perm+0x122/0x200
[  714.942697][T10924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.942721][T10924]  sock_sendmsg_nosec+0x13a/0x180
[  714.942752][T10924]  ____sys_sendmsg+0x55c/0x870
[  714.942782][T10924]  ? __pfx_____sys_sendmsg+0x10/0x10
[  714.942814][T10924]  ? import_iovec+0x73/0xa0
[  714.942838][T10924]  ___sys_sendmsg+0x2a5/0x360
[  714.942861][T10924]  ? __lock_acquire+0x6b5/0x2d10
[  714.942890][T10924]  ? __pfx____sys_sendmsg+0x10/0x10
[  714.942947][T10924]  ? __fget_files+0x2a/0x420
[  714.942967][T10924]  ? __fget_files+0x3a6/0x420
[  714.942997][T10924]  __x64_sys_sendmsg+0x1b7/0x290
[  714.943024][T10924]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  714.943066][T10924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.943087][T10924]  do_syscall_64+0x174/0x580
[  714.943111][T10924]  ? trace_irq_disable+0x3b/0x140
[  714.943136][T10924]  ? clear_bhb_loop+0x40/0x90
[  714.943159][T10924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.943178][T10924] RIP: 0033:0x7f135786ce59
[  714.943196][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.943213][T10924] RSP: 002b:00007f1355abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.943234][T10924] RAX: ffffffffffffffda RBX: 00007f1357ae5fa0 RCX: 00007f135786ce59
[  714.943248][T10924] RDX: 000000000400c000 RSI: 0000200000000000 RDI: 0000000000000003
[  714.943261][T10924] RBP: 00007f1355abe090 R08: 0000000000000000 R09: 0000000000000000
[  714.943273][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.943285][T10924] R13: 00007f1357ae6038 R14: 00007f1357ae5fa0 R15: 00007ffcfa4bde48
[  714.943322][T10924]  </TASK>
[  714.978130][ T5716] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  715.143596][ T5716] usb 5-1: Using ep0 maxpacket: 16
[  715.208158][ T5716] usb 5-1: config 0 has no interfaces?
[  715.245113][ T5716] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  715.245144][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.245164][ T5716] usb 5-1: Product: syz
[  715.245178][ T5716] usb 5-1: Manufacturer: syz
[  715.245193][ T5716] usb 5-1: SerialNumber: syz
[  715.330726][ T5716] usb 5-1: config 0 descriptor??
[  715.408848][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1320'.
[  715.542630][ T8322] usb 5-1: USB disconnect, device number 60
[  715.570732][T10933] binder: BINDER_SET_CONTEXT_MGR already set
[  715.570748][T10933] binder: 10932:10933 ioctl 4018620d 200000000100 returned -16
[  715.575363][T10933] binder: 10932:10933 ioctl 4004662b 200000000040 returned -22
[  715.580086][T10933] binder: BINDER_SET_CONTEXT_MGR already set
[  715.580098][T10933] binder: 10932:10933 ioctl 4018620d 200000001000 returned -16
[  715.968140][ T5716] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[  716.108223][ T8322] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  716.127388][ T5716] usb 10-1: Using ep0 maxpacket: 16
[  716.136439][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.136470][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.136506][ T5716] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  716.136530][ T5716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.185590][ T5716] usb 10-1: config 0 descriptor??
[  716.258139][ T8322] usb 9-1: Using ep0 maxpacket: 16
[  716.260232][ T8322] usb 9-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  716.260280][ T8322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.260317][ T8322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11
[  716.260343][ T8322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024
[  716.260370][ T8322] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  716.261711][ T8322] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  716.261736][ T8322] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  716.262208][ T8322] usb 9-1: Manufacturer: syz
[  716.275927][ T8322] usb 9-1: config 0 descriptor??
[  716.366211][T10943] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  716.580897][ T8322] rc_core: IR keymap rc-hauppauge not found
[  716.580911][ T8322] Registered IR keymap rc-empty
[  716.583346][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.603203][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.619528][ T8322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  716.629428][ T8322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input33
[  716.651454][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.668472][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.695327][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.710146][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.729274][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.748762][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.758796][ T5717] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  716.768565][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.788895][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.804979][ T5716] usb 10-1: language id specifier not provided by device, defaulting to English
[  716.809105][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.844432][ T8322] mceusb 9-1:0.0: Error: mce write urb status = -71
[  716.886352][ T8322] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  716.886378][ T8322] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  716.933272][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short
[  716.937782][ T5717] usb 5-1: config 0 has an invalid interface number: 86 but max is 0
[  716.937808][ T5717] usb 5-1: config 0 has no interface number 0
[  716.937909][ T5717] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[  716.937936][ T5717] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[  716.937961][ T5717] usb 5-1: config 0 interface 86 has no altsetting 0
[  716.949138][ T5717] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[  716.949166][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.949186][ T5717] usb 5-1: Product: syz
[  716.949201][ T5717] usb 5-1: Manufacturer: syz
[  716.949215][ T5717] usb 5-1: SerialNumber: syz
[  717.007834][ T5717] usb 5-1: config 0 descriptor??
[  717.014624][T10946] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  717.014804][T10946] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  717.162102][ T8322] usb 9-1: USB disconnect, device number 45
[  717.213986][ T5716] letsketch 0003:6161:4D15.0017: Device info: ï“¿
[  717.270438][ T5717] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected
[  717.352248][ T5717] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  717.385339][ T5717] usb 5-1: USB disconnect, device number 61
[  717.427891][ T5717] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  717.434724][ T5717] omninet 5-1:0.86: device disconnected
[  717.473651][ T5716] usb 10-1: Max retries (5) exceeded reading string descriptor 201
[  717.473732][ T5716] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -71
[  717.580104][ T5716] usb 10-1: USB disconnect, device number 53
[  717.835163][ T7108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  717.846251][ T7108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  717.855993][ T7108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  717.871092][ T7108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  717.886487][ T7108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  718.336802][T10970] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  718.686314][T10979] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  718.813164][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1339'.
[  718.813192][T10985] netlink: 'syz.9.1339': attribute type 1 has an invalid length.
[  719.004764][ T5717] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  719.159411][ T5717] usb 9-1: Using ep0 maxpacket: 32
[  719.164115][ T5717] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[  719.164140][ T5717] usb 9-1: config 0 has no interface number 0
[  719.164181][ T5717] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  719.164207][ T5717] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  719.164229][ T5717] usb 9-1: config 0 interface 85 has no altsetting 0
[  719.179376][ T5717] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  719.179403][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.179422][ T5717] usb 9-1: Product: syz
[  719.179437][ T5717] usb 9-1: Manufacturer: syz
[  719.179452][ T5717] usb 9-1: SerialNumber: syz
[  719.196126][ T5717] usb 9-1: config 0 descriptor??
[  719.395019][ T6366] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.510845][ T8322] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[  719.598198][ T5716] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  719.639844][ T8322] usb 10-1: device descriptor read/64, error -71
[  719.639961][ T5717] appletouch 9-1:0.85: Failed to request geyser raw mode
[  719.640178][ T5717] appletouch 9-1:0.85: probe with driver appletouch failed with error -5
[  719.675319][ T5717] usb 9-1: USB disconnect, device number 46
[  719.729913][ T5716] usb 5-1: device descriptor read/64, error -71
[  719.878156][ T8322] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[  719.988177][ T5716] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  720.001922][ T6366] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.018192][ T8322] usb 10-1: device descriptor read/64, error -71
[  720.118389][ T7108] Bluetooth: hci0: command tx timeout
[  720.128680][ T8322] usb usb10-port1: attempt power cycle
[  720.140619][ T5716] usb 5-1: device descriptor read/64, error -71
[  720.199905][T11004] ALSA: mixer_oss: invalid OSS volume 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  720.266933][ T5716] usb usb5-port1: attempt power cycle
[  720.359657][ T6366] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.468208][ T8322] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[  720.496523][ T8322] usb 10-1: device descriptor read/8, error -71
[  720.638227][ T5716] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  720.658758][ T5716] usb 5-1: device descriptor read/8, error -71
[  720.728143][ T8322] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[  720.749741][ T8322] usb 10-1: device descriptor read/8, error -71
[  720.890153][ T8318] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  720.891047][ T8322] usb usb10-port1: unable to enumerate USB device
[  720.912536][ T5716] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  720.914541][ T6366] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.942236][ T5716] usb 5-1: device descriptor read/8, error -71
[  721.038569][ T8318] usb 9-1: Using ep0 maxpacket: 8
[  721.041328][ T8318] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  721.041381][ T8318] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  721.041404][ T8318] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  721.041429][ T8318] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  721.041453][ T8318] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  721.041495][ T8318] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  721.041519][ T8318] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.068110][ T5716] usb usb5-port1: unable to enumerate USB device
[  721.162083][T10955] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.162405][T10955] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.162628][T10955] bridge_slave_0: entered allmulticast mode
[  721.165373][T10955] bridge_slave_0: entered promiscuous mode
[  721.195016][T10955] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.195320][T10955] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.195611][T10955] bridge_slave_1: entered allmulticast mode
[  721.222706][T10955] bridge_slave_1: entered promiscuous mode
[  721.288217][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.308861][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.310960][ T8318] usb 9-1: GET_CAPABILITIES returned 0
[  721.311005][ T8318] usbtmc 9-1:16.0: can't read capabilities
[  721.411278][T10955] team0: Port device team_slave_0 added
[  721.416126][T10955] team0: Port device team_slave_1 added
[  721.601848][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.630250][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.630265][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.630291][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.633231][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.633245][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.633270][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.637371][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.637448][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.637515][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.673892][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.673967][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674030][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674298][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674361][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674422][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674669][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674733][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.674794][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.675114][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.675179][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.675243][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  721.864859][ T8318] usb 9-1: USB disconnect, device number 47
[  722.208283][ T7108] Bluetooth: hci0: command tx timeout
[  722.307379][T10955] hsr_slave_0: entered promiscuous mode
[  722.315376][T10955] hsr_slave_1: entered promiscuous mode
[  722.569910][ T6366] bridge_slave_1: left allmulticast mode
[  722.569944][ T6366] bridge_slave_1: left promiscuous mode
[  722.570222][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.662272][T11032] ALSA: mixer_oss: invalid OSS volume 'Caaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  722.804752][ T6366] bridge_slave_0: left allmulticast mode
[  722.804786][ T6366] bridge_slave_0: left promiscuous mode
[  722.833050][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.089251][ T8318] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[  723.266076][ T8318] usb 10-1: Using ep0 maxpacket: 16
[  723.279979][ T8318] usb 10-1: unable to get BOS descriptor or descriptor too short
[  723.282295][ T8318] usb 10-1: config 3 has an invalid interface number: 199 but max is 0
[  723.282320][ T8318] usb 10-1: config 3 has no interface number 0
[  723.282353][ T8318] usb 10-1: config 3 interface 199 has no altsetting 0
[  723.295403][ T8318] usb 10-1: New USB device found, idVendor=07a6, idProduct=0986, bcdDevice=57.9c
[  723.295433][ T8318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.295453][ T8318] usb 10-1: Product: syz
[  723.295467][ T8318] usb 10-1: Manufacturer: syz
[  723.295481][ T8318] usb 10-1: SerialNumber: syz
[  723.356255][T11052] overlayfs: overlapping lowerdir path
[  723.612499][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.617436][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.675101][ T8318] pegasus 10-1:3.199: Missing or invalid endpoints
[  723.694651][ T8318] usb 10-1: USB disconnect, device number 58
[  723.792115][T11059] program syz.8.1356 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  724.288152][ T7108] Bluetooth: hci0: command tx timeout
[  724.456347][T11067] ALSA: mixer_oss: invalid OSS volume 'Caaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  724.458969][ T6366] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.503659][T11069] netlink: 'syz.8.1361': attribute type 3 has an invalid length.
[  724.503680][T11069] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1361'.
[  724.540149][ T6366] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.579491][ T6366] .` (unregistering): Released all slaves
[  724.737035][ T5269] 8021q: adding VLAN 0 to HW filter on device eth25
[  724.798146][ T5620] usb 9-1: new full-speed USB device number 48 using dummy_hcd
[  724.956190][ T5620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  724.956231][ T5620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  724.956266][ T5620] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  724.956289][ T5620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.014030][ T5620] usb 9-1: config 0 descriptor??
[  725.503948][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.503985][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.504012][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.504040][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.504199][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.504230][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.504258][ T5620] isku 0003:1E7D:319C.0018: unknown main item tag 0x0
[  725.566011][ T5620] isku 0003:1E7D:319C.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0
[  725.687346][ T5620] isku 0003:1E7D:319C.0018: couldn't init struct isku_device
[  725.687398][ T5620] isku 0003:1E7D:319C.0018: couldn't install keyboard
[  725.707699][ T5620] isku 0003:1E7D:319C.0018: probe with driver isku failed with error -71
[  725.731519][ T5620] usb 9-1: USB disconnect, device number 48
[  725.782507][T11089] fido_id[11089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  725.965085][T11095] ALSA: mixer_oss: invalid OSS volume 'Caaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  726.014548][ T8318] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  726.234403][ T8318] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  726.234433][ T8318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.234464][ T8318] usb 5-1: Product: syz
[  726.234479][ T8318] usb 5-1: Manufacturer: syz
[  726.234494][ T8318] usb 5-1: SerialNumber: syz
[  726.250158][ T8318] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  726.293198][ T5717] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  726.368127][ T7108] Bluetooth: hci0: command tx timeout
[  726.830202][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.862705][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.163525][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  808.601494][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  831.518019][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  831.518035][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8318/1:b..l
[  831.518054][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=61913, q=35762 ncpus=2)
[  831.518070][    C1] task:kworker/1:3     state:R  running task     stack:20280 pid:8318  tgid:8318  ppid:2      task_flags:0x4208060 flags:0x00080000
[  831.518100][    C1] Workqueue: usb_hub_wq hub_event
[  831.518178][    C1] Call Trace:
[  831.518182][    C1]  <TASK>
[  831.518190][    C1]  __schedule+0x172b/0x5550
[  831.518213][    C1]  ? try_to_take_rt_mutex+0x840/0xb00
[  831.518224][    C1]  ? unwind_next_frame+0xa6/0x2550
[  831.518243][    C1]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  831.518253][    C1]  ? unwind_next_frame+0xa6/0x2550
[  831.518266][    C1]  ? __pfx___schedule+0x10/0x10
[  831.518278][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  831.518296][    C1]  preempt_schedule_irq+0x4d/0xa0
[  831.518308][    C1]  irqentry_exit+0x14f/0x8c0
[  831.518320][    C1]  ? trace_irq_disable+0x3b/0x140
[  831.518336][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.518361][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  831.518373][    C1] Code: ff ff ff e8 b1 bd 9c 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 5b 18 1a 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 80 85 a0 09 cc 48 8d 3d e8 62 31
[  831.518383][    C1] RSP: 0018:ffffc900046473c0 EFLAGS: 00000286
[  831.518392][    C1] RAX: f16cca1c4dbc2500 RBX: 0000000000000000 RCX: 0000000000000046
[  831.518399][    C1] RDX: 000000002e5c261f RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80
[  831.518405][    C1] RBP: ffffffff8b404b20 R08: ffffffff8b404b20 R09: ffffffff8e3cb2a0
[  831.518412][    C1] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 0000000000000002
[  831.518419][    C1] R13: ffffffff8e3cb2a0 R14: 0000000000000000 R15: 0000000000000246
[  831.518427][    C1]  ? rt_spin_lock+0x1e0/0x400
[  831.518436][    C1]  ? rt_spin_lock+0x1e0/0x400
[  831.518451][    C1]  rt_spin_lock+0x1fc/0x400
[  831.518459][    C1]  ? rt_spin_lock+0x1e0/0x400
[  831.518469][    C1]  ? __pfx_rt_spin_lock+0x10/0x10
[  831.518477][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  831.518492][    C1]  __refill_objects_node+0x89/0x5b0
[  831.518511][    C1]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  831.518525][    C1]  refill_objects+0x55/0x350
[  831.518540][    C1]  ? rt_spin_unlock+0x160/0x200
[  831.518550][    C1]  __pcs_replace_empty_main+0x331/0x690
[  831.518564][    C1]  ? rt_spin_trylock+0x13a/0x2b0
[  831.518575][    C1]  __kmalloc_noprof+0x56d/0x7e0
[  831.518585][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  831.518596][    C1]  ? usb_alloc_urb+0x46/0x150
[  831.518633][    C1]  ? usb_alloc_urb+0x46/0x150
[  831.518650][    C1]  usb_alloc_urb+0x46/0x150
[  831.518666][    C1]  usb_control_msg+0x118/0x3e0
[  831.518679][    C1]  hub_ext_port_status+0x116/0x820
[  831.518700][    C1]  hub_event+0x770/0x4f60
[  831.518730][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  831.518743][    C1]  ? __pfx_hub_event+0x10/0x10
[  831.518754][    C1]  ? process_one_work+0x8be/0x1630
[  831.518773][    C1]  ? process_one_work+0x8be/0x1630
[  831.518786][    C1]  process_one_work+0x98b/0x1630
[  831.518809][    C1]  ? __pfx_process_one_work+0x10/0x10
[  831.518821][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  831.518839][    C1]  worker_thread+0xb8e/0x1140
[  831.518864][    C1]  kthread+0x388/0x470
[  831.518876][    C1]  ? __pfx_worker_thread+0x10/0x10
[  831.518890][    C1]  ? __pfx_kthread+0x10/0x10
[  831.518901][    C1]  ret_from_fork+0x514/0xb70
[  831.518915][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  831.518926][    C1]  ? __switch_to+0xc79/0x1410
[  831.518937][    C1]  ? __pfx_kthread+0x10/0x10
[  831.518948][    C1]  ret_from_fork_asm+0x1a/0x30
[  831.518969][    C1]  </TASK>
[  870.042475][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  873.878429][   T39] INFO: task rcub/0:19 blocked for more than 143 seconds.
[  873.878457][   T39]       Tainted: G             L      syzkaller #0
[  873.878469][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  873.878479][   T39] task:rcub/0          state:D stack:28384 pid:19    tgid:19    ppid:2      task_flags:0x208040 flags:0x00080000
[  873.878540][   T39] Call Trace:
[  873.878548][   T39]  <TASK>
[  873.878563][   T39]  __schedule+0x172b/0x5550
[  873.878599][   T39]  ? enqueue_task_rt+0x694/0xcf0
[  873.878648][   T39]  ? __pfx___schedule+0x10/0x10
[  873.878668][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x670
[  873.878712][   T39]  rt_mutex_schedule+0x76/0xf0
[  873.878740][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  873.878782][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x670
[  873.878815][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  873.878837][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  873.878857][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  873.878888][   T39]  ? rcu_boost_kthread+0x2fb/0x4b0
[  873.878928][   T39]  rt_mutex_lock_nested+0x170/0x1d0
[  873.878955][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  873.878979][   T39]  ? rcu_boost_kthread+0x2fb/0x4b0
[  873.879007][   T39]  rcu_boost_kthread+0x2fb/0x4b0
[  873.879045][   T39]  kthread+0x388/0x470
[  873.879069][   T39]  ? __pfx_rcu_boost_kthread+0x10/0x10
[  873.879094][   T39]  ? __pfx_kthread+0x10/0x10
[  873.879118][   T39]  ret_from_fork+0x514/0xb70
[  873.879145][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  873.879169][   T39]  ? __switch_to+0xc79/0x1410
[  873.879199][   T39]  ? __pfx_kthread+0x10/0x10
[  873.879223][   T39]  ret_from_fork_asm+0x1a/0x30
[  873.879265][   T39]  </TASK>
[  873.879390][   T39] INFO: task dhcpcd:5269 blocked for more than 143 seconds.
[  873.879407][   T39]       Tainted: G             L      syzkaller #0
[  873.879418][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  873.879427][   T39] task:dhcpcd          state:D stack:19528 pid:5269  tgid:5269  ppid:5268   task_flags:0x400140 flags:0x00080000
[  873.879475][   T39] Call Trace:
[  873.879482][   T39]  <TASK>
[  873.879494][   T39]  __schedule+0x172b/0x5550
[  873.879518][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  873.879566][   T39]  ? __pfx___schedule+0x10/0x10
[  873.879603][   T39]  rt_mutex_schedule+0x76/0xf0
[  873.879629][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  873.879677][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  873.879698][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  873.879719][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  873.879749][   T39]  ? devinet_ioctl+0x32b/0x1b30
[  873.879783][   T39]  ? devinet_ioctl+0x32b/0x1b30
[  873.879813][   T39]  ? devinet_ioctl+0x32b/0x1b30
[  873.883044][   T39]  mutex_lock_nested+0x168/0x1d0
[  873.883088][   T39]  devinet_ioctl+0x32b/0x1b30
[  873.883127][   T39]  ? __pfx_devinet_ioctl+0x10/0x10
[  873.883158][   T39]  ? get_user_ifreq+0x12b/0x180
[  873.883195][   T39]  inet_ioctl+0x42a/0x560
[  873.883218][   T39]  ? __pfx_inet_ioctl+0x10/0x10
[  873.883259][   T39]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  874.004870][   T39]  sock_do_ioctl+0x101/0x320
[  874.004914][   T39]  ? __pfx_sock_do_ioctl+0x10/0x10
[  874.004960][   T39]  sock_ioctl+0x5c9/0x7f0
[  874.004990][   T39]  ? __pfx_sock_ioctl+0x10/0x10
[  874.005019][   T39]  ? fd_install+0x97/0x3e0
[  874.005038][   T39]  ? fd_install+0x30c/0x3e0
[  874.005061][   T39]  ? bpf_lsm_file_ioctl+0x9/0x20
[  874.005086][   T39]  ? __pfx_sock_ioctl+0x10/0x10
[  874.005113][   T39]  __se_sys_ioctl+0xff/0x170
[  874.005140][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.005162][   T39]  do_syscall_64+0x174/0x580
[  874.005205][   T39]  ? trace_irq_disable+0x3b/0x140
[  874.005229][   T39]  ? clear_bhb_loop+0x40/0x90
[  874.005254][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.005275][   T39] RIP: 0033:0x7fd8b8527378
[  874.005293][   T39] RSP: 002b:00007ffe20e09388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  874.005315][   T39] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 00007fd8b8527378
[  874.005330][   T39] RDX: 00007ffe20e19580 RSI: 0000000000008914 RDI: 0000000000000046
[  874.005344][   T39] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  874.005357][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe20e29720
[  874.005370][   T39] R13: 00007fd8b8427708 R14: 0000000000000028 R15: 0000000000008914
[  874.005398][   T39]  </TASK>
[  874.005425][   T39] INFO: task kworker/u8:29:6365 blocked for more than 143 seconds.
[  874.005443][   T39]       Tainted: G             L      syzkaller #0
[  874.005454][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  874.005463][   T39] task:kworker/u8:29   state:D stack:19144 pid:6365  tgid:6365  ppid:2      task_flags:0x4208060 flags:0x00080000
[  874.005515][   T39] Workqueue: events_unbound linkwatch_event
[  874.005544][   T39] Call Trace:
[  874.005551][   T39]  <TASK>
[  874.005563][   T39]  __schedule+0x172b/0x5550
[  874.005588][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  874.005617][   T39]  ? stack_trace_save+0xa9/0x100
[  874.005641][   T39]  ? __pfx_stack_trace_save+0x10/0x10
[  874.005677][   T39]  ? __pfx___schedule+0x10/0x10
[  874.005713][   T39]  rt_mutex_schedule+0x76/0xf0
[  874.005740][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  874.005787][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  874.005810][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  874.005830][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  874.005859][   T39]  ? linkwatch_event+0xe/0x60
[  874.005889][   T39]  ? process_one_work+0x8be/0x1630
[  874.005925][   T39]  ? linkwatch_event+0xe/0x60
[  874.005949][   T39]  mutex_lock_nested+0x168/0x1d0
[  874.005980][   T39]  ? process_one_work+0x8be/0x1630
[  874.006007][   T39]  linkwatch_event+0xe/0x60
[  874.006032][   T39]  process_one_work+0x98b/0x1630
[  874.006080][   T39]  ? __pfx_process_one_work+0x10/0x10
[  874.006107][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.006144][   T39]  worker_thread+0xb49/0x1140
[  874.006205][   T39]  kthread+0x388/0x470
[  874.006228][   T39]  ? __pfx_worker_thread+0x10/0x10
[  874.006256][   T39]  ? __pfx_kthread+0x10/0x10
[  874.006279][   T39]  ret_from_fork+0x514/0xb70
[  874.182304][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  874.182340][   T39]  ? __switch_to+0xc79/0x1410
[  874.182365][   T39]  ? __pfx_kthread+0x10/0x10
[  874.182390][   T39]  ret_from_fork_asm+0x1a/0x30
[  874.182432][   T39]  </TASK>
[  874.182445][   T39] INFO: task kworker/u8:30:6366 blocked for more than 143 seconds.
[  874.182463][   T39]       Tainted: G             L      syzkaller #0
[  874.182474][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  874.182483][   T39] task:kworker/u8:30   state:D stack:19096 pid:6366  tgid:6366  ppid:2      task_flags:0x4208060 flags:0x00080000
[  874.182536][   T39] Workqueue: netns cleanup_net
[  874.182558][   T39] Call Trace:
[  874.182566][   T39]  <TASK>
[  874.182578][   T39]  __schedule+0x172b/0x5550
[  874.182611][   T39]  ? finish_task_switch+0x41c/0xbd0
[  874.182652][   T39]  ? __pfx___schedule+0x10/0x10
[  874.182672][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x670
[  874.182717][   T39]  rt_mutex_schedule+0x76/0xf0
[  874.182744][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  874.182786][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x670
[  874.182819][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  874.182841][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  874.182861][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  874.182892][   T39]  ? wiphy_unregister+0x26a/0xb00
[  874.182918][   T39]  ? wiphy_unregister+0x26a/0xb00
[  874.182945][   T39]  ? wiphy_unregister+0x26a/0xb00
[  874.182964][   T39]  mutex_lock_nested+0x168/0x1d0
[  874.182999][   T39]  wiphy_unregister+0x26a/0xb00
[  874.183024][   T39]  ? __pfx_wiphy_unregister+0x10/0x10
[  874.183044][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  874.183074][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.183105][   T39]  ? ieee80211_unregister_hw+0x144/0x2c0
[  874.183136][   T39]  ieee80211_unregister_hw+0x1e2/0x2c0
[  874.183171][   T39]  mac80211_hwsim_del_radio+0x28a/0x4a0
[  874.183207][   T39]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  874.183238][   T39]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  874.183267][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.183296][   T39]  hwsim_exit_net+0xec8/0xf80
[  874.183318][   T39]  ? hwsim_exit_net+0xce/0xf80
[  874.183341][   T39]  ? __pfx_hwsim_exit_net+0x10/0x10
[  874.183365][   T39]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  874.183475][   T39]  ops_undo_list+0x49f/0x940
[  874.183500][   T39]  ? rt_spin_unlock+0x1a0/0x200
[  874.183520][   T39]  ? __pfx_ops_undo_list+0x10/0x10
[  874.183540][   T39]  ? rt_spin_unlock+0x14f/0x200
[  874.183562][   T39]  ? idr_destroy+0x21b/0x2a0
[  874.183584][   T39]  ? rt_spin_unlock+0x160/0x200
[  874.183607][   T39]  cleanup_net+0x56e/0x800
[  874.183631][   T39]  ? __pfx_cleanup_net+0x10/0x10
[  874.183664][   T39]  ? process_one_work+0x8be/0x1630
[  874.183691][   T39]  process_one_work+0x98b/0x1630
[  874.269134][   T39]  ? __pfx_process_one_work+0x10/0x10
[  874.269177][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.269216][   T39]  worker_thread+0xb49/0x1140
[  874.269246][   T39]  ? irqentry_exit+0x218/0x8c0
[  874.269294][   T39]  kthread+0x388/0x470
[  874.269317][   T39]  ? __pfx_worker_thread+0x10/0x10
[  874.269345][   T39]  ? __pfx_kthread+0x10/0x10
[  874.269368][   T39]  ret_from_fork+0x514/0xb70
[  874.269395][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  874.269419][   T39]  ? __switch_to+0xc79/0x1410
[  874.269442][   T39]  ? __pfx_kthread+0x10/0x10
[  874.269465][   T39]  ret_from_fork_asm+0x1a/0x30
[  874.269508][   T39]  </TASK>
[  874.269571][   T39] INFO: task syz-executor:10955 blocked for more than 143 seconds.
[  874.269589][   T39]       Tainted: G             L      syzkaller #0
[  874.269601][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  874.269610][   T39] task:syz-executor    state:D stack:22248 pid:10955 tgid:10955 ppid:10951  task_flags:0x480140 flags:0x00080000
[  874.269665][   T39] Call Trace:
[  874.269672][   T39]  <TASK>
[  874.269684][   T39]  __schedule+0x172b/0x5550
[  874.269709][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  874.269747][   T39]  ? ktime_get+0x45/0x220
[  874.269774][   T39]  ? look_up_lock_class+0x57/0x110
[  874.269823][   T39]  ? __pfx___schedule+0x10/0x10
[  874.269854][   T39]  ? schedule+0x90/0x360
[  874.269879][   T39]  schedule+0x164/0x360
[  874.269904][   T39]  schedule_timeout+0xc3/0x2c0
[  874.269930][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  874.269953][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.269984][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  874.270007][   T39]  ? wait_for_completion+0x274/0x5e0
[  874.270032][   T39]  wait_for_completion+0x2cc/0x5e0
[  874.270068][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  874.270094][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  874.270119][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.270143][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  874.270177][   T39]  synchronize_rcu_normal+0x2a4/0x380
[  874.270208][   T39]  ? __pfx_synchronize_rcu_normal+0x10/0x10
[  874.270258][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.270302][   T39]  synchronize_rcu_expedited+0x15a/0x770
[  874.270336][   T39]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  874.270368][   T39]  ? rt_spin_unlock+0x14f/0x200
[  874.270392][   T39]  ? rt_spin_unlock+0x160/0x200
[  874.270423][   T39]  ? synchronize_net+0xa/0x90
[  874.270455][   T39]  nsim_stop+0x259/0x430
[  874.270478][   T39]  ? __pfx_nsim_stop+0x10/0x10
[  874.270501][   T39]  __dev_close_many+0x36d/0x6e0
[  874.378059][   T39]  ? __pfx___dev_close_many+0x10/0x10
[  874.378100][   T39]  netif_close_many+0x225/0x420
[  874.378128][   T39]  ? __pfx_netif_close_many+0x10/0x10
[  874.378152][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.378178][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  874.378204][   T39]  ? mutex_lock_nested+0x152/0x1d0
[  874.378232][   T39]  ? unregister_netdevice_many_notify+0x588/0x20b0
[  874.378266][   T39]  unregister_netdevice_many_notify+0x825/0x20b0
[  874.378308][   T39]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  874.378357][   T39]  unregister_netdevice_queue+0x31f/0x360
[  874.378388][   T39]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  874.378426][   T39]  nsim_destroy+0x26d/0x7f0
[  874.378454][   T39]  __nsim_dev_port_del+0x14f/0x200
[  874.378482][   T39]  nsim_dev_reload_destroy+0x288/0x490
[  874.378507][   T39]  ? nsim_drv_remove+0x50/0x160
[  874.378534][   T39]  nsim_drv_remove+0x58/0x160
[  874.378557][   T39]  ? __pfx_nsim_bus_remove+0x10/0x10
[  874.378579][   T39]  device_release_driver_internal+0x46f/0x870
[  874.378627][   T39]  bus_remove_device+0x45a/0x570
[  874.378653][   T39]  ? __pfx_bus_remove_device+0x10/0x10
[  874.378677][   T39]  ? up_read+0x23/0x40
[  874.378695][   T39]  ? kernfs_remove_by_name_ns+0x101/0x140
[  874.378724][   T39]  device_del+0x52b/0x900
[  874.378756][   T39]  ? __pfx_device_del+0x10/0x10
[  874.378780][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.378805][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  874.378833][   T39]  device_unregister+0x21/0xf0
[  874.378858][   T39]  del_device_store+0x2b0/0x370
[  874.378882][   T39]  ? __pfx_del_device_store+0x10/0x10
[  874.378903][   T39]  ? sysfs_file_kobj+0x1e4/0x230
[  874.378931][   T39]  ? sysfs_kf_write+0x166/0x260
[  874.378962][   T39]  ? __pfx_sysfs_kf_write+0x10/0x10
[  874.378989][   T39]  kernfs_fop_write_iter+0x3b0/0x540
[  874.379022][   T39]  vfs_write+0x629/0xba0
[  874.379054][   T39]  ? __pfx_vfs_write+0x10/0x10
[  874.379081][   T39]  ? do_sys_openat2+0x14e/0x200
[  874.379099][   T39]  ? kmem_cache_free+0x187/0x6c0
[  874.379135][   T39]  ksys_write+0x156/0x270
[  874.379168][   T39]  ? __pfx_ksys_write+0x10/0x10
[  874.379200][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.379222][   T39]  do_syscall_64+0x174/0x580
[  874.379247][   T39]  ? trace_irq_disable+0x3b/0x140
[  874.379271][   T39]  ? clear_bhb_loop+0x40/0x90
[  874.379295][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.379316][   T39] RIP: 0033:0x7fa1a5f6d68e
[  874.379334][   T39] RSP: 002b:00007fffb28bd758 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  874.379356][   T39] RAX: ffffffffffffffda RBX: 000055558d089500 RCX: 00007fa1a5f6d68e
[  874.379371][   T39] RDX: 0000000000000001 RSI: 00007fffb28bd7e0 RDI: 0000000000000005
[  874.379384][   T39] RBP: 00007fa1a60436f2 R08: 0000000000000000 R09: 0000000000000000
[  874.379397][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.379410][   T39] R13: 00007fffb28bd7e0 R14: 00007fa1a6d54620 R15: 0000000000000003
[  874.379440][   T39]  </TASK>
[  874.379458][   T39] INFO: task syz.9.1371:11110 blocked for more than 143 seconds.
[  874.379475][   T39]       Tainted: G             L      syzkaller #0
[  874.549540][   T39]       Blocked by coredump.
[  874.549551][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  874.549561][   T39] task:syz.9.1371      state:D stack:24856 pid:11110 tgid:11109 ppid:8782   task_flags:0x40054c flags:0x00080001
[  874.549619][   T39] Call Trace:
[  874.549626][   T39]  <TASK>
[  874.549640][   T39]  __schedule+0x172b/0x5550
[  874.549669][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  874.549714][   T39]  ? look_up_lock_class+0x57/0x110
[  874.549743][   T39]  ? __pfx___schedule+0x10/0x10
[  874.549775][   T39]  ? schedule+0x90/0x360
[  874.549800][   T39]  schedule+0x164/0x360
[  874.549825][   T39]  schedule_timeout+0xc3/0x2c0
[  874.549850][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  874.549873][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.549905][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  874.549905][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  874.549928][   T39]  ? wait_for_completion+0x274/0x5e0
[  874.549954][   T39]  wait_for_completion+0x2cc/0x5e0
[  874.549990][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  874.550016][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  874.550041][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.550065][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  874.550094][   T39]  synchronize_rcu_normal+0x2a4/0x380
[  874.550131][   T39]  ? __pfx_synchronize_rcu_normal+0x10/0x10
[  874.550179][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  874.550228][   T39]  synchronize_rcu_expedited+0x15a/0x770
[  874.550262][   T39]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  874.550299][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  874.550324][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  874.550348][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  874.550384][   T39]  ? synchronize_net+0xa/0x90
[  874.550415][   T39]  packet_release+0xa40/0xd60
[  874.550450][   T39]  ? __pfx_packet_release+0x10/0x10
[  874.550490][   T39]  __sock_release+0xb9/0x250
[  874.550519][   T39]  ? __pfx_sock_close+0x10/0x10
[  874.550547][   T39]  sock_close+0x1c/0x30
[  874.550574][   T39]  __fput+0x461/0xa70
[  874.550623][   T39]  task_work_run+0x1d9/0x270
[  874.550645][   T39]  ? __pfx_task_work_run+0x10/0x10
[  874.550670][   T39]  ? rt_spin_unlock+0x160/0x200
[  874.550696][   T39]  do_exit+0x70f/0x22c0
[  874.550722][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  874.550750][   T39]  ? __pfx_do_exit+0x10/0x10
[  874.550771][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  874.550791][   T39]  ? reacquire_held_locks+0x104/0x190
[  874.550819][   T39]  ? rt_spin_lock+0x1e0/0x400
[  874.550850][   T39]  do_group_exit+0x21b/0x2d0
[  874.550874][   T39]  ? rt_spin_unlock+0x160/0x200
[  874.550896][   T39]  get_signal+0x1284/0x1330
[  874.550945][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  874.696319][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  874.696359][   T39]  ? __fget_files+0x2a/0x420
[  874.696391][   T39]  exit_to_user_mode_loop+0x104/0x710
[  874.696417][   T39]  ? rcu_is_watching+0x15/0xb0
[  874.696447][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.696469][   T39]  do_syscall_64+0x353/0x580
[  874.696495][   T39]  ? trace_irq_disable+0x3b/0x140
[  874.696519][   T39]  ? clear_bhb_loop+0x40/0x90
[  874.696544][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.696564][   T39] RIP: 0033:0x7f135786caeb
[  874.696583][   T39] RSP: 002b:00007f1355abbf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  874.696603][   T39] RAX: fffffffffffffff0 RBX: 0000000000000009 RCX: 00007f135786caeb
[  874.696617][   T39] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009
[  874.696630][   T39] RBP: 00007f1355abcfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  874.696643][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  874.696655][   T39] R13: 0000200000000680 R14: 0000000000000003 R15: 0000000000000868
[  874.696686][   T39]  </TASK>
[  874.696707][   T39] 
[  874.696707][   T39] Showing all locks held in the system:
[  874.696716][   T39] 7 locks held by kworker/u8:0/12:
[  874.696728][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.696920][   T39]  #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.696974][   T39]  #2: ffff88803a232310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  874.697033][   T39]  #3: ffff88803175d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  874.697086][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  874.697137][   T39]  #5: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.697191][   T39]  #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.697245][   T39] 3 locks held by pr/legacy/17:
[  874.697256][   T39]  #0: ffffffff8e3bd300 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  874.697305][   T39]  #1: ffffffff8e2a4bf8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  874.697353][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  874.697397][   T39] 1 lock held by rcub/0/19:
[  874.697408][   T39]  #0: ffffffff8e3d0e48 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0
[  874.697567][   T39] 6 locks held by ktimers/1/30:
[  874.697578][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.697631][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.697684][   T39]  #2: ffff8880b87284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260
[  874.788130][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  874.788188][   T39]  #4: ffff88802a45c058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: rt_spin_trylock+0x56/0x2b0
[  874.788233][   T39]  #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  874.788278][   T39] 1 lock held by khungtaskd/39:
[  874.788289][   T39]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  874.788375][   T39] 3 locks held by kworker/u8:4/68:
[  874.788386][   T39]  #0: ffff888033260138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.788440][   T39]  #1: ffffc9000153fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.788494][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  874.788546][   T39] 8 locks held by kworker/u8:7/158:
[  874.788558][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.788609][   T39]  #1: ffffc90003917c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.788663][   T39]  #2: ffff88803a8c0310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  874.788723][   T39]  #3: ffff888037beed20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  874.788776][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  874.788818][   T39]  #5: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.788871][   T39]  #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.788923][   T39]  #7: ffff8880b8639078 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450
[  874.788971][   T39] 2 locks held by kworker/u8:8/167:
[  874.788983][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.789036][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.789090][   T39] 5 locks held by kworker/u8:10/1196:
[  874.789107][   T39]  #0: ffff888033dc6138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.789167][   T39]  #1: ffffc9000652fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.789220][   T39]  #2: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.789273][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  874.789326][   T39]  #4: ffff8880b8639078 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450
[  874.789390][   T39] 2 locks held by kworker/u9:1/4923:
[  874.789402][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.789455][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.789501][   T39] 2 locks held by jbd2/sda1-8/4936:
[  874.789512][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.941072][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.941136][   T39] 2 locks held by klogd/4963:
[  874.941148][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.941203][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.941249][   T39] 2 locks held by udevd/4974:
[  874.941260][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.941312][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.941357][   T39] 1 lock held by dhcpcd/5269:
[  874.941373][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  874.941426][   T39] 2 locks held by crond/5346:
[  874.941437][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.941489][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.941535][   T39] 2 locks held by getty/5362:
[  874.941546][   T39]  #0: ffff88803710b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  874.941681][   T39]  #1: ffffc90003cbb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[  874.941763][   T39] 3 locks held by syz-executor/5594:
[  874.941775][   T39]  #0: ffff88802c028358 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  874.941822][   T39]  #1: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.941874][   T39]  #2: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  874.941919][   T39] 5 locks held by kworker/0:4/5620:
[  874.941931][   T39]  #0: ffff88813fe56938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.941984][   T39]  #1: ffffc90004527c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.942037][   T39]  #2: ffff88802a77e210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120
[  874.942083][   T39]  #3: ffff88802a771088 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x820
[  874.942137][   T39]  #4: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  874.942190][   T39] 3 locks held by kworker/1:5/5717:
[  874.942201][   T39]  #0: ffff88813fe57938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.942253][   T39]  #1: ffffc90005077c40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.942306][   T39]  #2: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  874.942358][   T39] 5 locks held by kworker/u8:15/6251:
[  874.942369][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  874.942421][   T39]  #1: ffffc9000641fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  874.942474][   T39]  #2: ffff8880564d0310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  875.167364][   T39]  #3: ffff88805f980120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  875.167419][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  875.167466][   T39] 6 locks held by kworker/u8:18/6254:
[  875.167478][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.167531][   T39]  #1: ffffc9000646fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.167592][   T39]  #2: ffff88803a8c0310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  875.167649][   T39]  #3: ffff888037beed20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  875.167701][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  875.167744][   T39]  #5: ffff8880b8636e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0
[  875.167914][   T39] 8 locks held by kworker/u8:22/6356:
[  875.167926][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.168108][   T39]  #1: ffffc9000678fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.168166][   T39]  #2: ffff88803a232310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  875.168230][   T39]  #3: ffff88803175d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  875.168283][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  875.168327][   T39]  #5: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  875.168380][   T39]  #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  875.168432][   T39]  #7: ffff8880b8639078 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450
[  875.168480][   T39] 6 locks held by kworker/u8:23/6357:
[  875.168490][   T39]  #0: ffff88801fe8e938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.168541][   T39]  #1: ffffc9000679fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.168601][   T39]  #2: ffff888036baa0d0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  875.168654][   T39]  #3: ffff888036b9ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  875.168734][   T39]  #4: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.168793][   T39]  #5: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.300332][   T39] 2 locks held by kworker/u8:25/6360:
[  875.300345][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.300402][   T39]  #1: ffffc900064efc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.300456][   T39] 3 locks held by kworker/u8:26/6361:
[  875.300468][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.300520][   T39]  #1: ffffc900067cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.300581][   T39]  #2: ffff88803a048310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  875.300636][   T39] 3 locks held by kworker/u8:29/6365:
[  875.300648][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.300700][   T39]  #1: ffffc9000680fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.300752][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  875.300804][   T39] 4 locks held by kworker/u8:30/6366:
[  875.300816][   T39]  #0: ffff88801be9e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.300868][   T39]  #1: ffffc9000682fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.300919][   T39]  #2: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  875.300964][   T39]  #3: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x26a/0xb00
[  875.301011][   T39] 5 locks held by kworker/u9:5/7108:
[  875.301022][   T39]  #0: ffff8880297b9138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.301079][   T39]  #1: ffffc9000e43fc40 ((work_completion)(&(&conn->disc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.301132][   T39]  #2: ffff88805c3a4870 (&hdev->unregister_lock){+.+.}-{4:4}, at: hci_cmd_sync_submit+0x3f/0x2b0
[  875.301275][   T39]  #3: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.301329][   T39]  #4: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.301380][   T39] 2 locks held by syz-executor/8156:
[  875.301391][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.301444][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.301493][   T39] 3 locks held by udevd/8295:
[  875.301504][   T39]  #0: ffff888033f911e8 (kn->active#34){.+.+}-{0:0}, at: kernfs_fop_open+0x5a/0xcb0
[  875.301565][   T39]  #1: ffff88801c2ed958 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_open+0x6e6/0xcb0
[  875.301616][   T39]  #2: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  875.301670][   T39] 7 locks held by kworker/1:3/8318:
[  875.301682][   T39]  #0: ffff888022ebe938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  875.436189][   T39]  #1: ffffc90004647c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  875.436247][   T39]  #2: ffff88802a610210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  875.436296][   T39]  #3: ffff88802a604658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4f60
[  875.436344][   T39]  #4: ffff88802a605088 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x820
[  875.436399][   T39]  #5: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  875.436453][   T39]  #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  875.436501][   T39] 2 locks held by syz-executor/8728:
[  875.436513][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.436567][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.436615][   T39] 2 locks held by syz-executor/8782:
[  875.436627][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.436679][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.436732][   T39] 8 locks held by syz-executor/10955:
[  875.436744][   T39]  #0: ffff8880362f0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  875.436796][   T39]  #1: ffff88805caf6478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  875.436848][   T39]  #2: ffff888029b5e3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  875.436902][   T39]  #3: ffffffff8f0241d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  875.436948][   T39]  #4: ffff888033790160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  875.437001][   T39]  #5: ffff88803b5b8310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  875.437061][   T39]  #6: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0
[  875.437104][   T39]  #7: ffff888034798fd8 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x588/0x20b0
[  875.437166][   T39] 2 locks held by syz.4.1367/11091:
[  875.437178][   T39]  #0: ffffffff8f70f0b8 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0
[  875.437344][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  875.437397][   T39] 3 locks held by syz.8.1370/11106:
[  875.437409][   T39]  #0: ffff88805fb180a0 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x283/0xfe0
[  875.437470][   T39]  #1: ffff88803ea3db48 (&kvm->srcu){.+.+}-{0:0}, at: kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  875.437516][   T39]  #2: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0
[  875.552356][   T39] 2 locks held by kvm-nx-lpage-re/11108:
[  875.552370][   T39]  #0: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  875.552426][   T39]  #1: ffff88813fe2b358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  875.552473][   T39] 1 lock held by syz.9.1371/11110:
[  875.552485][   T39]  #0: ffff88805e8b6eb8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  875.552547][   T39] 
[  875.552692][   T39] =============================================
[  875.552692][   T39] 
[  875.552738][   T39] NMI backtrace for cpu 0
[  875.552755][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  875.552782][   T39] Tainted: [L]=SOFTLOCKUP
[  875.552790][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  875.552801][   T39] Call Trace:
[  875.552810][   T39]  <TASK>
[  875.552819][   T39]  dump_stack_lvl+0xe8/0x150
[  875.552845][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  875.552866][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  875.552892][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  875.552915][   T39]  sys_info+0x135/0x170
[  875.552942][   T39]  watchdog+0xfd3/0x1030
[  875.552981][   T39]  ? watchdog+0x1c9/0x1030
[  875.553008][   T39]  kthread+0x388/0x470
[  875.553032][   T39]  ? __pfx_watchdog+0x10/0x10
[  875.553064][   T39]  ? __pfx_kthread+0x10/0x10
[  875.553088][   T39]  ret_from_fork+0x514/0xb70
[  875.553114][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  875.553136][   T39]  ? __switch_to+0xc79/0x1410
[  875.553157][   T39]  ? __pfx_kthread+0x10/0x10
[  875.553180][   T39]  ret_from_fork_asm+0x1a/0x30
[  875.553220][   T39]  </TASK>
[  875.553227][   T39] Sending NMI from CPU 0 to CPUs 1:
[  875.553256][    C1] NMI backtrace for cpu 1
[  875.553272][    C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  875.553294][    C1] Tainted: [L]=SOFTLOCKUP
[  875.553300][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  875.553309][    C1] RIP: 0010:kasan_check_range+0x9d/0x2c0
[  875.553330][    C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5
[  875.553343][    C1] RSP: 0018:ffffc90000a4f0a0 EFLAGS: 00000246
[  875.553357][    C1] RAX: 1ffff92000149e01 RBX: ffffffffffffffff RCX: ffffffff81775693
[  875.553369][    C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000a4f218
[  875.553380][    C1] RBP: 0000000000000000 R08: ffffc90000a4f227 R09: 1ffff92000149e44
[  875.553391][    C1] R10: dffffc0000000000 R11: fffff52000149e44 R12: 0000000000000002
[  875.553402][    C1] R13: 1ffff92000149e3b R14: fffff52000149e45 R15: 1ffff92000149e43
[  875.553414][    C1] FS:  0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
[  875.553427][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  875.553438][    C1] CR2: 00007f720e0e7e9c CR3: 000000000e1b8000 CR4: 00000000003526f0
[  875.553453][    C1] Call Trace:
[  875.553459][    C1]  <TASK>
[  875.553467][    C1]  __asan_memset+0x22/0x50
[  875.553488][    C1]  unwind_next_frame+0xf33/0x2550
[  875.553511][    C1]  ? unwind_next_frame+0xa6/0x2550
[  875.553530][    C1]  ? ath9k_hif_usb_rx_cb+0x119a/0x1520
[  875.553596][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  875.553615][    C1]  arch_stack_walk+0x11b/0x150
[  875.553637][    C1]  ? __usb_hcd_giveback_urb+0x3b3/0x5e0
[  875.553660][    C1]  stack_trace_save+0xa9/0x100
[  875.553676][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  875.553697][    C1]  kasan_save_track+0x3e/0x80
[  875.553711][    C1]  ? kasan_save_track+0x3e/0x80
[  875.553725][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  875.553740][    C1]  ? __kmalloc_cache_noprof+0x3d0/0x6d0
[  875.553757][    C1]  ? dummy_urb_enqueue+0x7e/0x760
[  875.553845][    C1]  ? usb_hcd_submit_urb+0x31a/0x1b10
[  875.553863][    C1]  ? ath9k_hif_usb_rx_cb+0x119a/0x1520
[  875.553897][    C1]  ? rcu_is_watching+0x15/0xb0
[  875.553918][    C1]  __kasan_kmalloc+0x93/0xb0
[  875.553935][    C1]  __kmalloc_cache_noprof+0x3d0/0x6d0
[  875.553951][    C1]  ? dummy_urb_enqueue+0x7e/0x760
[  875.553970][    C1]  ? dummy_urb_enqueue+0x7e/0x760
[  875.553992][    C1]  dummy_urb_enqueue+0x7e/0x760
[  875.554014][    C1]  usb_hcd_submit_urb+0x31a/0x1b10
[  875.554038][    C1]  ath9k_hif_usb_rx_cb+0x119a/0x1520
[  875.554057][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  875.554076][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  875.554095][    C1]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  875.554109][    C1]  ? rt_spin_lock+0x1e0/0x400
[  875.554123][    C1]  ? __pfx_ath9k_hif_usb_rx_cb+0x10/0x10
[  875.554140][    C1]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  875.554158][    C1]  ? rt_spin_unlock+0x160/0x200
[  875.554174][    C1]  ? kcov_remote_start+0x185/0x710
[  875.554191][    C1]  __usb_hcd_giveback_urb+0x3b3/0x5e0
[  875.554213][    C1]  dummy_timer+0x8a9/0x47d0
[  875.554244][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  875.554264][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  875.554279][    C1]  ? lock_acquire+0x106/0x350
[  875.554303][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  875.554323][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  875.554342][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  875.554361][    C1]  __hrtimer_run_queues+0x405/0xb10
[  875.554384][    C1]  hrtimer_run_softirq+0x18f/0x260
[  875.554402][    C1]  handle_softirqs+0x1de/0x6d0
[  875.554427][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  875.554443][    C1]  run_ktimerd+0x69/0x100
[  875.554457][    C1]  smpboot_thread_fn+0x541/0xa50
[  875.554473][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  875.554491][    C1]  kthread+0x388/0x470
[  875.554508][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  875.554522][    C1]  ? __pfx_kthread+0x10/0x10
[  875.554544][    C1]  ret_from_fork+0x514/0xb70
[  875.554563][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  875.554579][    C1]  ? __switch_to+0xc79/0x1410
[  875.554595][    C1]  ? __pfx_kthread+0x10/0x10
[  875.554611][    C1]  ret_from_fork_asm+0x1a/0x30
[  875.554637][    C1]  </TASK>
[  875.871910][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  875.871933][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  875.871962][   T39] Tainted: [L]=SOFTLOCKUP
[  875.871969][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  875.871982][   T39] Call Trace:
[  875.871991][   T39]  <TASK>
[  875.872001][   T39]  vpanic+0x56c/0xa60
[  875.872035][   T39]  ? __pfx___schedule+0x10/0x10
[  875.872060][   T39]  ? __pfx_vpanic+0x10/0x10
[  875.872103][   T39]  panic+0xc5/0xd0
[  875.872129][   T39]  ? __pfx_panic+0x10/0x10
[  875.872158][   T39]  ? preempt_schedule_thunk+0x16/0x40
[  875.872193][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  875.872219][   T39]  watchdog+0x102c/0x1030
[  875.872250][   T39]  ? watchdog+0x1c9/0x1030
[  875.872279][   T39]  kthread+0x388/0x470
[  875.872301][   T39]  ? __pfx_watchdog+0x10/0x10
[  875.872322][   T39]  ? __pfx_kthread+0x10/0x10
[  875.872345][   T39]  ret_from_fork+0x514/0xb70
[  875.872372][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  875.872395][   T39]  ? __switch_to+0xc79/0x1410
[  875.872417][   T39]  ? __pfx_kthread+0x10/0x10
[  875.872440][   T39]  ret_from_fork_asm+0x1a/0x30
[  875.872480][   T39]  </TASK>
[  875.872797][   T39] Kernel Offset: disabled