last executing test programs:

24m45.780836647s ago: executing program 32 (id=818):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000005080)={0x24, 0x0, 0x0, &(0x7f00000050c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000005100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0)
ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000300)={0x1})

24m41.936982508s ago: executing program 33 (id=831):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x16, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

24m12.115931075s ago: executing program 34 (id=1005):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000200)='<ile read @etc/passwd <as/\\Aid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)

24m8.812440525s ago: executing program 35 (id=1018):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket(0x2, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f00000007c0)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000840)={0x74, 0x0, 0x40})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x1d8, 0xfffffffffffffffc)
setns(0xc9, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x400c810)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys_sec\x00', &(0x7f0000000600)='securityfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_sec/tomoyo/domain_policy\x00', 0x101102, 0x9)
write(r6, &(0x7f0000000680)='select <kernel>\n', 0x10)
write(r6, &(0x7f00000006c0)='file read @etc/passwd <as/\\xid=0-0xec.argv[0]=\"sh> /xec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r5)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010023010000340200000300000018000180130001006574683a73797a6b616c6c657230"], 0x2c}}, 0x0)
write(r0, &(0x7f0000000240)="fff8ffffffff0200402e58af88ca", 0xe)

23m43.899665591s ago: executing program 36 (id=1060):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_connect$uac1(0x4, 0x139, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1978, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x127, 0x3, 0x1, 0x6, 0x110, 0xaa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x41}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x0, "d29e"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x3, 0xf8, "be06"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x6, 0x4, [0x9, 0x4, 0xa, 0x2], 0x57}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x60, "77d3"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xb, '\''}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0xfc, "eecb03a21194"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x100, 0x7, "364fee3e10c8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x9, "f710"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0x40, 0x0, "35abe19246902f39e3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x100, 0xa91f, 0x3, "2ebc"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb, 0x8, 0x42, "ccbe3f27ed"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xc0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x37, 0xf9, 0x5, {0x7, 0x25, 0x1, 0x8, 0x2, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x6, 0x7f, 0x5, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x20, 0x1, "e25b395508ef"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x10, 0x16, "1516b8a3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x45, 0x0, "c4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0xfc, "3ed2", 'S'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x7f, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x95, 0x9, {0x7, 0x25, 0x1, 0x4, 0xe, 0x4}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4, 0x4, 0x2, 0x20, 0x7d}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}, {0x3d, &(0x7f0000000240)=@string={0x3d, 0x3, "187c645a46ce0746948909f3d6fee416f5fc99ef4d188a0172db875e2ee1b75df451ff74321cdbf75547874db2bcf9f2529a5ab6e8cb6a5c08b36c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41a}}, {0xb5, &(0x7f0000000380)=@string={0xb5, 0x3, "fe3a009b7ba89d804f7c475462e72f779295cef67a3743f16db14a597faa40cb334bc6ae43c181f95c0cb5a149872925076e38c2fe10aec2f7fbf8b8480b8a1cd2394727f1584cab01aa017c81344b6adf2a6b7ad355a4aa35befa7c7625e43f43261ad2e55f13477f5bc225c817fb8f0d357994f17304537cab1feb37dcaf9a3a0bfcda2a7eecdac78792eaeb62eec3925a7eb6f433799e157c0d7eb3e068f4cef962c3b43a25edb5568677d128290d793db1"}}, {0xf4, &(0x7f0000000440)=@string={0xf4, 0x3, "ed651772542585d947a59ef975871f1f18324e367538e548419ac88a4c88a27a1a4c40851c508a014346aca5f797efb0c0424ab0fbe0fa93ae1ab63d486438876f105bd1de2f65453d2e64af596bd7f0f680920d0e24bb175c82c7a5ca9446e8991e4dab5808fbc7c4e6898481740c7b28b59f26b5d9e1118f61d199fdf4779600ae8e89ac83aa0b8041c340b2425ffd382f3cff23d10eedd9fced2914a15ea47d16c0173425ad8c4a77313f79415aa63fafb8214a3448e5dedd83706d0056390c84f9ae34f3c373c27045be4010596a8de93c5bbd32324f61675376c404712aad6b79c73d8b6df8344e415c24507afa88c8"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x419}}]})
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

23m23.551913511s ago: executing program 37 (id=1247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000200), 0x2050000, &(0x7f0000000240)={[{@grpquota}, {@usrquota}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@huge_within_size}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x31, 0x39, 0x31, 0x31, 0x38, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure}]})
sendto(0xffffffffffffffff, &(0x7f0000000140)="2b01e2ffce0b7afc023068fbed86ed3c3dccf2e467c57bcb61d6de6d48bc10d43469164834768a7e1ec94d240d5c977e43d9814701585cfabcf953bb55f2c49007886b55ec44a3e16fd1d4a82b83c54b3d34595465d93ff32e95aaf6b4fe46675d97a8a47903bf723eee4594a53cb3807e70c69ca4b68a4427bb691fc294d698096c0883bccbec3362e1e4e91e1941b6b94373af1ef2d63af0a3fa1f56443ae40c", 0xa1, 0x4000000, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x100, 0x1)
renameat2(0xffffffffffffffff, &(0x7f0000000300)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', r0, &(0x7f0000000380)='./proc\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x4)
pwrite64(r2, 0x0, 0x0, 0xd895)

22m52.86904218s ago: executing program 38 (id=1437):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x80)
ioctl$I2C_PEC(r0, 0x708, 0xb8f7)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x4, 0x3, &(0x7f0000000480)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0)
socket(0xb, 0x80000, 0x50)
write(r1, &(0x7f0000000240)='27', 0x2)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
fsopen(&(0x7f0000000300)='tracefs\x00', 0x1)
syz_ublk_setup_io_uring(0x1f31, &(0x7f0000000340)={0x0, 0xc9ee, 0x20000, 0x2, 0xee}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))

22m44.556969413s ago: executing program 39 (id=1388):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4eb36, 0x2) (async, rerun: 32)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
pipe(&(0x7f0000001380)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async)
write$P9_RLERRORu(r1, &(0x7f00000013c0)=ANY=[], 0xe) (async)
mknodat$null(r1, &(0x7f0000001400)='./file0\x00', 0x1, 0x103) (async)
ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f00000012c0)={0x8000000000000001, 0x0, 0x1000, &(0x7f00000002c0)="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"}) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x0, 0x4}) (async)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="015ff8901d0610d6ecf1ac47ebf7f82ba05945933c214588784a2c3d", 0x1c) (async)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x2) (async)
mount$nfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='acl,fsc=']) (async)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xfdfd, 0x0, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x1000, 0x0, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYRESHEX=r4], 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x24000004)

22m39.239584657s ago: executing program 40 (id=1420):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000940)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000980)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x2000000, &(0x7f00000009c0)=0x4, 0x8)

22m27.557169298s ago: executing program 41 (id=1460):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2000)
setresuid(r1, r1, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r2 = gettid()
syz_pidfd_open(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x8001, 0x7b6f, 0xff, 0xf56b, 0x4, "3da4b85db7c1c2c8"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2c3)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)

22m26.837256475s ago: executing program 42 (id=1468):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
read$char_usb(r1, 0x0, 0x0)

22m14.137983091s ago: executing program 43 (id=1490):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

22m7.401197299s ago: executing program 44 (id=1499):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @local}, 0x4}}, 0x2e)

21m43.677539357s ago: executing program 45 (id=1556):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000240)={0x0, 0x80})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
link(&(0x7f0000000280)='./file7\x00', &(0x7f00000002c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r2, 0x0, 0x0) (async)
getdents64(r2, 0x0, 0x0)

21m42.648421035s ago: executing program 46 (id=1565):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
bind$tipc(r1, &(0x7f0000000580)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x88000)
close(0x3)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
mount$afs(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500), 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='dyn,flock=\x00'])
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f0000000640)="1b54e01462ef08f20ce0a17505d9a809dca34c2bb0e57feec7053f8f922942c07d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed935086b2f6c9d782908100118", 0x60)
sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)='`', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='D', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r3, 0x1)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000380)="020000000980ffff", 0x8)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100408, 0x1b35, 0x8, 0x2, 0x2002, 0x0, 0x0, 0x0, 0x1})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc)
bind$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x0, @any, 0xfff8}, 0xe)
connect$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='A', 0x1}], 0x1}}], 0x1, 0x2400c8c4)

21m41.575514511s ago: executing program 47 (id=1573):
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x42, 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/uprobe_events\x00', 0x401, 0x0)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x200, 0x20, 0x1, 0x5}, {0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x8}, {0x9, 0x5, 0xe, 0x3, 0x20, 0x0, 0x8, 0x3f}}}}}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async)
mount$nfs(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=0']) (async)
write(r0, &(0x7f0000000800)='p:__st/event1 ./file0:0x0 -rg2=', 0x1f)

21m39.514926975s ago: executing program 48 (id=1582):
write(0xffffffffffffffff, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d)

21m0.078336688s ago: executing program 49 (id=1679):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x20000000}, 0x3c)

20m57.012461583s ago: executing program 50 (id=1695):
mount(0x0, 0x0, 0x0, 0x2800080, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000880)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/44, 0x410200}], 0x1, 0x0, 0x4000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r0, 0x80c3e000)

20m53.946423341s ago: executing program 51 (id=1711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r0, &(0x7f0000000440)={@val={0xa, 0x6603}, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x8, 0x6, "ad126a", 0xdd, 0x29, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], "161083dc82a08916"}}}}}}}}, 0x72) (fail_nth: 6)

20m48.750049963s ago: executing program 52 (id=1720):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, &(0x7f0000000440))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00')
syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2)
socket$netlink(0x10, 0x3, 0xf)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="0054a3dd64000700000043253561f6df01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(r0, &(0x7f0000000580)='./file0\x00', 0x4000, 0x8, &(0x7f00000000c0))
socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20m31.478377631s ago: executing program 53 (id=1729):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x8000, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0xa, 0x2000, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e6010000005d960001000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c361265420606306003d8a00300", [0x10, 0x4]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000180))
read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0000950000000f00", @ANYRES64=r3, @ANYBLOB="0400000000000000ff07000000000000060000000100008072616d6673000000"], 0x30)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file0/file0\x00')
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x6, 0x40800)
ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000480))
ioctl(r4, 0x400452c8, &(0x7f0000000a40)="00f000000000000000000000000000000000000001")
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0x20, 0x4)

20m25.98861291s ago: executing program 54 (id=1736):
setns(0xc9, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000a40)={{0x60000, 0xffff1000, 0xa, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x40, 0x0, 0xb}, {0xd000, 0x4000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x4, 0x0, 0x4, 0x14, 0x81, 0x4, 0x2, 0x5, 0x4, 0x91, 0x80}, {0x9000, 0xeeef0000, 0xc, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0xc, 0x9}, {0xa000, 0x50000, 0xa, 0x9, 0xc8, 0x9, 0x7, 0xef, 0x2, 0x6e, 0x2, 0x7}, {0x4000, 0x10000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x3, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x9, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0xa0000013, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x3, 0x2, 0x8000000000000003, 0x3]})
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newsa={0x1a4, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x8, 0x3, 0x0, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0x4, 0x3, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x34ff, 0xa, 0x4, 0xfe, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b000000366a6a849a73904500240062227cd910ff80008000e8ffffff80"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f)
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b6579"], 0x54}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x408, 0x1, 0x1, "62e1cf6111809460d79d98166e0894b9dd9be9395ddcb9aeb3d2ba29ddbef3493eb04f7b5e7d41c1440e4d3e76e06dcb279473c858a477abd89249670e258e88bd68e9955963557fdef8e94a34bf76126c3ebd3765c5a83955ea3ec2f549098b104d261b9c0f4def2249970af216ba4eca729bca1dddf06efb5d96db9acbe6d061aee4234cb09d5b02764dd1782f677f42be18722957f39e40afcb0bffd0a77a9ff46216462be4f27aacfefb754fa1e9b9922dc19dcd178849c2b96f075d1541d39d103d92c7153791f9653db140e631e6c006338235225be2c4c99eb14c68db1b6f840600c8a3ee9f6e1b5ac973b14f79141326e3520e368ca262a89fd22ab67ba0b4399304c37bb18756865f6d738162f778015dc09465667be08079e64ddd96d694531996207694039c0b265d7f7ae26746d7082c87889f60603143df207c4a7b87eea1118ff818c50e33a54a107985abdc860d65d7f92a0eeb3889d0647f2bb491e0b9fd77c6f5ec60b2d555017919e02e80fa0cfcadf878721b668f5240d819ed26b9ea263edf4a4dfebde53c87ff6c79ba12bf568ece8f85efe65b50edbc7bc3f9e4205a6a1e714edf7559d1d3c36efd88ba18ad9a4f006b7aa3fe8838129403cc4bae437ccfc0dbc1b7a625a7f48ae50b81a5e1553ae36d2287aad7f1223fdbd3a07e8d8bb5fdcce40a743629cc2c74075a1eaa7833872d5361cfeea1882e36a40272fcaac337b3956d321ec232854efc1b573138bd17fe5a38169cb10fe975521085394af6115a90703f6b24bc2af0c6e4249c13ef465611927f56511c9ab11f205ac6f64e73973d6c0a3875e00189584fba531cf6c931572791e7735a550ced06a2c6ae96c3245a401e89411b14eeeebc73ac2b99af153d71c99e3f29685b8dfd3ccd40bc45b7e8fcd45b79d44ce145ca3195ffd129b15b234c6dfaf0e801d31d683f3486b8d9b9af5c6ebd2b79b329be8d59b0545c3343297ee5e221ea8999980807d0e3e70a5e905d4d53abae5f20a93b1c3fda659c768d9e778755d9ae31bb1f01e3cb88b5e552ef2919b03bb2042a931dce3b8108ccb5b1eed51e2f42ba323f1024243183a2a202b8a733b5f0d3711afb466d7ca6bbf28273f26043c2e0c4308fc3312354b09b1e488372151df88732e01b0fc0af0cdcd91b87934030f18f87133b810ba1208443cfd0652fc195712e915399b01c361096c0b315943b1d5c123505a34c5091c59a124a6ad2566aad9a072d2a77449e418dfb2018b0680784dce9402f35bb3b9bf04381a76f3f63ba85c46da11d77fbc81d51a5f55c3b83575a2aaec4df5c57a534c5f3a6cc6e0f39f4616a4372f0638914dc9971bc596d2636544e9cb40f09982bf7fec24f6a84a694b60048550371ede29e256d99d5190ad07afc8a2763595bca2676f3"}], 0x408}}], 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000840), 0x10)
sendto$packet(r8, &(0x7f0000000880)="dc6eda99e5764d83cf0c155ba6a64d3cbdd83651b466076e18e5e4efdfb00ee733e09044398b9d3b852f1678ace7f2865cd41dd3c87e73879bc28404158b71f59ae7dda1f6", 0x45, 0x80, &(0x7f0000000900)={0x11, 0xf5, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b008e"], 0x97)

20m22.820242216s ago: executing program 55 (id=1746):
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)

20m17.568425056s ago: executing program 56 (id=1755):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
r0 = eventfd2(0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
read$usbfs(r1, &(0x7f0000000680)=""/12, 0xc)
write$eventfd(r0, &(0x7f00000004c0)=0xfffffffffffffffc, 0x8)
read(r0, &(0x7f0000000500)=""/82, 0x52)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000007c0)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000800)={<r3=>0x0, 0x10, &(0x7f0000000840)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000880)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000008c0)={r3, 0x4}, 0x8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x19c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x721a7c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62c7af9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe705}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39ba2f3b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28ffa1aa}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70bb2561}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x764164cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x463e5dd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x461f0392}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185da6db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4341}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147fad35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587d2a83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x490aff6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc346}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd37738}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29a233fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f300679}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d427ded}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3928}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8df2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46ffa0b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x713ae6e3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4089b32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ba7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71b7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13dc4a6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dad728b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x731e7337}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3537fe2d}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x64)
fcntl$notify(r6, 0x402, 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
llistxattr(&(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)=""/106, 0x6a)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000200)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a937b75fdf5a1215df0200"/20], 0x14}}, 0x40004)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/fcloop/ctl/add_target_port\x00', 0x140181, 0x110)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYBLOB="2dc0b6f5049372d7055fda273974404aae091135328f0ddccba79c81034f6eda06f68918d805f9", @ANYBLOB="5cf6457b0edccab1ce5ffc3cf0b7bbd707a31e58e3e443f411d4d3e180e77438b8e477c5c6a3515f132afea57eea43969d57c86daab67a3e6a9c93989b5245aa10a2b0ee0bd56531ce0f3214cb2ff381b8266701449b1091633b361bc9ea196ee81dd5c67dd3245c370086c8f51ee5891bcbead57ea547f774da2470ccba76c5ae545502922e899aa26d873ccad47f9a49f2d7beec805fb0b5efefcb9628d2ca5aea7d5b774cd471908d22485a3898060ed5955bcc1660165c6fa16ee4c5e435d5", @ANYBLOB="3eef42462ef199095ef7d57246dc5da51d367f3c10decf31663bf05106ac4d29433c909b0ae9eb18cd8f6118050922d52c0ed4f7f3a5a942d9b664d2abcf6f54553ba6b13ec2403201a5ed01b9fd16a19cd9d9ce80045878fa8bc2829d1d4f9d295a80785242f2b0f785e5877e51b64551a74a459666671531fbcab237909c3e084bdd4d536cecd07979a2c4caafd0baa479d32e07e5afd2b33590986c29eaca158c449f1b15bb82a7de2b6ed95da17f143924e1219b1eb55718b66b74ad29092cff30a396fdc7006e01deeafa9bac7392b09a74c58d4dcd"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r8, 0x1000)
r9 = syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r9, 0xc0404807, 0x0)

19m54.059576566s ago: executing program 57 (id=1778):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x8, {{0x2, 0x4e1d, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/mcfilter\x00')
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40542, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x4)
pread64(r1, &(0x7f0000000640)=""/143, 0x8f, 0x8)

19m53.011123681s ago: executing program 58 (id=1787):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x14012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "db5206893bcdc404"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x17, 0x0, 0x0) (fail_nth: 7)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1)

19m51.958707973s ago: executing program 59 (id=1788):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff)
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, {0x2, 0x4e20, @empty}, 0x210, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000080)='caif0\x00', 0x9, 0xb, 0x8})
mount(&(0x7f0000000000)=@filename='./mnt\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x0, 0x21)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x003\a'])

19m45.866008855s ago: executing program 60 (id=1796):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)="31303017", 0x4)
dup(r0)
pipe2$9p(&(0x7f0000000480), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

19m21.177310088s ago: executing program 61 (id=1805):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
ftruncate(r0, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='tmpfs\x00', 0x2, &(0x7f0000000780)='usrquota') (fail_nth: 19)

19m21.112699619s ago: executing program 62 (id=1803):
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0})
r2 = socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x64, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x90}, 0x1, 0x7}, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000000280))
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)={0x20, 0x1, 0x6, "cceae82237e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
gettid() (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) (async)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0}) (async)
socket$key(0xf, 0x3, 0x2) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
timerfd_create(0x8, 0x0) (async)
timerfd_settime(r3, 0x3, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
timerfd_gettime(r3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x64, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x90}, 0x1, 0x7}, 0x0) (async)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
pipe(&(0x7f0000000280)) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)={0x20, 0x1, 0x6, "cceae82237e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

19m17.005246699s ago: executing program 63 (id=1814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x6c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc49}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc8d}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000004)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c090}, 0x84)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])

19m13.954235733s ago: executing program 64 (id=1823):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0004000e00000000762690346e4db02f1185e786c1e15fea1730da68fd19ac13b826ed169f73415bde6494ae41a137395c5d4bcf14c2ced7d73f6341b33b1dc18a88", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f0000005e80)={0x2020, 0x0, <r1=>0x0}, 0xb190)
write$FUSE_INIT(r0, &(0x7f0000002c80)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002d00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004dc0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0xaab4, 0x4}}, 0x30)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004e00)='./file0\x00', 0x0, 0x44)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000004e40)={0x1, 0x0, 0x1000, 0x100000, 0x0, 0x0, 0x0, &(0x7f0000004f00)})

19m0.387493088s ago: executing program 65 (id=1855):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dir0\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='mtd0\x00', &(0x7f00000002c0)='./dir0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
linkat(r0, &(0x7f0000000040)='./dir0\x00', r1, &(0x7f00000000c0)='./dir0/file0/file0\x00', 0x1000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dir0/file0\x00', 0x42, 0x1ff)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vxcan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x2d, 0xd3a7, 0x3, 0x4, 0x4, 0x9, 0x5, 0x87, 0xf8, 0x2, 0x7, 0x1, 0x2, 0x43, 0x7, 0x9, [0x10000, 0x3]}})
close(r2)
umount2(&(0x7f00000004c0)='./dir0\x00', 0x0)

18m49.150025645s ago: executing program 66 (id=1834):
mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='bridge0\x00', 0x10)
sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800)
unshare(0x2040400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000e00)='./bus\x00', &(0x7f0000000e40), 0x8, &(0x7f0000000e80)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000ec0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x103042, 0x0)
lseek(r2, 0x0, 0x1)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x10000, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x23, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x5, 0x0, 0x1000a, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xf048, 0x0}, {0x1, 0x28, 0xfffffffc, &(0x7f0000000b40)="6a637737d0"}, {0x3, 0x0, 0x2, 0x0}]})
sendto$inet6(r1, &(0x7f0000000b80), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000614000/0x1000)=nil, 0x1000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r5)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="280000001f24ebe63cf59873109f2d7c8ac94c22eae8c04416a6cd041c36f9410b74d4cc777a5fc41ec8ec357bdbe7830b350c7ac4e83110dbb22df689efa08efdbb93d4e343b385d928e95e0e055710c12bd883b702b5942846247a4519c5a7786d0782c67b073b0ac2e83009b3a39544b66c7674d78889fb8a2ed2980e5279cde27a", @ANYRES16=r4, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d000000"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x100)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d66b433d31f659c879176aa11d7ddabd7f6bc2aad8943887e622cddf066ebb52a7eae1b59227d1a6b9a0d7f32edb74bc9c174ce8de5c00c00ccde0a1517ff93252689f585c9de0e372c7b8f98676b57669531730824fb07eeaacee75c6f98c028b9cdf9babaabffdec5e284791700984262aa8815bc5f7fa7d580885ddda8e06cccba2bb9fba072dc636ca74ab91463f1fc15ccd428fceb79dc1b12bd34705cc1fba3bafab563c9a4f737c160760063b238bf0d64e222d63e5b9c1323cb045a7bbcef90b641f45865cb3b384d1644ccd167149d398995045ad29cf743801761a730ec2c85e7b507214c9b40600d18ebd209e4f3a62d5c8d5fc2acb2d54507d8d3059a7f39905cd25545903036e3cb56acd262bed67c21901e26a150898e9217", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x2000, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x7, {0x2, 0xb, 0x0, '\x00', {0x1, 0x0, 0x1, 0x10, r8, r9, 0x1000, '\x00', 0x2, 0x7, 0xffffffdfffffffff, 0x8000000000, {0x3, 0x3}, {0x1, 0xb}, {0x2000001, 0x20000e}, {0xb009, 0xa}, 0x8001, 0x206, 0x200fff, 0x7}}}})
r10 = socket(0xf, 0x3, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="3d9100001094650678ecacdaa3f293b9569dbdb0dd1be278f75f32f8ee873029ae84d46f623aeefe67b8a02eb8e6df6d3831d574c3997e314cabb9cfe3883f6e951be784a4054544f41526bc4e73e6e632d45188002013c271eb3afdee7634c253bfbab8df6ac1307e8162411fb35025d0a269752d664c6b4202364e02e594dea6aad6fc715bd8f6cea0bd5f236f10e84c6b57a5f2a2456c1869499faf9846a0bc57729f000000004c10cc4a51a2d74a766bfaffb2da9edbbb3f118a8a6019e6a7b131c44f1645aa835ae88ffe69bfb828eb6513f974d4f439e5c3f72b3ef3d9230b1962f5", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf2501000000"], 0x14}}, 0x40008)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r7, {0x7, 0x29, 0x4, 0xa2d10b5405a1b8c9, 0xa51, 0x2000}}, 0x50)

18m20.491444775s ago: executing program 67 (id=2063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003040)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x56, 0x0, 0x0, @str=':*b\xc3{\x00'}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40001}, 0x0)

15m39.135161602s ago: executing program 68 (id=2849):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x8)

14m1.808930437s ago: executing program 69 (id=3173):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0)
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x20810, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @core='@stats_delete 1'}})

13m6.559248744s ago: executing program 70 (id=3360):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="1b0000000800112233445566f4ff", 0xe)

13m0.508613807s ago: executing program 71 (id=3370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r6, &(0x7f00000001c0)={0x0, 0x0})
r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@code={0xa, 0x50, {"48c7c00000000148c7000000000048c740080000000048c740100000000048c740180100000048c740200100000048c7c11300020048c7c2000000010f01c1"}}], 0x50})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [{0x40000000, 0x0, 0x1}, {0x40000002, 0x0, 0x4}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0x4, 0x8, 0x0, 0x7fa, 0xd, 0xfe, 0x9, 0x7, 0x3, 0x7, 0xfa, 0x0, 0x6, 0x3, 0x7, 0x80, 0x3, 0x4, '\x00', 0x3, 0xfffffffffffff04c})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="b9600b0000b80c800000ba000000000f30b805000000b98ee300000f01d90f060f01c365640f780505000000c4617173f7fa64f3470fc774e600b8010000000f01c1b805000000b9007000000f01d9c74424003e000000c74424020f0a0000ff1c24", 0x62}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m59.33059742s ago: executing program 72 (id=3379):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x1, 0x6)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x19}, {@loopback, 0x4908, 0x1, 0x1}}, 0x44)
connect(r1, &(0x7f0000000380)=@in={0x2, 0x1500, @loopback}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000001780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendto$inet(r2, &(0x7f00000017c0), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r5, 0xffffffffffffffff, 0x170bd2c, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xb8, 0x2000000}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd76}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x190, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4010}, 0x4010)
recvfrom$inet(r2, &(0x7f00000018c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

12m19.380211358s ago: executing program 73 (id=3469):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x40000, 0x0)
memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x182, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

12m17.165382018s ago: executing program 74 (id=3479):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9, 0x0, 0x0, 0xbc120000}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x2120, 0x0)

12m13.880977903s ago: executing program 75 (id=3489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000200)='file read @etc/passwd /as/\\+id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) (fail_nth: 2)

12m12.648504701s ago: executing program 76 (id=3498):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0xe803, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)

11m34.071522529s ago: executing program 77 (id=3507):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r0, 0x4, 0xf9, 0x36, 0x985, 0x30, @mcast2, @empty, 0x8, 0x20, 0x8, 0x6}})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={<r2=>0x0, @private, @empty}, &(0x7f0000000280)=0xc)
sendto$packet(r1, &(0x7f0000000200)="f315145ec87ce3d38fa2af65899f38a537e26064709e6bcb64d8c6cc7016e1be83c0bbab", 0x24, 0x10, &(0x7f00000002c0)={0x11, 0x8, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'})
read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020)
r3 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$inet_sctp(r5, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986", 0x70}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800)
recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/96, 0x60}], 0x2}, 0x40000042)
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x1)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)

11m31.742020221s ago: executing program 78 (id=3515):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)
faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x30)
getdents64(r0, &(0x7f0000000100)=""/58, 0x3a)
getdents64(r0, 0xfffffffffffffffe, 0x29)

10m49.887207972s ago: executing program 79 (id=3615):
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xedc0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
shmctl$SHM_LOCK(0x0, 0xb)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

5m40.112121528s ago: executing program 80 (id=4960):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = syz_open_dev$usbmon(&(0x7f0000000440), 0x7, 0x0) (async)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f00000005c0)) (async)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x400000000a882, 0x0)
r5 = dup(r4)
ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000540))
ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@allocspi={0x100, 0x16, 0x1, 0xfffffffb, 0x2, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x80, 0xa0, 0xc}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x1000000000000000, 0x6, 0xfffffffffffffffc, 0x3, 0x421}, {0x0, 0x403, 0x2, 0xfffffffffffffffe}, {0x10000000, 0x0, 0x894}, 0x0, 0x4, 0xa, 0x0, 0x15, 0xe55286f1921f74a7}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r7 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x20000)
ioctl$BLKFRAGET(r7, 0x1265, &(0x7f00000004c0)) (async)
epoll_pwait(r2, &(0x7f0000000680)=[{}], 0x1, 0xb0e9, &(0x7f00000006c0)={[0xfffffffffffffffa]}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='[.', 0x2}], 0x1, &(0x7f0000000440)=ANY=[], 0xf0}}], 0x1, 0x24004c41) (async)
read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) (async)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x28, 0xb, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file0\x00', 0x105842, 0xa9)
writev(r9, &(0x7f0000000a40)=[{0x0, 0x600}, {&(0x7f0000000e00)='t', 0x40000}, {0x0, 0x42200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21)

5m39.464932191s ago: executing program 81 (id=4965):
r0 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40840)
write(r0, &(0x7f0000000200)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x6f)

5m39.097435234s ago: executing program 82 (id=4968):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/65, 0x0, 0x1000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/183, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000004c0)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000540)=0x4, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x2a)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2a, {0x0, "48b8004040000000000048c70000000000f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x72})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4m27.011762016s ago: executing program 83 (id=5247):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0)

4m5.620898193s ago: executing program 0 (id=5335):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

4m5.416001039s ago: executing program 0 (id=5337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pwritev(r2, &(0x7f0000000a40)=[{&(0x7f0000000a80)="d4cc55221a6a", 0x6}], 0x1, 0x2, 0x4a49)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000b00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) (async, rerun: 32)
syz_ublk_setup_io_uring(0x25, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000180)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000003c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r4}})
add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000d40)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) (async)
r8 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x80)
openat$cgroup_procs(r9, 0x0, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000d80)={&(0x7f0000000dc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000e80)}], 0x2}, 0x200120c0) (async)
syz_pidfd_open(0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000c00)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r11 = dup(r10)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000c40)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c80)=[@text32={0x20, &(0x7f0000000cc0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d00)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

4m1.440181113s ago: executing program 0 (id=5357):
r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x48a99fbe, 0x10b241)
ioctl$MEMREADOOB(r0, 0xc0104d04, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000b80), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setuid(0xee01)
r3 = socket$alg(0x26, 0x5, 0x0)
fchown(r3, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

4m0.637350404s ago: executing program 0 (id=5362):
mkdir(&(0x7f00000001c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000001500)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000101000010000700010101010202020284004000", 0x44)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000000c})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x6a400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000140)={0x0, 0x1d, 0x1, @tid=r5}, &(0x7f0000000180)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r6, 0x0, &(0x7f00000014c0)={{}, {0x77359400}}, &(0x7f0000000280))
fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])
r7 = openat(0xffffff9c, &(0x7f0000000400)='./trace/events/mac80211/enable\x00', 0x40000, 0x87)
readv(r7, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000001480)={0x20000000})

4m0.285455173s ago: executing program 0 (id=5364):
write(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x25}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(r2, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x388, 0x503fffc)
ptrace$pokeuser(0x6, r2, 0x358, 0xfffffffffffffffc)
r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0)
mmap(&(0x7f00001ce000/0x3000)=nil, 0x3000, 0x3000001, 0x13, r3, 0x265ba000)
syz_open_procfs(r1, &(0x7f0000000080)='stat\x00')
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x1, r1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./security/apparmor/.load\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r6 = eventfd2(0x8, 0x800)
statx(0xffffffffffffff9c, 0x0, 0x800, 0x40, 0x0)
fchown(r6, 0x0, 0x0)
write(r5, &(0x7f00000002c0)='10000', 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r7, &(0x7f0000000380)='1', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r8, &(0x7f0000000400)='0', 0x1)
recvfrom$inet_nvme(r5, &(0x7f00000000c0)=""/37, 0x25, 0x100e0, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4d8, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}}, 0x80)
write(r4, &(0x7f0000000440)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f00001cd000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)

3m56.606370387s ago: executing program 0 (id=5377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f00000016c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
write$P9_RGETLOCK(r2, &(0x7f0000001700)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000001740)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0x60000000000, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = open(&(0x7f00000013c0)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r5, 0xa, 0x21)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000001700)=0x4000000, 0x4)
fcntl$setlease(r5, 0x400, 0x1)
r7 = creat(&(0x7f0000001400)='./file0\x00', 0x0)
close_range(r5, r7, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000002680)={0x3, &(0x7f00000026c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10)
getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000002700)=""/2, &(0x7f0000002740)=0x2)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002a1d0be7be982dd02b00000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x50)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x20)
add_key(&(0x7f0000001240)='asymmetric\x00', 0x0, &(0x7f0000001280)="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", 0x110, 0xfffffffffffffffd)
sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0)
recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003780)=""/4099, 0xe18}, {&(0x7f0000000000)=""/111, 0x6f}, {&(0x7f0000000080)=""/4099, 0x1003}, {&(0x7f0000003700)=""/103, 0x67}, {&(0x7f00000010c0)=""/111, 0x6f}, {&(0x7f0000004880)=""/4110, 0x100e}, {&(0x7f0000001640)=""/113, 0x71}], 0x7}, 0x0)

3m40.043277159s ago: executing program 84 (id=5377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f00000016c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
write$P9_RGETLOCK(r2, &(0x7f0000001700)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000001740)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0x60000000000, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = open(&(0x7f00000013c0)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r5, 0xa, 0x21)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000001700)=0x4000000, 0x4)
fcntl$setlease(r5, 0x400, 0x1)
r7 = creat(&(0x7f0000001400)='./file0\x00', 0x0)
close_range(r5, r7, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000002680)={0x3, &(0x7f00000026c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10)
getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000002700)=""/2, &(0x7f0000002740)=0x2)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002a1d0be7be982dd02b00000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x50)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x20)
add_key(&(0x7f0000001240)='asymmetric\x00', 0x0, &(0x7f0000001280)="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", 0x110, 0xfffffffffffffffd)
sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0)
recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003780)=""/4099, 0xe18}, {&(0x7f0000000000)=""/111, 0x6f}, {&(0x7f0000000080)=""/4099, 0x1003}, {&(0x7f0000003700)=""/103, 0x67}, {&(0x7f00000010c0)=""/111, 0x6f}, {&(0x7f0000004880)=""/4110, 0x100e}, {&(0x7f0000001640)=""/113, 0x71}], 0x7}, 0x0)

2m56.437152313s ago: executing program 6 (id=5691):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r2, 0x801, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4d2a6533e832005eabe97b4dc33a47d3a1", 0x31}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8011}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
syz_usb_connect(0x0, 0x641, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x18, 0x61, 0x23, 0xff, 0x4dd, 0x91ac, 0xacdf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62f, 0x4, 0x4, 0x3b, 0x80, 0x9, "", [{{0x9, 0x4, 0x94, 0x9, 0x6, 0x5, 0x89, 0x1d, 0x57, [], [{{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x30, 0x63, 0x40, [@generic={0xcc, 0xb, "0bf9a1b333fbee03d833e222dc04f49c99bbc3ac83aa51f1a70d98ae92d4fea9e065dfb9e97c0869b9a496a1ef0ad8c79dca85fa4b6abfb87931a995e353d95db99f0cd0e95766674e01ecd400736d91c08b49df94e7cdcbebb6d91fe8e5ed801977f398508177a8155ee043617f24fd9ac31ab77e57c2d675d27e018144f2b11928528fe188e04f0c2f700d5c8c3620cfb93e9da963f312a614a2ac6770e7edcc1ccc8cee5cdff332925b02894ed9726165cbe7a2c6b5966a6cbb057d338bc44ba8e66ce002f0a51b81"}, @generic={0xdf, 0x31, "066378719a7c22c85099d01ed91c1a218a2ceab6479b5340fd33f3b40717fae842f945c90662f22112b87bd03e41709d48c4e5cdb4dfca15b4acdc161067e422bd877887ad79c2d71bc514e11f09e0110ddbf08979d796da7c9af9411063b9e38d26affdc1c65c51397451b95343d6313eb2eed5fb19678c246e00887deaa9305229532a302f5a0a64ce1c3fec233cd525fa3b27b1dfc8fd21ebb4455cecb5194645dfd278bb753256713f24b7d0a85b22cd7c87afbb87c4268c8ecca15d0d5477f3e614e2b021717069db6ae900c92c1db719091e04f85e036a2062a2"}]}}, {{0x9, 0x5, 0xf, 0x16, 0x400, 0x8b, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x5}]}}, {{0x9, 0x5, 0x4, 0x3fb78365bc4cde04, 0x3ff, 0x3, 0x0, 0x8, [@generic={0xcd, 0x4, "faa54d0ffaa2636662e2c679e881eb0aa1673e56a8b0e72c9c74e9937311329deda44fbea748fb25a019669abf06e018b7c2af5d48ab6d90776fe4f9e9aba9a6e3739f82772c077f789ad92f528973c401ed894d39255189e44ae48525412d09623c2d41d310dc85dfff82a9a58d1858ed60abb4bfb2ef3c5295d330c2e73b325f0bd4467b18eb549b2d556d383b4029ec315a0adf67295bfc1a24614a4c7c31b10d4670dc48fbaa8b130cb19fe7d50abad17eec4f0de2bb68d1bbd593d4c0df9e44fa4cc2c3d969fd368c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x8, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa4, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x7f, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0xb3, 0x40, 0x0, 0x22, 0x70, 0x8b, 0x7}}, {{0x9, 0x4, 0x51, 0x0, 0x2, 0x1, 0x64, 0xbf, 0x7f, [@hid_hid={0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x345}}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x1c}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x29, "f31abc97ec"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x0, "20dfbc"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x260, 0x9, 0x7, 0x33}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x3, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xe}]}}]}}, {{0x9, 0x4, 0x6d, 0x8, 0x10, 0xff, 0x52, 0xa7, 0x7, [], [{{0x9, 0x5, 0xb, 0x3, 0x400, 0x9, 0x4, 0xe}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x5, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x46, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x7, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x81, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xff, 0x6, 0xae}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x4, 0x5, 0x7f}}, {{0x9, 0x5, 0x99c81f11f23fa6a, 0x0, 0x427a15c0f18a719c, 0x80, 0x0, 0xd}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x5, 0x7f}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1a, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x3e7, 0x2, 0x2, 0xa, [@generic={0xf0, 0x2, "3560e61b4fd8a21c4890d06885da9313cada47822f9b963b73f288373e6faebf7f6c96ba1e073737f3d20c2fa5c2220d1892d7efcce13d75a9645d15ab79a38d48e63813758fd138a0dd1ef958864cfcca0a2bea2b0d5e317bc389c20b3a01ae1d54098f5ecf6f99c582943c016076472fcbc881940d6d7e7ea78e137179bf76ab6e195ac184d9b822cf152547ad6d380a9a674234c2b5cf5a45a1317c5e60973d0616acf89e453d797eff7d91fbda736565d3267381ab6590e5d13284c4dcf12c73c522fa9c3c552163a06afee8a2617e6227b610543b123889822eb3c24c944b3183cfbc33d5f3f560e272c30e"}, @generic={0x67, 0x5, "7db2cfcddab574cd26fd33f907acdfe4d0d8ed4f031a85fbe44f8ecd0441507f89cc441a673f440b19141f02cbd50829f69743b4078d5efc25cb90da50d1025eef484299eb1a72bc0e9937c3270d353a21ae1d3d949abf3698bd481ee4bfaeefa3095412c0"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0xe, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x3}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x5d, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xeb, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0xdc, 0x4, 0x3, [@generic={0x9b, 0x2a, "bf2cc96de9f32ab76f9de9e61c5cb4972169322f73f5275482caae4e8e47b5dfe5e72a3ff0d6ff5f89531702a0e8d60b208af6aa84db8823c6dfe4bbd3367b80e8075a04441f488836b585030fe3b4eb28ce1d2f3a3498500beb99257b46c0d0bdb487d1653f9f2794577a4bbd2615681dc1bd1934d11af9637939fc8b68b637905cef553c087f28c36f56bba7bc5f67724ef4faf5e604dece"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x1, 0x4, 0xf9, [@generic={0x32, 0xe, "5453262f0dce87e4b524146386f4a6be6ddb6414e704e33a73d3aef585a344d4a3aebfca9877650180eb3103141fd4b5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x26, 0x9}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0xe, 0xd4, 0xf8}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0x1, 0x6, 0x40, 0x10}, 0x5f, &(0x7f0000000cc0)={0x5, 0xf, 0x5f, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "67f3f825bb6dd8baa4d6a7e823292171"}, @generic={0x46, 0x10, 0x2, "b4c63803ada69fef19955ab6025036e43dacf9bfc6dd564768a8736b4bd31f520f632a785238cf539f491af5c6c5abe8e0446c080f65564950ec99eefb9e44c708e9a9"}]}, 0x5, [{0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="39031889a315a9b45b6790abfa7041ca236511aa729842a423f6d6658d003bcfb16b9b1978a67b59fda038d05ba11027d1389ebe12dc5b907ef964c60582b31b741b8508fe361073"]}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x843}}, {0x4b, &(0x7f0000000dc0)=@string={0x4b, 0x3, "90fe2539f380114add81b716a4dd1e496c277aee2b8081179f017e3ee6bed3c3cd478aeb55dbdc72b64a0922e5d22c00026ce50f1898df35eccb9e94481a9e37c20f1ca628a6cdf2e9"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc0c}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "e87359f7e92661e75b927f0dcb2ccc6536aaf978565ce5bcce0a521bc642eaa70c52f4e1"}}]})

2m52.99587428s ago: executing program 6 (id=5712):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x803, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000f1401002bbd7000fedbdf2508d12b0532cb059cc0c6007199203f182f0001000000000009004500756d616400000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40080)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setitimer(0x1, &(0x7f0000000840)={{0x0, 0xea60}, {0x77359400}}, 0x0)
timer_create(0xfffffff9, 0x0, &(0x7f0000000880)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r5 = socket(0xa, 0x3, 0xff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$sock(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="4400000010000104000000000000000003400000000000002100000000000000240012000a00010076786c616e00000014000200080000207b00000008000c0001020304", 0x44}], 0x1}, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000b00)='/dev/comedi4\x00', 0x22380, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x8502, 0x0)
capset(&(0x7f0000000900)={0x19980330}, &(0x7f0000000ac0)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000b40)={0xc000003, 0x0, &(0x7f0000000b80), 0x0, 0x4})
mlockall(0x7)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000800)={0x844, 0x7}, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c40)='./sys\x00', &(0x7f0000000c80)='ocfs2\x00', 0x0, 0x0)
getrlimit(0xd, &(0x7f00000001c0))
write(0xffffffffffffffff, &(0x7f0000000d00)="10", 0x1)
r8 = syz_open_dev$usbfs(0x0, 0xffffffffffffffff, 0x1781)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000bc0)={0x3, 0x1}, 0x4)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000009c0)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000a00)={0x4b5a9da54893e123, 0x7, 0x3, 0xc00}, 0x8, 0x200, 0xfffffe, 0x0, 0xd, 0x0, 0x0})
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

2m52.596118158s ago: executing program 6 (id=5715):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002440)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000025c0)=0x9c)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000002400), 0x4d4402, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x2b, @loopback, 0x4e20, 0x0, 'rr\x00', 0x0, 0x0, 0x3e}, 0x2c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r4 = dup(r2)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000023c0))
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000300)="6607388173ab0fc76fb4360fc90f01cb7666ba6bb74189000003c70fae6e2fc416610f2367260f01ca660f38817700c4c2459d78ad", 0x35}], 0x1, 0x55, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x9}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mount(0x0, &(0x7f0000000080)='./security\x00', &(0x7f0000000140)='pstore\x00', 0x2884008, 0x0)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r6, &(0x7f0000000100)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f0003", 0x24)

2m52.088121508s ago: executing program 6 (id=5718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
rmdir(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00')
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000002640)='.\x00', 0x80000, 0x103)
getdents(r0, &(0x7f0000002680)=""/184, 0xb8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './config/nvmet/subsystems/testnqn\x00'})
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000025c0)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002600)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000021c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="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"]}, 0x3c0)
read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020)

2m51.796148051s ago: executing program 6 (id=5723):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000480)=0x4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x840482, 0x1b7)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af032006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0)
write(r1, &(0x7f00000005c0)='3', 0x4e)
write(r0, 0x0, 0x0)

2m51.191924612s ago: executing program 6 (id=5725):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = mq_open(&(0x7f0000000740)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = add_key$keyring(&(0x7f0000000900), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, r5)
add_key(0x0, 0x0, 0x0, 0x0, r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
lseek(r2, 0x8000, 0x2)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82440, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000700)=0xc, 0x4)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={r0, r0, 0x8, 0x20, 0x0, 0x6, 0xfe, 0x7c0, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/54, 0x7ffff000}, {&(0x7f00000001c0)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/95, 0x7ffff000}], 0x286, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
bind$alg(r4, &(0x7f0000000980)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis128l-aesni)\x00'}, 0x58)
prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000380)={0xa, 0x7}, &(0x7f00000003c0))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/binder0\x00', 0x44116bf6e1e3fe10, 0x0)
mmap$binder(&(0x7f000078b000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000036719a6a6bd31adc865ca2b5cc7c596fe2a1fa76d5f7ced66e9e04dd0347284e8af2d140ed8fc81740bc4c2f91776850ddbd19113d53c1e19a0000000000000042cf0000000000a4e37ce6"], 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x298019, 0x0)

2m35.087310022s ago: executing program 85 (id=5725):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = mq_open(&(0x7f0000000740)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = add_key$keyring(&(0x7f0000000900), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, r5)
add_key(0x0, 0x0, 0x0, 0x0, r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
lseek(r2, 0x8000, 0x2)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82440, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000700)=0xc, 0x4)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={r0, r0, 0x8, 0x20, 0x0, 0x6, 0xfe, 0x7c0, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/54, 0x7ffff000}, {&(0x7f00000001c0)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/95, 0x7ffff000}], 0x286, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
bind$alg(r4, &(0x7f0000000980)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis128l-aesni)\x00'}, 0x58)
prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000380)={0xa, 0x7}, &(0x7f00000003c0))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/binder0\x00', 0x44116bf6e1e3fe10, 0x0)
mmap$binder(&(0x7f000078b000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000036719a6a6bd31adc865ca2b5cc7c596fe2a1fa76d5f7ced66e9e04dd0347284e8af2d140ed8fc81740bc4c2f91776850ddbd19113d53c1e19a0000000000000042cf0000000000a4e37ce6"], 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x298019, 0x0)

1m37.246565346s ago: executing program 9 (id=6174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000fff5000500000a2c000000180a01010300000000000000020000040c00054000000000000000020900010073797a30"], 0x54}}, 0x0)

1m37.038262229s ago: executing program 9 (id=6175):
r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) (async)
writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) (async)
write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010700, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) (async)
connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0xf7, "0b03482a5228357f62aa2841bb9acb211167caa2dfe4c5b60a23c07eaf5368ef0156e0bb5eb983d7802fc5eb144bd972a9417b40647331f0c2c46b20165e6c", 0xc}, 0x60)

1m36.83219314s ago: executing program 9 (id=6176):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'pcl818\x00', [0x100, 0x7, 0x2, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b5, 0x2, 0xfffffff8, 0x2000000]})

1m36.735813794s ago: executing program 9 (id=6177):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d032, 0xffffffffffffffff, 0x0)
r0 = syz_pidfd_open(0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x22a}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000091}, 0x8000)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000140))
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x40047435, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={<r4=>r3, &(0x7f0000000180)='{#\x00', 0x444003, &(0x7f00000001c0)={@align=0x3, {0x41, 0x4, 0x5, 0x4d}}, 0x0, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000040)=0x4})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010a29bd7000fbdbdf253700000008000300", @ANYRES32=r8, @ANYBLOB="080026006c090000080057006516"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x168, r6, 0x300, 0x6, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_TID_CONFIG={0xd4, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}]}]}, @NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x4}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xf, 0xff, 0x7fff8000}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, &(0x7f00000000c0))
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000000)=0x100, 0x4)

1m36.448060387s ago: executing program 9 (id=6179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x82, &(0x7f00000001c0)={0x2}, &(0x7f0000000200)=0x20)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2400c094)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002400010026bd7020fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m36.28609672s ago: executing program 9 (id=6181):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8010, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r2)
r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000000200)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="27ae26d867e63e3f78035ad84da85fc26e1492ae771b8cadca0be73fc783b234993c11cf622176cd66e45e7133"], &(0x7f0000000300)=ANY=[@ANYBLOB="00031500000015039e5177591f287b506c7612aa96af0780f1d978cf654eae2b47cedf7a484e0045"]}, &(0x7f00000003c0)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x1, '_'}, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x3, "c1447e"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000840)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000880)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000008c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)

1m34.084040738s ago: executing program 2 (id=6196):
syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xea, 0xab, 0xf9, 0x8, 0x46d, 0x921, 0x89dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x1, 0xb8, 0x2, "", [{{0x9, 0x4, 0xc3, 0x7, 0x0, 0xc6, 0x9c, 0xd8, 0x2}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1m32.698576817s ago: executing program 2 (id=6200):
r0 = socket(0x2, 0x80d, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x58, 0xb, 0x1ff80000}, {0x6, 0x11, 0xb26}, {0x8, 0x15, 0xdb9a}}]}, 0x54}}, 0x240008c0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdd, 0xa8, @random="5116aa21ce5470d312235ac396ddb0a806c7f93fc744dc12ae89a4ae681aebce6bef5f77e58cb379fd66805e003d99753f730c1ba227f9949d8db77d16057e41f6fde1fc0d94c8d90f8aae7e833449d30cb98b424202692a47739fc0dffba32497538e107d4b726993626e31f61a06b80a26ca80c8fb1b5c478f9fab63480d9b89eeee1f955f456c7c753906142554fc8e67de7eeee6a9a46d4a758ca44291ed71013407220bd2dec75e83da161b3ef53a7c83647fba4a7643e5fbd7e2872dc44e449500c78c47db290feb3694fe377ff28f40ad18ee341dc8"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x184}, 0x1, 0x0, 0x0, 0x400d0}, 0x8004)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x58)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setns(0xc9, 0x0)
r4 = socket(0x8, 0x5, 0x5)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x4204000c, 0x0, &(0x7f00000003c0))
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000200)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'xfrm0\x00'})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], 0x20)
sendto$inet6(r5, &(0x7f0000000300)='\x00', 0x1, 0x4000057, &(0x7f0000000380)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)={0x303900, 0x0, 0x18}, 0x18)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="dafbf5d5e003cbe7"}})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2403, 0x0)
write(r7, &(0x7f00000001c0)='3', 0x1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000007c0)={0x4, [0x0, 0x0, 0x0, <r8=>0x0]}, &(0x7f0000000800)=0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000840)={r8, 0xffffffffffffffff, 0x80c00}, &(0x7f0000000880)=0xc)

1m32.41209012s ago: executing program 2 (id=6202):
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x3e, 0x0})
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
userfaultfd(0x801)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x1, <r1=>0xffffffffffffffff, 0x80800}, &(0x7f00000001c0)=0xc)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200)=0x80, 0x4)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000562000/0x2000)=nil, 0x2000}})
mkdir(&(0x7f00000003c0)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='my_tracefs\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x500, 0x14)
ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000240))
move_mount(r2, &(0x7f0000000000)='my_tracefs/events/task/task_rename/filter\x00', r3, &(0x7f0000000080)='my_tracefs/events/task/task_rename/filter\x00', 0x102)

1m32.168057273s ago: executing program 2 (id=6205):
mkdir(&(0x7f00000000c0)='./myproc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
recvmsg$can_raw(r0, &(0x7f00000006c0)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/97, 0x61}], 0x1, &(0x7f0000000600)=""/135, 0x87}, 0x2)
mount$fuseblk(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './myproc/scsi/device_info\x00'})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f0000000040)='./myproc\x00', &(0x7f0000000200)={{r2, r3/1000+60000}, {0x0, 0x2710}})
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./myproc/scsi/device_info\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)="bc5154f23facdd5dd02bc92c723a6d6f64656c3a", 0x14)

1m31.720220412s ago: executing program 2 (id=6208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x46, '\x00', @st={0x4, [{0x2, @svalue=0x1000000000009}, {0x2, @svalue=0x7}, {0x1, @uvalue=0x3ff}, {0x1, @uvalue=0x5}]}, 0x1}, {0x1a, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3, @svalue}, {0x3, @uvalue=0x2}, {0x2, @uvalue=0xf}]}, 0x9}, {0x3d, '\x00', @buffer={"233b263a371067f509207d360700008d262565779b883426b1ec008cc77b2c69", 0x20}, 0xe6}]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f000000af80)=ANY=[@ANYBLOB="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"], 0xfce)

1m31.388100242s ago: executing program 2 (id=6212):
r0 = syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000006c0)={0x9, 0x7, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) (fail_nth: 11)

1m30.761803256s ago: executing program 86 (id=6212):
r0 = syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000006c0)={0x9, 0x7, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) (fail_nth: 11)

1m20.104328541s ago: executing program 87 (id=6181):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8010, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r2)
r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000000200)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="27ae26d867e63e3f78035ad84da85fc26e1492ae771b8cadca0be73fc783b234993c11cf622176cd66e45e7133"], &(0x7f0000000300)=ANY=[@ANYBLOB="00031500000015039e5177591f287b506c7612aa96af0780f1d978cf654eae2b47cedf7a484e0045"]}, &(0x7f00000003c0)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x1, '_'}, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x3, "c1447e"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000840)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000880)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000008c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)

56.836192752s ago: executing program 4 (id=6333):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xf5ffffff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

56.630432591s ago: executing program 4 (id=6335):
socket$nl_netfilter(0x10, 0x3, 0xc)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="008686dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

56.123633543s ago: executing program 4 (id=6337):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x20c01, 0x0)
writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='n', 0xfdef}], 0x1) (async)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000d40)={0x1, 0x0, 0x0, 0x2, 0x1, 0xecd, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10})
msgget(0x3, 0x8)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0xde, &(0x7f0000000400)=ANY=[@ANYBLOB="de03fbb46cb76d603d89b13cd019da9ef664116f3e0db72464866d7ab6c8b4f9e5dbe9a3f21ba67c91b1e1042c4854c387efc6f926410a2fbf52cef8f2045a75bdd8a8587f1ebb8c94d0d0d7111d24da2e52540669fb1fff879cd0453da0df30b35cb48b2379769778d31199e09fbe780a51e935bc4f47a208c191299813695733550cee93dc7145fc6019e8999018f06eca0cf053262acc39988c604ee87e459e1304002599f89927a0f65ee327222badb145d3f26f0e18c4e1919dc46ebc2681d8476ed3f3aabddac4a2948813fa5c9a2d29795ddd802a3f98d5047f4f"]}, {0xce, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce0304baa2a99df9d11aee73c18d677cf36328c61df533356ef2f4d2d57d0bcacad2613d57d574c40621f1dcfe3e05e0d86d325e010028812f7945641d447f90edd7fd6aca361f9ff299a3879ea9ffd9667cd87701fd2f98cfb0df34bdcdd5803e0a0e77fffa27f50280cdaf70f9cbc143bc793992452c1a992af337e11e71b23941b1b2ca785aa30a678c8830a968c305bff374cbcd6dad40870cc05c95523949ac9e67017a956a5f63bea9b08d66b51f7f14d773f7186f1876d545cfb3483cd18dd29c7d220f151f1a00b7e600"]}]}) (async)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xe3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x2000008})
mount(&(0x7f0000000b00)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='ntfs\x00', 0xa00001, &(0x7f0000000bc0)='}-({&\x00') (async, rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)={0x40, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4c800) (async, rerun: 64)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x48, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x71, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x6, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x2, 0xa}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x8, 0x6, 0x9, 0x20, 0x2}, 0x8, &(0x7f0000000e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x418}}, {0x3, &(0x7f0000000ec0)=@string={0x3, 0x3, "e8"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x423}}]})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000ac0)={0x1, 0x0, 0x1, 0x9}, 0x8) (async, rerun: 64)
listns(&(0x7f0000000a80)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) (rerun: 64)
write(r1, &(0x7f0000000c00)="55891580d10904ae8ccd875db47c0d72bcdd382d0fcfd6d4b661dd38118e6e96811431c7acb03fe0d42120216e595a8bf4decb94c359c26b56229d8a98ecb34ea80c0aeacb98a7c3f0a08d32ff3018f81ffa3b0d4e3c4bcf3d5f87c4ffc74389b166b305e770ede35aab", 0x6a) (async, rerun: 64)
syz_usb_connect$cdc_ecm(0x1, 0x54, &(0x7f0000000000)={{0x12, 0x1, 0x41, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0xc, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "a3f903"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x401, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0xb}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0xd, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x0, 0x4}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x1, 0xff, 0xb}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x53, &(0x7f0000000180)=ANY=[@ANYBLOB="5303cb6367ae729c818235ed3c255b7f0ac0eb719e43efc94e43d8da7708f965f18716c96a272dde618704000000df34895977be2744a37cb8fd53ca453eca7737b06cd5b9e8587e0e"]}, {0x92, &(0x7f0000000940)=ANY=[@ANYBLOB="9203b6698bafe334ba82660a904f47f15c7990a661693597985f7f315c5febf5aa4d87013cd2115265e229685799ebc2cf0872d03e207d2f33338a75c80f2f46ba28b58afe9892c16c42bcfb8beb1271ad030143f852228568ca66e238ccc95dd6f99e52f06beb5def6f1a928591909dca5041eae4a62ad465a260862b8646f1885685d88ea3438faa8ade5b5fd8f0eeb3eccc02c6c92e653acd650bd9ab4100"/174]}, {0xb7, &(0x7f0000000500)=@string={0xb7, 0x3, "666b1682d8fef2abde7bb044a32c7a1a8a43b7890e79d2f805a0baa7b19f02668450a67f7cf458ca1ccdf2b058f52d06ab3ed154358f9eb9da157d9cebc0fbea8d37ad0fada32a528f71a3e194a81418d49e7d13ea75fc4605e9b2e81e25e289d03a37bafaf5d2929d05cb139ecbc37ad4ef0b08bc2bffa91212a8630580555a880e304631f6449457519acb215d48ac3999ca0fc1a1ac0dffbd1af54fdb368b98cf6142de6d4dea7ecf6c7b80a8f50d6ed9548d51"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1818}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc1a}}, {0xe5, &(0x7f0000000640)=@string={0xe5, 0x3, "f625f74f1a9fc802cece2315d232ea8568f3a8c151418fd4063f987e6c5dcb8438ec7131b7f6a1f8f43bedcf75401a5bda82dd74d6a46ff2b52b45a42415ebbe6f63ea4ad28e3048fd01e9f8fc74d08d46c58595d08d8c49192698e7996fff4926c717cefc654f8d7806950040363c3e32767cb465bafd35e6930b58835c9a82877b59efbea043e0a0048d4185184851ec9a50914152540d335070ef3fd3cc910e7b855e5d80053a864d498b07e8d553f9cbf32ec94299dc60ec3ce0f76dedac2e451d0cab1e72604a00bca873111660c6a87148e5ef2b229c4f7fa853f4b3dd73ddfa"}}, {0x5b, &(0x7f0000000740)=@string={0x5b, 0x3, "99e4b23114cac75632d29b313d6faca4c74f1fe1e712a2925cadfefa523944903d7aa842795302f2042781573b104a158acf0af6262497cdafd14b41ac14109847d6e700fe4bcd781f0897be0f3bb242501a646affa874a5d1"}}, {0xc6, &(0x7f00000007c0)=@string={0xc6, 0x3, "cc257cb3c3d8659057a7bafb4ffcbc7f91318bf6548b7e643e376f7f914ef2a6872b9b0a92834588df19dcab59a76bc6b691775dadc0d5a6d89dc55dfcc3a5ed1182436973f320eac7b105607a4b9b9c1bf3254330085b0f5c00dafa14228a46f30fb4e4ef7255c42373118a6fdd28794df7eade437691b226a7a82f5a91e7a45717784bad38ca84a59abcdbe8475e3a901541dfa9d1c147b09374b01d6d8eead8de0bbb746132232feb976ed3cd6e7f1dfbd037af75abe8bad25feefd9adb50815507cc"}}]}) (rerun: 64)

54.671972586s ago: executing program 3 (id=6350):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3c, 0x2)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
r3 = syz_ublk_setup_io_uring(0x1fb7, &(0x7f00000002c0)={0x0, 0xfdd, 0x80, 0x2, 0xc9}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000380), &(0x7f00000003c0)=<r5=>0x0)
syz_ublk_add_dev(r3, 0x0, r1, 0x0, &(0x7f0000000080)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x2, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140))
r7 = syz_io_uring_setup(0x30da, &(0x7f0000000180)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000240)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, 0x0, 0x0)
listen(r0, 0x8)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, 0x0, 0x29)
syz_ublk_setup_io_uring(0xffffffff, &(0x7f0000000400)={0x0, 0xfbdd, 0x0, 0x0, 0x48, 0x0, r3}, &(0x7f0000000480), &(0x7f00000004c0)=<r12=>0x0, &(0x7f0000000500))
syz_io_uring_submit(r4, r12, r5, &(0x7f0000000540)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}})

54.333508537s ago: executing program 3 (id=6352):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x800001, 0x4)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
getsockopt$inet_mreqn(r1, 0x0, 0xe, 0x0, &(0x7f0000000240))
listen(r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0xb5, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xfd, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x800, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7f, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x0, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0xffff, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0x100, 0x1001, 0x10000001, 0x7, 0x61, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0x10, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000'])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

53.020155657s ago: executing program 3 (id=6356):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) (fail_nth: 1)

52.565790452s ago: executing program 3 (id=6357):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0xf, 0x401d031, 0xffffffffffffffff, 0x0)
utime(0x0, &(0x7f0000000200)={0x100000000fffff, 0x7})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080004000200003c070b0000000801030067f26fa8f9878e5ff16908394dce5fafd19f1809e2d4ad52", @ANYRES32=r4, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200020000000800030004ac0f00"], 0x44}}, 0x0)

52.396246903s ago: executing program 4 (id=6359):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000200)='file read @etc/passwd /as/\\{id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)

52.233666084s ago: executing program 3 (id=6361):
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x14, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x1, 0x50)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000111401cbffff00000000000008004b00"], 0x18}, 0x1, 0x0, 0x0, 0x4488c}, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfd, 0x1f}, {0x0, 0x0, 0x0, 0x4, 0xf6, 0x0, 0x7f, 0x0, 0x92, 0x9, 0x8, 0x0, 0x2}, {0x6fa764bc, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/make-it-fail\x00', 0x1, 0x0)
pidfd_getfd(r1, r5, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
lgetxattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000003c0))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs]})
r8 = dup3(r7, r6, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r12=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x1, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0xffffffffffffffff, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c009900020000002e000000080026006c09000008002700"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1100, 0x1})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})

51.399906023s ago: executing program 3 (id=6365):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x41068, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000e8868c906080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sync()
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

51.196669054s ago: executing program 4 (id=6368):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

50.130345613s ago: executing program 4 (id=6374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f00000001c0)="50000000100001040100000003000000000000009600000000000000000000000c0003006d6163736563300008000500050000001c0012800b0001006d616373656300000887028005000f0002000000", 0x50)

25.18357356s ago: executing program 88 (id=6365):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x41068, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000e8868c906080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sync()
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

25.183547168s ago: executing program 89 (id=6374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f00000001c0)="50000000100001040100000003000000000000009600000000000000000000000c0003006d6163736563300008000500050000001c0012800b0001006d616373656300000887028005000f0002000000", 0x50)

5.171706704s ago: executing program 7 (id=6483):
r0 = syz_open_dev$video(&(0x7f0000000180), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0x0, 0x30314142, 0x0, 0x0, [{}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x10000000}], 0x0, 0x0, 0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x20000080)
syz_ublk_setup_io_uring(0x4a27, &(0x7f00000001c0)={0x0, 0xdd53, 0x5b5934e99899e69c, 0x1, 0x3e2}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))

4.951588046s ago: executing program 7 (id=6485):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
syz_usb_connect(0x6, 0x3f, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r1, &(0x7f0000000240), 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0c0400c90000000000"], 0xf)
socket$xdp(0x2c, 0x3, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000700)={[0x100000000]}, 0x8)
inotify_add_watch(r2, 0x0, 0x400)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d8000000141d81044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0x121}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000)

4.651734907s ago: executing program 1 (id=6488):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c010000100001000000000000000100fc020000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000101000000006c000000ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000080000000000000050000000000000000000000000000000a0000004000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c0015"], 0x14c}}, 0x40000)

4.468157363s ago: executing program 1 (id=6489):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='virtiofs\x00', 0x5, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002780)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000027c0)={'syz_tun\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000002800), 0x12)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000002840)=ANY=[@ANYBLOB="000008050010010b"], 0xa)
write$tun(r0, &(0x7f0000002880)=ANY=[@ANYBLOB="00000805001001"], 0xa)

4.467980129s ago: executing program 8 (id=6490):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0xfec816693921ccbe, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0xfffffffc})
mkdirat(r0, &(0x7f0000000000)='./nfsd\x00', 0x0)
setns(0xc9, 0x0)
socket(0x26, 0x800, 0x6)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/exports\x00', 0x86080, 0x968d30ed092ef773)

4.150323401s ago: executing program 7 (id=6491):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a25000000000a050000000000000000000300000308000240000000050900010073797a300005000028000000000a010400000000000000000300000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)

4.111010726s ago: executing program 8 (id=6492):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x300)

3.832095823s ago: executing program 7 (id=6493):
syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffffffffffff, 0x80100) (async)
r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffffffffffff, 0x80100)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x11282d)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
rt_sigsuspend(&(0x7f00000002c0)={[0x8001]}, 0x8) (async)
rt_sigsuspend(&(0x7f00000002c0)={[0x8001]}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x17b)
write$cgroup_pid(r2, &(0x7f0000000280), 0x12) (async)
write$cgroup_pid(r2, &(0x7f0000000280), 0x12)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000340)=0x7, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000340)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x5)
write$dsp(r5, &(0x7f0000000480)="5cba91a4", 0xffffffd9)
write$dsp(r5, &(0x7f00000004c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) (async)
write$dsp(r5, &(0x7f00000004c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54)
write$dsp(r5, &(0x7f0000000540)="cd", 0x1)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000380)=0x800001, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000380)=0x800001, 0x4)
bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r3, 0xfffff7fe)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@host, 0x5}, @my=0x1, 0x0, 0x1, 0x3, 0x6, 0xfffffffffffffffe, 0x5, 0xb71})
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000580)={0x7, 0x5, 0x1, 0x354368d5, 0x2, 0x20, 0x4})

3.77252907s ago: executing program 1 (id=6494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xbe, 0x43, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x5}}}}}]}}]}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x13, "", [{{0x9, 0x4, 0x0, 0x4, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x40, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="001128"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000100)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x7}}, 0xfffffed5}, 0x1, 0x0, 0x0, 0x8040}, 0x30000804)

3.232906777s ago: executing program 5 (id=6496):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800})
readv(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x9bb7, 0xa5, 0x8c, 0x3}, {0x9b, 0x2, 0x1, 0x8}, {0x6, 0xa7, 0x9, 0x4}, {0x8b05, 0xd1, 0x80, 0x2}, {0x7, 0x76, 0x8, 0xff}, {0x4, 0x40, 0x8, 0x210f}, {0x4, 0x4, 0x1d, 0x4}]})

2.685856364s ago: executing program 5 (id=6497):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002380)=[{{&(0x7f0000002440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)="e4", 0x1}], 0x1}, 0x102}, {{&(0x7f0000002500)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='I', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='N', 0x1}], 0x1}}], 0x3, 0x4050000)

2.482174098s ago: executing program 5 (id=6498):
setns(0xc9, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0xfff5, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0)

2.435825864s ago: executing program 8 (id=6499):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4488c}, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1000000000c663, 0xd9800)
r2 = openat(r1, &(0x7f0000000080)='./proc\x00', 0x82c1, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='l', 0x1}], 0x1, 0x7fffffffffffffff, 0x7)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0xfc)
mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STATS_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20004004)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='0\n\x00', 0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="000102030405060708090a0b0c0d0e0f", 0x10)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000580)="0102030405060708090a0b0c0d0e0f10", 0x10}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x1000}], 0x3, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x10, '\x00'/16}], 0x40}, 0x0)
read$alg(r6, &(0x7f0000000600)=""/32, 0x20)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x4, 0x8, 0x8, {0x4e23, 0x4e22, [0x7fffffff, 0x9e, 0x6, 0x1a], [0xfffffffe, 0x3, 0x61f6, 0x200], 0x0, [0x81000000, 0x67]}, 0x80000000, 0x6d7}, [@INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "5325634eaa214f4df31a6700391b1dfd1e121e9fa71b1f4d"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "b13081860fd9b34824503378a4a7de59e6ae7be7fb7b8ab3f7ff7d173aa33da463fcc94b8f58f79d2c6627e946ea0f4baedbf2cbbe6357aa9d589a367d330f266bc6c19c9caee2"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "59e9594e9a29a6a1a1e639a12c92a98c6625bcc0bc2dcb524a9f4035f2249a840ce005b7af9ce8f6840d4476176a5526411c9a5acf672dd7bdc14d57a104e7ff14ea950f8a632991ca3eca3214115f6f4a592da57866cc4d5b1088992d98de45f9875486cfc8182280849a025d1fed940bf310656f01e467e22abe7cf673d163fa066098cec84917461dfa44ae810364f7015bd6396af4ca6905c091180540de32ed287212d15b7395b7ca068660559721995a8c672fca6956b4367a89dc950d8e"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "2c529383d3cea28749f48aa6d0ee3427543e6f4fd6c5691aec2da473fafe77183f350958a13dcf25995193f4a3374b9763990afd17a0d3775b3673f6a69e2f7849057cf53f2a34c7f0565bad69f76ec12a6166e4719f9ffc7e5d16ab3749ee230982280b968f"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4001080)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)

2.26764109s ago: executing program 5 (id=6500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2102, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000001c00140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001000013"], 0x4a)

2.246918647s ago: executing program 1 (id=6501):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)='X', 0x8030000}], 0x11)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x1000000000000000, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000280)={0x1e, 0x0, 0x4fe9, 0x0, 0xffffffff, 0x4, 0xfffffffffffffffe, 0xffffffffffffffef}, 0x0, 0x0, 0x0)

2.188151756s ago: executing program 8 (id=6502):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1)
futex(r0, 0xb, 0x1, 0x0, 0x0, 0x403)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity', 0x21)
ioctl(r1, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c0100003801000001")

1.917345409s ago: executing program 5 (id=6503):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
utime(&(0x7f0000000040)='test_file\x00', &(0x7f0000000540)={0x4, 0x6})
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000900)={0x0, 0x28, 0x8f, 0x2, 0x0, 0xfe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mount$overlay(0x0, 0x0, 0x0, 0x20400, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)
setns(0xc9, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x402, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="b659f51d36d2b03089c24f3ea28f0ce99a3c936adae1e1fe8d085ac3ac7dcf7e9c3402cc61b14105357b1fc563ffb54b348a14cf4d6c06a96252f221853de98d796c222698f5c987587fd6c34007e463547291b5e9914586b86ad36008b0d77cf85beaefea0d28b7e32ac0df2ab41544538e91"], 0x8)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0xc, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x11c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2000000002"], 0x48}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
shutdown(r4, 0x1)
read$FUSE(r3, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
r6 = openat(r3, &(0x7f0000000000)='test_file\x00', 0x8042, 0x14f)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x1, 0x4, @local, @local, 0x80, 0x20, 0x1, 0x81}})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000580)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
mount$afs(0x0, &(0x7f0000000880)='.\x00', &(0x7f00000008c0), 0x4080, &(0x7f00000002c0)=ANY=[@ANYBLOB="666c6f636b3d6c6f63616c2c64796e2c0031934bf7ce3904bbd656b7244b4914862dd1f84526c94eb27ed2a8e0f46b6c21"])
syz_open_procfs(r5, &(0x7f0000000940)='mountinfo\x00')

1.16697515s ago: executing program 1 (id=6504):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x109000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009354054ce47eaabe52e4639993019c635f8e2afe24ca3711ecd7a33b0f81496506997bd6c3dd1314d65685d06ce6aac1d121f384351fbfc817b5cabd659a85e11f0e11f6b5cee5e5638c02a630e68679480c90ac9d7421c70c8fbb5db6702705f851684df92d4b2c840f3ed8ba41dd6218376ca397e058775f71427c10c1c4825c329bb9f4ff156c20648addb0436cf2b31adcf1e2e891c42a9c5de1819d24ffc915c7dbbaddf649da09fb95c1"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)=0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r2, 0x4bfb, &(0x7f0000000180))
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000c00))

847.80678ms ago: executing program 8 (id=6505):
socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x400000, 0x0)
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x1, 0x24002)
ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyACM0\x00', 0x2, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyACM0\x00', 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r3 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501"], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330005006d04000012b0000000000000000000000600ff0901a10185100901151a26ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b) (async)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330005006d04000012b0000000000000000000000600ff0901a10185100901151a26ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) (async)
r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x1, 0x7, 0x1, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xdf, 0x9e, 0x88, 0x8, 0x1943, 0x2255, 0xd7fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x84, "", [{{0x9, 0x4, 0x85, 0xc, 0x0, 0x3, 0xb0, 0xea, 0x8}}]}}]}}, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xdf, 0x9e, 0x88, 0x8, 0x1943, 0x2255, 0xd7fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x84, "", [{{0x9, 0x4, 0x85, 0xc, 0x0, 0x3, 0xb0, 0xea, 0x8}}]}}]}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

800.810308ms ago: executing program 1 (id=6506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x480000, 0x4)
syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x400, 0xd, 0xd7, 0x5, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r4=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x1, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0xffffffffffffffff, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0})
r5 = socket(0x40000000015, 0x5, 0x0)
recvmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), r6)
sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x14, r7, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000a80), 0x40202, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r9, 0x5016, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x38, r11, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x179, 0x0, 0x9, 0x0, 0x2, 0xa, 0xfc00]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000002e000000080026006c09000008002700"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
read(r2, &(0x7f00000009c0)=""/140, 0x8c)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r13, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r15, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b4, r15, 0x214, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62901830}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xedbd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1c28}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "ed789a75ede5d17e27874c24b942c29b1fe2c30cd2170562cf4b007a6d4860bf24330507924e20aa1fcd72897c02b3c0df6093d661582a8482bf"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12000}]}]}, 0x1b4}}, 0x4004001)

542.654865ms ago: executing program 7 (id=6507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x2000000, {0x1}}}, 0x80}}, 0x0)

380.088076ms ago: executing program 7 (id=6508):
syz_usb_connect(0x3, 0xc7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x44c}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "eed4820d35a3b76dd85b9f90c32e92b7f0f0869dec3ce32253ee8a4c431d508e965e0c2061a87aa40dba0279e0d7cfd9638f004a819f46024e6d0209975da5f0724342e6267d34adf6f69d6dab8c14428b2423ab1250dedebd8f8bc4baea371a6e7fd41b3c9c5ea910ba6fc49839ae2e512c3afcdeea20eaeaf2d7e7a14b1e21b1be6f3e46075f392ba559f7451e1d02449fe1931fc73d862f298a43bdd4fb777d001b89c16179b674ea08dcb5ef48a60c561f67ea4d01352ba9ceb003a8604ffe9273901f0a4c9e5e89bfff8f7d033d162d3a7ba4076fc01179852c9f21c6b3d8edc1556c79669f714eccd118500580aed2fc128267f38900e2917e"}}]})
syz_usb_connect$midi(0x1, 0x9d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x1, 0x1, 0x10, 0x40, 0xa3, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x1000, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xfe, 0x6}], [{{0x9, 0x5, 0x7, 0x3, 0x20, 0xec, 0x7, 0x37, {0xe, 0x25, 0x1, 0xa, "d22d317f3adc6f1009fb"}}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3, 0x80, 0xa1, {0x14, 0x25, 0x1, 0x10, "fc5b4843f7ba9eeb4da33f511aaa9e8b"}}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1, 0x7b, 0x7, {0x14, 0x25, 0x1, 0x10, "02e2a5062a53d8d2879984a00fd646a6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x6, 0xfc, 0xfc, {0xb, 0x25, 0x1, 0x7, "cc80166ae748d6"}}}]}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x80, 0x80, 0x5, 0x20, 0xca}, 0x21, &(0x7f0000000380)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x609, 0xf, 0x5, [0xffc0cf, 0xffc180, 0xf, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0xb0, &(0x7f0000000400)=@string={0xb0, 0x3, "3c51d926bfb06ce1d2fe6764ae2ec8f46c5fb18e635df3081227cffabde9b7ca0cdc3069cc3d7add3b3004ca8876aa186bbd5ddde76cae1d5436bb9bc95f3cfe201269cd6645b48e14788a5d9979948c2563da26cb56d2a3224502898dbb90e5123f0555f4b22de910158bbaa1be60510bd08d5d95c15e4ef44f2c5d2117258c7fa5e7eb85edb8c70ff0896ac70897b14734ef5969c64610a08ad585b050fda46b249e21ac4d63c52dd99ce23e1e"}}, {0x1b, &(0x7f00000004c0)=@string={0x1b, 0x3, "7eda90e283b91378bfd81a4610a03525ce83266d714b4920ee"}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "d1c555f7370b3bd5ef797978851b15ab3c0da4e9c81b7e5c31a7c7a989dc136cea10"}}, {0x1b, &(0x7f0000000540)=@string={0x1b, 0x3, "b020545efd0a67df3022859138ef67388168f615c4c85b3f37"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140c}}, {0xc6, &(0x7f00000005c0)=@string={0xc6, 0x3, "fc9e0a3836ed93c0106a7e94b4d56f892d047480b942a67864240af280a407c2daf5c583b4fd8f8a0f67a68a8d6540b782762fe24b338f8f15246ba0a59a48fb9502213a537cacc99afe4dbcd5be58dc86e803d4dccdddf1a397f17f04bab31671e1437c63c996484c43d74f0230de5ff4c540f2d72f09e8ff316e118b2f03d3d6caea3db87287c82bf15fcab0af611c2b8d8687bb787243f977f58d02e6452f99c2784ea08059f64ab5f312a5ca96305aa49a5c7a887dfb5910bab9f44650170c26ca1f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x813}}, {0x41, &(0x7f0000000700)=@string={0x41, 0x3, "582850202763c769ac35b1e373b34be6c566d48f366df2b8d1f1212132307299ac83bb1267ed3a0f33180e9f3b31e46856169e7a556453405f42bb381c0fe5"}}]})

84.266039ms ago: executing program 5 (id=6509):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f000000010902"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x202, 0x40)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000010)
write(r0, &(0x7f0000000240)='27', 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0)

0s ago: executing program 8 (id=6510):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='\x00', 0x89901)
mount_setattr(r0, 0x0, 0x9000, &(0x7f0000000c00)={0x200007, 0x88, 0x100000}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400030000060900024081000000040004800500030001f8000000000000000000100000000025b736659227619dd0b7f0cfa1f75406d0641c732a154d79fefb5a79b0b47885a82e65aff4717cc3f5baa70e1763f91098795499f619c4ee9e52684a97086b0f2bf075e33a"], 0x34}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x4)
mkdirat(r0, &(0x7f00000001c0)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='100', 0x3)
mkdir(&(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setns(0xc9, 0x0)
gettimeofday(0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000080), 0xa7, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x40, 0x10, 0x800, 0x2, 0x81, 0x7fff, 0x7, 0xc}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10)

kernel console output (not intermixed with test programs):

nf_unregister_net_hook+0x4c3/0x770
[ 1582.125116][T31397]  nf_unregister_net_hooks+0xcb/0x140
[ 1582.125140][T31397]  nf_ct_netns_put+0x3b9/0x520
[ 1582.125158][T31397]  ? __pfx_xt_cluster_mt_destroy+0x10/0x10
[ 1582.125177][T31397]  nft_match_destroy+0x18c/0x230
[ 1582.125194][T31397]  ? __pfx_nft_match_destroy+0x10/0x10
[ 1582.125215][T31397]  ? __pfx_nft_match_destroy+0x10/0x10
[ 1582.125231][T31397]  nf_tables_abort+0x7d6e/0x8bb0
[ 1582.125266][T31397]  ? __pfx_nf_tables_abort+0x10/0x10
[ 1582.125290][T31397]  ? nfnl_pernet+0x23/0x240
[ 1582.125320][T31397]  nfnetlink_rcv+0x1f30/0x28c0
[ 1582.125361][T31397]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1582.125408][T31397]  ? skb_clone+0x246/0x3a0
[ 1582.125435][T31397]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1582.125455][T31397]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1582.125479][T31397]  netlink_unicast+0x8ef/0xa80
[ 1582.125509][T31397]  netlink_sendmsg+0x7f0/0xb20
[ 1582.125533][T31397]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1582.125556][T31397]  ? aa_sock_msg_perm+0x144/0x210
[ 1582.125579][T31397]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1582.125597][T31397]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1582.125617][T31397]  sock_sendmsg_nosec+0x14e/0x190
[ 1582.125638][T31397]  ____sys_sendmsg+0x54e/0x850
[ 1582.125657][T31397]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1582.125679][T31397]  ? import_iovec+0x73/0xa0
[ 1582.125701][T31397]  ___sys_sendmsg+0x2a5/0x360
[ 1582.125714][T31397]  ? __lock_acquire+0x747/0x2de0
[ 1582.125733][T31397]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1582.125773][T31397]  ? __fget_files+0x3a2/0x420
[ 1582.125787][T31397]  ? __fget_files+0x2a/0x420
[ 1582.125808][T31397]  __x64_sys_sendmsg+0x1b1/0x290
[ 1582.125826][T31397]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1582.125856][T31397]  do_syscall_64+0x166/0x520
[ 1582.125873][T31397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.125887][T31397]  ? clear_bhb_loop+0x70/0xc0
[ 1582.125904][T31397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.125918][T31397] RIP: 0033:0x7f529219f559
[ 1582.125930][T31397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1582.125942][T31397] RSP: 002b:00007f52903f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1582.125956][T31397] RAX: ffffffffffffffda RBX: 00007f5292425fa0 RCX: 00007f529219f559
[ 1582.125966][T31397] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1582.125975][T31397] RBP: 00007f52903f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1582.125984][T31397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1582.125992][T31397] R13: 00007f5292426038 R14: 00007f5292425fa0 R15: 00007ffc09dd1e78
[ 1582.126013][T31397]  </TASK>
[ 1582.918698][T31399] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1583.399650][T31411] fuse: fd is not a fuse device
[ 1583.557719][T31419] netlink: 'syz.9.5957': attribute type 8 has an invalid length.
[ 1583.557734][T31419] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5957'.
[ 1584.115994][ T5649] Bluetooth: hci0: command 0x0406 tx timeout
[ 1586.433796][T31411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1587.129511][T31480] netlink: 'syz.2.5974': attribute type 8 has an invalid length.
[ 1587.129527][T31480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5974'.
[ 1587.417915][   T10] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[ 1587.580143][   T10] usb 3-1: New USB device found: idVendor=14f7, idProduct=0500, bcdDevice=44.85
[ 1587.602307][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.602324][   T10] usb 3-1: Product: syz
[ 1587.602333][   T10] usb 3-1: Manufacturer: syz
[ 1587.602343][   T10] usb 3-1: SerialNumber: syz
[ 1587.641006][   T10] usb 3-1: config 0 descriptor??
[ 1587.656961][   T10] usb 3-1: selecting invalid altsetting 1
[ 1587.656973][   T10] technisat-usb2: could not set alternate setting to 0
[ 1587.880964][   T10] technisat-usb2: firmware version: 0.0
[ 1587.880991][   T10] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[ 1588.036184][T31482] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1588.036470][T31482] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1588.094218][T31482] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1588.094310][T31482] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1588.128003][T31482] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1588.130985][T31482] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1588.132282][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1588.176287][   T10] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[ 1588.187069][T31482] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1588.187108][T31482] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1588.215830][T31482] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1588.217816][   T10] usb 3-1: USB disconnect, device number 87
[ 1588.244411][T31482] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1588.244451][T31482] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1588.291631][T31482] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1589.418377][T22667] Bluetooth: hci4: command 0x0406 tx timeout
[ 1589.534992][   T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1589.697562][   T10] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1589.697636][   T10] usb 3-1: too many configurations: 40, using maximum allowed: 8
[ 1589.733770][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.733787][   T10] usb 3-1: Product: syz
[ 1589.733796][   T10] usb 3-1: Manufacturer: syz
[ 1589.733806][   T10] usb 3-1: SerialNumber: syz
[ 1590.052511][T31545] jffs2: notice: (31545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1590.276752][T22667] Bluetooth: hci0: command 0x0406 tx timeout
[ 1590.276789][T22667] Bluetooth: hci5: command 0x0406 tx timeout
[ 1590.358584][ T5649] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1590.407026][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1590.407061][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1590.407074][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1590.458483][   T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1590.496318][   T10] usb 3-1: USB disconnect, device number 88
[ 1590.531817][ T5649] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1591.485235][T31576] netlink: 'syz.2.6002': attribute type 3 has an invalid length.
[ 1591.570412][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6001'.
[ 1591.642482][ T5649] Bluetooth: hci4: command 0x0406 tx timeout
[ 1591.983588][    T9] usb 3-1: new low-speed USB device number 89 using dummy_hcd
[ 1592.106691][T31591] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6007'.
[ 1592.122508][    T9] usb 3-1: device descriptor read/64, error -71
[ 1592.371024][T31593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6008'.
[ 1592.379237][    T9] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[ 1592.497264][ T5649] Bluetooth: hci5: command 0x0406 tx timeout
[ 1592.497289][ T5649] Bluetooth: hci0: command 0x0406 tx timeout
[ 1592.528739][    T9] usb 3-1: device descriptor read/64, error -71
[ 1592.582526][T22667] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1592.646507][    T9] usb usb3-port1: attempt power cycle
[ 1592.755654][T22667] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1593.010741][    T9] usb 3-1: new low-speed USB device number 91 using dummy_hcd
[ 1593.038241][    T9] usb 3-1: device descriptor read/8, error -71
[ 1593.168230][T31605] fuse: Bad value for 'fd'
[ 1593.170112][T31606] fuse: Bad value for 'fd'
[ 1593.288388][    T9] usb 3-1: new low-speed USB device number 92 using dummy_hcd
[ 1593.312316][    T9] usb 3-1: device descriptor read/8, error -71
[ 1593.427610][    T9] usb usb3-port1: unable to enumerate USB device
[ 1593.556695][T31617] xt_hashlimit: size too large, truncated to 1048576
[ 1593.556823][T31617] xt_hashlimit: max too large, truncated to 1048576
[ 1593.556890][T31617] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[ 1594.610423][T31634] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6025'.
[ 1594.684192][T31634] 0�: renamed from hsr0 (while UP)
[ 1594.751712][T31634] 0�: entered allmulticast mode
[ 1594.751727][T31634] hsr_slave_0: entered allmulticast mode
[ 1594.751739][T31634] hsr_slave_1: entered allmulticast mode
[ 1594.770420][T31634] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[ 1594.806330][T22667] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1594.977245][T22667] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1595.349833][T31647] fuse: fd is not a fuse device
[ 1595.433096][   T32] audit: type=1326 audit(1796029723.327:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31646 comm="syz.2.6031" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405639f559 code=0x0
[ 1596.113968][T31655] overlayfs: failed to resolve './cgroup': -2
[ 1596.114506][T31655] overlay: ./file0 is not a directory
[ 1596.254271][T31657] netlink: 'syz.7.6034': attribute type 10 has an invalid length.
[ 1596.256028][T31657] macvlan1: entered promiscuous mode
[ 1596.284889][T31657] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[ 1596.334727][T31657] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6034'.
[ 1596.525238][T31659] rxe_eth0 speed is unknown, defaulting to 1000
[ 1596.802858][T31667] netlink: 'syz.9.6038': attribute type 1 has an invalid length.
[ 1596.802876][T31667] netlink: 'syz.9.6038': attribute type 1 has an invalid length.
[ 1597.249506][T31659] lo speed is unknown, defaulting to 1000
[ 1597.795957][T31681] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6045'.
[ 1597.826561][T31681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6045'.
[ 1597.826911][T31659] wg1 speed is unknown, defaulting to 1000
[ 1597.994851][T31683] netlink: 'syz.7.6046': attribute type 29 has an invalid length.
[ 1598.014204][T31683] netlink: 'syz.7.6046': attribute type 29 has an invalid length.
[ 1598.599422][T31693] rxe_eth0 speed is unknown, defaulting to 1000
[ 1598.705044][T31693] lo speed is unknown, defaulting to 1000
[ 1598.810614][T31693] wg1 speed is unknown, defaulting to 1000
[ 1598.929449][T31695] overlayfs: failed to resolve './file1': -2
[ 1599.589618][T31706] comedi comedi1: 8255: I/O base address not correctly aligned
[ 1599.815736][T31707] netlink: 'syz.4.6050': attribute type 21 has an invalid length.
[ 1599.815753][T31707] netlink: 'syz.4.6050': attribute type 5 has an invalid length.
[ 1599.815761][T31707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6050'.
[ 1600.672375][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6056'.
[ 1600.701176][T31715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6056'.
[ 1600.868245][T31722] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6058'.
[ 1601.560723][T31739] CIFS: Attempting to mount //127.0.0.1/share
[ 1601.571322][T31515] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV
[ 1601.571380][T31515] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[ 1601.617497][T31739] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV
[ 1601.666558][T31515] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV
[ 1601.666574][T31515] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[ 1601.699613][T31739] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV
[ 1601.701024][T31739] CIFS: VFS: cifs_mount failed w/return code = -2
[ 1602.172959][T31752] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6070'.
[ 1602.415485][T31757] fuse: fd is not a fuse device
[ 1602.481913][T31761] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6072'.
[ 1602.540904][T31763] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6072'.
[ 1602.718187][T22667] Bluetooth: hci1: unexpected event for opcode 0x2039
[ 1603.203968][T31785] No control pipe specified
[ 1603.210022][T31785] fuse: fd is not a fuse device
[ 1603.400193][T31791] FAULT_INJECTION: forcing a failure.
[ 1603.400193][T31791] name failslab, interval 1, probability 0, space 10, times 0
[ 1603.400216][T31791] CPU: 0 UID: 0 PID: 31791 Comm: syz.2.6083 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1603.400237][T31791] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1603.400243][T31791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1603.400252][T31791] Call Trace:
[ 1603.400258][T31791]  <TASK>
[ 1603.400264][T31791]  dump_stack_lvl+0xe8/0x150
[ 1603.400290][T31791]  should_fail_ex+0x3eb/0x540
[ 1603.400325][T31791]  should_failslab+0xa8/0x100
[ 1603.400345][T31791]  __kmalloc_noprof+0xf9/0x710
[ 1603.400361][T31791]  ? tomoyo_encode+0x2ad/0x570
[ 1603.400379][T31791]  ? tomoyo_encode+0x2ad/0x570
[ 1603.400402][T31791]  tomoyo_encode+0x2ad/0x570
[ 1603.400424][T31791]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1603.400450][T31791]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1603.400466][T31791]  tomoyo_path_number_perm+0x246/0x5f0
[ 1603.400484][T31791]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1603.400499][T31791]  ? __lock_acquire+0x747/0x2de0
[ 1603.400539][T31791]  ? __fget_files+0x2a/0x420
[ 1603.400556][T31791]  ? __fget_files+0x2a/0x420
[ 1603.400570][T31791]  ? __fget_files+0x2a/0x420
[ 1603.400587][T31791]  security_file_ioctl+0xc3/0x2a0
[ 1603.400604][T31791]  __se_sys_ioctl+0x47/0x170
[ 1603.400624][T31791]  do_syscall_64+0x166/0x520
[ 1603.400642][T31791]  ? trace_irq_disable+0x3b/0x140
[ 1603.400658][T31791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.400672][T31791]  ? clear_bhb_loop+0x70/0xc0
[ 1603.400688][T31791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.400709][T31791] RIP: 0033:0x7f405639f559
[ 1603.400722][T31791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1603.400734][T31791] RSP: 002b:00007f405726e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1603.400748][T31791] RAX: ffffffffffffffda RBX: 00007f4056626090 RCX: 00007f405639f559
[ 1603.400758][T31791] RDX: 0000000000000000 RSI: 0000000040e8662e RDI: 0000000000000003
[ 1603.400767][T31791] RBP: 00007f405726e090 R08: 0000000000000000 R09: 0000000000000000
[ 1603.400775][T31791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1603.400783][T31791] R13: 00007f4056626128 R14: 00007f4056626090 R15: 00007ffe03f088d8
[ 1603.400804][T31791]  </TASK>
[ 1603.400817][T31791] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1603.791965][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1603.792002][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1603.830303][ T1991] block nbd7: Possible stuck request ffff888029c2e000: control (read@0,4096B). Runtime 150 seconds
[ 1604.578648][ T5630] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1604.753041][ T5630] usb 3-1: Using ep0 maxpacket: 16
[ 1604.767015][ T5630] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[ 1604.782745][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1604.782765][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1604.782779][ T5630] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1604.782804][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.837904][ T5630] usb 3-1: config 0 descriptor??
[ 1605.636381][ T5630] usbhid 3-1:0.0: can't add hid device: -71
[ 1605.636453][ T5630] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1605.663252][ T5630] usb 3-1: USB disconnect, device number 93
[ 1605.762690][T31825] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20004
[ 1605.955463][T31815] NFSD: Failed to start, no listeners configured.
[ 1606.315804][T31833] trusted_key: encrypted_key: insufficient parameters specified
[ 1606.445915][T31836] netlink: 'syz.7.6101': attribute type 2 has an invalid length.
[ 1606.445931][T31836] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6101'.
[ 1606.627997][T31837] FAULT_INJECTION: forcing a failure.
[ 1606.627997][T31837] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1606.628020][T31837] CPU: 0 UID: 0 PID: 31837 Comm: syz.2.6100 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1606.628041][T31837] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1606.628047][T31837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1606.628056][T31837] Call Trace:
[ 1606.628061][T31837]  <TASK>
[ 1606.628067][T31837]  dump_stack_lvl+0xe8/0x150
[ 1606.628093][T31837]  should_fail_ex+0x3eb/0x540
[ 1606.628117][T31837]  get_futex_key+0x1ab/0x1410
[ 1606.628143][T31837]  ? stack_trace_save+0xa9/0x100
[ 1606.628158][T31837]  ? __pfx_get_futex_key+0x10/0x10
[ 1606.628184][T31837]  futex_wake+0x119/0x5f0
[ 1606.628198][T31837]  ? kasan_save_track+0x3e/0x80
[ 1606.628214][T31837]  ? kasan_save_free_info+0x40/0x50
[ 1606.628234][T31837]  ? __kasan_slab_free+0x5c/0x80
[ 1606.628250][T31837]  ? do_syscall_64+0x166/0x520
[ 1606.628268][T31837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1606.628283][T31837]  ? __pfx_futex_wake+0x10/0x10
[ 1606.628307][T31837]  do_futex+0x458/0x4e0
[ 1606.628331][T31837]  ? __pfx_do_futex+0x10/0x10
[ 1606.628358][T31837]  __se_sys_futex+0x3a8/0x450
[ 1606.628383][T31837]  ? __pfx___se_sys_futex+0x10/0x10
[ 1606.628402][T31837]  ? rcu_is_watching+0x16/0xb0
[ 1606.628425][T31837]  ? __x64_sys_futex+0x21/0xf0
[ 1606.628447][T31837]  do_syscall_64+0x166/0x520
[ 1606.628463][T31837]  ? trace_irq_disable+0x3b/0x140
[ 1606.628480][T31837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1606.628493][T31837]  ? clear_bhb_loop+0x70/0xc0
[ 1606.628510][T31837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1606.628523][T31837] RIP: 0033:0x7f405639f559
[ 1606.628542][T31837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1606.628555][T31837] RSP: 002b:00007f405728f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1606.628569][T31837] RAX: ffffffffffffffda RBX: 00007f4056625fa8 RCX: 00007f405639f559
[ 1606.628579][T31837] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4056625fac
[ 1606.628589][T31837] RBP: 00007f4056625fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 1606.628598][T31837] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1606.628607][T31837] R13: 00007f4056626038 R14: 00007ffe03f087f0 R15: 00007ffe03f088d8
[ 1606.628628][T31837]  </TASK>
[ 1606.923693][T31843] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6103'.
[ 1607.038771][T22667] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1607.038829][T22667] Bluetooth: hci1: Injecting HCI hardware error event
[ 1607.042464][ T5649] Bluetooth: hci1: hardware error 0x00
[ 1607.086781][T31845] FAULT_INJECTION: forcing a failure.
[ 1607.086781][T31845] name failslab, interval 1, probability 0, space 10, times 0
[ 1607.086802][T31845] CPU: 0 UID: 0 PID: 31845 Comm: syz.4.6104 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1607.086822][T31845] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1607.086827][T31845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1607.086836][T31845] Call Trace:
[ 1607.086841][T31845]  <TASK>
[ 1607.086847][T31845]  dump_stack_lvl+0xe8/0x150
[ 1607.086871][T31845]  should_fail_ex+0x3eb/0x540
[ 1607.086894][T31845]  should_failslab+0xa8/0x100
[ 1607.086914][T31845]  __kmalloc_cache_noprof+0x9e/0x600
[ 1607.086931][T31845]  ? sctp_transport_new+0x7e/0x620
[ 1607.086947][T31845]  ? sctp_transport_new+0x7e/0x620
[ 1607.086961][T31845]  ? sctp_add_bind_addr+0x8c/0x370
[ 1607.086981][T31845]  sctp_transport_new+0x7e/0x620
[ 1607.086998][T31845]  sctp_assoc_add_peer+0x299/0x1430
[ 1607.087028][T31845]  sctp_connect_new_asoc+0x329/0x6b0
[ 1607.087051][T31845]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1607.087073][T31845]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1607.087093][T31845]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1607.087112][T31845]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1607.087133][T31845]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1607.087150][T31845]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1607.087168][T31845]  sctp_sendmsg+0x159b/0x2d00
[ 1607.087195][T31845]  ? kstrtouint+0x6e/0xe0
[ 1607.087211][T31845]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1607.087230][T31845]  ? lock_acquire+0x115/0x350
[ 1607.087258][T31845]  ? aa_sock_msg_perm+0xfc/0x210
[ 1607.087276][T31845]  ? sock_rps_record_flow+0x19/0x350
[ 1607.087294][T31845]  ? inet_sendmsg+0x298/0x320
[ 1607.087308][T31845]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1607.087325][T31845]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1607.087339][T31845]  sock_sendmsg_nosec+0x10f/0x190
[ 1607.087361][T31845]  __sys_sendto+0x408/0x5a0
[ 1607.087374][T31845]  ? ksys_write+0x1e6/0x270
[ 1607.087393][T31845]  ? __pfx___sys_sendto+0x10/0x10
[ 1607.087405][T31845]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1607.087431][T31845]  ? fdget+0x1ac/0x250
[ 1607.087454][T31845]  ? __pfx_ksys_write+0x10/0x10
[ 1607.087474][T31845]  __x64_sys_sendto+0xde/0x100
[ 1607.087490][T31845]  do_syscall_64+0x166/0x520
[ 1607.087513][T31845]  ? trace_irq_disable+0x3b/0x140
[ 1607.087530][T31845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.087544][T31845]  ? clear_bhb_loop+0x70/0xc0
[ 1607.087560][T31845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.087574][T31845] RIP: 0033:0x7f529219f559
[ 1607.087586][T31845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1607.087598][T31845] RSP: 002b:00007f52903f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1607.087612][T31845] RAX: ffffffffffffffda RBX: 00007f5292425fa0 RCX: 00007f529219f559
[ 1607.087622][T31845] RDX: 0000000000034000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1607.087631][T31845] RBP: 00007f52903f6090 R08: 0000200000000280 R09: 0000000000000010
[ 1607.087641][T31845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1607.087649][T31845] R13: 00007f5292426038 R14: 00007f5292425fa0 R15: 00007ffc09dd1e78
[ 1607.087670][T31845]  </TASK>
[ 1607.648908][T31850] overlayfs: failed to resolve './file0': -2
[ 1608.193140][T31869] FAULT_INJECTION: forcing a failure.
[ 1608.193140][T31869] name failslab, interval 1, probability 0, space 10, times 0
[ 1608.193163][T31869] CPU: 0 UID: 0 PID: 31869 Comm: syz.2.6113 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1608.193183][T31869] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1608.193189][T31869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1608.193198][T31869] Call Trace:
[ 1608.193203][T31869]  <TASK>
[ 1608.193210][T31869]  dump_stack_lvl+0xe8/0x150
[ 1608.193235][T31869]  should_fail_ex+0x3eb/0x540
[ 1608.193258][T31869]  should_failslab+0xa8/0x100
[ 1608.193277][T31869]  ? pidfs_register_pid_gfp+0xa6/0x1c0
[ 1608.193293][T31869]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1608.193309][T31869]  ? pidfs_register_pid_gfp+0xa6/0x1c0
[ 1608.193325][T31869]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1608.193343][T31869]  pidfs_register_pid_gfp+0xa6/0x1c0
[ 1608.193360][T31869]  __pidfs_register_pids+0x60/0xb0
[ 1608.193376][T31869]  prepare_peercred+0x167/0x290
[ 1608.193412][T31869]  unix_stream_connect+0x233/0x1000
[ 1608.193435][T31869]  ? __pfx_unix_stream_connect+0x10/0x10
[ 1608.193453][T31869]  ? kernel_connect+0xf1/0x1c0
[ 1608.193475][T31869]  kernel_connect+0x141/0x1c0
[ 1608.193495][T31869]  ? __pfx_kernel_connect+0x10/0x10
[ 1608.193512][T31869]  ? reacquire_held_locks+0x117/0x1a0
[ 1608.193540][T31869]  ? __local_bh_enable_ip+0xd6/0x140
[ 1608.193561][T31869]  xs_local_connect+0x626/0x810
[ 1608.193578][T31869]  ? __pfx_xs_local_connect+0x10/0x10
[ 1608.193594][T31869]  ? do_raw_spin_unlock+0xf5/0x200
[ 1608.193621][T31869]  xprt_connect+0x613/0x850
[ 1608.193639][T31869]  ? __pfx_call_connect+0x10/0x10
[ 1608.193656][T31869]  __rpc_execute+0x521/0x1280
[ 1608.193683][T31869]  ? __pfx___rpc_execute+0x10/0x10
[ 1608.193701][T31869]  ? rpc_task_get_xprt+0x26/0x250
[ 1608.193723][T31869]  ? rpc_make_runnable+0xae/0x1c0
[ 1608.193741][T31869]  rpc_execute+0x1c1/0x390
[ 1608.193759][T31869]  rpc_run_task+0x4a6/0x660
[ 1608.193781][T31869]  rpc_create_xprt+0x452/0xa90
[ 1608.193801][T31869]  ? __pfx_rpc_create_xprt+0x10/0x10
[ 1608.193828][T31869]  ? trace_kmalloc+0x2a/0xf0
[ 1608.193844][T31869]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[ 1608.193860][T31869]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[ 1608.193875][T31869]  ? xprt_create_transport+0x39b/0x5f0
[ 1608.193894][T31869]  ? xprt_create_transport+0x39b/0x5f0
[ 1608.193914][T31869]  ? kstrdup+0x81/0x100
[ 1608.193927][T31869]  ? __asan_memcpy+0x40/0x70
[ 1608.193946][T31869]  ? xprt_create_transport+0x438/0x5f0
[ 1608.193968][T31869]  rpc_create+0x68a/0x910
[ 1608.193988][T31869]  ? __pfx_rpc_create+0x10/0x10
[ 1608.194011][T31869]  ? trace_contention_end+0x3d/0x140
[ 1608.194050][T31869]  ? net_generic+0x1e/0x240
[ 1608.194067][T31869]  ? net_generic+0x1e/0x240
[ 1608.194088][T31869]  set_gssp_clnt+0x197/0x2f0
[ 1608.194104][T31869]  ? aa_file_perm+0x18b/0x15f0
[ 1608.194125][T31869]  ? __pfx_set_gssp_clnt+0x10/0x10
[ 1608.194153][T31869]  ? _parse_integer_limit+0x18e/0x1e0
[ 1608.194172][T31869]  ? kstrtoull+0x137/0x1d0
[ 1608.194190][T31869]  write_gssp+0x458/0x930
[ 1608.194207][T31869]  ? __pfx_write_gssp+0x10/0x10
[ 1608.194225][T31869]  ? lock_acquire+0x115/0x350
[ 1608.194249][T31869]  ? __pfx_write_gssp+0x10/0x10
[ 1608.194264][T31869]  proc_reg_write+0x1e9/0x2e0
[ 1608.194279][T31869]  ? __pfx_proc_reg_write+0x10/0x10
[ 1608.194292][T31869]  vfs_write+0x296/0xba0
[ 1608.194314][T31869]  ? __pfx_vfs_write+0x10/0x10
[ 1608.194331][T31869]  ? __fget_files+0x2a/0x420
[ 1608.194346][T31869]  ? __fget_files+0x3a2/0x420
[ 1608.194360][T31869]  ? __fget_files+0x2a/0x420
[ 1608.194377][T31869]  ? fdget+0x1ac/0x250
[ 1608.194401][T31869]  ksys_write+0x150/0x270
[ 1608.194419][T31869]  ? __pfx_ksys_write+0x10/0x10
[ 1608.194443][T31869]  do_syscall_64+0x166/0x520
[ 1608.194460][T31869]  ? trace_irq_disable+0x3b/0x140
[ 1608.194477][T31869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1608.194491][T31869]  ? clear_bhb_loop+0x70/0xc0
[ 1608.194508][T31869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1608.194522][T31869] RIP: 0033:0x7f405639f559
[ 1608.194535][T31869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1608.194547][T31869] RSP: 002b:00007f405728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1608.194562][T31869] RAX: ffffffffffffffda RBX: 00007f4056625fa0 RCX: 00007f405639f559
[ 1608.194573][T31869] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[ 1608.194582][T31869] RBP: 00007f4056436b20 R08: 0000000000000000 R09: 0000000000000000
[ 1608.194591][T31869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1608.194599][T31869] R13: 00007f4056626038 R14: 00007f4056625fa0 R15: 00007ffe03f088d8
[ 1608.194622][T31869]  </TASK>
[ 1608.349619][T31869] xs_local_setup_socket: unhandled error (12) connecting to /var/run/gssproxy.sock
[ 1608.915065][T31873] netlink: 'syz.4.6114': attribute type 10 has an invalid length.
[ 1608.915083][T31873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6114'.
[ 1609.167462][T31882] FAULT_INJECTION: forcing a failure.
[ 1609.167462][T31882] name failslab, interval 1, probability 0, space 10, times 0
[ 1609.167484][T31882] CPU: 0 UID: 0 PID: 31882 Comm: syz.2.6119 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1609.167504][T31882] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1609.167509][T31882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1609.167518][T31882] Call Trace:
[ 1609.167524][T31882]  <TASK>
[ 1609.167530][T31882]  dump_stack_lvl+0xe8/0x150
[ 1609.167554][T31882]  should_fail_ex+0x3eb/0x540
[ 1609.167577][T31882]  should_failslab+0xa8/0x100
[ 1609.167595][T31882]  ? security_inode_alloc+0x39/0x310
[ 1609.167615][T31882]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1609.167631][T31882]  ? security_inode_alloc+0x39/0x310
[ 1609.167654][T31882]  security_inode_alloc+0x39/0x310
[ 1609.167674][T31882]  inode_init_always_gfp+0x97e/0xd30
[ 1609.167692][T31882]  alloc_inode+0x82/0x1b0
[ 1609.167706][T31882]  iget_locked+0x12c/0x690
[ 1609.167725][T31882]  kernfs_get_inode+0x4f/0x770
[ 1609.167747][T31882]  kernfs_iop_lookup+0x1fe/0x320
[ 1609.167763][T31882]  __lookup_slow+0x1fb/0x2f0
[ 1609.167781][T31882]  lookup_slow+0x59/0x80
[ 1609.167796][T31882]  link_path_walk+0xd22/0x1910
[ 1609.167824][T31882]  path_openat+0x1b7/0x20f0
[ 1609.167859][T31882]  do_file_open+0x23e/0x4a0
[ 1609.167880][T31882]  ? __pfx_do_file_open+0x10/0x10
[ 1609.167911][T31882]  ? _raw_spin_unlock+0x28/0x50
[ 1609.167926][T31882]  ? alloc_fd+0x6af/0x760
[ 1609.167948][T31882]  do_sys_openat2+0x115/0x200
[ 1609.167971][T31882]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1609.167993][T31882]  ? ksys_write+0x242/0x270
[ 1609.168011][T31882]  ? __pfx_ksys_write+0x10/0x10
[ 1609.168030][T31882]  __x64_sys_openat+0x138/0x170
[ 1609.168046][T31882]  do_syscall_64+0x166/0x520
[ 1609.168062][T31882]  ? trace_irq_disable+0x3b/0x140
[ 1609.168079][T31882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1609.168094][T31882]  ? clear_bhb_loop+0x70/0xc0
[ 1609.168110][T31882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1609.168124][T31882] RIP: 0033:0x7f405639f559
[ 1609.168137][T31882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1609.168149][T31882] RSP: 002b:00007f405728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1609.168164][T31882] RAX: ffffffffffffffda RBX: 00007f4056625fa0 RCX: 00007f405639f559
[ 1609.168174][T31882] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1609.168184][T31882] RBP: 00007f405728f090 R08: 0000000000000000 R09: 0000000000000000
[ 1609.168192][T31882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1609.168200][T31882] R13: 00007f4056626038 R14: 00007f4056625fa0 R15: 00007ffe03f088d8
[ 1609.168222][T31882]  </TASK>
[ 1609.350974][ T5649] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1609.676605][T31885] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6117'.
[ 1610.224007][    T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1610.363710][    T9] usb 3-1: device descriptor read/64, error -71
[ 1610.619832][    T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1610.659402][T31900] netlink: 'syz.7.6126': attribute type 4 has an invalid length.
[ 1610.758772][    T9] usb 3-1: device descriptor read/64, error -71
[ 1610.876887][    T9] usb usb3-port1: attempt power cycle
[ 1611.155031][T31908] fuse: fd is not a fuse device
[ 1611.239676][    T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1611.263167][    T9] usb 3-1: device descriptor read/8, error -71
[ 1611.517785][    T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1611.541981][    T9] usb 3-1: device descriptor read/8, error -71
[ 1611.657447][    T9] usb usb3-port1: unable to enumerate USB device
[ 1612.494502][T31924] netlink: 'syz.4.6135': attribute type 10 has an invalid length.
[ 1613.835044][T31951] netlink: 'syz.2.6146': attribute type 10 has an invalid length.
[ 1613.835065][T31951] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6146'.
[ 1614.101479][T31959] FAULT_INJECTION: forcing a failure.
[ 1614.101479][T31959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1614.101502][T31959] CPU: 0 UID: 0 PID: 31959 Comm: syz.2.6150 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1614.101522][T31959] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1614.101528][T31959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1614.101536][T31959] Call Trace:
[ 1614.101541][T31959]  <TASK>
[ 1614.101547][T31959]  dump_stack_lvl+0xe8/0x150
[ 1614.101571][T31959]  should_fail_ex+0x3eb/0x540
[ 1614.101595][T31959]  _copy_from_user+0x2d/0xb0
[ 1614.101615][T31959]  sockptr_to_sockopt+0xc0/0x3a0
[ 1614.101632][T31959]  ? __pfx_sockptr_to_sockopt+0x10/0x10
[ 1614.101647][T31959]  ? __might_fault+0xaf/0x130
[ 1614.101672][T31959]  do_sock_getsockopt+0x36c/0x640
[ 1614.101691][T31959]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1614.101715][T31959]  ? __fget_files+0x3a2/0x420
[ 1614.101730][T31959]  ? __fget_files+0x2a/0x420
[ 1614.101749][T31959]  __x64_sys_getsockopt+0x1a4/0x240
[ 1614.101770][T31959]  do_syscall_64+0x166/0x520
[ 1614.101787][T31959]  ? trace_irq_disable+0x3b/0x140
[ 1614.101804][T31959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1614.101818][T31959]  ? clear_bhb_loop+0x70/0xc0
[ 1614.101835][T31959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1614.101849][T31959] RIP: 0033:0x7f405639f559
[ 1614.101861][T31959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1614.101873][T31959] RSP: 002b:00007f405728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1614.101887][T31959] RAX: ffffffffffffffda RBX: 00007f4056625fa0 RCX: 00007f405639f559
[ 1614.101897][T31959] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000003
[ 1614.101906][T31959] RBP: 00007f405728f090 R08: 00002000000192c0 R09: 0000000000000000
[ 1614.101916][T31959] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[ 1614.101924][T31959] R13: 00007f4056626038 R14: 00007f4056625fa0 R15: 00007ffe03f088d8
[ 1614.101945][T31959]  </TASK>
[ 1614.824870][T31975] tmpfs: Too few inodes for current use
[ 1615.413122][T31985] /dev/nullb0: Can't lookup blockdev
[ 1615.755334][T31993] netlink: 'syz.2.6164': attribute type 29 has an invalid length.
[ 1615.781370][T31993] netlink: 'syz.2.6164': attribute type 29 has an invalid length.
[ 1616.414692][   T32] audit: type=1326 audit(1796029742.950:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32002 comm="syz.9.6170" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63ec99f559 code=0x0
[ 1616.417206][T32008] netlink: 'syz.2.6171': attribute type 10 has an invalid length.
[ 1616.421983][T32008] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[ 1616.740148][ T5649] Bluetooth: hci5: unexpected event for opcode 0x204e
[ 1616.864263][   T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1617.026358][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1617.027491][   T10] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1617.028317][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1617.028333][   T10] usb 3-1: config 179 has no interface number 0
[ 1617.028358][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1617.028374][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1617.028391][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1617.028407][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1617.028424][   T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1617.028449][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.147346][T32013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1617.421679][ T5748] usb 3-1: USB disconnect, device number 98
[ 1617.421778][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1617.421814][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1618.530923][T32037] FAULT_INJECTION: forcing a failure.
[ 1618.530923][T32037] name failslab, interval 1, probability 0, space 10, times 0
[ 1618.531796][T32037] CPU: 0 UID: 0 PID: 32037 Comm: syz.2.6182 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1618.531818][T32037] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1618.531824][T32037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1618.531832][T32037] Call Trace:
[ 1618.531838][T32037]  <TASK>
[ 1618.531844][T32037]  dump_stack_lvl+0xe8/0x150
[ 1618.531868][T32037]  should_fail_ex+0x3eb/0x540
[ 1618.531892][T32037]  should_failslab+0xa8/0x100
[ 1618.531912][T32037]  __kmalloc_noprof+0xf9/0x710
[ 1618.531927][T32037]  ? tomoyo_encode+0x2ad/0x570
[ 1618.531945][T32037]  ? tomoyo_encode+0x2ad/0x570
[ 1618.531968][T32037]  tomoyo_encode+0x2ad/0x570
[ 1618.531990][T32037]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1618.532016][T32037]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1618.532032][T32037]  tomoyo_path_number_perm+0x246/0x5f0
[ 1618.532050][T32037]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1618.532065][T32037]  ? __lock_acquire+0x747/0x2de0
[ 1618.532105][T32037]  ? __fget_files+0x2a/0x420
[ 1618.532122][T32037]  ? __fget_files+0x2a/0x420
[ 1618.532136][T32037]  ? __fget_files+0x2a/0x420
[ 1618.532153][T32037]  security_file_ioctl+0xc3/0x2a0
[ 1618.532170][T32037]  __se_sys_ioctl+0x47/0x170
[ 1618.532190][T32037]  do_syscall_64+0x166/0x520
[ 1618.532207][T32037]  ? trace_irq_disable+0x3b/0x140
[ 1618.532224][T32037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.532238][T32037]  ? clear_bhb_loop+0x70/0xc0
[ 1618.532254][T32037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.532267][T32037] RIP: 0033:0x7f405639f559
[ 1618.532280][T32037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1618.532292][T32037] RSP: 002b:00007f405728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1618.532307][T32037] RAX: ffffffffffffffda RBX: 00007f4056625fa0 RCX: 00007f405639f559
[ 1618.532317][T32037] RDX: 0000200000000300 RSI: 0000000000004b72 RDI: 0000000000000003
[ 1618.532326][T32037] RBP: 00007f405728f090 R08: 0000000000000000 R09: 0000000000000000
[ 1618.532335][T32037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1618.532343][T32037] R13: 00007f4056626038 R14: 00007f4056625fa0 R15: 00007ffe03f088d8
[ 1618.532364][T32037]  </TASK>
[ 1618.532376][T32037] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1618.919604][T32041] fuse: Bad value for 'fd'
[ 1618.919748][T32042] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6183'.
[ 1619.934000][T32058] netlink: 'syz.7.6190': attribute type 19 has an invalid length.
[ 1620.666765][   T32] audit: type=1800 audit(1796029746.925:142): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.6195" name="/newroot/dev/kvm" dev="tmpfs" ino=1260 res=0 errno=-13
[ 1620.841034][ T5748] usb 3-1: new low-speed USB device number 99 using dummy_hcd
[ 1621.005583][ T5748] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1621.005614][ T5748] usb 3-1: New USB device found: idVendor=046d, idProduct=0921, bcdDevice=89.dc
[ 1621.008388][ T5748] usb 3-1: config 129 has an invalid interface number: 195 but max is 0
[ 1621.008404][ T5748] usb 3-1: config 129 has no interface number 0
[ 1621.008422][ T5748] usb 3-1: config 129 interface 195 has no altsetting 0
[ 1621.057044][ T5748] usb 3-1: string descriptor 0 read error: -22
[ 1621.057125][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.104126][ T5748] gspca_main: tv8532-2.14.0 probing 046d:0921
[ 1621.394505][ T5748] usb 3-1: USB disconnect, device number 99
[ 1621.440942][T32078] tipc: Started in network mode
[ 1621.440962][T32078] tipc: Node identity ac14140f, cluster identity 4711
[ 1621.441100][T32078] tipc: New replicast peer: 255.255.255.255
[ 1621.441494][T32078] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1621.819913][T32085] No control pipe specified
[ 1622.026202][T32090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6200'.
[ 1622.654310][   T10] tipc: Node number set to 2886997007
[ 1622.788442][T32105] scsi_strcpy_devinfo: vendor string '�QT�?��]�+�,r' is too long
[ 1623.028167][T32111] Invalid logical block size (33554432)
[ 1623.519328][T26583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.837590][T26583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.996074][T26583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1624.156732][T26583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1624.266890][T22667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1624.283227][T22667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1624.296091][T22667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1624.296849][T22667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1624.298823][T22667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1624.853300][T26583] bridge_slave_1: left allmulticast mode
[ 1624.853320][T26583] bridge_slave_1: left promiscuous mode
[ 1624.853447][T26583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1624.887818][T26583] bridge_slave_0: left allmulticast mode
[ 1624.887833][T26583] bridge_slave_0: left promiscuous mode
[ 1624.888629][T26583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1625.330085][T26583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1625.346573][T26583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1625.347591][T26583] bond0 (unregistering): Released all slaves
[ 1625.457547][T26583] tipc: Disabling bearer <udp:s>
[ 1625.474969][T26583] tipc: Left network mode
[ 1626.089186][T32124] rxe_eth0 speed is unknown, defaulting to 1000
[ 1626.456230][ T5649] Bluetooth: hci3: command tx timeout
[ 1626.847545][T32124] lo speed is unknown, defaulting to 1000
[ 1626.912040][T32152] netlink: 4516 bytes leftover after parsing attributes in process `syz.7.6222'.
[ 1627.345712][T32156] xt_connbytes: Forcing CT accounting to be enabled
[ 1627.666529][T32124] wg1 speed is unknown, defaulting to 1000
[ 1628.134852][T32165] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6228'.
[ 1628.207608][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6228'.
[ 1628.208263][T32165] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6228'.
[ 1628.208343][T26583] hsr_slave_0: left promiscuous mode
[ 1628.212248][T26583] hsr_slave_1: left promiscuous mode
[ 1628.212806][T26583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1628.212819][T26583] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1628.213332][T26583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1628.213343][T26583] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1628.290733][T26583] veth1_macvtap: left promiscuous mode
[ 1628.290758][T26583] veth0_macvtap: left promiscuous mode
[ 1628.290830][T26583] veth1_vlan: left promiscuous mode
[ 1628.290870][T26583] veth0_vlan: left promiscuous mode
[ 1628.678656][ T5649] Bluetooth: hci3: command tx timeout
[ 1628.910639][T26583] team0 (unregistering): Port device team_slave_1 removed
[ 1628.949766][T26583] team0 (unregistering): Port device team_slave_0 removed
[ 1629.766799][T32124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1629.766896][T32124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1629.766987][T32124] bridge_slave_0: entered allmulticast mode
[ 1629.792409][T32124] bridge_slave_0: entered promiscuous mode
[ 1629.803171][T32124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1629.804672][T32124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1629.804759][T32124] bridge_slave_1: entered allmulticast mode
[ 1629.809388][T32124] bridge_slave_1: entered promiscuous mode
[ 1629.902000][T32124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1629.921204][T32124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1630.000233][T32124] team0: Port device team_slave_0 added
[ 1630.011630][T32124] team0: Port device team_slave_1 added
[ 1630.077538][T32124] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1630.077549][T32124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1630.077566][T32124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1630.125866][T32124] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1630.125877][T32124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1630.125894][T32124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1630.259378][T32124] hsr_slave_0: entered promiscuous mode
[ 1630.267579][T32124] hsr_slave_1: entered promiscuous mode
[ 1630.269516][T32124] debugfs: 'hsr0' already exists in 'hsr'
[ 1630.269529][T32124] Cannot create hsr debugfs directory
[ 1630.902648][ T5649] Bluetooth: hci3: command tx timeout
[ 1631.648125][T32124] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1631.667678][T32124] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1631.668527][T32124] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1631.695134][T32124] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1631.695635][T32124] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1631.722409][T32124] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1631.723259][T32124] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1631.746019][T32124] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1631.806951][T32186] overlayfs: missing 'lowerdir'
[ 1631.820119][T32191] overlayfs: missing 'lowerdir'
[ 1631.986935][T32124] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1632.021926][T32124] 8021q: adding VLAN 0 to HW filter on device team0
[ 1632.044163][T26587] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1632.044227][T26587] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1632.071344][T26587] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1632.071420][T26587] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1632.161544][T32124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1633.035650][T32124] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1633.129603][ T5649] Bluetooth: hci3: command tx timeout
[ 1633.144031][T32124] veth0_vlan: entered promiscuous mode
[ 1633.167947][T32124] veth1_vlan: entered promiscuous mode
[ 1633.230189][T32124] veth0_macvtap: entered promiscuous mode
[ 1633.249204][T32124] veth1_macvtap: entered promiscuous mode
[ 1633.322317][T32124] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1633.349637][T32124] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1633.464631][T26583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.465381][T26583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.465405][T26583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.465427][T26583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.677179][T22827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1633.677193][T22827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1633.783939][T22827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1633.783952][T22827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.387132][T32219] CacheFiles: Empty directory specified
[ 1634.765965][T32230] Bluetooth: MGMT ver 1.23
[ 1635.019661][T22667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1635.038633][T22667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1635.057329][T22667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1635.058817][T22667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1635.059231][T22667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1635.165084][T32234] block2mtd: error: cannot open device #! ./mnt ].
[ 1635.654079][T32245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6246'.
[ 1635.991751][ T1991] block nbd7: Possible stuck request ffff888029c2e000: control (read@0,4096B). Runtime 180 seconds
[ 1636.018686][T32259] FAULT_INJECTION: forcing a failure.
[ 1636.018686][T32259] name failslab, interval 1, probability 0, space 10, times 0
[ 1636.018710][T32259] CPU: 0 UID: 0 PID: 32259 Comm: syz.4.6248 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1636.018733][T32259] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1636.018740][T32259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1636.018750][T32259] Call Trace:
[ 1636.018756][T32259]  <TASK>
[ 1636.018763][T32259]  dump_stack_lvl+0xe8/0x150
[ 1636.018794][T32259]  should_fail_ex+0x3eb/0x540
[ 1636.018821][T32259]  should_failslab+0xa8/0x100
[ 1636.018845][T32259]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1636.018870][T32259]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1636.018886][T32259]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1636.018909][T32259]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 1636.018924][T32259]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1636.018953][T32259]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1636.018986][T32259]  mmu_topup_memory_caches+0x21/0x1a0
[ 1636.019006][T32259]  kvm_mmu_load+0x9d/0x21e0
[ 1636.019025][T32259]  ? kvm_msr_allowed+0x9a/0x490
[ 1636.019041][T32259]  ? kvm_msr_allowed+0x9a/0x490
[ 1636.019057][T32259]  ? kvm_msr_allowed+0x9a/0x490
[ 1636.019072][T32259]  ? kvm_msr_allowed+0x3f4/0x490
[ 1636.019088][T32259]  ? kvm_msr_allowed+0x9a/0x490
[ 1636.019103][T32259]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1636.019135][T32259]  vcpu_run+0x4f5b/0x7a90
[ 1636.019176][T32259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.019219][T32259]  ? __pfx_vcpu_run+0x10/0x10
[ 1636.019235][T32259]  ? lock_acquire+0x115/0x350
[ 1636.019258][T32259]  ? fpu_swap_kvm_fpstate+0xbe/0x510
[ 1636.019280][T32259]  ? vmx_unhandleable_emulation_required+0x77/0x230
[ 1636.019310][T32259]  kvm_arch_vcpu_ioctl_run+0xe83/0x18b0
[ 1636.019339][T32259]  ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0
[ 1636.019365][T32259]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[ 1636.019387][T32259]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1636.019408][T32259]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1636.019440][T32259]  ? __fget_files+0x2a/0x420
[ 1636.019461][T32259]  ? __fget_files+0x2a/0x420
[ 1636.019478][T32259]  ? __fget_files+0x2a/0x420
[ 1636.019499][T32259]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1636.019520][T32259]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1636.019537][T32259]  __se_sys_ioctl+0xfc/0x170
[ 1636.019568][T32259]  do_syscall_64+0x166/0x520
[ 1636.019591][T32259]  ? trace_irq_disable+0x3b/0x140
[ 1636.019611][T32259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.019627][T32259]  ? clear_bhb_loop+0x70/0xc0
[ 1636.019646][T32259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.019662][T32259] RIP: 0033:0x7f529219f559
[ 1636.019676][T32259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1636.019690][T32259] RSP: 002b:00007f52903d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1636.019718][T32259] RAX: ffffffffffffffda RBX: 00007f5292426090 RCX: 00007f529219f559
[ 1636.019730][T32259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1636.019751][T32259] RBP: 00007f52903d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1636.019759][T32259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1636.019768][T32259] R13: 00007f5292426128 R14: 00007f5292426090 R15: 00007ffc09dd1e78
[ 1636.019789][T32259]  </TASK>
[ 1636.488943][T32260] fuse: fd is not a fuse device
[ 1636.593133][T32266] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6250'.
[ 1636.906138][T32236] rxe_eth0 speed is unknown, defaulting to 1000
[ 1637.318202][T22667] Bluetooth: hci4: command tx timeout
[ 1637.434964][T32265] netlink: 'syz.3.6251': attribute type 3 has an invalid length.
[ 1637.543838][T32236] lo speed is unknown, defaulting to 1000
[ 1637.894864][T32280] FAULT_INJECTION: forcing a failure.
[ 1637.894864][T32280] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1637.894888][T32280] CPU: 0 UID: 0 PID: 32280 Comm: syz.3.6255 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1637.894908][T32280] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1637.894914][T32280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1637.894922][T32280] Call Trace:
[ 1637.894928][T32280]  <TASK>
[ 1637.894933][T32280]  dump_stack_lvl+0xe8/0x150
[ 1637.894960][T32280]  should_fail_ex+0x3eb/0x540
[ 1637.894983][T32280]  prepare_alloc_pages+0x21e/0x5f0
[ 1637.895004][T32280]  __alloc_frozen_pages_noprof+0x17c/0x410
[ 1637.895023][T32280]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1637.895043][T32280]  ? trace_mm_page_alloc+0x3f/0x170
[ 1637.895059][T32280]  ? policy_nodemask+0x31b/0x980
[ 1637.895078][T32280]  ? __alloc_frozen_pages_noprof+0x24c/0x410
[ 1637.895097][T32280]  alloc_pages_mpol+0x21e/0x390
[ 1637.895121][T32280]  alloc_pages_noprof+0xb1/0x2b0
[ 1637.895142][T32280]  kimage_alloc_pages+0xbe/0x3c0
[ 1637.895163][T32280]  kimage_alloc_control_pages+0x49b/0xbc0
[ 1637.895185][T32280]  ? kimage_alloc_pages+0x2a0/0x3c0
[ 1637.895202][T32280]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[ 1637.895219][T32280]  ? kimage_alloc_control_pages+0xae8/0xbc0
[ 1637.895238][T32280]  ? __pfx_alloc_pgt_page+0x10/0x10
[ 1637.895259][T32280]  alloc_pgt_page+0xe/0x90
[ 1637.895278][T32280]  ident_pud_init+0x2c7/0x5f0
[ 1637.895303][T32280]  ident_p4d_init+0x1b4/0x390
[ 1637.895323][T32280]  ? kimage_alloc_control_pages+0xae8/0xbc0
[ 1637.895346][T32280]  kernel_ident_mapping_init+0x38b/0x680
[ 1637.895374][T32280]  machine_kexec_prepare+0x320/0x1710
[ 1637.895400][T32280]  ? __pfx_machine_kexec_prepare+0x10/0x10
[ 1637.895422][T32280]  ? __pfx_alloc_pgt_page+0x10/0x10
[ 1637.895461][T32280]  do_kexec_load+0x5ee/0x7c0
[ 1637.895483][T32280]  ? __pfx_do_kexec_load+0x10/0x10
[ 1637.895504][T32280]  ? _copy_from_user+0x94/0xb0
[ 1637.895526][T32280]  __se_sys_kexec_load+0x134/0x160
[ 1637.895547][T32280]  do_syscall_64+0x166/0x520
[ 1637.895564][T32280]  ? trace_irq_disable+0x3b/0x140
[ 1637.895581][T32280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.895596][T32280]  ? clear_bhb_loop+0x70/0xc0
[ 1637.895612][T32280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.895626][T32280] RIP: 0033:0x7f72cab9f559
[ 1637.895639][T32280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.895651][T32280] RSP: 002b:00007f72cba4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[ 1637.895666][T32280] RAX: ffffffffffffffda RBX: 00007f72cae25fa0 RCX: 00007f72cab9f559
[ 1637.895677][T32280] RDX: 0000200000000b00 RSI: 0000000000000001 RDI: 0000000000000000
[ 1637.895686][T32280] RBP: 00007f72cac36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1637.895694][T32280] R10: 2000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1637.895706][T32280] R13: 00007f72cae26038 R14: 00007f72cae25fa0 R15: 00007ffdb66121d8
[ 1637.895727][T32280]  </TASK>
[ 1638.251240][T32282] netlink: Conntrack attr has 12 unknown bytes
[ 1638.251263][T32282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1638.439421][T32236] wg1 speed is unknown, defaulting to 1000
[ 1638.724611][T32290] Bluetooth: MGMT ver 1.23
[ 1639.365881][T32236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1639.367544][T32236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1639.399680][T32236] bridge_slave_0: entered allmulticast mode
[ 1639.416213][T32236] bridge_slave_0: entered promiscuous mode
[ 1639.429791][T32236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1639.429854][T32236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1639.430089][T32236] bridge_slave_1: entered allmulticast mode
[ 1639.458107][T32236] bridge_slave_1: entered promiscuous mode
[ 1639.541899][ T5649] Bluetooth: hci4: command tx timeout
[ 1639.562519][T32236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1639.571122][T32236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1639.599201][T32308] fuse: fd is not a fuse device
[ 1639.682598][T32236] team0: Port device team_slave_0 added
[ 1639.689837][T32236] team0: Port device team_slave_1 added
[ 1639.810417][T32236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1639.810428][T32236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1639.810445][T32236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1639.864404][T32236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1639.864415][T32236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1639.864432][T32236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1640.052083][T32236] hsr_slave_0: entered promiscuous mode
[ 1640.070846][T32236] hsr_slave_1: entered promiscuous mode
[ 1640.071262][T32236] debugfs: 'hsr0' already exists in 'hsr'
[ 1640.071274][T32236] Cannot create hsr debugfs directory
[ 1640.177439][T26584] IPVS: starting estimator thread 0...
[ 1640.268660][T32318] IPVS: using max 49 ests per chain, 117600 per kthread
[ 1640.677736][T32324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6269'.
[ 1641.252563][ T5630] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1641.412637][ T5630] usb 4-1: Using ep0 maxpacket: 32
[ 1641.415821][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1641.415850][ T5630] usb 4-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40
[ 1641.418113][ T5630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.418127][ T5630] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1641.420761][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.420776][ T5630] usb 4-1: Product: syz
[ 1641.420786][ T5630] usb 4-1: Manufacturer: syz
[ 1641.420795][ T5630] usb 4-1: SerialNumber: syz
[ 1641.746862][ T5630] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[ 1641.746944][ T5630] usb 4-1: 1:1 : unsupported format bits 0x2002
[ 1641.746990][ T5630] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1641.769856][ T5649] Bluetooth: hci4: command tx timeout
[ 1641.800277][ T5630] usb 4-1: unit 37 not found!
[ 1641.800291][ T5630] usb 4-1: unit 0 not found!
[ 1641.910872][T32236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1641.930501][T32236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1641.931104][T32236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1641.964546][ T5630] usb 4-1: USB disconnect, device number 21
[ 1641.967003][T32236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1641.967506][T32236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1642.021050][T32236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1642.033497][T32236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1642.083717][T32236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1642.138625][T28245] udevd[28245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1642.619358][T32236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1642.670589][T32236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1642.691778][T26584] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1642.691841][T26584] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1642.731550][T26583] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1642.731623][T26583] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1643.414117][T32363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6281'.
[ 1643.989095][ T5649] Bluetooth: hci4: command tx timeout
[ 1644.383561][T32236] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1644.494477][T32236] veth0_vlan: entered promiscuous mode
[ 1644.544353][T32236] veth1_vlan: entered promiscuous mode
[ 1644.645394][T32236] veth0_macvtap: entered promiscuous mode
[ 1644.665367][T32236] veth1_macvtap: entered promiscuous mode
[ 1644.714863][T32236] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1644.740446][T32236] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1644.746596][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6284'.
[ 1644.854912][T31513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.854941][T31513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.854962][T31513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.854983][T31513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.025263][T22827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1645.025276][T22827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1645.048886][ T5748] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[ 1645.125972][T26583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1645.125985][T26583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1645.210099][ T5748] usb 4-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1645.210934][ T5748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1645.212609][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.212624][ T5748] usb 4-1: Product: syz
[ 1645.212634][ T5748] usb 4-1: Manufacturer: syz
[ 1645.212643][ T5748] usb 4-1: SerialNumber: syz
[ 1645.239507][ T5748] usb 4-1: config 0 descriptor??
[ 1645.525111][T32390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6240'.
[ 1645.652328][    T9] usb 4-1: USB disconnect, device number 22
[ 1645.764216][T32396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1645.764484][T32396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1645.999829][ T5630] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1646.161984][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1646.165328][ T5630] usb 2-1: not running at top speed; connect to a high speed hub
[ 1646.165348][ T5630] usb 2-1: New USB device found: idVendor=1235, idProduct=000a, bcdDevice=0.40
[ 1646.169138][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.169154][ T5630] usb 2-1: Product: syz
[ 1646.169163][ T5630] usb 2-1: Manufacturer: syz
[ 1646.169173][ T5630] usb 2-1: SerialNumber: syz
[ 1646.472979][ T5630] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1646.567839][   T32] audit: type=1326 audit(1796029771.158:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32402 comm="syz.7.6291" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cf219f559 code=0x0
[ 1646.635846][ T5630] usb 2-1: USB disconnect, device number 114
[ 1646.709299][T28247] udevd[28247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1647.570600][T23750] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1647.624678][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1647.656422][T32420] loop9: detected capacity change from 0 to 524287936
[ 1647.735206][T23750] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[ 1647.736408][T23750] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10
[ 1647.736428][T23750] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024
[ 1647.736452][T23750] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 1647.736466][T23750] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[ 1647.738119][T23750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1647.738134][T23750] usb 2-1: Product: syz
[ 1647.738143][T23750] usb 2-1: Manufacturer: syz
[ 1647.738153][T23750] usb 2-1: SerialNumber: syz
[ 1647.786151][    T9] usb 4-1: device descriptor read/64, error -71
[ 1647.835769][T32415] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1648.041106][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1648.182949][    T9] usb 4-1: device descriptor read/64, error -71
[ 1648.206294][T23750] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 1648.206322][T23750] cdc_ncm 2-1:1.0: bind() failure
[ 1648.248714][T23750] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1648.248742][T23750] cdc_ncm 2-1:1.1: bind() failure
[ 1648.286365][T23750] usb 2-1: USB disconnect, device number 115
[ 1648.297983][    T9] usb usb4-port1: attempt power cycle
[ 1648.539455][T32423] netlink: 'syz.7.6299': attribute type 10 has an invalid length.
[ 1648.558481][T32423] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1648.559688][T32423] team0: Port device netdevsim1 added
[ 1648.661879][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1648.687233][    T9] usb 4-1: device descriptor read/8, error -71
[ 1648.939429][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1648.965344][    T9] usb 4-1: device descriptor read/8, error -71
[ 1649.078432][    T9] usb usb4-port1: unable to enumerate USB device
[ 1650.237593][T32452] FAULT_INJECTION: forcing a failure.
[ 1650.237593][T32452] name failslab, interval 1, probability 0, space 10, times 0
[ 1650.237618][T32452] CPU: 0 UID: 0 PID: 32452 Comm: syz.1.6307 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1650.237643][T32452] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1650.237649][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1650.237658][T32452] Call Trace:
[ 1650.237663][T32452]  <TASK>
[ 1650.237669][T32452]  dump_stack_lvl+0xe8/0x150
[ 1650.237694][T32452]  should_fail_ex+0x3eb/0x540
[ 1650.237717][T32452]  should_failslab+0xa8/0x100
[ 1650.237738][T32452]  __kmalloc_cache_noprof+0x9e/0x600
[ 1650.237754][T32452]  ? __init_waitqueue_head+0xa8/0x150
[ 1650.237773][T32452]  ? device_add+0xb6/0xb80
[ 1650.237790][T32452]  ? device_add+0xb6/0xb80
[ 1650.237809][T32452]  device_add+0xb6/0xb80
[ 1650.237823][T32452]  ? add_one_compat_dev+0x3f6/0x640
[ 1650.237841][T32452]  add_one_compat_dev+0x416/0x640
[ 1650.237859][T32452]  rdma_dev_init_net+0x23e/0x2f0
[ 1650.237873][T32452]  ? __pfx_rdma_dev_init_net+0x10/0x10
[ 1650.237887][T32452]  ? __kmalloc_noprof+0x1a6/0x710
[ 1650.237900][T32452]  ? ops_init+0x7b/0x5d0
[ 1650.237919][T32452]  ops_init+0x35d/0x5d0
[ 1650.237939][T32452]  setup_net+0x118/0x350
[ 1650.237962][T32452]  ? __pfx_setup_net+0x10/0x10
[ 1650.237983][T32452]  ? down_read_killable+0x1b6/0x3b0
[ 1650.238004][T32452]  ? __ns_common_init+0x384/0x590
[ 1650.238027][T32452]  copy_net_ns+0x536/0x770
[ 1650.238050][T32452]  create_new_namespaces+0x3f0/0x6b0
[ 1650.238071][T32452]  ? security_capable+0x7e/0x2c0
[ 1650.238094][T32452]  unshare_nsproxy_namespaces+0x144/0x190
[ 1650.238115][T32452]  ksys_unshare+0x532/0x890
[ 1650.238135][T32452]  ? __pfx_ksys_unshare+0x10/0x10
[ 1650.238156][T32452]  ? rcu_is_watching+0x16/0xb0
[ 1650.238182][T32452]  __x64_sys_unshare+0x38/0x50
[ 1650.238200][T32452]  do_syscall_64+0x166/0x520
[ 1650.238216][T32452]  ? trace_irq_disable+0x3b/0x140
[ 1650.238233][T32452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1650.238247][T32452]  ? clear_bhb_loop+0x70/0xc0
[ 1650.238264][T32452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1650.238277][T32452] RIP: 0033:0x7fb42459f559
[ 1650.238290][T32452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1650.238302][T32452] RSP: 002b:00007fb4254b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1650.238316][T32452] RAX: ffffffffffffffda RBX: 00007fb424825fa0 RCX: 00007fb42459f559
[ 1650.238326][T32452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[ 1650.238335][T32452] RBP: 00007fb424636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1650.238343][T32452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1650.238351][T32452] R13: 00007fb424826038 R14: 00007fb424825fa0 R15: 00007ffc4333e848
[ 1650.238373][T32452]  </TASK>
[ 1651.264203][T32474] FAULT_INJECTION: forcing a failure.
[ 1651.264203][T32474] name failslab, interval 1, probability 0, space 10, times 0
[ 1651.264249][T32474] CPU: 0 UID: 0 PID: 32474 Comm: syz.4.6310 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1651.264270][T32474] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1651.264275][T32474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1651.264284][T32474] Call Trace:
[ 1651.264289][T32474]  <TASK>
[ 1651.264295][T32474]  dump_stack_lvl+0xe8/0x150
[ 1651.264320][T32474]  should_fail_ex+0x3eb/0x540
[ 1651.264344][T32474]  should_failslab+0xa8/0x100
[ 1651.264363][T32474]  ? __kernfs_new_node+0xe6/0x980
[ 1651.264384][T32474]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1651.264400][T32474]  ? __kernfs_new_node+0xe6/0x980
[ 1651.264424][T32474]  __kernfs_new_node+0xe6/0x980
[ 1651.264450][T32474]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1651.264471][T32474]  ? kernfs_root+0x1c/0x230
[ 1651.264494][T32474]  ? kernfs_root+0x1c/0x230
[ 1651.264513][T32474]  ? kernfs_root+0x1c/0x230
[ 1651.264530][T32474]  ? kernfs_root+0x1c/0x230
[ 1651.264552][T32474]  kernfs_new_node+0xeb/0x140
[ 1651.264582][T32474]  kernfs_create_link+0xe3/0x240
[ 1651.264600][T32474]  sysfs_do_create_link_sd+0x83/0x110
[ 1651.264621][T32474]  device_add_class_symlinks+0xb6/0x240
[ 1651.264641][T32474]  device_add+0x467/0xb80
[ 1651.264658][T32474]  netdev_register_kobject+0x197/0x350
[ 1651.264684][T32474]  register_netdevice+0x17be/0x2280
[ 1651.264701][T32474]  ? alloc_netdev_mqs+0xd5b/0x1240
[ 1651.264729][T32474]  ? __pfx_register_netdevice+0x10/0x10
[ 1651.264746][T32474]  ? tun_net_initialize+0x199/0x460
[ 1651.264764][T32474]  ? __pfx_tun_net_initialize+0x10/0x10
[ 1651.264780][T32474]  ? alloc_netdev_mqs+0xe77/0x1240
[ 1651.264803][T32474]  tun_set_iff+0x830/0xf30
[ 1651.264822][T32474]  __tun_chr_ioctl+0x7e5/0x1e70
[ 1651.264842][T32474]  ? __pfx___tun_chr_ioctl+0x10/0x10
[ 1651.264856][T32474]  ? __fget_files+0x2a/0x420
[ 1651.264875][T32474]  ? __fget_files+0x2a/0x420
[ 1651.264892][T32474]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1651.264910][T32474]  ? __pfx_tun_chr_ioctl+0x10/0x10
[ 1651.264924][T32474]  __se_sys_ioctl+0xfc/0x170
[ 1651.264944][T32474]  do_syscall_64+0x166/0x520
[ 1651.264961][T32474]  ? trace_irq_disable+0x3b/0x140
[ 1651.264978][T32474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1651.264992][T32474]  ? clear_bhb_loop+0x70/0xc0
[ 1651.265008][T32474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1651.265022][T32474] RIP: 0033:0x7f529219f559
[ 1651.265035][T32474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1651.265046][T32474] RSP: 002b:00007f5290393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1651.265061][T32474] RAX: ffffffffffffffda RBX: 00007f5292426270 RCX: 00007f529219f559
[ 1651.265071][T32474] RDX: 0000200000001c40 RSI: 00000000400454ca RDI: 0000000000000008
[ 1651.265080][T32474] RBP: 00007f5292236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1651.265089][T32474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1651.265097][T32474] R13: 00007f5292426308 R14: 00007f5292426270 R15: 00007ffc09dd1e78
[ 1651.265118][T32474]  </TASK>
[ 1652.478488][T23750] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1652.640325][T23750] usb 4-1: New USB device found: idVendor=2b73, idProduct=0034, bcdDevice=0.40
[ 1652.641207][T23750] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7
[ 1652.641234][T23750] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 74, changing to 7
[ 1652.642877][T23750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.642892][T23750] usb 4-1: Product: syz
[ 1652.642902][T23750] usb 4-1: Manufacturer: syz
[ 1652.642911][T23750] usb 4-1: SerialNumber: syz
[ 1654.262595][T32465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1654.972194][T32502] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1654.972226][T32502] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1654.975267][T32506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6321'.
[ 1655.344645][ T5630] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1655.352092][T23750] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1655.371735][T23750] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1655.503940][ T5630] usb 2-1: Using ep0 maxpacket: 32
[ 1655.507344][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1655.507374][ T5630] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1655.508364][ T5630] usb 2-1: config 14 has an invalid interface number: 57 but max is 0
[ 1655.508379][ T5630] usb 2-1: config 14 has no interface number 0
[ 1655.508404][ T5630] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1655.510231][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.510247][ T5630] usb 2-1: Product: syz
[ 1655.510256][ T5630] usb 2-1: Manufacturer: syz
[ 1655.510265][ T5630] usb 2-1: SerialNumber: syz
[ 1655.612709][T23750] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1655.646080][T23750] usb 4-1: USB disconnect, device number 27
[ 1655.662292][T32517] netlink: NAT attribute has 8 unknown bytes
[ 1655.662336][T32517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1655.759494][T28248] udevd[28248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1656.659556][T23750] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1656.825653][T23750] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1656.825685][T23750] usb 4-1: New USB device found: idVendor=0404, idProduct=0312, bcdDevice=42.c1
[ 1656.828563][T23750] usb 4-1: config 160 has an invalid interface number: 168 but max is 0
[ 1656.828580][T23750] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[ 1656.828592][T23750] usb 4-1: config 160 has no interface number 0
[ 1656.828618][T23750] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1656.828650][T23750] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 65077, setting to 1024
[ 1656.828668][T23750] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1656.828683][T23750] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0x23, changing to 0x3
[ 1656.828699][T23750] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x3 has an invalid bInterval 57, changing to 9
[ 1656.828715][T23750] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x3 has invalid maxpacket 2046, setting to 1024
[ 1656.828731][T23750] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[ 1656.828745][T23750] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0xA has invalid maxpacket 920
[ 1656.828760][T23750] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89
[ 1656.828791][T23750] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1656.828807][T23750] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1656.828820][T23750] usb 4-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 1656.828836][T23750] usb 4-1: config 160 interface 168 has no altsetting 0
[ 1657.051088][T23750] usb 4-1: string descriptor 0 read error: -22
[ 1657.051205][T23750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.074764][T32528] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1657.074927][T32528] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1657.075072][T32528] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1657.111462][T23750] io_edgeport 4-1:160.168: EPiC device converter detected
[ 1657.113884][T23750] usb 4-1:   detected
[ 1657.317334][T23750] usb 4-1: edge_startup - Error -90 submitting control urb
[ 1657.317665][T23750] io_edgeport 4-1:160.168: probe with driver io_edgeport failed with error -90
[ 1657.556169][T23750] usb 4-1: USB disconnect, device number 28
[ 1658.038164][   T32] audit: type=1326 audit(1796029781.886:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.7.6334" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cf219f559 code=0x0
[ 1658.264737][ T5630] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1658.297162][ T5630] usb 2-1: USB disconnect, device number 116
[ 1658.692579][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.720731][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.759905][T32561] netlink: 'syz.4.6337': attribute type 4 has an invalid length.
[ 1658.824712][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.824979][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.867095][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.867367][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.867935][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.919683][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.920272][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.920543][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1660.091687][T32593] fuse: Unknown parameter ''
[ 1660.189393][T32598] netlink: 'syz.7.6349': attribute type 29 has an invalid length.
[ 1660.217396][T32593] netlink: 'syz.7.6349': attribute type 29 has an invalid length.
[ 1660.244682][T32600] netlink: 'syz.1.6351': attribute type 19 has an invalid length.
[ 1660.508724][ T5630] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1660.668637][ T5630] usb 2-1: Using ep0 maxpacket: 32
[ 1660.670934][ T5630] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00
[ 1660.674775][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1660.674793][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1660.674816][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.734479][ T5630] usb 2-1: config 0 descriptor??
[ 1661.198635][ T5630] hid_parser_main: 19 callbacks suppressed
[ 1661.198653][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198670][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198686][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198702][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198718][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198734][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198750][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.198765][ T5630] savu 0003:1E7D:2D5A.004C: unknown main item tag 0x0
[ 1661.276800][ T5630] savu 0003:1E7D:2D5A.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[ 1661.409290][T32600] netlink: 'syz.1.6351': attribute type 32 has an invalid length.
[ 1661.461876][ T5748] usb 2-1: USB disconnect, device number 117
[ 1661.613846][T32617] fido_id[32617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1661.760854][T32624] FAULT_INJECTION: forcing a failure.
[ 1661.760854][T32624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1661.760884][T32624] CPU: 0 UID: 0 PID: 32624 Comm: syz.3.6356 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1661.760904][T32624] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1661.760909][T32624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1661.760917][T32624] Call Trace:
[ 1661.760923][T32624]  <TASK>
[ 1661.760929][T32624]  dump_stack_lvl+0xe8/0x150
[ 1661.760953][T32624]  should_fail_ex+0x3eb/0x540
[ 1661.760975][T32624]  _copy_from_user+0x2d/0xb0
[ 1661.760995][T32624]  ___sys_sendmsg+0x1c6/0x360
[ 1661.761011][T32624]  ? __lock_acquire+0x747/0x2de0
[ 1661.761029][T32624]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1661.761067][T32624]  ? __fget_files+0x3a2/0x420
[ 1661.761082][T32624]  ? __fget_files+0x2a/0x420
[ 1661.761101][T32624]  __x64_sys_sendmsg+0x1b1/0x290
[ 1661.761118][T32624]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1661.761147][T32624]  do_syscall_64+0x166/0x520
[ 1661.761164][T32624]  ? trace_irq_disable+0x3b/0x140
[ 1661.761180][T32624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.761194][T32624]  ? clear_bhb_loop+0x70/0xc0
[ 1661.761210][T32624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.761223][T32624] RIP: 0033:0x7f72cab9f559
[ 1661.761236][T32624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1661.761248][T32624] RSP: 002b:00007f72cba4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1661.761263][T32624] RAX: ffffffffffffffda RBX: 00007f72cae25fa0 RCX: 00007f72cab9f559
[ 1661.761273][T32624] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[ 1661.761281][T32624] RBP: 00007f72cba4a090 R08: 0000000000000000 R09: 0000000000000000
[ 1661.761290][T32624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1661.761298][T32624] R13: 00007f72cae26038 R14: 00007f72cae25fa0 R15: 00007ffdb66121d8
[ 1661.761319][T32624]  </TASK>
[ 1662.476932][T32635] FAULT_INJECTION: forcing a failure.
[ 1662.476932][T32635] name failslab, interval 1, probability 0, space 10, times 0
[ 1662.476956][T32635] CPU: 0 UID: 0 PID: 32635 Comm: syz.1.6360 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1662.476975][T32635] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1662.476981][T32635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1662.476989][T32635] Call Trace:
[ 1662.476994][T32635]  <TASK>
[ 1662.477000][T32635]  dump_stack_lvl+0xe8/0x150
[ 1662.477024][T32635]  should_fail_ex+0x3eb/0x540
[ 1662.477047][T32635]  should_failslab+0xa8/0x100
[ 1662.477067][T32635]  __kmalloc_noprof+0xf9/0x710
[ 1662.477080][T32635]  ? rcu_is_watching+0x16/0xb0
[ 1662.477099][T32635]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1662.477118][T32635]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1662.477142][T32635]  tomoyo_realpath_from_path+0xef/0x640
[ 1662.477163][T32635]  ? get_mm_exe_file+0x1c/0x170
[ 1662.477183][T32635]  tomoyo_get_exe+0x60/0x90
[ 1662.477198][T32635]  tomoyo_write_control+0x802/0x13d0
[ 1662.477210][T32635]  ? lock_acquire+0x115/0x350
[ 1662.477229][T32635]  ? tomoyo_write_control+0x175/0x13d0
[ 1662.477252][T32635]  ? __pfx_tomoyo_write_control+0x10/0x10
[ 1662.477271][T32635]  ? __pfx_tomoyo_write+0x10/0x10
[ 1662.477289][T32635]  vfs_write+0x296/0xba0
[ 1662.477311][T32635]  ? __pfx_vfs_write+0x10/0x10
[ 1662.477328][T32635]  ? __fget_files+0x2a/0x420
[ 1662.477342][T32635]  ? __fget_files+0x3a2/0x420
[ 1662.477356][T32635]  ? __fget_files+0x2a/0x420
[ 1662.477372][T32635]  ? fdget+0x1ac/0x250
[ 1662.477391][T32635]  ksys_write+0x150/0x270
[ 1662.477409][T32635]  ? __pfx_ksys_write+0x10/0x10
[ 1662.477433][T32635]  do_syscall_64+0x166/0x520
[ 1662.477449][T32635]  ? trace_irq_disable+0x3b/0x140
[ 1662.477465][T32635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.477479][T32635]  ? clear_bhb_loop+0x70/0xc0
[ 1662.477496][T32635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.477509][T32635] RIP: 0033:0x7fb42459f559
[ 1662.477522][T32635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1662.477533][T32635] RSP: 002b:00007fb4254b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1662.477548][T32635] RAX: ffffffffffffffda RBX: 00007fb424825fa0 RCX: 00007fb42459f559
[ 1662.477558][T32635] RDX: 000000000000004c RSI: 0000200000000200 RDI: 0000000000000003
[ 1662.477567][T32635] RBP: 00007fb4254b3090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.477576][T32635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.477584][T32635] R13: 00007fb424826038 R14: 00007fb424825fa0 R15: 00007ffc4333e848
[ 1662.477605][T32635]  </TASK>
[ 1662.477611][T32635] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1663.012134][T32637] binder: Failed to get security ctx for id 0: EINVAL
[ 1663.630550][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1663.752559][T32659] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma?
[ 1663.769697][ T5630] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1663.800093][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1663.800122][    T9] usb 4-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40
[ 1663.818245][    T9] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[ 1663.818261][    T9] usb 4-1: config 136 has 3 interfaces, different from the descriptor's value: 14
[ 1663.818300][    T9] usb 4-1: config 136 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[ 1663.819984][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.819999][    T9] usb 4-1: Product: syz
[ 1663.820008][    T9] usb 4-1: Manufacturer: syz
[ 1663.820018][    T9] usb 4-1: SerialNumber: syz
[ 1663.929623][ T5630] usb 2-1: Using ep0 maxpacket: 8
[ 1663.930565][ T5630] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1663.931558][ T5630] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1663.931588][ T5630] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1663.931602][ T5630] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1663.931617][ T5630] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1663.931631][ T5630] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1663.931656][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.227344][ T5630] usb 2-1: usb_control_msg returned -32
[ 1664.227374][ T5630] usbtmc 2-1:16.0: can't read capabilities
[ 1665.042750][T32673] usbtmc 2-1:16.0: usb_control_msg returned -32
[ 1666.786098][ T5630] usb 2-1: USB disconnect, device number 118
[ 1666.934698][T32689] FAULT_INJECTION: forcing a failure.
[ 1666.934698][T32689] name failslab, interval 1, probability 0, space 10, times 0
[ 1666.934722][T32689] CPU: 0 UID: 0 PID: 32689 Comm: syz.1.6380 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1666.934745][T32689] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1666.934753][T32689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1666.934763][T32689] Call Trace:
[ 1666.934768][T32689]  <TASK>
[ 1666.934774][T32689]  dump_stack_lvl+0xe8/0x150
[ 1666.934800][T32689]  should_fail_ex+0x3eb/0x540
[ 1666.934823][T32689]  should_failslab+0xa8/0x100
[ 1666.934844][T32689]  __kmalloc_noprof+0xf9/0x710
[ 1666.934858][T32689]  ? pcpu_alloc+0x10/0x310
[ 1666.934896][T32689]  ? nft_set_elem_expr_alloc+0x1a5/0x5f0
[ 1666.934910][T32689]  ? nft_set_elem_expr_alloc+0x1a5/0x5f0
[ 1666.934929][T32689]  nft_set_elem_expr_alloc+0x1a5/0x5f0
[ 1666.934945][T32689]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[ 1666.934968][T32689]  ? nft_rhash_init+0x2c7/0x3c0
[ 1666.934985][T32689]  ? __pfx_nft_rhash_init+0x10/0x10
[ 1666.934999][T32689]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1666.935014][T32689]  ? __pfx_nft_rhash_key+0x10/0x10
[ 1666.935028][T32689]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 1666.935043][T32689]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 1666.935061][T32689]  nft_set_expr_alloc+0x68/0x760
[ 1666.935075][T32689]  ? nf_tables_newset+0x13b5/0x2570
[ 1666.935097][T32689]  nf_tables_newset+0x1c5f/0x2570
[ 1666.935124][T32689]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1666.935146][T32689]  ? lock_acquire+0x115/0x350
[ 1666.935170][T32689]  ? __nla_parse+0x40/0x60
[ 1666.935186][T32689]  nfnetlink_rcv+0x1288/0x28c0
[ 1666.935227][T32689]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1666.935272][T32689]  ? skb_clone+0x246/0x3a0
[ 1666.935297][T32689]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1666.935318][T32689]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1666.935341][T32689]  netlink_unicast+0x8ef/0xa80
[ 1666.935370][T32689]  netlink_sendmsg+0x7f0/0xb20
[ 1666.935394][T32689]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1666.935416][T32689]  ? aa_sock_msg_perm+0x144/0x210
[ 1666.935439][T32689]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1666.935456][T32689]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1666.935475][T32689]  sock_sendmsg_nosec+0x14e/0x190
[ 1666.935496][T32689]  ____sys_sendmsg+0x54e/0x850
[ 1666.935515][T32689]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1666.935541][T32689]  ? import_iovec+0x73/0xa0
[ 1666.935563][T32689]  ___sys_sendmsg+0x2a5/0x360
[ 1666.935577][T32689]  ? __lock_acquire+0x747/0x2de0
[ 1666.935595][T32689]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1666.935633][T32689]  ? __fget_files+0x3a2/0x420
[ 1666.935648][T32689]  ? __fget_files+0x2a/0x420
[ 1666.935668][T32689]  __x64_sys_sendmsg+0x1b1/0x290
[ 1666.935685][T32689]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1666.935715][T32689]  do_syscall_64+0x166/0x520
[ 1666.935731][T32689]  ? trace_irq_disable+0x3b/0x140
[ 1666.935748][T32689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.935761][T32689]  ? clear_bhb_loop+0x70/0xc0
[ 1666.935778][T32689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.935791][T32689] RIP: 0033:0x7fb42459f559
[ 1666.935803][T32689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1666.935814][T32689] RSP: 002b:00007fb4254b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1666.935829][T32689] RAX: ffffffffffffffda RBX: 00007fb424825fa0 RCX: 00007fb42459f559
[ 1666.935839][T32689] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003
[ 1666.935848][T32689] RBP: 00007fb4254b3090 R08: 0000000000000000 R09: 0000000000000000
[ 1666.935857][T32689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1666.935865][T32689] R13: 00007fb424826038 R14: 00007fb424825fa0 R15: 00007ffc4333e848
[ 1666.935886][T32689]  </TASK>
[ 1668.153281][ T1991] block nbd7: Possible stuck request ffff888029c2e000: control (read@0,4096B). Runtime 210 seconds
[ 1668.772318][ T5748] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1668.934306][ T5748] usb 2-1: Using ep0 maxpacket: 16
[ 1668.938140][ T5748] usb 2-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1668.939034][ T5748] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[ 1668.939056][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1668.939092][ T5748] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 1668.939110][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1668.939126][ T5748] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1668.971467][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.971485][ T5748] usb 2-1: Product: syz
[ 1668.971495][ T5748] usb 2-1: Manufacturer: syz
[ 1668.971504][ T5748] usb 2-1: SerialNumber: syz
[ 1669.052314][ T5748] usb 2-1: config 0 descriptor??
[ 1669.056560][ T5748] port100 2-1:0.0: NFC: Could not get supported command types
[ 1669.278218][ T5748] usb 2-1: USB disconnect, device number 119
[ 1669.329630][    T9] snd-usb-audio 4-1:136.0: probe with driver snd-usb-audio failed with error -22
[ 1669.355329][    T9] snd-usb-audio 4-1:136.1: probe with driver snd-usb-audio failed with error -22
[ 1669.482442][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.482480][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.562899][    T9] snd-usb-audio 4-1:136.2: probe with driver snd-usb-audio failed with error -22
[ 1669.657645][T28245] udevd[28245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1670.397549][ T5748] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1670.567226][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1670.567258][ T5748] usb 2-1: New USB device found: idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e
[ 1670.591884][ T5748] usb 2-1: config 4 has an invalid interface number: 12 but max is 0
[ 1670.591901][ T5748] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1670.591913][ T5748] usb 2-1: config 4 has no interface number 0
[ 1670.591937][ T5748] usb 2-1: config 4 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1670.591951][ T5748] usb 2-1: config 4 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1670.591967][ T5748] usb 2-1: config 4 interface 12 has no altsetting 0
[ 1670.600478][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.600494][ T5748] usb 2-1: Product: syz
[ 1670.600503][ T5748] usb 2-1: Manufacturer: syz
[ 1670.600512][ T5748] usb 2-1: SerialNumber: syz
[ 1670.979767][ T5748] kvaser_usb 2-1:4.12: error -ENODEV: Cannot get usb endpoint(s)
[ 1671.022367][ T5748] usb 2-1: USB disconnect, device number 120
[ 1674.740213][ T5006] udevd[5006]: worker [28246] /devices/virtual/block/nbd7 timeout; kill it
[ 1674.740278][ T5006] udevd[5006]: seq 47958 '/devices/virtual/block/nbd7' killed
[ 1681.561454][T28515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1681.717433][T28515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1681.808853][T28515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1681.906760][T28515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1682.252089][T28515] bridge_slave_1: left allmulticast mode
[ 1682.252108][T28515] bridge_slave_1: left promiscuous mode
[ 1682.252234][T28515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1682.278100][T28515] bridge_slave_0: left allmulticast mode
[ 1682.278116][T28515] bridge_slave_0: left promiscuous mode
[ 1682.278238][T28515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1682.689350][T28515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1682.706678][T28515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1682.707615][T28515] bond0 (unregistering): Released all slaves
[ 1683.712593][T28515] hsr_slave_0: left promiscuous mode
[ 1683.713061][T28515] hsr_slave_1: left promiscuous mode
[ 1683.713568][T28515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1683.713581][T28515] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1683.714119][T28515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1683.714131][T28515] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1683.771212][T28515] veth1_macvtap: left promiscuous mode
[ 1683.771250][T28515] veth0_macvtap: left promiscuous mode
[ 1683.771311][T28515] veth1_vlan: left promiscuous mode
[ 1683.771352][T28515] veth0_vlan: left promiscuous mode
[ 1684.327661][T28515] team0 (unregistering): Port device team_slave_1 removed
[ 1684.369254][T28515] team0 (unregistering): Port device team_slave_0 removed
[ 1689.576536][T32744] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6403'.
[ 1689.774148][T22667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1689.794388][T22667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1689.796934][T22667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1689.797491][T22667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1689.798645][T22667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1689.848135][ T5649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1689.875588][ T5643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1689.931108][ T5643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1689.933004][ T5643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1689.933382][ T5643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1691.361050][T32746] rxe_eth0 speed is unknown, defaulting to 1000
[ 1691.990887][T32746] lo speed is unknown, defaulting to 1000
[ 1691.991986][T32747] rxe_eth0 speed is unknown, defaulting to 1000
[ 1692.059407][T22667] Bluetooth: hci1: command tx timeout
[ 1692.067473][  T315] jffs2: notice: (315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1692.145201][T22667] Bluetooth: hci6: command tx timeout
[ 1692.343019][  T318] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6409'.
[ 1692.812463][T32746] wg1 speed is unknown, defaulting to 1000
[ 1692.892678][T32747] lo speed is unknown, defaulting to 1000
[ 1693.094491][  T331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1693.433020][T32747] wg1 speed is unknown, defaulting to 1000
[ 1693.746641][T32746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.746704][T32746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1693.746945][T32746] bridge_slave_0: entered allmulticast mode
[ 1693.774404][T32746] bridge_slave_0: entered promiscuous mode
[ 1693.790591][T32746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1693.790656][T32746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1693.790736][T32746] bridge_slave_1: entered allmulticast mode
[ 1693.791729][T32746] bridge_slave_1: entered promiscuous mode
[ 1693.894180][T32746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1693.927725][T32746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1694.075568][T32746] team0: Port device team_slave_0 added
[ 1694.101243][T32746] team0: Port device team_slave_1 added
[ 1694.189020][T32746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1694.189030][T32746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1694.189047][T32746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1694.195135][T32746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1694.195145][T32746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1694.195162][T32746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1694.282356][T22667] Bluetooth: hci1: command tx timeout
[ 1694.368250][T22667] Bluetooth: hci6: command tx timeout
[ 1694.436546][T32746] hsr_slave_0: entered promiscuous mode
[ 1694.450763][T32746] hsr_slave_1: entered promiscuous mode
[ 1694.452864][T32746] debugfs: 'hsr0' already exists in 'hsr'
[ 1694.452877][T32746] Cannot create hsr debugfs directory
[ 1694.860657][T32747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1694.860728][T32747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1694.860810][T32747] bridge_slave_0: entered allmulticast mode
[ 1694.861814][T32747] bridge_slave_0: entered promiscuous mode
[ 1694.898209][T32747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1694.900624][T32747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.900885][T32747] bridge_slave_1: entered allmulticast mode
[ 1694.925751][T32747] bridge_slave_1: entered promiscuous mode
[ 1695.066505][T32747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1695.071827][T32747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1695.182933][T32747] team0: Port device team_slave_0 added
[ 1695.187819][T32747] team0: Port device team_slave_1 added
[ 1695.392159][T32747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1695.392170][T32747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1695.392187][T32747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1695.445025][T32747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1695.445037][T32747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1695.445055][T32747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1695.487176][  T318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1695.785821][T32747] hsr_slave_0: entered promiscuous mode
[ 1695.789568][T32747] hsr_slave_1: entered promiscuous mode
[ 1695.804879][T32747] debugfs: 'hsr0' already exists in 'hsr'
[ 1695.804893][T32747] Cannot create hsr debugfs directory
[ 1696.116857][  T356] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 356 comm: syz.1.6415)
[ 1696.117176][   T32] audit: type=1800 audit(1796029817.493:145): pid=356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6415" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=198723 res=0 errno=-22
[ 1696.507529][T22667] Bluetooth: hci1: command tx timeout
[ 1696.591971][T22667] Bluetooth: hci6: command tx timeout
[ 1696.654873][  T367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1696.807142][T32746] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1696.836451][T32746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1696.837085][T32746] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1696.877381][T32746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1696.878394][T32746] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1696.915255][T32746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1696.915808][T32746] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1696.941398][T32746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1697.234869][    T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1697.399306][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1697.402880][    T9] usb 2-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1697.419902][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1697.419918][    T9] usb 2-1: config 0 has no interface number 0
[ 1697.423175][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.423190][    T9] usb 2-1: Product: syz
[ 1697.423200][    T9] usb 2-1: Manufacturer: syz
[ 1697.423209][    T9] usb 2-1: SerialNumber: syz
[ 1697.424948][    T9] usb 2-1: config 0 descriptor??
[ 1697.477550][  T377] trusted_key: encrypted_key: insufficient parameters specified
[ 1697.488766][  T377] Could not find key with description: [syz]
[ 1697.488775][  T377] process_request_key_err: No key
[ 1697.488808][  T377] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[ 1697.488816][  T377] One or more global auth toks could not properly register; rc = [-2]
[ 1697.488866][  T377] Error validating options; rc = [-2]
[ 1697.585028][    T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1697.585045][    T9] usb 2-1: selecting invalid altsetting 1
[ 1697.585055][    T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1697.651857][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1697.652100][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1697.652128][    T9] usb 2-1: media controller created
[ 1697.698803][T32746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1697.730236][  T378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6421'.
[ 1697.730342][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1697.751468][  T378] bridge_slave_1: left allmulticast mode
[ 1697.751483][  T378] bridge_slave_1: left promiscuous mode
[ 1697.751616][  T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1697.787135][  T378] bridge_slave_0: left allmulticast mode
[ 1697.787150][  T378] bridge_slave_0: left promiscuous mode
[ 1697.787288][  T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1697.887064][    T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1697.887096][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1697.887396][    T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1697.890277][T32746] 8021q: adding VLAN 0 to HW filter on device team0
[ 1697.978726][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1697.978789][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1698.022231][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1698.022293][ T6724] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1698.114356][    T9] usb 2-1: USB disconnect, device number 121
[ 1698.704313][T32747] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1698.730427][T22667] Bluetooth: hci1: command tx timeout
[ 1698.732496][T32747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1698.736328][T32747] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1698.779722][T32747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1698.782106][T32747] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1698.808281][T32747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1698.808814][T32747] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1698.820938][T22667] Bluetooth: hci6: command tx timeout
[ 1698.855269][T32747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1699.125983][    T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1699.214091][T32747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1699.280588][T32747] 8021q: adding VLAN 0 to HW filter on device team0
[ 1699.295784][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1699.302094][    T9] usb 2-1: New USB device found: idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1699.307212][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 1699.307232][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1699.307254][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024
[ 1699.307405][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1699.307422][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12150, setting to 1024
[ 1699.307438][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1699.362913][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.362929][    T9] usb 2-1: Product: syz
[ 1699.362938][    T9] usb 2-1: Manufacturer: syz
[ 1699.362948][    T9] usb 2-1: SerialNumber: syz
[ 1699.404964][    T9] usb 2-1: config 0 descriptor??
[ 1699.410119][  T388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1699.410209][  T388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1699.492605][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.492669][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1699.517128][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.517194][ T6724] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1699.538810][    T9] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[ 1699.538928][    C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[ 1699.538992][    C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[ 1699.648892][    T9] usb 2-1: USB disconnect, device number 122
[ 1699.697717][    T9] mcba_usb 2-1:0.0 can0: device disconnected
[ 1699.818083][T32747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1700.312394][ T1991] block nbd7: Possible stuck request ffff888029c2e000: control (read@0,4096B). Runtime 240 seconds
[ 1700.412899][T32746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1701.400391][T32747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1701.448273][ T5748] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1701.476835][T32746] veth0_vlan: entered promiscuous mode
[ 1701.507051][T32746] veth1_vlan: entered promiscuous mode
[ 1701.597703][T32746] veth0_macvtap: entered promiscuous mode
[ 1701.605889][T32746] veth1_macvtap: entered promiscuous mode
[ 1701.619053][ T5748] usb 2-1: Using ep0 maxpacket: 16
[ 1701.619586][ T5748] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=0.00
[ 1701.619610][ T5748] usb 2-1: no configurations
[ 1701.619618][ T5748] usb 2-1: can't read configurations, error -22
[ 1701.715741][T32746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1701.737188][T32746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1701.756804][ T5748] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1701.779324][T31515] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.780354][T31515] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.780380][T31515] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.780402][T31515] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.916436][ T5748] usb 2-1: Using ep0 maxpacket: 16
[ 1701.923661][ T5748] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=0.00
[ 1701.923686][ T5748] usb 2-1: no configurations
[ 1701.923694][ T5748] usb 2-1: can't read configurations, error -22
[ 1701.923983][ T5748] usb usb2-port1: attempt power cycle
[ 1702.110505][T22667] Bluetooth: hci5: unexpected event for opcode 0x2028
[ 1702.166244][T28515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1702.166266][T28515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1702.279847][ T5748] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1702.286249][T26584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1702.286262][T26584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1702.314312][ T5748] usb 2-1: Using ep0 maxpacket: 16
[ 1702.329072][ T5748] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=0.00
[ 1702.329106][ T5748] usb 2-1: no configurations
[ 1702.329115][ T5748] usb 2-1: can't read configurations, error -22
[ 1702.484313][ T5748] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1702.506278][ T5748] usb 2-1: Using ep0 maxpacket: 16
[ 1702.507335][ T5748] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=0.00
[ 1702.507363][ T5748] usb 2-1: no configurations
[ 1702.507373][ T5748] usb 2-1: can't read configurations, error -22
[ 1702.507648][ T5748] usb usb2-port1: unable to enumerate USB device
[ 1702.693245][T32747] veth0_vlan: entered promiscuous mode
[ 1702.731257][T32747] veth1_vlan: entered promiscuous mode
[ 1702.810912][T32747] veth0_macvtap: entered promiscuous mode
[ 1702.833115][T32747] veth1_macvtap: entered promiscuous mode
[ 1702.890190][T32747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1702.936157][T32747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1702.998418][T28515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.000998][T31513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.001024][T31513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.001046][T31513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.275296][T31515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.275310][T31515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.389277][T31513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.389290][T31513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.992668][  T462] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1703.992688][  T462] overlayfs: failed to set xattr on upper
[ 1703.993473][  T462] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1703.993480][  T462] overlayfs: ...falling back to index=off.
[ 1703.993485][  T462] overlayfs: ...falling back to uuid=null.
[ 1704.081994][  T462] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1704.082011][  T462] overlayfs: failed to set xattr on upper
[ 1704.082016][  T462] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1704.082021][  T462] overlayfs: ...falling back to index=off.
[ 1704.082026][  T462] overlayfs: ...falling back to uuid=null.
[ 1704.476944][  T478] comedi comedi2: dt2815: I/O base address or length out of range
[ 1704.505665][  T478] usb usb5: check_ctrlrecip: process 478 (syz.5.6444) requesting ep 01 but needs 81
[ 1704.505685][  T478] usb usb5: usbfs: process 478 (syz.5.6444) did not claim interface 0 before use
[ 1704.706664][ T5748] usb 9-1: new full-speed USB device number 118 using dummy_hcd
[ 1704.867580][ T5748] usb 9-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40
[ 1704.870394][ T5748] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1704.870410][ T5748] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1704.872726][ T5748] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1704.872742][ T5748] usb 9-1: Product: syz
[ 1704.872751][ T5748] usb 9-1: Manufacturer: syz
[ 1704.872760][ T5748] usb 9-1: SerialNumber: syz
[ 1705.201777][ T5748] usb 9-1: Can't get UAC3 power state for id 11
[ 1705.215274][ T5748] usb 9-1: 5:0: failed to get current value for ch 0 (-71)
[ 1705.258117][ T5748] usb 9-1: 5:0: cannot get RANGE values for control 2 (id 5)
[ 1705.258136][ T5748] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1705.258147][ T5748] usb 9-1: [5] FU [Mic Capture Volume] ch = 2, val = 0/1/1
[ 1705.378939][ T5748] usb 9-1: 5:0: cannot get RANGE values for control 2 (id 5)
[ 1705.477853][ T5748] usb 9-1: USB disconnect, device number 118
[ 1705.676674][T28247] udevd[28247]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1706.041620][  T497] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6451'.
[ 1706.107224][  T501] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6451'.
[ 1706.206696][  T503] FAULT_INJECTION: forcing a failure.
[ 1706.206696][  T503] name failslab, interval 1, probability 0, space 10, times 0
[ 1706.206722][  T503] CPU: 0 UID: 0 PID: 503 Comm: syz.1.6453 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1706.206745][  T503] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1706.206752][  T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1706.206762][  T503] Call Trace:
[ 1706.206769][  T503]  <TASK>
[ 1706.206776][  T503]  dump_stack_lvl+0xe8/0x150
[ 1706.206805][  T503]  should_fail_ex+0x3eb/0x540
[ 1706.206834][  T503]  should_failslab+0xa8/0x100
[ 1706.206869][  T503]  ? single_open+0x119/0x240
[ 1706.206893][  T503]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1706.206907][  T503]  ? __kmalloc_cache_noprof+0x31c/0x600
[ 1706.206925][  T503]  ? single_open+0x5a/0x240
[ 1706.206961][  T503]  ? single_open+0x119/0x240
[ 1706.206994][  T503]  single_open+0x119/0x240
[ 1706.207019][  T503]  bm_entry_open+0x50/0xf0
[ 1706.207095][  T503]  ? __pfx_bm_entry_open+0x10/0x10
[ 1706.207110][  T503]  do_dentry_open+0x80e/0x1360
[ 1706.207141][  T503]  vfs_open_consume+0x4a/0x350
[ 1706.207163][  T503]  ? path_openat+0x16e1/0x20f0
[ 1706.207185][  T503]  path_openat+0x16fc/0x20f0
[ 1706.207218][  T503]  do_file_open+0x23e/0x4a0
[ 1706.207242][  T503]  ? __pfx_do_file_open+0x10/0x10
[ 1706.207277][  T503]  ? _raw_spin_unlock+0x28/0x50
[ 1706.207296][  T503]  ? alloc_fd+0x6af/0x760
[ 1706.207319][  T503]  do_sys_openat2+0x115/0x200
[ 1706.207343][  T503]  ? __se_sys_futex+0x3a8/0x450
[ 1706.207379][  T503]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1706.207405][  T503]  ? rcu_is_watching+0x16/0xb0
[ 1706.207428][  T503]  __x64_sys_openat+0x138/0x170
[ 1706.207445][  T503]  do_syscall_64+0x166/0x520
[ 1706.207463][  T503]  ? trace_irq_disable+0x3b/0x140
[ 1706.207481][  T503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.207496][  T503]  ? clear_bhb_loop+0x70/0xc0
[ 1706.207513][  T503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.207528][  T503] RIP: 0033:0x7fb42459f559
[ 1706.207542][  T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1706.207554][  T503] RSP: 002b:00007fb4254b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1706.207570][  T503] RAX: ffffffffffffffda RBX: 00007fb424825fa0 RCX: 00007fb42459f559
[ 1706.207581][  T503] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1706.207591][  T503] RBP: 00007fb424636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1706.207600][  T503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1706.207609][  T503] R13: 00007fb424826038 R14: 00007fb424825fa0 R15: 00007ffc4333e848
[ 1706.207631][  T503]  </TASK>
[ 1707.153614][   T32] audit: type=1326 audit(1796029827.819:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.7.6460" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cf219f559 code=0x0
[ 1707.541370][  T532] netlink: 57 bytes leftover after parsing attributes in process `syz.8.6464'.
[ 1707.775256][ T5748] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 1707.936223][ T5748] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1707.937395][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1707.937412][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4
[ 1707.937429][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 13368, setting to 1023
[ 1707.937454][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.996708][ T5748] usb 2-1: config 0 descriptor??
[ 1708.221032][ T5748] ath6kl: Failed to submit usb control message: -71
[ 1708.221063][ T5748] ath6kl: unable to send the bmi data to the device: -71
[ 1708.221073][ T5748] ath6kl: Unable to send get target info: -71
[ 1708.253710][ T5748] ath6kl: Failed to init ath6kl core: -71
[ 1708.254563][ T5748] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1708.303963][ T5748] usb 2-1: USB disconnect, device number 127
[ 1708.841526][  T551] netlink: 'syz.8.6473': attribute type 29 has an invalid length.
[ 1709.062319][  T558] __vm_enough_memory: pid: 558, comm: syz.5.6466, bytes: 4503599627366400 not enough memory for the allocation
[ 1709.295059][  T561] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1709.315321][  T565] openvswitch: netlink: EtherType 53b is less than min 600
[ 1710.030916][ T5748] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1710.194439][ T5748] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[ 1710.196599][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1710.196629][ T5748] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1710.196645][ T5748] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 1710.196659][ T5748] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1710.196694][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1710.271957][  T578] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1710.272042][  T578] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1710.273297][ T5748] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[ 1710.304703][ T5748] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[ 1710.304754][ T5748] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[ 1710.330851][ T5748] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1710.332594][  T587] virtio-fs: tag <> not found
[ 1710.338423][ T5748] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[ 1710.338476][ T5748] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[ 1710.428788][ T5748] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1710.556044][ T5748] usb 6-1: USB disconnect, device number 71
[ 1710.588679][ T5748] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1710.611136][ T5748] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1710.611664][ T5748] keyspan 6-1:1.0: device disconnected
[ 1711.196476][ T5748] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 1711.259817][  T601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6495'.
[ 1711.360131][ T5748] usb 2-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00
[ 1711.361341][ T5748] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1711.361378][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.401070][ T5748] usb 2-1: config 0 descriptor??
[ 1711.430817][ T5748] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input115
[ 1711.670805][  T597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1711.671143][  T597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1711.750551][ T4991] bcm5974 2-1:0.0: could not read from device
[ 1711.792880][ T4991] bcm5974 2-1:0.0: could not read from device
[ 1711.802432][ T5748] usb 2-1: USB disconnect, device number 2
[ 1712.302582][  T611] netlink: 'syz.8.6499': attribute type 27 has an invalid length.
[ 1713.077990][T23419] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1713.240554][T23419] usb 6-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[ 1713.241481][T23419] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.243146][T23419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.243161][T23419] usb 6-1: Product: syz
[ 1713.243186][T23419] usb 6-1: Manufacturer: syz
[ 1713.243196][T23419] usb 6-1: SerialNumber: syz
[ 1713.317682][T23419] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 1713.886297][T23419] gspca_mr97310a: reg write [19] error -71
[ 1713.886368][T23419] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71
[ 1713.918194][T23419] usb 6-1: USB disconnect, device number 72
[ 1714.259160][  T194] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1714.416220][  T194] usb 2-1: Using ep0 maxpacket: 32
[ 1714.420280][  T194] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1714.420308][  T194] usb 2-1: New USB device found: idVendor=09e8, idProduct=0062, bcdDevice=0.40
[ 1714.422789][  T194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1714.422805][  T194] usb 2-1: Product: syz
[ 1714.422814][  T194] usb 2-1: Manufacturer: syz
[ 1714.422823][  T194] usb 2-1: SerialNumber: syz
[ 1714.643031][   T34] INFO: task syz.6.5725:30692 blocked for more than 143 seconds.
[ 1714.643050][   T34]       Tainted: G             L     Y syzkaller #0
[ 1714.643058][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1714.643065][   T34] task:syz.6.5725      state:D stack:27216 pid:30692 tgid:30687 ppid:29886  task_flags:0x400040 flags:0x00080002
[ 1714.643107][   T34] Call Trace:
[ 1714.643112][   T34]  <TASK>
[ 1714.643143][   T34]  __schedule+0x17dd/0x5830
[ 1714.643181][   T34]  ? __pfx___schedule+0x10/0x10
[ 1714.643203][   T34]  ? schedule+0x90/0x2b0
[ 1714.643220][   T34]  schedule+0x164/0x2b0
[ 1714.643236][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1714.643252][   T34]  __mutex_lock+0x7c4/0x15a0
[ 1714.643287][   T34]  ? __mutex_lock+0x5cd/0x15a0
[ 1714.643307][   T34]  ? sync_bdevs+0x276/0x470
[ 1714.643328][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1714.643351][   T34]  ? iput+0x451/0xf00
[ 1714.643370][   T34]  sync_bdevs+0x276/0x470
[ 1714.643391][   T34]  __ia32_sys_sync+0xc5/0x120
[ 1714.643481][   T34]  ? __pfx___ia32_sys_sync+0x10/0x10
[ 1714.643502][   T34]  ? do_syscall_64+0xc8/0x520
[ 1714.643521][   T34]  do_syscall_64+0x166/0x520
[ 1714.643537][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1714.643554][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1714.643568][   T34]  ? clear_bhb_loop+0x70/0xc0
[ 1714.643585][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1714.643600][   T34] RIP: 0033:0x7f8c45b9f559
[ 1714.643625][   T34] RSP: 002b:00007f8c469d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1714.643640][   T34] RAX: ffffffffffffffda RBX: 00007f8c45e26090 RCX: 00007f8c45b9f559
[ 1714.643650][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1714.643658][   T34] RBP: 00007f8c45e26090 R08: 0000000000000000 R09: 0000000000000000
[ 1714.643667][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1714.643675][   T34] R13: 00007f8c45e26128 R14: 00007f8c45e26090 R15: 00007fff3a7966b8
[ 1714.643697][   T34]  </TASK>
[ 1714.643723][   T34] 
[ 1714.643723][   T34] Showing all locks held in the system:
[ 1714.643734][   T34] locks held by khungtaskd/34: 1, last CPU#0:
[ 1714.643822][   T34]  #0: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1714.643930][   T34] locks held by kworker/0:2/194: 4, on CPU#0:
[ 1714.643939][   T34]  #0: ffff88801fea1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1714.643999][   T34]  #1: ffffc90002ebfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1714.644035][   T34]  #2: ffff88802c1731d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 1714.644128][   T34]  #3: ffff88807b67e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1714.644180][   T34] locks held by getty/5397: 2, on CPU#0:
[ 1714.644190][   T34]  #0: ffff8880367d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1714.644229][   T34]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1714.644298][   T34] locks held by udevd/28246: 1, on CPU#0:
[ 1714.644307][   T34]  #0: ffff888029b47350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[ 1714.644341][   T34] locks held by udevd/28248: 4, on CPU#0:
[ 1714.644350][   T34]  #0: ffff888060a9b518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[ 1714.644386][   T34]  #1: ffff888043576080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[ 1714.644466][   T34]  #2: ffff88806602f878 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1714.644501][   T34]  #3: ffff88807b67e1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1714.644569][   T34] locks held by syz.6.5725/30692: 1, on CPU#0:
[ 1714.644579][   T34]  #0: ffff888029b47350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[ 1714.644617][   T34] locks held by syz.3.6365/32647: 1, on CPU#0:
[ 1714.644626][   T34]  #0: ffff888029b47350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[ 1714.674620][   T34] locks held by syz-executor/32746: 4, last CPU#0:
[ 1714.674632][   T34]  #0: ffffffff9023a610 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470
[ 1714.674688][   T34]  #1: ffff88803ce24080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10
[ 1714.674727][   T34]  #2: ffff888079129bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10
[ 1714.674767][   T34]  #3: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430
[ 1714.674859][   T34] locks held by syz-executor/636: 4, last CPU#0:
[ 1714.674869][   T34]  #0: ffff888035925948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1714.674906][   T34]  #1: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x139f/0x3570
[ 1714.674935][   T34]  #2: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170
[ 1714.675004][   T34]  #3: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1714.675041][   T34] 
[ 1714.675045][   T34] =============================================
[ 1714.675045][   T34] 
[ 1714.675051][   T34] NMI backtrace for cpu 0
[ 1714.675061][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1714.675079][   T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1714.675086][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1714.675094][   T34] Call Trace:
[ 1714.675099][   T34]  <TASK>
[ 1714.675105][   T34]  dump_stack_lvl+0xe8/0x150
[ 1714.675128][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 1714.675143][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1714.675167][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 1714.675184][   T34]  sys_info+0x135/0x170
[ 1714.675203][   T34]  watchdog+0x1073/0x10f0
[ 1714.675225][   T34]  ? watchdog+0x209/0x10f0
[ 1714.675245][   T34]  kthread+0x38b/0x480
[ 1714.675259][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1714.675273][   T34]  ? __pfx_kthread+0x10/0x10
[ 1714.675288][   T34]  ret_from_fork+0x514/0xb70
[ 1714.675303][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1714.675316][   T34]  ? __switch_to+0xc78/0x1410
[ 1714.675336][   T34]  ? __pfx_kthread+0x10/0x10
[ 1714.675350][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1714.675381][   T34]  </TASK>
[ 1714.675412][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1715.239771][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[ 1715.250521][   T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[ 1715.256302][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1715.266344][   T34] Call Trace:
[ 1715.269642][   T34]  <TASK>
[ 1715.272559][   T34]  vpanic+0x26f/0x710
[ 1715.276532][   T34]  panic+0xc5/0xd0
[ 1715.280238][   T34]  ? __pfx_panic+0x10/0x10
[ 1715.284646][   T34]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[ 1715.289746][   T34]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 1715.295908][   T34]  watchdog+0x10e7/0x10f0
[ 1715.300231][   T34]  ? watchdog+0x209/0x10f0
[ 1715.304643][   T34]  kthread+0x38b/0x480
[ 1715.308720][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1715.313394][   T34]  ? __pfx_kthread+0x10/0x10
[ 1715.317976][   T34]  ret_from_fork+0x514/0xb70
[ 1715.322558][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1715.327653][   T34]  ? __switch_to+0xc78/0x1410
[ 1715.332332][   T34]  ? __pfx_kthread+0x10/0x10
[ 1715.336933][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1715.341748][   T34]  </TASK>
[ 1715.344825][   T34] Kernel Offset: disabled
[ 1715.349149][   T34] Rebooting in 86400 seconds..