last executing test programs:

27m9.24990106s ago: executing program 32 (id=993):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e4, &(0x7f00000051c0)="$eJzs3U+IVVUcB/Dz5jk6KMw8aaOEZlDrpCSIiEYhnKCGVyKkkDMl/RlczCCEtBAGxI2BDQSCm7BlG5mFZJtAVHRR4qJNEEQLoUSRoVy5iJh373lz37m++56jpjmfT8zcd+7vnnPPu9zFfF+e+wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEE6/f3l/Vf3Kye03Jw6N3Tp+eHr62L69QyHUWvtreX1ix9i7H++aeHsodph8J9s2Gt2GzLr+njVWd+xc7Nf580EIYTAZoJ5v36iXRi2+PFgesNLswtSNo9vGLxwZv7r5zMXbu8tvnUUr9kLk99W1pXtptPV7IDmi3S7cerWOWzTrn95w/8mbAADuydZma9P+czT/E7fdnk3rSXs0ac8l7fgXwlyxsRzZuKu7zXNLWn9E8xzNosKarvNM6vn1b7ebaf+knUSNe5hn56F5pBnqNs+ZpP6o5gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKl/9PP+qvqVk9tvThwau3X88PT0sX17h0JotPbXsnLtrU+eaj69ccc3Xw4/c+n62U3/1OO4+XZV4eDwS3zxykgIHxYq1+Kw14dDaHYWWs1wslyYar14MxYAAAB4kmxs/R5ot7M4ONjRrrXSZK31X5SFxdmFqRtHt41fODJ+dfOZi7d3L3+8ZpfxRu86XrvdWPqpFYJxjL/peEv1eOjB0jjV0hHTPL/p9h/fVfUv5f9Gdf6PV07+BwAA4H7I/+k41Xrl/9fO//hCVf9S/t/SccpS/o8zjvl/ICwv/wMAAMDj7GHn/9HSONV65f/nTkydqupfyv9b+8v/q4rTjjt/ihM+MBLC1l5TBwAAALqI/9996aOFmNezTw7SvD499vXOqvFK+X+0v/w/+EDfFQAAAHA//roz9kNVvZT/m/3l/zUPddYAAADAvXj+xsb1VfVS/p/sL/+vzbf5yoes06X4rxC+GglhaPHFTFa4HOZebxcAAACAByTm9Duff7an6rhS/p+pfv5/fNJBXP/f8fy/0vr/QiF76t+rHgwAAADASlRezx8fj599c0G379/vd/3/by+9d6Xq/KX8P9tf/q8Xtw/y+/8AAABgGf5v3/+3pzROtV7P/9/556e7qvqX8v9cf/k/btcV3965eH2OjISwYfFF/jTBb+PpDiSF+cFCoaWZ9NgVe+SF+TWFQstM0uPFkRCebV2bpLA+FuaSwsJwXjiVFK7GQn4/tAunk8K5eKedGM6nmxbOxkK+wGI+rqBY114SkfT4u1uPxcJde/zaPjkAAMCKEsNznmUHO5shjbLztV4HrO11wECvA+q9DliVHJAe2G1/mOwsxP3nv395KFQo5f9T/eX/eClWZ5tu6/9DXP+ff69he/3/ZCw0ksJ8LDTTJwY04zmysPtFPEejmfdY2NAuAAAAwBMtfi5Qf8TzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBf9u49Rq6rPgDwmX3N7nq9uyFUJLyyCUogVb1eOxgsHsU2fzQKKGwkS5VAEBt7bS3eYNd2CjagLglCghSSgoUgqqiNikgkN3JTiKGlsYWKUagjAq1QlQaUKrFQpIQ0QkkVuSLV7L1n9s65Ow8/1vGm3yd558z8zvPOw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/Dw89fH9Xq/jD31j/9M2fuP63X/7Mzp1f/MgH+0OYnHu8koUr799+6eTrLt9w6M7hK048dfQNv+/Ly+XxsKz2J7bwuVjrk8tDOFoJoScNrBjKAr35/aFY3+uHQrgkzAfqJaYGsxJpw+HHAyEcDPOBelU/GAhhqBDY+IsfHftSLXFgIISrQwjVtI1fVbM2BtLANX1ZYDAN7OzJAv/zUqYe+H5XFoBzFt8M9Rf9kcnGDKMLl2vy+us9bx17eaXD646J0eb5nlm/yJ0q6EsfmDynp61UHYui9PY47t22BN5tpe18l6et+EUq/4by0nyoGrq2Tm3bfOvM3vhIVxgf725W0yI9z48+9+ktZ5JeMq/D2IHR8/I6vPKZT52+6sEb7z528MCpB/Y/9Py5drPZ5l1s1ZC/5pbM8xit83myBN5+pW9JY750hRB+dvh7f9wqXpr/j7ae/8eXc7ztasgdaz09nM3N4yNDMfHscDY3BwAAgCVjKew1fff7Dx9qVV9p/j/W2fH/eMg/n8xnoz0ewrq5xO0jIVw293gWuDc299GREK6cS002BtYngeMhXD6XuLZeVVKiP5YYSwK/Gc4D65LAiRiYTALfjoG7ksDnYuBIEtgSA8eTwIYYCNON4/jD4XwcHQcGYmBTthGPxLMQfjccW0u21X/WqwIAADhP8tlhb+PdwrkO55ohTi+PDLTLEM/AbpqhmtSQzmDr06qmNfS0q6GrXQ31cc+2Hn6p5kq7mkunYVQaM/zsa9t/Gloozf8nWs//qwt0pFI6/h/CTXN/Y+6uPDJTj2+abMgAAAAAnIPHRn8+1ipemv+v6+z8/7hPpLuQOZyMuyF2jIQw0RjIqn1nOZAd9V6WBwAAAGApqB+Prx8Ln85vs1O00/l0Of/kGeaPB/7XLZh/47f+7sVW/S3N/yc7O/9/sPE268SJ2IuvjoTQXwj8JPayFpgzFgOPv6cxkI//RNwAd8Sq8hMT6lXdEUtsioGJJHCwWYlH6iUuawzkT1a98dvr45jOSxQCAAAAcMHF3QHxuHw8//+/Hrltb6typfn/pjM7/39uHlw6vX9mWQgre0LoTn8YcHIwWxgwBoYqeeKfB7O6utOqbh8M4R21gaVVPZGv/9+TrjH47wNZVTFw2VX3PHdNLfHtgRBWFgO//NChNbXEnyeBeuN/OhDCFbXRpo0f7c8a700b/0Z/CG8sBOpVbe0PodZYX1rVv1Tz6xikVf19NYRLC4F6VWurIewLACxZ8T/TrcUH9+zbv2PzzMzU7kVMxL34A2Hb9MzU+JadM1urTfq0Nelzw0JGny2PqdNr3zyWL1J0+IbxkU7S9V8KThTbyvfkl04dzO/Hb0O9c+Nc3dtw97p0yG95U7mJUPgu1WzILS+wdB6GPFisZP5JLNUf8/eFZaH/1j1Tu8c/uXnv3t2rsr+dZl+d/Y0HmrJttSrdVoML9a2Dl0fT9bISZ7utri5WsnLvLbtW7tm3f8X0LZu3T22f+viatW9du3ZizdtX1sY0kf1tM9CrF6o4GehLLZfYWpyBvranUMmF+MyQkJBYaol3T7/t660+fkrz/12t5//xUyd+7ufrMzQ7/j8aD/Nnj88f5t8UAwc7Pf4/2uxofv3EgLEkMBsDsw7zAwAA8MoQd0fGvZlxn/Q/ve9v/6JVudL8f7az3/+fp/X/60vX39Bsmf9rY4mJZuv/p8v819f/n222/n+6zH99/f+DL8P6/7fWA8km+Z31/wEAgFeCC7f+f9vl/dMLBJQytF3eP71AQClD22X8O71AwBmv/3/n7PWfCC2U5v93dTb/t3A/AAAAXDz+aHzbX7aKl+b/Bzub/1/49f9Cs/P/x5oFJpstDGj9PwAAAJaoZuv/PfWegc+0Klea/x/pbP4fT7voasgdaz09nK1pF9I17Z4drv9kAAAAAJaGrjA+3tth3oZ1UdeffZuP5kuBtkoX3b3hK59vVV9p/n+8s/l/w+8yrnzmU6evevDGu08fO3jg1AP7H3p+/vg/AAAAsHg63S8BAAAAAAAAAAAAAAC8/D7U8823tYqXfv8fbpp7vNnv/+N1/+LvC17dkDvW2n79v/z+xvfdt29uycKTwyG8qRjYcduOS0J+bf43FwPHPnzta2qJ29ISP/z1hlO1xM1p4PoVr3qhlnhXEtgUF0m8PA3Eqyq+sDwJxOUV/y0NxO1xJA305YEvLM/GUUm31VND2baqpNvq0aEQRgqB+rY6OpS1UUkHeCAJ1Af4Z2kgDvDGPNCV9uq+ZVmvYmAoFv2bZVmvAAC4aMVvgb1h2/TM1ET8Ch9vX9vTeBs1LFn22XK1lQ6bfyxfmuzwDeMjnaS70++i89ca7w3V2hBWlb6uFrNU5kZ5fmpps+le3WTI7VZ762pSLnWmm66v+YgGshGNb9k5s7W37cCva59ldU/bLKtKk51ilq65TdpBLR30pYMRdbhtOuhyvN8Vxse7k1zviMHR0KDdK6LT3+sX1/lr9ioo5nnX57/y8Vb1leb/o53N/6vFcb2QXwxgNl5Z784Ry/wDAADA4vrC+he/Hv9VTv3HB1rlLc3/xzqb/8c9WPmh4Gxvx/F4/f/bR0KYu7T+aBa4Nzb30ZEQrpxLTcYS2QX1b4glJrLAvXGHybWxxKbJxqr6Y+BIEvjNcB44ngROxEC+l+KekO/K+avhENbMpW5qLLErlhhNAh+IgbEkMB4DE0lgeQysSwJPL88Dk0ngX2MgTDduq39Ynm8rAACAM5HPs3ob74Z0nnekp12GSrsMg+0ydLXLUG2Xodko4v37Y4be5OSVSiFTb1rrQFJLKUO8GP4Z96uUITzSmDMtWGo6nn9QP9+g0pjhqQ/+wTdDC6X5/0Rn8//Bxtus9RNx/j9//b8s8JPYva/GU8fHYuDx9zQG8h0DJ+Jk9456VZN5iXzSfkcssS4GxpLArhhYlwQ23ZQHDr6mMZDPtOuN315vfDovUQgAAADABRd3EMTdNHH+f/8Xn/hpq3Kl+f+6zub/sb1lxcY+F2t9cnkIRyvzvakHVgxlgbgfYyj+PP71QyFcUtjBUS8xNZiV6EsaDj8eyH6h3pdW9YOB7McH8f7GX/zo2JdqiQMDIVxd2PtSb+NX1ayNgTRwTV8WGEwDO3uyQNzzUw98vysLwDmr7xWML6j8VJe60YXLNXn9vVKuCZoOr7QPdIF8C/3marFU0wfyfap1Z/a0lapjUZTeHse925biu23Uu634RSr/hvLSfKgaurZObdt868ze+Ejxl6wli/Q8F3+l2kn6PLwOZ8++t+1V0w5MJB8fEwuXW/h1WInVXfnMp05f9eCNdx87eODUA/sfer7jbjQRfyj839971Whx8y62ashfc0vu82TS58lS/G9gzNMWQtj04WUt46X5/2Rn8/+e5HbOi3Fj7hkJ4S2FjXsybv73jmSfg4VA9il5aTmQHXJ/YrjpJycAAACcb/XdHfX9BdP5bXZCeDpPLuefPMP8cX/FugXzd9rvN3/nnU+2ipfm/5taz//7k246/u/4P4vE8f8FXey7ovvTB2bPaVd0qToWheP/C7rY322O/y/I8X/H/xfi+H8bjv8v6GJ/2krfknb50hVC+O7Nh9/bKl6a/+/qbP5v/b+FF+2rr/+3qdn6f7uarf83a/0/AABgUTVZaC6d55VW7ytlSFfvK2Vou0Bg2yUGrf93xuv/Hf3kyZa7+Erz/9nO5v/x5bCs2PpSWf9v7KYmVd0VA7ssDAgAAMDFqNkOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5e3f973+5W8Ye/sf7pmz9x/W+//JmdO7/4kQ/2hzA993glC1fev/3SydddvuHQncNXnHjq6Bt+X83L9ea3r2vIHWs9PRzCwcIjQzHx7HDtznxg4/vu29dTS5wcDuFNxcCO23ZcUkt8eziENxcDxz587WtqidvSEj/89YZTtcTNaeD6Fa96oZZ4Vx6opN396+VZdytpd7+0PISRQqDe3Y8tb6yq3saf5IGutI3vDGVtxMBQLPr1oayNGJiJJab7Q1jZE0J3WtVD1ayq7rSqf6xmVXWnVc1WQ3hHCKEnrerxvqyqnnTkP+/LqoqBy66657lraolv9YWwshj45YcOrakl9iSBeuMb+0K4ovaSSRv/bm/WeG/a+Nd6Q3hjCKEvLfFCT1aiLy3xRE8IlxYC9cY/1hPCvsArRPz42Vp8cM++/Ts2z8xM7V7ERF/e1kDYNj0zNb5l58zWatKnZiqF9EufPfuxP/bcp7fUbg/fMD7SSbonL9c71+XVvQ13r7vYex/7NVisZP75KNUf8/eFZaH/1j1Tu8c/uXnv3t2rsr+dZl+d/e3Oo9m2WrVUttXVxUpW7r1l18o9+/avmL5l8/ap7VMfX7P2rWvXTqx5+8ramCayv+djoIcu/EBf21Oo5EK8/SUkJJZaoqvh023iYv8YL33Rn+9ob6jOfUCXphXFLJW5UZ6PQa8/yxGfzbeUtiNaVZo4lLKsbp/lutJkYj7LQJZl7ltdaXJYrKlrbpPG+11hfLy72XYYbbxb3LzPnMPmfTTfdJ2mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//0HxvZA=")

20m35.977557103s ago: executing program 33 (id=2545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}]}]}, 0x20}}, 0xc0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19m58.711022801s ago: executing program 2 (id=2651):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000540)={0x0, 0x8cda, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000000400), &(0x7f0000001840))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x7)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000340)={0x0, 0xd, 0x3, &(0x7f0000000380)={0x4, "eaf184375fa619fcbd27d40b7ebcf5b774a687b0e82909a0e542f15138f20c475f"}})
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007bb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00005e2000/0x4000)=nil)
munlockall()
madvise(&(0x7f000041e000/0x2000)=nil, 0x2000, 0x8)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)

19m58.452479407s ago: executing program 4 (id=2653):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r0, 0x0, 0x0)

19m57.058620369s ago: executing program 2 (id=2659):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
unshare(0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0)
syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00')
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000a00)={@my=0x1})

19m56.287366818s ago: executing program 4 (id=2661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000ac0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfa1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfaf)

19m55.818653096s ago: executing program 4 (id=2663):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000003c0)={0x20004, <r7=>r5, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000400)={<r8=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000440)={r8})
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
r11 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r11, 0x0, 0xd, &(0x7f0000000340)="04", 0x1)
recvmmsg(r11, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0)

19m55.700443988s ago: executing program 2 (id=2665):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)

19m55.179868351s ago: executing program 4 (id=2666):
mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000001680)='27', 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='0x01\n0', 0x6)

19m55.067819493s ago: executing program 4 (id=2667):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

19m54.851158335s ago: executing program 4 (id=2668):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600))

19m53.979739794s ago: executing program 2 (id=2669):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c609040000000101"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000680)={0x40, 0x17, 0x6, "564a3eb884a5"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x81, 0x1, "ac"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, ','}, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19m49.369390135s ago: executing program 2 (id=2676):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

19m48.978684675s ago: executing program 2 (id=2678):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0xa4df7e26671238da)
writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "0102030405060708090a0b0c0d0e0f10"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x1c, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x68}}, 0x0)

19m39.568978846s ago: executing program 34 (id=2668):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600))

19m33.929540942s ago: executing program 35 (id=2678):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0xa4df7e26671238da)
writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "0102030405060708090a0b0c0d0e0f10"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x1c, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x68}}, 0x0)

12m9.690994026s ago: executing program 5 (id=3347):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000280))

12m9.690350266s ago: executing program 7 (id=3348):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000194c0)=0x80000000000003)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000019680)={0xa, 0x2010, 0x6, @empty, 0xd}, 0x1c)

12m8.072876422s ago: executing program 7 (id=3349):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe)

12m6.825902889s ago: executing program 5 (id=3353):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r3, 0x4b72, &(0x7f00000191c0)={0x1, 0x80088, 0x7, 0x100003c, 0x2, "0b000089040401000000000000f600"})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
poll(&(0x7f00000000c0)=[{r4, 0x4022}], 0x1, 0xe13)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0)

12m6.72215271s ago: executing program 7 (id=3354):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fchdir(r0)
mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0)

12m5.499919134s ago: executing program 7 (id=3356):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000800)={0x0, 0x0, 0x800})

12m3.656423133s ago: executing program 7 (id=3358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

12m3.451516553s ago: executing program 7 (id=3359):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'dh\x00', 0x1d, 0x80002, 0x64}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

12m2.484397702s ago: executing program 5 (id=3363):
syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)

12m1.842788288s ago: executing program 5 (id=3364):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000001c1800000018000000030000000000000001000085001e0000020000000200000000000000005f00"], 0x0, 0x33, 0x0, 0xa}, 0x28)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r5, 0x80}, 0x8)
r6 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffff7ffffffd, 0x1608e2)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000004c0)={r7, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ff8, 0x0, 0x0, 0x12, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x5, 0xa]}})
r8 = fsopen(&(0x7f0000000280)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000600)='\x9e\xc4\xe7\xb2s,\xc5\xcf\xd0;8g\xa3\xa8\rZ\xbf.f\xe0.\x1df\x87\x06f\xc1\xba\xda\x8f\r\x9d\xd2\x10\xce\x97H\xe0\xa1pz\x91\xf0-7>u\xa1\xf4\xc1 M\xe5\xd3e!\x86\x9e\x01\x10k\xa4\xd8\x13,\x80\xae\xb1\xdf\xf7\xa2\x95]\x19\xd7\xad|\x81T@e\xcc\x80\xcc\xf3\x85\xaaog\xef\xfb\xbb|\xd8\xaa\x80ZM2\xed\x85\x97-\xa6\xd9\v_\xbd;ZqR}\x10\xde\xb7\xf9my\x82\x87U)G\xe6\xb8\x02\xcb\x1f\xb8\x05\xe4\xd3=\'\x8b\xaa\xc5\xac\x86\x1e\xbb^e[\xa8J\xa1X\x97\xef\xe3C\x1a|\xbe\xa0\xcf\x80\xfe\xc65\x14\x9a\b\xf5\xa4.\xdb#\x89s\x81\xdd\x85\xcb0\xbe\x91^\xcb\x1b#\f\x88~\x1d\xbc\x128\xf5\x10\xed\xd1\x9a\xe1\x01\xcf\xdf\t\xb2p\x94\\\xf5\x1f\xdf\xcfhi\xa9\xe7\xf2BC\xd4\xe7\xf9\xef\x1d\xa6\xf9\x9e\xdbH\x9eTNx\x8dX\xb9\xc01@\t\x7fB\xcb@\xc6\x8b\xacY', 0x0)
ioctl$LOOP_CLR_FD(r6, 0x4c01)

12m1.836926119s ago: executing program 3 (id=3365):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$sndctrl(0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000380)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r6, &(0x7f0000000640)=""/102392, 0x18ff8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m0.06799457s ago: executing program 5 (id=3367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

11m59.524612935s ago: executing program 5 (id=3368):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000001b200)=ANY=[@ANYBLOB], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r1, &(0x7f000001b280)={0x0, 0xf5, &(0x7f000001b2c0)={&(0x7f000001b300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000001b3c0)={0x0, 0x0, &(0x7f000001b400)={&(0x7f000001b440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

11m59.496612998s ago: executing program 3 (id=3369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0xc, 0x13, &(0x7f0000019400)=ANY=[@ANYBLOB], &(0x7f00000194c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019500)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000019580)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11m57.299692352s ago: executing program 3 (id=3372):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000019300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019380)={&(0x7f00000193c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf25090000000800010001000000050008000900606c"], 0x2c}, 0x1, 0x0, 0x0, 0x8044010}, 0x6010)
syz_usb_connect(0x0, 0x15d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xda, 0x68, 0x54, 0x8, 0x1164, 0x871, 0x2f5a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x14b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0xf1, 0x0, 0x0, 0xe2, 0x4b, 0xdf, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "f3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xe13d, 0x6, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x3d, 0x9}, @mdlm_detail={0x7a, 0x24, 0x13, 0x9, "ad896a125f6f9a03aed9c1b95b6e068d639446f6d3206826f61a0c23fd712604a2b8cc49ade967d39c8beeedbeed4758495a895c186d7c2bd5911f5a734e4e670ec54964143889d68215287095e1867dc7b5f214fac59525a415824b08b8fd62deffdb8cc979f3990850aadf3e429b15af2f10a22cbd"}, @dmm={0x7, 0x24, 0x14, 0xeed, 0x7ff}, @mdlm_detail={0x79, 0x24, 0x13, 0x3, "abc01ce6460c175fe960feeca44f2ce6b42bb9313402ccf053b35780d52932342f847646d61671ff1bcd55f18c00a84650b5e65e432155e05ddf780b84239cf3b689b14a890525307d8cbe496104a88759998b2a027e30ddd78aa11d7dc471a4dfcab1e464a93dcb64a6eab9bfc1071a7f9378dce3"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x84, 0x3, 0x1, 0x0, "a650c339bf965e87"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf4, 0x7f, 0x4, 0x7f, 0x9}]}]}}]}}]}}, 0x0)

11m53.228981848s ago: executing program 3 (id=3374):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000001b40)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000001abc0)={0x0, 0x0, &(0x7f000001ac00)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r4 = syz_open_procfs(0x0, &(0x7f000001aec0)='task\x00')
fcntl$notify(r4, 0x402, 0xfb0fca2daa2f4273)
getdents(r4, &(0x7f000001af00)=""/180, 0xb4)

11m49.374676572s ago: executing program 3 (id=3376):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

11m48.766032504s ago: executing program 3 (id=3378):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000580)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ttyUSB0\x00', 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

11m47.501903643s ago: executing program 36 (id=3359):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'dh\x00', 0x1d, 0x80002, 0x64}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

11m46.481657158s ago: executing program 6 (id=3381):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2b, 0x4, 0x7583)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)

11m45.381067479s ago: executing program 6 (id=3382):
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x8000)
readv(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/4112, 0x1010}], 0x1)

11m45.259931692s ago: executing program 6 (id=3383):
r0 = syz_open_dev$vim2m(&(0x7f0000002440), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002480)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}})

11m45.252798663s ago: executing program 6 (id=3384):
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000019800)={0x0, 0x0}, 0x10)

11m43.661109166s ago: executing program 37 (id=3368):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000001b200)=ANY=[@ANYBLOB], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r1, &(0x7f000001b280)={0x0, 0xf5, &(0x7f000001b2c0)={&(0x7f000001b300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000001b3c0)={0x0, 0x0, &(0x7f000001b400)={&(0x7f000001b440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

11m43.61601214s ago: executing program 6 (id=3386):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

11m42.24509579s ago: executing program 6 (id=3387):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x3630c1)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x177)
mount(0x0, &(0x7f0000000a40)='./sys\x00', &(0x7f0000000a80)='sysfs\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000b00), 0x0, 0x2)
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000b80)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000bc0)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r4, &(0x7f0000000d00), 0x0)
bind$bt_hci(r4, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000014f00)={0x1}, 0x0)
process_vm_writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/105, 0x69}, {&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x6, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000000700)=""/187, 0xbb}], 0x4, 0x0)

11m33.092212186s ago: executing program 38 (id=3378):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000580)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ttyUSB0\x00', 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

11m26.345401075s ago: executing program 39 (id=3387):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x3630c1)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x177)
mount(0x0, &(0x7f0000000a40)='./sys\x00', &(0x7f0000000a80)='sysfs\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000b00), 0x0, 0x2)
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000b80)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000bc0)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r4, &(0x7f0000000d00), 0x0)
bind$bt_hci(r4, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000014f00)={0x1}, 0x0)
process_vm_writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/105, 0x69}, {&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x6, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000000700)=""/187, 0xbb}], 0x4, 0x0)

14.957698299s ago: executing program 8 (id=4878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "25eb00", 0x1}}}, 0xd)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc8}}}, 0xe)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, 0x0)
migrate_pages(r3, 0x200, 0x0, 0x0)

9.313721607s ago: executing program 8 (id=4891):
r0 = syz_usb_connect(0x6, 0x50, &(0x7f00000004c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r5 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r2}, 0x18)
pidfd_getfd(0xffffffffffffffff, r5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0x2eb4, 0x2000007ff)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000540)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

9.123951006s ago: executing program 0 (id=4892):
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/bus/usb/drivers/cdc_acm/remove_id\x00', 0x1, 0x0)
write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[], 0x9)

8.831709496s ago: executing program 0 (id=4893):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x80060)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/186)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x2, 0x2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='cmdline\x00')
preadv(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x11, 0xffffffffffffffff, 0xec776000)
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {r3, r4+10000000}}, &(0x7f0000000240))
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40440, 0x100)
close(r6)
r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001800)={0x0, <r9=>0x0}, &(0x7f0000001840)=0xc)
fsetxattr$security_capability(r8, &(0x7f0000001880), &(0x7f00000018c0)=@v3={0x3000000, [{0x3, 0x4}, {0x10001, 0x6}], r9}, 0x18, 0x0)
ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000001900)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9410, 0x0, 0x0, {<r10=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}})
ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x8c8, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '1'}, 0x20, '8', 0x20, 'R', ' 1 journal_sectors:64'}}]})
socket(0xf, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0600646e733dff3388f07dff7ac366642c080000006f3d", @ANYRES8=r10, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRES32=r10, @ANYRESOCT=r8, @ANYBLOB="d27573a15aa6fa8b1733d15e54b279"])
fcntl$dupfd(r5, 0x0, r5)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000111000/0x2000)=nil)

7.762835575s ago: executing program 0 (id=4895):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000740)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3f0a63089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b00000000000000017809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006)
ioperm(0x4, 0x8, 0x5)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = getpid()
kcmp(r2, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x66cc42, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00')
pread64(r8, &(0x7f0000001ac0)=""/102400, 0x19000, 0x1000000000)
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000340)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x40, 0x1, 0xa9, {0xa9, 0x21, "3746b7282714d64cac5ea7e252e9d4f9d480600bc6742b509044a6e152de7008c66c190b672137702fe74db0d1e52d97eb544ec0f54467fcb21f46802454393e8d4297541164e87e10a82b69f51e284027dbf5497f73c24e020ac05520cfe1ed9a320d89fec928a89cea612d7f492391a3ad090dcbac45f1a4ea488592c88cbb3cfca9ea4afde686ffb77e474dbb9c66975296a42ec94dc3e9d252e171cec29c0ef2f6f3a100e3"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000001a40)={0x44, &(0x7f0000001780)={0x0, 0x7, 0xe9, "66a9c3926a900a3d676bde3eb39338389981f3a585e338ab5372cac3f76501af25045143fe041956325d17b6e2c8caaacec83d539c1b1a89486c64440e7abdd4af6d736d8c3198e977a999bb1d3f6cb6ea2aff1541bc18081018647520dbb825981773898f5dbf1e8d36bdc99d8574016786db682c444eb8621a7b0feb6efb9e179e3dc4abcf78ab3f49a0690d041cd75b83c596638b6e3223580287353e257a37e5dce0e821ebdb2ae862042c1c5378ac7cb0f025112482b518fb3216f2d23542c8d35f5376bc46b967333ffa2777beb2e1db5e39f40de05343cff278b86e925e33b0fda36f9a4f14"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x5a}, &(0x7f00000018c0)={0x0, 0x8, 0xfffffdeb, 0xcb}, &(0x7f0000001900)={0x20, 0x81, 0x2, "328e"}, &(0x7f0000001940)={0x20, 0x82, 0x3, "13301f"}, &(0x7f0000001980)={0x20, 0x83, 0x1, "f2"}, &(0x7f00000019c0)={0x20, 0x84, 0x1, "e7"}, &(0x7f0000001a00)={0x20, 0x85, 0x3, "804d04"}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x20001, 0x100)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80)
fallocate$kvm_guest_memfd(r4, 0x0, 0x1000, 0x4000)

6.712061423s ago: executing program 1 (id=4897):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='0x12', 0x4)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000400), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0', 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='3\n', 0x2)
pipe2(&(0x7f0000000040), 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')

6.507817034s ago: executing program 9 (id=4899):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='1m', 0x2)

6.383379396s ago: executing program 1 (id=4900):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "25eb00", 0x1}}}, 0xd)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc8}}}, 0xe)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48810)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x202, 0x0)
migrate_pages(r4, 0x200, 0x0, 0x0)

6.122616933s ago: executing program 9 (id=4901):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, 0x0, 0x0)
write$nci(r0, 0x0, 0x0)
write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc3, @a_listen={0x1, 0x3, 0x1, 0x80, 0x80, 0x9, 0x6, "", 0x9, 0x9, 0x18, 0xd5}}, 0xf)

5.347883262s ago: executing program 0 (id=4902):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
syz_usb_connect(0x0, 0x2e, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
syz_open_dev$sndctrl(0x0, 0x3, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000019280)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)

5.182211379s ago: executing program 9 (id=4903):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0)
unshare(0x2c020400)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

3.837074797s ago: executing program 1 (id=4904):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000340))
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0)
unshare(0x2020600)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x27, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x50)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='tmpfs\x00', 0x2200890, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))

3.721253529s ago: executing program 8 (id=4905):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4aa40, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das1800\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x14b102)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0)
close(r3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000040), 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
writev(0xffffffffffffffff, 0x0, 0x0)
syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x40208, 0x1, 0xa1, 0x0, r6}, 0x0, &(0x7f00000005c0), &(0x7f0000000600))

3.51595661s ago: executing program 9 (id=4906):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000400))

2.861904227s ago: executing program 0 (id=4907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e)
write(r3, &(0x7f0000000080)="0b000300010001", 0x7)

2.721842491s ago: executing program 1 (id=4908):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='0x12', 0x4)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000400), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0', 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='3\n', 0x2)
pipe2(&(0x7f0000000040), 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')

2.646928809s ago: executing program 8 (id=4909):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000300)={0x0}, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x38, 0x0, r0, 0x0, 0x0, 0x0, 0x4040100, 0x0, {0x0, 0x0, 0x1}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2.587804725s ago: executing program 9 (id=4910):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_connect(0x2, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x1404, 0x1, 0x70bd2c, 0x1}, 0x10}}, 0x20004018)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r2 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8010005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x2000, 0x20)
r3 = msgget$private(0x0, 0x20)
msgctl$IPC_STAT(r3, 0x2, 0x0)
msgsnd(r3, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
open(&(0x7f0000000400)='./file0\x00', 0x108843, 0x98)

2.252040949s ago: executing program 1 (id=4911):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
set_mempolicy(0x8006, &(0x7f00000008c0)=0xfff, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

1.470480179s ago: executing program 8 (id=4912):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}}, 0x0)

1.299880907s ago: executing program 1 (id=4913):
r0 = syz_usb_connect(0x6, 0x50, &(0x7f00000004c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r5 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r2}, 0x18)
pidfd_getfd(0xffffffffffffffff, r5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0x2eb4, 0x2000007ff)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000540)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1.299749036s ago: executing program 8 (id=4914):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200010000000009"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

127.317576ms ago: executing program 0 (id=4915):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x111)
mount(0x0, 0x0, &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000540)={0x401, 0x1})

0s ago: executing program 9 (id=4916):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mtd(&(0x7f00000005c0), 0x0, 0x2)
write(r2, &(0x7f0000000600)="e1ebb391e7531624c4078adada8a7dabf0dc857eb3e3c4e34533fee6e4edb6db9a30", 0x22)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={<r3=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r3, 0x3e8}}, 0x48)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000400)={0xa, 0x4, 0xfa00, {r3}}, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000580)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r4, 0x0)
openat(r4, 0x0, 0x9850c1, 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
close(r0)

kernel console output (not intermixed with test programs):

T18145] kernel write not supported for file /input/mice (pid: 18145 comm: kworker/1:4)
[ 1655.803511][T22634] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1655.811356][T22634] Error parsing options; rc = [-22]
[ 1657.738378][   T28] audit: type=1800 audit(1793011872.673:3388): pid=22652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4351" name="new_id" dev="sysfs" ino=48383 res=0 errno=0
[ 1657.767160][T18210] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1658.009140][T18210] usb 10-1: Using ep0 maxpacket: 32
[ 1658.032555][T18210] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1658.046504][T18210] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.078254][T18210] usb 10-1: Product: syz
[ 1658.085049][T18210] usb 10-1: Manufacturer: syz
[ 1658.095538][T18210] usb 10-1: SerialNumber: syz
[ 1658.108290][T18210] usb 10-1: config 0 descriptor??
[ 1658.113959][   T28] audit: type=1800 audit(1793011873.053:3389): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349996 res=0 errno=0
[ 1658.151936][   T28] audit: type=1800 audit(1793011873.083:3390): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350039 res=0 errno=0
[ 1658.173539][   T28] audit: type=1800 audit(1793011873.083:3391): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350003 res=0 errno=0
[ 1658.174199][T18210] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1658.277713][   T28] audit: type=1800 audit(1793011873.123:3392): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350004 res=0 errno=0
[ 1658.777467][T18145] kernel write not supported for file /input/mice (pid: 18145 comm: kworker/1:4)
[ 1659.096721][T22672] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1659.104615][T22672] Error parsing options; rc = [-22]
[ 1659.178186][T18210] gspca_stk1135: reg_w 0x7 err -71
[ 1659.193407][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1659.764986][T18210] gspca_stk1135: Sensor write failed
[ 1659.827137][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1659.833524][T18210] gspca_stk1135: Sensor write failed
[ 1659.870248][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1659.876642][T18210] gspca_stk1135: Sensor read failed
[ 1660.238612][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1660.736344][T18210] gspca_stk1135: Sensor read failed
[ 1660.742131][T18210] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1660.757125][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1660.866297][T18210] gspca_stk1135: Sensor read failed
[ 1660.877957][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1660.885244][T18210] gspca_stk1135: Sensor read failed
[ 1660.957118][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1660.998706][T18210] gspca_stk1135: Sensor write failed
[ 1661.004133][T18210] gspca_stk1135: serial bus timeout: status=0x00
[ 1661.072381][T18210] gspca_stk1135: Sensor write failed
[ 1661.255864][T18210] stk1135: probe of 10-1:0.0 failed with error -71
[ 1661.639030][   T28] audit: type=1800 audit(1793011876.573:3393): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=350025 res=0 errno=0
[ 1661.757960][T18210] usb 10-1: USB disconnect, device number 19
[ 1661.831932][   T28] audit: type=1800 audit(1793011876.613:3394): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=350026 res=0 errno=0
[ 1662.071468][   T28] audit: type=1800 audit(1793011876.623:3395): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=350005 res=0 errno=0
[ 1662.815544][   T28] audit: type=1800 audit(1793011876.633:3396): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=350027 res=0 errno=0
[ 1662.921182][   T28] audit: type=1800 audit(1793011876.683:3397): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350048 res=0 errno=0
[ 1663.417740][T18210] kernel write not supported for file /input/mice (pid: 18210 comm: kworker/0:2)
[ 1663.526042][T22711] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1663.533857][T22711] Error parsing options; rc = [-22]
[ 1664.094874][T22709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1664.105328][T22709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1664.837141][T18102] Bluetooth: hci0: command 0x0406 tx timeout
[ 1667.932451][T18210] kernel write not supported for file /input/mice (pid: 18210 comm: kworker/0:2)
[ 1668.914031][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.923097][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1670.317781][ T9220] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1670.617339][ T9220] usb 10-1: Using ep0 maxpacket: 32
[ 1670.661991][ T9220] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1670.687427][ T9220] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.705901][ T9220] usb 10-1: Product: syz
[ 1670.727242][ T9220] usb 10-1: Manufacturer: syz
[ 1670.731957][ T9220] usb 10-1: SerialNumber: syz
[ 1670.774634][ T9220] usb 10-1: config 0 descriptor??
[ 1670.787105][   T28] audit: type=1800 audit(1793011885.723:3398): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350196 res=0 errno=0
[ 1670.821136][ T9220] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1670.856924][   T28] audit: type=1800 audit(1793011885.723:3399): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350239 res=0 errno=0
[ 1670.897466][   T28] audit: type=1800 audit(1793011885.723:3400): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350203 res=0 errno=0
[ 1670.951438][   T28] audit: type=1800 audit(1793011885.723:3401): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350204 res=0 errno=0
[ 1670.986797][T22783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1671.055598][T22783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1671.337191][T15772] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1671.622136][T15772] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1671.738205][T15772] usb 9-1: config 0 has no interface number 0
[ 1671.796348][   T28] audit: type=1800 audit(1793011886.603:3402): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350280 res=0 errno=0
[ 1671.848659][T15772] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1672.099029][T15772] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1672.195369][ T9220] gspca_stk1135: reg_w 0x7 err -71
[ 1672.210791][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.217340][ T9220] gspca_stk1135: Sensor write failed
[ 1672.222658][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.229037][ T9220] gspca_stk1135: Sensor write failed
[ 1672.234343][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.240921][ T9220] gspca_stk1135: Sensor read failed
[ 1672.246149][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.287418][ T9220] gspca_stk1135: Sensor read failed
[ 1672.300368][T15772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.308507][T15772] usb 9-1: Product: syz
[ 1672.312723][T15772] usb 9-1: Manufacturer: syz
[ 1672.315700][ T9220] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1672.317869][T15772] usb 9-1: SerialNumber: syz
[ 1672.321104][T15772] usb 9-1: config 0 descriptor??
[ 1672.327142][   T28] audit: type=1800 audit(1793011887.263:3403): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350299 res=0 errno=0
[ 1672.335229][T15772] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1672.367267][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.385208][ T9220] gspca_stk1135: Sensor read failed
[ 1672.400054][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.407365][   T28] audit: type=1800 audit(1793011887.303:3404): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350342 res=0 errno=0
[ 1672.419328][ T9220] gspca_stk1135: Sensor read failed
[ 1672.466709][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.477339][   T28] audit: type=1800 audit(1793011887.303:3405): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350306 res=0 errno=0
[ 1672.481823][ T9220] gspca_stk1135: Sensor write failed
[ 1672.517347][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1672.524884][   T28] audit: type=1800 audit(1793011887.303:3406): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350307 res=0 errno=0
[ 1672.533563][ T9220] gspca_stk1135: Sensor write failed
[ 1672.557464][ T9220] stk1135: probe of 10-1:0.0 failed with error -71
[ 1672.595967][   T28] audit: type=1800 audit(1793011887.323:3407): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=350328 res=0 errno=0
[ 1672.596811][ T9220] usb 10-1: USB disconnect, device number 20
[ 1672.805090][T15772] usb 9-1: USB disconnect, device number 22
[ 1672.812317][T15772] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1677.036492][   T28] kauditd_printk_skb: 10 callbacks suppressed
[ 1677.036612][   T28] audit: type=1800 audit(1793011891.913:3418): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350606 res=0 errno=0
[ 1677.344475][ T9220] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1677.527115][ T9220] usb 10-1: Using ep0 maxpacket: 32
[ 1677.542305][ T9220] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1677.567319][ T9220] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.597275][ T9220] usb 10-1: Product: syz
[ 1677.616320][ T9220] usb 10-1: Manufacturer: syz
[ 1677.648171][ T9220] usb 10-1: SerialNumber: syz
[ 1677.672365][ T9220] usb 10-1: config 0 descriptor??
[ 1677.677562][   T28] audit: type=1800 audit(1793011892.613:3419): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350625 res=0 errno=0
[ 1677.677607][   T28] audit: type=1800 audit(1793011892.613:3420): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350668 res=0 errno=0
[ 1677.677643][   T28] audit: type=1800 audit(1793011892.613:3421): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350632 res=0 errno=0
[ 1677.678848][   T28] audit: type=1800 audit(1793011892.613:3422): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350633 res=0 errno=0
[ 1677.712441][ T9220] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1679.878201][ T9220] gspca_stk1135: reg_w 0x0 err -110
[ 1679.884927][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.892139][ T9220] gspca_stk1135: Sensor write failed
[ 1679.898444][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.904810][ T9220] gspca_stk1135: Sensor write failed
[ 1679.918262][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.924624][ T9220] gspca_stk1135: Sensor read failed
[ 1679.930260][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.937799][ T9220] gspca_stk1135: Sensor read failed
[ 1679.943043][ T9220] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1679.960267][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.974245][ T9220] gspca_stk1135: Sensor read failed
[ 1679.987432][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1679.993796][ T9220] gspca_stk1135: Sensor read failed
[ 1680.025081][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1680.045318][ T9220] gspca_stk1135: Sensor write failed
[ 1680.057105][ T9220] gspca_stk1135: serial bus timeout: status=0x00
[ 1680.063465][ T9220] gspca_stk1135: Sensor write failed
[ 1680.116342][ T9220] stk1135: probe of 10-1:0.0 failed with error -110
[ 1680.128159][   T28] audit: type=1800 audit(1793011895.063:3423): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=350654 res=0 errno=0
[ 1680.187430][   T28] audit: type=1800 audit(1793011895.063:3424): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=350655 res=0 errno=0
[ 1681.097302][   T28] audit: type=1800 audit(1793011895.073:3425): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=350634 res=0 errno=0
[ 1681.130955][T18145] usb 10-1: USB disconnect, device number 21
[ 1681.240455][   T28] audit: type=1800 audit(1793011895.073:3426): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=350656 res=0 errno=0
[ 1681.277281][T22864] ieee802154 phy0 wpan0: encryption failed: -22
[ 1681.304116][   T28] audit: type=1800 audit(1793011895.103:3427): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350677 res=0 errno=0
[ 1682.608800][    T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1683.109082][   T28] audit: type=1800 audit(1793011898.023:3428): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350753 res=0 errno=0
[ 1683.157582][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1683.195701][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1684.106810][    T9] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[ 1684.187752][    T9] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[ 1684.263188][    T9] usb 9-1: Product: syz
[ 1684.330156][    T9] usb 9-1: Manufacturer: syz
[ 1684.418386][    T9] uvcvideo 9-1:1.0: Found multiple Units with ID 1
[ 1684.427878][   T28] audit: type=1800 audit(1793011899.363:3429): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350772 res=0 errno=0
[ 1684.481349][   T28] audit: type=1800 audit(1793011899.403:3430): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350814 res=0 errno=0
[ 1684.534182][   T28] audit: type=1800 audit(1793011899.403:3431): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350779 res=0 errno=0
[ 1684.587630][   T28] audit: type=1800 audit(1793011899.403:3432): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350780 res=0 errno=0
[ 1684.637358][    T9] usb 9-1: Found UVC 71.01 device syz (225a:e1d4)
[ 1684.677174][    T9] usb 9-1: No streaming interface found for terminal 2.
[ 1684.677176][ T5859] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1684.759022][   T28] audit: type=1800 audit(1793011899.683:3433): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=350801 res=0 errno=0
[ 1684.800876][   T28] audit: type=1800 audit(1793011899.693:3434): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=350802 res=0 errno=0
[ 1684.832091][   T28] audit: type=1800 audit(1793011899.693:3435): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=350781 res=0 errno=0
[ 1684.862546][ T5859] usb 10-1: Using ep0 maxpacket: 32
[ 1684.875464][ T5859] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1684.885526][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.902519][   T28] audit: type=1800 audit(1793011899.693:3436): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350826 res=0 errno=0
[ 1684.933130][ T5769] usb 9-1: USB disconnect, device number 23
[ 1684.943196][ T5859] usb 10-1: Product: syz
[ 1684.963265][ T5859] usb 10-1: Manufacturer: syz
[ 1684.980468][ T5859] usb 10-1: SerialNumber: syz
[ 1685.002249][   T28] audit: type=1800 audit(1793011899.693:3437): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350854 res=0 errno=0
[ 1685.036434][ T5859] usb 10-1: config 0 descriptor??
[ 1685.058642][ T5859] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1686.336764][ T5859] gspca_stk1135: reg_w 0x3 err -110
[ 1686.350062][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.356481][ T5859] gspca_stk1135: Sensor write failed
[ 1686.376344][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.697364][ T5859] gspca_stk1135: Sensor write failed
[ 1686.702785][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.711929][ T5859] gspca_stk1135: Sensor read failed
[ 1686.722117][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.734110][ T5859] gspca_stk1135: Sensor read failed
[ 1686.740771][ T5859] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1686.749384][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.755801][ T5859] gspca_stk1135: Sensor read failed
[ 1686.763277][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.773392][ T5859] gspca_stk1135: Sensor read failed
[ 1686.783598][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.793133][ T5859] gspca_stk1135: Sensor write failed
[ 1686.799671][ T5859] gspca_stk1135: serial bus timeout: status=0x00
[ 1686.806073][ T5859] gspca_stk1135: Sensor write failed
[ 1686.813951][ T5859] stk1135: probe of 10-1:0.0 failed with error -110
[ 1687.841577][ T9220] usb 10-1: USB disconnect, device number 22
[ 1688.403685][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 1688.403700][   T28] audit: type=1800 audit(1793011903.333:3447): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351013 res=0 errno=0
[ 1688.514426][ T9220] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1691.305477][ T9220] usb 10-1: device descriptor read/all, error -71
[ 1693.131360][   T28] audit: type=1800 audit(1793011908.073:3448): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351058 res=0 errno=0
[ 1694.638606][   T28] audit: type=1800 audit(1793011909.583:3449): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351077 res=0 errno=0
[ 1696.548414][T15772] IPVS: starting estimator thread 0...
[ 1696.729101][T23018] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1697.417358][   T28] audit: type=1800 audit(1793011912.333:3450): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351106 res=0 errno=0
[ 1699.714079][   T28] audit: type=1800 audit(1793011914.643:3451): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351157 res=0 errno=0
[ 1700.774961][T20993] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1700.957890][T20993] usb 2-1: Using ep0 maxpacket: 32
[ 1701.162624][T20993] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1701.313787][T20993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.347126][T20993] usb 2-1: Product: syz
[ 1701.351341][T20993] usb 2-1: Manufacturer: syz
[ 1701.387931][T20993] usb 2-1: SerialNumber: syz
[ 1701.427904][T20993] usb 2-1: config 0 descriptor??
[ 1701.435878][   T28] audit: type=1800 audit(1793011916.373:3452): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351194 res=0 errno=0
[ 1701.467134][   T28] audit: type=1800 audit(1793011916.383:3453): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=351237 res=0 errno=0
[ 1701.470959][T20993] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1701.540179][   T28] audit: type=1800 audit(1793011916.383:3454): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=351201 res=0 errno=0
[ 1701.606392][   T28] audit: type=1800 audit(1793011916.383:3455): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=351202 res=0 errno=0
[ 1703.348677][T20993] gspca_stk1135: reg_w 0x0 err -110
[ 1703.398455][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.404848][T20993] gspca_stk1135: Sensor write failed
[ 1703.433814][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.461055][T20993] gspca_stk1135: Sensor write failed
[ 1703.466401][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.517528][T20993] gspca_stk1135: Sensor read failed
[ 1703.543163][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.569648][T20993] gspca_stk1135: Sensor read failed
[ 1703.601160][T20993] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1703.637336][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.647140][T20993] gspca_stk1135: Sensor read failed
[ 1703.652396][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.715403][T23082] sd 0:0:1:0: PR command failed: 1026
[ 1703.717406][T20993] gspca_stk1135: Sensor read failed
[ 1703.726053][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.739714][T23082] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1703.757266][T20993] gspca_stk1135: Sensor write failed
[ 1703.762612][T20993] gspca_stk1135: serial bus timeout: status=0x00
[ 1703.787582][T23082] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1703.806019][T20993] gspca_stk1135: Sensor write failed
[ 1703.816626][T20993] stk1135: probe of 2-1:0.0 failed with error -110
[ 1703.845917][   T28] audit: type=1800 audit(1793011918.783:3456): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=351223 res=0 errno=0
[ 1703.851554][T20993] usb 2-1: USB disconnect, device number 11
[ 1704.233736][   T28] audit: type=1800 audit(1793011918.783:3457): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=351224 res=0 errno=0
[ 1704.694286][   T28] audit: type=1800 audit(1793011918.793:3458): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=351203 res=0 errno=0
[ 1704.736812][   T28] audit: type=1800 audit(1793011918.793:3459): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=351225 res=0 errno=0
[ 1704.964883][   T28] audit: type=1800 audit(1793011918.873:3460): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351246 res=0 errno=0
[ 1705.380919][   T28] audit: type=1800 audit(1793011919.733:3461): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24762 res=0 errno=0
[ 1705.630775][   T28] audit: type=1800 audit(1793011919.783:3462): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24930 res=0 errno=0
[ 1705.848103][   T28] audit: type=1800 audit(1793011920.153:3463): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24762 res=0 errno=0
[ 1705.919286][T23102] Invalid ELF header magic: != ELF
[ 1706.028689][   T28] audit: type=1800 audit(1793011920.253:3464): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351282 res=0 errno=0
[ 1706.149444][   T28] audit: type=1800 audit(1793011920.293:3465): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351292 res=0 errno=0
[ 1706.567429][   T28] audit: type=1800 audit(1793011920.443:3466): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=24549 res=0 errno=0
[ 1706.687313][   T28] audit: type=1800 audit(1793011920.443:3467): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=24546 res=0 errno=0
[ 1706.767145][   T28] audit: type=1800 audit(1793011920.443:3468): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=24768 res=0 errno=0
[ 1707.497845][T23118] vivid-001: disconnect
[ 1708.274415][T23116] vivid-001: reconnect
[ 1711.513566][T23132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1711.523434][T23132] syzkaller0: entered promiscuous mode
[ 1711.553053][   T28] kauditd_printk_skb: 5 callbacks suppressed
[ 1711.553062][   T28] audit: type=1800 audit(1793011926.493:3474): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351429 res=0 errno=0
[ 1711.602036][T23132] syzkaller0: entered allmulticast mode
[ 1711.635498][T23132] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.656632][T23128] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.699254][T23128] tipc: Disabling bearer <eth:syzkaller0>
[ 1712.603896][   T28] audit: type=1800 audit(1793011927.543:3475): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351448 res=0 errno=0
[ 1712.623816][   T28] audit: type=1800 audit(1793011927.543:3476): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351458 res=0 errno=0
[ 1712.869315][T23151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4465'.
[ 1715.544752][T23163] sd 0:0:1:0: PR command failed: 1026
[ 1715.563530][T23163] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1715.589031][T23163] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1716.576187][   T28] audit: type=1800 audit(1793011931.513:3477): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24762 res=0 errno=0
[ 1717.010615][   T28] audit: type=1800 audit(1793011931.953:3478): pid=23168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24930 res=0 errno=0
[ 1717.447610][   T28] audit: type=1800 audit(1793011932.363:3479): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351477 res=0 errno=0
[ 1717.868329][T23184] vivid-002: disconnect
[ 1718.532086][T23180] vivid-002: reconnect
[ 1718.730123][T23193] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1718.737876][T23193] Error parsing options; rc = [-22]
[ 1718.897077][T23190] FAULT_INJECTION: forcing a failure.
[ 1718.897077][T23190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1719.015722][T23190] CPU: 0 PID: 23190 Comm: syz.9.4475 Not tainted syzkaller #0
[ 1719.023242][T23190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1719.033319][T23190] Call Trace:
[ 1719.036615][T23190]  <TASK>
[ 1719.039562][T23190]  dump_stack_lvl+0x18c/0x250
[ 1719.044280][T23190]  ? show_regs_print_info+0x20/0x20
[ 1719.049503][T23190]  ? load_image+0x420/0x420
[ 1719.054041][T23190]  ? __might_fault+0xaa/0x120
[ 1719.058737][T23190]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1719.063788][T23190]  ? __virt_addr_valid+0x10c/0x380
[ 1719.068925][T23190]  should_fail_ex+0x394/0x4c0
[ 1719.073625][T23190]  _copy_to_user+0x2f/0xa0
[ 1719.078080][T23190]  bpf_verifier_vlog+0x432/0x840
[ 1719.083052][T23190]  __btf_verifier_log_type+0x4cb/0x690
[ 1719.088547][T23190]  ? btf_int_show+0x2810/0x2810
[ 1719.093433][T23190]  btf_datasec_check_meta+0x444/0xb50
[ 1719.098821][T23190]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1719.104490][T23190]  btf_check_all_metas+0x371/0xaf0
[ 1719.109638][T23190]  btf_parse_type_sec+0xfc/0x1960
[ 1719.114690][T23190]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1719.120355][T23190]  ? btf_verifier_log+0x1a0/0x1a0
[ 1719.125401][T23190]  ? btf_parse_hdr+0x545/0x700
[ 1719.130182][T23190]  ? btf_parse_str_sec+0x20d/0x2a0
[ 1719.135311][T23190]  btf_new_fd+0x440/0x9e0
[ 1719.139673][T23190]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1719.144810][T23190]  ? capable+0x88/0xe0
[ 1719.148902][T23190]  __sys_bpf+0x670/0x890
[ 1719.153170][T23190]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1719.158579][T23190]  ? lock_chain_count+0x20/0x20
[ 1719.163461][T23190]  __x64_sys_bpf+0x7c/0x90
[ 1719.167904][T23190]  do_syscall_64+0x55/0xb0
[ 1719.172336][T23190]  ? clear_bhb_loop+0x40/0x90
[ 1719.177037][T23190]  ? clear_bhb_loop+0x40/0x90
[ 1719.181733][T23190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1719.187651][T23190] RIP: 0033:0x7fa2b9d9f559
[ 1719.192090][T23190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1719.211715][T23190] RSP: 002b:00007fa2b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1719.220153][T23190] RAX: ffffffffffffffda RBX: 00007fa2ba025fa0 RCX: 00007fa2b9d9f559
[ 1719.228149][T23190] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[ 1719.236143][T23190] RBP: 00007fa2b9e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1719.244135][T23190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1719.252138][T23190] R13: 00007fa2ba026038 R14: 00007fa2ba025fa0 R15: 00007fffcd3a2fc8
[ 1719.260152][T23190]  </TASK>
[ 1719.599202][T23202] NILFS (nullb0): couldn't find nilfs on the device
[ 1720.245214][   T28] audit: type=1326 audit(1793011935.183:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.8.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65fef9f559 code=0x0
[ 1721.561986][T21161] Bluetooth: hci2: command 0x0406 tx timeout
[ 1722.083323][T18210] kernel write not supported for file bpf-map (pid: 18210 comm: kworker/0:2)
[ 1723.268543][T23223] vivid-001: disconnect
[ 1723.389408][T23218] vivid-001: reconnect
[ 1723.907427][T23235] FAULT_INJECTION: forcing a failure.
[ 1723.907427][T23235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1723.919893][   T28] audit: type=1800 audit(1793011938.853:3481): pid=23237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4490" name="c_chmask" dev="configfs" ino=63137 res=0 errno=0
[ 1723.930115][T23235] CPU: 1 PID: 23235 Comm: syz.0.4488 Not tainted syzkaller #0
[ 1723.943908][   T28] audit: type=1800 audit(1793011938.873:3482): pid=23230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4490" name="p_chmask" dev="configfs" ino=63138 res=0 errno=0
[ 1723.948492][T23235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1723.948506][T23235] Call Trace:
[ 1723.948515][T23235]  <TASK>
[ 1723.948524][T23235]  dump_stack_lvl+0x18c/0x250
[ 1723.989998][T23235]  ? show_regs_print_info+0x20/0x20
[ 1723.995228][T23235]  ? load_image+0x420/0x420
[ 1723.999763][T23235]  ? __might_fault+0xaa/0x120
[ 1724.004471][T23235]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1724.009521][T23235]  ? __virt_addr_valid+0x10c/0x380
[ 1724.014661][T23235]  should_fail_ex+0x394/0x4c0
[ 1724.019419][T23235]  _copy_to_user+0x2f/0xa0
[ 1724.023879][T23235]  bpf_verifier_vlog+0x432/0x840
[ 1724.027574][T23239] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1724.028864][T23235]  __btf_verifier_log+0xe3/0x140
[ 1724.028896][T23235]  ? __might_fault+0xc6/0x120
[ 1724.036461][T23239] Error parsing options; rc = [-22]
[ 1724.041349][T23235]  ? __might_fault+0xaa/0x120
[ 1724.041379][T23235]  ? btf_check_sec_info+0x350/0x350
[ 1724.041401][T23235]  ? bpf_verifier_vlog+0x50b/0x840
[ 1724.041433][T23235]  __btf_verifier_log_type+0x4f7/0x690
[ 1724.071693][T23235]  ? sort_r+0x17f5/0x1810
[ 1724.076039][T23235]  ? btf_int_show+0x2810/0x2810
[ 1724.080902][T23235]  btf_datasec_check_meta+0x444/0xb50
[ 1724.086288][T23235]  btf_check_all_metas+0x371/0xaf0
[ 1724.091407][T23235]  btf_parse_type_sec+0xfc/0x1960
[ 1724.096430][T23235]  ? btf_check_sec_info+0x350/0x350
[ 1724.101635][T23235]  ? __virt_addr_valid+0x10c/0x380
[ 1724.106762][T23235]  ? btf_verifier_log+0x1a0/0x1a0
[ 1724.111796][T23235]  ? btf_parse_hdr+0x545/0x700
[ 1724.116561][T23235]  ? btf_parse_str_sec+0x20d/0x2a0
[ 1724.121675][T23235]  btf_new_fd+0x440/0x9e0
[ 1724.126015][T23235]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1724.131129][T23235]  ? capable+0x88/0xe0
[ 1724.135218][T23235]  __sys_bpf+0x670/0x890
[ 1724.139464][T23235]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1724.144846][T23235]  ? lock_chain_count+0x20/0x20
[ 1724.149705][T23235]  __x64_sys_bpf+0x7c/0x90
[ 1724.154123][T23235]  do_syscall_64+0x55/0xb0
[ 1724.158547][T23235]  ? clear_bhb_loop+0x40/0x90
[ 1724.163229][T23235]  ? clear_bhb_loop+0x40/0x90
[ 1724.167907][T23235]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1724.173806][T23235] RIP: 0033:0x7f718599f559
[ 1724.178222][T23235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1724.197827][T23235] RSP: 002b:00007f7186865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1724.206237][T23235] RAX: ffffffffffffffda RBX: 00007f7185c25fa0 RCX: 00007f718599f559
[ 1724.214201][T23235] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[ 1724.222163][T23235] RBP: 00007f7185a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1724.230130][T23235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1724.238094][T23235] R13: 00007f7185c26038 R14: 00007f7185c25fa0 R15: 00007ffdacd61d88
[ 1724.246072][T23235]  </TASK>
[ 1725.443322][T23258] NILFS (nullb0): couldn't find nilfs on the device
[ 1727.967437][T21161] Bluetooth: hci0: command 0x0406 tx timeout
[ 1728.396821][T23274] vivid-003: disconnect
[ 1728.671176][T23269] vivid-003: reconnect
[ 1728.902399][T23283] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1728.910550][T23283] Error parsing options; rc = [-22]
[ 1728.924749][   T28] audit: type=1800 audit(1793011943.863:3483): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4501" name="c_chmask" dev="configfs" ino=63726 res=0 errno=0
[ 1729.017369][   T28] audit: type=1800 audit(1793011943.863:3484): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4501" name="p_chmask" dev="configfs" ino=63727 res=0 errno=0
[ 1729.645558][T23287] netlink: set zone limit has 8 unknown bytes
[ 1730.417614][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.423952][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1732.083563][T20993] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1732.297356][T20993] usb 10-1: Using ep0 maxpacket: 8
[ 1732.304647][T20993] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1732.325804][T20993] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1732.372338][T20993] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[ 1732.397360][T20993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.431337][T20993] kobil_sct 10-1:1.0: KOBIL USB smart card terminal converter detected
[ 1732.457478][   T28] audit: type=1800 audit(1793011947.393:3485): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351590 res=0 errno=0
[ 1732.481631][T20993] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1733.447209][   T28] audit: type=1800 audit(1793011947.393:3486): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=351630 res=0 errno=0
[ 1733.491116][T18210] usb 10-1: USB disconnect, device number 25
[ 1733.512364][T18210] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1733.518903][   T28] audit: type=1800 audit(1793011947.393:3487): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=351597 res=0 errno=0
[ 1733.558994][T18210] kobil_sct 10-1:1.0: device disconnected
[ 1733.623857][   T28] audit: type=1800 audit(1793011947.393:3488): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=351598 res=0 errno=0
[ 1733.671238][   T28] audit: type=1800 audit(1793011947.393:3489): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=351599 res=0 errno=0
[ 1733.723346][   T28] audit: type=1800 audit(1793011947.443:3490): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351639 res=0 errno=0
[ 1733.767123][   T28] audit: type=1800 audit(1793011948.363:3491): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351655 res=0 errno=0
[ 1733.837564][   T28] audit: type=1800 audit(1793011948.363:3492): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351669 res=0 errno=0
[ 1734.285667][T23325] vivid-003: disconnect
[ 1735.045801][T23321] vivid-003: reconnect
[ 1735.122526][T23330] FAULT_INJECTION: forcing a failure.
[ 1735.122526][T23330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1735.136438][T23330] CPU: 0 PID: 23330 Comm: syz.1.4513 Not tainted syzkaller #0
[ 1735.143938][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1735.154017][T23330] Call Trace:
[ 1735.157317][T23330]  <TASK>
[ 1735.160268][T23330]  dump_stack_lvl+0x18c/0x250
[ 1735.164985][T23330]  ? show_regs_print_info+0x20/0x20
[ 1735.170216][T23330]  ? load_image+0x420/0x420
[ 1735.174744][T23330]  ? __might_fault+0xaa/0x120
[ 1735.179446][T23330]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1735.184495][T23330]  ? __virt_addr_valid+0x10c/0x380
[ 1735.189633][T23330]  should_fail_ex+0x394/0x4c0
[ 1735.194329][T23330]  _copy_to_user+0x2f/0xa0
[ 1735.198754][T23330]  btf_new_fd+0x5c0/0x9e0
[ 1735.203092][T23330]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1735.208205][T23330]  ? capable+0x88/0xe0
[ 1735.212276][T23330]  __sys_bpf+0x670/0x890
[ 1735.216517][T23330]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1735.221898][T23330]  ? lock_chain_count+0x20/0x20
[ 1735.226841][T23330]  __x64_sys_bpf+0x7c/0x90
[ 1735.231272][T23330]  do_syscall_64+0x55/0xb0
[ 1735.235690][T23330]  ? clear_bhb_loop+0x40/0x90
[ 1735.240371][T23330]  ? clear_bhb_loop+0x40/0x90
[ 1735.245050][T23330]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1735.250945][T23330] RIP: 0033:0x7f62a119f559
[ 1735.255386][T23330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1735.274989][T23330] RSP: 002b:00007f62a20c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1735.283401][T23330] RAX: ffffffffffffffda RBX: 00007f62a1425fa0 RCX: 00007f62a119f559
[ 1735.291371][T23330] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[ 1735.299336][T23330] RBP: 00007f62a1236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1735.307304][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1735.315266][T23330] R13: 00007f62a1426038 R14: 00007f62a1425fa0 R15: 00007fff08b6a7c8
[ 1735.323246][T23330]  </TASK>
[ 1736.864428][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1736.864442][   T28] audit: type=1800 audit(1793011951.803:3496): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351735 res=0 errno=0
[ 1737.052745][T18145] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 1737.395977][T18145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1737.396078][T18145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1737.396265][T18145] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1737.396351][T18145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1737.428236][   T28] audit: type=1800 audit(1793011952.363:3497): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351759 res=0 errno=0
[ 1737.555656][   T28] audit: type=1800 audit(1793011952.493:3498): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=351799 res=0 errno=0
[ 1738.674640][   T28] audit: type=1800 audit(1793011952.533:3499): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=351766 res=0 errno=0
[ 1738.674672][   T28] audit: type=1800 audit(1793011952.553:3500): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=351767 res=0 errno=0
[ 1738.677762][T18145] pegasus: probe of 2-1:1.0 failed with error -32
[ 1738.707702][   T28] audit: type=1800 audit(1793011953.653:3501): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=351768 res=0 errno=0
[ 1738.719589][   T28] audit: type=1800 audit(1793011953.663:3502): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351817 res=0 errno=0
[ 1739.989309][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1739.996319][T23360] FAULT_INJECTION: forcing a failure.
[ 1739.996319][T23360] name failslab, interval 1, probability 0, space 0, times 0
[ 1739.996380][T23360] CPU: 1 PID: 23360 Comm: syz.0.4521 Not tainted syzkaller #0
[ 1739.996401][T23360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1739.996414][T23360] Call Trace:
[ 1739.996421][T23360]  <TASK>
[ 1739.996430][T23360]  dump_stack_lvl+0x18c/0x250
[ 1739.996464][T23360]  ? show_regs_print_info+0x20/0x20
[ 1739.996488][T23360]  ? load_image+0x420/0x420
[ 1739.996510][T23360]  ? __might_sleep+0xe0/0xe0
[ 1739.996535][T23360]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1739.996561][T23360]  should_fail_ex+0x394/0x4c0
[ 1739.996589][T23360]  should_failslab+0x9/0x20
[ 1739.996607][T23360]  slab_pre_alloc_hook+0x59/0x300
[ 1739.996629][T23360]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1739.996656][T23360]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1739.996681][T23360]  __kmem_cache_alloc_node+0x53/0x260
[ 1739.996705][T23360]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1739.996729][T23360]  __kmalloc+0xa7/0x240
[ 1739.996756][T23360]  tomoyo_realpath_from_path+0xe6/0x5c0
[ 1739.996777][T23360]  ? __kmalloc+0xe5/0x240
[ 1739.996813][T23360]  tomoyo_mount_permission+0x3e7/0x9d0
[ 1739.996836][T23360]  ? tomoyo_mount_permission+0x2b3/0x9d0
[ 1739.996860][T23360]  ? ____kasan_slab_free+0x126/0x1f0
[ 1739.996884][T23360]  ? tomoyo_get_name+0x570/0x570
[ 1739.996904][T23360]  ? do_syscall_64+0x55/0xb0
[ 1739.996968][T23360]  ? kasan_quarantine_put+0xd8/0x220
[ 1739.996994][T23360]  ? lockdep_hardirqs_on+0x98/0x150
[ 1739.997041][T23360]  security_sb_mount+0x87/0xc0
[ 1739.997066][T23360]  path_mount+0xbc/0xfa0
[ 1739.997086][T23360]  ? kmem_cache_free+0xf8/0x290
[ 1739.997112][T23360]  __se_sys_mount+0x2e7/0x3d0
[ 1739.997139][T23360]  ? __x64_sys_mount+0xc0/0xc0
[ 1739.997165][T23360]  ? lockdep_hardirqs_on+0x98/0x150
[ 1739.997190][T23360]  ? __x64_sys_mount+0x20/0xc0
[ 1739.997213][T23360]  do_syscall_64+0x55/0xb0
[ 1739.997235][T23360]  ? clear_bhb_loop+0x40/0x90
[ 1739.997258][T23360]  ? clear_bhb_loop+0x40/0x90
[ 1739.997284][T23360]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1739.997307][T23360] RIP: 0033:0x7f718599f559
[ 1739.997326][T23360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1739.997341][T23360] RSP: 002b:00007f7186865028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1739.997364][T23360] RAX: ffffffffffffffda RBX: 00007f7185c25fa0 RCX: 00007f718599f559
[ 1739.997379][T23360] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[ 1739.997392][T23360] RBP: 00007f7185a36b20 R08: 0000200000000280 R09: 0000000000000000
[ 1739.997406][T23360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1739.997418][T23360] R13: 00007f7185c26038 R14: 00007f7185c25fa0 R15: 00007ffdacd61d88
[ 1739.997449][T23360]  </TASK>
[ 1740.009941][T23360] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1740.067401][T20993] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1740.290847][T23365] vivid-000: disconnect
[ 1740.401243][T23364] ptp ptp0: new virtual clock ptp1
[ 1740.401586][T23364] ptp ptp0: guarantee physical clock free running
[ 1740.406828][T23364] ptp ptp0: delete virtual clock ptp1
[ 1740.414138][   T28] audit: type=1800 audit(1793011955.303:3503): pid=23364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4522" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1740.419591][   T28] audit: type=1800 audit(1793011955.363:3504): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=351995 res=0 errno=0
[ 1740.508731][   T28] audit: type=1800 audit(1793011955.453:3505): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=351999 res=0 errno=0
[ 1740.531868][T20993] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1740.531900][T20993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.534199][T20993] usb 9-1: config 0 descriptor??
[ 1740.541254][T23364] ptp ptp0: only physical clock in use now
[ 1740.635244][T20993] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1740.780856][T18145] usb 2-1: USB disconnect, device number 12
[ 1741.037653][T23362] vivid-000: reconnect
[ 1741.400047][T23370] FAULT_INJECTION: forcing a failure.
[ 1741.400047][T23370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1741.703278][T20993] gspca_cpia1: usb_control_msg 05, error -71
[ 1741.719007][T20993] gspca_cpia1: usb_control_msg 01, error -71
[ 1741.732588][T20993] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[ 1741.741415][T23370] CPU: 0 PID: 23370 Comm: syz.1.4524 Not tainted syzkaller #0
[ 1741.748919][T23370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1741.753050][T20993] usb 9-1: USB disconnect, device number 24
[ 1741.758970][T23370] Call Trace:
[ 1741.758982][T23370]  <TASK>
[ 1741.758991][T23370]  dump_stack_lvl+0x18c/0x250
[ 1741.759024][T23370]  ? show_regs_print_info+0x20/0x20
[ 1741.759047][T23370]  ? load_image+0x420/0x420
[ 1741.759070][T23370]  ? __might_fault+0xaa/0x120
[ 1741.790194][T23370]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1741.795245][T23370]  ? __virt_addr_valid+0x10c/0x380
[ 1741.800392][T23370]  should_fail_ex+0x394/0x4c0
[ 1741.805086][T23370]  _copy_to_user+0x2f/0xa0
[ 1741.809498][T23370]  bpf_verifier_vlog+0x432/0x840
[ 1741.814436][T23370]  __btf_verifier_log+0xe3/0x140
[ 1741.819366][T23370]  ? __might_fault+0xc6/0x120
[ 1741.824034][T23370]  ? __might_fault+0xaa/0x120
[ 1741.828705][T23370]  ? btf_check_sec_info+0x350/0x350
[ 1741.833894][T23370]  ? bpf_verifier_vlog+0x50b/0x840
[ 1741.839013][T23370]  __btf_verifier_log_type+0x4f7/0x690
[ 1741.844492][T23370]  ? sort_r+0x17f5/0x1810
[ 1741.848818][T23370]  ? btf_int_show+0x2810/0x2810
[ 1741.853666][T23370]  btf_datasec_check_meta+0x444/0xb50
[ 1741.859054][T23370]  btf_check_all_metas+0x371/0xaf0
[ 1741.864162][T23370]  btf_parse_type_sec+0xfc/0x1960
[ 1741.869194][T23370]  ? btf_check_sec_info+0x350/0x350
[ 1741.874385][T23370]  ? __virt_addr_valid+0x10c/0x380
[ 1741.879492][T23370]  ? btf_verifier_log+0x1a0/0x1a0
[ 1741.884527][T23370]  ? btf_parse_hdr+0x545/0x700
[ 1741.889299][T23370]  ? btf_parse_str_sec+0x20d/0x2a0
[ 1741.894404][T23370]  btf_new_fd+0x440/0x9e0
[ 1741.898737][T23370]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1741.903839][T23370]  ? capable+0x88/0xe0
[ 1741.907916][T23370]  __sys_bpf+0x670/0x890
[ 1741.912160][T23370]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1741.917527][T23370]  ? lock_chain_count+0x20/0x20
[ 1741.922369][T23370]  __x64_sys_bpf+0x7c/0x90
[ 1741.926780][T23370]  do_syscall_64+0x55/0xb0
[ 1741.931188][T23370]  ? clear_bhb_loop+0x40/0x90
[ 1741.935884][T23370]  ? clear_bhb_loop+0x40/0x90
[ 1741.940577][T23370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1741.946485][T23370] RIP: 0033:0x7f62a119f559
[ 1741.950907][T23370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1741.970508][T23370] RSP: 002b:00007f62a20c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1741.978925][T23370] RAX: ffffffffffffffda RBX: 00007f62a1425fa0 RCX: 00007f62a119f559
[ 1741.986924][T23370] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[ 1741.994907][T23370] RBP: 00007f62a1236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1742.002867][T23370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1742.010829][T23370] R13: 00007f62a1426038 R14: 00007f62a1425fa0 R15: 00007fff08b6a7c8
[ 1742.018797][T23370]  </TASK>
[ 1745.007509][ T5838] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 1745.251551][ T5838] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1746.588352][ T5838] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1746.627129][ T5838] usb 9-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1746.647347][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1746.669142][   T28] kauditd_printk_skb: 6 callbacks suppressed
[ 1746.669157][   T28] audit: type=1800 audit(1793011961.603:3512): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352194 res=0 errno=0
[ 1746.713393][   T28] audit: type=1800 audit(1793011961.603:3513): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=352234 res=0 errno=0
[ 1746.742222][ T5838] usb 9-1: can't set config #1, error -71
[ 1746.767211][ T5838] usb 9-1: USB disconnect, device number 25
[ 1746.777099][   T28] audit: type=1800 audit(1793011961.603:3514): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=352201 res=0 errno=0
[ 1746.854431][   T28] audit: type=1800 audit(1793011961.603:3515): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=352202 res=0 errno=0
[ 1746.887653][   T28] audit: type=1800 audit(1793011961.603:3516): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=352203 res=0 errno=0
[ 1747.099449][T23410] FAULT_INJECTION: forcing a failure.
[ 1747.099449][T23410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1747.160384][T23410] CPU: 1 PID: 23410 Comm: syz.0.4539 Not tainted syzkaller #0
[ 1747.167905][T23410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1747.177976][T23410] Call Trace:
[ 1747.181265][T23410]  <TASK>
[ 1747.184213][T23410]  dump_stack_lvl+0x18c/0x250
[ 1747.188919][T23410]  ? show_regs_print_info+0x20/0x20
[ 1747.194145][T23410]  ? load_image+0x420/0x420
[ 1747.198726][T23410]  ? __might_fault+0xaa/0x120
[ 1747.203426][T23410]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1747.208473][T23410]  ? __virt_addr_valid+0x10c/0x380
[ 1747.213616][T23410]  should_fail_ex+0x394/0x4c0
[ 1747.218320][T23410]  _copy_to_user+0x2f/0xa0
[ 1747.222760][T23410]  btf_new_fd+0x5c0/0x9e0
[ 1747.227114][T23410]  ? bpf_btf_show_fdinfo+0x80/0x80
[ 1747.232251][T23410]  ? capable+0x88/0xe0
[ 1747.236341][T23410]  __sys_bpf+0x670/0x890
[ 1747.240602][T23410]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1747.246000][T23410]  ? lock_chain_count+0x20/0x20
[ 1747.250874][T23410]  __x64_sys_bpf+0x7c/0x90
[ 1747.255307][T23410]  do_syscall_64+0x55/0xb0
[ 1747.259739][T23410]  ? clear_bhb_loop+0x40/0x90
[ 1747.264431][T23410]  ? clear_bhb_loop+0x40/0x90
[ 1747.269124][T23410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1747.275041][T23410] RIP: 0033:0x7f718599f559
[ 1747.279472][T23410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1747.299094][T23410] RSP: 002b:00007f7186865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1747.307527][T23410] RAX: ffffffffffffffda RBX: 00007f7185c25fa0 RCX: 00007f718599f559
[ 1747.315515][T23410] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[ 1747.323502][T23410] RBP: 00007f7185a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1747.331488][T23410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1747.339476][T23410] R13: 00007f7185c26038 R14: 00007f7185c25fa0 R15: 00007ffdacd61d88
[ 1747.347457][T23410]  </TASK>
[ 1747.942654][   T28] audit: type=1800 audit(1793011962.873:3517): pid=23416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4535" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1747.978678][T23416] ptp ptp0: new virtual clock ptp1
[ 1747.983839][T23416] ptp ptp0: guarantee physical clock free running
[ 1748.009701][T23416] ptp ptp0: delete virtual clock ptp1
[ 1748.037395][   T28] audit: type=1800 audit(1793011962.943:3518): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352261 res=0 errno=0
[ 1748.098946][T23416] ptp ptp0: only physical clock in use now
[ 1748.119142][   T28] audit: type=1800 audit(1793011962.943:3519): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=352265 res=0 errno=0
[ 1750.848149][    T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1751.135365][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1751.177343][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1751.227147][    T9] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1751.267121][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.298407][   T28] audit: type=1800 audit(1793011966.243:3520): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352289 res=0 errno=0
[ 1751.357288][   T28] audit: type=1800 audit(1793011966.243:3521): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=352329 res=0 errno=0
[ 1752.348711][    T9] pegasus: probe of 2-1:1.0 failed with error -32
[ 1754.940378][    T9] usb 2-1: USB disconnect, device number 13
[ 1755.275374][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1755.275389][   T28] audit: type=1800 audit(1793011970.213:3526): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352431 res=0 errno=0
[ 1756.338043][ T5859] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1756.601930][T23467] NILFS (nullb0): couldn't find nilfs on the device
[ 1756.608732][ T5859] usb 9-1: Using ep0 maxpacket: 32
[ 1756.615886][ T5859] usb 9-1: config index 0 descriptor too short (expected 19, got 18)
[ 1756.634091][ T5859] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1756.657092][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.665139][ T5859] usb 9-1: Product: syz
[ 1756.687147][ T5859] usb 9-1: Manufacturer: syz
[ 1756.691811][ T5859] usb 9-1: SerialNumber: syz
[ 1756.719237][ T5859] usb 9-1: config 0 descriptor??
[ 1756.729011][ T5859] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1756.757454][   T28] audit: type=1800 audit(1793011971.683:3527): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352544 res=0 errno=0
[ 1758.065618][ T5859] dvb-usb: bulk message failed: -22 (2/0)
[ 1758.097253][   T28] audit: type=1800 audit(1793011971.683:3528): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=352587 res=0 errno=0
[ 1758.113413][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1758.139260][   T28] audit: type=1800 audit(1793011971.683:3529): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=352551 res=0 errno=0
[ 1758.295114][ T5859] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1759.011624][ T5859] usb 9-1: media controller created
[ 1759.045173][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1759.071588][ T5859] usb 9-1: selecting invalid altsetting 7
[ 1759.087103][   T28] audit: type=1800 audit(1793011971.683:3530): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=352552 res=0 errno=0
[ 1759.107383][ T5859] cxusb: set interface failed
[ 1759.112097][ T5859] dvb-usb: bulk message failed: -22 (1/0)
[ 1759.257467][ T5859] DVB: Unable to find symbol lgdt330x_attach()
[ 1759.263690][ T5859] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1759.327196][   T28] audit: type=1800 audit(1793011974.263:3531): pid=23481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4561" name="new_id" dev="sysfs" ino=48383 res=0 errno=0
[ 1759.427164][ T5859] rc_core: IR keymap rc-dvico-portable not found
[ 1759.433588][ T5859] Registered IR keymap rc-empty
[ 1759.458179][ T5859] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[ 1759.487865][ T5859] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input17
[ 1759.533305][ T5859] dvb-usb: schedule remote query interval to 100 msecs.
[ 1759.553872][ T5859] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1759.589135][ T5859] usb 9-1: USB disconnect, device number 26
[ 1759.675782][ T5859] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1759.709417][   T28] audit: type=1800 audit(1793011974.643:3532): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=352573 res=0 errno=0
[ 1761.034157][   T28] audit: type=1800 audit(1793011974.643:3533): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=352574 res=0 errno=0
[ 1761.097907][   T28] audit: type=1800 audit(1793011974.643:3534): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=352553 res=0 errno=0
[ 1761.177429][   T28] audit: type=1800 audit(1793011974.643:3535): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=352575 res=0 errno=0
[ 1761.227469][   T28] audit: type=1800 audit(1793011975.993:3536): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26655 res=0 errno=0
[ 1761.303257][   T28] audit: type=1800 audit(1793011976.243:3537): pid=23490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4565" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1761.344438][T23490] ptp ptp0: new virtual clock ptp1
[ 1761.374244][   T28] audit: type=1800 audit(1793011976.303:3538): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352747 res=0 errno=0
[ 1761.377263][T23490] ptp ptp0: guarantee physical clock free running
[ 1761.427384][   T28] audit: type=1800 audit(1793011976.303:3539): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=352751 res=0 errno=0
[ 1761.448121][T23495] ptp ptp0: delete virtual clock ptp1
[ 1761.455099][T23495] ptp ptp0: only physical clock in use now
[ 1763.772822][   T28] audit: type=1800 audit(1793011978.653:3540): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352767 res=0 errno=0
[ 1763.923993][   T28] audit: type=1800 audit(1793011978.863:3541): pid=23522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4564" name="c_chmask" dev="configfs" ino=64517 res=0 errno=0
[ 1764.058611][   T28] audit: type=1800 audit(1793011978.893:3542): pid=23522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4564" name="p_chmask" dev="configfs" ino=64519 res=0 errno=0
[ 1765.289354][T23536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1765.308195][T23536] syzkaller0: entered promiscuous mode
[ 1765.313703][T23536] syzkaller0: entered allmulticast mode
[ 1765.354067][T23536] tipc: Resetting bearer <eth:syzkaller0>
[ 1765.376676][T23535] tipc: Resetting bearer <eth:syzkaller0>
[ 1765.407755][T23535] tipc: Disabling bearer <eth:syzkaller0>
[ 1766.888921][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 1766.888938][   T28] audit: type=1800 audit(1793011981.733:3544): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="c_chmask" dev="configfs" ino=64589 res=0 errno=0
[ 1766.919339][   T28] audit: type=1800 audit(1793011981.733:3545): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="p_chmask" dev="configfs" ino=64590 res=0 errno=0
[ 1767.887752][T23568] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1767.896693][T23568] Error parsing options; rc = [-22]
[ 1768.310231][T23573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1768.335228][T23573] syzkaller0: entered promiscuous mode
[ 1768.367400][T23573] syzkaller0: entered allmulticast mode
[ 1768.430060][T23573] tipc: Resetting bearer <eth:syzkaller0>
[ 1768.469027][T23572] tipc: Resetting bearer <eth:syzkaller0>
[ 1768.564917][T23572] tipc: Disabling bearer <eth:syzkaller0>
[ 1768.696664][   T28] audit: type=1800 audit(1793011983.613:3546): pid=23578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4587" name="new_id" dev="sysfs" ino=48383 res=0 errno=0
[ 1768.828917][   T28] audit: type=1800 audit(1793011983.773:3547): pid=23582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4589" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1768.935867][T23582] ptp ptp0: new virtual clock ptp1
[ 1768.945703][T23582] ptp ptp0: guarantee physical clock free running
[ 1768.963868][   T28] audit: type=1800 audit(1793011983.903:3548): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352958 res=0 errno=0
[ 1768.987516][T23585] ptp ptp0: delete virtual clock ptp1
[ 1768.994797][   T28] audit: type=1800 audit(1793011983.933:3549): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=352962 res=0 errno=0
[ 1769.040721][T23585] ptp ptp0: only physical clock in use now
[ 1769.237934][T23594] sctp: [Deprecated]: syz.9.4591 (pid 23594) Use of int in max_burst socket option.
[ 1769.237934][T23594] Use struct sctp_assoc_value instead
[ 1769.327294][ T5859] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1769.517274][ T5859] usb 9-1: Using ep0 maxpacket: 16
[ 1769.539695][ T5859] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1769.549276][ T5859] usb 9-1: config 0 has no interface number 0
[ 1769.566209][ T5859] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1769.577466][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1769.585551][ T5859] usb 9-1: Product: syz
[ 1769.614992][ T5859] usb 9-1: Manufacturer: syz
[ 1769.636604][ T5859] usb 9-1: SerialNumber: syz
[ 1769.666854][ T5859] usb 9-1: config 0 descriptor??
[ 1769.697657][   T28] audit: type=1800 audit(1793011984.613:3550): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1769.701826][ T5859] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1769.762014][   T28] audit: type=1800 audit(1793011984.633:3551): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=352986 res=0 errno=0
[ 1769.769454][T23599] bridge0: port 4(batadv1) entered blocking state
[ 1769.800131][   T28] audit: type=1800 audit(1793011984.633:3552): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=353029 res=0 errno=0
[ 1769.833827][T23599] bridge0: port 4(batadv1) entered disabled state
[ 1769.845352][   T28] audit: type=1800 audit(1793011984.633:3553): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=352993 res=0 errno=0
[ 1769.877523][T23599] batadv1: entered allmulticast mode
[ 1769.884673][T23599] batadv1: entered promiscuous mode
[ 1769.982780][T23606] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1769.990764][T23606] Error parsing options; rc = [-22]
[ 1770.079494][T23610] tipc: Started in network mode
[ 1770.084595][T23610] tipc: Node identity b6c79b7477ca, cluster identity 4711
[ 1770.092575][T23610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1770.128802][T23610] syzkaller0: entered promiscuous mode
[ 1770.144495][T23610] syzkaller0: entered allmulticast mode
[ 1770.176253][T23610] tipc: Resetting bearer <eth:syzkaller0>
[ 1770.194375][T23607] tipc: Resetting bearer <eth:syzkaller0>
[ 1770.206579][T23612] random: crng reseeded on system resumption
[ 1770.278205][T12300] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1770.288342][T12300] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1770.298701][T23607] tipc: Disabling bearer <eth:syzkaller0>
[ 1770.631664][ T5859] gspca_spca1528: reg_w err -71
[ 1770.678496][ T5859] spca1528: probe of 9-1:0.1 failed with error -71
[ 1770.690821][ T5859] usb 9-1: USB disconnect, device number 27
[ 1771.470316][T23625] ptp ptp0: new virtual clock ptp1
[ 1771.495963][T23625] ptp ptp0: guarantee physical clock free running
[ 1771.508583][T23625] ptp ptp0: delete virtual clock ptp1
[ 1771.647671][T23632] sctp: [Deprecated]: syz.9.4602 (pid 23632) Use of int in max_burst socket option.
[ 1771.647671][T23632] Use struct sctp_assoc_value instead
[ 1771.721413][T23625] ptp ptp0: only physical clock in use now
[ 1772.001798][   T28] kauditd_printk_skb: 11 callbacks suppressed
[ 1772.001813][   T28] audit: type=1800 audit(1793011986.943:3565): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1772.083275][   T28] audit: type=1800 audit(1793011987.023:3566): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4603" name="c_chmask" dev="configfs" ino=64386 res=0 errno=0
[ 1772.124250][T23642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4606'.
[ 1772.134426][   T28] audit: type=1800 audit(1793011987.023:3567): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4603" name="p_chmask" dev="configfs" ino=64387 res=0 errno=0
[ 1772.974332][T23642] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1773.057961][T23646] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1773.064915][T23646] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1773.238347][T23646] bond1: (slave wireguard0): Error -95 calling set_mac_address
[ 1774.681581][   T28] audit: type=1800 audit(1793011989.623:3568): pid=23669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4613" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1774.716209][   T28] audit: type=1800 audit(1793011989.653:3569): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=353817 res=0 errno=0
[ 1774.736517][T23669] ptp ptp0: new virtual clock ptp1
[ 1774.746360][T23669] ptp ptp0: guarantee physical clock free running
[ 1774.754837][T23669] ptp ptp0: delete virtual clock ptp1
[ 1774.767157][   T28] audit: type=1800 audit(1793011989.693:3570): pid=23590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=353821 res=0 errno=0
[ 1774.792895][T23669] ptp ptp0: only physical clock in use now
[ 1774.933991][T23676] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4615'.
[ 1775.086487][T23680] sctp: [Deprecated]: syz.0.4614 (pid 23680) Use of int in max_burst socket option.
[ 1775.086487][T23680] Use struct sctp_assoc_value instead
[ 1775.120832][   T28] audit: type=1800 audit(1793011990.053:3571): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4616" name="c_chmask" dev="configfs" ino=64771 res=0 errno=0
[ 1775.251876][   T28] audit: type=1800 audit(1793011990.093:3572): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4616" name="p_chmask" dev="configfs" ino=64772 res=0 errno=0
[ 1775.475330][   T28] audit: type=1800 audit(1793011990.413:3573): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1777.301131][T23701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4625'.
[ 1777.374521][   T28] audit: type=1800 audit(1793011992.313:3574): pid=23703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4623" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1777.407968][T23703] ptp ptp0: new virtual clock ptp1
[ 1777.413137][T23703] ptp ptp0: guarantee physical clock free running
[ 1777.414657][   T28] audit: type=1800 audit(1793011992.353:3575): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=353923 res=0 errno=0
[ 1777.483669][T23703] ptp ptp0: delete virtual clock ptp1
[ 1777.503438][   T28] audit: type=1800 audit(1793011992.353:3576): pid=23590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=353927 res=0 errno=0
[ 1777.525994][T23703] ptp ptp0: only physical clock in use now
[ 1777.553641][T23711] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812)
[ 1777.574923][   T28] audit: type=1326 audit(1793011992.463:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1777.639788][   T28] audit: type=1326 audit(1793011992.483:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1777.668576][   T28] audit: type=1326 audit(1793011992.483:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1777.760405][T23718] sctp: [Deprecated]: syz.8.4627 (pid 23718) Use of int in max_burst socket option.
[ 1777.760405][T23718] Use struct sctp_assoc_value instead
[ 1777.809669][   T28] audit: type=1326 audit(1793011992.483:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1777.809763][   T28] audit: type=1326 audit(1793011992.483:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1777.838240][T23717] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812)
[ 1778.033794][   T28] audit: type=1326 audit(1793011992.483:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1778.127236][T18210] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1778.161354][   T28] audit: type=1326 audit(1793011992.483:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.4626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a119f559 code=0x7ffc0000
[ 1778.328324][T18210] usb 2-1: device descriptor read/64, error -71
[ 1778.707151][T18210] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1778.877540][T18210] usb 2-1: device descriptor read/64, error -71
[ 1779.001873][T18210] usb usb2-port1: attempt power cycle
[ 1779.657253][T18210] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1779.768783][T18210] usb 2-1: device descriptor read/8, error -71
[ 1779.801718][T23739] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4635'.
[ 1779.912701][T23745] input: syz1 as /devices/virtual/input/input18
[ 1780.087592][T18210] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1780.175591][T18210] usb 2-1: device descriptor read/8, error -71
[ 1780.358137][T18210] usb usb2-port1: unable to enumerate USB device
[ 1780.911607][T18210] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 1781.036651][ T5859] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1781.111443][T18210] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1781.137151][T18210] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1781.146960][T18210] usb 9-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1781.156573][T18210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.227484][ T5859] usb 10-1: Using ep0 maxpacket: 16
[ 1781.387152][T20993] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[ 1781.610970][ T5859] usb 10-1: config 0 has no interfaces?
[ 1781.620944][ T5859] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1781.630925][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1781.639304][ T5859] usb 10-1: Product: syz
[ 1781.643723][ T5859] usb 10-1: Manufacturer: syz
[ 1781.648598][ T5859] usb 10-1: SerialNumber: syz
[ 1781.661451][ T5859] usb 10-1: config 0 descriptor??
[ 1781.799490][T20993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1781.815700][T23769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4647'.
[ 1781.817980][T20993] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[ 1781.837534][T20993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1781.853267][T20993] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1781.865769][T20993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1781.894082][T20993] usb 2-1: Product: syz
[ 1781.900726][ T9220] usb 10-1: USB disconnect, device number 26
[ 1781.903688][T20993] usb 2-1: Manufacturer: syz
[ 1781.914779][T20993] usb 2-1: SerialNumber: syz
[ 1781.929655][T20993] usb 2-1: config 0 descriptor??
[ 1781.939786][T20993] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[ 1781.950830][T20993] radio-si470x: probe of 2-1:0.0 failed with error -5
[ 1781.960583][T20993] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1782.190527][T18210] pegasus: probe of 9-1:1.0 failed with error -32
[ 1782.889750][T23777] netlink: 'syz.9.4650': attribute type 4 has an invalid length.
[ 1783.987136][T18210] usb 9-1: USB disconnect, device number 28
[ 1784.016848][    T9] usb 2-1: USB disconnect, device number 18
[ 1785.526014][   T28] kauditd_printk_skb: 77 callbacks suppressed
[ 1785.526045][   T28] audit: type=1800 audit(1793012000.463:3661): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354407 res=0 errno=0
[ 1785.843290][   T28] audit: type=1800 audit(1793012000.703:3662): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354417 res=0 errno=0
[ 1786.036498][T23800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4656'.
[ 1786.431245][T23810] binder: 23804:23810 ioctl 4018620d 0 returned -22
[ 1787.143027][T23811] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1787.151373][T23811] Error parsing options; rc = [-22]
[ 1787.325118][T23816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1787.342971][T23816] syzkaller0: entered promiscuous mode
[ 1787.357138][T23816] syzkaller0: entered allmulticast mode
[ 1787.453968][T23816] tipc: Resetting bearer <eth:syzkaller0>
[ 1787.493978][T23815] tipc: Resetting bearer <eth:syzkaller0>
[ 1787.585467][T23815] tipc: Disabling bearer <eth:syzkaller0>
[ 1788.279338][T23822] NILFS (nullb0): couldn't find nilfs on the device
[ 1788.920649][   T28] audit: type=1800 audit(1793012003.853:3663): pid=23826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4665" name="run" dev="sysfs" ino=1799 res=0 errno=0
[ 1788.996503][T23830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4666'.
[ 1790.866662][T21161] Bluetooth: hci2: command 0x0406 tx timeout
[ 1792.728136][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.734515][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1794.717547][T23867] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1794.725797][T23867] Error parsing options; rc = [-22]
[ 1794.797513][T23869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'.
[ 1795.642361][T23871] syz.0.4677 (23871): drop_caches: 2
[ 1796.337745][T23884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4678'.
[ 1799.668533][T23914] program syz.0.4686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1802.888895][   T28] audit: type=1800 audit(1793012017.823:3664): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30761 res=0 errno=0
[ 1802.937534][   T28] audit: type=1800 audit(1793012017.863:3665): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30784 res=0 errno=0
[ 1803.087562][T23946] could not allocate digest TFM handle -���q����4�O�(0&q��f�=�*΀���j���$���������;�}'�j�O
[ 1803.147762][T20993] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[ 1803.590587][T20993] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1803.711163][T20993] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1803.724501][T20993] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1803.731498][T20993] usb 9-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.00
[ 1803.742316][T20993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.820794][T20993] usb 9-1: config 0 descriptor??
[ 1803.830167][T23942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1803.932036][   T28] audit: type=1800 audit(1793012018.743:3666): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354616 res=0 errno=0
[ 1804.020189][   T28] audit: type=1800 audit(1793012018.963:3667): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=354656 res=0 errno=0
[ 1804.060389][T23957] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1804.068696][T23957] Error parsing options; rc = [-22]
[ 1804.118275][   T28] audit: type=1800 audit(1793012018.983:3668): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=354623 res=0 errno=0
[ 1804.145776][   T28] audit: type=1800 audit(1793012018.983:3669): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=354624 res=0 errno=0
[ 1804.167312][   T28] audit: type=1800 audit(1793012018.983:3670): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=354625 res=0 errno=0
[ 1804.207388][   T28] audit: type=1800 audit(1793012019.053:3671): pid=23938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354674 res=0 errno=0
[ 1804.252573][   T28] audit: type=1800 audit(1793012019.193:3672): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354692 res=0 errno=0
[ 1804.255722][T20993] microsoft 0003:045E:0750.0016: ignoring exceeding usage max
[ 1804.361602][T20993] microsoft 0003:045E:0750.0016: No inputs registered, leaving
[ 1804.393031][T20993] microsoft 0003:045E:0750.0016: hidraw0: USB HID v0.31 Joystick [HID 045e:0750] on usb-dummy_hcd.8-1/input0
[ 1804.404971][   T28] audit: type=1800 audit(1793012019.333:3673): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354709 res=0 errno=0
[ 1804.443617][T20993] microsoft 0003:045E:0750.0016: no inputs found
[ 1804.462343][T20993] microsoft 0003:045E:0750.0016: could not initialize ff, continuing anyway
[ 1804.476494][T20993] usb 9-1: USB disconnect, device number 29
[ 1804.600215][T23962] fido_id[23962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1807.899602][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 1807.899617][   T28] audit: type=1800 audit(1793012022.843:3676): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30411 res=0 errno=0
[ 1807.930081][   T28] audit: type=1800 audit(1793012022.843:3677): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30434 res=0 errno=0
[ 1808.167459][ T9220] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[ 1808.391710][ T9220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1808.428474][ T9220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1808.485006][ T9220] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1808.547201][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1808.797192][   T28] audit: type=1800 audit(1793012023.733:3678): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354794 res=0 errno=0
[ 1808.934445][   T28] audit: type=1800 audit(1793012023.763:3679): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=354834 res=0 errno=0
[ 1809.034402][   T28] audit: type=1800 audit(1793012023.763:3680): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=354801 res=0 errno=0
[ 1809.055084][   T28] audit: type=1800 audit(1793012023.763:3681): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=354802 res=0 errno=0
[ 1809.076896][   T28] audit: type=1800 audit(1793012023.763:3682): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=354803 res=0 errno=0
[ 1809.097297][   T28] audit: type=1800 audit(1793012023.863:3683): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=354852 res=0 errno=0
[ 1809.419858][T24020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1809.428987][T24020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1811.707843][ T9220] pegasus: probe of 2-1:1.0 failed with error -71
[ 1811.726156][ T9220] usb 2-1: USB disconnect, device number 19
[ 1812.140457][   T28] audit: type=1800 audit(1793012027.083:3684): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355028 res=0 errno=0
[ 1812.255859][T24045] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4731'.
[ 1812.402759][   T28] audit: type=1800 audit(1793012027.343:3685): pid=24049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4733" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1812.445322][T24049] ptp ptp0: new virtual clock ptp1
[ 1812.519712][T24049] ptp ptp0: guarantee physical clock free running
[ 1812.578261][T24054] ptp ptp0: delete virtual clock ptp1
[ 1812.589221][T24054] ptp ptp0: only physical clock in use now
[ 1813.921377][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 1813.921394][   T28] audit: type=1800 audit(1793012028.863:3688): pid=24043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4730" name="/" dev="fuse" ino=4 res=0 errno=0
[ 1814.419198][T24071] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1814.426846][T24071] Error parsing options; rc = [-22]
[ 1815.279273][   T28] audit: type=1800 audit(1793012030.223:3689): pid=24084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4746" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1815.972544][T24084] ptp ptp0: new virtual clock ptp1
[ 1815.981436][T24084] ptp ptp0: guarantee physical clock free running
[ 1815.993328][   T28] audit: type=1800 audit(1793012030.943:3690): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355067 res=0 errno=0
[ 1816.048533][T24089] ptp ptp0: delete virtual clock ptp1
[ 1816.089685][   T28] audit: type=1800 audit(1793012030.983:3691): pid=23963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=355071 res=0 errno=0
[ 1816.963899][T24089] ptp ptp0: only physical clock in use now
[ 1819.927479][T24105] Could not find key with description: [0123456789abcdef]
[ 1819.934777][T24105] process_request_key_err: No key
[ 1819.957660][T24105] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef]
[ 1820.001634][T24105] One or more global auth toks could not properly register; rc = [-2]
[ 1820.022496][T24105] Error parsing options; rc = [-2]
[ 1820.886539][T24119] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1820.894687][T24119] Error parsing options; rc = [-22]
[ 1821.501599][T24127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4756'.
[ 1824.836736][T24143] NILFS (nullb0): couldn't find nilfs on the device
[ 1827.298363][T18102] Bluetooth: hci2: command 0x0406 tx timeout
[ 1828.542257][   T28] audit: type=1800 audit(1793012043.483:3692): pid=24176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4773" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1828.582201][T24176] ptp ptp0: new virtual clock ptp1
[ 1828.587568][T24176] ptp ptp0: guarantee physical clock free running
[ 1828.595032][T24176] ptp ptp0: delete virtual clock ptp1
[ 1828.629748][T24176] ptp ptp0: only physical clock in use now
[ 1828.880892][   T28] audit: type=1800 audit(1793012043.813:3693): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24762 res=0 errno=0
[ 1828.955349][   T28] audit: type=1800 audit(1793012043.893:3694): pid=24190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355193 res=0 errno=0
[ 1829.185462][T24196] NILFS (nullb0): couldn't find nilfs on the device
[ 1829.525027][T24198] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1829.532790][T24198] Error parsing options; rc = [-22]
[ 1829.608221][   T28] audit: type=1800 audit(1793012044.553:3695): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24544 res=0 errno=0
[ 1829.647531][   T28] audit: type=1800 audit(1793012044.573:3696): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24528 res=0 errno=0
[ 1829.688810][   T28] audit: type=1800 audit(1793012044.573:3697): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20720 res=0 errno=0
[ 1831.153155][T18102] Bluetooth: hci2: command 0x0406 tx timeout
[ 1831.229353][   T28] audit: type=1800 audit(1793012046.173:3698): pid=24190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24930 res=0 errno=0
[ 1831.457264][ T9220] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1831.657113][ T9220] usb 2-1: Using ep0 maxpacket: 8
[ 1831.699917][ T9220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1831.727519][ T9220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1832.897174][ T9220] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[ 1832.906372][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1832.931660][ T9220] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected
[ 1832.967825][ T9220] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1832.977110][   T28] audit: type=1800 audit(1793012047.893:3699): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355332 res=0 errno=0
[ 1833.054618][   T28] audit: type=1800 audit(1793012047.903:3700): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=355372 res=0 errno=0
[ 1833.713003][T24228] syz.1.4778 (24228): drop_caches: 2
[ 1833.721943][T24228] syz.1.4778 (24228): drop_caches: 2
[ 1834.055393][   T28] audit: type=1800 audit(1793012047.903:3701): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=355339 res=0 errno=0
[ 1834.138723][   T28] audit: type=1800 audit(1793012047.903:3702): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=355340 res=0 errno=0
[ 1834.163536][   T28] audit: type=1800 audit(1793012047.963:3703): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=355341 res=0 errno=0
[ 1834.186436][   T28] audit: type=1800 audit(1793012048.103:3704): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355381 res=0 errno=0
[ 1834.207414][   T28] audit: type=1800 audit(1793012048.893:3705): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355397 res=0 errno=0
[ 1834.238487][   T28] audit: type=1800 audit(1793012048.903:3706): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355411 res=0 errno=0
[ 1834.260289][   T28] audit: type=1800 audit(1793012048.913:3707): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355381 res=0 errno=0
[ 1834.281035][   T28] audit: type=1800 audit(1793012048.913:3708): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=355382 res=0 errno=0
[ 1834.282287][T24232] ptp ptp0: new virtual clock ptp1
[ 1834.303057][   T28] audit: type=1800 audit(1793012048.943:3709): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=355385 res=0 errno=0
[ 1834.328649][   T28] audit: type=1800 audit(1793012048.943:3710): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355332 res=0 errno=0
[ 1834.349144][T24232] ptp ptp0: guarantee physical clock free running
[ 1834.369380][T24232] ptp ptp0: delete virtual clock ptp1
[ 1834.410556][T24232] ptp ptp0: only physical clock in use now
[ 1835.795155][T20993] usb 2-1: USB disconnect, device number 20
[ 1835.820073][T20993] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1835.857734][T20993] kobil_sct 2-1:1.0: device disconnected
[ 1836.035763][T24257] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1836.043552][T24257] Error parsing options; rc = [-22]
[ 1837.136710][T18145] logitech-hidpp-device 0003:046D:C082.0017: Device not connected
[ 1838.117692][T24280] NILFS (nullb0): couldn't find nilfs on the device
[ 1840.378840][T18102] Bluetooth: hci4: command 0x0406 tx timeout
[ 1840.489797][   T28] kauditd_printk_skb: 12 callbacks suppressed
[ 1840.489813][   T28] audit: type=1800 audit(1793012055.433:3723): pid=24294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4800" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1840.501658][T24294] ptp ptp0: new virtual clock ptp1
[ 1840.574308][T24300] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[ 1840.582048][T24300] Error parsing options; rc = [-22]
[ 1840.643373][   T28] audit: type=1800 audit(1793012055.583:3724): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355511 res=0 errno=0
[ 1840.664232][T24294] ptp ptp0: guarantee physical clock free running
[ 1840.702602][T24302] ptp ptp0: delete virtual clock ptp1
[ 1840.767687][   T28] audit: type=1800 audit(1793012055.623:3725): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=355515 res=0 errno=0
[ 1840.825819][T24302] ptp ptp0: only physical clock in use now
[ 1841.318392][   T28] audit: type=1800 audit(1793012056.233:3726): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355531 res=0 errno=0
[ 1843.945311][T21161] Bluetooth: hci1: command 0x0406 tx timeout
[ 1844.239642][T24325] sctp: [Deprecated]: syz.1.4810 (pid 24325) Use of int in max_burst socket option.
[ 1844.239642][T24325] Use struct sctp_assoc_value instead
[ 1845.844115][   T28] audit: type=1800 audit(1793012060.763:3727): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1845.926271][   T28] audit: type=1800 audit(1793012060.823:3728): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1846.158884][   T28] audit: type=1800 audit(1793012061.093:3729): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355542 res=0 errno=0
[ 1849.584040][T24353] NILFS (nullb0): couldn't find nilfs on the device
[ 1850.515811][T24363] sctp: [Deprecated]: syz.9.4819 (pid 24363) Use of int in max_burst socket option.
[ 1850.515811][T24363] Use struct sctp_assoc_value instead
[ 1850.692892][   T28] audit: type=1800 audit(1793012065.633:3730): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1852.099392][T21161] Bluetooth: hci2: command 0x0406 tx timeout
[ 1853.230388][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.236775][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.597715][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4826'.
[ 1854.666141][T24394] NILFS (nullb0): couldn't find nilfs on the device
[ 1855.198204][   T28] audit: type=1800 audit(1793012070.143:3731): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4829" name="c_chmask" dev="configfs" ino=66551 res=0 errno=0
[ 1855.263874][   T28] audit: type=1800 audit(1793012070.143:3732): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4829" name="p_chmask" dev="configfs" ino=66556 res=0 errno=0
[ 1855.474188][T24402] sctp: [Deprecated]: syz.8.4830 (pid 24402) Use of int in max_burst socket option.
[ 1855.474188][T24402] Use struct sctp_assoc_value instead
[ 1855.817225][   T28] audit: type=1800 audit(1793012070.743:3733): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1857.227867][T21161] Bluetooth: hci0: command 0x0406 tx timeout
[ 1857.496374][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4835'.
[ 1858.850357][   T28] audit: type=1800 audit(1793012073.793:3734): pid=24433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4834" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1858.931784][T24433] ptp ptp0: new virtual clock ptp1
[ 1858.956281][T24433] ptp ptp0: guarantee physical clock free running
[ 1858.977863][   T28] audit: type=1800 audit(1793012073.913:3735): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355641 res=0 errno=0
[ 1858.978890][T24439] ptp ptp0: delete virtual clock ptp1
[ 1859.041234][T24439] ptp ptp0: only physical clock in use now
[ 1859.066581][   T28] audit: type=1800 audit(1793012073.913:3736): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=355645 res=0 errno=0
[ 1859.410523][T24446] sctp: [Deprecated]: syz.8.4840 (pid 24446) Use of int in max_burst socket option.
[ 1859.410523][T24446] Use struct sctp_assoc_value instead
[ 1859.738582][   T28] audit: type=1800 audit(1793012074.673:3737): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355661 res=0 errno=0
[ 1859.839023][   T28] audit: type=1800 audit(1793012074.723:3738): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15087 res=0 errno=0
[ 1859.958282][   T28] audit: type=1800 audit(1793012074.833:3739): pid=24454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4841" name="c_chmask" dev="configfs" ino=66921 res=0 errno=0
[ 1860.035367][   T28] audit: type=1800 audit(1793012074.833:3740): pid=24454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4841" name="p_chmask" dev="configfs" ino=66922 res=0 errno=0
[ 1862.752960][T21161] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1862.763471][T21161] CPU: 0 PID: 21161 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 1862.771140][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1862.781214][T21161] Workqueue: hci1 hci_rx_work
[ 1862.786045][T21161] Call Trace:
[ 1862.789348][T21161]  <TASK>
[ 1862.792299][T21161]  dump_stack_lvl+0x18c/0x250
[ 1862.797002][T21161]  ? show_regs_print_info+0x20/0x20
[ 1862.802207][T21161]  ? load_image+0x420/0x420
[ 1862.806718][T21161]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1862.811828][T21161]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1862.816860][T21161]  ? sysfs_warn_dup+0xa0/0xa0
[ 1862.821543][T21161]  ? do_raw_spin_unlock+0x121/0x230
[ 1862.826749][T21161]  kobject_add_internal+0x617/0xc90
[ 1862.831975][T21161]  kobject_add+0x164/0x240
[ 1862.836386][T21161]  ? preempt_schedule_thunk+0x1a/0x30
[ 1862.841760][T21161]  ? kobject_init+0x1d0/0x1d0
[ 1862.846432][T21161]  ? get_device_parent+0x366/0x390
[ 1862.851543][T21161]  device_add+0x3fa/0xc40
[ 1862.855872][T21161]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1862.860919][T21161]  le_conn_complete_evt+0xfe7/0x1690
[ 1862.866209][T21161]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1862.872452][T21161]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1862.878085][T21161]  ? lockdep_hardirqs_on+0x98/0x150
[ 1862.883282][T21161]  ? skb_pull_data+0xf0/0x1f0
[ 1862.887957][T21161]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1862.893851][T21161]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[ 1862.900263][T21161]  hci_event_packet+0x623/0xe60
[ 1862.905117][T21161]  ? hci_remote_host_features_evt+0x150/0x150
[ 1862.911179][T21161]  ? bis_list+0x290/0x290
[ 1862.915506][T21161]  ? kcov_remote_start+0x1b7/0x810
[ 1862.920628][T21161]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1862.925831][T21161]  hci_rx_work+0x43a/0xd60
[ 1862.930255][T21161]  ? process_scheduled_works+0x975/0x1600
[ 1862.935973][T21161]  process_scheduled_works+0xa60/0x1600
[ 1862.941535][T21161]  ? worker_attach_to_pool+0x370/0x370
[ 1862.946993][T21161]  ? assign_work+0x3cc/0x5d0
[ 1862.951584][T21161]  worker_thread+0xa5e/0xfe0
[ 1862.956179][T21161]  ? _raw_spin_unlock+0x40/0x40
[ 1862.961022][T21161]  ? __kthread_parkme+0x71/0x1c0
[ 1862.965962][T21161]  kthread+0x2fa/0x390
[ 1862.970032][T21161]  ? pr_cont_work+0x550/0x550
[ 1862.974708][T21161]  ? kthread_blkcg+0xd0/0xd0
[ 1862.979288][T21161]  ret_from_fork+0x48/0x80
[ 1862.983723][T21161]  ? kthread_blkcg+0xd0/0xd0
[ 1862.988308][T21161]  ret_from_fork_asm+0x11/0x20
[ 1862.993081][T21161]  </TASK>
[ 1863.018029][T21161] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1863.035332][T21161] Bluetooth: hci1: failed to register connection device
[ 1864.086727][T24478] netlink: set zone limit has 8 unknown bytes
[ 1865.067439][T18102] Bluetooth: hci1: command 0x0406 tx timeout
[ 1865.334873][T18102] Bluetooth: hci1: unexpected event 0x04 length: 3 < 10
[ 1866.041860][   T28] audit: type=1800 audit(1793012080.983:3741): pid=24484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4848" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1866.079641][T24484] ptp ptp0: new virtual clock ptp1
[ 1866.084808][T24484] ptp ptp0: guarantee physical clock free running
[ 1866.107518][   T28] audit: type=1800 audit(1793012081.033:3742): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355681 res=0 errno=0
[ 1866.135765][T24490] ptp ptp0: delete virtual clock ptp1
[ 1866.161913][   T28] audit: type=1800 audit(1793012081.043:3743): pid=24480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=355685 res=0 errno=0
[ 1866.213150][T24490] ptp ptp0: only physical clock in use now
[ 1866.714553][T24496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1866.746985][T24496] syzkaller0: entered promiscuous mode
[ 1866.776412][T24496] syzkaller0: entered allmulticast mode
[ 1866.958628][T24493] tipc: Resetting bearer <eth:syzkaller0>
[ 1867.061708][T24493] tipc: Disabling bearer <eth:syzkaller0>
[ 1868.552442][T24512] netlink: set zone limit has 8 unknown bytes
[ 1870.433306][T18102] Bluetooth: hci4: unexpected event 0x04 length: 3 < 10
[ 1871.256438][   T28] audit: type=1800 audit(1793012086.193:3744): pid=24527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4860" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1871.342326][T24527] ptp ptp0: new virtual clock ptp1
[ 1871.373525][T24527] ptp ptp0: guarantee physical clock free running
[ 1871.442481][   T28] audit: type=1800 audit(1793012086.373:3745): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355787 res=0 errno=0
[ 1871.469614][T24530] ptp ptp0: delete virtual clock ptp1
[ 1871.602383][T24530] ptp ptp0: only physical clock in use now
[ 1871.721958][   T28] audit: type=1800 audit(1793012086.413:3746): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=355791 res=0 errno=0
[ 1872.571914][   T28] audit: type=1800 audit(1793012087.513:3747): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355807 res=0 errno=0
[ 1873.020568][T24543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1873.713578][T24543] syzkaller0: entered promiscuous mode
[ 1873.860848][T24543] syzkaller0: entered allmulticast mode
[ 1873.953048][T24551] NILFS (nullb0): couldn't find nilfs on the device
[ 1874.509230][T24542] tipc: Resetting bearer <eth:syzkaller0>
[ 1874.578770][T24542] tipc: Disabling bearer <eth:syzkaller0>
[ 1874.926235][   T28] audit: type=1800 audit(1793012089.863:3748): pid=24558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4868" name="c_chmask" dev="configfs" ino=67045 res=0 errno=0
[ 1874.959209][   T28] audit: type=1800 audit(1793012089.863:3749): pid=24558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4868" name="p_chmask" dev="configfs" ino=67046 res=0 errno=0
[ 1875.057542][    T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[ 1875.947928][T18102] Bluetooth: hci1: command 0x0406 tx timeout
[ 1875.991018][   T28] audit: type=1800 audit(1793012090.933:3750): pid=24567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4871" name="n_vclocks" dev="sysfs" ino=48061 res=0 errno=0
[ 1876.012061][T24570] FAULT_INJECTION: forcing a failure.
[ 1876.012061][T24570] name failslab, interval 1, probability 0, space 0, times 0
[ 1876.029115][T24567] ptp ptp0: new virtual clock ptp1
[ 1876.034279][T24567] ptp ptp0: guarantee physical clock free running
[ 1876.047490][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1876.059700][   T28] audit: type=1800 audit(1793012090.983:3751): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356005 res=0 errno=0
[ 1876.085716][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1876.095826][T24570] CPU: 0 PID: 24570 Comm: syz.9.4872 Not tainted syzkaller #0
[ 1876.103311][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1876.105847][T24572] ptp ptp0: delete virtual clock ptp1
[ 1876.113364][T24570] Call Trace:
[ 1876.113424][T24570]  <TASK>
[ 1876.113434][T24570]  dump_stack_lvl+0x18c/0x250
[ 1876.113469][T24570]  ? show_regs_print_info+0x20/0x20
[ 1876.113492][T24570]  ? load_image+0x420/0x420
[ 1876.113524][T24570]  ? __might_sleep+0xe0/0xe0
[ 1876.113550][T24570]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1876.113578][T24570]  should_fail_ex+0x394/0x4c0
[ 1876.113605][T24570]  should_failslab+0x9/0x20
[ 1876.113623][T24570]  slab_pre_alloc_hook+0x59/0x300
[ 1876.163513][T24570]  ? snd_interval_refine+0x5f8/0xa30
[ 1876.168884][T24570]  ? snd_pcm_hw_param_near+0x82/0x460
[ 1876.174294][T24570]  __kmem_cache_alloc_node+0x53/0x260
[ 1876.179665][T24570]  ? snd_pcm_hw_param_near+0x82/0x460
[ 1876.185060][T24570]  kmalloc_trace+0x2a/0xe0
[ 1876.189481][T24570]  snd_pcm_hw_param_near+0x82/0x460
[ 1876.194691][T24570]  snd_pcm_oss_change_params_locked+0x1e5d/0x3be0
[ 1876.201128][T24570]  ? snd_pcm_oss_read2+0x3d0/0x3d0
[ 1876.206238][T24570]  ? mutex_lock_nested+0x20/0x20
[ 1876.211184][T24570]  ? __fget_files+0x28/0x460
[ 1876.215773][T24570]  snd_pcm_oss_get_active_substream+0x206/0x270
[ 1876.222017][T24570]  snd_pcm_oss_ioctl+0x412/0xdc0
[ 1876.226955][T24570]  ? snd_pcm_oss_poll+0x900/0x900
[ 1876.231984][T24570]  __se_sys_ioctl+0xfd/0x170
[ 1876.236590][T24570]  do_syscall_64+0x55/0xb0
[ 1876.241006][T24570]  ? clear_bhb_loop+0x40/0x90
[ 1876.245683][T24570]  ? clear_bhb_loop+0x40/0x90
[ 1876.250364][T24570]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1876.256265][T24570] RIP: 0033:0x7fa2b9d9f559
[ 1876.260679][T24570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1876.280301][T24570] RSP: 002b:00007fa2b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1876.288713][T24570] RAX: ffffffffffffffda RBX: 00007fa2ba025fa0 RCX: 00007fa2b9d9f559
[ 1876.296675][T24570] RDX: 0000000000000000 RSI: 0000000080045006 RDI: 0000000000000004
[ 1876.304636][T24570] RBP: 00007fa2b9e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1876.312597][T24570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1876.320559][T24570] R13: 00007fa2ba026038 R14: 00007fa2ba025fa0 R15: 00007fffcd3a2fc8
[ 1876.328539][T24570]  </TASK>
[ 1876.332811][    T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1876.342712][   T28] audit: type=1800 audit(1793012091.023:3752): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=356009 res=0 errno=0
[ 1876.367441][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.388573][T24572] ptp ptp0: only physical clock in use now
[ 1876.392203][    T9] usb 2-1: config 0 descriptor??
[ 1876.411715][   T28] audit: type=1800 audit(1793012091.343:3753): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356025 res=0 errno=0
[ 1876.468026][   T28] audit: type=1800 audit(1793012091.343:3754): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=356065 res=0 errno=0
[ 1876.527348][   T28] audit: type=1800 audit(1793012091.343:3755): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=356032 res=0 errno=0
[ 1876.577581][   T28] audit: type=1800 audit(1793012091.343:3756): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=356033 res=0 errno=0
[ 1876.598141][T24576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1876.612650][T24576] syzkaller0: entered promiscuous mode
[ 1876.620494][T24576] syzkaller0: entered allmulticast mode
[ 1876.720534][T24575] tipc: Resetting bearer <eth:syzkaller0>
[ 1876.775544][T24575] tipc: Disabling bearer <eth:syzkaller0>
[ 1876.791930][T24581] netlink: set zone limit has 8 unknown bytes
[ 1876.804850][   T28] audit: type=1800 audit(1793012091.343:3757): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=356034 res=0 errno=0
[ 1876.883939][   T28] audit: type=1800 audit(1793012091.413:3758): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356074 res=0 errno=0
[ 1877.019925][   T28] audit: type=1800 audit(1793012091.953:3759): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356178 res=0 errno=0
[ 1877.057670][    T9] aquacomputer_d5next 0003:0C70:F0B6.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0
[ 1877.073275][   T28] audit: type=1800 audit(1793012091.993:3760): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356195 res=0 errno=0
[ 1877.135377][   T28] audit: type=1800 audit(1793012092.073:3761): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4834 res=0 errno=0
[ 1877.240529][T24586] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1878.135712][    T9] usb 2-1: USB disconnect, device number 21
[ 1879.691966][T24608] ptp ptp0: new virtual clock ptp1
[ 1879.707663][T24608] ptp ptp0: guarantee physical clock free running
[ 1879.721730][T24608] ptp ptp0: delete virtual clock ptp1
[ 1879.741096][T24608] ptp ptp0: only physical clock in use now
[ 1881.037614][T24602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1881.068528][T24602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1881.185418][T24602] smc: net device nr0 applied user defined pnetid SYZ2
[ 1882.775735][T24624] NILFS (nullb0): couldn't find nilfs on the device
[ 1883.427127][   T28] kauditd_printk_skb: 7 callbacks suppressed
[ 1883.427142][   T28] audit: type=1800 audit(1793012098.363:3769): pid=24628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4887" name="c_chmask" dev="configfs" ino=67130 res=0 errno=0
[ 1883.473411][   T28] audit: type=1800 audit(1793012098.403:3770): pid=24628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4887" name="p_chmask" dev="configfs" ino=67131 res=0 errno=0
[ 1884.201598][   T28] audit: type=1800 audit(1793012099.143:3771): pid=24642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4892" name="remove_id" dev="sysfs" ino=24003 res=0 errno=0
[ 1884.747610][T21161] Bluetooth: hci4: command 0x0406 tx timeout
[ 1885.357020][T24661] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1885.357020][T24661] The task syz.9.4888 (24661) triggered the difference, watch for misbehavior.
[ 1885.557661][   T28] audit: type=1800 audit(1793012100.493:3772): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4888" name="run" dev="sysfs" ino=1799 res=0 errno=0
[ 1886.646420][T24665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1886.667626][T21161] Bluetooth: hci0: command 0x0406 tx timeout
[ 1886.720682][T24665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1886.743866][   T28] audit: type=1800 audit(1793012101.683:3773): pid=24677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4897" name="c_chmask" dev="configfs" ino=67198 res=0 errno=0
[ 1886.811201][   T28] audit: type=1800 audit(1793012101.693:3774): pid=24677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4897" name="p_chmask" dev="configfs" ino=67199 res=0 errno=0
[ 1887.069181][   T28] audit: type=1800 audit(1793012102.013:3775): pid=24679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4899" name="bank1" dev="sysfs" ino=57219 res=0 errno=0
[ 1887.263352][T24689] NILFS (nullb0): couldn't find nilfs on the device
[ 1887.689604][   T28] audit: type=1800 audit(1793012102.343:3776): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356336 res=0 errno=0
[ 1887.803202][   T28] audit: type=1800 audit(1793012102.743:3777): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356346 res=0 errno=0
[ 1889.424950][T21161] Bluetooth: hci2: command 0x0406 tx timeout
[ 1890.887671][   T28] audit: type=1800 audit(1793012105.793:3778): pid=24714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4908" name="c_chmask" dev="configfs" ino=67219 res=0 errno=0
[ 1890.954048][   T28] audit: type=1800 audit(1793012105.803:3779): pid=24714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4908" name="p_chmask" dev="configfs" ino=67220 res=0 errno=0
[ 1890.974571][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1891.657533][   T28] audit: type=1800 audit(1793012105.803:3780): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30811 res=0 errno=0
[ 1891.737573][   T28] audit: type=1800 audit(1793012105.823:3781): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30834 res=0 errno=0
[ 1891.817702][    T9] usb 10-1: new full-speed USB device number 27 using dummy_hcd
[ 1891.870823][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4912'.
[ 1892.012286][   T28] audit: type=1800 audit(1793012106.953:3782): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30761 res=0 errno=0
[ 1892.046123][    T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1892.070925][    T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1892.081855][   T28] audit: type=1800 audit(1793012106.953:3783): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30784 res=0 errno=0
[ 1892.098010][    T9] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 1892.147444][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1892.178919][   T28] audit: type=1800 audit(1793012107.123:3784): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356381 res=0 errno=0
[ 1892.252361][   T28] audit: type=1800 audit(1793012107.123:3785): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=356421 res=0 errno=0
[ 1892.277563][ T9219] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1892.328388][   T28] audit: type=1800 audit(1793012107.123:3786): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=356388 res=0 errno=0
[ 1892.387570][   T28] audit: type=1800 audit(1793012107.123:3787): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=356389 res=0 errno=0
[ 1892.667758][    T9] pegasus: probe of 10-1:1.0 failed with error -71
[ 1892.677289][ T9219] usb 9-1: Using ep0 maxpacket: 32
[ 1892.686823][ T9219] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1892.715167][    T9] usb 10-1: USB disconnect, device number 27
[ 1892.757183][ T9219] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1892.786767][ T9219] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.811161][ T9219] usb 9-1: Product: syz
[ 1892.831751][ T9219] usb 9-1: Manufacturer: syz
[ 1892.874456][ T9219] usb 9-1: SerialNumber: syz
[ 1892.911161][ T9219] usb 9-1: config 0 descriptor??
[ 1893.389986][T24741] gadgetfs: bound to dummy_udc driver
[ 1893.620079][T24741] FAULT_INJECTION: forcing a failure.
[ 1893.620079][T24741] name failslab, interval 1, probability 0, space 0, times 0
[ 1893.674124][T24741] CPU: 1 PID: 24741 Comm: syz.9.4916 Not tainted syzkaller #0
[ 1893.681647][T24741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1893.694333][T24741] Call Trace:
[ 1893.694349][T24741]  <TASK>
[ 1893.694359][T24741]  dump_stack_lvl+0x18c/0x250
[ 1893.694396][T24741]  ? show_regs_print_info+0x20/0x20
[ 1893.694421][T24741]  ? load_image+0x420/0x420
[ 1893.715303][T24741]  ? __might_sleep+0xe0/0xe0
[ 1893.719927][T24741]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1893.724983][T24741]  should_fail_ex+0x394/0x4c0
[ 1893.729691][T24741]  should_failslab+0x9/0x20
[ 1893.734208][T24741]  slab_pre_alloc_hook+0x59/0x300
[ 1893.739253][T24741]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1893.745021][T24741]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1893.750782][T24741]  __kmem_cache_alloc_node+0x53/0x260
[ 1893.756198][T24741]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1893.761959][T24741]  __kmalloc+0xa7/0x240
[ 1893.766157][T24741]  tomoyo_realpath_from_path+0xe6/0x5c0
[ 1893.771762][T24741]  tomoyo_check_open_permission+0x224/0x460
[ 1893.777692][T24741]  ? tomoyo_check_open_permission+0x1cf/0x460
[ 1893.783787][T24741]  ? tomoyo_check_path_number_acl+0x280/0x280
[ 1893.789892][T24741]  ? __asan_memset+0x22/0x40
[ 1893.794619][T24741]  ? __rwlock_init+0x150/0x150
[ 1893.799408][T24741]  ? tomoyo_file_open+0xed/0x180
[ 1893.804376][T24741]  security_file_open+0x62/0xa0
[ 1893.809262][T24741]  do_dentry_open+0x32b/0x14b0
[ 1893.814090][T24741]  ? __asan_memcpy+0x40/0x70
[ 1893.818712][T24741]  path_openat+0x284f/0x3270
[ 1893.823353][T24741]  ? do_sys_openat2+0xda/0x1d0
[ 1893.828141][T24741]  ? __x64_sys_openat+0x139/0x160
[ 1893.833192][T24741]  ? verify_lock_unused+0x140/0x140
[ 1893.838419][T24741]  ? do_filp_open+0x430/0x430
[ 1893.843143][T24741]  do_filp_open+0x1f2/0x430
[ 1893.847677][T24741]  ? vfs_tmpfile+0x620/0x620
[ 1893.852316][T24741]  ? _raw_spin_unlock+0x28/0x40
[ 1893.857195][T24741]  ? alloc_fd+0x590/0x640
[ 1893.861571][T24741]  do_sys_openat2+0x134/0x1d0
[ 1893.866275][T24741]  ? do_sys_open+0xe0/0xe0
[ 1893.870729][T24741]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1893.876731][T24741]  ? lock_chain_count+0x20/0x20
[ 1893.881638][T24741]  __x64_sys_openat+0x139/0x160
[ 1893.886538][T24741]  do_syscall_64+0x55/0xb0
[ 1893.890990][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1893.895699][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1893.900413][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1893.906329][T24741] RIP: 0033:0x7fa2b9d9f559
[ 1893.910768][T24741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1893.930402][T24741] RSP: 002b:00007fa2b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1893.938857][T24741] RAX: ffffffffffffffda RBX: 00007fa2ba025fa0 RCX: 00007fa2b9d9f559
[ 1893.946853][T24741] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1893.954852][T24741] RBP: 00007fa2b9e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1893.962846][T24741] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1893.970839][T24741] R13: 00007fa2ba026038 R14: 00007fa2ba025fa0 R15: 00007fffcd3a2fc8
[ 1893.978853][T24741]  </TASK>
[ 1894.005534][ T5838] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1894.015426][    C1] gadgetfs: connected
[ 1894.021771][ T5838] gadgetfs: disconnected
[ 1894.022150][T24741] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1894.057795][T24741] ==================================================================
[ 1894.065906][T24741] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80
[ 1894.073303][T24741] Read of size 8 at addr ffff88805ddffc60 by task syz.9.4916/24741
[ 1894.081211][T24741] 
[ 1894.083634][T24741] CPU: 0 PID: 24741 Comm: syz.9.4916 Not tainted syzkaller #0
[ 1894.091100][T24741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1894.101168][T24741] Call Trace:
[ 1894.104461][T24741]  <TASK>
[ 1894.107405][T24741]  dump_stack_lvl+0x18c/0x250
[ 1894.112106][T24741]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1894.117151][T24741]  ? show_regs_print_info+0x20/0x20
[ 1894.122373][T24741]  ? load_image+0x420/0x420
[ 1894.126895][T24741]  ? __virt_addr_valid+0x10c/0x380
[ 1894.132027][T24741]  ? __virt_addr_valid+0x10c/0x380
[ 1894.137163][T24741]  ? __virt_addr_valid+0x10c/0x380
[ 1894.142299][T24741]  print_report+0xa8/0x210
[ 1894.146730][T24741]  ? __mutex_lock+0xfc/0xc80
[ 1894.151346][T24741]  kasan_report+0x117/0x150
[ 1894.155868][T24741]  ? tomoyo_check_open_permission+0x384/0x460
[ 1894.161959][T24741]  ? __mutex_lock+0xfc/0xc80
[ 1894.166573][T24741]  __mutex_lock+0xfc/0xc80
[ 1894.171023][T24741]  ? end_current_label_crit_section+0x170/0x170
[ 1894.177292][T24741]  ? ep_open+0x4e/0x270
[ 1894.181562][T24741]  ? mutex_lock_nested+0x20/0x20
[ 1894.186522][T24741]  ? apparmor_file_open+0x5ab/0x760
[ 1894.191746][T24741]  ? apparmor_inode_getattr+0x2c0/0x2c0
[ 1894.197320][T24741]  ? __rwlock_init+0x150/0x150
[ 1894.202193][T24741]  ep_open+0x4e/0x270
[ 1894.206198][T24741]  ? do_dentry_open+0x86f/0x14b0
[ 1894.211155][T24741]  do_dentry_open+0x880/0x14b0
[ 1894.215941][T24741]  ? ep_ioctl+0x1c0/0x1c0
[ 1894.220295][T24741]  path_openat+0x284f/0x3270
[ 1894.224905][T24741]  ? do_sys_openat2+0xda/0x1d0
[ 1894.229682][T24741]  ? __x64_sys_openat+0x139/0x160
[ 1894.234726][T24741]  ? verify_lock_unused+0x140/0x140
[ 1894.239940][T24741]  ? do_filp_open+0x430/0x430
[ 1894.244639][T24741]  do_filp_open+0x1f2/0x430
[ 1894.249161][T24741]  ? vfs_tmpfile+0x620/0x620
[ 1894.253780][T24741]  ? _raw_spin_unlock+0x28/0x40
[ 1894.258654][T24741]  ? alloc_fd+0x590/0x640
[ 1894.263006][T24741]  do_sys_openat2+0x134/0x1d0
[ 1894.267703][T24741]  ? do_sys_open+0xe0/0xe0
[ 1894.272140][T24741]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1894.278141][T24741]  ? lock_chain_count+0x20/0x20
[ 1894.283007][T24741]  __x64_sys_openat+0x139/0x160
[ 1894.287891][T24741]  do_syscall_64+0x55/0xb0
[ 1894.292321][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1894.297012][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1894.301703][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1894.307617][T24741] RIP: 0033:0x7fa2b9d9f559
[ 1894.312040][T24741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1894.331666][T24741] RSP: 002b:00007fa2b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1894.340102][T24741] RAX: ffffffffffffffda RBX: 00007fa2ba025fa0 RCX: 00007fa2b9d9f559
[ 1894.348086][T24741] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1894.356072][T24741] RBP: 00007fa2b9e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1894.364056][T24741] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1894.372047][T24741] R13: 00007fa2ba026038 R14: 00007fa2ba025fa0 R15: 00007fffcd3a2fc8
[ 1894.380041][T24741]  </TASK>
[ 1894.383066][T24741] 
[ 1894.385390][T24741] Allocated by task 24741:
[ 1894.389817][T24741]  kasan_set_track+0x4e/0x70
[ 1894.394423][T24741]  __kasan_kmalloc+0x8f/0xa0
[ 1894.399028][T24741]  gadgetfs_bind+0x25f/0x830
[ 1894.403650][T24741]  gadget_bind_driver+0x2b3/0x770
[ 1894.408812][T24741]  really_probe+0x24a/0xae0
[ 1894.413330][T24741]  __driver_probe_device+0x1f5/0x390
[ 1894.418626][T24741]  driver_probe_device+0x4f/0x420
[ 1894.423665][T24741]  __driver_attach+0x444/0x6d0
[ 1894.428444][T24741]  bus_for_each_dev+0x235/0x2b0
[ 1894.433310][T24741]  bus_add_driver+0x340/0x630
[ 1894.438002][T24741]  driver_register+0x23a/0x310
[ 1894.442779][T24741]  usb_gadget_register_driver_owner+0xf9/0x270
[ 1894.448955][T24741]  dev_config+0xe49/0x1260
[ 1894.453383][T24741]  vfs_write+0x299/0x9a0
[ 1894.457641][T24741]  ksys_write+0x151/0x260
[ 1894.461986][T24741]  do_syscall_64+0x55/0xb0
[ 1894.466412][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1894.472323][T24741] 
[ 1894.474647][T24741] Freed by task 24743:
[ 1894.478717][T24741]  kasan_set_track+0x4e/0x70
[ 1894.483317][T24741]  kasan_save_free_info+0x28/0x40
[ 1894.488356][T24741]  ____kasan_slab_free+0x126/0x1f0
[ 1894.493479][T24741]  slab_free_freelist_hook+0x154/0x240
[ 1894.498950][T24741]  __kmem_cache_free+0xba/0x1f0
[ 1894.503807][T24741]  destroy_ep_files+0x282/0x330
[ 1894.508674][T24741]  gadgetfs_unbind+0x109/0x2b0
[ 1894.513453][T24741]  gadget_unbind_driver+0x1bf/0x3e0
[ 1894.518672][T24741]  device_release_driver_internal+0x408/0x6f0
[ 1894.524756][T24741]  driver_detach+0x1f3/0x2d0
[ 1894.529365][T24741]  bus_remove_driver+0x221/0x2f0
[ 1894.534310][T24741]  usb_gadget_unregister_driver+0x4e/0x70
[ 1894.540044][T24741]  dev_release+0x86/0x200
[ 1894.544393][T24741]  __fput+0x221/0x940
[ 1894.548381][T24741]  __se_sys_close+0x15c/0x1e0
[ 1894.553073][T24741]  do_syscall_64+0x55/0xb0
[ 1894.557500][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1894.563406][T24741] 
[ 1894.565730][T24741] Last potentially related work creation:
[ 1894.571446][T24741]  kasan_save_stack+0x3e/0x60
[ 1894.576148][T24741]  __kasan_record_aux_stack+0xaf/0xc0
[ 1894.581551][T24741]  insert_work+0x3d/0x310
[ 1894.585897][T24741]  __queue_work+0xcfd/0xfe0
[ 1894.590422][T24741]  call_timer_fn+0x189/0x540
[ 1894.595028][T24741]  __run_timers+0x59c/0x810
[ 1894.599547][T24741]  run_timer_softirq+0x67/0xf0
[ 1894.604323][T24741]  handle_softirqs+0x27d/0x820
[ 1894.609100][T24741]  __irq_exit_rcu+0xd3/0x190
[ 1894.613703][T24741]  irq_exit_rcu+0x9/0x20
[ 1894.617964][T24741]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1894.623622][T24741]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1894.629618][T24741] 
[ 1894.631947][T24741] Second to last potentially related work creation:
[ 1894.638530][T24741]  kasan_save_stack+0x3e/0x60
[ 1894.643225][T24741]  __kasan_record_aux_stack+0xaf/0xc0
[ 1894.648611][T24741]  kvfree_call_rcu+0xee/0x780
[ 1894.653302][T24741]  drop_sysctl_table+0x394/0x540
[ 1894.658250][T24741]  drop_sysctl_table+0x3ab/0x540
[ 1894.663197][T24741]  unregister_sysctl_table+0x41/0x60
[ 1894.668496][T24741]  inetdev_event+0x77c/0x1610
[ 1894.673222][T24741]  notifier_call_chain+0x18f/0x380
[ 1894.678349][T24741]  unregister_netdevice_many_notify+0x1037/0x1910
[ 1894.684771][T24741]  unregister_netdevice_queue+0x2e9/0x330
[ 1894.690502][T24741]  __tun_detach+0xdb2/0x1580
[ 1894.695102][T24741]  tun_chr_close+0x10d/0x1c0
[ 1894.699701][T24741]  __fput+0x221/0x940
[ 1894.703696][T24741]  task_work_run+0x1d4/0x260
[ 1894.708406][T24741]  exit_to_user_mode_loop+0xe6/0x110
[ 1894.713720][T24741]  exit_to_user_mode_prepare+0xee/0x180
[ 1894.719290][T24741]  syscall_exit_to_user_mode+0x1a/0x50
[ 1894.724845][T24741]  do_syscall_64+0x61/0xb0
[ 1894.729280][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1894.735202][T24741] 
[ 1894.737530][T24741] The buggy address belongs to the object at ffff88805ddffc00
[ 1894.737530][T24741]  which belongs to the cache kmalloc-512 of size 512
[ 1894.751682][T24741] The buggy address is located 96 bytes inside of
[ 1894.751682][T24741]  freed 512-byte region [ffff88805ddffc00, ffff88805ddffe00)
[ 1894.765411][T24741] 
[ 1894.767771][T24741] The buggy address belongs to the physical page:
[ 1894.774185][T24741] page:ffffea0001777f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ddfc
[ 1894.784345][T24741] head:ffffea0001777f00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1894.793294][T24741] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1894.801284][T24741] page_type: 0xffffffff()
[ 1894.805626][T24741] raw: 00fff00000000840 ffff888018c41c80 ffffea0000c73b00 dead000000000002
[ 1894.814226][T24741] raw: ffff88805ddfe800 000000008010000e 00000001ffffffff 0000000000000000
[ 1894.822821][T24741] page dumped because: kasan: bad access detected
[ 1894.829246][T24741] page_owner tracks the page as allocated
[ 1894.834975][T24741] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5782, tgid 5782 (syz-executor), ts 73504222810, free_ts 22961537110
[ 1894.856356][T24741]  post_alloc_hook+0x1c1/0x200
[ 1894.861139][T24741]  get_page_from_freelist+0x2181/0x22a0
[ 1894.866704][T24741]  __alloc_pages+0x1f0/0x460
[ 1894.871310][T24741]  alloc_slab_page+0x5d/0x180
[ 1894.876005][T24741]  new_slab+0x87/0x2d0
[ 1894.880101][T24741]  ___slab_alloc+0xc5c/0x12f0
[ 1894.884789][T24741]  __kmem_cache_alloc_node+0x122/0x260
[ 1894.890260][T24741]  kmalloc_trace+0x2a/0xe0
[ 1894.894700][T24741]  device_add+0xb6/0xc40
[ 1894.898953][T24741]  netdev_register_kobject+0x188/0x320
[ 1894.904602][T24741]  register_netdevice+0x12aa/0x1ba0
[ 1894.909815][T24741]  veth_newlink+0x807/0xc70
[ 1894.914332][T24741]  rtnl_newlink+0x15a0/0x2170
[ 1894.919089][T24741]  rtnetlink_rcv_msg+0x843/0xf90
[ 1894.924038][T24741]  netlink_rcv_skb+0x235/0x4c0
[ 1894.928820][T24741]  netlink_unicast+0x7b1/0x930
[ 1894.933600][T24741] page last free stack trace:
[ 1894.938362][T24741]  free_unref_page_prepare+0x7d7/0x8f0
[ 1894.943837][T24741]  free_unref_page+0x32/0x2e0
[ 1894.948522][T24741]  free_contig_range+0xa1/0x150
[ 1894.953388][T24741]  destroy_args+0x7d/0x840
[ 1894.957909][T24741]  debug_vm_pgtable+0x411/0x440
[ 1894.962857][T24741]  do_one_initcall+0x242/0x790
[ 1894.967639][T24741]  do_initcall_level+0x13d/0x1f0
[ 1894.972695][T24741]  do_initcalls+0x69/0xd0
[ 1894.977216][T24741]  kernel_init_freeable+0x3d9/0x560
[ 1894.982434][T24741]  kernel_init+0x1d/0x1c0
[ 1894.986775][T24741]  ret_from_fork+0x48/0x80
[ 1894.991206][T24741]  ret_from_fork_asm+0x11/0x20
[ 1894.996025][T24741] 
[ 1894.998353][T24741] Memory state around the buggy address:
[ 1895.003987][T24741]  ffff88805ddffb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1895.012052][T24741]  ffff88805ddffb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1895.020216][T24741] >ffff88805ddffc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1895.028287][T24741]                                                        ^
[ 1895.035490][T24741]  ffff88805ddffc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1895.043566][T24741]  ffff88805ddffd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1895.051719][T24741] ==================================================================
[ 1895.118201][ T5838] usb 9-1: USB disconnect, device number 30
[ 1895.133068][T24741] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1895.140303][T24741] CPU: 0 PID: 24741 Comm: syz.9.4916 Not tainted syzkaller #0
[ 1895.147782][T24741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1895.157848][T24741] Call Trace:
[ 1895.161141][T24741]  <TASK>
[ 1895.164084][T24741]  dump_stack_lvl+0x18c/0x250
[ 1895.168783][T24741]  ? show_regs_print_info+0x20/0x20
[ 1895.173998][T24741]  ? load_image+0x420/0x420
[ 1895.178523][T24741]  panic+0x2ca/0x720
[ 1895.182436][T24741]  ? bpf_jit_dump+0xd0/0xd0
[ 1895.186949][T24741]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 1895.192951][T24741]  ? _raw_spin_unlock+0x40/0x40
[ 1895.197819][T24741]  ? print_memory_metadata+0x314/0x400
[ 1895.203291][T24741]  ? __mutex_lock+0xfc/0xc80
[ 1895.207879][T24741]  check_panic_on_warn+0x84/0xa0
[ 1895.212813][T24741]  ? __mutex_lock+0xfc/0xc80
[ 1895.217400][T24741]  end_report+0x6f/0x130
[ 1895.221636][T24741]  kasan_report+0x128/0x150
[ 1895.226138][T24741]  ? tomoyo_check_open_permission+0x384/0x460
[ 1895.232203][T24741]  ? __mutex_lock+0xfc/0xc80
[ 1895.236794][T24741]  __mutex_lock+0xfc/0xc80
[ 1895.241206][T24741]  ? end_current_label_crit_section+0x170/0x170
[ 1895.247444][T24741]  ? ep_open+0x4e/0x270
[ 1895.251594][T24741]  ? mutex_lock_nested+0x20/0x20
[ 1895.256521][T24741]  ? apparmor_file_open+0x5ab/0x760
[ 1895.261714][T24741]  ? apparmor_inode_getattr+0x2c0/0x2c0
[ 1895.267255][T24741]  ? __rwlock_init+0x150/0x150
[ 1895.272014][T24741]  ep_open+0x4e/0x270
[ 1895.275994][T24741]  ? do_dentry_open+0x86f/0x14b0
[ 1895.280929][T24741]  do_dentry_open+0x880/0x14b0
[ 1895.285691][T24741]  ? ep_ioctl+0x1c0/0x1c0
[ 1895.290016][T24741]  path_openat+0x284f/0x3270
[ 1895.294603][T24741]  ? do_sys_openat2+0xda/0x1d0
[ 1895.299361][T24741]  ? __x64_sys_openat+0x139/0x160
[ 1895.304376][T24741]  ? verify_lock_unused+0x140/0x140
[ 1895.309565][T24741]  ? do_filp_open+0x430/0x430
[ 1895.314231][T24741]  do_filp_open+0x1f2/0x430
[ 1895.318724][T24741]  ? vfs_tmpfile+0x620/0x620
[ 1895.323304][T24741]  ? _raw_spin_unlock+0x28/0x40
[ 1895.328139][T24741]  ? alloc_fd+0x590/0x640
[ 1895.332459][T24741]  do_sys_openat2+0x134/0x1d0
[ 1895.337130][T24741]  ? do_sys_open+0xe0/0xe0
[ 1895.341534][T24741]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1895.347509][T24741]  ? lock_chain_count+0x20/0x20
[ 1895.352345][T24741]  __x64_sys_openat+0x139/0x160
[ 1895.357194][T24741]  do_syscall_64+0x55/0xb0
[ 1895.361602][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1895.366269][T24741]  ? clear_bhb_loop+0x40/0x90
[ 1895.370938][T24741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1895.376816][T24741] RIP: 0033:0x7fa2b9d9f559
[ 1895.381217][T24741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1895.400812][T24741] RSP: 002b:00007fa2b7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1895.409230][T24741] RAX: ffffffffffffffda RBX: 00007fa2ba025fa0 RCX: 00007fa2b9d9f559
[ 1895.417206][T24741] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1895.425183][T24741] RBP: 00007fa2b9e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1895.433146][T24741] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1895.441110][T24741] R13: 00007fa2ba026038 R14: 00007fa2ba025fa0 R15: 00007fffcd3a2fc8
[ 1895.449078][T24741]  </TASK>
[ 1895.452316][T24741] Kernel Offset: disabled
[ 1895.456624][T24741] Rebooting in 86400 seconds..