last executing test programs:

11m26.731819909s ago: executing program 32 (id=330):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

11m3.885226434s ago: executing program 33 (id=380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

11m2.582483622s ago: executing program 34 (id=390):
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100")
bind$alg(0xffffffffffffffff, 0x0, 0x0)

10m38.994491956s ago: executing program 35 (id=449):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

10m33.642678916s ago: executing program 36 (id=457):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

10m30.525792281s ago: executing program 37 (id=466):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)

10m21.494435642s ago: executing program 38 (id=475):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000200)="3082055530820551a00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05", 0x31, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x45, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d900")

10m13.385841077s ago: executing program 39 (id=483):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m48.92387443s ago: executing program 40 (id=517):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='file0', 0x5)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')

9m47.151195946s ago: executing program 41 (id=526):
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44810000", @ANYRES16, @ANYBLOB="97802dbd7000ffdbdf25030000002d"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40084)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003dfd1e3c3691"], 0x0, 0x0, 0x0, 0x0}, 0x0)

9m41.918805343s ago: executing program 42 (id=536):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m31.814557081s ago: executing program 43 (id=545):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
open(&(0x7f00000005c0)='./bus\x00', 0xe0c42, 0x8b)
unshare(0x62040200)

8m51.896197815s ago: executing program 44 (id=617):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

8m39.244954487s ago: executing program 45 (id=654):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff0000000705810340000107050202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000040)={0xc0, 0x3, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write(r1, &(0x7f0000000800)='abcd ef01', 0x9)

8m34.919910061s ago: executing program 46 (id=663):
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

8m25.343332878s ago: executing program 47 (id=671):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
r1 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})

8m19.287744407s ago: executing program 48 (id=680):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0))
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0)
ioctl(r3, 0x40946400, &(0x7f0000000100)="7063323132650000000000000000000000000000000200"/75)
ioctl$COMEDI_INSN(r3, 0x8028650c, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000300)=[0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1})
syz_open_dev$ublk_chdev(0x0, 0x0, 0x2)
write$sequencer(r1, &(0x7f0000000180), 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7)
read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ptrace$getenv(0x4201, r5, 0x1, &(0x7f0000004080))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)

6m15.248904525s ago: executing program 49 (id=1291):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x77}, 'port1\x00', 0xeb, 0x1b1c07, 0x0, 0x0, 0x1000})
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0xb, 0x0, 0x105, 0x4, 0x0, 0x0, 0x234a}, 0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x100000000000000)

3m47.359183301s ago: executing program 50 (id=2105):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
syz_clone(0x11, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x0)
fadvise64(r2, 0x18, 0x0, 0x4)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16], 0x0}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x34325852, 0x5, 0x7, 0x5, 0x9, 0x6, 0x0, 0x6, 0x0, 0x6}})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="3a0600000020"], 0x0, 0x0})

2m38.605414643s ago: executing program 51 (id=2366):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) (async)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='trans=rdma,') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nr_inodes=Ep'])
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="2009c2000000c230c5cc80fd11dd27000035fed48293c2d8957cd359a00f71caa003c3f660959fc221b29a2c50caea6c8bfe29d065c4f1ff1e405a0400a61e8b07530e826c594dd727c13240112dceab7b2a03324c73511d085affdbf07c7d280e10497fcb0f20c9c899f8a33ce5aa09000000ec79cf938218d1dad73bebc18e2463f19bfcd4fa06561835c3e2f5caf79fc8d57c0ec73e25f7c8a618e85a0dd6352f4039efb1e00e705c62aad67f74e74cf05d8b6dfc476ccef8c1fef46197dd63c567874d1822f6"], &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="73c805b6cf1f748c"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}}) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (rerun: 64)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000500)={0xde, 0x2, 0xfff9, 0x0, "42d3f9868cc089241547bfbe9d383655b06e358a1db8a3dfa73e486f0a590cd3"})
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000b2ed7155002532efc1adb904a105a3b97ae57b66e64ec0950105fc"], 0x0}, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x52, 0x8000, 0x1, {0x0, 0x1}, {0x51, 0x2}, @rumble={0x401, 0x5}})
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_usb_connect(0x5, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002db46c510c8042007064c0102030109024d0002030090020904690200fb65bc080904a4e8000e0100030a2401"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) (async)
setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000), 0x2)
write$char_usb(r0, &(0x7f0000000000)="e2", 0x1)

2m34.45225768s ago: executing program 52 (id=2375):
syz_usb_connect(0x2, 0xb3, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})

2m32.395872566s ago: executing program 53 (id=2384):
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x406, r0)
read$FUSE(r3, 0x0, 0x2000) (fail_nth: 1)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffc, 0x6, 0xe9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x9, 0x0, 0x80, 0x0})

2m26.342484587s ago: executing program 54 (id=2393):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})

1m59.610910418s ago: executing program 5 (id=2469):
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x4a, 0xca, 0x2f, 0x40, 0x525, 0x2888, 0xeaed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x10, 0xa0, 0x3, "", [{{0x9, 0x4, 0x8b, 0x7f, 0x0, 0x6c, 0xca, 0x18, 0x4}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x14, 0xbf, "e48a534c520985777cb5727e517cf61c5dc4fad6aaf1a6b4783862ec5ac84ceeb0f2661f52b24264bb04230015ef2cf6cc4437de9791341e36240e9861c65c6fd141f94fb9480437ee36b473ff8a0612e0252e1eb703f93b5103276f984f35f170e551f8ba46b36131ffd5d4bf12cc1da4419b9bc7a34535d792fb4277eb36af105212b27c56d647b49998aefa150e5340b4ce6caa44e97306a4eb3f0cb0db30bba79598c88434c481cd74275b023f83a11945754519d9f090f1fd9b2733fa"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m57.963804071s ago: executing program 5 (id=2476):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)

1m57.489242189s ago: executing program 5 (id=2477):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014"], 0x60}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002"], 0x0)
nanosleep(0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x2004)
ioprio_get$pid(0x1, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
getdents(r2, &(0x7f0000000100)=""/162, 0xa2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4040840}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r8 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r8, &(0x7f0000000080)='net/sctp\x00')
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000030085f100000046b1844800000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)

1m55.589934042s ago: executing program 5 (id=2479):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ab686192c331465115b581a2ca9e191ba0212d54c3d6a152701848bdf7bab9c6ac9f91eefe7204723235"], 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1m55.443666276s ago: executing program 5 (id=2480):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a0000000004")
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0xfe}, 0x2)
ioctl(r1, 0x933, 0x0)

1m55.104855542s ago: executing program 5 (id=2481):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x5)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xecf7, 0xf803, 0x5, 0xa5, 0x1}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000200)="1c5d", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004d63a007357ac8ddc1fdd00000000000004ffffffe7ee000000004407cf63", 0x58}], 0x1)

1m52.32255964s ago: executing program 6 (id=2485):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
close(0x3)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
tee(r3, r2, 0x9, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x5, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
socket$netlink(0x10, 0x3, 0x4)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x140482, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x7, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x80})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1})
write$vga_arbiter(r8, 0x0, 0x0)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x6}, 0xff}, 0x18)
sendmsg$can_j1939(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x81)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
r10 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000200)={'dac02\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x19, 0xf3, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000008, 0x1, 0x10000, 0xfff7ffa8, 0x80000001, 0x1ef, 0x1, 0x20000010, 0x55, 0x4, 0x4008, 0x746f, 0x8, 0x7, 0x4, 0xeb, 0x4, 0x81]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m51.819835116s ago: executing program 6 (id=2486):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

1m50.724837845s ago: executing program 6 (id=2487):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009100), 0x200, 0x0)
readv(r0, &(0x7f000000a800)=[{&(0x7f0000009180)=""/5, 0x5}], 0x1)

1m50.550042782s ago: executing program 6 (id=2488):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x20000000)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000000)={0x9, @capture={0x0, 0x1, {0x8, 0x9}, 0x0, 0x9}})
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000100)='openpromfs\x00', 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd, 0x0, 0x400})
sendmsg$sock(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x24, 0x1bbf}}], 0x18}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r6, 0x400c4d05, &(0x7f0000000900))
connect$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, @none, 0x1}, 0xa)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)

1m49.415041437s ago: executing program 6 (id=2489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a0000000004")
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0xfe}, 0x2)
ioctl(r1, 0x933, 0x0)

1m49.004895623s ago: executing program 6 (id=2490):
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x1, 0x2c) (fail_nth: 1)

1m44.937794139s ago: executing program 55 (id=2463):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

1m42.820428581s ago: executing program 56 (id=2472):
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4603010705810100000000000403009f642113efffbf030000000000000000da2200350d0000150038000100380007"], 0x78)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000088205820540000102030109026e00030108a003080b0002010130040904000000010130000a24010f0a0001"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x800)

1m39.762827012s ago: executing program 57 (id=2481):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x5)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xecf7, 0xf803, 0x5, 0xa5, 0x1}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000200)="1c5d", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004d63a007357ac8ddc1fdd00000000000004ffffffe7ee000000004407cf63", 0x58}], 0x1)

1m33.676053107s ago: executing program 58 (id=2490):
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x1, 0x2c) (fail_nth: 1)

1m14.445132967s ago: executing program 1 (id=2521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x2, 0x14e, 0x3, 0x2})
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004dc0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000004e00)={0xd, @pix_mp={0x7f, 0x6, 0x41414770, 0x5, 0x4, [{0x401, 0x5}, {0x1, 0xbf}, {0xb, 0x10000}, {0x10001, 0x53}, {0x1, 0x6}, {0x6, 0x101}, {0x2, 0xffff7fff}, {0x4, 0x9}], 0xe2, 0x8, 0x0, 0x2, 0x5}})
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d"], 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x840)

1m13.557780073s ago: executing program 8 (id=2526):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00')

1m13.294949099s ago: executing program 2 (id=2527):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000180)={0x1ff, 0x1, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (fail_nth: 1)
close_range(r2, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x80000)

1m12.936859529s ago: executing program 2 (id=2528):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb48, 0x1005, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], 0x74)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/78, 0x4e}], 0x1)
fdatasync(r0)

1m12.880531909s ago: executing program 1 (id=2529):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m12.787387521s ago: executing program 1 (id=2530):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 1)

1m12.284765331s ago: executing program 1 (id=2532):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

1m12.282001394s ago: executing program 8 (id=2533):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m11.589558002s ago: executing program 1 (id=2534):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000de13000280080002400000000c08000340000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000c060129bd00000000020000020000069bdaa2d97ee079bd790257036c39dbd1000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
futex(&(0x7f00000040c0)=0x40000, 0x7, 0x6, 0x0, 0x0, 0x2) (async, rerun: 64)
syz_clone(0x88040000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)

1m11.52585215s ago: executing program 8 (id=2535):
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7, 0x3}}, './config\x00'})
r1 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x4a100)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x2}, 0x3c, 0x1}})
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c7041, 0x40)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='file0', 0x5)

1m11.464663724s ago: executing program 7 (id=2536):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m11.298967982s ago: executing program 2 (id=2537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x200)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(0x0, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00'})
write(r2, &(0x7f00000003c0)='fi', 0x2)

1m11.246266328s ago: executing program 8 (id=2538):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='de', 0x2)

1m11.176715369s ago: executing program 7 (id=2539):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'hsr0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x4c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x28, 0x2, 0x0, 0x1, [@nested={0x22, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a57d9766"]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async)
setns(0xc9, 0x0) (async)
r2 = socket(0x8, 0x5, 0x5) (async)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000001c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "4933c088bdc41722b45d2baf35832101bbb680123a6ffba07b2ea994b597e6cf", 0xd60, 0x7, 0x80, 0x3}, 0x3c) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x5411, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', &(0x7f0000000140)='ext2\x00', 0x2000, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_async', 0x2, 0x1)
sendfile(r4, r4, 0x0, 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0xd1a00, 0x0)
write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0', 0x35)

1m11.05986304s ago: executing program 2 (id=2540):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xa06c0)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x1800, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1000003, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x200000, 0x8, 0x0, 0x10000000, 0xfffffffffffffffe, 0x3, 0x4}, &(0x7f00000002c0)={0x18, 0x7, 0x200000000009, 0x40, 0x7, 0x200000400001}, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="122b4abe540000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000037f979309040101"], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a0"], 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3201b218ae"], 0xf)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x7d, &(0x7f0000000000)={r8, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0x6, 0x8001, 0x2, 0xd947, 0x81, 0x2, 0x10000, r8}, &(0x7f00000000c0)=0x20)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r3, 0x0, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x200)
write$UHID_INPUT(r2, &(0x7f0000002400)={0xc, {"a2e3ad21ed0d52f91b5d380887f70e06d038e7ff7fc6e5539b3272298b089b07081b37090890e0878f0e1ac6e7049b366d959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b78583709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca810461b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b47dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880ad6988170ba1712e2998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae408925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937caea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c730600000000000000bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b839b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a974064bcd2b29f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af400046edb44a78f615255490a4b621501f2a9e4d24624c4dace874118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0)

1m11.028719825s ago: executing program 8 (id=2541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='1', 0x1)

1m10.888766953s ago: executing program 7 (id=2542):
prctl$PR_MCE_KILL(0x4c, 0x1, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb79105000000001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'gre0\x00', 0x2})
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4115, 0x1013}], 0x1, 0x145, 0xfffffffc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f00000001c0))
syz_clone3(&(0x7f00000000c0)={0x200180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

1m10.413526212s ago: executing program 1 (id=2543):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='mem', 0x3)
listxattr(0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000002b00)=[{{&(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000880)='b', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000e00)="ef", 0x1}], 0x1}}], 0x3, 0x44880)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xe, 0xad, {0xad, 0xf, "efeb10b6f613ca6fb02c57c53bc4eec3674d3e88809680ee83363322b45761c4556b67a7831edc14599b256ca6f1bd5f284e66467d26a5385e76a400018336f292f46f8823320efe49beea05b94ced215ea1c6bb64780c4faba15eb98b95b11ceed9164afb46fb6af0045df6690d8c37c9634f000560096fc35be7bd5f0b828401972dae46d1f6da40861efebb81c2be95724bd6518480b829d05bfbb8b3b8b04eef5b61d2dbc1623ee3b2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "95819c015f307fd6ff940c775a2f17567b3505b792ebc44d616243d7f2b709d596121350e64133074aa48b50e376dbea65dec7109c82210f90019ea1357c06626154ffc4c705cecdfc592a0d165e7fa4f6e2fe2ea6891a02c41ae6c02513b9d4936ee8a6a07a"}}}, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x47, "c6e3a9c4deb561bc6ae9d84b2b07d118021c28be829a00a6af295f59a5f62c5591f998a9baea8751d943dff63ca1347e935f79d583117b8e986c70336fb12c61e4c657a3f99d40"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x81, 0x1, "b1"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "e3efb3"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '\n'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "bcd2ae"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "0fffee"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x4, 0xaa, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x40, 0x80, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '`'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xeda, 0x4190, 0x10}, {0x6, 0x24, 0x1a, 0xfff0, 0x17}, [@dmm={0x7, 0x24, 0x14, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x0, 0x2c, 0xf, 0x9}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x9, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xa, 0xff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x4, 0x2, 0x9, 0x20, 0xfc}, 0x171, &(0x7f0000000780)={0x5, 0xf, 0x171, 0x4, [@generic={0xd9, 0x10, 0x4, "2fbeea8ef554d52491961e08831ba79237eb7d00bdde3ae577ef2db3948adcc2a5ef51e3d649b78e1119a6077f061287703c4e05defe1c4766f23b4300e7c9a19c9c9f3129daefc65bc40705d38db0ea265cceb8d472dfefe764ec32597b9071f8023a893bcc2001a16cfacebf9aaa1b880db52e3ab4449c8809b8c763e7aa73cabcf76e1c39e28cf617439f957f93a93932ef440fd7c9ce45c94121cbfd821d82817f8ba54f85b7d65410588bee811814d95e4e39a5433f5ee528b6988a3f25fb88ec3c4b24bf43f6fbfec2dfe0c97dab1101ae05a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xc, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x7, 0x9a}, @generic={0x82, 0x10, 0x1, "e758a38acb1a34dc77c030eb07b7413dee9d8805fc8104b2511a821888d865afbfe0f327832d3328e67a16a222966442c3a3f602408069baa27134e837efebb2a61841dff8a4dc1d037e0a48c75cd29a7c608ee1160e92320092d1cc477c6a36c5cea145645f85d808a25eff25f8fa8ca0d0a9a65b6b7aac330ca843f8b4bf"}]}, 0x1, [{0x71, &(0x7f0000000900)=@string={0x71, 0x3, "221434ca94a2d15ae09e542d69cf9f2cea42f2309cb7ebc86e2f16ac8d3ffcc4fa7ec96fa91875b98287d1c87886ba1ea242e20a79f82ff02b80fb91512a28b826ac6be48ec332941294a86eb859eb9849e7890504385d4941f61de2354ff9278accc74d70e81d1b9527d8e7329e62"}}]})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

1m10.027980985s ago: executing program 7 (id=2544):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r8=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r10, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r13 = syz_ublk_setup_io_uring(0x3543, &(0x7f00000003c0)={0x0, 0x7647, 0x2000, 0x1, 0x3d4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000500)={0x0, 0x9001, 0x1, 0x2, 0x1cc, 0x0, r13}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41d, 0x40, 0x1, 0x66, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6fc7, 0x20, 0x3, 0x14c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x77fb, 0x4008, 0x1, 0x3d5, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x959b, 0x8, 0x3, 0x370, 0x0, r3}}], 0x4, &(0x7f00000025c0)={0x2e, 0x4, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xcfc}, 0x0, 0x0, '\x00', {0x2, 0x221, 0x0, &(0x7f00000015c0)=@buf_max_buf="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"}}, &(0x7f0000002640))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

1m8.75286613s ago: executing program 7 (id=2545):
syz_usb_connect(0x0, 0x39, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0)
write(r0, &(0x7f0000000800)='abcd ef01', 0x9) (fail_nth: 1)

1m8.078379006s ago: executing program 8 (id=2546):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x2d0255da71d9e2ff)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1m7.933574781s ago: executing program 7 (id=2547):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)

1m7.815853367s ago: executing program 2 (id=2548):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0) (fail_nth: 1)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)

1m6.848333846s ago: executing program 2 (id=2549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

44.81905711s ago: executing program 59 (id=2549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

44.730327291s ago: executing program 60 (id=2546):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000001090212000100000000030000090000000000000000000000005fa0a96d55f52e596f8d8dacbad5b1e52a0d57a16b673d05771203b6eec103f182f967e215aac3fcb94e8edc9feb115028b68a1193c723d8cf32f886e853f0e0420c589e70cd18ad60c194afa58e09f1d6269f60e07b0109d12be5e2e0f864f1c2ca03b112c05f782b334aae14b6af73fb6b510ce0c6e8723d1b4da725009740efe26f6f2b9d5b9bc15cd96141fc7da6d78a2f0fbb82f574bf9f716e688130957024310ba1f6485cb65785b62f351801ddda7a0958a531fe6217e62dfcf63e4fec546ded9ead398069ab69a42156bea509e2619d990333f50c6d76fcd7187286b3539176b53af5da6c8a8d3cd64cfa9c87d7234bccd3889e90e497df9811224507b2"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x2d0255da71d9e2ff)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

44.614300364s ago: executing program 61 (id=2547):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)

44.483176069s ago: executing program 62 (id=2543):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='mem', 0x3)
listxattr(0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000002b00)=[{{&(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000880)='b', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000e00)="ef", 0x1}], 0x1}}], 0x3, 0x44880)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xe, 0xad, {0xad, 0xf, "efeb10b6f613ca6fb02c57c53bc4eec3674d3e88809680ee83363322b45761c4556b67a7831edc14599b256ca6f1bd5f284e66467d26a5385e76a400018336f292f46f8823320efe49beea05b94ced215ea1c6bb64780c4faba15eb98b95b11ceed9164afb46fb6af0045df6690d8c37c9634f000560096fc35be7bd5f0b828401972dae46d1f6da40861efebb81c2be95724bd6518480b829d05bfbb8b3b8b04eef5b61d2dbc1623ee3b2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "95819c015f307fd6ff940c775a2f17567b3505b792ebc44d616243d7f2b709d596121350e64133074aa48b50e376dbea65dec7109c82210f90019ea1357c06626154ffc4c705cecdfc592a0d165e7fa4f6e2fe2ea6891a02c41ae6c02513b9d4936ee8a6a07a"}}}, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x47, "c6e3a9c4deb561bc6ae9d84b2b07d118021c28be829a00a6af295f59a5f62c5591f998a9baea8751d943dff63ca1347e935f79d583117b8e986c70336fb12c61e4c657a3f99d40"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x81, 0x1, "b1"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "e3efb3"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '\n'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "bcd2ae"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "0fffee"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x4, 0xaa, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x40, 0x80, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '`'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xeda, 0x4190, 0x10}, {0x6, 0x24, 0x1a, 0xfff0, 0x17}, [@dmm={0x7, 0x24, 0x14, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x0, 0x2c, 0xf, 0x9}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x9, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xa, 0xff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x4, 0x2, 0x9, 0x20, 0xfc}, 0x171, &(0x7f0000000780)={0x5, 0xf, 0x171, 0x4, [@generic={0xd9, 0x10, 0x4, "2fbeea8ef554d52491961e08831ba79237eb7d00bdde3ae577ef2db3948adcc2a5ef51e3d649b78e1119a6077f061287703c4e05defe1c4766f23b4300e7c9a19c9c9f3129daefc65bc40705d38db0ea265cceb8d472dfefe764ec32597b9071f8023a893bcc2001a16cfacebf9aaa1b880db52e3ab4449c8809b8c763e7aa73cabcf76e1c39e28cf617439f957f93a93932ef440fd7c9ce45c94121cbfd821d82817f8ba54f85b7d65410588bee811814d95e4e39a5433f5ee528b6988a3f25fb88ec3c4b24bf43f6fbfec2dfe0c97dab1101ae05a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xc, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x7, 0x9a}, @generic={0x82, 0x10, 0x1, "e758a38acb1a34dc77c030eb07b7413dee9d8805fc8104b2511a821888d865afbfe0f327832d3328e67a16a222966442c3a3f602408069baa27134e837efebb2a61841dff8a4dc1d037e0a48c75cd29a7c608ee1160e92320092d1cc477c6a36c5cea145645f85d808a25eff25f8fa8ca0d0a9a65b6b7aac330ca843f8b4bf"}]}, 0x1, [{0x71, &(0x7f0000000900)=@string={0x71, 0x3, "221434ca94a2d15ae09e542d69cf9f2cea42f2309cb7ebc86e2f16ac8d3ffcc4fa7ec96fa91875b98287d1c87886ba1ea242e20a79f82ff02b80fb91512a28b826ac6be48ec332941294a86eb859eb9849e7890504385d4941f61de2354ff9278accc74d70e81d1b9527d8e7329e62"}}]})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5.544679488s ago: executing program 0 (id=2628):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setns(0xc9, 0x0)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

5.344268576s ago: executing program 0 (id=2630):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)={0x237, 0x7d, 0x3, {{0x500, 0xf6, 0x0, 0x0, {0x80}, 0x20000000, 0xd, 0x0, 0x40, 0x24, ' n\x8c\xce\x98\xb6\xffodev{cvfo\x85\xe4y-\xec\x15\xe9\"e=cX\x16\xdb\x1bx\x92\xff\xff\xff', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x04\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) (fail_nth: 2)

5.013063718s ago: executing program 4 (id=2631):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x600)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4)
recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x80)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000000040)=[{0xfffffffffffffffc}, {0x1000, 0x0, 0x4}], 0x2, 0x37, 0x0, 0x2, 0x0, 0x2})

4.764853466s ago: executing program 3 (id=2632):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)={0x237, 0x7d, 0x3, {{0x500, 0xf6, 0x0, 0x0, {0x80}, 0x20000000, 0xd, 0x0, 0x40, 0x24, ' n\x8c\xce\x98\xb6\xffodev{cvfo\x85\xe4y-\xec\x15\xe9\"e=cX\x16\xdb\x1bx\x92\xff\xff\xff', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x04\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237)

4.721564779s ago: executing program 0 (id=2633):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x18043)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0)
ioctl(r1, 0x40405515, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d65")
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x1, 0xd, "744ae6ed5b810cd92d2431022d"}, 0x0, 0x0, 0x0, 0x0})

4.549842765s ago: executing program 3 (id=2634):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) (fail_nth: 2)

4.300334573s ago: executing program 9 (id=2636):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x4, 0xc000, 0x0, r2, r3, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x8, 0x100000000000000, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000140)={&(0x7f0000000680)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2d, 0x2, 0x4400, 0xff9c, 0xfffe, 0x10004, 0x6, 0x0, 0x0, 0x10, 0x8e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.796601449s ago: executing program 9 (id=2637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000040)='./dev/mtdblock0\x00', &(0x7f0000000400)='msdos\x00', 0x604, 0x0) (async)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x3, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404c080)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2f1}]}, @CTA_ID={0x8}, @CTA_LABELS_MASK={0x20, 0x17, [0x8, 0x0, 0x1, 0x9, 0x7, 0x3, 0x4]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1c8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008084}, 0x40c4) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r6, 0x5}) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)=<r12=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x8880)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'team0\x00', @local})

3.577340486s ago: executing program 9 (id=2638):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

3.054363814s ago: executing program 9 (id=2639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x802}}}}}}, 0x7a)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000f80))
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

2.844592148s ago: executing program 3 (id=2640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (fail_nth: 2)

2.408859801s ago: executing program 3 (id=2641):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (fail_nth: 2)

2.078091181s ago: executing program 4 (id=2642):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
dup(r2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './my_configfs\x00'})

1.988767934s ago: executing program 9 (id=2643):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000300)="de", 0x1}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1})

1.98837877s ago: executing program 3 (id=2644):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xf9, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setreuid(0xee01, 0xee01)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r3 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0xc0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \f('], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

1.608034137s ago: executing program 4 (id=2645):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.303146276s ago: executing program 0 (id=2646):
socket$rds(0x15, 0x5, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

1.133653923s ago: executing program 4 (id=2647):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000000100", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002\x00\x00'], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.000718111s ago: executing program 0 (id=2648):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

656.168508ms ago: executing program 0 (id=2649):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5f)
read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3)
syz_usb_connect$uac1(0x5, 0x7d, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x2b, 0x0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x688, 0x10, 0x3, "b012"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x2, 0x5, {0x7, 0x25, 0x1, 0xc69ad5099106678f, 0x7, 0x686a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x0, 0x8, {0x7, 0x25, 0x1, 0x4, 0x81, 0x200}}}}}}}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033000000000000000a010102000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
timer_create(0x3, 0x0, &(0x7f0000000080)=<r4=>0x0)
timer_delete(r4)
timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000040))
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150001030094aeec240000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4040000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
syz_usb_disconnect(r0)

451.300026ms ago: executing program 4 (id=2650):
syz_usb_connect(0x0, 0x2d, &(0x7f00000023c0)=ANY=[@ANYBLOB="1201010275cd6f10720c1300a1bd0102030109021b0001ae0540980904c50c0161b90204090503040800030507bcc463fac26ed8774a7d1b7452f6becc5c78fee7da32e8f27070a6d60917efcb2b5a1c20e0fd3f67a3104da05dec866edeef8f6a7358be2facfb7addcc555198f47f1c0222f961b04e3e5fe3aef735facd45ffe28f046d80e291cfc6a8379bceb673588d28ccea1ceb75483cf5de40166f6112b5dafd8e08"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) (async)
socket$key(0xf, 0x3, 0x2)
unshare(0x40200) (async)
fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_io_uring_setup(0x725a, &(0x7f0000000540)={0x0, 0xacab, 0x40, 0x1, 0x80cc}, 0x0, 0x0, 0x0) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000700)=0x1ac0, 0x4) (rerun: 32)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (rerun: 64)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = socket$inet(0x2, 0x80000, 0x34080003)
setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) (async, rerun: 32)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32)
ioctl$VT_GETMODE(r4, 0x5601, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async)
recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0xffffffffffffffd3}, 0x40008021) (async, rerun: 64)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) (async, rerun: 64)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) (async, rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) (rerun: 32)
read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) (async)
openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pselect6(0x40, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0x10001}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x7, 0x1000000000000, 0xc, 0xfffffffffffffff9}, 0x0, 0x0) (async, rerun: 32)
unshare(0x40400) (rerun: 32)

345.865017ms ago: executing program 4 (id=2651):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

637.491µs ago: executing program 9 (id=2652):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x2, 0x27e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0) (async)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$uac2(r4, 0x0, 0x0) (rerun: 64)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_READV_FIXED={0x3c, 0x4d, 0x2004, @fd_index=0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, {0x2, 0x0, 0x76, '\x00', 0x0, 0x7fffffffffffffff}}) (async, rerun: 32)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x29, 0x0, <r5=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x77, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) (rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e0050000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000b80508803000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff06000500ff0f000050000080200004000a004e2000000009ff0200000000000000000000000000015d00000006000500b206000024f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392234050080240002001f24aebc57cd4a30f0e2b00586d3a576e282224dd1c0583ec969cfe8de046ceb24000100000000000000000000000000000000000000000000000000000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08020980040000800400008004000080940000800600010002000000080002007f0000010500030001000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030001000000060001000a000000140002000000000000000000000000000000000105000300030000000600010002000000080002007f0000010500030001000000e8000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a000000140002000000000000000000000000000000000005000300000000000600010002000000080002006401010005000300000000000600010002000000080002000000000005000300030000000600010002000000080002000a0101010500030003000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1414bb050003000200000034000080060001000200000008000200ac1e01010500030002000000060001000200000008000200e0000002050003000100000040000080060001000200000008000200ac1414440500030003000000060001000a00000014000200ff0200000000000000000000000000010500030000000000040000800400008006000500070000009c00098094000080060001000200000008000200ac1414bb0500030002000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ffffffff0500030003000000060001000200000008000200ffffffff050003000200000004000080f001098040000080060001000200000008000200640101000500030003000000060001000a0000001400020000000000000000000000000000000000050003000300000058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe880000000000000000000000000001050003000300000040000080060001000200000008000200ffffffff0500030003000000060001000a00000014000200fe800000000000000000000000000044050003000000000088000080060001000200000008000200e00000010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0034000080060001000200000008000200e00000010500030001000000060001000200000008000200ffffffff050003000100000058000080060001000200000008000200e00000010500030000000000060001000a00000014000200ff01000000000000000000000000000105000300030000000600010002000000080002007f000001050003000100000008000a0001000000200004000a004e22000000010000000000000000000000000000000001000000"], 0x5e0}}, 0x40094) (async)
r9 = syz_io_uring_setup(0x1efa, &(0x7f0000000180)={0x0, 0x43ab, 0x8000, 0x0, 0x22c, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
r10 = getpgrp(0x0)
tkill(r10, 0x8009) (async)
syz_ublk_add_dev(r9, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x1a, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x70f, 0x0, 0x0, 0x1000, 0x7, r10, 0x0, 0x48}}}, &(0x7f00000004c0))

0s ago: executing program 3 (id=2653):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x3fffffff, 0x100, "e2ff868592605aba4b23dfa47ebf9a7da9fa0de37fbaf1f60804cb8d5b9619d7", 0xffff, 0x3, 0x800, 0xd2, 0x6, 0xee5, 0x80, 0x3, [0x6, 0xff, 0x53, 0xcf]})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$inet(r2, &(0x7f0000008240)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)="be1023", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000fc0000000000000000000000000000010000000000000000000080a000000000", @ANYRES32=<r5=>0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffff01ffffedffffffffffffff03000000000000000000000000000000000000001300000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000ffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000004680)={[0x0, 0x0, 0xad, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x3, 0x5, 0x400000007fff, 0x1000200004, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1], 0xffff1000})
r8 = syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206", @ANYRES32=r5], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00050400000028085c44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000240)={&(0x7f0000017000/0x2000)=nil, 0x800, 0x1})
syz_usb_control_io$uac1(r8, &(0x7f0000000540)={0x14, &(0x7f0000000380)={0x40, 0x0, 0x90, {0x90, 0x30, "865af422f5e6d900a3ed3877dc9c4d619af5cb49f0af9905a4056929892948f7f927f6a48ea8ce81cab8e265f2c82841871e493e6d71c0b6acdd8b30b70fe2b7bee12f7c83910ca0ac2fdaaeac33f441deea3eb3bcd96a3ac74f6e4f724a73c23991ca0feea1a0e88db929cb985034f083898599bfc3387fedbe423ea33fb95eb4f2fa27fa16f0a76f5dae324f92"}}, &(0x7f0000000440)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "9522ad899dfae8ff89f8b9b5d274f4fc4eedf51393b723720748ee78e6a3f6e1e79874615101bbf9519679697fd70108d75d759791827e734e539cc1461137c777253eb27389319a863f704901323b3114cb7e452364c1fa527ebb8b64c99159684b02fabd09c5c99fc6d853ca4f5754598fdf23c24554a297134e3e02adb64bcf605357418e851cc2413c2048441518096d98b0c8a08f3060294c00cd570f2abc6fd7e166d48a65645d7490da19872d5f700bab07cd4c56a32426aad1f5497f702365b250868b7c0c56084fa18cde71280478fab03397e9ed45730ec6c738d60f7c5ba7e0a246133202556cc9b648cce2"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x40, 0x16, 0x1f, "94324407ec5392486258d56c89065f9a386e8855a60fd4030300965199548f"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)={0x20, 0x81, 0x3, "2b37c1"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "9b9f"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "93a3"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "64994059"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "a96a14"}})

kernel console output (not intermixed with test programs):

L_64_after_hwframe+0x77/0x7f
[  749.432333][T18303] RIP: 0033:0x7fa954b9e0d9
[  749.432344][T18303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.432354][T18303] RSP: 002b:00007fa955b4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  749.432367][T18303] RAX: ffffffffffffffda RBX: 00007fa954e25fa0 RCX: 00007fa954b9e0d9
[  749.432375][T18303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  749.432382][T18303] RBP: 00007fa955b4f090 R08: 0000000000000000 R09: 0000000000000000
[  749.432389][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.432396][T18303] R13: 00007fa954e26038 R14: 00007fa954e25fa0 R15: 00007ffd2a1b0238
[  749.432412][T18303]  </TASK>
[  749.599844][T18220] pegasus 3-1:1.0: probe with driver pegasus failed with error -71
[  749.676494][T18220] usb 3-1: USB disconnect, device number 16
[  750.083151][  T990] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  750.196034][T18313] loop0: detected capacity change from 0 to 1
[  750.209076][T18313] FAULT_INJECTION: forcing a failure.
[  750.209076][T18313] name failslab, interval 1, probability 0, space 0, times 0
[  750.222639][T18313] CPU: 0 UID: 0 PID: 18313 Comm: syz.2.2512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  750.222657][T18313] Tainted: [L]=SOFTLOCKUP
[  750.222662][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  750.222669][T18313] Call Trace:
[  750.222674][T18313]  <TASK>
[  750.222679][T18313]  dump_stack_lvl+0xe8/0x150
[  750.222697][T18313]  should_fail_ex+0x410/0x560
[  750.222716][T18313]  should_failslab+0xa8/0x100
[  750.222729][T18313]  __kmalloc_noprof+0xfe/0x720
[  750.222746][T18313]  ? rcu_is_watching+0x16/0xb0
[  750.222757][T18313]  ? tomoyo_realpath_from_path+0xef/0x640
[  750.222774][T18313]  ? tomoyo_realpath_from_path+0xef/0x640
[  750.222793][T18313]  tomoyo_realpath_from_path+0xef/0x640
[  750.222814][T18313]  ? tomoyo_path_number_perm+0x219/0x5f0
[  750.222828][T18313]  tomoyo_path_number_perm+0x246/0x5f0
[  750.222843][T18313]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  750.222856][T18313]  ? __lock_acquire+0x6df/0x2e50
[  750.222879][T18313]  ? hook_file_ioctl+0x1f2/0x600
[  750.222904][T18313]  ? __fget_files+0x2a/0x420
[  750.222917][T18313]  ? __fget_files+0x2a/0x420
[  750.222928][T18313]  ? __fget_files+0x3a2/0x420
[  750.222940][T18313]  ? __fget_files+0x2a/0x420
[  750.222953][T18313]  security_file_ioctl+0xc3/0x2a0
[  750.222969][T18313]  __se_sys_ioctl+0x47/0x170
[  750.222986][T18313]  do_syscall_64+0x166/0x520
[  750.222996][T18313]  ? trace_irq_disable+0x3b/0x140
[  750.223011][T18313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.223023][T18313]  ? clear_bhb_loop+0x70/0xc0
[  750.223036][T18313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.223047][T18313] RIP: 0033:0x7f2063f9e0d9
[  750.223057][T18313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.223067][T18313] RSP: 002b:00007f2064e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  750.223079][T18313] RAX: ffffffffffffffda RBX: 00007f2064225fa0 RCX: 00007f2063f9e0d9
[  750.223088][T18313] RDX: 0000200000000200 RSI: 0000000000004c04 RDI: 0000000000000004
[  750.223095][T18313] RBP: 00007f2064e4e090 R08: 0000000000000000 R09: 0000000000000000
[  750.223102][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  750.223108][T18313] R13: 00007f2064226038 R14: 00007f2064225fa0 R15: 00007fffb304c0d8
[  750.223125][T18313]  </TASK>
[  750.286442][  T990] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.92
[  750.286466][  T990] usb 9-1: too many configurations: 229, using maximum allowed: 8
[  750.331758][T18313] ERROR: Out of memory at tomoyo_realpath_from_path.
[  750.331844][  T990] usb 9-1: unable to read config index 0 descriptor/start: -61
[  750.331881][  T990] usb 9-1: can't read configurations, error -61
[  750.506936][  T990] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  750.535138][T18313]  loop0:
[  750.535161][T18313] loop0: partition table partially beyond EOD, truncated
[  750.548911][ T4984]  loop0:
[  750.551936][ T4984] loop0: partition table partially beyond EOD, truncated
[  750.673606][  T990] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.92
[  750.682821][  T990] usb 9-1: too many configurations: 229, using maximum allowed: 8
[  750.692781][  T990] usb 9-1: unable to read config index 0 descriptor/start: -61
[  750.700438][  T990] usb 9-1: can't read configurations, error -61
[  750.707581][  T990] usb usb9-port1: attempt power cycle
[  751.053189][  T990] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  751.073864][T18264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  751.074074][T18264] nci: nci_start_poll: failed to set local general bytes
[  751.092584][  T990] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.92
[  751.092608][  T990] usb 9-1: too many configurations: 229, using maximum allowed: 8
[  751.118264][  T990] usb 9-1: unable to read config index 0 descriptor/start: -61
[  751.118295][  T990] usb 9-1: can't read configurations, error -61
[  751.150848][T18253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  751.190843][ T5694] usb 8-1: USB disconnect, device number 3
[  751.201703][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15
[  751.211142][ T5694] usblp0: removed
[  751.266327][  T990] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  751.307919][  T990] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.92
[  751.307971][  T990] usb 9-1: too many configurations: 229, using maximum allowed: 8
[  751.336223][  T990] usb 9-1: unable to read config index 0 descriptor/start: -61
[  751.336262][  T990] usb 9-1: can't read configurations, error -61
[  751.345700][  T990] usb usb9-port1: unable to enumerate USB device
[  751.423536][T18321] FAULT_INJECTION: forcing a failure.
[  751.423536][T18321] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  751.423565][T18321] CPU: 0 UID: 0 PID: 18321 Comm: syz.1.2514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  751.423581][T18321] Tainted: [L]=SOFTLOCKUP
[  751.423585][T18321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  751.423593][T18321] Call Trace:
[  751.423598][T18321]  <TASK>
[  751.423603][T18321]  dump_stack_lvl+0xe8/0x150
[  751.423624][T18321]  should_fail_ex+0x410/0x560
[  751.423643][T18321]  _copy_to_user+0x31/0xb0
[  751.423655][T18321]  simple_read_from_buffer+0xe1/0x170
[  751.423672][T18321]  proc_fail_nth_read+0x1bb/0x230
[  751.423690][T18321]  ? common_file_perm+0x20e/0x2b0
[  751.423707][T18321]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  751.423723][T18321]  ? rw_verify_area+0x24a/0x4c0
[  751.423737][T18321]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  751.423751][T18321]  vfs_read+0x213/0xa80
[  751.423766][T18321]  ? __pfx___mutex_lock+0x10/0x10
[  751.423778][T18321]  ? __pfx_vfs_read+0x10/0x10
[  751.423792][T18321]  ? __fget_files+0x2a/0x420
[  751.423807][T18321]  ? __fget_files+0x3a2/0x420
[  751.423818][T18321]  ? __fget_files+0x2a/0x420
[  751.423834][T18321]  ksys_read+0x150/0x270
[  751.423849][T18321]  ? __pfx_ksys_read+0x10/0x10
[  751.423868][T18321]  do_syscall_64+0x166/0x520
[  751.423878][T18321]  ? trace_irq_disable+0x3b/0x140
[  751.423892][T18321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.423904][T18321]  ? clear_bhb_loop+0x70/0xc0
[  751.423917][T18321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.423928][T18321] RIP: 0033:0x7ff3e4b5e90e
[  751.423939][T18321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  751.423948][T18321] RSP: 002b:00007ff3e59fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  751.423961][T18321] RAX: ffffffffffffffda RBX: 00007ff3e59fd6c0 RCX: 00007ff3e4b5e90e
[  751.423969][T18321] RDX: 000000000000000f RSI: 00007ff3e59fd0a0 RDI: 0000000000000004
[  751.423976][T18321] RBP: 00007ff3e59fd090 R08: 0000000000000000 R09: 0000000000000000
[  751.423983][T18321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.423990][T18321] R13: 00007ff3e4e26038 R14: 00007ff3e4e25fa0 R15: 00007ffd42d40228
[  751.424006][T18321]  </TASK>
[  751.878849][   T30] audit: type=1800 audit(1787248318.132:98): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2516" name="file" dev="configfs" ino=109324 res=0 errno=0
[  751.909107][T18328] FAULT_INJECTION: forcing a failure.
[  751.909107][T18328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  751.909142][T18328] CPU: 0 UID: 0 PID: 18328 Comm: syz.7.2516 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  751.909173][T18328] Tainted: [L]=SOFTLOCKUP
[  751.909178][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  751.909185][T18328] Call Trace:
[  751.909192][T18328]  <TASK>
[  751.909198][T18328]  dump_stack_lvl+0xe8/0x150
[  751.909217][T18328]  should_fail_ex+0x410/0x560
[  751.909236][T18328]  _copy_from_iter+0x1d3/0x1660
[  751.909251][T18328]  ? lock_acquire+0x115/0x350
[  751.909268][T18328]  ? configfs_write_iter+0x7e/0x430
[  751.909284][T18328]  ? __pfx___mutex_lock+0x10/0x10
[  751.909296][T18328]  ? __pfx__copy_from_iter+0x10/0x10
[  751.909318][T18328]  configfs_write_iter+0x12c/0x430
[  751.909336][T18328]  vfs_write+0x612/0xba0
[  751.909355][T18328]  ? __pfx_vfs_write+0x10/0x10
[  751.909378][T18328]  ? __fget_files+0x2a/0x420
[  751.909396][T18328]  ksys_write+0x150/0x270
[  751.909411][T18328]  ? __pfx_ksys_write+0x10/0x10
[  751.909431][T18328]  do_syscall_64+0x166/0x520
[  751.909441][T18328]  ? trace_irq_disable+0x3b/0x140
[  751.909456][T18328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.909468][T18328]  ? clear_bhb_loop+0x70/0xc0
[  751.909481][T18328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.909492][T18328] RIP: 0033:0x7f5f56f9e0d9
[  751.909503][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.909512][T18328] RSP: 002b:00007f5f57e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  751.909525][T18328] RAX: ffffffffffffffda RBX: 00007f5f57225fa0 RCX: 00007f5f56f9e0d9
[  751.909533][T18328] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000004
[  751.909540][T18328] RBP: 00007f5f57e26090 R08: 0000000000000000 R09: 0000000000000000
[  751.909547][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.909554][T18328] R13: 00007f5f57226038 R14: 00007f5f57225fa0 R15: 00007ffd266e1788
[  751.909571][T18328]  </TASK>
[  752.571994][T18344] FAULT_INJECTION: forcing a failure.
[  752.571994][T18344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  752.589402][   T30] audit: type=1800 audit(1787248318.822:99): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2522" name="file" dev="configfs" ino=109374 res=0 errno=0
[  752.615107][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.2.2522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  752.615126][T18344] Tainted: [L]=SOFTLOCKUP
[  752.615131][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  752.615138][T18344] Call Trace:
[  752.615143][T18344]  <TASK>
[  752.615149][T18344]  dump_stack_lvl+0xe8/0x150
[  752.615169][T18344]  should_fail_ex+0x410/0x560
[  752.615188][T18344]  _copy_from_iter+0x1d3/0x1660
[  752.615204][T18344]  ? lock_acquire+0x115/0x350
[  752.615223][T18344]  ? configfs_write_iter+0x7e/0x430
[  752.615241][T18344]  ? __pfx___mutex_lock+0x10/0x10
[  752.615253][T18344]  ? __pfx__copy_from_iter+0x10/0x10
[  752.615276][T18344]  configfs_write_iter+0x12c/0x430
[  752.615293][T18344]  vfs_write+0x612/0xba0
[  752.615312][T18344]  ? __pfx_vfs_write+0x10/0x10
[  752.615331][T18344]  ? __fget_files+0x2a/0x420
[  752.615349][T18344]  ksys_write+0x150/0x270
[  752.615364][T18344]  ? __pfx_ksys_write+0x10/0x10
[  752.615383][T18344]  do_syscall_64+0x166/0x520
[  752.615393][T18344]  ? trace_irq_disable+0x3b/0x140
[  752.615408][T18344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.615420][T18344]  ? clear_bhb_loop+0x70/0xc0
[  752.615433][T18344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.615444][T18344] RIP: 0033:0x7f2063f9e0d9
[  752.615456][T18344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.615465][T18344] RSP: 002b:00007f2064e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  752.615478][T18344] RAX: ffffffffffffffda RBX: 00007f2064225fa0 RCX: 00007f2063f9e0d9
[  752.615486][T18344] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000004
[  752.615493][T18344] RBP: 00007f2064e4e090 R08: 0000000000000000 R09: 0000000000000000
[  752.615500][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.615507][T18344] R13: 00007f2064226038 R14: 00007f2064225fa0 R15: 00007fffb304c0d8
[  752.615524][T18344]  </TASK>
[  752.671910][  T990] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  752.887003][  T990] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  752.897019][  T990] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  752.897082][  T990] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  752.897105][  T990] usb 8-1: config 0 interface 0 has no altsetting 0
[  752.931986][  T990] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  752.932013][  T990] usb 8-1: Product: syz
[  752.932030][  T990] usb 8-1: Manufacturer: syz
[  752.932041][  T990] usb 8-1: SerialNumber: syz
[  752.962832][  T990] usb 8-1: config 0 descriptor??
[  752.983519][T18220] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  753.013770][  T990] usb 8-1: selecting invalid altsetting 0
[  753.142826][   T30] audit: type=1800 audit(1787248319.392:100): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2524" name="file" dev="configfs" ino=109394 res=0 errno=0
[  753.163642][T18220] usb 2-1: Using ep0 maxpacket: 8
[  753.170597][T18220] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  753.182691][T18220] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.182735][T18220] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  753.219170][T18220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.219194][T18220] usb 2-1: Product: syz
[  753.219227][T18220] usb 2-1: Manufacturer: syz
[  753.219238][T18220] usb 2-1: SerialNumber: syz
[  753.253451][T18220] usb 2-1: config 0 descriptor??
[  753.285936][T18220] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  753.395485][T18220] usb 8-1: USB disconnect, device number 4
[  753.498802][T16809] usb 2-1: USB disconnect, device number 115
[  753.529022][T17848] udevd[17848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  753.675155][T18364] FAULT_INJECTION: forcing a failure.
[  753.675155][T18364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.690187][T18364] CPU: 0 UID: 0 PID: 18364 Comm: syz.2.2527 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.690209][T18364] Tainted: [L]=SOFTLOCKUP
[  753.690213][T18364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  753.690221][T18364] Call Trace:
[  753.690226][T18364]  <TASK>
[  753.690231][T18364]  dump_stack_lvl+0xe8/0x150
[  753.690250][T18364]  should_fail_ex+0x410/0x560
[  753.690268][T18364]  _copy_from_user+0x2d/0xb0
[  753.690280][T18364]  core_sys_select+0x509/0xb40
[  753.690292][T18364]  ? get_pid_task+0x20/0x1f0
[  753.690313][T18364]  ? __pfx_core_sys_select+0x10/0x10
[  753.690335][T18364]  ? __pfx_set_user_sigmask+0x10/0x10
[  753.690348][T18364]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  753.690363][T18364]  __se_sys_pselect6+0x267/0x320
[  753.690377][T18364]  ? __pfx___se_sys_pselect6+0x10/0x10
[  753.690388][T18364]  ? __pfx_ksys_write+0x10/0x10
[  753.690405][T18364]  ? __x64_sys_pselect6+0x21/0xf0
[  753.690417][T18364]  do_syscall_64+0x166/0x520
[  753.690427][T18364]  ? trace_irq_disable+0x3b/0x140
[  753.690443][T18364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.690454][T18364]  ? clear_bhb_loop+0x70/0xc0
[  753.690467][T18364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.690478][T18364] RIP: 0033:0x7f2063f9e0d9
[  753.690489][T18364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.690499][T18364] RSP: 002b:00007f2064e4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  753.690511][T18364] RAX: ffffffffffffffda RBX: 00007f2064225fa0 RCX: 00007f2063f9e0d9
[  753.690520][T18364] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040
[  753.690527][T18364] RBP: 00007f2064e4e090 R08: 0000000000000000 R09: 0000000000000000
[  753.690533][T18364] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  753.690541][T18364] R13: 00007f2064226038 R14: 00007f2064225fa0 R15: 00007fffb304c0d8
[  753.690557][T18364]  </TASK>
[  754.213293][T16809] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  754.228822][T18376] FAULT_INJECTION: forcing a failure.
[  754.228822][T18376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.228854][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.1.2530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  754.228870][T18376] Tainted: [L]=SOFTLOCKUP
[  754.228874][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  754.228881][T18376] Call Trace:
[  754.228886][T18376]  <TASK>
[  754.228893][T18376]  dump_stack_lvl+0xe8/0x150
[  754.228911][T18376]  should_fail_ex+0x410/0x560
[  754.228929][T18376]  _copy_from_user+0x2d/0xb0
[  754.228941][T18376]  ___sys_sendmsg+0x1c6/0x360
[  754.228955][T18376]  ? __lock_acquire+0x6df/0x2e50
[  754.228973][T18376]  ? __pfx____sys_sendmsg+0x10/0x10
[  754.229008][T18376]  ? __fget_files+0x2a/0x420
[  754.229021][T18376]  ? __fget_files+0x3a2/0x420
[  754.229038][T18376]  __x64_sys_sendmsg+0x1b1/0x290
[  754.229053][T18376]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  754.229076][T18376]  do_syscall_64+0x166/0x520
[  754.229087][T18376]  ? trace_irq_disable+0x3b/0x140
[  754.229101][T18376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.229113][T18376]  ? clear_bhb_loop+0x70/0xc0
[  754.229126][T18376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.229137][T18376] RIP: 0033:0x7ff3e4b9e0d9
[  754.229148][T18376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.229158][T18376] RSP: 002b:00007ff3e59fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  754.229170][T18376] RAX: ffffffffffffffda RBX: 00007ff3e4e25fa0 RCX: 00007ff3e4b9e0d9
[  754.229179][T18376] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  754.229186][T18376] RBP: 00007ff3e59fd090 R08: 0000000000000000 R09: 0000000000000000
[  754.229193][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.229199][T18376] R13: 00007ff3e4e26038 R14: 00007ff3e4e25fa0 R15: 00007ffd42d40228
[  754.229216][T18376]  </TASK>
[  754.466215][T16809] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  754.481519][T16809] usb 3-1: config 1 has an invalid interface number: 1 but max is 0
[  754.481545][T16809] usb 3-1: config 1 has no interface number 0
[  754.481576][T16809] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  754.515716][T16809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.515741][T16809] usb 3-1: Product: syz
[  754.515758][T16809] usb 3-1: Manufacturer: syz
[  754.515769][T16809] usb 3-1: SerialNumber: syz
[  754.577068][T18368] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  754.595806][T16809] usb 3-1: selecting invalid altsetting 1
[  754.661953][T16809] dvb_ttusb_budget: ttusb_init_controller: error
[  754.661979][T16809] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  754.851198][T16809] DVB: Unable to find symbol cx22700_attach()
[  754.858522][T18384] FAULT_INJECTION: forcing a failure.
[  754.858522][T18384] name failslab, interval 1, probability 0, space 0, times 0
[  754.858544][T18384] CPU: 0 UID: 0 PID: 18384 Comm: syz.1.2532 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  754.858560][T18384] Tainted: [L]=SOFTLOCKUP
[  754.858564][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  754.858571][T18384] Call Trace:
[  754.858576][T18384]  <TASK>
[  754.858581][T18384]  dump_stack_lvl+0xe8/0x150
[  754.858600][T18384]  should_fail_ex+0x410/0x560
[  754.858618][T18384]  should_failslab+0xa8/0x100
[  754.858633][T18384]  __kmalloc_noprof+0xfe/0x720
[  754.858647][T18384]  ? rcu_is_watching+0x16/0xb0
[  754.858659][T18384]  ? tomoyo_realpath_from_path+0xef/0x640
[  754.858675][T18384]  ? tomoyo_realpath_from_path+0xef/0x640
[  754.858695][T18384]  tomoyo_realpath_from_path+0xef/0x640
[  754.858715][T18384]  ? tomoyo_path_number_perm+0x219/0x5f0
[  754.858730][T18384]  tomoyo_path_number_perm+0x246/0x5f0
[  754.858745][T18384]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  754.858759][T18384]  ? __lock_acquire+0x6df/0x2e50
[  754.858781][T18384]  ? hook_file_ioctl+0x1f2/0x600
[  754.858806][T18384]  ? __fget_files+0x2a/0x420
[  754.858820][T18384]  ? __fget_files+0x2a/0x420
[  754.858831][T18384]  ? __fget_files+0x3a2/0x420
[  754.858842][T18384]  ? __fget_files+0x2a/0x420
[  754.858856][T18384]  security_file_ioctl+0xc3/0x2a0
[  754.858877][T18384]  __se_sys_ioctl+0x47/0x170
[  754.858894][T18384]  do_syscall_64+0x166/0x520
[  754.858905][T18384]  ? trace_irq_disable+0x3b/0x140
[  754.858920][T18384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.858931][T18384]  ? clear_bhb_loop+0x70/0xc0
[  754.858945][T18384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.858955][T18384] RIP: 0033:0x7ff3e4b9e0d9
[  754.858966][T18384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.858976][T18384] RSP: 002b:00007ff3e59fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  754.858988][T18384] RAX: ffffffffffffffda RBX: 00007ff3e4e25fa0 RCX: 00007ff3e4b9e0d9
[  754.858996][T18384] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  754.859003][T18384] RBP: 00007ff3e59fd090 R08: 0000000000000000 R09: 0000000000000000
[  754.859010][T18384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.859017][T18384] R13: 00007ff3e4e26038 R14: 00007ff3e4e25fa0 R15: 00007ffd42d40228
[  754.859033][T18384]  </TASK>
[  755.139773][T18384] ERROR: Out of memory at tomoyo_realpath_from_path.
[  755.257988][T16809] DVB: Unable to find symbol tda10046_attach()
[  755.266509][T16809] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  755.290284][T16809] usb 3-1: USB disconnect, device number 17
[  755.547267][   T30] audit: type=1800 audit(1787248321.802:101): pid=18398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2535" name="file" dev="configfs" ino=109642 res=0 errno=0
[  755.581914][T18398] mass_storage.0/lun.0: unable to open backing file: file0
[  755.769462][   T30] audit: type=1800 audit(1787248322.022:102): pid=18403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2537" name="file" dev="configfs" ino=109671 res=0 errno=0
[  755.799113][T18403] mass_storage.0/lun.0: unable to open backing file: fi
[  756.335606][ T5716] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  756.439436][T18417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.504724][ T5716] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  756.515103][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  756.515145][ T5716] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  756.544676][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.544721][ T5716] usb 3-1: Product: syz
[  756.544739][ T5716] usb 3-1: Manufacturer: syz
[  756.544750][ T5716] usb 3-1: SerialNumber: syz
[  756.765322][T18423] syzkaller1: entered promiscuous mode
[  756.765351][T18423] syzkaller1: entered allmulticast mode
[  756.845095][ T5627] Bluetooth: hci1: unexpected subevent 0x01 length: 11 < 18
[  756.914926][T18220] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  756.970212][T18417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.513314][T18220] usb 2-1: Using ep0 maxpacket: 32
[  757.525407][T18220] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  757.547051][T18220] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  757.549195][T18220] usb 2-1: config 0 has no interface number 0
[  757.579689][T18220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.579715][T18220] usb 2-1: Product: syz
[  757.579760][T18220] usb 2-1: Manufacturer: syz
[  757.579771][T18220] usb 2-1: SerialNumber: syz
[  757.611981][T18220] usb 2-1: config 0 descriptor??
[  758.082292][T18417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.093273][T18438] PM: suspend entry (deep)
[  758.214518][T18220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  758.227094][T18220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  758.334152][T18469] FAULT_INJECTION: forcing a failure.
[  758.334152][T18469] name failslab, interval 1, probability 0, space 0, times 0
[  758.334190][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.7.2545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  758.334206][T18469] Tainted: [L]=SOFTLOCKUP
[  758.334211][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  758.334218][T18469] Call Trace:
[  758.334223][T18469]  <TASK>
[  758.334229][T18469]  dump_stack_lvl+0xe8/0x150
[  758.334247][T18469]  should_fail_ex+0x410/0x560
[  758.334266][T18469]  should_failslab+0xa8/0x100
[  758.334279][T18469]  __kmalloc_noprof+0xfe/0x720
[  758.334295][T18469]  ? kernfs_fop_write_iter+0x157/0x540
[  758.334305][T18469]  ? kernfs_fop_write_iter+0x157/0x540
[  758.334320][T18469]  kernfs_fop_write_iter+0x157/0x540
[  758.334333][T18469]  vfs_write+0x612/0xba0
[  758.334352][T18469]  ? __pfx_vfs_write+0x10/0x10
[  758.334370][T18469]  ? __fget_files+0x2a/0x420
[  758.334387][T18469]  ksys_write+0x150/0x270
[  758.334402][T18469]  ? __pfx_ksys_write+0x10/0x10
[  758.334421][T18469]  do_syscall_64+0x166/0x520
[  758.334432][T18469]  ? trace_irq_disable+0x3b/0x140
[  758.334447][T18469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.334458][T18469]  ? clear_bhb_loop+0x70/0xc0
[  758.334472][T18469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.334482][T18469] RIP: 0033:0x7f5f56f9e0d9
[  758.334494][T18469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.334503][T18469] RSP: 002b:00007f5f57e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  758.334516][T18469] RAX: ffffffffffffffda RBX: 00007f5f57225fa0 RCX: 00007f5f56f9e0d9
[  758.334524][T18469] RDX: 0000000000000009 RSI: 0000200000000800 RDI: 0000000000000003
[  758.334538][T18469] RBP: 00007f5f57e26090 R08: 0000000000000000 R09: 0000000000000000
[  758.334544][T18469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.334551][T18469] R13: 00007f5f57226038 R14: 00007f5f57225fa0 R15: 00007ffd266e1788
[  758.334568][T18469]  </TASK>
[  758.484485][T18451] Filesystems sync: 0.360 seconds
[  758.622984][T18417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.038333][ T5716] cdc_ncm 3-1:1.0: bind() failure
[  759.057449][ T5716] usbtest 3-1:1.0: Linux gadget zero
[  759.063879][ T5716] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  759.085096][ T5716] usbtest 3-1:1.1: couldn't get endpoints, -22
[  759.092480][ T5716] usbtest 3-1:1.1: probe with driver usbtest failed with error -22
[  759.106925][ T5716] usbhid 3-1:1.1: couldn't find an input interrupt endpoint
[  759.123639][ T5716] usb 3-1: USB disconnect, device number 18
[  759.148216][ T5627] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  759.148241][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: kworker/u9:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.148258][ T5627] Tainted: [L]=SOFTLOCKUP
[  759.148262][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.148270][ T5627] Workqueue: hci3 hci_rx_work
[  759.148290][ T5627] Call Trace:
[  759.148295][ T5627]  <TASK>
[  759.148302][ T5627]  dump_stack_lvl+0xe8/0x150
[  759.148319][ T5627]  sysfs_create_dir_ns+0x271/0x2a0
[  759.148339][ T5627]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  759.148356][ T5627]  ? do_raw_spin_unlock+0xf5/0x200
[  759.148373][ T5627]  kobject_add_internal+0x622/0xcd0
[  759.148390][ T5627]  kobject_add+0x163/0x240
[  759.148406][ T5627]  ? __pfx_kobject_add+0x10/0x10
[  759.148422][ T5627]  ? get_device_parent+0x366/0x3a0
[  759.148440][ T5627]  device_add+0x3fa/0xb80
[  759.148463][ T5627]  hci_conn_add_sysfs+0xd5/0x210
[  759.148482][ T5627]  le_conn_complete_evt+0x10b2/0x17a0
[  759.148499][ T5627]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  759.148512][ T5627]  ? __mutex_unlock_slowpath+0x731/0x900
[  759.148526][ T5627]  ? skb_pull_data+0xf0/0x200
[  759.148544][ T5627]  hci_le_enh_conn_complete_evt+0x189/0x490
[  759.148557][ T5627]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  759.148572][ T5627]  hci_event_packet+0x67a/0xf10
[  759.148591][ T5627]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  759.148602][ T5627]  ? __pfx_hci_event_packet+0x10/0x10
[  759.148621][ T5627]  ? audit_filter_rules+0x4280/0x5d10
[  759.148635][ T5627]  ? hci_send_to_monitor+0xe2/0x590
[  759.148651][ T5627]  hci_rx_work+0x3ee/0x1020
[  759.148670][ T5627]  ? process_scheduled_works+0x97a/0x1630
[  759.148684][ T5627]  process_scheduled_works+0xc3d/0x1630
[  759.148713][ T5627]  ? __pfx_process_scheduled_works+0x10/0x10
[  759.148729][ T5627]  ? assign_work+0x3cf/0x5d0
[  759.148744][ T5627]  worker_thread+0xa47/0xfb0
[  759.148764][ T5627]  ? __kthread_parkme+0x71/0x1f0
[  759.148784][ T5627]  kthread+0x38b/0x480
[  759.148800][ T5627]  ? __pfx_worker_thread+0x10/0x10
[  759.148812][ T5627]  ? __pfx_kthread+0x10/0x10
[  759.148828][ T5627]  ret_from_fork+0x514/0xb70
[  759.148846][ T5627]  ? __pfx_ret_from_fork+0x10/0x10
[  759.148861][ T5627]  ? __switch_to+0xc89/0x1420
[  759.148876][ T5627]  ? __pfx_kthread+0x10/0x10
[  759.148892][ T5627]  ret_from_fork_asm+0x1a/0x30
[  759.148916][ T5627]  </TASK>
[  759.148958][ T5627] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  759.148984][ T5627] Bluetooth: hci3: failed to register connection device
[  759.230467][ T7798] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  759.418572][ T7798] usb 9-1: device descriptor read/64, error -71
[  759.499838][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  759.499866][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.499883][ T5623] Tainted: [L]=SOFTLOCKUP
[  759.499888][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.499896][ T5623] Workqueue: hci1 hci_rx_work
[  759.499919][ T5623] Call Trace:
[  759.499924][ T5623]  <TASK>
[  759.499930][ T5623]  dump_stack_lvl+0xe8/0x150
[  759.499947][ T5623]  sysfs_create_dir_ns+0x271/0x2a0
[  759.499964][ T5623]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  759.499981][ T5623]  ? do_raw_spin_unlock+0xf5/0x200
[  759.499997][ T5623]  kobject_add_internal+0x622/0xcd0
[  759.500015][ T5623]  kobject_add+0x163/0x240
[  759.500030][ T5623]  ? __pfx_kobject_add+0x10/0x10
[  759.500046][ T5623]  ? get_device_parent+0x366/0x3a0
[  759.500064][ T5623]  device_add+0x3fa/0xb80
[  759.500081][ T5623]  hci_conn_add_sysfs+0xd5/0x210
[  759.500098][ T5623]  le_conn_complete_evt+0x10b2/0x17a0
[  759.500115][ T5623]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  759.500128][ T5623]  ? __mutex_unlock_slowpath+0x731/0x900
[  759.500141][ T5623]  ? skb_pull_data+0xf0/0x200
[  759.500159][ T5623]  hci_le_enh_conn_complete_evt+0x189/0x490
[  759.500172][ T5623]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  759.500186][ T5623]  hci_event_packet+0x67a/0xf10
[  759.500206][ T5623]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  759.500217][ T5623]  ? __pfx_hci_event_packet+0x10/0x10
[  759.500235][ T5623]  ? audit_filter_rules+0x4280/0x5d10
[  759.500250][ T5623]  ? hci_send_to_monitor+0xe2/0x590
[  759.500265][ T5623]  hci_rx_work+0x3ee/0x1020
[  759.500285][ T5623]  ? process_scheduled_works+0x97a/0x1630
[  759.500298][ T5623]  process_scheduled_works+0xc3d/0x1630
[  759.500327][ T5623]  ? __pfx_process_scheduled_works+0x10/0x10
[  759.500343][ T5623]  ? assign_work+0x3cf/0x5d0
[  759.500358][ T5623]  worker_thread+0xa47/0xfb0
[  759.500378][ T5623]  ? __kthread_parkme+0x71/0x1f0
[  759.500398][ T5623]  kthread+0x38b/0x480
[  759.500421][ T5623]  ? __pfx_worker_thread+0x10/0x10
[  759.500433][ T5623]  ? __pfx_kthread+0x10/0x10
[  759.500450][ T5623]  ret_from_fork+0x514/0xb70
[  759.500469][ T5623]  ? __pfx_ret_from_fork+0x10/0x10
[  759.500484][ T5623]  ? __switch_to+0xc89/0x1420
[  759.500500][ T5623]  ? __pfx_kthread+0x10/0x10
[  759.500516][ T5623]  ret_from_fork_asm+0x1a/0x30
[  759.500540][ T5623]  </TASK>
[  759.500585][ T5623] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  759.500609][ T5623] Bluetooth: hci1: failed to register connection device
[  759.694516][ T7798] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  759.695018][T18480] FAULT_INJECTION: forcing a failure.
[  759.695018][T18480] name failslab, interval 1, probability 0, space 0, times 0
[  759.695038][T18480] CPU: 0 UID: 0 PID: 18480 Comm: syz.2.2548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.695053][T18480] Tainted: [L]=SOFTLOCKUP
[  759.695058][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.695065][T18480] Call Trace:
[  759.695070][T18480]  <TASK>
[  759.695075][T18480]  dump_stack_lvl+0xe8/0x150
[  759.695093][T18480]  should_fail_ex+0x410/0x560
[  759.695111][T18480]  should_failslab+0xa8/0x100
[  759.695125][T18480]  ? do_getname+0x2e/0x250
[  759.695135][T18480]  kmem_cache_alloc_noprof+0xa1/0x600
[  759.695151][T18480]  ? do_getname+0x2e/0x250
[  759.695164][T18480]  do_getname+0x2e/0x250
[  759.695174][T18480]  ? getname_flags+0x11/0x20
[  759.695186][T18480]  do_sys_openat2+0xcc/0x200
[  759.695198][T18480]  ? __pfx_do_sys_openat2+0x10/0x10
[  759.695210][T18480]  ? ksys_write+0x242/0x270
[  759.695224][T18480]  ? __pfx_ksys_write+0x10/0x10
[  759.695239][T18480]  __x64_sys_openat+0x138/0x170
[  759.695252][T18480]  do_syscall_64+0x166/0x520
[  759.695263][T18480]  ? trace_irq_disable+0x3b/0x140
[  759.695278][T18480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.695289][T18480]  ? clear_bhb_loop+0x70/0xc0
[  759.695302][T18480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.695313][T18480] RIP: 0033:0x7f2063f9e0d9
[  759.695324][T18480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.695333][T18480] RSP: 002b:00007f2064e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  759.695345][T18480] RAX: ffffffffffffffda RBX: 00007f2064225fa0 RCX: 00007f2063f9e0d9
[  759.695353][T18480] RDX: 0000000000101400 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  759.695361][T18480] RBP: 00007f2064e4e090 R08: 0000000000000000 R09: 0000000000000000
[  759.695368][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.695375][T18480] R13: 00007f2064226038 R14: 00007f2064225fa0 R15: 00007fffb304c0d8
[  759.695391][T18480]  </TASK>
[  759.969666][ T7798] usb 9-1: device descriptor read/64, error -71
[  760.074418][ T7798] usb usb9-port1: attempt power cycle
[  760.415193][ T7798] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  760.433596][ T7798] usb 9-1: device descriptor read/8, error -71
[  760.673994][ T7798] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  760.694521][ T7798] usb 9-1: device descriptor read/8, error -71
[  760.804814][ T7798] usb usb9-port1: unable to enumerate USB device
[  760.943725][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout
[  760.950418][T18438] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  761.201347][T18438] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  761.262120][T18438] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  761.278052][T18438] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  761.288088][T18438] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  761.313645][T18438] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  761.339570][T18438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  761.339649][T18438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  761.380379][T18438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  761.390139][T18438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  761.401316][T18438] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  761.401407][T18438] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  761.421570][T18438] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  761.432239][T18438] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  761.464918][T18438] Freezing user space processes
[  763.023272][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout
[  763.343298][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  763.349998][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  763.423334][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  765.025804][T18220] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -110
[  765.026003][T18220] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -110
[  765.103253][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout
[  765.423213][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  765.429777][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  765.503442][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  767.503202][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  767.509281][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  767.587007][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  769.583152][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout
[  769.663317][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout
[  781.483487][T18438] Freezing user space processes failed after 20.005 seconds (2 tasks refusing to freeze, wq_busy=0):
[  781.494510][T18438] task:syz.1.2543      state:D stack:25336 pid:18463 tgid:18437 ppid:17873  task_flags:0x400040 flags:0x00080002
[  781.494586][T18438] Call Trace:
[  781.494594][T18438]  <TASK>
[  781.494605][T18438]  __schedule+0x1b57/0x5bc0
[  781.494646][T18438]  ? __pfx___schedule+0x10/0x10
[  781.494671][T18438]  ? schedule+0x90/0x2b0
[  781.494707][T18438]  schedule+0x164/0x2b0
[  781.494727][T18438]  schedule_preempt_disabled+0x13/0x30
[  781.494746][T18438]  __mutex_lock+0x7c1/0x1550
[  781.494763][T18438]  ? __mutex_lock+0x5d4/0x1550
[  781.494778][T18438]  ? misc_open+0x51/0x350
[  781.494796][T18438]  ? __pfx___mutex_lock+0x10/0x10
[  781.494809][T18438]  ? __asan_memset+0x22/0x50
[  781.494852][T18438]  misc_open+0x51/0x350
[  781.494870][T18438]  chrdev_open+0x4d9/0x600
[  781.494892][T18438]  ? __pfx_chrdev_open+0x10/0x10
[  781.494912][T18438]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  781.494934][T18438]  ? __pfx_chrdev_open+0x10/0x10
[  781.494953][T18438]  do_dentry_open+0x816/0x1380
[  781.494989][T18438]  vfs_open+0x3b/0x340
[  781.495001][T18438]  ? path_openat+0x1428/0x1d60
[  781.495021][T18438]  path_openat+0x1443/0x1d60
[  781.495050][T18438]  do_file_open+0x23e/0x4a0
[  781.495071][T18438]  ? __pfx_do_file_open+0x10/0x10
[  781.495116][T18438]  ? _raw_spin_unlock+0x28/0x50
[  781.495134][T18438]  ? alloc_fd+0x651/0x6c0
[  781.495155][T18438]  do_sys_openat2+0x115/0x200
[  781.495169][T18438]  ? __se_sys_futex+0x3a8/0x450
[  781.495185][T18438]  ? __pfx_do_sys_openat2+0x10/0x10
[  781.495203][T18438]  ? rcu_is_watching+0x16/0xb0
[  781.495220][T18438]  __x64_sys_openat+0x138/0x170
[  781.495251][T18438]  do_syscall_64+0x166/0x520
[  781.495265][T18438]  ? trace_irq_disable+0x3b/0x140
[  781.495284][T18438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.495304][T18438]  ? clear_bhb_loop+0x70/0xc0
[  781.495322][T18438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.495337][T18438] RIP: 0033:0x7ff3e4b5e90e
[  781.495350][T18438] RSP: 002b:00007ff3e59d9ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  781.495366][T18438] RAX: ffffffffffffffda RBX: 00007ff3e59dc6c0 RCX: 00007ff3e4b5e90e
[  781.495393][T18438] RDX: 0000000000000002 RSI: 00007ff3e4c343aa RDI: ffffffffffffff9c
[  781.495404][T18438] RBP: 00007ff3e4c35024 R08: 0000000000000000 R09: 0000000000000000
[  781.495414][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000aa
[  781.495423][T18438] R13: 00002000000005c0 R14: 0000000000000004 R15: 00007ffd42d40228
[  781.495444][T18438]  </TASK>
[  781.495455][T18438] task:syz.2.2549      state:D stack:28552 pid:18484 tgid:18483 ppid:17998  task_flags:0x400040 flags:0x00080002
[  781.495495][T18438] Call Trace:
[  781.495501][T18438]  <TASK>
[  781.495523][T18438]  __schedule+0x1b57/0x5bc0
[  781.495558][T18438]  ? __pfx___schedule+0x10/0x10
[  781.495582][T18438]  ? schedule+0x90/0x2b0
[  781.495602][T18438]  schedule+0x164/0x2b0
[  781.495634][T18438]  schedule_preempt_disabled+0x13/0x30
[  781.495667][T18438]  __mutex_lock+0x7c1/0x1550
[  781.495684][T18438]  ? __mutex_lock+0x5d4/0x1550
[  781.495700][T18438]  ? misc_open+0x51/0x350
[  781.495716][T18438]  ? __pfx___mutex_lock+0x10/0x10
[  781.495729][T18438]  ? __asan_memset+0x22/0x50
[  781.495762][T18438]  misc_open+0x51/0x350
[  781.495779][T18438]  chrdev_open+0x4d9/0x600
[  781.495814][T18438]  ? __pfx_chrdev_open+0x10/0x10
[  781.495834][T18438]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  781.495856][T18438]  ? __pfx_chrdev_open+0x10/0x10
[  781.495875][T18438]  do_dentry_open+0x816/0x1380
[  781.495895][T18438]  vfs_open+0x3b/0x340
[  781.495908][T18438]  ? path_openat+0x1428/0x1d60
[  781.495926][T18438]  path_openat+0x1443/0x1d60
[  781.495969][T18438]  do_file_open+0x23e/0x4a0
[  781.495990][T18438]  ? __pfx_do_file_open+0x10/0x10
[  781.496020][T18438]  ? _raw_spin_unlock+0x28/0x50
[  781.496037][T18438]  ? alloc_fd+0x651/0x6c0
[  781.496057][T18438]  do_sys_openat2+0x115/0x200
[  781.496073][T18438]  ? __pfx_do_sys_openat2+0x10/0x10
[  781.496101][T18438]  ? kfree+0x4d/0x650
[  781.496119][T18438]  ? _raw_spin_unlock_irqrestore+0x47/0x80
[  781.496142][T18438]  __x64_sys_openat+0x138/0x170
[  781.496160][T18438]  do_syscall_64+0x166/0x520
[  781.496172][T18438]  ? trace_irq_disable+0x3b/0x140
[  781.496190][T18438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.496204][T18438]  ? clear_bhb_loop+0x70/0xc0
[  781.496234][T18438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.496248][T18438] RIP: 0033:0x7f2063f9e0d9
[  781.496260][T18438] RSP: 002b:00007f2064e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  781.496276][T18438] RAX: ffffffffffffffda RBX: 00007f2064225fa0 RCX: 00007f2063f9e0d9
[  781.496287][T18438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  781.496297][T18438] RBP: 00007f2064035024 R08: 0000000000000000 R09: 0000000000000000
[  781.496317][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  781.496326][T18438] R13: 00007f2064226038 R14: 00007f2064225fa0 R15: 00007fffb304c0d8
[  781.496346][T18438]  </TASK>
[  781.996592][T18438] OOM killer enabled.
[  782.000616][T18438] Restarting tasks: Starting
[  782.059804][T18438] Restarting tasks: Done
[  782.060029][T18438] random: crng reseeded on system resumption
[  782.060239][T18438] hwrng_fill thread creation failed
[  782.192023][T18438] PM: suspend exit
[  782.245935][T18477] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  782.246048][T18477] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  782.246161][T18477] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  782.246276][T18477] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  782.450749][T16809] usb 2-1: USB disconnect, device number 116
[  782.862080][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  782.880254][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  782.889790][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  782.900635][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  782.909241][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  783.049678][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  783.061378][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  783.071439][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  783.090387][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  783.104397][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  783.227050][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  783.237430][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  783.246844][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  783.266031][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  783.276562][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  783.438308][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  783.449979][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  783.459378][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  783.467978][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  783.477439][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  784.606668][   T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.839009][   T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.004490][   T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.023954][ T5623] Bluetooth: hci2: command tx timeout
[  785.147853][   T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.185630][ T5623] Bluetooth: hci5: command tx timeout
[  785.344188][ T5623] Bluetooth: hci6: command tx timeout
[  785.503802][ T5623] Bluetooth: hci7: command tx timeout
[  785.774682][   T59] bridge_slave_1: left allmulticast mode
[  785.774711][   T59] bridge_slave_1: left promiscuous mode
[  785.774855][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.797278][   T59] bridge_slave_0: left allmulticast mode
[  785.804577][   T59] bridge_slave_0: left promiscuous mode
[  785.810305][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.097162][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  786.112424][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  786.126431][   T59] bond0 (unregistering): Released all slaves
[  786.505738][   T59] hsr_slave_0: left promiscuous mode
[  786.513431][   T59] hsr_slave_1: left promiscuous mode
[  786.514013][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  786.514030][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  786.536477][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  786.536497][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  786.567618][   T59] veth1_macvtap: left promiscuous mode
[  786.574403][   T59] veth0_macvtap: left promiscuous mode
[  786.579953][   T59] veth1_vlan: left promiscuous mode
[  786.585552][   T59] veth0_vlan: left promiscuous mode
[  786.952849][   T59] team0 (unregistering): Port device team_slave_1 removed
[  786.980634][   T59] team0 (unregistering): Port device team_slave_0 removed
[  787.105826][ T5623] Bluetooth: hci2: command tx timeout
[  787.264234][ T5623] Bluetooth: hci5: command tx timeout
[  787.427463][ T5623] Bluetooth: hci6: command tx timeout
[  787.583908][ T5623] Bluetooth: hci7: command tx timeout
[  787.780186][T18542] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.780277][T18542] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.780358][T18542] bridge_slave_0: entered allmulticast mode
[  787.806551][T18542] bridge_slave_0: entered promiscuous mode
[  787.881300][T18542] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.888585][T18542] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.898335][T18542] bridge_slave_1: entered allmulticast mode
[  787.907106][T18542] bridge_slave_1: entered promiscuous mode
[  788.121592][T18542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  788.136722][T18542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.249861][   T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.306120][T18549] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.313886][T18549] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.313982][T18549] bridge_slave_0: entered allmulticast mode
[  788.330791][T18549] bridge_slave_0: entered promiscuous mode
[  788.338245][T18549] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.346999][T18549] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.355092][T18549] bridge_slave_1: entered allmulticast mode
[  788.362250][T18549] bridge_slave_1: entered promiscuous mode
[  788.518782][   T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.600469][T18542] team0: Port device team_slave_0 added
[  788.625268][T18546] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.625378][T18546] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.625633][T18546] bridge_slave_0: entered allmulticast mode
[  788.650582][T18546] bridge_slave_0: entered promiscuous mode
[  788.660071][T18546] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.667561][T18546] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.675629][T18546] bridge_slave_1: entered allmulticast mode
[  788.685242][T18546] bridge_slave_1: entered promiscuous mode
[  788.710649][T18553] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.719674][T18553] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.726934][T18553] bridge_slave_0: entered allmulticast mode
[  788.735913][T18553] bridge_slave_0: entered promiscuous mode
[  788.744466][T18553] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.752791][T18553] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.760359][T18553] bridge_slave_1: entered allmulticast mode
[  788.767659][T18553] bridge_slave_1: entered promiscuous mode
[  788.777305][T18542] team0: Port device team_slave_1 added
[  788.807363][T18549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  788.821437][T18549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.865779][   T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.955728][T18542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.962721][T18542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.989809][T18542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  789.056427][   T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.078131][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.092977][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  789.135463][T18553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.146318][T18542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  789.146340][T18542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.146357][T18542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  789.192257][ T5623] Bluetooth: hci2: command tx timeout
[  789.276640][T18553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  789.306689][T18549] team0: Port device team_slave_0 added
[  789.317615][T18549] team0: Port device team_slave_1 added
[  789.329446][T18546] team0: Port device team_slave_0 added
[  789.343458][ T5627] Bluetooth: hci5: command tx timeout
[  789.410087][T18542] hsr_slave_0: entered promiscuous mode
[  789.417609][T18542] hsr_slave_1: entered promiscuous mode
[  789.449363][T18546] team0: Port device team_slave_1 added
[  789.477592][T18553] team0: Port device team_slave_0 added
[  789.503343][ T5623] Bluetooth: hci6: command tx timeout
[  789.536122][T18546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  789.536141][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.536164][T18546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  789.602876][T18553] team0: Port device team_slave_1 added
[  789.663725][ T5623] Bluetooth: hci7: command tx timeout
[  789.706326][T18549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  789.706345][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.706368][T18549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  789.756838][T18549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  789.756860][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.756883][T18549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  789.764937][T18546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  789.764947][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.764961][T18546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.092124][T18553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  790.092146][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.092169][T18553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.143941][T18553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  790.150904][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.150921][T18553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.311926][T18546] hsr_slave_0: entered promiscuous mode
[  790.318340][T18546] hsr_slave_1: entered promiscuous mode
[  790.324655][T18546] debugfs: 'hsr0' already exists in 'hsr'
[  790.330540][T18546] Cannot create hsr debugfs directory
[  790.340711][T18549] hsr_slave_0: entered promiscuous mode
[  790.349400][T18549] hsr_slave_1: entered promiscuous mode
[  790.355734][T18549] debugfs: 'hsr0' already exists in 'hsr'
[  790.361609][T18549] Cannot create hsr debugfs directory
[  790.429612][T18553] hsr_slave_0: entered promiscuous mode
[  790.436507][T18553] hsr_slave_1: entered promiscuous mode
[  790.443888][T18553] debugfs: 'hsr0' already exists in 'hsr'
[  790.450843][T18553] Cannot create hsr debugfs directory
[  790.591155][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.644469][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16
[  790.707215][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.819139][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.845664][ T5279] 8021q: adding VLAN 0 to HW filter on device eth24
[  791.019034][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.146966][ T5279] 8021q: adding VLAN 0 to HW filter on device eth25
[  791.229179][ T5279] 8021q: adding VLAN 0 to HW filter on device eth26
[  791.264904][ T5623] Bluetooth: hci2: command tx timeout
[  791.332518][   T59] bridge_slave_1: left allmulticast mode
[  791.332565][   T59] bridge_slave_1: left promiscuous mode
[  791.332711][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.361234][   T59] bridge_slave_0: left allmulticast mode
[  791.369073][   T59] bridge_slave_0: left promiscuous mode
[  791.376524][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.411716][   T59] bridge_slave_1: left allmulticast mode
[  791.411747][   T59] bridge_slave_1: left promiscuous mode
[  791.411884][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.424624][ T5623] Bluetooth: hci5: command tx timeout
[  791.442947][   T59] bridge_slave_0: left allmulticast mode
[  791.448705][   T59] bridge_slave_0: left promiscuous mode
[  791.448836][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.476622][   T59] bridge_slave_1: left allmulticast mode
[  791.476650][   T59] bridge_slave_1: left promiscuous mode
[  791.476817][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.505877][   T59] bridge_slave_0: left allmulticast mode
[  791.505905][   T59] bridge_slave_0: left promiscuous mode
[  791.506061][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.583935][ T5623] Bluetooth: hci6: command tx timeout
[  791.744542][ T5623] Bluetooth: hci7: command tx timeout
[  791.917141][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  791.930145][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  791.940242][   T59] bond0 (unregistering): Released all slaves
[  792.151844][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  792.168339][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  792.179782][   T59] bond0 (unregistering): Released all slaves
[  792.398605][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  792.410751][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  792.420685][   T59] bond0 (unregistering): Released all slaves
[  792.969311][T18542] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  792.986777][T18542] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  792.997384][T18542] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  793.022023][T18542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  793.092867][T18542] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  793.116156][T18542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  793.129483][T18542] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  793.166163][T18542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  793.479553][   T59] hsr_slave_0: left promiscuous mode
[  793.488589][   T59] hsr_slave_1: left promiscuous mode
[  793.489202][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.489233][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.513068][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.522225][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.535801][   T59] hsr_slave_0: left promiscuous mode
[  793.541610][   T59] hsr_slave_1: left promiscuous mode
[  793.549072][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.557776][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.567477][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.567521][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.591103][   T59] hsr_slave_0: left promiscuous mode
[  793.597124][   T59] hsr_slave_1: left promiscuous mode
[  793.597692][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.597705][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.619652][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.619676][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.688022][   T59] veth1_macvtap: left promiscuous mode
[  793.693958][   T59] veth0_macvtap: left promiscuous mode
[  793.694051][   T59] veth1_vlan: left promiscuous mode
[  793.694101][   T59] veth0_vlan: left promiscuous mode
[  793.712787][   T59] veth1_macvtap: left promiscuous mode
[  793.712849][   T59] veth0_macvtap: left promiscuous mode
[  793.712917][   T59] veth1_vlan: left promiscuous mode
[  793.712958][   T59] veth0_vlan: left promiscuous mode
[  793.738801][   T59] veth1_macvtap: left promiscuous mode
[  793.738833][   T59] veth0_macvtap: left promiscuous mode
[  793.738928][   T59] veth1_vlan: left promiscuous mode
[  793.738971][   T59] veth0_vlan: left promiscuous mode
[  794.172833][   T59] team0 (unregistering): Port device team_slave_1 removed
[  794.192061][   T59] team0 (unregistering): Port device team_slave_0 removed
[  794.427155][   T59] team0 (unregistering): Port device team_slave_1 removed
[  794.443000][   T59] team0 (unregistering): Port device team_slave_0 removed
[  794.677427][   T59] team0 (unregistering): Port device team_slave_1 removed
[  794.701949][   T59] team0 (unregistering): Port device team_slave_0 removed
[  794.912073][T18542] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.018121][T18542] 8021q: adding VLAN 0 to HW filter on device team0
[  795.042077][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.042146][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.179735][T18458] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.179817][T18458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.350239][T18553] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  795.380121][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  795.390615][T18553] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  795.409349][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  795.425967][T18553] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  795.466606][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  795.467202][T18553] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  795.518797][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  796.148879][T18553] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.198824][T18553] 8021q: adding VLAN 0 to HW filter on device team0
[  796.233406][T18451] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.233478][T18451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  796.279330][T18451] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.279411][T18451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.661911][T18546] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  796.686356][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  796.698094][T18546] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  796.712959][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  796.721573][T18546] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  796.741844][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  796.775562][T18546] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  796.792962][T18546] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  796.978449][T18542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  797.259574][T18542] veth0_vlan: entered promiscuous mode
[  797.294807][T18542] veth1_vlan: entered promiscuous mode
[  797.412515][T18546] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.458272][T18542] veth0_macvtap: entered promiscuous mode
[  797.479735][T18542] veth1_macvtap: entered promiscuous mode
[  797.499841][T18546] 8021q: adding VLAN 0 to HW filter on device team0
[  797.537621][T18457] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.537705][T18457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.572274][T18457] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.572354][T18457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.712491][T18542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  797.836847][T18542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  798.043926][   T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.043975][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  798.044007][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  798.044031][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  798.091017][T18549] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  798.109013][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  798.122348][T18549] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  798.134422][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  798.163962][T18549] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  798.177439][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  798.187714][T18549] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  798.204962][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  798.238186][T18553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  798.368512][T18458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.368530][T18458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.514633][T18553] veth0_vlan: entered promiscuous mode
[  798.528697][T18458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.528721][T18458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.562551][T18553] veth1_vlan: entered promiscuous mode
[  798.715287][T18553] veth0_macvtap: entered promiscuous mode
[  798.759560][T18553] veth1_macvtap: entered promiscuous mode
[  798.814721][T18549] 8021q: adding VLAN 0 to HW filter on device bond0
[  798.845366][T18553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  798.874594][T18553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  798.905123][T18549] 8021q: adding VLAN 0 to HW filter on device team0
[  798.932761][T18458] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.932843][T18458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.952472][T18451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.975180][T18458] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.975260][T18458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.025696][ T7201] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  799.053546][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.054263][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.054297][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.186040][ T7201] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  799.211410][ T7201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  799.211441][ T7201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  799.211480][ T7201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.244959][ T7201] usb 4-1: config 0 descriptor??
[  799.260834][ T7201] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  799.260890][ T7201] dvb-usb: bulk message failed: -22 (3/0)
[  799.299126][ T7201] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  799.322019][ T7201] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  799.329232][ T7201] usb 4-1: media controller created
[  799.342951][ T7201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  799.356674][T18451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.356704][T18451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.398992][ T7201] dvb-usb: bulk message failed: -22 (6/0)
[  799.405175][ T7201] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  799.435101][ T7201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input93
[  799.461913][ T7201] dvb-usb: schedule remote query interval to 150 msecs.
[  799.461940][ T7201] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  799.522835][ T5694] usb 4-1: USB disconnect, device number 66
[  799.588632][ T5694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  799.641600][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.641641][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.955942][T18838] FAULT_INJECTION: forcing a failure.
[  799.955942][T18838] name failslab, interval 1, probability 0, space 0, times 0
[  799.970368][T18838] CPU: 0 UID: 0 PID: 18838 Comm: syz.0.2553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  799.970391][T18838] Tainted: [L]=SOFTLOCKUP
[  799.970395][T18838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  799.970403][T18838] Call Trace:
[  799.970408][T18838]  <TASK>
[  799.970414][T18838]  dump_stack_lvl+0xe8/0x150
[  799.970433][T18838]  should_fail_ex+0x410/0x560
[  799.970457][T18838]  should_failslab+0xa8/0x100
[  799.970470][T18838]  __kmalloc_cache_noprof+0xa3/0x600
[  799.970486][T18838]  ? configfs_write_iter+0xef/0x430
[  799.970501][T18838]  ? configfs_write_iter+0xef/0x430
[  799.970518][T18838]  configfs_write_iter+0xef/0x430
[  799.970536][T18838]  vfs_write+0x612/0xba0
[  799.970554][T18838]  ? __pfx_vfs_write+0x10/0x10
[  799.970573][T18838]  ? __fget_files+0x2a/0x420
[  799.970591][T18838]  ksys_write+0x150/0x270
[  799.970605][T18838]  ? __pfx_ksys_write+0x10/0x10
[  799.970631][T18838]  do_syscall_64+0x166/0x520
[  799.970642][T18838]  ? trace_irq_disable+0x3b/0x140
[  799.970657][T18838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.970669][T18838]  ? clear_bhb_loop+0x70/0xc0
[  799.970683][T18838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.970694][T18838] RIP: 0033:0x7f939db9e0d9
[  799.970706][T18838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.970716][T18838] RSP: 002b:00007f939eb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  799.970728][T18838] RAX: ffffffffffffffda RBX: 00007f939de25fa0 RCX: 00007f939db9e0d9
[  799.970736][T18838] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003
[  799.970743][T18838] RBP: 00007f939eb00090 R08: 0000000000000000 R09: 0000000000000000
[  799.970750][T18838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  799.970757][T18838] R13: 00007f939de26038 R14: 00007f939de25fa0 R15: 00007fff7586a858
[  799.970774][T18838]  </TASK>
[  800.067003][T18546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.138991][T18874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.148142][T18874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.163932][ T5694] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  801.177022][T18546] veth0_vlan: entered promiscuous mode
[  801.198912][T18874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.215869][T18874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.230491][T18549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.245944][T18546] veth1_vlan: entered promiscuous mode
[  801.332046][T18546] veth0_macvtap: entered promiscuous mode
[  801.355570][T18546] veth1_macvtap: entered promiscuous mode
[  801.407547][T18546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.431171][T18546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  801.513583][T18451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.528706][T18457] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.565371][T18451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.580171][ T3804] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.698578][T18868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.709461][T18868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.732922][ T5694] usb 4-1: unable to get BOS descriptor or descriptor too short
[  801.732969][ T5694] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 9.20
[  801.733000][ T5694] usb 4-1: too many configurations: 249, using maximum allowed: 8
[  801.763869][ T5694] usb 4-1: unable to read config index 0 descriptor/start: -71
[  801.771515][ T5694] usb 4-1: can't read configurations, error -71
[  801.808055][ T3804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.808083][ T3804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  801.932993][ T3804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.933033][ T3804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.361553][T18549] veth0_vlan: entered promiscuous mode
[  802.390362][T18549] veth1_vlan: entered promiscuous mode
[  802.444273][T16809] usb 10-1: new full-speed USB device number 74 using dummy_hcd
[  802.509946][T18549] veth0_macvtap: entered promiscuous mode
[  802.530858][T18549] veth1_macvtap: entered promiscuous mode
[  802.589377][T18549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.618566][T16809] usb 10-1: not running at top speed; connect to a high speed hub
[  802.618606][T16809] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  802.628839][T16809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  802.628878][T16809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.679736][T18549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.701676][T16809] uvcvideo 10-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  802.753976][T18457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.754480][T18457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.777046][T18457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.777107][T18457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  803.038024][T16809] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  803.053725][T16809] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  803.063197][T16809] uvcvideo 10-1:1.1: Failed to initialize the device (-71).
[  803.097296][T16809] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71
[  803.137492][T16809] usb 10-1: USB disconnect, device number 74
[  803.224356][ T3804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.224382][ T3804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.312858][T18910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  803.322291][T18910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  803.398422][T18451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.398447][T18451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.437210][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'.
[  803.492497][T18910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2562'.
[  803.614630][ T5695] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[  803.775506][ T5695] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  803.788885][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.788934][ T5695] usb 10-1: Product: syz
[  803.788952][ T5695] usb 10-1: Manufacturer: syz
[  803.788963][ T5695] usb 10-1: SerialNumber: syz
[  803.821773][ T5695] usb 10-1: config 0 descriptor??
[  803.877904][T16809] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  804.045698][T16809] usb 5-1: not running at top speed; connect to a high speed hub
[  804.045752][T16809] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  804.071699][T16809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  804.071756][T16809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.119204][T16809] uvcvideo 5-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  804.184939][ T7201] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  804.239867][ T5695] usb 10-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  804.239897][ T5695] usb 10-1: Firmware version (0.0) predates our first public release.
[  804.239937][ T5695] usb 10-1: Please update to version 0.2 or newer
[  804.321619][T18921] FAULT_INJECTION: forcing a failure.
[  804.321619][T18921] name failslab, interval 1, probability 0, space 0, times 0
[  804.321687][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.4.2552 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  804.321704][T18921] Tainted: [L]=SOFTLOCKUP
[  804.321709][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  804.321716][T18921] Call Trace:
[  804.321721][T18921]  <TASK>
[  804.321726][T18921]  dump_stack_lvl+0xe8/0x150
[  804.321745][T18921]  should_fail_ex+0x410/0x560
[  804.321763][T18921]  should_failslab+0xa8/0x100
[  804.321777][T18921]  __kmalloc_noprof+0xfe/0x720
[  804.321793][T18921]  ? rcu_is_watching+0x16/0xb0
[  804.321805][T18921]  ? tomoyo_realpath_from_path+0xef/0x640
[  804.321821][T18921]  ? tomoyo_realpath_from_path+0xef/0x640
[  804.321841][T18921]  tomoyo_realpath_from_path+0xef/0x640
[  804.321861][T18921]  ? tomoyo_path_number_perm+0x219/0x5f0
[  804.321876][T18921]  tomoyo_path_number_perm+0x246/0x5f0
[  804.321891][T18921]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  804.321905][T18921]  ? __lock_acquire+0x6df/0x2e50
[  804.321927][T18921]  ? hook_file_ioctl+0x1f2/0x600
[  804.321952][T18921]  ? __fget_files+0x2a/0x420
[  804.321966][T18921]  ? __fget_files+0x2a/0x420
[  804.321978][T18921]  ? __fget_files+0x3a2/0x420
[  804.321989][T18921]  ? __fget_files+0x2a/0x420
[  804.322003][T18921]  security_file_ioctl+0xc3/0x2a0
[  804.322017][T18921]  __se_sys_ioctl+0x47/0x170
[  804.322034][T18921]  do_syscall_64+0x166/0x520
[  804.322045][T18921]  ? trace_irq_disable+0x3b/0x140
[  804.322060][T18921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.322072][T18921]  ? clear_bhb_loop+0x70/0xc0
[  804.322087][T18921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.322100][T18921] RIP: 0033:0x7fd06a99dd6b
[  804.322118][T18921] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  804.322128][T18921] RSP: 002b:00007fd06b8d3f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  804.322140][T18921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd06a99dd6b
[  804.322149][T18921] RDX: 00007fd06b8d4fe0 RSI: 0000000080085502 RDI: 0000000000000003
[  804.322156][T18921] RBP: 00007fd06b8d6090 R08: 0000000000000000 R09: 0000000000000000
[  804.322163][T18921] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  804.322170][T18921] R13: 0000000000000000 R14: 00007fd06ac25fa0 R15: 00007fff512dc008
[  804.322186][T18921]  </TASK>
[  804.322222][T18921] ERROR: Out of memory at tomoyo_realpath_from_path.
[  804.380763][T16809] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  804.394807][T16809] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  804.394864][T16809] uvcvideo 5-1:1.1: Failed to initialize the device (-71).
[  804.405916][T16809] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71
[  804.625692][ T7201] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  804.668161][ T7201] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  804.668181][ T7201] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  804.668194][ T7201] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  804.718952][ T7201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  804.719001][ T7201] usb 4-1: Product: syz
[  804.719020][ T7201] usb 4-1: Manufacturer: syz
[  804.719030][ T7201] usb 4-1: SerialNumber: syz
[  804.742662][T16809] usb 5-1: USB disconnect, device number 28
[  804.766993][ T5695] usb 10-1: Firmware: build 
[  804.840504][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.840820][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.996598][ T7201] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  805.208166][T18929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  805.208462][T18929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  805.678684][T18965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  805.823456][ T7201] usb 4-1: USB disconnect, device number 69
[  805.840511][ T7201] usblp0: removed
[  806.295041][ T7201] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  806.454402][ T7201] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  806.466793][ T7201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  806.466820][ T7201] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  806.498009][ T7201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.498053][ T7201] usb 4-1: Product: syz
[  806.498072][ T7201] usb 4-1: Manufacturer: syz
[  806.498082][ T7201] usb 4-1: SerialNumber: syz
[  806.642862][T16809] usb 10-1: USB disconnect, device number 75
[  806.789558][ T7201] usb 4-1: USB disconnect, device number 70
[  806.865974][T18992] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2574'.
[  807.254169][T19006] FAULT_INJECTION: forcing a failure.
[  807.254169][T19006] name failslab, interval 1, probability 0, space 0, times 0
[  807.254206][T19006] CPU: 0 UID: 0 PID: 19006 Comm: syz.0.2577 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  807.254225][T19006] Tainted: [L]=SOFTLOCKUP
[  807.254230][T19006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  807.254237][T19006] Call Trace:
[  807.254242][T19006]  <TASK>
[  807.254248][T19006]  dump_stack_lvl+0xe8/0x150
[  807.254266][T19006]  should_fail_ex+0x410/0x560
[  807.254284][T19006]  ? __alloc_skb+0x1db/0x7a0
[  807.254297][T19006]  should_failslab+0xa8/0x100
[  807.254309][T19006]  ? __alloc_skb+0x1db/0x7a0
[  807.254320][T19006]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  807.254334][T19006]  ? __alloc_skb+0x18d/0x7a0
[  807.254346][T19006]  ? __alloc_skb+0x1db/0x7a0
[  807.254360][T19006]  __alloc_skb+0x1db/0x7a0
[  807.254374][T19006]  netlink_sendmsg+0x5d4/0xb40
[  807.254394][T19006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.254412][T19006]  ? apparmor_socket_sendmsg+0x98/0x360
[  807.254428][T19006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.254442][T19006]  sock_sendmsg_nosec+0x13a/0x180
[  807.254460][T19006]  ____sys_sendmsg+0x54e/0x850
[  807.254476][T19006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  807.254494][T19006]  ? import_iovec+0x73/0xa0
[  807.254506][T19006]  ___sys_sendmsg+0x2a5/0x360
[  807.254519][T19006]  ? __lock_acquire+0x6df/0x2e50
[  807.254536][T19006]  ? __pfx____sys_sendmsg+0x10/0x10
[  807.254566][T19006]  ? __fget_files+0x2a/0x420
[  807.254578][T19006]  ? __fget_files+0x3a2/0x420
[  807.254595][T19006]  __x64_sys_sendmsg+0x1b1/0x290
[  807.254609][T19006]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  807.254633][T19006]  do_syscall_64+0x166/0x520
[  807.254644][T19006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.254655][T19006]  ? clear_bhb_loop+0x70/0xc0
[  807.254669][T19006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.254680][T19006] RIP: 0033:0x7f939db9e0d9
[  807.254691][T19006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.254701][T19006] RSP: 002b:00007f939eadf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  807.254714][T19006] RAX: ffffffffffffffda RBX: 00007f939de26090 RCX: 00007f939db9e0d9
[  807.254723][T19006] RDX: 0000000000008080 RSI: 0000200000000600 RDI: 0000000000000003
[  807.254730][T19006] RBP: 00007f939eadf090 R08: 0000000000000000 R09: 0000000000000000
[  807.254737][T19006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  807.254744][T19006] R13: 00007f939de26128 R14: 00007f939de26090 R15: 00007fff7586a858
[  807.254759][T19006]  </TASK>
[  808.105886][T16809] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  808.254941][T16809] usb 5-1: device descriptor read/64, error -71
[  808.411310][   T30] audit: type=1326 audit(1787248374.662:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.9.2584" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cddd9e0d9 code=0x0
[  808.445062][    T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  808.493799][T16809] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  808.506290][T19039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2583'.
[  808.518660][T19039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2583'.
[  808.547120][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  808.547168][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  808.604163][    T9] usb 4-1: Using ep0 maxpacket: 8
[  808.612453][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  808.623246][T16809] usb 5-1: device descriptor read/64, error -71
[  808.632527][    T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  808.632591][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  808.632609][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  808.632638][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  808.632655][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  808.632670][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  808.632696][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.733726][T16809] usb usb5-port1: attempt power cycle
[  808.777338][T19037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  808.925999][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  808.926040][    T9] usbtmc 4-1:16.0: can't read capabilities
[  809.076214][T16809] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  809.107921][T16809] usb 5-1: device descriptor read/8, error -71
[  809.152476][    C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  809.178251][T19025] usbtmc 4-1:16.0: Unable to send data, error -71
[  809.202511][    T9] usb 4-1: USB disconnect, device number 71
[  809.354235][T16809] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  809.387494][T16809] usb 5-1: device descriptor read/8, error -71
[  809.493641][T16809] usb usb5-port1: unable to enumerate USB device
[  809.558212][T19057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.572687][T19057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.753684][T16809] usb 10-1: new high-speed USB device number 76 using dummy_hcd
[  809.875003][T19062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  809.904560][T16809] usb 10-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  809.920160][T16809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.937452][T16809] usb 10-1: config 0 descriptor??
[  810.184252][T19074] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  810.184328][T19074] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  810.200900][T19074] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  810.214300][ T5716] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  810.229415][T19074] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  810.229512][T19074] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  810.262254][T19074] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  810.282320][T19074] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  810.289287][T19074] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  810.308522][T19074] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  810.323069][T19074] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  810.332494][T19074] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  810.346738][T19074] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  810.359443][T19079] FAULT_INJECTION: forcing a failure.
[  810.359443][T19079] name failslab, interval 1, probability 0, space 0, times 0
[  810.374230][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.0.2589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.374250][T19079] Tainted: [L]=SOFTLOCKUP
[  810.374254][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  810.374262][T19079] Call Trace:
[  810.374267][T19079]  <TASK>
[  810.374272][T19079]  dump_stack_lvl+0xe8/0x150
[  810.374294][T19079]  should_fail_ex+0x410/0x560
[  810.374313][T19079]  should_failslab+0xa8/0x100
[  810.374325][T19079]  __kmalloc_noprof+0xfe/0x720
[  810.374341][T19079]  ? tomoyo_encode+0x2ad/0x570
[  810.374357][T19079]  ? tomoyo_encode+0x2ad/0x570
[  810.374375][T19079]  tomoyo_encode+0x2ad/0x570
[  810.374394][T19079]  tomoyo_realpath_from_path+0x5fa/0x640
[  810.374415][T19079]  ? tomoyo_path_number_perm+0x219/0x5f0
[  810.374429][T19079]  tomoyo_path_number_perm+0x246/0x5f0
[  810.374444][T19079]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  810.374458][T19079]  ? __lock_acquire+0x6df/0x2e50
[  810.374481][T19079]  ? hook_file_ioctl+0x1f2/0x600
[  810.374506][T19079]  ? __fget_files+0x2a/0x420
[  810.374520][T19079]  ? __fget_files+0x2a/0x420
[  810.374531][T19079]  ? __fget_files+0x3a2/0x420
[  810.374549][T19079]  ? __fget_files+0x2a/0x420
[  810.374563][T19079]  security_file_ioctl+0xc3/0x2a0
[  810.374578][T19079]  __se_sys_ioctl+0x47/0x170
[  810.374595][T19079]  do_syscall_64+0x166/0x520
[  810.374606][T19079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.374618][T19079]  ? clear_bhb_loop+0x70/0xc0
[  810.374632][T19079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.374642][T19079] RIP: 0033:0x7f939db9e0d9
[  810.374654][T19079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.374664][T19079] RSP: 002b:00007f939eadf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  810.374677][T19079] RAX: ffffffffffffffda RBX: 00007f939de26090 RCX: 00007f939db9e0d9
[  810.374685][T19079] RDX: 0000200000000240 RSI: 000000000000127f RDI: 0000000000000003
[  810.374693][T19079] RBP: 00007f939eadf090 R08: 0000000000000000 R09: 0000000000000000
[  810.374700][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  810.374707][T19079] R13: 00007f939de26128 R14: 00007f939de26090 R15: 00007fff7586a858
[  810.374723][T19079]  </TASK>
[  810.517656][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short
[  810.518086][ T5716] usb 4-1: not running at top speed; connect to a high speed hub
[  810.518104][ T5716] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  810.626238][ T5716] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  810.626255][ T5716] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  810.686913][T19079] ERROR: Out of memory at tomoyo_realpath_from_path.
[  810.704243][ T5716] usb 4-1: string descriptor 0 read error: -22
[  810.704360][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.767796][T16809] usbhid 10-1:0.0: can't add hid device: -71
[  810.775576][T16809] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  810.813023][T16809] usb 10-1: USB disconnect, device number 76
[  810.968983][T19083] 9pnet_virtio: no channels available for device syz
[  811.148183][ T5716] snd-usb-6fire 4-1:2.0: unable to receive device firmware state.
[  811.166354][ T5716] snd-usb-6fire 4-1:2.0: probe with driver snd-usb-6fire failed with error -121
[  811.573507][ T5716] usb 10-1: new high-speed USB device number 77 using dummy_hcd
[  811.713912][ T5716] usb 10-1: device descriptor read/64, error -71
[  811.955625][ T5716] usb 10-1: new high-speed USB device number 78 using dummy_hcd
[  812.093356][ T5716] usb 10-1: device descriptor read/64, error -71
[  812.122615][T19114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.122911][T19114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  812.178766][T19115] CIFS: Attempting to mount //::1/share
[  812.204987][ T5716] usb usb10-port1: attempt power cycle
[  812.224366][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  812.230468][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout
[  812.249189][ T5623] block nbd4: Receive control failed (result -32)
[  812.270060][T19111] block nbd4: shutting down sockets
[  812.303398][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout
[  812.387279][ T5623] Bluetooth: hci7: command 0x0c1a tx timeout
[  812.395349][T19115] CIFS: VFS: Error connecting to socket. Aborting operation.
[  812.395610][T19115] CIFS: VFS: cifs_mount failed w/return code = -104
[  812.553515][ T5716] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[  812.576498][ T5716] usb 10-1: device descriptor read/8, error -71
[  812.813220][ T5716] usb 10-1: new high-speed USB device number 80 using dummy_hcd
[  812.847579][ T5716] usb 10-1: device descriptor read/8, error -71
[  812.955119][ T5716] usb usb10-port1: unable to enumerate USB device
[  813.147780][T19125] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2598'.
[  813.196117][T19130] syz_tun: entered allmulticast mode
[  813.260717][T19130] dvmrp8: entered allmulticast mode
[  813.269727][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.270026][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.294419][T19124] syz_tun: left allmulticast mode
[  814.262061][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.262375][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.304467][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout
[  814.311738][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout
[  814.383732][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout
[  814.407571][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.407855][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.463632][ T5623] Bluetooth: hci7: command 0x0c1a tx timeout
[  814.489244][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'.
[  814.564161][    T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  814.727182][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  814.739941][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  814.739975][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  814.758064][    T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  814.758088][    T9] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2
[  814.790372][    T9] usb 5-1: string descriptor 0 read error: -22
[  814.790479][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.850980][T19160] could not allocate digest TFM handle crct10dif-arm64-neon
[  815.227132][    T9] snd-usb-6fire 5-1:2.0: unable to receive device firmware state.
[  815.227164][    T9] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121
[  815.875434][T19193] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  815.917520][T19178] FAULT_INJECTION: forcing a failure.
[  815.917520][T19178] name failslab, interval 1, probability 0, space 0, times 0
[  815.917556][T19178] CPU: 0 UID: 0 PID: 19178 Comm: syz.0.2610 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  815.917573][T19178] Tainted: [L]=SOFTLOCKUP
[  815.917577][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  815.917585][T19178] Call Trace:
[  815.917590][T19178]  <TASK>
[  815.917595][T19178]  dump_stack_lvl+0xe8/0x150
[  815.917614][T19178]  should_fail_ex+0x410/0x560
[  815.917635][T19178]  should_failslab+0xa8/0x100
[  815.917648][T19178]  __kmalloc_noprof+0xfe/0x720
[  815.917664][T19178]  ? tomoyo_encode+0x2ad/0x570
[  815.917680][T19178]  ? tomoyo_encode+0x2ad/0x570
[  815.917699][T19178]  tomoyo_encode+0x2ad/0x570
[  815.917717][T19178]  tomoyo_realpath_from_path+0x5fa/0x640
[  815.917738][T19178]  ? tomoyo_path_number_perm+0x219/0x5f0
[  815.917753][T19178]  tomoyo_path_number_perm+0x246/0x5f0
[  815.917768][T19178]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  815.917781][T19178]  ? __lock_acquire+0x6df/0x2e50
[  815.917804][T19178]  ? hook_file_ioctl+0x1f2/0x600
[  815.917829][T19178]  ? __fget_files+0x2a/0x420
[  815.917843][T19178]  ? __fget_files+0x2a/0x420
[  815.917854][T19178]  ? __fget_files+0x3a2/0x420
[  815.917866][T19178]  ? __fget_files+0x2a/0x420
[  815.917880][T19178]  security_file_ioctl+0xc3/0x2a0
[  815.917894][T19178]  __se_sys_ioctl+0x47/0x170
[  815.917911][T19178]  do_syscall_64+0x166/0x520
[  815.917922][T19178]  ? trace_irq_disable+0x3b/0x140
[  815.917937][T19178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.917948][T19178]  ? clear_bhb_loop+0x70/0xc0
[  815.917962][T19178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.917972][T19178] RIP: 0033:0x7f939db9e0d9
[  815.917984][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  815.917999][T19178] RSP: 002b:00007f939eb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  815.918012][T19178] RAX: ffffffffffffffda RBX: 00007f939de25fa0 RCX: 00007f939db9e0d9
[  815.918021][T19178] RDX: 0000200000000400 RSI: 0000000000003b85 RDI: 0000000000000003
[  815.918028][T19178] RBP: 00007f939eb00090 R08: 0000000000000000 R09: 0000000000000000
[  815.918035][T19178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  815.918042][T19178] R13: 00007f939de26038 R14: 00007f939de25fa0 R15: 00007fff7586a858
[  815.918059][T19178]  </TASK>
[  815.918101][T19178] ERROR: Out of memory at tomoyo_realpath_from_path.
[  816.383211][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout
[  816.389296][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout
[  816.444986][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.445426][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.463667][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout
[  816.543420][ T5623] Bluetooth: hci7: command 0x0c1a tx timeout
[  818.235754][ T5716] usb 4-1: USB disconnect, device number 72
[  818.553777][T19240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  818.554088][T19240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  818.597425][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  818.597725][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.081630][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.081959][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.146518][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.146803][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.311207][T19255] FAULT_INJECTION: forcing a failure.
[  819.311207][T19255] name failslab, interval 1, probability 0, space 0, times 0
[  819.325186][    T9] usb 10-1: new high-speed USB device number 81 using dummy_hcd
[  819.342409][T19255] CPU: 0 UID: 0 PID: 19255 Comm: syz.0.2622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  819.342429][T19255] Tainted: [L]=SOFTLOCKUP
[  819.342434][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  819.342441][T19255] Call Trace:
[  819.342446][T19255]  <TASK>
[  819.342452][T19255]  dump_stack_lvl+0xe8/0x150
[  819.342471][T19255]  should_fail_ex+0x410/0x560
[  819.342489][T19255]  ? __alloc_skb+0x1db/0x7a0
[  819.342501][T19255]  should_failslab+0xa8/0x100
[  819.342513][T19255]  ? __alloc_skb+0x1db/0x7a0
[  819.342526][T19255]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  819.342541][T19255]  ? __alloc_skb+0x18d/0x7a0
[  819.342552][T19255]  ? __alloc_skb+0x1db/0x7a0
[  819.342566][T19255]  __alloc_skb+0x1db/0x7a0
[  819.342580][T19255]  netlink_sendmsg+0x5d4/0xb40
[  819.342600][T19255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.342618][T19255]  ? apparmor_socket_sendmsg+0x98/0x360
[  819.342634][T19255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.342648][T19255]  sock_sendmsg_nosec+0x13a/0x180
[  819.342666][T19255]  ____sys_sendmsg+0x54e/0x850
[  819.342682][T19255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  819.342700][T19255]  ? import_iovec+0x73/0xa0
[  819.342712][T19255]  ___sys_sendmsg+0x2a5/0x360
[  819.342725][T19255]  ? __lock_acquire+0x6df/0x2e50
[  819.342743][T19255]  ? __pfx____sys_sendmsg+0x10/0x10
[  819.342773][T19255]  ? __fget_files+0x2a/0x420
[  819.342785][T19255]  ? __fget_files+0x3a2/0x420
[  819.342802][T19255]  __x64_sys_sendmsg+0x1b1/0x290
[  819.342817][T19255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  819.342845][T19255]  do_syscall_64+0x166/0x520
[  819.342857][T19255]  ? trace_irq_disable+0x3b/0x140
[  819.342871][T19255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.342883][T19255]  ? clear_bhb_loop+0x70/0xc0
[  819.342896][T19255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.342907][T19255] RIP: 0033:0x7f939db9e0d9
[  819.342919][T19255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.342928][T19255] RSP: 002b:00007f939eb00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  819.342942][T19255] RAX: ffffffffffffffda RBX: 00007f939de25fa0 RCX: 00007f939db9e0d9
[  819.342950][T19255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  819.342957][T19255] RBP: 00007f939eb00090 R08: 0000000000000000 R09: 0000000000000000
[  819.342964][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  819.342970][T19255] R13: 00007f939de26038 R14: 00007f939de25fa0 R15: 00007fff7586a858
[  819.342986][T19255]  </TASK>
[  819.640300][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  819.640362][    T9] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  819.658623][    T9] usb 10-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config
[  819.658648][    T9] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  819.658681][    T9] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  819.658722][    T9] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  819.658745][    T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 152, changing to 7
[  819.658761][    T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8544, setting to 1024
[  819.658776][    T9] usb 10-1: config 1 interface 1 has no altsetting 0
[  819.748600][    T9] usb 10-1: string descriptor 0 read error: -22
[  819.748705][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.799705][    T9] usb 10-1: incorrect wMaxPacketSize 0x1c00 for BADD profile
[  820.071466][    T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  820.483260][    T9] usb 1-1: USB disconnect, device number 29
[  820.991974][    T9] sd 1:0:0:0: [sdb] Synchronizing SCSI cache
[  821.012128][    T9] sd 1:0:0:0: [sdb] Synchronize Cache(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  821.216028][ T5695] usb 5-1: USB disconnect, device number 33
[  821.263839][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.264107][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.644808][T19297] loop5: detected capacity change from 0 to 7
[  821.645125][T19297] buffer_io_error: 39 callbacks suppressed
[  821.645147][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.645171][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.645193][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.691053][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.691978][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.692023][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.692044][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.692055][T19297] ldm_validate_partition_table(): Disk read failed.
[  821.742258][T19294] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.777227][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.777268][T19297] Buffer I/O error on dev loop5, logical block 0, async page read
[  821.777298][T19297] Dev loop5: unable to read RDB block 0
[  821.777338][T19297]  loop5: unable to read partition table
[  821.777463][T19297] loop5: partition table beyond EOD, truncated
[  821.777487][T19297] loop_reread_partitions: partition scan of loop5 (���������S�j̳��P=��?�}X���	���5�
`���㫅�) failed (rc=-5)
[  821.852837][T19299] FAULT_INJECTION: forcing a failure.
[  821.852837][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  821.852872][T19299] CPU: 0 UID: 0 PID: 19299 Comm: syz.0.2630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.852888][T19299] Tainted: [L]=SOFTLOCKUP
[  821.852893][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  821.852900][T19299] Call Trace:
[  821.852905][T19299]  <TASK>
[  821.852911][T19299]  dump_stack_lvl+0xe8/0x150
[  821.852929][T19299]  should_fail_ex+0x410/0x560
[  821.852947][T19299]  _copy_from_user+0x2d/0xb0
[  821.852959][T19299]  snd_seq_oss_write+0x6e2/0x950
[  821.852983][T19299]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  821.853003][T19299]  ? security_file_permission+0x75/0x260
[  821.853019][T19299]  odev_write+0x5a/0x80
[  821.853032][T19299]  ? __pfx_odev_write+0x10/0x10
[  821.853044][T19299]  vfs_write+0x296/0xba0
[  821.853062][T19299]  ? __pfx_vfs_write+0x10/0x10
[  821.853079][T19299]  ? __fget_files+0x2a/0x420
[  821.853093][T19299]  ? __fget_files+0x2a/0x420
[  821.853104][T19299]  ? __fget_files+0x3a2/0x420
[  821.853115][T19299]  ? __fget_files+0x2a/0x420
[  821.853131][T19299]  ksys_write+0x150/0x270
[  821.853146][T19299]  ? __pfx_ksys_write+0x10/0x10
[  821.853164][T19299]  do_syscall_64+0x166/0x520
[  821.853175][T19299]  ? trace_irq_disable+0x3b/0x140
[  821.853190][T19299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.853201][T19299]  ? clear_bhb_loop+0x70/0xc0
[  821.853215][T19299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.853226][T19299] RIP: 0033:0x7f939db9e0d9
[  821.853237][T19299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.853246][T19299] RSP: 002b:00007f939eb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  821.853258][T19299] RAX: ffffffffffffffda RBX: 00007f939de25fa0 RCX: 00007f939db9e0d9
[  821.853266][T19299] RDX: 0000000000000237 RSI: 0000200000000080 RDI: 0000000000000003
[  821.853274][T19299] RBP: 00007f939eb00090 R08: 0000000000000000 R09: 0000000000000000
[  821.853280][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.853287][T19299] R13: 00007f939de26038 R14: 00007f939de25fa0 R15: 00007fff7586a858
[  821.853303][T19299]  </TASK>
[  822.450249][    T9] usb 10-1: USB disconnect, device number 81
[  822.523956][ T5695] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  822.684201][T16809] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  822.692457][ T5695] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  822.704314][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.720011][ T5695] usb 1-1: config 0 descriptor??
[  822.726910][T19318] fuse: fd is not a fuse device
[  822.739949][ T5695] cp210x 1-1:0.0: cp210x converter detected
[  822.838191][T16809] usb 4-1: Using ep0 maxpacket: 8
[  822.844457][T16809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  822.855343][T16809] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  822.855402][T16809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  822.855426][T16809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  822.855441][T16809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  822.855457][T16809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  822.855472][T16809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  822.855509][T16809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.889394][ T5279] 8021q: adding VLAN 0 to HW filter on device eth21
[  823.160665][T16809] usb 4-1: GET_CAPABILITIES returned 0
[  823.169800][T16809] usbtmc 4-1:16.0: can't read capabilities
[  823.242206][T19326] FAT-fs (mtdblock0): bogus logical sector size 65508
[  823.258784][T19326] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  823.284341][ T5695] usb 1-1: cp210x converter now attached to ttyUSB0
[  823.382228][T19313] FAULT_INJECTION: forcing a failure.
[  823.382228][T19313] name failslab, interval 1, probability 0, space 0, times 0
[  823.382261][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.3.2634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.382277][T19313] Tainted: [L]=SOFTLOCKUP
[  823.382281][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  823.382288][T19313] Call Trace:
[  823.382293][T19313]  <TASK>
[  823.382299][T19313]  dump_stack_lvl+0xe8/0x150
[  823.382326][T19313]  should_fail_ex+0x410/0x560
[  823.382345][T19313]  should_failslab+0xa8/0x100
[  823.382358][T19313]  __kmalloc_noprof+0xfe/0x720
[  823.382373][T19313]  ? tomoyo_encode+0x2ad/0x570
[  823.382389][T19313]  ? tomoyo_encode+0x2ad/0x570
[  823.382408][T19313]  tomoyo_encode+0x2ad/0x570
[  823.382426][T19313]  tomoyo_realpath_from_path+0x5fa/0x640
[  823.382447][T19313]  ? tomoyo_path_number_perm+0x219/0x5f0
[  823.382461][T19313]  tomoyo_path_number_perm+0x246/0x5f0
[  823.382476][T19313]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  823.382490][T19313]  ? __lock_acquire+0x6df/0x2e50
[  823.382513][T19313]  ? hook_file_ioctl+0x1f2/0x600
[  823.382538][T19313]  ? __fget_files+0x2a/0x420
[  823.382552][T19313]  ? __fget_files+0x2a/0x420
[  823.382563][T19313]  ? __fget_files+0x3a2/0x420
[  823.382574][T19313]  ? __fget_files+0x2a/0x420
[  823.382588][T19313]  security_file_ioctl+0xc3/0x2a0
[  823.382603][T19313]  __se_sys_ioctl+0x47/0x170
[  823.382620][T19313]  do_syscall_64+0x166/0x520
[  823.382630][T19313]  ? trace_irq_disable+0x3b/0x140
[  823.382645][T19313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.382656][T19313]  ? clear_bhb_loop+0x70/0xc0
[  823.382670][T19313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.382680][T19313] RIP: 0033:0x7f236fb9e0d9
[  823.382691][T19313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.382701][T19313] RSP: 002b:00007f2370a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  823.382713][T19313] RAX: ffffffffffffffda RBX: 00007f236fe25fa0 RCX: 00007f236fb9e0d9
[  823.382721][T19313] RDX: 0000200000000000 RSI: 0000000040045b0a RDI: 0000000000000004
[  823.382729][T19313] RBP: 00007f2370a3a090 R08: 0000000000000000 R09: 0000000000000000
[  823.382736][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.382742][T19313] R13: 00007f236fe26038 R14: 00007f236fe25fa0 R15: 00007ffffb9d80a8
[  823.382759][T19313]  </TASK>
[  823.382780][T19313] ERROR: Out of memory at tomoyo_realpath_from_path.
[  823.439624][    T9] usb 4-1: USB disconnect, device number 73
[  824.177329][T19344] FAULT_INJECTION: forcing a failure.
[  824.177329][T19344] name failslab, interval 1, probability 0, space 0, times 0
[  824.177365][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.3.2640 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  824.177381][T19344] Tainted: [L]=SOFTLOCKUP
[  824.177386][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  824.177393][T19344] Call Trace:
[  824.177398][T19344]  <TASK>
[  824.177403][T19344]  dump_stack_lvl+0xe8/0x150
[  824.177422][T19344]  should_fail_ex+0x410/0x560
[  824.177440][T19344]  ? __alloc_skb+0x1db/0x7a0
[  824.177453][T19344]  should_failslab+0xa8/0x100
[  824.177465][T19344]  ? __alloc_skb+0x1db/0x7a0
[  824.177476][T19344]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  824.177491][T19344]  ? __alloc_skb+0x18d/0x7a0
[  824.177502][T19344]  ? __alloc_skb+0x1db/0x7a0
[  824.177517][T19344]  __alloc_skb+0x1db/0x7a0
[  824.177530][T19344]  netlink_sendmsg+0x5d4/0xb40
[  824.177550][T19344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.177569][T19344]  ? apparmor_socket_sendmsg+0x98/0x360
[  824.177584][T19344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.177598][T19344]  sock_sendmsg_nosec+0x13a/0x180
[  824.177616][T19344]  ____sys_sendmsg+0x54e/0x850
[  824.177632][T19344]  ? __pfx_____sys_sendmsg+0x10/0x10
[  824.177650][T19344]  ? import_iovec+0x73/0xa0
[  824.177663][T19344]  ___sys_sendmsg+0x2a5/0x360
[  824.177675][T19344]  ? __lock_acquire+0x6df/0x2e50
[  824.177693][T19344]  ? __pfx____sys_sendmsg+0x10/0x10
[  824.177723][T19344]  ? __fget_files+0x2a/0x420
[  824.177735][T19344]  ? __fget_files+0x3a2/0x420
[  824.177751][T19344]  __x64_sys_sendmsg+0x1b1/0x290
[  824.177766][T19344]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  824.177788][T19344]  do_syscall_64+0x166/0x520
[  824.177799][T19344]  ? trace_irq_disable+0x3b/0x140
[  824.177814][T19344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.177825][T19344]  ? clear_bhb_loop+0x70/0xc0
[  824.177838][T19344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.177848][T19344] RIP: 0033:0x7f236fb9e0d9
[  824.177859][T19344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.177869][T19344] RSP: 002b:00007f2370a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.177882][T19344] RAX: ffffffffffffffda RBX: 00007f236fe25fa0 RCX: 00007f236fb9e0d9
[  824.177890][T19344] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  824.177896][T19344] RBP: 00007f2370a3a090 R08: 0000000000000000 R09: 0000000000000000
[  824.177904][T19344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  824.177910][T19344] R13: 00007f236fe26038 R14: 00007f236fe25fa0 R15: 00007ffffb9d80a8
[  824.177926][T19344]  </TASK>
[  824.635806][T19348] FAULT_INJECTION: forcing a failure.
[  824.635806][T19348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  824.635840][T19348] CPU: 0 UID: 0 PID: 19348 Comm: syz.3.2641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  824.635856][T19348] Tainted: [L]=SOFTLOCKUP
[  824.635860][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  824.635867][T19348] Call Trace:
[  824.635872][T19348]  <TASK>
[  824.635877][T19348]  dump_stack_lvl+0xe8/0x150
[  824.635895][T19348]  should_fail_ex+0x410/0x560
[  824.635913][T19348]  strncpy_from_user+0x36/0x2c0
[  824.635930][T19348]  do_getname+0x77/0x250
[  824.635943][T19348]  __se_sys_mkdir+0x21/0x150
[  824.635960][T19348]  do_syscall_64+0x166/0x520
[  824.635970][T19348]  ? trace_irq_disable+0x3b/0x140
[  824.635985][T19348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.635996][T19348]  ? clear_bhb_loop+0x70/0xc0
[  824.636010][T19348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.636021][T19348] RIP: 0033:0x7f236fb9e0d9
[  824.636032][T19348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.636042][T19348] RSP: 002b:00007f2370a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  824.636054][T19348] RAX: ffffffffffffffda RBX: 00007f236fe25fa0 RCX: 00007f236fb9e0d9
[  824.636062][T19348] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000400
[  824.636069][T19348] RBP: 00007f2370a3a090 R08: 0000000000000000 R09: 0000000000000000
[  824.636076][T19348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  824.636083][T19348] R13: 00007f236fe26038 R14: 00007f236fe25fa0 R15: 00007ffffb9d80a8
[  824.636099][T19348]  </TASK>
[  824.972670][ T5695] usb 1-1: USB disconnect, device number 30
[  824.980735][ T5695] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  824.996734][ T5695] cp210x 1-1:0.0: device disconnected
[  825.172400][ T5279] 8021q: adding VLAN 0 to HW filter on device eth22
[  825.323331][    T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  825.415157][ T5695] usb 10-1: new high-speed USB device number 82 using dummy_hcd
[  825.473422][    T9] usb 4-1: Using ep0 maxpacket: 8
[  825.480918][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  825.491092][    T9] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.491118][    T9] usb 4-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  825.491141][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  825.491161][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.535614][    T9] usb 4-1: config 0 descriptor??
[  825.584672][ T5695] usb 10-1: Using ep0 maxpacket: 8
[  825.591279][ T5695] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  825.606697][ T5695] usb 10-1: config index 0 descriptor too short (expected 74, got 45)
[  825.607317][ T5695] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  825.607337][ T5695] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  825.607353][ T5695] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  825.607369][ T5695] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  825.607384][ T5695] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  825.607528][ T5695] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.917213][ T5695] usb 10-1: GET_CAPABILITIES returned 0
[  825.917254][ T5695] usbtmc 10-1:16.0: can't read capabilities
[  826.023682][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023717][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023743][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023761][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023779][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023796][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023814][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023831][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023849][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.023867][    T9] kye 0003:0458:0138.0007: unknown main item tag 0x0
[  826.145521][    T9] kye 0003:0458:0138.0007: hidraw0: USB HID v0.04 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0
[  826.171357][    T9] usb 10-1: USB disconnect, device number 82
[  826.260339][ T5716] usb 4-1: USB disconnect, device number 74
[  826.381446][T19385] fido_id[19385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  826.479457][ T5279] 8021q: adding VLAN 0 to HW filter on device eth27
[  826.583353][ T7201] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  826.743769][ T7201] usb 1-1: Using ep0 maxpacket: 32
[  826.750955][ T7201] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  826.761722][ T7201] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  826.775272][ T7201] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  826.775296][ T7201] usb 1-1: Product: syz
[  826.775312][ T7201] usb 1-1: Manufacturer: syz
[  826.775323][ T7201] usb 1-1: SerialNumber: syz
[  826.808061][ T7201] usb 1-1: config 0 descriptor??
[  826.813440][T19387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  826.823811][ T7201] hub 1-1:0.0: bad descriptor, ignoring hub
[  826.830912][ T7201] hub 1-1:0.0: probe with driver hub failed with error -5
[  826.924406][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  827.046408][T19387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.059070][T19387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.073344][    T9] usb 5-1: Using ep0 maxpacket: 32
[  827.081573][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  827.092866][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  827.115927][    T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  827.115950][    T9] usb 5-1: Product: syz
[  827.115966][    T9] usb 5-1: Manufacturer: syz
[  827.115978][    T9] usb 5-1: SerialNumber: syz
[  827.141807][    T9] usb 5-1: config 0 descriptor??
[  827.147274][T19397] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  827.156303][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  827.162515][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  827.177533][    T9] chaoskey 5-1:0.0: Unable to register with hwrng
[  827.214766][ T7201] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[  827.257215][ T5279] 8021q: adding VLAN 0 to HW filter on device eth28
[  827.273257][ T5716] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[  827.375176][ T7201] usb 10-1: Using ep0 maxpacket: 8
[  827.380637][ T7201] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  827.392194][ T7201] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15
[  827.392231][ T7201] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  827.392254][ T7201] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  827.392270][ T7201] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  827.439996][ T5716] usb 4-1: Invalid ep0 maxpacket: 16
[  827.448320][ T7201] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.448342][ T7201] usb 10-1: Product: syz
[  827.448359][ T7201] usb 10-1: Manufacturer: syz
[  827.448369][ T7201] usb 10-1: SerialNumber: syz
[  827.473767][    C0] ==================================================================
[  827.473777][    C0] BUG: KASAN: slab-use-after-free in dummy_timer+0xd11/0x4cf0
[  827.473798][    C0] Read of size 1 at addr ffff888033462112 by task kworker/0:5/5695
[  827.473807][    C0] 
[  827.473816][    C0] CPU: 0 UID: 0 PID: 5695 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  827.473831][    C0] Tainted: [L]=SOFTLOCKUP
[  827.473836][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  827.473843][    C0] Workqueue: usb_hub_wq hub_event
[  827.473857][    C0] Call Trace:
[  827.473862][    C0]  <IRQ>
[  827.473867][    C0]  dump_stack_lvl+0xe8/0x150
[  827.473881][    C0]  print_address_description+0x55/0x1e0
[  827.473896][    C0]  ? dummy_timer+0xd11/0x4cf0
[  827.473909][    C0]  print_report+0x58/0x70
[  827.473921][    C0]  kasan_report+0x117/0x150
[  827.473933][    C0]  ? dummy_timer+0xd11/0x4cf0
[  827.473948][    C0]  dummy_timer+0xd11/0x4cf0
[  827.473963][    C0]  ? __lock_acquire+0x6df/0x2e50
[  827.473984][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  827.473998][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  827.474011][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  827.474026][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  827.474039][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  827.474064][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  827.474077][    C0]  handle_softirqs+0x226/0x860
[  827.474090][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  827.474102][    C0]  __irq_exit_rcu+0xcb/0x220
[  827.474113][    C0]  irq_exit_rcu+0x9/0x30
[  827.474123][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  827.474138][    C0]  </IRQ>
[  827.474142][    C0]  <TASK>
[  827.474147][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  827.474159][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  827.474174][    C0] Code: f7 e8 5d 6a b3 f5 f7 c3 00 02 00 00 74 05 e8 c0 a2 df f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 14 86 a4 f5 65 48 8b 05 bc ce c8 07 48 85 c0 74 18 5b 41 5e e9
[  827.474183][    C0] RSP: 0018:ffffc900044cf7c0 EFLAGS: 00000206
[  827.474193][    C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[  827.474200][    C0] RDX: 0000000000000006 RSI: ffffffff8e586ce4 RDI: 0000000000000001
[  827.474207][    C0] RBP: 0000000000000004 R08: ffffffff909ba57f R09: 1ffffffff21374af
[  827.474215][    C0] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff88802a792508
[  827.474223][    C0] R13: dffffc0000000000 R14: ffff88802a6e4210 R15: 0000000000000246
[  827.474235][    C0]  __pm_runtime_idle+0x13c/0x1a0
[  827.474250][    C0]  hub_event+0x471e/0x4d30
[  827.474262][    C0]  ? __lock_acquire+0x6df/0x2e50
[  827.474277][    C0]  ? __lock_acquire+0x6df/0x2e50
[  827.474290][    C0]  ? look_up_lock_class+0x57/0x110
[  827.474305][    C0]  ? register_lock_class+0x31/0x2e0
[  827.474320][    C0]  ? rcu_is_watching+0x16/0xb0
[  827.474331][    C0]  ? trace_hrtimer_start+0x82/0x200
[  827.474345][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.474358][    C0]  ? __pfx_hub_event+0x10/0x10
[  827.474371][    C0]  ? rcu_is_watching+0x16/0xb0
[  827.474381][    C0]  ? process_scheduled_works+0x97a/0x1630
[  827.474393][    C0]  process_scheduled_works+0xc3d/0x1630
[  827.474410][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  827.474422][    C0]  ? assign_work+0x3cf/0x5d0
[  827.474434][    C0]  worker_thread+0xa47/0xfb0
[  827.474450][    C0]  kthread+0x38b/0x480
[  827.474464][    C0]  ? __pfx_worker_thread+0x10/0x10
[  827.474474][    C0]  ? __pfx_kthread+0x10/0x10
[  827.474488][    C0]  ret_from_fork+0x514/0xb70
[  827.474502][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  827.474515][    C0]  ? __switch_to+0xc89/0x1420
[  827.474528][    C0]  ? __pfx_kthread+0x10/0x10
[  827.474541][    C0]  ret_from_fork_asm+0x1a/0x30
[  827.474557][    C0]  </TASK>
[  827.474561][    C0] 
[  827.474567][    C0] Allocated by task 16100:
[  827.474573][    C0]  kasan_save_track+0x3e/0x80
[  827.474586][    C0]  __kasan_kmalloc+0x93/0xb0
[  827.474599][    C0]  __kmalloc_noprof+0x36b/0x720
[  827.474611][    C0]  usb_copy_descriptors+0xf7/0x320
[  827.474621][    C0]  f_midi2_bind+0x2736/0x2c40
[  827.474635][    C0]  usb_add_function+0x2e1/0x9f0
[  827.474645][    C0]  configfs_composite_bind+0xde0/0x1410
[  827.474656][    C0]  gadget_bind_driver+0x2ca/0x9e0
[  827.474669][    C0]  really_probe+0x254/0xae0
[  827.474677][    C0]  __driver_probe_device+0x1e8/0x360
[  827.474691][    C0]  driver_probe_device+0x4f/0x240
[  827.474699][    C0]  __driver_attach+0x339/0x600
[  827.474711][    C0]  bus_for_each_dev+0x23b/0x2c0
[  827.474721][    C0]  bus_add_driver+0x345/0x670
[  827.474732][    C0]  driver_register+0x23a/0x320
[  827.474740][    C0]  usb_gadget_register_driver_owner+0xf9/0x270
[  827.474754][    C0]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  827.474767][    C0]  configfs_write_iter+0x337/0x430
[  827.474781][    C0]  vfs_write+0x612/0xba0
[  827.474792][    C0]  ksys_write+0x150/0x270
[  827.474802][    C0]  do_syscall_64+0x166/0x520
[  827.474811][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.474820][    C0] 
[  827.474823][    C0] Freed by task 19272:
[  827.474828][    C0]  kasan_save_track+0x3e/0x80
[  827.474840][    C0]  kasan_save_free_info+0x40/0x50
[  827.474850][    C0]  __kasan_slab_free+0x5c/0x80
[  827.474863][    C0]  kfree+0x1c5/0x650
[  827.474882][    C0]  usb_free_all_descriptors+0x78/0x110
[  827.474892][    C0]  purge_configs_funcs+0x248/0x3d0
[  827.474902][    C0]  configfs_composite_unbind+0xa4/0x1c0
[  827.474913][    C0]  gadget_unbind_driver+0x1cb/0x410
[  827.474926][    C0]  device_release_driver_internal+0x48b/0x880
[  827.474939][    C0]  driver_detach+0x1f3/0x2d0
[  827.474952][    C0]  bus_remove_driver+0x226/0x320
[  827.474962][    C0]  usb_gadget_unregister_driver+0x4e/0x70
[  827.474975][    C0]  gadget_dev_desc_UDC_store+0x17a/0x2f0
[  827.474989][    C0]  configfs_write_iter+0x337/0x430
[  827.475001][    C0]  vfs_write+0x612/0xba0
[  827.475011][    C0]  ksys_write+0x150/0x270
[  827.475022][    C0]  do_syscall_64+0x166/0x520
[  827.475030][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.475039][    C0] 
[  827.475042][    C0] The buggy address belongs to the object at ffff888033462000
[  827.475042][    C0]  which belongs to the cache kmalloc-512 of size 512
[  827.475056][    C0] The buggy address is located 274 bytes inside of
[  827.475056][    C0]  freed 512-byte region [ffff888033462000, ffff888033462200)
[  827.475067][    C0] 
[  827.475070][    C0] The buggy address belongs to the physical page:
[  827.475076][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033461000 pfn:0x33460
[  827.475087][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  827.475096][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  827.475107][    C0] page_type: f5(slab)
[  827.475117][    C0] raw: 00fff00000000240 ffff88813ff15c80 ffffea000082b010 ffffea0000d9bc10
[  827.475126][    C0] raw: ffff888033461000 0000000000100004 00000000f5000000 0000000000000000
[  827.475135][    C0] head: 00fff00000000240 ffff88813ff15c80 ffffea000082b010 ffffea0000d9bc10
[  827.475144][    C0] head: ffff888033461000 0000000000100004 00000000f5000000 0000000000000000
[  827.475153][    C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  827.475164][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  827.475169][    C0] page dumped because: kasan: bad access detected
[  827.475175][    C0] page_owner tracks the page as allocated
[  827.475179][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5615, tgid 5615 (syz-executor), ts 73957303241
[  827.475197][    C0]  post_alloc_hook+0x1f9/0x250
[  827.475208][    C0]  get_page_from_freelist+0x2209/0x2280
[  827.475221][    C0]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  827.475234][    C0]  allocate_slab+0x7d/0x620
[  827.475244][    C0]  refill_objects+0x2d5/0x350
[  827.475253][    C0]  __pcs_replace_empty_main+0x2c8/0x6c0
[  827.475262][    C0]  __kmalloc_cache_noprof+0x39b/0x600
[  827.475274][    C0]  __ipv6_dev_mc_inc+0x447/0xa40
[  827.475288][    C0]  ipv6_add_dev+0xe36/0x13a0
[  827.475300][    C0]  addrconf_notify+0x771/0x1050
[  827.475310][    C0]  notifier_call_chain+0x1a5/0x3d0
[  827.475322][    C0]  register_netdevice+0x18a4/0x1eb0
[  827.475335][    C0]  nsim_create+0xbd7/0x1150
[  827.475343][    C0]  __nsim_dev_port_add+0x7f8/0xcd0
[  827.475354][    C0]  nsim_dev_port_add_all+0x37/0xf0
[  827.475365][    C0]  nsim_drv_probe+0x8b0/0xbb0
[  827.475375][    C0] page last free pid 4984 tgid 4984 ts 26339607070 stack trace:
[  827.475383][    C0]  __free_frozen_pages+0xc93/0xd90
[  827.475394][    C0]  __slab_free+0x274/0x2c0
[  827.475406][    C0]  qlist_free_all+0x99/0x100
[  827.475418][    C0]  kasan_quarantine_reduce+0x148/0x160
[  827.475431][    C0]  __kasan_slab_alloc+0x22/0x80
[  827.475444][    C0]  kmem_cache_alloc_node_noprof+0x354/0x610
[  827.475455][    C0]  __alloc_skb+0x1db/0x7a0
[  827.475465][    C0]  netlink_sendmsg+0x5d4/0xb40
[  827.475477][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  827.475491][    C0]  ____sys_sendmsg+0x54e/0x850
[  827.475501][    C0]  ___sys_sendmsg+0x2a5/0x360
[  827.475512][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  827.475523][    C0]  do_syscall_64+0x166/0x520
[  827.475531][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.475540][    C0] 
[  827.475543][    C0] Memory state around the buggy address:
[  827.475549][    C0]  ffff888033462000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  827.475556][    C0]  ffff888033462080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  827.475563][    C0] >ffff888033462100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  827.475568][    C0]                          ^
[  827.475574][    C0]  ffff888033462180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  827.475580][    C0]  ffff888033462200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  827.475585][    C0] ==================================================================
[  827.475601][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  828.421322][    C0] CPU: 0 UID: 0 PID: 5695 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  828.432228][    C0] Tainted: [L]=SOFTLOCKUP
[  828.436525][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  828.446553][    C0] Workqueue: usb_hub_wq hub_event
[  828.451559][    C0] Call Trace:
[  828.454816][    C0]  <IRQ>
[  828.457642][    C0]  vpanic+0x56d/0xa60
[  828.461604][    C0]  ? __pfx_vpanic+0x10/0x10
[  828.466087][    C0]  panic+0xc5/0xd0
[  828.469783][    C0]  ? __pfx_panic+0x10/0x10
[  828.474179][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.478836][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.483500][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.488169][    C0]  check_panic_on_warn+0x89/0xb0
[  828.493264][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.497928][    C0]  end_report+0x73/0x170
[  828.502199][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.506865][    C0]  kasan_report+0x128/0x150
[  828.511355][    C0]  ? dummy_timer+0xd11/0x4cf0
[  828.516013][    C0]  dummy_timer+0xd11/0x4cf0
[  828.520499][    C0]  ? __lock_acquire+0x6df/0x2e50
[  828.525422][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  828.530772][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  828.535689][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  828.541476][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  828.546392][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  828.551572][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  828.556665][    C0]  handle_softirqs+0x226/0x860
[  828.561410][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  828.566152][    C0]  __irq_exit_rcu+0xcb/0x220
[  828.570718][    C0]  irq_exit_rcu+0x9/0x30
[  828.574935][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  828.580549][    C0]  </IRQ>
[  828.583457][    C0]  <TASK>
[  828.586366][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  828.592318][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  828.598712][    C0] Code: f7 e8 5d 6a b3 f5 f7 c3 00 02 00 00 74 05 e8 c0 a2 df f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 14 86 a4 f5 65 48 8b 05 bc ce c8 07 48 85 c0 74 18 5b 41 5e e9
[  828.618293][    C0] RSP: 0018:ffffc900044cf7c0 EFLAGS: 00000206
[  828.624334][    C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[  828.632282][    C0] RDX: 0000000000000006 RSI: ffffffff8e586ce4 RDI: 0000000000000001
[  828.640227][    C0] RBP: 0000000000000004 R08: ffffffff909ba57f R09: 1ffffffff21374af
[  828.648173][    C0] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff88802a792508
[  828.656120][    C0] R13: dffffc0000000000 R14: ffff88802a6e4210 R15: 0000000000000246
[  828.664071][    C0]  __pm_runtime_idle+0x13c/0x1a0
[  828.668992][    C0]  hub_event+0x471e/0x4d30
[  828.673382][    C0]  ? __lock_acquire+0x6df/0x2e50
[  828.678301][    C0]  ? __lock_acquire+0x6df/0x2e50
[  828.683217][    C0]  ? look_up_lock_class+0x57/0x110
[  828.688307][    C0]  ? register_lock_class+0x31/0x2e0
[  828.693481][    C0]  ? rcu_is_watching+0x16/0xb0
[  828.698224][    C0]  ? trace_hrtimer_start+0x82/0x200
[  828.703400][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  828.708430][    C0]  ? __pfx_hub_event+0x10/0x10
[  828.713172][    C0]  ? rcu_is_watching+0x16/0xb0
[  828.717911][    C0]  ? process_scheduled_works+0x97a/0x1630
[  828.723615][    C0]  process_scheduled_works+0xc3d/0x1630
[  828.729160][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  828.735115][    C0]  ? assign_work+0x3cf/0x5d0
[  828.739681][    C0]  worker_thread+0xa47/0xfb0
[  828.744251][    C0]  kthread+0x38b/0x480
[  828.748304][    C0]  ? __pfx_worker_thread+0x10/0x10
[  828.753404][    C0]  ? __pfx_kthread+0x10/0x10
[  828.757978][    C0]  ret_from_fork+0x514/0xb70
[  828.762632][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  828.767718][    C0]  ? __switch_to+0xc89/0x1420
[  828.772459][    C0]  ? __pfx_kthread+0x10/0x10
[  828.777059][    C0]  ret_from_fork_asm+0x1a/0x30
[  828.781819][    C0]  </TASK>
[  828.784867][    C0] Kernel Offset: disabled
[  828.789187][    C0] Rebooting in 86400 seconds..