last executing test programs:

5m51.360087722s ago: executing program 32 (id=387):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESHEX])
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x564)

5m40.870159164s ago: executing program 33 (id=371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040))
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x24004054)

5m29.586893973s ago: executing program 5 (id=449):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
setns(0xc9, 0x0)
syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000380)={0x9, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x100000008, 0x0, 0x10000009, 0xff7ffffb, 0x1})

5m26.256872053s ago: executing program 5 (id=463):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000000c0)=""/104, 0x12) (fail_nth: 7)

5m25.965412728s ago: executing program 5 (id=464):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)={0x14, r1, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20020045}, 0x20048810)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x412, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)

5m25.818654833s ago: executing program 5 (id=465):
socket$netlink(0x10, 0x3, 0xf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r0, &(0x7f00000003f0)='-1', 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x4, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) (async)
write(r0, &(0x7f00000003f0)='-1', 0x2) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

5m25.710557921s ago: executing program 5 (id=466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x0, 0x0, 0x0, 0xfffffffe, 0x6b3, 0x1, 0x10000, 0x824f, 0x0, [{0x7, 0x2, 0x6}]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000280)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0x3, 0x9f, 0x2, 0x5, 0x12, 'syz1\x00', "3176a3f47bdf57c9134bdf544c723793f92a68131e4609c43bf0d057aaecbb76", "1a9566ead9dd0ea3d5a16dca3099dcedf63a0611688a5cdbbcf23da18b4557e4", [{0x6, 0x8, {0x1, 0x3}}, {0xa994, 0x3, {0x1, 0xfe000000}}, {0xb9, 0x9, {0x2, 0x100}}, {0x4, 0x6, {0x2, 0x40}}, {0x9, 0x9, {0x3, 0x101}}, {0x863, 0x0, {0x3, 0x1}}, {0x8, 0x9, {0x3, 0x3}}, {0x1, 0xffdd, {0x0, 0x6bf2d9c1}}, {0xffc0, 0x7, {0x1, 0x4}}, {0xfffe, 0x3ff, {0x3, 0x1}}, {0x5, 0x0, {0x2, 0x6}}, {0x1ff, 0x1, {0x1, 0x5}}, {0x2, 0x7, {0x2, 0x8001}}, {0x0, 0x7, {0x2, 0x5}}, {0x3ff, 0x4, {0x5, 0x3}}, {0xf, 0x52, {0x1, 0x1}}, {0xfffb, 0x8, {0x3, 0x31}}, {0x10, 0x4, {0x1, 0xa}}, {0x0, 0xd, {0x2, 0x6}}, {0x32, 0x8, {0x3, 0x1}}, {0x1ff, 0x7fff, {0x2, 0xd7}}, {0x0, 0x1, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0x4f}}, {0xd, 0x60b, {0x3, 0x1}}, {0x2, 0xff, {0x2}}, {0x8, 0x2, {0x1, 0x2}}, {0x7, 0x0, {0x3, 0xd}}, {0xc0c3, 0xe7, {0x1, 0x2}}, {0x6, 0xb0, {0x3, 0x8}}, {0x68, 0x4, {0x3, 0x5}}, {0xb, 0x8, {0x0, 0x7fff}}, {0x3, 0x1, {0x3, 0x9}}, {0x6, 0x7a, {0x3}}, {0x8, 0x2, {0x2, 0x7f}}, {0x9, 0x0, {0x3, 0x8e}}, {0x9, 0x3, {0x2, 0x9}}, {0x8, 0x401, {0x0, 0xfffffffd}}, {0xfff9, 0x2, {0x0, 0x1}}, {0x8, 0x0, {0x0, 0x6}}, {0x2, 0xfff, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x100}, 0x22, 0x4f, 0x0, 0x7fff, 0xe, 'syz1\x00', "50fb7672c52de6d0545638544b4a6bf06ec17be498487615243c17f609dc59fb", "773c8f17c4845b5107003d03a67c1f86a30b149d7a95f6a5ceff0681bcc1b023", [{0xab7, 0x4, {0x2, 0x5}}, {0x9cc, 0x9, {0x1, 0x2}}, {0x1, 0xa, {0x0, 0xffffffff}}, {0x4, 0x400, {0x12a37e9ea07eec1d, 0x7}}, {0x9, 0x7, {0x2, 0x10001}}, {0x8, 0x1, {0x2, 0x9}}, {0x2, 0xfc5, {0x2, 0x1}}, {0x5, 0x8, {0x2, 0xfffffff8}}, {0x3, 0x7, {0x0, 0x81}}, {0x8000, 0x401, {0x2, 0x9}}, {0xcaf5, 0x5, {0x3, 0x9}}, {0x1, 0x4, {0x2, 0x2}}, {0x5, 0x8, {0x0, 0x2}}, {0x5, 0x8, {0x1, 0x62bf}}, {0x65, 0xb, {0x3, 0x8}}, {0x1, 0x7, {0x0, 0x2}}, {0x5, 0xe6f7, {0x0, 0x7}}, {0xa, 0x81, {0x3, 0x800}}, {0x6, 0x8000, {0x0, 0x80000001}}, {0x78b0, 0x8, {0x0, 0x1}}, {0x6, 0x9, {0x3, 0xbf}}, {0x4, 0x5, {0x0, 0x69}}, {0x400, 0xfff9, {0x1, 0x3}}, {0x0, 0x10, {0x3, 0xffffffff}}, {0x2, 0xfffd, {0x1, 0xf5f}}, {0x5, 0xfe01, {0x2}}, {0x2, 0xed, {0x0, 0x6}}, {0xfffe, 0x4, {0x3, 0xa}}, {0x1, 0x1, {0x1, 0xffffff4d}}, {0x0, 0x8, {0x1, 0x4}}, {0x3238, 0xabab, {0x0, 0x9}}, {0x6, 0x6, {0x2, 0x100}}, {0x1000, 0x1ff, {0x0, 0x7}}, {0x2, 0x38, {0x3, 0xf}}, {0xf, 0x7, {0x2, 0x8}}, {0x5f80, 0xb, {0x0, 0x7fffffff}}, {0xff9a, 0x4, {0x0, 0x7e1}}, {0x9d5, 0x1c, {0x1, 0x6}}, {0xfff7, 0x5, {0x3, 0x1}}, {0x1, 0x6d7, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x7f, 0x0, 0x5, 0x9, 0x9, 'syz1\x00', "445f6058c6a68cf6b53f17a6d4f29c8c5c5cf4cd40f3c84930fc1d6dc6103582", "976bbecae32e72ef5483b54dc1f20fb238ff7015cd00", [{0x6, 0x4, {0x0, 0x4}}, {0xa, 0x1000, {0x1, 0x1}}, {0x6, 0x3, {0x0, 0x4}}, {0x7, 0x9, {0x1, 0x2}}, {0x2, 0x105, {0x0, 0x2}}, {0x8, 0x4, {0x3, 0x2f5}}, {0xbc4, 0x7ff, {0x3, 0x2ff9}}, {0x4, 0x2, {0x2, 0x2}}, {0x3, 0x7, {0x3, 0x200}}, {0x9, 0x200, {0x1, 0x2}}, {0x0, 0xff, {0x1, 0x7e}}, {0x6, 0x7, {0x2, 0x2000}}, {0xf32, 0xfff, {0x1, 0x6}}, {0x800, 0x2, {0x3, 0x7ff}}, {0x2, 0xbb9, {0x1, 0x8}}, {0x0, 0xe5c6, {0x2, 0x40}}, {0xfa05, 0x9c55, {0x2, 0xb}}, {0x65a4, 0x4, {0x1, 0x9}}, {0x7, 0x1, {0x3, 0x7}}, {0x4, 0x5, {0x2, 0x7fffffff}}, {0x1, 0x1, {0x2, 0x4}}, {0x7, 0x6, {0x0, 0x9}}, {0x1, 0x100, {0x0, 0xf7}}, {0xfffa, 0x8000, {0x3, 0x3}}, {0x7, 0x58, {0x2, 0x7fb4}}, {0x5, 0x2, {0x1, 0x3}}, {0x200, 0x80, {0x3, 0xff}}, {0x7, 0xef, {0x0, 0x4}}, {0xff, 0x9, {0x0, 0x6}}, {0x1, 0x9, {0x3, 0x2}}, {0x7, 0x5, {0x2, 0xdfcd}}, {0x101, 0xe6a, {0x1, 0x7}}, {0x5, 0x8, {0x3, 0x4}}, {0x7, 0x9, {0xa3f5dcb6dba79549, 0x5}}, {0x8, 0x4, {0x1, 0x9}}, {0x1, 0xcd1, {0x0, 0x2}}, {0x8000, 0x8000, {0x0, 0x12}}, {0x3, 0x2, {0x3, 0x4}}, {0x1ff, 0x200, {0x2, 0xfffffe00}}, {0xff, 0x2, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x5, 0xb2, 0x9, 0x1, 0x1f, 'syz0\x00', "236399e44a18eab9ee55d81abcb375760f57e4ab963881735bef696c6479b80f", "c249419f447ba29af00b8621bb4e7efe361effc10536f5577498b1f6164dd44f", [{0x8001, 0xf3ee, {0x3, 0x60000000}}, {0x1ff, 0x6, {0x1, 0xfffffffc}}, {0x8, 0x40, {0x3, 0xf413}}, {0x1, 0x4, {0x0, 0x1}}, {0x1, 0x2, {0x0, 0x800}}, {0xad4, 0x200, {0x2, 0x3}}, {0x5, 0x101, {0x3, 0x2}}, {0x3, 0x0, {0x3, 0xcf81}}, {0x85, 0x3, {0x1, 0x6}}, {0x81, 0xe, {0x2, 0x4}}, {0x9, 0x9, {0x1, 0x3}}, {0xe505, 0x3, {0x3, 0xbd05}}, {0x80, 0x0, {0x2, 0x101}}, {0x2000, 0x0, {0x1, 0x6}}, {0x4, 0x9, {0x3, 0x46cd}}, {0x1000, 0x2, {0x1, 0x1}}, {0x3, 0xfffb, {0x1, 0x5}}, {0xb7, 0x3, {0x2, 0x7}}, {0x6, 0x10, {0x2, 0x2}}, {0x8, 0x0, {0x0, 0x80000000}}, {0x5, 0x8, {0x0, 0x2}}, {0x5, 0x7, {0x3, 0xef}}, {0x18, 0x5, {0x0, 0x7}}, {0x5, 0x1, {0x1, 0x5d4}}, {0x6, 0x4, {0x3, 0x14}}, {0x3, 0x8, {0x0, 0x9}}, {0x2, 0x6f, {0x3, 0x28}}, {0x1, 0x0, {0x0, 0x1}}, {0x7f, 0xd, {0x3, 0x7}}, {0x3, 0xe213, {0x1, 0xbf}}, {0x9, 0x3, {0x3, 0xd8bf}}, {0x8, 0x0, {0x1, 0x8}}, {0x5ded, 0xfff, {0x1, 0x101}}, {0x2, 0x5, {0x3, 0x100}}, {0xfff7, 0x6, {0x0, 0x3}}, {0x7, 0x3ff, {0x0, 0x7fffffff}}, {0x10, 0x4, {0x0, 0x2}}, {0xc, 0x1, {0x6, 0x1}}, {0x3, 0x6, {0x1, 0x9}}, {0x9, 0x3, {0x1, 0x80}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x24008855}, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/157, 0x9d}, 0x8000}], 0x6, 0x40000002, 0x0)
userfaultfd(0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r7}, 0x14)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000840)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r7, @ANYBLOB='@\x00B\x00'], 0x28}}], 0x1, 0x0)
r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r8)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'})

5m24.98685648s ago: executing program 5 (id=469):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f00000000c0)=0xd, 0x12)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x1, 0x0, 0x7, 0x8, 0xfff7}, 0x20)

5m24.692292286s ago: executing program 34 (id=469):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f00000000c0)=0xd, 0x12)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x1, 0x0, 0x7, 0x8, 0xfff7}, 0x20)

2m38.038312878s ago: executing program 0 (id=1495):
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x8900, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830")
ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031")
ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830")
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0xf})
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)

2m37.59956973s ago: executing program 0 (id=1497):
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002044}, 0x8040)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

2m37.503050907s ago: executing program 0 (id=1498):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x22, 0x3}, 0x4}}, 0x10)
syz_open_dev$vim2m(0x0, 0xfffffffffffffffd, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0xfe, {0x107, 0x81, 0x3, 0x80000001, 0xf6}}, 0x406000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2m37.020020462s ago: executing program 0 (id=1501):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000080)='sob\x8c\x97\"\xc0\x15+}\xee\x12ue', &(0x7f0000000100)='\x99\x1e\xc5\f\x84kl\xe4\xf0N\t\xb7\x9f\x96\x0f\x91\xb5\x14\xfc\x8d\x84\xc9k\xbee\xbc\x80\x06\xc5Q\x90\x04\x03\xe9\xa2\xbb\xcd\xebl\x1ej\x13\v\xcc,o\xb4\x00}\x8f\xe3\xdbh\x9b\x95O\xe4y65Roy\x8c\xf9\xd5o\xe2*\xe2G \xd6m\x82\xb4\x84Z\xee\xd9N0\xfa\x11\xf3\x18]CL\xfc_O\x9f\x16\x8cy', 0x0)
mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='btrfs\x00', 0x2800080, 0x0)

2m36.943687173s ago: executing program 0 (id=1502):
syz_open_dev$usbfs(&(0x7f0000000080), 0x940c, 0x240381)
r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x6, 0x4000000000001, 0x80000003, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x797d, 0x40, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b02, 0x80, 0x3, 0x26e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ee, 0x80, 0x0, 0x1ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26a}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x5, 0xfff, 0x44, 0x2, 0x0, 0x6}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x3}]})
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m36.550769344s ago: executing program 0 (id=1506):
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4002044}, 0x8040)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

2m21.452334379s ago: executing program 35 (id=1506):
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4002044}, 0x8040)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1m23.476226597s ago: executing program 6 (id=1877):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000) (fail_nth: 8)

1m23.286704627s ago: executing program 6 (id=1880):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
write(r0, &(0x7f0000000280), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1m23.115446797s ago: executing program 6 (id=1881):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x33}, 0x0, @in=@private=0xa810101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x800) (async)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
splice(r2, 0x0, r3, 0x0, 0x80000001, 0x4)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000240)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', <r5=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000000d1fb3796e7f50000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0)

1m22.951004559s ago: executing program 6 (id=1883):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010704000000fcdbdf807a5011b5250600000008003b"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000094)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda1\x00', 0x1ff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000500)=0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket(0x8, 0x2, 0x0)
setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54)
mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00', 0xa)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="14", @ANYRESHEX=r3, @ANYRESOCT=r3], &(0x7f0000000700), 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc0000000500210001000500060002000100000014000f00"/66], 0x48}}, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000380)=""/232, &(0x7f0000000480)=0xe8)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/file0\x00', 0x80042, 0x4d)
fallocate(r6, 0x100000000000011, 0x20fb, 0x2f93)

1m22.824716866s ago: executing program 6 (id=1885):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1)
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "4d0912cb7a186d2a2e55ba0b00000000198f4937bd978d2e175c692150689b03a627c2f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0xff, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x7}, {0xf000, 0xe000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0x3, 0x0, 0x0, 0x81, 0x8, 0x40, 0x26, 0x0, 0x6, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x114, 0xb, 0x0, 0x0, [0x80000005, 0x8, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18)

1m22.338963714s ago: executing program 6 (id=1888):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket(0x2d, 0x2, 0x0)
connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00, 0x7000000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
madvise(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0xa)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xd4}], 0x40000000000031b, 0x40000043, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/205, &(0x7f0000000240)=0xcd)

1m6.577114813s ago: executing program 36 (id=1888):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket(0x2d, 0x2, 0x0)
connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00, 0x7000000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
madvise(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0xa)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xd4}], 0x40000000000031b, 0x40000043, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/205, &(0x7f0000000240)=0xcd)

55.009551451s ago: executing program 8 (id=1957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40090)

54.839174805s ago: executing program 8 (id=2001):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x10, 0x1, 0x1, 0x0, 0x6, @random}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000000)="010000000000000020", 0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)

54.77072168s ago: executing program 8 (id=2003):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$PPPIOCDISCONN(r0, 0x7439)
r1 = syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x7, 0x2, 0x10007d4f})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x5}, 0x8)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/266, 0x10a}, {&(0x7f0000004c00)=""/4095, 0xfff}], 0x3}}], 0x1, 0x2260, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a000009090001"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0xffffffff, 0x3, 0xea5b, 0x5}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="260000001200010a000000000000000007000047"], 0x26}}, 0x0)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="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", 0x159, 0xffffffffffffffff)
r7 = open(&(0x7f0000000380)='./file0\x00', 0x200040, 0x20)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f00000003c0)={0x0, 0x0, 0x1013, 0x1})

51.662340591s ago: executing program 8 (id=2025):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x20000000, 0x6, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x65, 0x0, 0x68, 0x4, 0x0, @multicast2, @private=0xa010102}}}})
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074")
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x4210, r3)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000})
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x701240, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000040)={r9, 0x0, 0x9, 0x6, 0x8, 0x2, [0x8, 0x3, 0x0, 0xffffffffffffffff, 0xffff, 0x4]})

51.223013463s ago: executing program 8 (id=2027):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0})
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80), 0x0, 0x40)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x301400, 0x4e)
syz_open_dev$video(0x0, 0x7ff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7c, 0x2, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x204, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xe, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x3fe, 0x7d, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc5, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x804e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0xfffffffe, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x5, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0xb, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x9, 0x57, 0x4, 0x3, 0x2, 0x10000, 0x4, 0x5fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x0, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d613, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x10, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r2, 0x4, 0x40800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) (fail_nth: 4)

50.722923875s ago: executing program 8 (id=2031):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="9f8d81ee8e6db26b997ea36795e3701b7c765b5a0000000000000006213624c6a2fedf387ccadf3f4c24197df77b41373bd770d71a5eceadf0a1493b72de9cadd35fb1709311566d4136f1c64027a16748014187cacbdcda3f3186b89cab359944ba0c697927c85e488248c13eabf7e3ebc576e35fc20759b5761e31ff08089d69d2e12ef4afe51bf292ae40b0485d72f27b3caf113438b1bf8cb6b45730380248686781d9c7603f6161ec45afeffc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x100007, 0x9, 0xffff2d33, 0xff, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x0, 0x24, 0xd, 0x1000, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x6, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x7ff, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffc], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x3, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0x5, 0x2000031b, 0x8, 0x5, 0x7fff, 0x9, 0x4, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x2, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x80, 0xff, 0x0, 0xffff7038}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)

50.351427166s ago: executing program 37 (id=2031):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="9f8d81ee8e6db26b997ea36795e3701b7c765b5a0000000000000006213624c6a2fedf387ccadf3f4c24197df77b41373bd770d71a5eceadf0a1493b72de9cadd35fb1709311566d4136f1c64027a16748014187cacbdcda3f3186b89cab359944ba0c697927c85e488248c13eabf7e3ebc576e35fc20759b5761e31ff08089d69d2e12ef4afe51bf292ae40b0485d72f27b3caf113438b1bf8cb6b45730380248686781d9c7603f6161ec45afeffc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x100007, 0x9, 0xffff2d33, 0xff, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x0, 0x24, 0xd, 0x1000, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x6, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x7ff, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffc], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x3, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0x5, 0x2000031b, 0x8, 0x5, 0x7fff, 0x9, 0x4, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x2, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x80, 0xff, 0x0, 0xffff7038}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)

47.044050237s ago: executing program 4 (id=2051):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x838, 0x0, 0x7ee69d08}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000a40)={0x30a32c0, 0x1, @ofdm={0x4, 0xc, 0x0, 0x12, 0x1, 0xb, 0x2}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r2, 0x13, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="492b09b95d77"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48100)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x214, 0x0, 0x4d7d14ce92427010, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b24}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1aff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f40d35c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x750b7a15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x220400d0}, 0x800)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x8001, 0x4000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000580)=@x86={0x8, 0x0, 0x1, 0x0, 0x6, 0x5, 0x8, 0x3, 0xfb, 0x7f, 0x4c, 0x6, 0x0, 0x7fffffff, 0x6, 0x3, 0x5, 0x2, 0xae, '\x00', 0x7, 0x9})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

45.656801174s ago: executing program 4 (id=2055):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000000c0))
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220605c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc000900b80006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007e00a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0)

45.430445525s ago: executing program 4 (id=2057):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
write(r0, &(0x7f0000000280)="5b0b4a46198f5c0d1edb57f0a87699d85f89b5b57a75279e55b1908bcfc5b19e0f4c430bd51b43a0dc0f2cf5ac8306909996c794a95a3204700f8e248ee24f56277e9fb186fd60ad5cffa664f9361cd80453b5d30068e3a3c766906e0c0f645911efe5aecdfaea9a9986c053e8b2acdbb910c0f32bf7674475f60b702bba8b82226ea1ea913af016919f9689408bf596a8ea87d8ff0d9a546746d6f956f258fa2dfee544e5b80f28fd54fb3e25331cc83571224d02fe63131b4d44b89a8d3091a93c5d118f77bd8e966921dba260c972d033b27c7cd4102be2ac0c6eab2a26e363", 0xe1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

45.224997924s ago: executing program 4 (id=2058):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd20005000000000000000000000200"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xce)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000028a", @ANYRES16, @ANYRES32=0x0], 0x30}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$cgroup_int(r3, &(0x7f0000000080)=0x3, 0x12)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x400000000000000}]})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000020601040000000000000000000000061400078005001500090000000800124000002004050005000a000000050001000700000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0)
semget(0x1, 0x4, 0x3)

44.79922845s ago: executing program 4 (id=2060):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)
r1 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x4}], 0x10}}], 0x1, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x1fe, &(0x7f0000001180)=<r4=>0x0)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x100000}])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x26, 0x100, 0x9, 0x0, 0x8001})

44.521761685s ago: executing program 4 (id=2062):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000001c0)="18000000010013", 0x7)
ioctl$I2C_PEC(r0, 0x708, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
mq_notify(r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000300)={@id={0x2, 0x0, @c}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010006005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

36.105840394s ago: executing program 7 (id=2095):
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x2, 0x3, 0x4, {0x1, @sliced={0x7, [0x5, 0xa8, 0x403, 0xffd, 0x8, 0x402, 0x9, 0x0, 0x0, 0x9, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x7f, 0x3, 0x101, 0x3, 0xffff, 0x7f, 0xff6c, 0x400, 0x4, 0x3, 0xe020, 0x1, 0x6f73, 0x0, 0x6, 0x1, 0x6, 0x2, 0x6, 0x8, 0x2, 0x4, 0xd9, 0x1, 0x9, 0x6, 0x3, 0xff, 0x3ff, 0x4, 0x2, 0x40, 0xb3], 0x10004}}, 0x6})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r2, 0xc008644e, &(0x7f0000000040)={0x7})
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002400010027bd70000000000008000000", @ANYRES64=r5], 0x24}], 0x1}, 0x8008)
write$apparmor_current(r0, 0x0, 0x1b)

35.711980845s ago: executing program 7 (id=2099):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x838, 0x0, 0x7ee69d08}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000a40)={0x30a32c0, 0x1, @ofdm={0x4, 0xc, 0x0, 0x12, 0x1, 0xb, 0x2}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x13, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="492b09b95d77"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48100)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x214, 0x0, 0x4d7d14ce92427010, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b24}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1aff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f40d35c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x750b7a15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x220400d0}, 0x800)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x8001, 0x4000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000580)=@x86={0x8, 0x0, 0x1, 0x0, 0x6, 0x5, 0x8, 0x3, 0xfb, 0x7f, 0x4c, 0x6, 0x0, 0x7fffffff, 0x6, 0x3, 0x5, 0x2, 0xae, '\x00', 0x7, 0x9})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

35.490520193s ago: executing program 7 (id=2102):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
write(r0, &(0x7f0000000280)="5b0b4a46198f5c0d1edb57f0a87699d85f89b5b57a75279e55b1908bcfc5b19e0f4c430bd51b43a0dc0f2cf5ac8306909996c794a95a3204700f8e248ee24f56277e9fb186fd60ad5cffa664f9361cd80453b5d30068e3a3c766906e0c0f645911efe5aecdfaea9a9986c053e8b2acdbb910c0f32bf7674475f60b702bba8b82226ea1ea913af016919f9689408bf596a8ea87d8ff0d9a546746d6f956f258fa2dfee544e5b80f28fd54fb3e25331cc83571224d02fe63131b4d44b89a8d3091a93c5d118f77bd8e966921dba260c972d033b27c7cd4102be2ac0c6eab2a26e3631898c4", 0xe4)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

35.428367603s ago: executing program 7 (id=2103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d68000000000000000000000000000010000000000000", 0x27)
setsockopt(r0, 0x0, 0x487, &(0x7f0000000100)="110000007f0000014e200000000000006d6800000000000000000000000000001000000000000000000000007f0000014e210000010000000100"/68, 0x44)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x4004, 0x1, 'queue0\x00', 0x4})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r3, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)

34.954464182s ago: executing program 7 (id=2104):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00'/13)
bind$x25(r0, &(0x7f0000000080), 0x12)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
syz_usbip_server_init(0x3)
connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)

33.28539398s ago: executing program 7 (id=2119):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x838, 0x0, 0x7ee69d08}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000a40)={0x30a32c0, 0x1, @ofdm={0x4, 0xc, 0x0, 0x12, 0x1, 0xb, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r2, 0x13, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="492b09b95d77"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48100)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x214, 0x0, 0x4d7d14ce92427010, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b24}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1aff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f40d35c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x750b7a15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x220400d0}, 0x800)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x8001, 0x4000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000580)=@x86={0x8, 0x0, 0x1, 0x0, 0x6, 0x5, 0x8, 0x3, 0xfb, 0x7f, 0x4c, 0x6, 0x0, 0x7fffffff, 0x6, 0x3, 0x5, 0x2, 0xae, '\x00', 0x7, 0x9})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

28.534621326s ago: executing program 38 (id=2062):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000001c0)="18000000010013", 0x7)
ioctl$I2C_PEC(r0, 0x708, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
mq_notify(r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000300)={@id={0x2, 0x0, @c}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010006005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

18.200603826s ago: executing program 39 (id=2119):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x838, 0x0, 0x7ee69d08}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000a40)={0x30a32c0, 0x1, @ofdm={0x4, 0xc, 0x0, 0x12, 0x1, 0xb, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r2, 0x13, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="492b09b95d77"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48100)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x214, 0x0, 0x4d7d14ce92427010, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b24}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1aff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f40d35c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x750b7a15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x220400d0}, 0x800)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x8001, 0x4000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000580)=@x86={0x8, 0x0, 0x1, 0x0, 0x6, 0x5, 0x8, 0x3, 0xfb, 0x7f, 0x4c, 0x6, 0x0, 0x7fffffff, 0x6, 0x3, 0x5, 0x2, 0xae, '\x00', 0x7, 0x9})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

5.685445555s ago: executing program 9 (id=2205):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="b06114dc9348fbd9d90d475ad96170787674d9cb89ec0efef647f094cd726f763f4e8e9d8ee26d35291cf44f3748bbb8b6b0ebb287bdf1a9684c09d859bad74d6e75aa8cbbb10242f0173e02a914f34873e85f5a39a8386e75c9fe1833bfe7a6fed700efcc69e257d45be7e9e831c7292f9997027a22774f1da8dee958de19c2689cc6e5164d95e0cbbb455caa0282958efafb55956f2d78ff8eaa68847dc34bf11f577baa874fb0580453b2dc8bb4daadbe11cdd051422036117a0de9b197d9e5c95b02902175c34564", @ANYRESOCT, @ANYRES8=r1], 0xff2e)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/241, 0xf1}], 0x7}}], 0x1, 0x0, 0x0)
r3 = dup(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYRES32, @ANYRESDEC=r2], 0x44}}, 0x6cdaa398d2ce5550)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0x4}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x800)
getsockopt$inet_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000100))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a8c000000060a030400000000000000000a0000050900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c200800024000000000080001004c4f47000900020073797a3200000000140005800800024000000002080001000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000140)={0x2, 'bond_slave_1\x00', {0x9}, 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

4.790364304s ago: executing program 9 (id=2209):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10)
listen(r2, 0x5)
syz_usb_connect$uac3(0x2, 0x8a, &(0x7f0000000300)=ANY=[@ANYBLOB="12015102000000ff410e444240000102030109027800030102509d080b0200010030730904000000010130000a2401100a00090000000904010000010230000904010101010230000a24020295000000040209050109ff0306f0000a25490a3a0e000701000904020000010230000904020101010230000905820910000908000a2525080000000b0100"], &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x3, 0x0, 0x3, 0x40, 0x67}, 0x129, &(0x7f0000000580)={0x5, 0xf, 0x129, 0x4, [@generic={0x32, 0x10, 0x3, "3402cc5f99f59f76d19675e42e0718b900d2cad280b700854783e9928d9b08796e8ad89275afbb9def2b5385236d4d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x46, 0x8, 0x40, 0x5, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x10, 0xb, 0x5, 0x3}, @generic={0xdc, 0x10, 0xb, "26fb9b526e74f77f3bb1be60cf797e3f59c06df02c461a9f424bc764cf81b00bda8e097216fc3157e66b5ed528878e8986e4e9a7633a0a8b146565a2a3efe3f57459474d17c299d4e2475b9e47444f6be2e88c9c072fc6d38a1747370cc691296233941c1ed8cf6ab271215dec204af2870f0c0c62cd5d7ffec903d25d114f0e2e64eb61fe11a916740e9a76ff1cea1426e06fbc3409611498d7c2fc168411b5a5debb0c02f766029d23ba4d6d7c999c42be32f5b213417bc9996e10ee55bed76b19a5a012d0ddd6ec3eaa26eba8ca4d5820b52f756fee98c9"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x500a}}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020)
accept4(r2, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x6, 0x10001, 0xffff, 0x100a, 0x8000000000000000, 0x1fe, 0x0, 0x20000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x1, 0x89], 0x11117fff, 0x41105})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b33, &(0x7f0000000040))
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000140))

4.366618412s ago: executing program 1 (id=2212):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xe000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)

4.322253856s ago: executing program 1 (id=2213):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c)
setsockopt(r0, 0x0, 0x487, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x4004, 0x1, 'queue0\x00', 0x4})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r3, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)

4.178121009s ago: executing program 3 (id=2215):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000340)={[{@default_permissions, 0x5c}]})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x0, 0x0, 0x0, 0x0, [0x5]}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x164}}, 0x24004000)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmmsg$sock(r2, &(0x7f0000000240)=[{{&(0x7f0000000140)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}], 0x30}}], 0x1, 0x24000000)
fcntl$notify(r0, 0x402, 0x91ea6c12f182534)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000300)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xf, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1})
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x0, "690600e4ba5686b4f80000000000000000024305f11fd3450700", 0x41414770})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f0000000b40), 0x4)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)

4.028866097s ago: executing program 2 (id=2216):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x16, &(0x7f0000000140)={0x0, 0x1, 0xc, 0x0, @vifc_lcl_ifindex, @empty}, 0x10)

3.940060037s ago: executing program 2 (id=2217):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2d84, 0x2, 0x3, 0x27c}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fa8, 0x40, 0x0, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf06a, 0x10, 0x3, 0x280}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb69f, 0x14337861684a0614, 0x1, 0xbb}}, {0x0, 0x0, <r0=>0xffffffffffffffff, {0x0, 0x135c, 0x1000, 0x0, 0x9}}], 0x4, &(0x7f0000001940)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x4, 0x1bc, 0x0, &(0x7f0000000940)=@buf_4k="8fc4d07292b8ea55daa307f66933aae0472532808737a162dee1aea59d3fcae0622a0092f3b39211e302cef90bb65c8b557ca64df68e4e47fdc9e3e8ba25b32b12c2f186687d256e6e3b2ef90ba120d6fbb682e562856768d35b7d482e563013b9c41eb69ef9ed475ed4a06e10bed468770562b75d0eeb2a2b2ddbf96ca2f5c02211bb699b3f7be00edc7e48085a10a3f61a51aebe7c326c03ba9197c72c37316266b6857c6b8225fa01818b8b72bd7a1e8574bfa0403569fecbb3dafbf563c5ab95f19e96a0ace288bece946177a6684075ef4fd867dedf95951d593e19e8912d94140d83c9d7f891a1f97c26091dfadb8cad41cb19aca4f01c0f791e8de0c57bba8b2833a244caf49ead4ebc8255007b9d1945e0a8219e77bb2d91f25d3f9e72394e89bf97d55635780d9f5745020a15d85026973d2f47b3474e7f69b76154758d0cddc463e9af45dc76dbc812c87b500293be89bbe0f445750f79064d0ee119e0be1c779bfafaff3601c49feee5af5a7c3548bbcaaeb9c0fec2262d020279baeb070c8605945f42f7db67145d71065add63f9e8466c6fe471ab4130eec0bd71b5fa4567ca02da97b5292ca6e0fe509871d6cb4d29123595107e370925b29381e9c817a81e2cfdf7979c998cda2bf781f880f8b57f3422bc470bf598fa9d200a3c5dee98d2649b7a7aee11a26ea73d80376d2dbf900a00b50d73a2de4c5d745a669d1d94c5d2da056a4dd860a043eddea40a53718624b0e2454f2c951630d4055ab7d8f2e2c996b74348cf8abc1033829045ae27983c020e15ae8e1d98633ef46125f6f8d2264208a8d8b358e31f9b69a9bfc997d78df1c7f0beb51aca4d5840207425777311bb974c6c78adb02e55064b61455318fdd9dcaddc9e036ace48d95a0f28fb4ddb91bb8ef7cddd898d57f66138fe9ad54c922825e0958dc78983c84b64cb760db4dbab126bb6e351c5bb73f39b5dcbce32d53615fd5783d6f4b715b72874c53b707109357f8ef5de8d2a98e3a025259448572bd390093c829b4d093c611b37316042ff3a8f134fa89d943b5bea1c6acb3f68560c12b53dd9a009a437bde99841b505013798ff149bc77bface253d5dc92ed1a6b84449cdc366ef82d043a0f31e68ad6eb1dab0a33c7e714af4a99040d1c25e2cd49c87e9734d3ec8969dc977ff91cea40891d5973b923fcba1a2f010a576175f1722f64139a99a56f4d2f26bdca1818f753f7b376fcbc9f55a6555ce98128876c4de5ed5ec4fa08e54d520dd296f3351ea4d34e30674e4202981a6652b958ed90a0e60843edd02e5033ffd628485916e9f00a9a85543d9855c09ed875602f950ba8c7104f132de9c320f12f8c6c9320c37d99c4668854e334affe43e74f4316fcb5cad91f7584815a0f0272abaf38b4f063aa567ae88f62a6d354a62a4a045b4aa7bc0020f650e4a35a152e76da6d71d7f39b9953c2a397b7b020a13aa764b16806ea224c72f4865c2e5ce5b89c726684352d124f8bbe7e802c8f920274025f57aa672aa415d89ada8e34163a56d3dd91ae63ff590b1ce7635c45d5a82ff47db18aa7021f4afeda568bf37b6e3807b82acef83978426883f60484379908d84c7dea1d5926844d023ad335838982fc9ccbe94681be620d130d402fdb8192c7e4800786acd47446945452079788c6d9d37b1bd6644a4da47aca4ccd6d5ef754c822c541b73f5ad83fafa82816198129946bc3339223247392afd78632bf6a0a5e0e9d5dd0615b05fa94272fb321a06b0c0669939361e4f4eaa4e9e8afd774c1cb02f9cc76cf13151428e38ab57167f4b5820615e11c8cbd902e5926d201a43dced1ad7bc9089f340f0a4efc845841b8080960f6480b1f1c82b06e80b62a4e1f3f9f94d8f53c045c5244a1e002a806a405f858ef61b48d598e498c44e0da20dc44aeccf2319969a5605331f5c9f0f88017e7317bf0be870a9bbcba61c01e5b52734c6f6bd47fd74a85882013c62e23efc36a18f441211da8ec5cc3d7429faf65b9e68457ddc6925e868ce9e7afc4ae8d187dad60fa56086100ae836311eeea4ccb45aa7fe9fee3e303c7e9738b3767104c1c2a88c8b3ebfa3de605050197320885e241b092671d3d68d001d558d9b29f1902d1eb9e47bf9d0882ae9d826c7a9dfbacec71e7814213551e94b000f8208bbbbb1d8441dafcbb6ae4c7cbf025a10cf06e491665044a6680b11f88b33e94c5013c7b71d2516d8278af0892e3c3ab58b4cdc43a05cd8fa06681b2d13c6553030f9349eb53ddcb66f32599480a4cbc51feadb459006815720ce86eaabbbb37a2a4383a5656043cf16d1073e3307165b9e81ed153b863b31d66ba19902a6c80b1e6a87971ab502e55cab217b2163a2073376dc1439866f9a8737a80ea0199638d07684a83b0e8e379b1e2c2cf8fcfc91c3e9324af804544d2b79ca1fec159f6a2679a4de3f83c5777d9184c210c840fb39e362973af5cf0fe25012b888e9493dec46f38d36f0474204ab90fdd66fba1971f20998eb0028e43e16a9a361659365e09078340cc2525ccdd91ec021f084ce8be80fcd4c39ca33c5b130cddd5714f3578c391eb399987dd16583752381d38f2d3ae9a5be32d575816afdebbb4842ea75f2e5167abfac26a45507a62a8a1371e16095fc0ba66f2df8fe6b05ec9724161e3f4c395758d15a590560f30ac5ff8f67451b4035ef5384c0bbc0d083b72396db35905295ed77035ddc53acfba687bb0517b817eadafac809a6ca21a6a2cee266b904d32f825c087f1ffbf61b43265a82bc46a8c1d1a8e43ccf3e88cb0885fd103600f156e175fe09f61fe620d1cbc69eed6f61253df86ed00092c024f2073c31db72a7aa4bcf5ed4af8e86e283e0a5db558c706a9f152fabd2490af920578ba04cc8193d4c8639ef264cdbc25009601a3b3877d4fa0183984b705673976189904d909c588af86e11250181e750789d527ca74345256c6e0bd183d903beabc5205b58a2893a2ca6feab53d61183f122a443b9038e8ee0e1788da108b5ad93ce2d9238da19ba7125dc447a2b0846a7f41d03d1b38a9bff3a666bfeec27f4124fa22efc39654cc77b0eb044ef0cbe6caee2b87831af6ee77d6c790a667351d6b8b539b66d54c6916afb633b4bc67168eecd41fe95d9b0d97cd6050aa7b2cfbe519e0662ab0805a0bfb5440d7190e163247ffd4c3c7791124b69aa90218ce9dce93026858a172822541af17cb424c7fa3ab20eefac2d1ae557957dbd2fa079bbb01b60fdc77ff8d7b04dd7fe4207f5b11b74d296c11d9299b2b2b94638f061ba30d9be1977fa9a717f141d0e811eb3939a6cf3e4cb92279adbbe23de8a6a308d65e34509de338c68711a9bce5949bdd81db829f344a2b21e6abca84fb43ba5e8d2b21d78c5c6e1eaaeba964ec2f83a7b1eb63d5f8514e4ee37d70c1157831d3aff805621854c2218d09feae1216dfa833f898cd3bb6c3bc149e50b9bff374fa8e2a0c8cff2f05b958cd2731f34f186c3b7194b35c113c3f48a68666927e2ea87862d1a7b56eeab0b338137f9146db15e2596ba47989b5c89607a76149128b4783f591050e22aee956f28bd578bc814a5e200e83d706411f02cfbe4122256f3aa60f3b7e11f2e892264779174d973c6d33e6d6108bf9928dc137f8b60ca4a8cf3c15175c3eca29391a3a9d2a0670abb28591d48203eb4f308417fa7de327425f0c475df9b8f1661866f8a4caac00d4ad669ba70b6747e48bc134363a6c87aa04878698142319028eb0e91098311054505020eea944dc0c76483f92becc15a59c30c6b47d9b8100c52005dd98df8a7fbba8c7b289967aab99123a122c4e4e018c0a49be22e5df598e2bff438e2ad8329714d265acb5e81d03c0d1a737bd5e28455f04a52254f7b85e9d0cee392726d8adfa589ffce06f1ede5729f802320097f01015493f3ace463d89711be65214f95625af7d141ff50126c01e83224cadd9fcd5a1bb6569237f67ceb8f3630d993bee178a2f24cbbcf0806f96a813827a831187245cf0d11c439e791578dfdf0abadb073bf9eb13b7db4dffb4d39f32d50e7a55980a3d23767d7472333fb5c03f96e60a3d3658bc8a9fcb91cec487c4a39c9faf1c9b837366c55f909ea42a6aebe2bbbbd4bff4260c42ada9dc8d7427473c075dec127628ee7314779a008ad0b75edf430ff50126ce0aae811233b63f72935609ed28507ccf3122babbf707c0da1b83678cd8e26d00f14029f6743ed1d526cfc236a9f20923f6c7ef7a46835730f5ea20b2daad739346abcc1dde03a1590a8895ffbab841b280abe845c80a1911a8cbf8a8d284e5fe8a5acbda3acbe9c70f8770323c6c4315ae59e3f7508671651a057e6a6517769552b80e552f95d12c41b450f921e483b66db3c88316395a5d90757ae2c8c67a96e4d9a61076c1e25a423ec0a830f80dc29132407b8a5c5bc42f6c9a542bd13374957034308451eb2f6a3cf545ab584ba52cc6030ad6121ef110d076853d277d05e486978954a0df03bb2ed0d320fece4f355cd836f693f4c309c1a9327e2661782f073c6217e3a223166b26a0f9adf29cd6619725ecefb7041ff9e1b0f89f98515af256f0f6539f6adea319ff90fc0b7f8fa2294a8ea55f363586e0a0efeece05aa4ef7823902a8fcdd36a0e530763e746866a199a6ad9e2114b35048895122ed4ba2d60a7206482aada315a6dbb8643f7ca65a1f6865a41c6e2459d5eef25450297f3b8b2f1dd499aa691a238cba1f3ef3ffc4ec8e46bcb9ca3c0ce0e60243a284c4ddb0855839f25da08ac4220394c0c46e5ab206c8d6ebb077ee4dbc50fd0ee95140c39dd6fa25b0f51e55c984f4a2dc5439379381fb271d81b7247a77054c359c5cbb1e589ca2029804c3761e33b0a45dac106933bb89dec25adabe34b6999d3501bbd63968f34d5f59a36f91acdefc913a6c27d813390920985cf9b638825868206bbda18343a3cf167d346bf65db0eb910b1b513f72269a77d9f3b6f84e2d398eb6cea5fc9b3d9363031718dd412a11d8f80d19ca07dc2046a5e667343912e978e54fd62021772e9078a8f620641ff66ecd0242e063ae053fee9948b9557fa6acce4e3a3acaec206af3c7e8164b1808f9720e864eda73db2bf4c0f05d55eab00da2f03f9fc732603bc79937b4d44e6d0aa5ca9e79e2be56596d5907f21f1b9048958de09fe66320ba1aba0f66ab68cd48a15a0f3c042b3f5f736d402a576aeaa968dd74ae3cdb6e8ae9090e2d62fffe1f72e478b62d178d8acd99f0a5289a5a7e22d24b8e0dc8af6a9bd2bbf747dbdda09c0821fd886fd7a375749316325f20d1cece02f78d760e6643a5356b65486b63068ddc92a4241a444394b171eae44874f5bbfa64ea91077d98d8b1f63daaf570854ab378f65cd6d5d1298880fc486683e0ebbf3ce062f2c14053d8f41aaaba1f65c506ea402b68df991831577b6676f7552091bdcf06c804c0eaa4b848f7a8e12b73ad607041dcc14ae295fdb08a1f9b2284b7832c1114c05c7aff74b5cc8c59b4508e50b47a82b8b528cc25008724678cbc02c91795d40d2515bd476ec575afa0fb220d0e0abd06990d0e5f902aa45877bf2e98e66d3552ec3d8c8f1e473fd737bf8a3e7868e85f70fb5ca0b227ddbe94cb1e6b13cda241acd12eb16986f51c74ebb9274e85b6fd16eccfcae0a92c914e630247be7d7e3d7cfa7945f29698686540b92a151f3d22e0caaa7190f1a516816f1a7ea54c28edca51d87226388058de29677443acebd22bdd8f5b9372acb146c"}}, &(0x7f00000019c0))
ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000540)={0x1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000000018000000000000000000000000000006000000000000000a0000000000000004000000000000000100000000000000030000000000000002000000000000009300000000000000b40c000000000000010000000000008003000000000000000800000000000000060000000000000003000000000000000400000000000000000000000000000039b50000000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000600000005000000010000000700000040000000effbffff5a0700000000000000000000000000000400000001000000000000000100000008003500234a00000100"/344]})
ioctl$UBLK_U_IO_FETCH_REQ(r0, 0xc0107520, &(0x7f0000002a00)={0x4, 0x492, 0x0, &(0x7f0000001a00)=@buf_max_buf="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"})
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0x1773dbb14e9c3948, 0xaaa2}}, 0x14)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000004180)={0x81, 0x2})
r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='aio\x00', 0x824844, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000480)={{0x7, 0x3, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7fffffffffffffff, 0x0, 0x3, 0xb03, 0x0, 0xffff, 0x100000001, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc0, 0x6, 0x6, 0x7e, 0x7, 0xfffffffffffffffb, 0x9, 0x6, 0x40, 0x9, 0x7, 0x5, 0x800, 0x3, 0x7, 0x8, 0xcb9, 0x800, 0x3, 0x9, 0x10001, 0x4, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x4, 0x2, 0x1, 0xaabe, 0x7, 0xfffffffffffffff7, 0x6, 0x10000, 0x8, 0x101, 0xc, 0x80, 0xd09, 0x5e, 0x8489, 0xffffffffffffffff, 0x0, 0xe, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xea, 0xd, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x7, 0xffffffffffffffff, 0x2, 0x0, 0x9, 0x6e5, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x8, 0xe, 0x100000001, 0x6, 0xce32, 0xfffffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff8, 0xd75, 0xffffffff, 0x9, 0x667c9b49, 0xea6, 0x1, 0x4df21eb6, 0x100000000000001, 0x6]})
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r6, 0x400000)
finit_module(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

3.530549684s ago: executing program 3 (id=2218):
setns(0xc9, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)="02", 0x1}], 0x1}, 0x40080)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x102, 0xe, 0x0, 0x7}, 0x1c)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x288101, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="6b45aafde84dd5b72044887f16aef1047680d017605f9dba9e8275ca01a335c973379ab3bf51e1008e820b1f8bf80706d6ec1d66f2b644de8b23d4b83a4241d763d1254470aee810e3dddc781d454a9cc1494340882418e626c62ed5f5ddedfc6bd54d51db653b0e743be2ea0d415400b53d53da6936069564f21fff27dcf7031b980d185bf8f5b3f293111269eaded28b5ec22b7f47b063c060608cd0181f", 0x9f)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x80, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x50, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "33eb6cdaf33ac427a728437b6873fe08"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa8f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x36}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d8d6f84f901680dba0e51b31cf7260ec"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000081)

3.49220241s ago: executing program 1 (id=2219):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x1f6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000094)
setxattr$incfs_metadata(&(0x7f0000000200)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240), &(0x7f0000000280)="9913701c04dfdbea0b40c0c7eb4862685c119b23fd5b6cc71fd81ded407386a2ccf246d94a5133d12a8d7b428be5596fdf308af6f396ca148c37392aec71515faae727e342ef1e4f290a1e67b565754f7151d39c013c7605e7553c00d8ac8b98ccef34064ae8a6308c80aa75ea00d30b02fe43", 0x73, 0x3)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f00000001c0)=0x1)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, 0x0)
r12 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0xb5315241, 0x0, 0xb, [{}, {}, {0xfffffffd}, {0x4000000}, {}, {}, {}, {0x0, 0x10000000}], 0x0, 0x0, 0x2}})
socket(0x25, 0x3, 0x9)
setgid(0xee00)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, 0x0, 0x0, r13})

3.344439327s ago: executing program 3 (id=2220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1fd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1ff)
unshare(0x400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsync(r0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x840000000002, 0x3, 0x100)
socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x68840, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket(0x840000000002, 0x3, 0xff)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r2, r1, 0x68, 0x1)

3.238879015s ago: executing program 3 (id=2221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1E', 0x2)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c1e877503633004b29b5a5251afd52c7d54bb60492b846b4cb715f2ae3cc42377b3fd4500a46a71459d69401b9c681967da3d76664a66bd4f8a1153d8f9abe19afe44aea56abafc3928ceeda34ce5be658793e2697d5ada662fc8e6378d3ab7b421517780498b0089355d5711c"}], 0x1000000000000308}, 0x20004040)

2.746451094s ago: executing program 3 (id=2222):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000050000fe3f0000000c0a010402000000000a0000060900030073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a00"/101], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)

2.506139942s ago: executing program 2 (id=2223):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a00010000000904010000010230000904010101010230000905010940000303100a252508000000030b0009040200000102300009040001"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
fcntl$setlease(r1, 0x403, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {0x40, 0x8, 0x2, 0x3}, 0x57, [0x7, 0x0, 0x0, 0x8, 0xffff8420, 0x7f, 0x1000, 0x8, 0x2, 0x4, 0x4, 0x7, 0x1, 0x2, 0x7000, 0x1ff, 0x0, 0x1, 0x3d, 0xd9, 0xa6, 0xe15c, 0x7, 0xc3, 0x7fff, 0x6, 0xffff53eb, 0x6, 0x8, 0x8, 0x7f, 0xb96, 0x3, 0x8001, 0xf3f, 0x3, 0x8b, 0x0, 0x3ff, 0x0, 0xffffffed, 0xfffffff6, 0x0, 0xb6fa, 0xf, 0x9, 0x58b, 0x6, 0x2, 0x200, 0x3, 0x8, 0x7, 0x4, 0x1, 0x8, 0x101, 0x0, 0x1e0d0a94, 0x4, 0x2, 0x8, 0x40, 0x9], [0xa2b0, 0xffffffff, 0x6, 0x6, 0x7, 0xfffffffe, 0x9, 0x1000, 0x1, 0x17, 0x2, 0x2, 0x2, 0x100, 0x800, 0x3, 0xf, 0x7, 0x39, 0xfffffffd, 0x8, 0x3, 0xb, 0x6, 0x100, 0x8, 0x0, 0x1, 0x4, 0x6, 0x90fe, 0x0, 0x5ffc, 0x40, 0x3, 0x7e9f, 0x5, 0x7fffffff, 0x200040, 0x5, 0x4, 0xffff, 0x3, 0xfffffffb, 0x400, 0x2, 0x9, 0x10001, 0x171, 0x6, 0xfffffe00, 0x2, 0x4, 0x7ff, 0x8, 0x48, 0x3, 0x5, 0xfffffffb, 0x6, 0x3, 0x0, 0x8, 0x7], [0x80, 0x2, 0x0, 0xe88, 0xfffffffa, 0x0, 0x2, 0x8, 0x5, 0x8, 0x7, 0x4, 0x5, 0x6, 0x5, 0x7f, 0x80000001, 0x6, 0x7fffffff, 0xc, 0x7, 0x5, 0x6, 0x8000, 0x2df, 0x80, 0x7f, 0x100, 0x814, 0x4, 0x10001, 0x1000, 0x8, 0x7a, 0x7, 0x7, 0x3, 0x800, 0x2, 0x8, 0x8, 0x80, 0x3, 0x1, 0x100, 0x2, 0x0, 0x3, 0x0, 0x7, 0xffffffff, 0x5, 0x10, 0x800, 0x9, 0xbc6, 0x9, 0x25c, 0x5, 0x3, 0x0, 0x5, 0x3, 0x9], [0x9, 0x35d, 0xfff, 0x3, 0xffffffff, 0x3ff, 0xfffffffc, 0x3, 0x8, 0x8001, 0x101, 0x82d8, 0x101, 0x1, 0x0, 0x4, 0x81, 0x5, 0x9, 0xc50, 0xfffffffa, 0x5, 0x3, 0xbb, 0x133b, 0x2, 0x1, 0x2, 0x8, 0x6, 0x4, 0x1, 0x8, 0x5b, 0x3, 0x5, 0x0, 0x0, 0x9, 0x7, 0x5, 0x5, 0x4, 0x7, 0xfff, 0x5, 0x1, 0x1, 0xbaf, 0xfffffff2, 0xe2c2, 0x7fff, 0x0, 0x18000, 0x1ff, 0x9, 0x6c, 0x1, 0x3, 0x22, 0xffffffff, 0x7, 0x7, 0x3b]}, 0x45c)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084)
r10 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, 0x0, 0x0, 0x2408c0cd, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4)
sendmmsg$inet6(r10, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000240)="a3", 0x1}], 0x1}}], 0x4, 0x84)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"})

2.423129129s ago: executing program 3 (id=2224):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001340)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) (async)
ftruncate(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x800) (async)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) (async)
r5 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x200, 0x7, 0x4, 0x7}, {0x9, 0x5, 0x9, 0x2, 0x28, 0x36, 0xf, 0xff}, {0x9, 0x5, 0xa, 0x3, 0x8, 0xc, 0x6, 0x52}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r5, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x21, 0xf4, {0xf4, 0xd, "5a04ec7a87a85d55421d486992df1e06e8e5bc68d12a19fe89ca460af253fe2892c73b7eff9bad2c993aca27f7d92cf0efd58230f5d1d8251417d9d8f4576eb5a36af052c1f4409f006ba39e44e49b5576f898a8362bca5a357869b622a5b6fcd6966ee7948be9b1b5cfb303ec7371515a50f72dce2fe30ce93234aba7eb76e4aa175d4a43c53cee8eb6f272c28cdcaa64cd65118aca8054fa011eacae24d87c8d8d5b50d3d2d3a6bdf7bba905b3b9d50c878ed33678df19feb8464942a8bb108b610ad8cd0a0e7ec72266b25c733c322b608ee0ebe9d777705b1895f6683c149aa71ccae99b5a4ce46ca2455eb54234b1d2"}}, &(0x7f00000002c0)={0x0, 0x3, 0x13, @string={0x13, 0x3, "68449e9cf910a0c85614545a659ac571d2"}}}, &(0x7f0000001300)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="201046000000920f2db4227ed6cf83a3baded1fa3196b81d9b93837289f61ce10abbcecd24b77a24f5f90f7b17f3a2d5d245c014722d174689853b9d99bce5380fc6cf9dd32abd9ff351f9a7c3ed23aff3d440511581e577d12d04caa12983edde16c798f2d751532b1350775cf0095465ebdc34e13e7a777419410d052f9bc3a06f777b2d6318ad740cbb"], &(0x7f0000000e80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000012c0)={0x21, 0x0, 0x4, "f626b96a"}}) (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) (async)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0x0) (async)
syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x20, 0x3, 0x3, 0x48}, {0x9, 0x5, 0x6, 0x2, 0x10, 0x6, 0x2, 0x6}, {0x9, 0x5, 0x1, 0x3, 0x3ff, 0x1, 0x81, 0x80}}}}}}]}}, 0x0) (async)
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r8, 0x0) (async)
renameat2(r1, &(0x7f0000000180)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00', 0x4)
ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) (async)
ppoll(&(0x7f0000000a80), 0x200000000000005c, 0x0, 0x0, 0x0)

2.262524297s ago: executing program 1 (id=2225):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xa0000)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x54, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0xffa6, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.355402906s ago: executing program 9 (id=2226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5ff, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002"], 0xec}}, 0x0)

1.167856909s ago: executing program 9 (id=2227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7f8, 0x2) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

946.556074ms ago: executing program 9 (id=2228):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c)
setsockopt(r0, 0x0, 0x487, &(0x7f0000000100), 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x4004, 0x1, 'queue0\x00', 0x4})
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r3, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)

794.233328ms ago: executing program 1 (id=2229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) (fail_nth: 6)

654.228648ms ago: executing program 2 (id=2230):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x58, 0x0, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9a, 0x2001, 0x0, 0x5}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000000)={{0x3a, @loopback, 0x4e20, 0x4, 'wlc\x00', 0x14, 0x2, 0x64}, {@empty, 0x4e22, 0x3, 0x1, 0x0, 0xd08}}, 0x44)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

598.30905ms ago: executing program 1 (id=2231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x214, 0xa, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_SET_DESC={0x1c8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3130000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84ae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x474}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x986}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x214}}, 0x10)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r1)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000000, 0x6, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00000000000000000800", [0x7a, 0xd]})
write(r2, &(0x7f0000000ac0)="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", 0xfffffde3)
pwrite64(0xffffffffffffffff, &(0x7f0000000380)="7a9425324ab2e922a644e6a5437b40c0ceb7c7e31f3fa91ff7e2e9e447e2be4d0c59ec2ab8c45449aae3967279a5a2f01a2e877d860f22e3594c656c1436b2de4fc82ddf3730ac7b98c4aa730489aaa6bbe52e1f607f9f30b91f782409335c4db3a4c2a215bdff62f0d8dc363be1569e44e73ec296367874e681212436724eafd44b6aeb18", 0x85, 0xd4)
r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8})
open_tree(0xffffffffffffff9c, 0x0, 0x9902)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x13, 0x4, 0x0, 0x1081}})

194.027498ms ago: executing program 2 (id=2232):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x100000000000eaf, 0x28d80)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x40, 0x35303553, 0x9, 0x500, [{}, {}, {0xfffffffd, 0x5}, {}, {}, {0x0, 0x10001}, {0xffffffff}, {0x0, 0x10000000}], 0x0, 0x0, 0x2, 0x2}})

80.627569ms ago: executing program 2 (id=2233):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup.cpu/memory.limit_in_bytes\x00'})
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x460102, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
r4 = syz_ublk_setup_io_uring(0x7e6a, &(0x7f00000008c0)={0x0, 0x1645, 0x8000, 0x3, 0x3e6}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000005480)=<r7=>0x0)
r8 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_SETXATTR={0x2a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x5, 0x2}, @fda={0x66646185, 0x7fffffffffffffff, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x130a, 0x2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="18010000420001000000000000000000030100000f0000002e000100d0d4c292c54d4e968899aabb08004500001c00000000010100000101010102020202d176b8d221031ba5000075c28d6f37575f5230a06233ab709131a88c3279ef2e004b6055e3b2a5aa405ff1ae09aa8a0d468fe969c047721dd615edc489856d05c5fa642eb43ef29dbb3379797bf8328051cf9fd82f31cc42f21a98a2a18a2b6253816b146f74fd7612220c9290fbd255bca88b37e9c130468f7f516932b26308659bff19315b86cd3bff1584b4775acf64591d49023ccae79586004027a513a09f6346ba85ad335ec5114069bc79a94e914e3d98c790b8095cdbd573ce7fd210ec5e0d04000380000000"], 0x118}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)={0x2e4, r10, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX]}, @ETHTOOL_A_FEATURES_WANTED={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x68, 0x5, "5b8fa3bebf6940900850ebfa365bc237088f0f810b580e8211ba7953a2b50827d74b631e9c3769bb416ff1fe255cf6f0278845f2085753e8285856ce98a188d63573d4ec08c3587963aeabfb20a767b7d96269e0343aeddb939fc0abe38733c226866aea"}, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "3ab22746bd2a8ba6ab71ae3c0f91c32be933eb61f18bd5606a0a25accc9de440afdfb3437405fb7c916f8781df"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0xe0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xce, 0x2, '\x00tV*\x06\v}4\x9f\x1ah\xc9/ \xe0\xa1\xcf9\x8d\xdbE\xe8j\xda&\xd61\xd5z\x16\x18\xca\xe2{\xdd\xe5\x10XgrR\x9e\xb9lzr\xc2\x06\x84f\xe5\x97\xbc\xc8e\xac[5P\xd5\x18\xaf\xbca\xa9K\x00\xea\xae\xcb`[w\x19\x1d8\xbe)RtHDI\xd1\xefj\xd60\x9c\x1aA\xfd\xc2\xbd\x06}\x0e\xfa\x1e&\xd9yL\xa0\x1a\xbe\x06\xd5b\x861\xb5Z#*\xf9\xe3\xcc\x8b\x16V\xe4\x0f\xca\"Y@\xf1\rd\xc5V\x85B$\x8cR\xe1\xd2\x04\x9c3\x11g\xcd\xc2\xff\xbd\xd4\xecr\x03\a\x81\x86\xf6\xff\xfe\xa3\x99\xbb\xcc\x9dtY\xec:\xef\x1e \xd9\x8d\xa3\b6\x1e\xd0\xc5\xe4A\v>A\x8c\xa5\xf2\xe7V\x8b\xcdj\xeaYs\xc4\x9b\xb2\xfd\x96\x83Zz'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\'\x1e'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004801}, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x167)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0)
write$P9_RREADLINK(r12, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11)
sendmmsg$unix(r11, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0x20008000)

0s ago: executing program 9 (id=2234):
r0 = semget$private(0x0, 0x0, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8892}, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
close(0x3)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
listen(r3, 0xfff)
semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000080)=""/88)
syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffff73, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES64=r3]}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="660fadf466b8d4000f00d0ea312b2baa030066b898000f00d00f09b8367100000f23d80f21f835800000d00f23f8c4e1fd2bb42500800000260fc7af00000000c4c19dd5080f01f6", 0x48}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000180)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@host, 0x3}, @any, 0x8, 0x0, 0xff, 0x100, 0x12, 0x3})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x5c}}, 0x48090)
r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

5.907197][T13926]  ? __fget_files+0x2a/0x420
[  455.907222][T13926]  ? __fget_files+0x2a/0x420
[  455.907244][T13926]  ? bpf_lsm_file_ioctl+0x9/0x20
[  455.907271][T13926]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  455.907295][T13926]  __se_sys_ioctl+0xfc/0x170
[  455.907317][T13926]  do_syscall_64+0x166/0x520
[  455.907335][T13926]  ? trace_irq_disable+0x3b/0x140
[  455.907357][T13926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.907385][T13926]  ? clear_bhb_loop+0x70/0xc0
[  455.907408][T13926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.907428][T13926] RIP: 0033:0x7f499579e159
[  455.907447][T13926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.907463][T13926] RSP: 002b:00007f4996621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  455.907483][T13926] RAX: ffffffffffffffda RBX: 00007f4995a25fa0 RCX: 00007f499579e159
[  455.907498][T13926] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  455.907512][T13926] RBP: 00007f499583506b R08: 0000000000000000 R09: 0000000000000000
[  455.907524][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.907537][T13926] R13: 00007f4995a26038 R14: 00007f4995a25fa0 R15: 00007ffe30d3e3d8
[  455.907568][T13926]  </TASK>
[  456.033066][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.489284][ T5756] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[  456.650169][ T5756] usb 5-1: New USB device found: idVendor=1532, idProduct=011d, bcdDevice=0.00
[  456.651495][ T5756] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  456.651523][ T5756] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.651543][ T5756] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  456.651567][ T5756] usb 5-1: config 0 interface 0 has no altsetting 0
[  456.651597][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.657262][ T5756] usb 5-1: config 0 descriptor??
[  456.789845][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  456.828747][ T1801] mos7840 3-1:0.0: required endpoints missing
[  456.858612][ T1801] usb 3-1: USB disconnect, device number 114
[  457.153708][T13760] veth0_vlan: entered promiscuous mode
[  457.182188][ T5756] input: HID 1532:011d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1532:011D.001D/input/input75
[  457.192619][T13760] veth1_vlan: entered promiscuous mode
[  457.247713][ T5275] 8021q: adding VLAN 0 to HW filter on device eth20
[  457.313690][T13760] veth0_macvtap: entered promiscuous mode
[  457.336067][T13760] veth1_macvtap: entered promiscuous mode
[  457.346772][ T5756] hid-rmi 0003:1532:011D.001D: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  457.373588][ T5756] usb 5-1: USB disconnect, device number 94
[  457.419087][T13760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.462716][T13760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.510828][T13966] FAULT_INJECTION: forcing a failure.
[  457.510828][T13966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.510860][T13966] CPU: 0 UID: 0 PID: 13966 Comm: syz.2.1993 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  457.510886][T13966] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  457.510894][T13966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  457.510905][T13966] Call Trace:
[  457.510913][T13966]  <TASK>
[  457.510922][T13966]  dump_stack_lvl+0xe8/0x150
[  457.510952][T13966]  should_fail_ex+0x3eb/0x540
[  457.510985][T13966]  _copy_to_user+0x31/0xb0
[  457.511007][T13966]  simple_read_from_buffer+0xe1/0x170
[  457.511118][T13966]  proc_fail_nth_read+0x1bb/0x230
[  457.511145][T13966]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.511170][T13966]  ? rw_verify_area+0x24a/0x4c0
[  457.511193][T13966]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.511215][T13966]  vfs_read+0x213/0xa80
[  457.511241][T13966]  ? __pfx___mutex_lock+0x10/0x10
[  457.511260][T13966]  ? __pfx_vfs_read+0x10/0x10
[  457.511290][T13966]  ? __fget_files+0x2a/0x420
[  457.511307][T13966]  ? __fget_files+0x3a2/0x420
[  457.511325][T13966]  ? __fget_files+0x2a/0x420
[  457.511346][T13966]  ? fdget+0x1ac/0x250
[  457.511367][T13966]  ksys_read+0x150/0x270
[  457.511386][T13966]  ? __pfx_ksys_read+0x10/0x10
[  457.511404][T13966]  ? trace_syscall_enter+0x58/0x110
[  457.511427][T13966]  ? rcu_is_watching+0x16/0xb0
[  457.511448][T13966]  ? trace_syscall_enter+0x58/0x110
[  457.511470][T13966]  do_syscall_64+0x166/0x520
[  457.511486][T13966]  ? trace_irq_disable+0x3b/0x140
[  457.511504][T13966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.511520][T13966]  ? clear_bhb_loop+0x70/0xc0
[  457.511540][T13966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.511557][T13966] RIP: 0033:0x7f3d2b55e98e
[  457.511573][T13966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.511588][T13966] RSP: 002b:00007f3d2c4bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  457.511606][T13966] RAX: ffffffffffffffda RBX: 00007f3d2c4bc6c0 RCX: 00007f3d2b55e98e
[  457.511620][T13966] RDX: 000000000000000f RSI: 00007f3d2c4bc0a0 RDI: 0000000000000005
[  457.511630][T13966] RBP: 00007f3d2c4bc090 R08: 0000000000000000 R09: 0000000000000000
[  457.511643][T13966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.511651][T13966] R13: 00007f3d2b826038 R14: 00007f3d2b825fa0 R15: 00007fff0782d6e8
[  457.511679][T13966]  </TASK>
[  457.589203][T13529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.592317][T13496] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.714472][T13529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.716078][T13496] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.815678][T13964] fido_id[13964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  458.023116][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.024095][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.144355][T13972] FAULT_INJECTION: forcing a failure.
[  458.144355][T13972] name failslab, interval 1, probability 0, space 0, times 0
[  458.144389][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.4.1995 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  458.144415][T13972] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  458.144423][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.144435][T13972] Call Trace:
[  458.144442][T13972]  <TASK>
[  458.144451][T13972]  dump_stack_lvl+0xe8/0x150
[  458.144481][T13972]  should_fail_ex+0x3eb/0x540
[  458.144513][T13972]  should_failslab+0xa8/0x100
[  458.144538][T13972]  __kmalloc_cache_noprof+0x9e/0x600
[  458.144558][T13972]  ? __kmalloc_cache_noprof+0x148/0x600
[  458.144575][T13972]  ? alloc_netdev_mqs+0xca0/0x12a0
[  458.144593][T13972]  ? alloc_netdev_mqs+0xca0/0x12a0
[  458.144618][T13972]  alloc_netdev_mqs+0xca0/0x12a0
[  458.144644][T13972]  tun_set_iff+0x51d/0xf20
[  458.144669][T13972]  __tun_chr_ioctl+0x7e5/0x1e70
[  458.144695][T13972]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  458.144710][T13972]  ? __fget_files+0x2a/0x420
[  458.144734][T13972]  ? __fget_files+0x2a/0x420
[  458.144752][T13972]  ? bpf_lsm_file_ioctl+0x9/0x20
[  458.144772][T13972]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  458.144796][T13972]  __se_sys_ioctl+0xfc/0x170
[  458.144822][T13972]  do_syscall_64+0x166/0x520
[  458.144839][T13972]  ? trace_irq_disable+0x3b/0x140
[  458.144859][T13972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.144876][T13972]  ? clear_bhb_loop+0x70/0xc0
[  458.144899][T13972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.144915][T13972] RIP: 0033:0x7fc50c59e159
[  458.144934][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.144950][T13972] RSP: 002b:00007fc50a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.144968][T13972] RAX: ffffffffffffffda RBX: 00007fc50c825fa0 RCX: 00007fc50c59e159
[  458.144981][T13972] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  458.144994][T13972] RBP: 00007fc50c63506b R08: 0000000000000000 R09: 0000000000000000
[  458.145005][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.145015][T13972] R13: 00007fc50c826038 R14: 00007fc50c825fa0 R15: 00007ffc038017f8
[  458.145046][T13972]  </TASK>
[  458.264917][T13528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.264938][T13528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.402299][T13975] FAULT_INJECTION: forcing a failure.
[  458.402299][T13975] name fail_iommufd, interval 1, probability 0, space 0, times 1
[  458.402330][T13975] CPU: 0 UID: 0 PID: 13975 Comm: syz.2.1996 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  458.402355][T13975] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  458.402362][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.402372][T13975] Call Trace:
[  458.402380][T13975]  <TASK>
[  458.402388][T13975]  dump_stack_lvl+0xe8/0x150
[  458.402416][T13975]  should_fail_ex+0x3eb/0x540
[  458.402446][T13975]  iommufd_get_object+0x78/0x4b0
[  458.402477][T13975]  ? __pfx_iommufd_get_object+0x10/0x10
[  458.402504][T13975]  ? tomoyo_path_number_perm+0x219/0x5f0
[  458.402532][T13975]  iommufd_ioas_allow_iovas+0x145/0x590
[  458.402559][T13975]  ? __pfx_iommufd_ioas_allow_iovas+0x10/0x10
[  458.402587][T13975]  ? __might_fault+0xaf/0x130
[  458.402614][T13975]  iommufd_fops_ioctl+0x465/0x600
[  458.402636][T13975]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  458.402657][T13975]  ? __fget_files+0x2a/0x420
[  458.402686][T13975]  ? bpf_lsm_file_ioctl+0x9/0x20
[  458.402707][T13975]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  458.402723][T13975]  __se_sys_ioctl+0xfc/0x170
[  458.402747][T13975]  do_syscall_64+0x166/0x520
[  458.402764][T13975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.402781][T13975]  ? clear_bhb_loop+0x70/0xc0
[  458.402801][T13975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.402819][T13975] RIP: 0033:0x7f3d2b59e159
[  458.402841][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.402856][T13975] RSP: 002b:00007f3d2c4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.402875][T13975] RAX: ffffffffffffffda RBX: 00007f3d2b825fa0 RCX: 00007f3d2b59e159
[  458.402888][T13975] RDX: 0000200000000180 RSI: 0000000000003b82 RDI: 0000000000000003
[  458.402900][T13975] RBP: 00007f3d2c4bc090 R08: 0000000000000000 R09: 0000000000000000
[  458.402911][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.402922][T13975] R13: 00007f3d2b826038 R14: 00007f3d2b825fa0 R15: 00007fff0782d6e8
[  458.402951][T13975]  </TASK>
[  458.949812][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2003'.
[  458.951707][T13996] PKCS7: Unsupported SignedData version
[  458.964584][ T5756] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  459.004149][T13994] kvm [13993]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xcd
[  459.113337][T14001] FAULT_INJECTION: forcing a failure.
[  459.113337][T14001] name failslab, interval 1, probability 0, space 0, times 0
[  459.113377][T14001] CPU: 1 UID: 0 PID: 14001 Comm: syz.7.2005 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  459.113409][T14001] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  459.113416][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.113429][T14001] Call Trace:
[  459.113438][T14001]  <TASK>
[  459.113447][T14001]  dump_stack_lvl+0xe8/0x150
[  459.113482][T14001]  should_fail_ex+0x3eb/0x540
[  459.113518][T14001]  should_failslab+0xa8/0x100
[  459.113547][T14001]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  459.113572][T14001]  ? kobject_set_name_vargs+0x61/0x110
[  459.113595][T14001]  ? kobject_set_name_vargs+0x61/0x110
[  459.113621][T14001]  kstrdup+0x42/0x100
[  459.113642][T14001]  kobject_set_name_vargs+0x61/0x110
[  459.113665][T14001]  dev_set_name+0xe2/0x140
[  459.113690][T14001]  ? __pfx_dev_set_name+0x10/0x10
[  459.113710][T14001]  ? __init_waitqueue_head+0xa8/0x150
[  459.113743][T14001]  ? device_initialize+0x394/0x470
[  459.113770][T14001]  netdev_register_kobject+0xb7/0x350
[  459.113800][T14001]  register_netdevice+0x142e/0x1eb0
[  459.113819][T14001]  ? alloc_netdev_mqs+0xd44/0x12a0
[  459.113853][T14001]  ? __pfx_register_netdevice+0x10/0x10
[  459.113872][T14001]  ? tun_net_initialize+0x199/0x460
[  459.113890][T14001]  ? __pfx_tun_net_initialize+0x10/0x10
[  459.113962][T14001]  ? alloc_netdev_mqs+0xe63/0x12a0
[  459.113988][T14001]  tun_set_iff+0x82b/0xf20
[  459.114013][T14001]  __tun_chr_ioctl+0x7e5/0x1e70
[  459.114038][T14001]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  459.114055][T14001]  ? __fget_files+0x2a/0x420
[  459.114078][T14001]  ? __fget_files+0x2a/0x420
[  459.114099][T14001]  ? bpf_lsm_file_ioctl+0x9/0x20
[  459.114123][T14001]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  459.114150][T14001]  __se_sys_ioctl+0xfc/0x170
[  459.114176][T14001]  do_syscall_64+0x166/0x520
[  459.114194][T14001]  ? trace_irq_disable+0x3b/0x140
[  459.114217][T14001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.114237][T14001]  ? clear_bhb_loop+0x70/0xc0
[  459.114261][T14001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.114281][T14001] RIP: 0033:0x7f499579e159
[  459.114299][T14001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.114314][T14001] RSP: 002b:00007f4996621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  459.114336][T14001] RAX: ffffffffffffffda RBX: 00007f4995a25fa0 RCX: 00007f499579e159
[  459.114352][T14001] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  459.114365][T14001] RBP: 00007f499583506b R08: 0000000000000000 R09: 0000000000000000
[  459.114378][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.114391][T14001] R13: 00007f4995a26038 R14: 00007f4995a25fa0 R15: 00007ffe30d3e3d8
[  459.114421][T14001]  </TASK>
[  459.190303][ T5756] usb 3-1: New USB device found: idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  459.257076][ T5756] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  459.257103][ T5756] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129
[  459.370274][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.370301][ T5756] usb 3-1: Product: syz
[  459.370315][ T5756] usb 3-1: Manufacturer: syz
[  459.370329][ T5756] usb 3-1: SerialNumber: syz
[  459.475906][ T5756] usb 3-1: config 0 descriptor??
[  459.760388][    T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  459.919000][    T9] usb 8-1: Using ep0 maxpacket: 32
[  459.921269][    T9] usb 8-1: New USB device found: idVendor=0d46, idProduct=0078, bcdDevice=d7.cd
[  459.922429][    T9] usb 8-1: config 8 has an invalid interface number: 186 but max is 2
[  459.922444][    T9] usb 8-1: config 8 has an invalid interface number: 3 but max is 2
[  459.922454][    T9] usb 8-1: config 8 has an invalid interface number: 77 but max is 2
[  459.922464][    T9] usb 8-1: config 8 has no interface number 0
[  459.922472][    T9] usb 8-1: config 8 has no interface number 1
[  459.922518][    T9] usb 8-1: config 8 has no interface number 2
[  459.922550][    T9] usb 8-1: config 8 interface 186 altsetting 10 endpoint 0xB has an invalid bInterval 248, changing to 11
[  459.922570][    T9] usb 8-1: config 8 interface 186 has no altsetting 0
[  459.922579][    T9] usb 8-1: config 8 interface 3 has no altsetting 0
[  459.922588][    T9] usb 8-1: config 8 interface 77 has no altsetting 0
[  459.925211][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.925233][    T9] usb 8-1: Product: syz
[  459.925242][    T9] usb 8-1: Manufacturer: syz
[  459.925250][    T9] usb 8-1: SerialNumber: syz
[  460.086642][T13984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.098965][T13984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.144796][    T9] kobil_sct 8-1:8.186: KOBIL USB smart card terminal converter detected
[  460.158361][    T9] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  460.171381][    T9] kobil_sct 8-1:8.3: required endpoints missing
[  460.181914][    T9] cdc_ether 8-1:8.77: bad CDC descriptors
[  460.182516][    T9] kobil_sct 8-1:8.77: required endpoints missing
[  460.193123][    T9] usb 8-1: USB disconnect, device number 24
[  460.209920][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  460.212440][    T9] kobil_sct 8-1:8.186: device disconnected
[  460.490862][T14031] FAULT_INJECTION: forcing a failure.
[  460.490862][T14031] name failslab, interval 1, probability 0, space 0, times 0
[  460.490890][T14031] CPU: 1 UID: 0 PID: 14031 Comm: syz.4.2015 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  460.490906][T14031] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  460.490911][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  460.490918][T14031] Call Trace:
[  460.490923][T14031]  <TASK>
[  460.490932][T14031]  dump_stack_lvl+0xe8/0x150
[  460.490966][T14031]  should_fail_ex+0x3eb/0x540
[  460.491003][T14031]  should_failslab+0xa8/0x100
[  460.491032][T14031]  __kmalloc_cache_noprof+0x9e/0x600
[  460.491055][T14031]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  460.491070][T14031]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  460.491081][T14031]  ? __xdp_rxq_info_reg+0x171/0x280
[  460.491100][T14031]  alloc_netdev_mqs+0xc2d/0x12a0
[  460.491128][T14031]  tun_set_iff+0x51d/0xf20
[  460.491156][T14031]  __tun_chr_ioctl+0x7e5/0x1e70
[  460.491183][T14031]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  460.491199][T14031]  ? __fget_files+0x2a/0x420
[  460.491217][T14031]  ? __fget_files+0x2a/0x420
[  460.491229][T14031]  ? bpf_lsm_file_ioctl+0x9/0x20
[  460.491243][T14031]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  460.491263][T14031]  __se_sys_ioctl+0xfc/0x170
[  460.491289][T14031]  do_syscall_64+0x166/0x520
[  460.491309][T14031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.491329][T14031]  ? clear_bhb_loop+0x70/0xc0
[  460.491353][T14031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.491371][T14031] RIP: 0033:0x7fc50c59e159
[  460.491383][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.491392][T14031] RSP: 002b:00007fc50a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  460.491405][T14031] RAX: ffffffffffffffda RBX: 00007fc50c825fa0 RCX: 00007fc50c59e159
[  460.491412][T14031] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  460.491423][T14031] RBP: 00007fc50c63506b R08: 0000000000000000 R09: 0000000000000000
[  460.491436][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.491448][T14031] R13: 00007fc50c826038 R14: 00007fc50c825fa0 R15: 00007ffc038017f8
[  460.491478][T14031]  </TASK>
[  460.643979][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  460.644109][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  460.644451][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  460.644534][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  460.644644][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  460.919121][    T9] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[  461.041029][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.041690][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.498992][ T5765] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  461.675157][ T5765] usb 8-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  461.693767][ T5756] mos7840 3-1:0.0: required endpoints missing
[  461.706051][ T5765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.706078][ T5765] usb 8-1: Product: syz
[  461.706093][ T5765] usb 8-1: Manufacturer: syz
[  461.706106][ T5765] usb 8-1: SerialNumber: syz
[  461.732567][ T5756] usb 3-1: USB disconnect, device number 115
[  461.734596][ T5765] usb 8-1: config 0 descriptor??
[  462.107524][T14055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.122914][T14055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.343367][ T5765] usb 8-1: Firmware version (0.0) predates our first public release.
[  462.343393][ T5765] usb 8-1: Please update to version 0.2 or newer
[  462.550863][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  462.596087][ T5765] usb 8-1: USB disconnect, device number 25
[  463.237281][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.280918][ T5756] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  463.424897][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.461905][ T5756] usb 3-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  463.464958][ T5756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.469276][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.469298][ T5756] usb 3-1: Product: syz
[  463.469309][ T5756] usb 3-1: Manufacturer: syz
[  463.469322][ T5756] usb 3-1: SerialNumber: syz
[  463.490103][T14080] kAFS: unable to lookup cell 'ÿ'
[  463.493658][T14082] kAFS: unable to lookup cell '(,c¾Ì'
[  463.535953][T14078] hpfs: hpfs_map_sector(): read error
[  463.574644][ T5756] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  463.684781][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.792145][ T4930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  463.807585][ T4930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  463.817583][ T4930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  463.826381][ T4930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  463.827473][ T4930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  463.983732][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.037182][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.042070][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.127599][ T5756] gspca_mr97310a: reg write [19] error -71
[  464.127713][ T5756] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71
[  464.152505][ T5756] usb 3-1: USB disconnect, device number 116
[  464.695041][T14115] FAULT_INJECTION: forcing a failure.
[  464.695041][T14115] name failslab, interval 1, probability 0, space 0, times 0
[  464.695073][T14115] CPU: 0 UID: 0 PID: 14115 Comm: syz.7.2039 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  464.695099][T14115] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  464.695107][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.695117][T14115] Call Trace:
[  464.695126][T14115]  <TASK>
[  464.695135][T14115]  dump_stack_lvl+0xe8/0x150
[  464.695164][T14115]  should_fail_ex+0x3eb/0x540
[  464.695198][T14115]  should_failslab+0xa8/0x100
[  464.695223][T14115]  __kmalloc_noprof+0xf9/0x710
[  464.695240][T14115]  ? __kmalloc_cache_noprof+0x148/0x600
[  464.695259][T14115]  ? alloc_pipe_info+0x1f4/0x4c0
[  464.695280][T14115]  ? alloc_pipe_info+0x1f4/0x4c0
[  464.695307][T14115]  alloc_pipe_info+0x1f4/0x4c0
[  464.695332][T14115]  splice_direct_to_actor+0xa41/0xcb0
[  464.695467][T14115]  ? rb_event_length+0xcd/0x400
[  464.695491][T14115]  ? rb_read_data_buffer+0x52f/0x5b0
[  464.695512][T14115]  ? __pfx_aa_file_perm+0x10/0x10
[  464.695533][T14115]  ? __pfx_direct_splice_actor+0x10/0x10
[  464.695551][T14115]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  464.695581][T14115]  do_splice_direct+0x195/0x290
[  464.695603][T14115]  ? __pfx_do_splice_direct+0x10/0x10
[  464.695624][T14115]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  464.695652][T14115]  ? rw_verify_area+0x203/0x4c0
[  464.695670][T14115]  ? fdget+0x1ac/0x250
[  464.695691][T14115]  do_sendfile+0x52e/0x7c0
[  464.695722][T14115]  ? __pfx_do_sendfile+0x10/0x10
[  464.695756][T14115]  ? __might_fault+0xaf/0x130
[  464.695787][T14115]  __se_sys_sendfile64+0xdf/0x1a0
[  464.695812][T14115]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  464.695835][T14115]  ? trace_syscall_enter+0x58/0x110
[  464.695859][T14115]  ? rcu_is_watching+0x16/0xb0
[  464.695881][T14115]  ? trace_syscall_enter+0x58/0x110
[  464.695906][T14115]  do_syscall_64+0x166/0x520
[  464.695924][T14115]  ? trace_irq_disable+0x3b/0x140
[  464.695944][T14115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.695963][T14115]  ? clear_bhb_loop+0x70/0xc0
[  464.695985][T14115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.696003][T14115] RIP: 0033:0x7f499579e159
[  464.696021][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.696036][T14115] RSP: 002b:00007f4996621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  464.696056][T14115] RAX: ffffffffffffffda RBX: 00007f4995a25fa0 RCX: 00007f499579e159
[  464.696070][T14115] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  464.696082][T14115] RBP: 00007f4996621090 R08: 0000000000000000 R09: 0000000000000000
[  464.696093][T14115] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001
[  464.696105][T14115] R13: 00007f4995a26038 R14: 00007f4995a25fa0 R15: 00007ffe30d3e3d8
[  464.696132][T14115]  </TASK>
[  465.070638][   T13] bridge_slave_1: left allmulticast mode
[  465.070665][   T13] bridge_slave_1: left promiscuous mode
[  465.070874][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.076683][   T13] bridge_slave_0: left allmulticast mode
[  465.076708][   T13] bridge_slave_0: left promiscuous mode
[  465.076915][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.526515][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.541330][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'.
[  465.558709][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.604308][   T13] bond0 (unregistering): Released all slaves
[  465.638389][T14128] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2043'.
[  465.751394][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  465.751514][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  465.909884][ T5620] Bluetooth: hci2: command tx timeout
[  466.140449][T14147] FAULT_INJECTION: forcing a failure.
[  466.140449][T14147] name failslab, interval 1, probability 0, space 0, times 0
[  466.140481][T14147] CPU: 1 UID: 0 PID: 14147 Comm: syz.7.2045 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  466.140507][T14147] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  466.140515][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.140525][T14147] Call Trace:
[  466.140533][T14147]  <TASK>
[  466.140541][T14147]  dump_stack_lvl+0xe8/0x150
[  466.140571][T14147]  should_fail_ex+0x3eb/0x540
[  466.140602][T14147]  should_failslab+0xa8/0x100
[  466.140635][T14147]  __kmalloc_cache_noprof+0x9e/0x600
[  466.140655][T14147]  ? __kmalloc_cache_noprof+0x148/0x600
[  466.140673][T14147]  ? alloc_netdev_mqs+0xca0/0x12a0
[  466.140692][T14147]  ? alloc_netdev_mqs+0xca0/0x12a0
[  466.140718][T14147]  alloc_netdev_mqs+0xca0/0x12a0
[  466.140743][T14147]  tun_set_iff+0x51d/0xf20
[  466.140767][T14147]  __tun_chr_ioctl+0x7e5/0x1e70
[  466.140792][T14147]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  466.140807][T14147]  ? __fget_files+0x2a/0x420
[  466.140830][T14147]  ? __fget_files+0x2a/0x420
[  466.140850][T14147]  ? bpf_lsm_file_ioctl+0x9/0x20
[  466.140873][T14147]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  466.140897][T14147]  __se_sys_ioctl+0xfc/0x170
[  466.140921][T14147]  do_syscall_64+0x166/0x520
[  466.140938][T14147]  ? trace_irq_disable+0x3b/0x140
[  466.140957][T14147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.140975][T14147]  ? clear_bhb_loop+0x70/0xc0
[  466.140996][T14147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.141014][T14147] RIP: 0033:0x7f499579e159
[  466.141031][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.141045][T14147] RSP: 002b:00007f4996621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  466.141064][T14147] RAX: ffffffffffffffda RBX: 00007f4995a25fa0 RCX: 00007f499579e159
[  466.141077][T14147] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  466.141088][T14147] RBP: 00007f499583506b R08: 0000000000000000 R09: 0000000000000000
[  466.141099][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.141109][T14147] R13: 00007f4995a26038 R14: 00007f4995a25fa0 R15: 00007ffe30d3e3d8
[  466.141136][T14147]  </TASK>
[  466.445685][T14152] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2048:14152
[  466.473107][T14152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'.
[  466.475421][T14152] xt_cluster: you have exceeded the maximum number of cluster nodes (100663328 > 32)
[  466.487365][T14156] FAULT_INJECTION: forcing a failure.
[  466.487365][T14156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.487395][T14156] CPU: 1 UID: 0 PID: 14156 Comm: syz.4.2049 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  466.487421][T14156] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  466.487428][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.487438][T14156] Call Trace:
[  466.487446][T14156]  <TASK>
[  466.487453][T14156]  dump_stack_lvl+0xe8/0x150
[  466.487482][T14156]  should_fail_ex+0x3eb/0x540
[  466.487513][T14156]  _copy_to_user+0x31/0xb0
[  466.487535][T14156]  simple_read_from_buffer+0xe1/0x170
[  466.487559][T14156]  proc_fail_nth_read+0x1bb/0x230
[  466.487583][T14156]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.487607][T14156]  ? rw_verify_area+0x24a/0x4c0
[  466.487628][T14156]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.487647][T14156]  vfs_read+0x213/0xa80
[  466.487671][T14156]  ? __pfx___mutex_lock+0x10/0x10
[  466.487690][T14156]  ? __pfx_vfs_read+0x10/0x10
[  466.487709][T14156]  ? __fget_files+0x2a/0x420
[  466.487727][T14156]  ? __fget_files+0x3a2/0x420
[  466.487742][T14156]  ? __fget_files+0x2a/0x420
[  466.487762][T14156]  ? fdget+0x1ac/0x250
[  466.487786][T14156]  ksys_read+0x150/0x270
[  466.487807][T14156]  ? __pfx_ksys_read+0x10/0x10
[  466.487825][T14156]  ? trace_syscall_enter+0x58/0x110
[  466.487848][T14156]  ? rcu_is_watching+0x16/0xb0
[  466.487866][T14156]  ? trace_syscall_enter+0x58/0x110
[  466.487890][T14156]  do_syscall_64+0x166/0x520
[  466.487905][T14156]  ? trace_irq_disable+0x3b/0x140
[  466.487921][T14156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.487939][T14156]  ? clear_bhb_loop+0x70/0xc0
[  466.487960][T14156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.487977][T14156] RIP: 0033:0x7fc50c55e98e
[  466.487992][T14156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  466.488007][T14156] RSP: 002b:00007fc50a7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  466.488027][T14156] RAX: ffffffffffffffda RBX: 00007fc50a7f66c0 RCX: 00007fc50c55e98e
[  466.488040][T14156] RDX: 000000000000000f RSI: 00007fc50a7f60a0 RDI: 0000000000000004
[  466.488050][T14156] RBP: 00007fc50a7f6090 R08: 0000000000000000 R09: 0000000000000000
[  466.488061][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.488074][T14156] R13: 00007fc50c826038 R14: 00007fc50c825fa0 R15: 00007ffc038017f8
[  466.488103][T14156]  </TASK>
[  466.993152][   T13] hsr_slave_0: left promiscuous mode
[  466.995236][   T13] hsr_slave_1: left promiscuous mode
[  466.998095][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.998117][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.000758][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.000777][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.094810][   T13] veth1_macvtap: left promiscuous mode
[  467.094853][   T13] veth0_macvtap: left promiscuous mode
[  467.094952][   T13] veth1_vlan: left promiscuous mode
[  467.095039][   T13] veth0_vlan: left promiscuous mode
[  467.121422][T14176] netlink: 'syz.2.2052': attribute type 10 has an invalid length.
[  467.871892][   T13] team0 (unregistering): Port device team_slave_1 removed
[  467.878410][   T13] team0 (unregistering): Port device team_slave_0 removed
[  467.989407][ T5620] Bluetooth: hci2: command tx timeout
[  468.037010][T14176] veth0_macvtap: entered allmulticast mode
[  468.053689][ T5275] 8021q: adding VLAN 0 to HW filter on device eth21
[  468.122161][T14194] netlink: 'syz.4.2055': attribute type 21 has an invalid length.
[  468.138426][T14194] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2055'.
[  468.261495][T14199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.366575][T14201] FAULT_INJECTION: forcing a failure.
[  468.366575][T14201] name failslab, interval 1, probability 0, space 0, times 0
[  468.366598][T14201] CPU: 1 UID: 0 PID: 14201 Comm: syz.4.2057 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  468.366614][T14201] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  468.366619][T14201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  468.366626][T14201] Call Trace:
[  468.366631][T14201]  <TASK>
[  468.366636][T14201]  dump_stack_lvl+0xe8/0x150
[  468.366655][T14201]  should_fail_ex+0x3eb/0x540
[  468.366674][T14201]  should_failslab+0xa8/0x100
[  468.366689][T14201]  __kmalloc_cache_noprof+0x9e/0x600
[  468.366702][T14201]  ? register_netdevice+0x579/0x1eb0
[  468.366713][T14201]  ? register_netdevice+0x579/0x1eb0
[  468.366727][T14201]  register_netdevice+0x579/0x1eb0
[  468.366737][T14201]  ? alloc_netdev_mqs+0xd44/0x12a0
[  468.366748][T14201]  ? alloc_netdev_mqs+0xd44/0x12a0
[  468.366758][T14201]  ? trace_kmalloc+0x2a/0xf0
[  468.366769][T14201]  ? alloc_netdev_mqs+0xd44/0x12a0
[  468.366779][T14201]  ? __kvmalloc_node_noprof+0x52a/0x820
[  468.366791][T14201]  ? __kmalloc_cache_noprof+0x31c/0x600
[  468.366803][T14201]  ? __pfx_register_netdevice+0x10/0x10
[  468.366814][T14201]  ? tun_net_initialize+0x199/0x460
[  468.366826][T14201]  ? __pfx_tun_net_initialize+0x10/0x10
[  468.366836][T14201]  ? alloc_netdev_mqs+0xe63/0x12a0
[  468.366850][T14201]  tun_set_iff+0x82b/0xf20
[  468.366863][T14201]  __tun_chr_ioctl+0x7e5/0x1e70
[  468.366878][T14201]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  468.366887][T14201]  ? __fget_files+0x2a/0x420
[  468.366900][T14201]  ? __fget_files+0x2a/0x420
[  468.366912][T14201]  ? bpf_lsm_file_ioctl+0x9/0x20
[  468.366925][T14201]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  468.366938][T14201]  __se_sys_ioctl+0xfc/0x170
[  468.366952][T14201]  do_syscall_64+0x166/0x520
[  468.366962][T14201]  ? trace_irq_disable+0x3b/0x140
[  468.366974][T14201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.366984][T14201]  ? clear_bhb_loop+0x70/0xc0
[  468.366999][T14201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.367010][T14201] RIP: 0033:0x7fc50c59e159
[  468.367021][T14201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.367030][T14201] RSP: 002b:00007fc50a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  468.367042][T14201] RAX: ffffffffffffffda RBX: 00007fc50c825fa0 RCX: 00007fc50c59e159
[  468.367049][T14201] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  468.367056][T14201] RBP: 00007fc50c63506b R08: 0000000000000000 R09: 0000000000000000
[  468.367063][T14201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.367069][T14201] R13: 00007fc50c826038 R14: 00007fc50c825fa0 R15: 00007ffc038017f8
[  468.367084][T14201]  </TASK>
[  468.389250][T14088] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.389927][T14088] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.390149][T14088] bridge_slave_0: entered allmulticast mode
[  468.395036][T14088] bridge_slave_0: entered promiscuous mode
[  468.406176][T14088] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.406277][T14088] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.406426][T14088] bridge_slave_1: entered allmulticast mode
[  468.411742][T14088] bridge_slave_1: entered promiscuous mode
[  468.543563][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.562167][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.761638][T14088] team0: Port device team_slave_0 added
[  468.767633][T14088] team0: Port device team_slave_1 added
[  468.818789][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.818938][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.818958][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.821486][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.821502][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.821525][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.014708][T14088] hsr_slave_0: entered promiscuous mode
[  469.015737][T14088] hsr_slave_1: entered promiscuous mode
[  469.447240][ T5275] 8021q: adding VLAN 0 to HW filter on device eth22
[  469.761755][T14088] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  469.780366][T14088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  469.781436][T14088] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  469.791735][T14088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  469.792848][T14088] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  469.801060][ T5756] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  469.803061][T14088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  469.805937][T14088] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  469.828304][T14088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  469.959035][ T5756] usb 8-1: Using ep0 maxpacket: 32
[  469.961769][ T5756] usb 8-1: unable to get BOS descriptor or descriptor too short
[  469.961819][ T5756] usb 8-1: New USB device found: idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  469.963156][ T5756] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  469.963179][ T5756] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  469.963196][ T5756] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  469.963213][ T5756] usb 8-1: config 128 has no interface number 0
[  469.963283][ T5756] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  469.963307][ T5756] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  469.963328][ T5756] usb 8-1: config 128 interface 127 has no altsetting 0
[  469.968013][ T5756] usb 8-1: string descriptor 0 read error: -22
[  469.968141][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.069108][ T5620] Bluetooth: hci2: command tx timeout
[  470.205161][T14088] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.247522][T14088] 8021q: adding VLAN 0 to HW filter on device team0
[  470.265668][T13529] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.265798][T13529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.292217][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.292380][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.340327][T14230] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  470.343282][ T1801] usb 8-1: USB disconnect, device number 26
[  470.465905][ T5275] 8021q: adding VLAN 0 to HW filter on device eth23
[  470.857956][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.872187][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  470.872304][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  470.872404][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  470.872497][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  471.186477][ T5275] 8021q: adding VLAN 0 to HW filter on device eth24
[  471.209145][ T5756] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  471.361394][ T5756] usb 3-1: New USB device found: idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  471.362716][ T5756] usb 3-1: config 8 has an invalid interface number: 177 but max is 0
[  471.362740][ T5756] usb 3-1: config 8 has no interface number 0
[  471.362779][ T5756] usb 3-1: config 8 interface 177 has no altsetting 0
[  471.362812][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.414587][ T5756] ir_toy 3-1:8.177: required endpoints not found
[  471.544814][T14088] veth0_vlan: entered promiscuous mode
[  471.570122][T14088] veth1_vlan: entered promiscuous mode
[  471.623998][T14277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.628488][T14277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.682198][T14277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.682668][T14277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.683210][T14088] veth0_macvtap: entered promiscuous mode
[  471.706139][T14088] veth1_macvtap: entered promiscuous mode
[  471.776483][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.814141][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.888166][T14277] gadgetfs: bound to dummy_udc driver
[  471.901667][T13529] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.901720][T13529] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.901749][T13529] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.991952][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.149518][ T5620] Bluetooth: hci2: command tx timeout
[  472.200603][T13496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.200626][T13496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.361344][T13496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.361363][T13496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.406197][T14305] program syz.7.2072 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.716663][T14314] tmpfs: Unknown parameter 'hh/r'
[  472.904537][T14322] FAULT_INJECTION: forcing a failure.
[  472.904537][T14322] name failslab, interval 1, probability 0, space 0, times 0
[  472.904576][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.9.2074 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  472.904607][T14322] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  472.904617][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  472.904630][T14322] Call Trace:
[  472.904639][T14322]  <TASK>
[  472.904650][T14322]  dump_stack_lvl+0xe8/0x150
[  472.904685][T14322]  should_fail_ex+0x3eb/0x540
[  472.904725][T14322]  should_failslab+0xa8/0x100
[  472.904757][T14322]  __kmalloc_cache_noprof+0x9e/0x600
[  472.904782][T14322]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  472.904805][T14322]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  472.904828][T14322]  ? __xdp_rxq_info_reg+0x171/0x280
[  472.904853][T14322]  alloc_netdev_mqs+0xc2d/0x12a0
[  472.904883][T14322]  tun_set_iff+0x51d/0xf20
[  472.904912][T14322]  __tun_chr_ioctl+0x7e5/0x1e70
[  472.904947][T14322]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  472.904965][T14322]  ? __fget_files+0x2a/0x420
[  472.904993][T14322]  ? __fget_files+0x2a/0x420
[  472.905018][T14322]  ? bpf_lsm_file_ioctl+0x9/0x20
[  472.905045][T14322]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  472.905072][T14322]  __se_sys_ioctl+0xfc/0x170
[  472.905099][T14322]  do_syscall_64+0x166/0x520
[  472.905118][T14322]  ? trace_irq_disable+0x3b/0x140
[  472.905143][T14322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.905164][T14322]  ? clear_bhb_loop+0x70/0xc0
[  472.905188][T14322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.905208][T14322] RIP: 0033:0x7f6a19f9e159
[  472.905227][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.905245][T14322] RSP: 002b:00007f6a1af46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  472.905267][T14322] RAX: ffffffffffffffda RBX: 00007f6a1a225fa0 RCX: 00007f6a19f9e159
[  472.905282][T14322] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  472.905294][T14322] RBP: 00007f6a1a03506b R08: 0000000000000000 R09: 0000000000000000
[  472.905307][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.905319][T14322] R13: 00007f6a1a226038 R14: 00007f6a1a225fa0 R15: 00007ffd7b67bd28
[  472.905352][T14322]  </TASK>
[  473.528535][T14335] netlink: 'syz.9.2076': attribute type 21 has an invalid length.
[  473.769011][T12566] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  473.942688][T12566] usb 10-1: unable to get BOS descriptor or descriptor too short
[  473.942734][T12566] usb 10-1: New USB device found: idVendor=1d50, idProduct=60c6, bcdDevice=a4.60
[  473.943834][T12566] usb 10-1: config 114 has an invalid interface number: 32 but max is 19
[  473.943857][T12566] usb 10-1: config 114 has 1 interface, different from the descriptor's value: 20
[  473.943877][T12566] usb 10-1: config 114 has no interface number 0
[  473.943913][T12566] usb 10-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  473.943937][T12566] usb 10-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 45
[  473.943960][T12566] usb 10-1: config 114 interface 32 has no altsetting 0
[  473.950255][T12566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.950278][T12566] usb 10-1: Product: syz
[  473.950290][T12566] usb 10-1: Manufacturer: syz
[  473.950303][T12566] usb 10-1: SerialNumber: syz
[  473.958991][T14335] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[  474.037717][T14345] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  474.037790][T14345] CIFS mount error: No usable UNC path provided in device string!
[  474.037790][T14345] 
[  474.038107][T14345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  474.117895][ T5767] usb 3-1: USB disconnect, device number 117
[  474.208687][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'.
[  474.366467][T12566] usb 10-1: USB disconnect, device number 2
[  474.757358][T14367] fuse: Bad value for 'fd'
[  474.762213][T14371] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2080'.
[  475.026113][T14379] FAULT_INJECTION: forcing a failure.
[  475.026113][T14379] name failslab, interval 1, probability 0, space 0, times 0
[  475.026147][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.9.2083 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  475.026176][T14379] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  475.026185][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.026197][T14379] Call Trace:
[  475.026206][T14379]  <TASK>
[  475.026215][T14379]  dump_stack_lvl+0xe8/0x150
[  475.026248][T14379]  should_fail_ex+0x3eb/0x540
[  475.026284][T14379]  should_failslab+0xa8/0x100
[  475.026314][T14379]  __kmalloc_cache_noprof+0x9e/0x600
[  475.026340][T14379]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  475.026364][T14379]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  475.026385][T14379]  ? __xdp_rxq_info_reg+0x171/0x280
[  475.026408][T14379]  alloc_netdev_mqs+0xc2d/0x12a0
[  475.026432][T14379]  tun_set_iff+0x51d/0xf20
[  475.026459][T14379]  __tun_chr_ioctl+0x7e5/0x1e70
[  475.026483][T14379]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  475.026498][T14379]  ? __fget_files+0x2a/0x420
[  475.026525][T14379]  ? __fget_files+0x2a/0x420
[  475.026548][T14379]  ? bpf_lsm_file_ioctl+0x9/0x20
[  475.026573][T14379]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  475.026608][T14379]  __se_sys_ioctl+0xfc/0x170
[  475.026633][T14379]  do_syscall_64+0x166/0x520
[  475.026653][T14379]  ? trace_irq_disable+0x3b/0x140
[  475.026676][T14379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.026696][T14379]  ? clear_bhb_loop+0x70/0xc0
[  475.026718][T14379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.026737][T14379] RIP: 0033:0x7f6a19f9e159
[  475.026755][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.026771][T14379] RSP: 002b:00007f6a1af46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.026792][T14379] RAX: ffffffffffffffda RBX: 00007f6a1a225fa0 RCX: 00007f6a19f9e159
[  475.026806][T14379] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005
[  475.026818][T14379] RBP: 00007f6a1a03506b R08: 0000000000000000 R09: 0000000000000000
[  475.026831][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.026843][T14379] R13: 00007f6a1a226038 R14: 00007f6a1a225fa0 R15: 00007ffd7b67bd28
[  475.026875][T14379]  </TASK>
[  475.120933][T12566] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  475.288954][T14382] FAULT_INJECTION: forcing a failure.
[  475.288954][T14382] name failslab, interval 1, probability 0, space 0, times 0
[  475.288987][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.7.2084 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  475.289013][T14382] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  475.289021][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.289032][T14382] Call Trace:
[  475.289040][T14382]  <TASK>
[  475.289048][T14382]  dump_stack_lvl+0xe8/0x150
[  475.289077][T14382]  should_fail_ex+0x3eb/0x540
[  475.289109][T14382]  should_failslab+0xa8/0x100
[  475.289134][T14382]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  475.289162][T14382]  ? __d_lookup+0x66/0x790
[  475.289182][T14382]  ? __d_alloc+0x37/0x6f0
[  475.289199][T14382]  ? __d_alloc+0x37/0x6f0
[  475.289224][T14382]  __d_alloc+0x37/0x6f0
[  475.289252][T14382]  d_alloc+0x4b/0x190
[  475.289270][T14382]  ? lookup_one_qstr_excl+0xc4/0x360
[  475.289293][T14382]  lookup_one_qstr_excl+0xd8/0x360
[  475.289320][T14382]  filename_create+0x20e/0x370
[  475.289342][T14382]  ? lockdep_hardirqs_on+0x7b/0x110
[  475.289457][T14382]  ? __pfx_filename_create+0x10/0x10
[  475.289486][T14382]  filename_mkdirat+0xd2/0x510
[  475.289514][T14382]  ? __pfx_filename_mkdirat+0x10/0x10
[  475.289539][T14382]  ? do_getname+0x151/0x250
[  475.289568][T14382]  __se_sys_mkdirat+0x35/0x150
[  475.289598][T14382]  do_syscall_64+0x166/0x520
[  475.289615][T14382]  ? trace_irq_disable+0x3b/0x140
[  475.289637][T14382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.289655][T14382]  ? clear_bhb_loop+0x70/0xc0
[  475.289678][T14382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.289697][T14382] RIP: 0033:0x7f499579e159
[  475.289714][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.289728][T14382] RSP: 002b:00007f4996621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  475.289746][T14382] RAX: ffffffffffffffda RBX: 00007f4995a25fa0 RCX: 00007f499579e159
[  475.289759][T14382] RDX: 00000000000001ed RSI: 0000200000000000 RDI: ffffffffffffff9c
[  475.289769][T14382] RBP: 00007f4996621090 R08: 0000000000000000 R09: 0000000000000000
[  475.289780][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.289791][T14382] R13: 00007f4995a26038 R14: 00007f4995a25fa0 R15: 00007ffe30d3e3d8
[  475.289820][T14382]  </TASK>
[  475.298406][T12566] usb 3-1: not running at top speed; connect to a high speed hub
[  475.298443][T12566] usb 3-1: New USB device found: idVendor=0499, idProduct=1018, bcdDevice=0.40
[  475.307089][T12566] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  475.320079][T12566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.320105][T12566] usb 3-1: Product: syz
[  475.320118][T12566] usb 3-1: Manufacturer: 핊蓭�컕Ͼሣ⿞턛꿂쪹ꋺ㼓瑕芞֘㓠ế⾿撲탔㡚毺섙䜣唪⫳牫岀눙�쮘ﰂ䄀掱喗刷닠甄퉿弗�椟꽸隈ဩ잎㵟哦䎕ﭺ⮩鳵澟騚�꺾컒횋밟顽煙헅剷嚕蹣軧톑䋣喈떮镺徠曌⥖쵤焙垺匔腺誀꾳�赦��섃᫩歘枈胴쯢㒥Ѡ皖鲎�絢赳�
[  475.320144][T12566] usb 3-1: SerialNumber: syz
[  475.678167][T12566] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  475.678614][T12566] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  475.702885][T12566] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  475.711885][T12566] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  475.735374][T12566] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  475.807610][T14389] sock: sock_set_timeout: `syz.9.2085' (pid 14389) tries to set negative timeout
[  475.938609][T12566] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  475.956901][T12566] usb 3-1: USB disconnect, device number 118
[  476.002162][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  476.002274][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  476.002365][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  476.002452][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  476.055158][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  476.541626][T14406] ubi0: attaching mtd0
[  476.608591][T14406] ubi0: scanning is finished
[  476.608690][T14406] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  477.096540][T14402] ftl_cs: FTL header not found.
[  477.172068][T14406] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  477.209825][T14427] FAULT_INJECTION: forcing a failure.
[  477.209825][T14427] name failslab, interval 1, probability 0, space 0, times 0
[  477.209858][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz.2.2092 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  477.209882][T14427] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  477.209890][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  477.209900][T14427] Call Trace:
[  477.209907][T14427]  <TASK>
[  477.209914][T14427]  dump_stack_lvl+0xe8/0x150
[  477.209943][T14427]  should_fail_ex+0x3eb/0x540
[  477.209973][T14427]  should_failslab+0xa8/0x100
[  477.209993][T14427]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  477.210017][T14427]  kmem_cache_alloc_noprof+0x9c/0x600
[  477.210039][T14427]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  477.210060][T14427]  ? kmem_cache_alloc_noprof+0x151/0x600
[  477.210086][T14427]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  477.210115][T14427]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  477.210148][T14427]  mmu_topup_memory_caches+0x21/0x1a0
[  477.210212][T14427]  kvm_mmu_load+0x9d/0x21e0
[  477.210226][T14427]  ? kvm_msr_allowed+0x9a/0x490
[  477.210250][T14427]  ? kvm_msr_allowed+0x3f4/0x490
[  477.210271][T14427]  ? kvm_msr_allowed+0x9a/0x490
[  477.210291][T14427]  ? kvm_msr_allowed+0x9a/0x490
[  477.210316][T14427]  ? kvm_apic_has_interrupt+0x740/0x770
[  477.210345][T14427]  vcpu_run+0x4f60/0x7a70
[  477.210400][T14427]  ? update_se+0x90/0x1080
[  477.210427][T14427]  ? vt_vcpu_pi_load+0x141/0x850
[  477.210480][T14427]  ? __pfx_vcpu_run+0x10/0x10
[  477.210505][T14427]  ? lock_acquire+0x115/0x350
[  477.210540][T14427]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  477.210570][T14427]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  477.210596][T14427]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  477.210628][T14427]  kvm_vcpu_ioctl+0xa61/0xfd0
[  477.210659][T14427]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  477.210704][T14427]  ? __fget_files+0x2a/0x420
[  477.210726][T14427]  ? __fget_files+0x2a/0x420
[  477.210744][T14427]  ? __fget_files+0x2a/0x420
[  477.210767][T14427]  ? bpf_lsm_file_ioctl+0x9/0x20
[  477.210799][T14427]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  477.210825][T14427]  __se_sys_ioctl+0xfc/0x170
[  477.210850][T14427]  do_syscall_64+0x166/0x520
[  477.210866][T14427]  ? trace_irq_disable+0x3b/0x140
[  477.210887][T14427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.210906][T14427]  ? clear_bhb_loop+0x70/0xc0
[  477.210928][T14427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.210947][T14427] RIP: 0033:0x7f3d2b59e159
[  477.210965][T14427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.210985][T14427] RSP: 002b:00007f3d2c47a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  477.211005][T14427] RAX: ffffffffffffffda RBX: 00007f3d2b826180 RCX: 00007f3d2b59e159
[  477.211019][T14427] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  477.211031][T14427] RBP: 00007f3d2c47a090 R08: 0000000000000000 R09: 0000000000000000
[  477.211043][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  477.211053][T14427] R13: 00007f3d2b826218 R14: 00007f3d2b826180 R15: 00007fff0782d6e8
[  477.211084][T14427]  </TASK>
[  477.729956][T14402] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[  477.752063][T14435] syzkaller1: entered promiscuous mode
[  477.752086][T14435] syzkaller1: entered allmulticast mode
[  477.818516][T14437] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.3828905459), cmd(2)
[  477.912857][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  477.912978][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  477.913070][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  478.359221][   T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  478.509865][   T46] usb 10-1: Using ep0 maxpacket: 16
[  478.512734][   T46] usb 10-1: unable to get BOS descriptor or descriptor too short
[  478.512785][   T46] usb 10-1: New USB device found: idVendor=0547, idProduct=7303, bcdDevice=7a.dd
[  478.514271][   T46] usb 10-1: config 1 has an invalid interface number: 239 but max is 0
[  478.514293][   T46] usb 10-1: config 1 has no interface number 0
[  478.514401][   T46] usb 10-1: config 1 interface 239 has no altsetting 0
[  478.518724][   T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.518749][   T46] usb 10-1: Product: syz
[  478.518762][   T46] usb 10-1: Manufacturer: syz
[  478.518776][   T46] usb 10-1: SerialNumber: syz
[  478.765998][   T46] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  478.802816][T14458] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  478.802841][T14458] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  478.804444][T14458] vhci_hcd vhci_hcd.0: Device attached
[  478.815049][T14449] CIFS: Attempting to mount //127.0.0.1/share
[  478.824738][   T46] usb 10-1: USB disconnect, device number 3
[  478.848129][T14449] CIFS: VFS: Error connecting to socket. Aborting operation.
[  478.848339][T14449] CIFS: VFS: cifs_mount failed w/return code = -101
[  479.059160][ T1224] usb 47-1: new high-speed USB device number 2 using vhci_hcd
[  479.190088][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  479.532529][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  479.532548][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  479.613839][T14459] vhci_hcd: connection reset by peer
[  479.619828][   T61] vhci_hcd vhci_hcd.7: stop threads
[  479.619854][   T61] vhci_hcd vhci_hcd.7: release socket
[  479.619904][   T61] vhci_hcd vhci_hcd.7: disconnect device
[  479.701442][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'.
[  480.093052][T14497] FAULT_INJECTION: forcing a failure.
[  480.093052][T14497] name failslab, interval 1, probability 0, space 0, times 0
[  480.093082][T14497] CPU: 1 UID: 0 PID: 14497 Comm: syz.9.2116 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  480.093098][T14497] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  480.093103][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  480.093109][T14497] Call Trace:
[  480.093114][T14497]  <TASK>
[  480.093119][T14497]  dump_stack_lvl+0xe8/0x150
[  480.093140][T14497]  should_fail_ex+0x3eb/0x540
[  480.093159][T14497]  should_failslab+0xa8/0x100
[  480.093173][T14497]  ? skb_clone+0x212/0x3a0
[  480.093185][T14497]  kmem_cache_alloc_noprof+0x9c/0x600
[  480.093201][T14497]  ? skb_clone+0x212/0x3a0
[  480.093214][T14497]  skb_clone+0x212/0x3a0
[  480.093225][T14497]  __netlink_deliver_tap+0x355/0x6e0
[  480.093243][T14497]  ? netlink_deliver_tap+0x2e/0x1b0
[  480.093255][T14497]  netlink_deliver_tap+0x19c/0x1b0
[  480.093266][T14497]  netlink_unicast+0x781/0x940
[  480.093309][T14497]  netlink_sendmsg+0x7c3/0xae0
[  480.093323][T14497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.093338][T14497]  ? apparmor_socket_sendmsg+0x98/0x360
[  480.093353][T14497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.093364][T14497]  sock_sendmsg_nosec+0x13a/0x180
[  480.093378][T14497]  sock_write_iter+0x2de/0x3e0
[  480.093390][T14497]  ? __pfx_sock_write_iter+0x10/0x10
[  480.093410][T14497]  do_iter_readv_writev+0x612/0x8c0
[  480.093425][T14497]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  480.093439][T14497]  ? bpf_lsm_file_permission+0x9/0x20
[  480.093452][T14497]  ? security_file_permission+0x75/0x260
[  480.093466][T14497]  ? rw_verify_area+0x203/0x4c0
[  480.093479][T14497]  vfs_writev+0x343/0x990
[  480.093496][T14497]  ? __pfx_vfs_writev+0x10/0x10
[  480.093516][T14497]  ? __fget_files+0x2a/0x420
[  480.093526][T14497]  ? __fget_files+0x3a2/0x420
[  480.093538][T14497]  ? fdget+0x1ac/0x250
[  480.093551][T14497]  do_writev+0x154/0x2e0
[  480.093566][T14497]  ? __pfx_do_writev+0x10/0x10
[  480.093582][T14497]  ? trace_syscall_enter+0x58/0x110
[  480.093597][T14497]  ? rcu_is_watching+0x16/0xb0
[  480.093610][T14497]  ? trace_syscall_enter+0x58/0x110
[  480.093624][T14497]  do_syscall_64+0x166/0x520
[  480.093634][T14497]  ? trace_irq_disable+0x3b/0x140
[  480.093646][T14497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.093656][T14497]  ? clear_bhb_loop+0x70/0xc0
[  480.093668][T14497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.093678][T14497] RIP: 0033:0x7f6a19f9e159
[  480.093689][T14497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.093698][T14497] RSP: 002b:00007f6a1af46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  480.093710][T14497] RAX: ffffffffffffffda RBX: 00007f6a1a225fa0 RCX: 00007f6a19f9e159
[  480.093717][T14497] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005
[  480.093724][T14497] RBP: 00007f6a1af46090 R08: 0000000000000000 R09: 0000000000000000
[  480.093730][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.093736][T14497] R13: 00007f6a1a226038 R14: 00007f6a1a225fa0 R15: 00007ffd7b67bd28
[  480.093752][T14497]  </TASK>
[  480.223248][   T46] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  480.371000][   T46] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  480.372426][   T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.372449][   T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  480.376086][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.376107][   T46] usb 3-1: Product: syz
[  480.376118][   T46] usb 3-1: Manufacturer: syz
[  480.376130][   T46] usb 3-1: SerialNumber: syz
[  480.605028][   T46] usb 3-1: cannot find UAC_HEADER
[  480.667773][   T46] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  480.669951][ T5695] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  480.674334][   T46] usb 3-1: USB disconnect, device number 119
[  480.698652][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.819599][ T5695] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  480.820478][ T5695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.820503][ T5695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.820515][ T5695] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  480.820539][ T5695] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.822248][ T5695] usb 10-1: config 0 descriptor??
[  481.111566][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  481.111678][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  481.111757][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  481.111849][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  481.232189][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232224][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232249][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232272][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232296][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232319][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232342][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232366][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232390][ T5695] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  481.232414][ T5695] plantronics 0003:047F:FFFF.001E: item fetching failed at offset 12/15
[  481.235289][ T5695] plantronics 0003:047F:FFFF.001E: parse failed
[  481.235386][ T5695] plantronics 0003:047F:FFFF.001E: probe with driver plantronics failed with error -22
[  481.437817][   T46] usb 10-1: USB disconnect, device number 4
[  484.164574][ T1224] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  485.343886][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  485.362310][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  485.370220][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  485.420711][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  485.441311][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  486.232110][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  486.232226][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  486.232315][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  486.232401][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  486.232489][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  486.981290][ T5695] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  487.129617][ T5695] usb 10-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[  487.132571][ T5695] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  487.132621][ T5695] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.132643][ T5695] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  487.136397][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.136422][ T5695] usb 10-1: Product: syz
[  487.136435][ T5695] usb 10-1: Manufacturer: syz
[  487.136449][ T5695] usb 10-1: SerialNumber: syz
[  487.209491][T12566] usb 3-1: new low-speed USB device number 120 using dummy_hcd
[  487.315805][T14510] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.315996][T14510] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.316124][T14510] bridge_slave_0: entered allmulticast mode
[  487.317769][T14510] bridge_slave_0: entered promiscuous mode
[  487.351562][T14510] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.351733][T14510] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.351907][T14510] bridge_slave_1: entered allmulticast mode
[  487.353653][T14510] bridge_slave_1: entered promiscuous mode
[  487.354296][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.354700][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.360833][T12566] usb 3-1: Invalid ep0 maxpacket: 64
[  487.429315][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.432132][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.480096][T14510] team0: Port device team_slave_0 added
[  487.483096][T14510] team0: Port device team_slave_1 added
[  487.489041][T12566] usb 3-1: new low-speed USB device number 121 using dummy_hcd
[  487.509788][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  487.541720][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.541738][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.541761][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.543676][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.543690][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.543711][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.588976][ T4930] Bluetooth: hci3: command tx timeout
[  487.639273][T12566] usb 3-1: Invalid ep0 maxpacket: 64
[  487.639539][T12566] usb usb3-port1: attempt power cycle
[  487.703463][T14510] hsr_slave_0: entered promiscuous mode
[  487.704424][T14510] hsr_slave_1: entered promiscuous mode
[  487.705129][T14510] debugfs: 'hsr0' already exists in 'hsr'
[  487.705147][T14510] Cannot create hsr debugfs directory
[  487.938286][ T5765] usb 10-1: USB disconnect, device number 5
[  487.979189][T12566] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[  488.005864][T12566] usb 3-1: Invalid ep0 maxpacket: 64
[  488.130714][T12566] usb 3-1: new low-speed USB device number 123 using dummy_hcd
[  488.154356][T12566] usb 3-1: Invalid ep0 maxpacket: 64
[  488.154716][T12566] usb usb3-port1: unable to enumerate USB device
[  488.379084][ T5765] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  488.530018][ T5765] usb 10-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  488.536031][ T5765] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  488.536064][ T5765] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.537250][ T5765] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  488.537274][ T5765] usb 10-1: Product: syz
[  488.585721][ T5765] usb 10-1: config 0 descriptor??
[  488.597901][ T5765] hub 10-1:0.0: USB hub found
[  488.790615][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  488.823406][ T5765] hub 10-1:0.0: 1 port detected
[  488.873670][T14510] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  488.887699][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  488.896541][T14510] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  488.909170][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  488.910558][T14510] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  488.933842][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.935292][T14510] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  488.950269][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  489.103218][T14510] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.137897][T14510] 8021q: adding VLAN 0 to HW filter on device team0
[  489.155854][T13496] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.156002][T13496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.188516][T13496] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.188632][T13496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.436524][ T1229] hub 10-1:0.0: activate --> -90
[  489.669472][ T4930] Bluetooth: hci3: command tx timeout
[  489.843607][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.844049][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.863980][T12566] usb 10-1: USB disconnect, device number 6
[  489.865914][ T1229] usb 10-1-port1: cannot reset (err = -71)
[  489.866351][ T1229] usb 10-1-port1: attempt power cycle
[  489.928220][T14510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.992766][T14510] veth0_vlan: entered promiscuous mode
[  490.013807][T14510] veth1_vlan: entered promiscuous mode
[  490.051009][T14510] veth0_macvtap: entered promiscuous mode
[  490.057180][T14510] veth1_macvtap: entered promiscuous mode
[  490.092974][T14510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.115869][T14510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.163677][T14640] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2129'.
[  490.191893][T13529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.192084][T13529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.192114][T13529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.192144][T13529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.360207][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.360227][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.439228][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.439250][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.758987][   T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  490.872707][ T1224] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  490.929836][   T10] usb 10-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  490.931603][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  490.931650][   T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  490.931670][   T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  490.931691][   T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  490.931715][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.090460][ T1224] usb 3-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00
[  491.092648][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.092750][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.092789][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.098480][ T1224] usb 3-1: config 0 descriptor??
[  491.351640][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  491.351784][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  491.351919][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  491.735646][ T1224] usb 3-1: language id specifier not provided by device, defaulting to English
[  491.749059][ T4930] Bluetooth: hci3: command tx timeout
[  492.022481][T14696] FAULT_INJECTION: forcing a failure.
[  492.022481][T14696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.022511][T14696] CPU: 1 UID: 0 PID: 14696 Comm: syz.3.2136 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  492.022537][T14696] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  492.022544][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  492.022555][T14696] Call Trace:
[  492.022562][T14696]  <TASK>
[  492.022570][T14696]  dump_stack_lvl+0xe8/0x150
[  492.022603][T14696]  should_fail_ex+0x3eb/0x540
[  492.022635][T14696]  _copy_to_user+0x31/0xb0
[  492.022674][T14696]  simple_read_from_buffer+0xe1/0x170
[  492.022699][T14696]  proc_fail_nth_read+0x1bb/0x230
[  492.022725][T14696]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  492.022750][T14696]  ? rw_verify_area+0x24a/0x4c0
[  492.022771][T14696]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  492.022792][T14696]  vfs_read+0x213/0xa80
[  492.022816][T14696]  ? __pfx___mutex_lock+0x10/0x10
[  492.022836][T14696]  ? __pfx_vfs_read+0x10/0x10
[  492.022856][T14696]  ? __fget_files+0x2a/0x420
[  492.022875][T14696]  ? __fget_files+0x3a2/0x420
[  492.022892][T14696]  ? __fget_files+0x2a/0x420
[  492.022913][T14696]  ? fdget+0x1ac/0x250
[  492.022937][T14696]  ksys_read+0x150/0x270
[  492.022957][T14696]  ? __pfx_ksys_read+0x10/0x10
[  492.022975][T14696]  ? trace_syscall_enter+0x58/0x110
[  492.022999][T14696]  ? rcu_is_watching+0x16/0xb0
[  492.023021][T14696]  ? trace_syscall_enter+0x58/0x110
[  492.023044][T14696]  do_syscall_64+0x166/0x520
[  492.023060][T14696]  ? trace_irq_disable+0x3b/0x140
[  492.023079][T14696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.023097][T14696]  ? clear_bhb_loop+0x70/0xc0
[  492.023116][T14696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.023134][T14696] RIP: 0033:0x7fc114d5e98e
[  492.023151][T14696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  492.023167][T14696] RSP: 002b:00007fc112ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  492.023187][T14696] RAX: ffffffffffffffda RBX: 00007fc112ff66c0 RCX: 00007fc114d5e98e
[  492.023201][T14696] RDX: 000000000000000f RSI: 00007fc112ff60a0 RDI: 0000000000000004
[  492.023212][T14696] RBP: 00007fc112ff6090 R08: 0000000000000000 R09: 0000000000000000
[  492.023224][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.023236][T14696] R13: 00007fc115026038 R14: 00007fc115025fa0 R15: 00007ffe9ee75748
[  492.023267][T14696]  </TASK>
[  492.142927][ T1224] uclogic 0003:256C:006D.001F: interface is invalid, ignoring
[  492.357925][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.360868][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.362118][T12566] usb 3-1: USB disconnect, device number 124
[  492.687446][T14715] kvm [14714]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x1
[  493.120897][T14735] FAULT_INJECTION: forcing a failure.
[  493.120897][T14735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.120930][T14735] CPU: 1 UID: 0 PID: 14735 Comm: syz.3.2145 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  493.120957][T14735] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  493.120966][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  493.120977][T14735] Call Trace:
[  493.120985][T14735]  <TASK>
[  493.120994][T14735]  dump_stack_lvl+0xe8/0x150
[  493.121025][T14735]  should_fail_ex+0x3eb/0x540
[  493.121059][T14735]  copy_folio_from_iter_atomic+0x45a/0x1a30
[  493.121094][T14735]  ? shmem_get_folio_gfp+0xbd5/0x1330
[  493.121124][T14735]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[  493.121154][T14735]  ? shmem_write_begin+0x1d8/0x330
[  493.121193][T14735]  generic_perform_write+0x5c7/0x8e0
[  493.121232][T14735]  ? __pfx_generic_perform_write+0x10/0x10
[  493.121259][T14735]  ? do_raw_spin_unlock+0xf5/0x200
[  493.121287][T14735]  ? mnt_put_write_access_file+0xc3/0x100
[  493.121314][T14735]  ? file_update_time_flags+0x3ab/0x440
[  493.121339][T14735]  shmem_file_write_iter+0xf8/0x120
[  493.121364][T14735]  vfs_write+0x612/0xba0
[  493.121391][T14735]  ? __pfx_vfs_write+0x10/0x10
[  493.121414][T14735]  ? __fget_files+0x3a2/0x420
[  493.121432][T14735]  ? __fget_files+0x2a/0x420
[  493.121456][T14735]  ? fdget+0x1ac/0x250
[  493.121483][T14735]  ksys_write+0x150/0x270
[  493.121505][T14735]  ? __pfx_ksys_write+0x10/0x10
[  493.121526][T14735]  ? trace_syscall_enter+0x58/0x110
[  493.121552][T14735]  ? rcu_is_watching+0x16/0xb0
[  493.121575][T14735]  ? trace_syscall_enter+0x58/0x110
[  493.121602][T14735]  do_syscall_64+0x166/0x520
[  493.121621][T14735]  ? trace_irq_disable+0x3b/0x140
[  493.121643][T14735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.121662][T14735]  ? clear_bhb_loop+0x70/0xc0
[  493.121690][T14735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.121709][T14735] RIP: 0033:0x7fc114d9e159
[  493.121727][T14735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.121743][T14735] RSP: 002b:00007fc112ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  493.121764][T14735] RAX: ffffffffffffffda RBX: 00007fc115025fa0 RCX: 00007fc114d9e159
[  493.121779][T14735] RDX: 000000000001000a RSI: 0000200000000380 RDI: 0000000000000005
[  493.121791][T14735] RBP: 00007fc114e3506b R08: 0000000000000000 R09: 0000000000000000
[  493.121804][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.121816][T14735] R13: 00007fc115026038 R14: 00007fc115025fa0 R15: 00007ffe9ee75748
[  493.121846][T14735]  </TASK>
[  493.561160][T14644] usb 10-1: USB disconnect, device number 11
[  493.829696][ T4930] Bluetooth: hci3: command tx timeout
[  494.188747][T14765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  495.331306][T12566] libceph: connect (1)[c::]:6789 error -101
[  495.336876][T12566] libceph: mon0 (1)[c::]:6789 connect error
[  495.350185][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.359836][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.365621][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.366016][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.378580][T14817] program syz.9.2162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  495.410109][T14805] ceph: No mds server is up or the cluster is laggy
[  495.412437][T12566] libceph: connect (1)[c::]:6789 error -101
[  495.412585][T12566] libceph: mon0 (1)[c::]:6789 connect error
[  495.622478][T12566] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  495.804886][T12566] usb 10-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08
[  495.815095][T12566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.815123][T12566] usb 10-1: Product: syz
[  495.815136][T12566] usb 10-1: Manufacturer: syz
[  495.815149][T12566] usb 10-1: SerialNumber: syz
[  495.986771][T14551] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  496.491180][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.491291][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.491379][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.492811][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.492920][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.493053][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.493142][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  496.757340][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  496.770589][   T27] usb 10-1: USB disconnect, device number 12
[  496.796154][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  496.808200][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  496.837946][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  496.846773][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  497.193615][T14551] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  497.193785][T14551] ath9k_htc: Failed to initialize the device
[  497.194685][   T27] usb 10-1: ath9k_htc: USB layer deinitialized
[  497.600768][T14858] kvm [14854]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  497.670702][T14873] nvme_tcp: malformed address passed: 127.0.0.1:44.0
[  497.747020][T13529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.185955][T13529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.435797][T13529] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.723980][T13529] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.949246][ T4930] Bluetooth: hci1: command tx timeout
[  498.951288][    T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  499.109490][    T9] usb 10-1: Using ep0 maxpacket: 32
[  499.110402][    T9] usb 10-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  499.110436][    T9] usb 10-1: too many configurations: 17, using maximum allowed: 8
[  499.111341][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.111362][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.111377][    T9] usb 10-1: config 0 has no interface number 0
[  499.112285][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.112304][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.112319][    T9] usb 10-1: config 0 has no interface number 0
[  499.113583][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.113604][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.113623][    T9] usb 10-1: config 0 has no interface number 0
[  499.114928][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.114950][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.114968][    T9] usb 10-1: config 0 has no interface number 0
[  499.116333][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.116355][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.116372][    T9] usb 10-1: config 0 has no interface number 0
[  499.135124][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.135151][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.135168][    T9] usb 10-1: config 0 has no interface number 0
[  499.145985][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.146009][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.146028][    T9] usb 10-1: config 0 has no interface number 0
[  499.200110][    T9] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  499.200139][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.200156][    T9] usb 10-1: config 0 has no interface number 0
[  499.286881][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.286908][    T9] usb 10-1: Product: syz
[  499.286923][    T9] usb 10-1: Manufacturer: syz
[  499.286937][    T9] usb 10-1: SerialNumber: syz
[  499.385568][    T9] usb 10-1: config 0 descriptor??
[  499.400648][    T9] etas_es58x 10-1:0.2: Starting syz syz (Serial Number syz)
[  499.625579][ T1224] usb 10-1: USB disconnect, device number 13
[  499.962148][T13529] bridge_slave_1: left allmulticast mode
[  499.962175][T13529] bridge_slave_1: left promiscuous mode
[  499.962379][T13529] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.994828][T13529] bridge_slave_0: left allmulticast mode
[  499.994854][T13529] bridge_slave_0: left promiscuous mode
[  499.995061][T13529] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.030313][T14644] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  500.210141][T14644] usb 4-1: Using ep0 maxpacket: 16
[  500.211020][T14644] usb 4-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00
[  500.212538][T14644] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  500.212561][T14644] usb 4-1: config 0 has no interface number 0
[  500.212606][T14644] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.212629][T14644] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.212648][T14644] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.212671][T14644] usb 4-1: config 0 interface 1 has no altsetting 0
[  500.212703][T14644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.228102][T14644] usb 4-1: config 0 descriptor??
[  500.244818][T14644] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count
[  500.697969][T14644] elan 0003:04F3:074D.0020: failed to start in urb: -90
[  500.758525][T13529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.778407][T13529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.798364][T13529] bond0 (unregistering): Released all slaves
[  500.894283][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.895086][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.921245][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[  501.029096][ T4930] Bluetooth: hci1: command tx timeout
[  501.035577][T14848] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.035748][T14848] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.036051][T14848] bridge_slave_0: entered allmulticast mode
[  501.038528][T14848] bridge_slave_0: entered promiscuous mode
[  501.060610][T14848] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.060764][T14848] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.063111][T14848] bridge_slave_1: entered allmulticast mode
[  501.068033][T14848] bridge_slave_1: entered promiscuous mode
[  501.256740][T14848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.271888][T14848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.418218][T14644] elan 0003:04F3:074D.0020: Set report error for parm 7: -71
[  501.441665][T14644] elan 0003:04F3:074D.0020: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1
[  501.441699][T14644] elan 0003:04F3:074D.0020: Input device is not registered
[  501.464772][T14644] elan 0003:04F3:074D.0020: probe with driver elan failed with error -119
[  501.475442][T14644] usb 4-1: USB disconnect, device number 30
[  501.502754][ T4930] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  501.556673][T14848] team0: Port device team_slave_0 added
[  501.560002][    T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  501.565914][T14848] team0: Port device team_slave_1 added
[  501.595966][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  501.596043][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  501.596096][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  501.596145][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  501.596194][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  501.600994][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  501.709130][    T9] usb 10-1: device descriptor read/64, error -71
[  501.731463][T14954] fido_id[14954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  501.959863][    T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  501.963936][T14848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.963953][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.963974][T14848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.025622][T13529] hsr_slave_0: left promiscuous mode
[  502.027963][T13529] hsr_slave_1: left promiscuous mode
[  502.042790][T13529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.042814][T13529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.058014][T13529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.058036][T13529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.090485][    T9] usb 10-1: device descriptor read/64, error -71
[  502.106609][T13529] veth1_macvtap: left promiscuous mode
[  502.106645][T13529] veth0_macvtap: left promiscuous mode
[  502.106768][T13529] veth1_vlan: left promiscuous mode
[  502.106830][T13529] veth0_vlan: left promiscuous mode
[  502.202401][    T9] usb usb10-port1: attempt power cycle
[  502.549078][    T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  502.569710][    T9] usb 10-1: device descriptor read/8, error -71
[  502.702072][T13529] team0 (unregistering): Port device team_slave_1 removed
[  502.725629][T13529] team0 (unregistering): Port device team_slave_0 removed
[  502.829263][    T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  502.849697][    T9] usb 10-1: device descriptor read/8, error -71
[  502.925375][T14848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.925391][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.925415][T14848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.927731][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[  502.969326][    T9] usb usb10-port1: unable to enumerate USB device
[  503.109246][ T4930] Bluetooth: hci1: command tx timeout
[  503.147500][T14848] hsr_slave_0: entered promiscuous mode
[  503.150558][T14848] hsr_slave_1: entered promiscuous mode
[  503.152413][T14848] debugfs: 'hsr0' already exists in 'hsr'
[  503.152433][T14848] Cannot create hsr debugfs directory
[  503.420196][T14994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2187'.
[  503.420224][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'.
[  503.420240][T14994] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2187'.
[  503.420256][T14994] netlink: 'syz.2.2187': attribute type 2 has an invalid length.
[  503.420268][T14994] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2187'.
[  503.471756][T14998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'.
[  503.639143][T13529] IPVS: stop unused estimator thread 0...
[  503.783363][T14644] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  503.941609][T14644] usb 4-1: New USB device found: idVendor=048d, idProduct=ce50, bcdDevice=0.00
[  503.943725][T14644] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  503.943750][T14644] usb 4-1: config 0 has no interface number 0
[  503.943788][T14644] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.943811][T14644] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.943843][T14644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.956938][T14644] usb 4-1: config 0 descriptor??
[  504.205263][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[  504.356494][T15023] FAULT_INJECTION: forcing a failure.
[  504.356494][T15023] name failslab, interval 1, probability 0, space 0, times 0
[  504.356523][T15023] CPU: 1 UID: 0 PID: 15023 Comm: syz.9.2192 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  504.356550][T15023] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  504.356558][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  504.356569][T15023] Call Trace:
[  504.356578][T15023]  <TASK>
[  504.356587][T15023]  dump_stack_lvl+0xe8/0x150
[  504.356617][T15023]  should_fail_ex+0x3eb/0x540
[  504.356651][T15023]  should_failslab+0xa8/0x100
[  504.356678][T15023]  __kmalloc_noprof+0xf9/0x710
[  504.356699][T15023]  ? handler_new_ref+0x244/0x930
[  504.356867][T15023]  ? handler_new_ref+0x244/0x930
[  504.356896][T15023]  handler_new_ref+0x244/0x930
[  504.356923][T15023]  ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10
[  504.356948][T15023]  v4l2_ctrl_new+0x1395/0x1820
[  504.356984][T15023]  v4l2_ctrl_new_custom+0x5b4/0x7f0
[  504.357030][T15023]  ? __pfx_v4l2_ctrl_new_custom+0x10/0x10
[  504.357060][T15023]  ? __kvmalloc_node_noprof+0x340/0x820
[  504.357087][T15023]  ? media_request_object_init+0x8d/0xf0
[  504.357164][T15023]  ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[  504.357190][T15023]  vim2m_open+0x190/0x640
[  504.357287][T15023]  v4l2_open+0x1bc/0x3a0
[  504.357342][T15023]  chrdev_open+0x4d9/0x600
[  504.357371][T15023]  ? __pfx_chrdev_open+0x10/0x10
[  504.357397][T15023]  ? devcgroup_check_permission+0x31/0x8f0
[  504.357423][T15023]  ? __pfx_chrdev_open+0x10/0x10
[  504.357447][T15023]  do_dentry_open+0x80e/0x1360
[  504.357483][T15023]  vfs_open_consume+0x4a/0x350
[  504.357507][T15023]  ? path_openat+0x148a/0x1da0
[  504.357532][T15023]  path_openat+0x14a6/0x1da0
[  504.357573][T15023]  do_file_open+0x23e/0x4a0
[  504.357601][T15023]  ? __pfx_do_file_open+0x10/0x10
[  504.357644][T15023]  ? _raw_spin_unlock+0x28/0x50
[  504.357669][T15023]  ? alloc_fd+0x6af/0x760
[  504.357707][T15023]  do_sys_openat2+0x115/0x200
[  504.357737][T15023]  ? __pfx_do_sys_openat2+0x10/0x10
[  504.357764][T15023]  ? trace_syscall_enter+0x58/0x110
[  504.357801][T15023]  __x64_sys_openat+0x138/0x170
[  504.357832][T15023]  do_syscall_64+0x166/0x520
[  504.357851][T15023]  ? trace_irq_disable+0x3b/0x140
[  504.357881][T15023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.357902][T15023]  ? clear_bhb_loop+0x70/0xc0
[  504.357925][T15023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.357945][T15023] RIP: 0033:0x7f6a19f9e159
[  504.357965][T15023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.357982][T15023] RSP: 002b:00007f6a1af46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  504.358004][T15023] RAX: ffffffffffffffda RBX: 00007f6a1a225fa0 RCX: 00007f6a19f9e159
[  504.358018][T15023] RDX: 0000000000000281 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  504.358032][T15023] RBP: 00007f6a1a03506b R08: 0000000000000000 R09: 0000000000000000
[  504.358045][T15023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  504.358056][T15023] R13: 00007f6a1a226038 R14: 00007f6a1a225fa0 R15: 00007ffd7b67bd28
[  504.358094][T15023]  </TASK>
[  504.637934][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'.
[  504.860471][T13528] IPVS: starting estimator thread 0...
[  504.965401][T15032] IPVS: using max 29 ests per chain, 69600 per kthread
[  505.140094][ T4930] Bluetooth: hci1: command tx timeout
[  505.184868][T14644] usbhid 4-1:0.1: can't add hid device: -71
[  505.184971][T14644] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  505.187739][T14644] usb 4-1: USB disconnect, device number 31
[  505.571623][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4
[  505.842201][T14848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  505.862265][T14848] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.864698][T14848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  505.887595][T14848] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.891549][T14848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  505.913333][T14848] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.926711][T14848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  505.962771][T14848] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  506.225403][T14848] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.269254][T14848] 8021q: adding VLAN 0 to HW filter on device team0
[  506.290028][T13529] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.290125][T13529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.311713][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.311812][ T4185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.345686][    T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  506.503135][    T9] usb 3-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  506.507201][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.507226][    T9] usb 3-1: Product: syz
[  506.507239][    T9] usb 3-1: Manufacturer: syz
[  506.507251][    T9] usb 3-1: SerialNumber: syz
[  506.519832][    T9] usb 3-1: config 0 descriptor??
[  506.620279][ T1224] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  506.620450][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  506.620661][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  506.776452][ T1224] usb 4-1: unable to get BOS descriptor or descriptor too short
[  506.776506][ T1224] usb 4-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  506.786186][ T1224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  506.786223][ T1224] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  506.786247][ T1224] usb 4-1: config 1 interface 0 has no altsetting 1
[  506.808881][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.808938][ T1224] usb 4-1: Product: syz
[  506.808952][ T1224] usb 4-1: Manufacturer: syz
[  506.808965][ T1224] usb 4-1: SerialNumber: syz
[  506.851080][ T1224] smsusb:smsusb_probe: board id=8, interface number 0
[  506.862698][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.863361][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.897247][    T9] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22
[  506.943636][    T9] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  506.964255][    T9] usb 3-1: USB disconnect, device number 125
[  507.035490][ T1224] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  507.035523][ T1224] smsusb 4-1:1.0: probe with driver smsusb failed with error -71
[  507.051278][ T1224] usb 4-1: USB disconnect, device number 32
[  507.489117][T14848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.577951][T14848] veth0_vlan: entered promiscuous mode
[  507.622482][T14848] veth1_vlan: entered promiscuous mode
[  507.700055][T14848] veth0_macvtap: entered promiscuous mode
[  507.716844][T14848] veth1_macvtap: entered promiscuous mode
[  507.743013][T14848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.763587][T14848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.926940][T13527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.926960][T13527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.928221][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.939020][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.939121][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.939152][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.966541][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  508.108453][T15118] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2205'.
[  508.137914][    T9] usb 4-1: Using ep0 maxpacket: 16
[  508.140328][    T9] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00
[  508.144538][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.144584][    T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.144606][    T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.144626][    T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  508.144648][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  508.144713][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.149065][    T9] usb 4-1: config 0 descriptor??
[  508.228467][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.228520][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.539114][T15129] FAULT_INJECTION: forcing a failure.
[  508.539114][T15129] name failslab, interval 1, probability 0, space 0, times 0
[  508.539178][T15129] CPU: 0 UID: 0 PID: 15129 Comm: syz.1.2163 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  508.539206][T15129] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  508.539213][T15129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  508.539224][T15129] Call Trace:
[  508.539232][T15129]  <TASK>
[  508.539241][T15129]  dump_stack_lvl+0xe8/0x150
[  508.539271][T15129]  should_fail_ex+0x3eb/0x540
[  508.539305][T15129]  should_failslab+0xa8/0x100
[  508.539329][T15129]  ? vm_area_alloc+0x24/0x140
[  508.539355][T15129]  kmem_cache_alloc_noprof+0x9c/0x600
[  508.539384][T15129]  ? vm_area_alloc+0x24/0x140
[  508.539416][T15129]  vm_area_alloc+0x24/0x140
[  508.539442][T15129]  mmap_region+0x182e/0x2c30
[  508.539466][T15129]  ? is_bpf_text_address+0x292/0x2b0
[  508.539498][T15129]  ? kernel_text_address+0xa5/0xe0
[  508.539523][T15129]  ? __lock_acquire+0x747/0x2de0
[  508.539550][T15129]  ? __pfx_mmap_region+0x10/0x10
[  508.539579][T15129]  ? stack_trace_save+0xa9/0x100
[  508.539607][T15129]  ? __pfx_stack_trace_save+0x10/0x10
[  508.539669][T15129]  ? mas_prev_slot+0xb76/0xbf0
[  508.539742][T15129]  ? __css_rstat_updated+0x237/0x540
[  508.539800][T15129]  ? __lock_acquire+0x747/0x2de0
[  508.539821][T15129]  ? cap_mmap_addr+0xaa/0xf0
[  508.539845][T15129]  ? bpf_lsm_mmap_addr+0x9/0x50
[  508.539866][T15129]  ? security_mmap_addr+0x71/0x240
[  508.539892][T15129]  ? shmem_mapping+0xd/0x50
[  508.539907][T15129]  ? memfd_check_seals_mmap+0xc5/0x220
[  508.540022][T15129]  do_mmap+0xe0a/0x1300
[  508.540055][T15129]  ? __pfx_do_mmap+0x10/0x10
[  508.540098][T15129]  ? aio_setup_ring+0x600/0xe20
[  508.540161][T15129]  ? down_write_killable+0x179/0x230
[  508.540186][T15129]  ? __pfx_down_write_killable+0x10/0x10
[  508.540214][T15129]  aio_setup_ring+0x8ac/0xe20
[  508.540252][T15129]  ? __pfx_aio_setup_ring+0x10/0x10
[  508.540287][T15129]  ioctx_alloc+0x313/0x830
[  508.540315][T15129]  __se_sys_io_setup+0x7b/0x1d0
[  508.540336][T15129]  do_syscall_64+0x166/0x520
[  508.540352][T15129]  ? trace_irq_disable+0x3b/0x140
[  508.540372][T15129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.540390][T15129]  ? clear_bhb_loop+0x70/0xc0
[  508.540412][T15129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.540429][T15129] RIP: 0033:0x7ffa5df9e159
[  508.540447][T15129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.540462][T15129] RSP: 002b:00007ffa5eef5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  508.540482][T15129] RAX: ffffffffffffffda RBX: 00007ffa5e225fa0 RCX: 00007ffa5df9e159
[  508.540495][T15129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  508.540507][T15129] RBP: 00007ffa5eef5090 R08: 0000000000000000 R09: 0000000000000000
[  508.540518][T15129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  508.540530][T15129] R13: 00007ffa5e226038 R14: 00007ffa5e225fa0 R15: 00007ffea870aae8
[  508.540560][T15129]  </TASK>
[  508.600265][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600298][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600324][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600349][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600373][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600398][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600423][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600449][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600474][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600498][    T9] logitech-djreceiver 0003:046D:C53A.0021: unknown main item tag 0x0
[  508.600564][    T9] logitech-djreceiver 0003:046D:C53A.0021: unbalanced collection at end of report description
[  508.607666][    T9] logitech-djreceiver 0003:046D:C53A.0021: logi_dj_probe: parse failed
[  508.607846][    T9] logitech-djreceiver 0003:046D:C53A.0021: probe with driver logitech-djreceiver failed with error -22
[  508.792884][T15111] netlink: 'syz.3.2204': attribute type 10 has an invalid length.
[  508.804273][T15111] syz_tun: entered promiscuous mode
[  508.855676][T15111] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  508.897623][T15111] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma?
[  508.900930][ T1224] usb 4-1: USB disconnect, device number 33
[  509.318966][T15152] netlink: 'syz.1.2212': attribute type 5 has an invalid length.
[  509.383231][ T1229] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  509.436787][T13496] IPVS: starting estimator thread 0...
[  509.519316][ T1229] usb 10-1: device descriptor read/64, error -71
[  509.539616][T15157] IPVS: using max 31 ests per chain, 74400 per kthread
[  509.576764][T15161] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2214'.
[  509.766558][ T1229] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  509.902320][ T1229] usb 10-1: device descriptor read/64, error -71
[  510.010104][ T1229] usb usb10-port1: attempt power cycle
[  510.037898][  T991] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  510.185447][  T991] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  510.186787][  T991] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[  510.186811][  T991] usb 3-1: config 1 has no interface number 0
[  510.190425][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.190449][  T991] usb 3-1: Product: syz
[  510.190461][  T991] usb 3-1: Manufacturer: syz
[  510.190474][  T991] usb 3-1: SerialNumber: syz
[  510.251656][  T991] usb 3-1: 3:0 : does not exist
[  510.251680][  T991] usb 3-1: 3:0 : does not exist
[  510.361623][ T1229] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  510.381717][ T1229] usb 10-1: device descriptor read/8, error -71
[  510.533976][    T9] usb 3-1: USB disconnect, device number 126
[  510.635740][ T1229] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  510.651507][T15198] syz.3.2221: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  510.651605][T15198] CPU: 0 UID: 0 PID: 15198 Comm: syz.3.2221 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  510.651632][T15198] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  510.651643][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  510.651655][T15198] Call Trace:
[  510.651663][T15198]  <TASK>
[  510.651672][T15198]  dump_stack_lvl+0xe8/0x150
[  510.651702][T15198]  warn_alloc+0x24d/0x270
[  510.651729][T15198]  ? __pfx_warn_alloc+0x10/0x10
[  510.651759][T15198]  ? add_lock_to_list+0xc7/0x100
[  510.651791][T15198]  __vmalloc_node_range_noprof+0x12c/0x16f0
[  510.651841][T15198]  ? lock_acquire+0x115/0x350
[  510.651870][T15198]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  510.651902][T15198]  ? down_write+0x166/0x200
[  510.651922][T15198]  ? __pfx_down_write+0x10/0x10
[  510.651941][T15198]  ? disksize_store+0x121/0x3e0
[  510.652058][T15198]  vzalloc_noprof+0xb2/0xe0
[  510.652085][T15198]  ? disksize_store+0x121/0x3e0
[  510.652105][T15198]  disksize_store+0x121/0x3e0
[  510.652123][T15198]  ? sysfs_kf_write+0x166/0x260
[  510.652146][T15198]  ? __pfx_sysfs_kf_write+0x10/0x10
[  510.652164][T15198]  kernfs_fop_write_iter+0x3a4/0x540
[  510.652197][T15198]  vfs_write+0x612/0xba0
[  510.652225][T15198]  ? __pfx_vfs_write+0x10/0x10
[  510.652249][T15198]  ? __fget_files+0x3a2/0x420
[  510.652267][T15198]  ? __fget_files+0x2a/0x420
[  510.652289][T15198]  ? fdget+0x1ac/0x250
[  510.652314][T15198]  ksys_write+0x150/0x270
[  510.652336][T15198]  ? __pfx_ksys_write+0x10/0x10
[  510.652365][T15198]  ? trace_syscall_enter+0x58/0x110
[  510.652391][T15198]  ? rcu_is_watching+0x16/0xb0
[  510.652414][T15198]  ? trace_syscall_enter+0x58/0x110
[  510.652442][T15198]  do_syscall_64+0x166/0x520
[  510.652459][T15198]  ? trace_irq_disable+0x3b/0x140
[  510.652480][T15198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.652499][T15198]  ? clear_bhb_loop+0x70/0xc0
[  510.652521][T15198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.652539][T15198] RIP: 0033:0x7fc114d9e159
[  510.652557][T15198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.652572][T15198] RSP: 002b:00007fc112ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  510.652591][T15198] RAX: ffffffffffffffda RBX: 00007fc115025fa0 RCX: 00007fc114d9e159
[  510.652605][T15198] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003
[  510.652617][T15198] RBP: 00007fc114e3506b R08: 0000000000000000 R09: 0000000000000000
[  510.652630][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.652641][T15198] R13: 00007fc115026038 R14: 00007fc115025fa0 R15: 00007ffe9ee75748
[  510.652673][T15198]  </TASK>
[  510.680236][ T1229] usb 10-1: device descriptor read/8, error -71
[  510.709293][T15198] Mem-Info:
[  510.709311][T15198] active_anon:24059 inactive_anon:0 isolated_anon:0
[  510.709311][T15198]  active_file:8308 inactive_file:14717 isolated_file:0
[  510.709311][T15198]  unevictable:0 dirty:47 writeback:0
[  510.709311][T15198]  slab_reclaimable:6916 slab_unreclaimable:97055
[  510.709311][T15198]  mapped:25506 shmem:17028 pagetables:1857
[  510.709311][T15198]  sec_pagetables:0 bounce:0
[  510.709311][T15198]  kernel_misc_reclaimable:0
[  510.709311][T15198]  free:1313437 free_pcp:10825 free_cma:0
[  510.709369][T15198] Node 0 active_anon:96236kB inactive_anon:0kB active_file:33232kB inactive_file:58656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102024kB dirty:184kB writeback:0kB shmem:68112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:7276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  510.709420][T15198] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  510.709468][T15198] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.709525][T15198] lowmem_reserve[]: 0 2481 2483 2483 2483
[  510.709559][T15198] Node 0 DMA32 free:1294992kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96236kB inactive_anon:0kB active_file:33232kB inactive_file:58656kB unevictable:0kB writepending:184kB zspages:0kB present:3129332kB managed:2541488kB mlocked:0kB bounce:0kB free_pcp:43300kB local_pcp:22252kB free_cma:0kB
[  510.709612][T15198] lowmem_reserve[]: 0 0 1 1 1
[  510.709643][T15198] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.709693][T15198] lowmem_reserve[]: 0 0 0 0 0
[  510.709725][T15198] Node 1 Normal free:3943396kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.709775][T15198] lowmem_reserve[]: 0 0 0 0 0
[  510.709806][T15198] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  510.709944][T15198] Node 0 DMA32: 1014*4kB (UME) 683*8kB (UME) 485*16kB (UME) 548*32kB (UME) 267*64kB (UME) 119*128kB (UME) 72*256kB (UME) 28*512kB (ME) 15*1024kB (UME) 6*2048kB (UME) 285*4096kB (UM) = 1294912kB
[  510.721417][T15198] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  510.721508][T15198] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 4*16kB (UM) 3*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 960*4096kB (UM) = 3943396kB
[  510.723362][T15198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.723378][T15198] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  510.723393][T15198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.723408][T15198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  510.723424][T15198] 40049 total pagecache pages
[  510.723447][T15198] 0 pages in swap cache
[  510.723455][T15198] Free swap  = 124996kB
[  510.723462][T15198] Total swap = 124996kB
[  510.723475][T15198] 2097051 pages RAM
[  510.723482][T15198] 0 pages HighMem/MovableOnly
[  510.723489][T15198] 429710 pages reserved
[  510.723496][T15198] 0 pages cma reserved
[  510.793482][ T1229] usb usb10-port1: unable to enumerate USB device
[  510.915391][T15173] Invalid ELF header magic: != ELF
[  511.619760][ T1229] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[  511.638732][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  511.638855][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  511.638954][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  511.639047][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  511.674611][    T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  511.692849][T14551] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  511.790225][ T1229] usb 3-1: unable to get BOS descriptor or descriptor too short
[  511.790874][ T1229] usb 3-1: not running at top speed; connect to a high speed hub
[  511.790905][ T1229] usb 3-1: New USB device found: idVendor=0582, idProduct=008d, bcdDevice=0.40
[  511.794129][ T1229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.796799][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.796822][ T1229] usb 3-1: Product: syz
[  511.796835][ T1229] usb 3-1: Manufacturer: syz
[  511.796848][ T1229] usb 3-1: SerialNumber: syz
[  511.838754][ T1229] snd-ua101 3-1:1.1: sample format descriptor not found
[  511.838781][ T1229] snd-ua101 3-1:1.0: invalid bNumEndpoints
[  511.850122][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  511.850885][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  511.850914][    T9] usb 2-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  511.860453][    T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  511.860480][    T9] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2
[  511.868935][    T9] usb 2-1: string descriptor 0 read error: -22
[  511.869062][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.910873][T14551] usb 4-1: Using ep0 maxpacket: 8
[  511.931612][T14551] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  511.947933][T14551] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  511.947984][T14551] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  511.948004][T14551] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  511.948025][T14551] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  511.948044][T14551] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.948080][T14551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.102227][    T9] snd-usb-6fire 2-1:2.0: unable to receive device firmware state.
[  512.102258][    T9] snd-usb-6fire 2-1:2.0: probe with driver snd-usb-6fire failed with error -121
[  512.259190][T14551] usb 4-1: usb_control_msg returned -32
[  512.259236][T14551] usbtmc 4-1:16.0: can't read capabilities
[  512.278916][T15230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.279382][T15230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.317911][    T9] usb 2-1: USB disconnect, device number 18
[  512.457116][  T991] usb 3-1: USB disconnect, device number 127
[  513.154470][T15259] loop7: detected capacity change from 0 to 16384
[  513.244005][T15257] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  513.487573][T15261] loop7: detected capacity change from 16384 to 0
[  513.513360][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  513.743191][T15275] binder: Failure in copy_transaction_data: EINVAL
[  513.745367][T15275] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2233'.
[  513.756482][T15275] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2233'.
[  513.793472][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2234'.
[  513.861063][T15275] 
[  513.863454][T15275] ======================================================
[  513.870487][T15275] WARNING: possible circular locking dependency detected
[  513.877523][T15275] syzkaller #0 Tainted: G             L     Y
[  513.883632][T15275] ------------------------------------------------------
[  513.890691][T15275] syz.2.2233/15275 is trying to acquire lock:
[  513.896815][T15275] ffffffff9002fdc8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_store+0xe4/0xb00
[  513.908315][T15275] 
[  513.908315][T15275] but task is already holding lock:
[  513.915690][T15275] ffff888025c8f670 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430
[  513.925034][T15275] 
[  513.925034][T15275] which lock already depends on the new lock.
[  513.925034][T15275] 
[  513.935454][T15275] 
[  513.935454][T15275] the existing dependency chain (in reverse order) is:
[  513.944476][T15275] 
[  513.944476][T15275] -> #4 (&p->frag_sem){++++}-{4:4}:
[  513.952005][T15275]        down_write_killable+0xa1/0x230
[  513.957580][T15275]        configfs_rmdir+0x3b0/0x950
[  513.962947][T15275]        vfs_rmdir+0x3e6/0x6a0
[  513.967735][T15275]        filename_rmdir+0x292/0x520
[  513.972959][T15275]        __se_sys_rmdir+0x2e/0x140
[  513.978094][T15275]        do_syscall_64+0x166/0x520
[  513.983224][T15275]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.989660][T15275] 
[  513.989660][T15275] -> #3 (&sb->s_type->i_mutex_key#32){++++}-{4:4}:
[  513.998375][T15275]        down_write+0x91/0x200
[  514.003156][T15275]        configfs_depend_item_unlocked+0x153/0x420
[  514.009686][T15275]        usbg_make_tpg+0x1e0/0x550
[  514.014901][T15275]        target_fabric_make_tpg+0xa8/0x6d0
[  514.020813][T15275]        configfs_mkdir+0x4f6/0x9e0
[  514.026015][T15275]        vfs_mkdir+0x40e/0x630
[  514.030805][T15275]        filename_mkdirat+0x285/0x510
[  514.036191][T15275]        __se_sys_mkdirat+0x35/0x150
[  514.041470][T15275]        do_syscall_64+0x166/0x520
[  514.046584][T15275]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.053022][T15275] 
[  514.053022][T15275] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[  514.060952][T15275]        __mutex_lock+0x197/0x15a0
[  514.066086][T15275]        tcm_alloc_inst+0x65/0x1a0
[  514.071226][T15275]        usb_get_function_instance+0xe3/0x2f0
[  514.077431][T15275]        function_make+0x127/0x360
[  514.082650][T15275]        configfs_mkdir+0x4f6/0x9e0
[  514.087872][T15275]        vfs_mkdir+0x40e/0x630
[  514.092661][T15275]        filename_mkdirat+0x285/0x510
[  514.098056][T15275]        __se_sys_mkdirat+0x35/0x150
[  514.103366][T15275]        do_syscall_64+0x166/0x520
[  514.108494][T15275]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.114920][T15275] 
[  514.114920][T15275] -> #1 (func_lock){+.+.}-{4:4}:
[  514.122057][T15275]        __mutex_lock+0x197/0x15a0
[  514.127171][T15275]        usb_get_function_instance+0x2e/0x2f0
[  514.133242][T15275]        function_make+0x127/0x360
[  514.138367][T15275]        configfs_mkdir+0x4f6/0x9e0
[  514.143581][T15275]        vfs_mkdir+0x40e/0x630
[  514.148359][T15275]        filename_mkdirat+0x285/0x510
[  514.153731][T15275]        __se_sys_mkdirat+0x35/0x150
[  514.159026][T15275]        do_syscall_64+0x166/0x520
[  514.164136][T15275]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.170551][T15275] 
[  514.170551][T15275] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  514.178814][T15275]        __lock_acquire+0x164c/0x2de0
[  514.184189][T15275]        lock_acquire+0x115/0x350
[  514.189210][T15275]        __mutex_lock+0x197/0x15a0
[  514.194321][T15275]        uvcg_extension_ba_source_id_store+0xe4/0xb00
[  514.201178][T15275]        configfs_write_iter+0x337/0x430
[  514.206814][T15275]        vfs_write+0x612/0xba0
[  514.211576][T15275]        ksys_write+0x150/0x270
[  514.216420][T15275]        do_syscall_64+0x166/0x520
[  514.221539][T15275]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.227965][T15275] 
[  514.227965][T15275] other info that might help us debug this:
[  514.227965][T15275] 
[  514.238194][T15275] Chain exists of:
[  514.238194][T15275]   gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#32 --> &p->frag_sem
[  514.238194][T15275] 
[  514.252723][T15275]  Possible unsafe locking scenario:
[  514.252723][T15275] 
[  514.260199][T15275]        CPU0                    CPU1
[  514.265631][T15275]        ----                    ----
[  514.271016][T15275]   rlock(&p->frag_sem);
[  514.275393][T15275]                                lock(&sb->s_type->i_mutex_key#32);
[  514.283390][T15275]                                lock(&p->frag_sem);
[  514.290067][T15275]   lock(gadget_subsys.su_mutex);
[  514.295091][T15275] 
[  514.295091][T15275]  *** DEADLOCK ***
[  514.295091][T15275] 
[  514.303302][T15275] locks held by syz.2.2233/15275: 4, last CPU#0:
[  514.309685][T15275]  #0: ffff88807790a7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160
[  514.318782][T15275]  #1: ffff88801d7ba460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  514.327743][T15275]  #2: ffff88802b7d1a80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430
[  514.337760][T15275]  #3: ffff888025c8f670 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430
[  514.347513][T15275] 
[  514.347513][T15275] stack backtrace:
[  514.353409][T15275] CPU: 0 UID: 0 PID: 15275 Comm: syz.2.2233 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  514.364424][T15275] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  514.370212][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  514.380259][T15275] Call Trace:
[  514.383533][T15275]  <TASK>
[  514.386453][T15275]  dump_stack_lvl+0xe8/0x150
[  514.391039][T15275]  print_circular_bug+0x2e2/0x300
[  514.396061][T15275]  check_noncircular+0x12f/0x150
[  514.400995][T15275]  __lock_acquire+0x164c/0x2de0
[  514.405844][T15275]  ? unwind_get_return_address+0x4d/0x90
[  514.411468][T15275]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  514.417618][T15275]  ? arch_stack_walk+0xfb/0x150
[  514.422466][T15275]  lock_acquire+0x115/0x350
[  514.426985][T15275]  ? uvcg_extension_ba_source_id_store+0xe4/0xb00
[  514.433399][T15275]  __mutex_lock+0x197/0x15a0
[  514.437981][T15275]  ? uvcg_extension_ba_source_id_store+0xe4/0xb00
[  514.444390][T15275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.450457][T15275]  ? uvcg_extension_ba_source_id_store+0xe4/0xb00
[  514.456875][T15275]  ? __pfx___mutex_lock+0x10/0x10
[  514.461896][T15275]  ? __might_fault+0xaf/0x130
[  514.466573][T15275]  ? _copy_from_iter+0x21b/0x1660
[  514.471675][T15275]  uvcg_extension_ba_source_id_store+0xe4/0xb00
[  514.477912][T15275]  ? lock_acquire+0x115/0x350
[  514.482588][T15275]  ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10
[  514.489430][T15275]  ? down_read+0x2b9/0x320
[  514.493842][T15275]  ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10
[  514.500770][T15275]  configfs_write_iter+0x337/0x430
[  514.505881][T15275]  vfs_write+0x612/0xba0
[  514.510121][T15275]  ? __pfx_vfs_write+0x10/0x10
[  514.514883][T15275]  ? __fget_files+0x3a2/0x420
[  514.519553][T15275]  ? __fget_files+0x2a/0x420
[  514.524135][T15275]  ? fdget+0x1ac/0x250
[  514.528197][T15275]  ksys_write+0x150/0x270
[  514.532526][T15275]  ? __pfx_ksys_write+0x10/0x10
[  514.537367][T15275]  ? trace_syscall_enter+0x58/0x110
[  514.542563][T15275]  ? rcu_is_watching+0x16/0xb0
[  514.547327][T15275]  ? trace_syscall_enter+0x58/0x110
[  514.552525][T15275]  do_syscall_64+0x166/0x520
[  514.557108][T15275]  ? trace_irq_disable+0x3b/0x140
[  514.562125][T15275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.568185][T15275]  ? clear_bhb_loop+0x70/0xc0
[  514.572858][T15275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.578743][T15275] RIP: 0033:0x7f3d2b59e159
[  514.583154][T15275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.602751][T15275] RSP: 002b:00007f3d2c4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  514.611160][T15275] RAX: ffffffffffffffda RBX: 00007f3d2b825fa0 RCX: 00007f3d2b59e159
[  514.619122][T15275] RDX: 0000000000000011 RSI: 0000200000000440 RDI: 0000000000000009
[  514.627091][T15275] RBP: 00007f3d2b63506b R08: 0000000000000000 R09: 0000000000000000
[  514.635055][T15275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.643021][T15275] R13: 00007f3d2b826038 R14: 00007f3d2b825fa0 R15: 00007fff0782d6e8
[  514.650998][T15275]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  514.735747][   T10] usb 4-1: USB disconnect, device number 34
[  514.830229][    T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  514.974751][T14510] bond0: (slave syz_tun): Releasing backup interface
[  515.089354][   T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.177651][   T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.258120][   T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.372802][   T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.583116][   T61] bridge_slave_1: left allmulticast mode
[  515.583139][   T61] bridge_slave_1: left promiscuous mode
[  515.583336][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.604649][   T61] bridge_slave_0: left allmulticast mode
[  515.604674][   T61] bridge_slave_0: left promiscuous mode
[  515.604843][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.795290][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.809116][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.810116][   T61] bond0 (unregistering): Released all slaves
[  516.083060][   T61] hsr_slave_0: left promiscuous mode
[  516.083484][   T61] hsr_slave_1: left promiscuous mode
[  516.083982][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.083998][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.084488][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.084503][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.127137][   T61] veth1_macvtap: left promiscuous mode
[  516.127163][   T61] veth0_macvtap: left promiscuous mode
[  516.127230][   T61] veth1_vlan: left promiscuous mode
[  516.127269][   T61] veth0_vlan: left promiscuous mode
[  516.287547][   T61] team0 (unregistering): Port device team_slave_1 removed
[  516.308186][   T61] team0 (unregistering): Port device team_slave_0 removed
[  516.674572][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  516.674660][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  516.674728][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  516.750596][   T61] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.809679][   T61] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.856631][   T61] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.913683][   T61] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.993253][   T61] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.023264][   T61] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.071073][   T61] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.114170][   T61] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.220424][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5
[  517.236058][   T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.280352][   T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.322895][   T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.353246][   T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.464455][   T61] bridge_slave_1: left allmulticast mode
[  517.464480][   T61] bridge_slave_1: left promiscuous mode
[  517.464625][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.468159][   T61] bridge_slave_0: left allmulticast mode
[  517.468182][   T61] bridge_slave_0: left promiscuous mode
[  517.468312][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.500353][   T61] bridge_slave_1: left allmulticast mode
[  517.500374][   T61] bridge_slave_1: left promiscuous mode
[  517.500522][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.513557][   T61] bridge_slave_0: left allmulticast mode
[  517.513578][   T61] bridge_slave_0: left promiscuous mode
[  517.513711][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.545115][   T61] bridge_slave_1: left allmulticast mode
[  517.545140][   T61] bridge_slave_1: left promiscuous mode
[  517.545290][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.546749][   T61] bridge_slave_0: left allmulticast mode
[  517.546769][   T61] bridge_slave_0: left promiscuous mode
[  517.546885][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.678672][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.689103][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  517.699984][   T61] bond0 (unregistering): Released all slaves
[  517.728700][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  517.742002][   T61] bond0 (unregistering): Released all slaves
[  517.773753][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.775333][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  517.776125][   T61] bond0 (unregistering): Released all slaves
[  517.778132][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6
[  517.892488][   T61] tipc: Left network mode
[  518.131489][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8
[  518.315064][   T61] hsr_slave_0: left promiscuous mode
[  518.315489][   T61] hsr_slave_1: left promiscuous mode
[  518.316022][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.316039][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.316517][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.316532][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.319340][   T61] hsr_slave_0: left promiscuous mode
[  518.319759][   T61] hsr_slave_1: left promiscuous mode
[  518.333857][   T61] hsr_slave_0: left promiscuous mode
[  518.341838][   T61] hsr_slave_1: left promiscuous mode
[  518.342420][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.342437][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.349403][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.349422][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.385572][   T61] veth1_macvtap: left promiscuous mode
[  518.385601][   T61] veth0_macvtap: left promiscuous mode
[  518.385675][   T61] veth1_vlan: left promiscuous mode
[  518.385723][   T61] veth0_vlan: left promiscuous mode
[  518.414419][   T61] veth1_macvtap: left promiscuous mode
[  518.414467][   T61] veth1_vlan: left promiscuous mode
[  518.414528][   T61] veth0_vlan: left promiscuous mode
[  518.436084][   T61] veth1_macvtap: left promiscuous mode
[  518.436113][   T61] veth0_macvtap: left promiscuous mode
[  518.436173][   T61] veth1_vlan: left promiscuous mode
[  518.436232][   T61] veth0_vlan: left promiscuous mode
[  518.635051][   T61] team0 (unregistering): Port device team_slave_1 removed
[  518.646744][   T61] team0 (unregistering): Port device team_slave_0 removed
[  518.768925][   T61] team0 (unregistering): Port device team_slave_1 removed
[  518.771736][   T61] team0 (unregistering): Port device team_slave_0 removed
[  518.891088][   T61] team0 (unregistering): Port device team_slave_1 removed
[  518.893964][   T61] team0 (unregistering): Port device team_slave_0 removed
[  518.929969][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7
[  519.315629][ T5275] 8021q: adding VLAN 0 to HW filter on device eth26
[  519.610112][   T61] IPVS: stop unused estimator thread 0...
[  519.618653][   T61] IPVS: stop unused estimator thread 0...
[  519.619411][   T61] IPVS: stop unused estimator thread 0...
[  519.724865][ T5275] 8021q: adding VLAN 0 to HW filter on device eth25
[  519.939302][ T5275] 8021q: adding VLAN 0 to HW filter on device eth27
[  520.155713][ T5275] 8021q: adding VLAN 0 to HW filter on device eth28
[  521.628624][ T5275] 8021q: adding VLAN 0 to HW filter on device eth29
[  521.725767][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.725819][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.725853][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.725887][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.725921][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.725954][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.726109][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.726137][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.726164][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  521.726198][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  522.367507][ T5275] 8021q: adding VLAN 0 to HW filter on device eth30
[  522.570366][ T5275] 8021q: adding VLAN 0 to HW filter on device eth31
[  522.800562][ T5275] 8021q: adding VLAN 0 to HW filter on device eth32
[  523.024011][ T5275] 8021q: adding VLAN 0 to HW filter on device eth33
[  523.230529][ T5275] 8021q: adding VLAN 0 to HW filter on device eth34
[  523.442623][ T5275] 8021q: adding VLAN 0 to HW filter on device eth35
[  523.649814][ T5275] 8021q: adding VLAN 0 to HW filter on device eth36