last executing test programs:

15m2.438289484s ago: executing program 32 (id=367):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8}) (fail_nth: 1)

12m56.305409183s ago: executing program 33 (id=922):
truncate(0x0, 0x6)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa)
write(r1, &(0x7f0000000140)='n', 0x1)

12m26.687143197s ago: executing program 34 (id=1014):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x80)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000780)={0x1, 0x1})

11m49.477814562s ago: executing program 35 (id=1269):
getpgrp(0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (fail_nth: 4)
mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0)

10m0.890501125s ago: executing program 36 (id=1904):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x6, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000340)={r2, 0x10, 0x3})

6m46.160761873s ago: executing program 7 (id=2824):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200)=0xfffffffc, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1efe010c000280050001000000000008000740ff"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
syz_open_dev$loop(&(0x7f0000001700), 0x1800000000, 0x8080)
r2 = syz_open_dev$loop(&(0x7f0000001c00), 0x4, 0x100)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3)

6m46.07961966s ago: executing program 7 (id=2825):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x3, 0x13, 0x1, 0x7, 0x12005}, {0x1002, 0x7, 0xa, 0x2, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/if_inet6\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

6m45.704753545s ago: executing program 7 (id=2826):
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

6m44.662780592s ago: executing program 5 (id=2833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}}) (fail_nth: 2)

6m44.339725948s ago: executing program 5 (id=2834):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x3, 0x13, 0x1, 0x7, 0x12005}, {0x1002, 0x7, 0xa, 0x2, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/if_inet6\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

6m44.339134712s ago: executing program 7 (id=2836):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x22, 0x7b, {0x7b, 0x4, "dd45a9aa18d5623719649c258704a43e3d98fdfffb83ba4ecde90489156474ab97827285869f73720543e52ef870d0756a08a35a6f5e5a2bd5ae9899c4b313dfa075eb4e094ff6e2f118efe302e1978bcf81f437a9cf55736d88889888acc282cb5429ddadba749f1d2797d0a6c06bac21bd1f3900d8e55a48"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x20, 0x12, 0x6, "e2c32950dfe0"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "1bd3"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "2ab1"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "82d6d5b1"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "d8c750"}})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x5, {0x5, 0x7b, "38cc79"}}, &(0x7f0000000040)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6390b2a9dc14ed62b8d8a8"}}, &(0x7f0000000080)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x90, "9fd828d461235a1eb025cbb6a8f3db04"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xd, 0xff00, 0x4f7, [0xff3f00, 0xf, 0x30, 0x0]}, @generic={0x99, 0x10, 0x4, "2de31368b6e3df5b5abdfc7eae6b2ad5dde04609e0ede9fcde14fbb8d9b5575af73089bf3473d1504c01ee70908c31a259ea9a8a0cb1ef6260b09bce3dd80f39a8f2f438b86e21c676dcb4ec35de6e72453c865c7d9f3ad92796f6a44ea2988983795cb4f38fe9eae46f847b6a4707a1ab7206b0fdd440615868b2a807bb30ec6cb68b9faf7cd97308077dee081ecceea96a334cbda3"}, @generic={0x93, 0x10, 0x2, "d0da55a5d08b3a9d83acf39604256e0a8d9fc7c3323872d4778d56686630a52674dbb8cb528784322a49da6c8c1e8af2e2d2916de9a25f59d78a3aeb47fa4040a1f6019980750390571b828cff9fe728f9c3f1d9bec6b61929d94b4a99c3b91aaf5089a69003bc9180655afdfb78000a6e6963228f64eef5a6311d99204c449f62fd9e4fa98666d74a42ddf553e20930"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x4, 0x4, 0x7, "908fa2e3", "6a3d55e2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x10, 0x8, 0x3, 0x32, 0xa, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x4ab66179e92a58b0, 0x30, 0xa0, "c3deb875c926aa9d35fd5664fedcad29620c4f5c3cf110cb3ca68f26b1bde7fceaaddc0e47994a5a6772ff40f219f6749f2a7f05261b172a7de5f4016c544610ee961867c2c100e82a83f2a4a036fe1cbf50ab0b62b26dcd811ba58caea55a4b5b37018e2ada385a66cf79afa3e14dea14dbb82b7da5e61e500df3b06ce5b5c359186a0246f018f8c524201908c181120f082c3b2919fc5679d93a395cd2d82d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, ' i'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f561"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x94}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xf4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf1}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})

6m43.59751411s ago: executing program 5 (id=2841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="18000000270001031d030002fa66635c50f222dbdf2501cacc2d9caef86ccbb21da39bb1cd8a33c7cfec23ffd586156fe30c3e040b4a2440a48532ea0de32bdc5b1d176bc10c34f134aa928ede021d310dfa00800338e0277f848e8d8f317643492f2bf19b8aa75ca94613fc727ff3cf5b3054800ee97e0bc5ab5266a19964b28b2942893e0e4debcbcf0a8d7127202625c6df6994a9245a8a9da739005bd5ac74cd291c7a1e40493265c9a7774ebca482a42d8b1db87a04476922ef2eed86bb16b4506ecb978c8e6a74ba9993435d886232e4366074355051e916f1e0faffd12430bd5961e382bfba04dec170ccb162cff9df7de900abbce96c6fd3aa55088b5b8f1a4cf68700b3799b6e535b4df3027b4aad0ab462ca931a106dac1e7e5ec1cec2c78d789857301892fe8e56705d63bfb6e454dda0b7060857d08d2cd52384951b66ea26493f55bf638773ae3633da3093d2847f07d942270169dc0ae061d3e6f9b6846c3d31168a96d8e1bd7ed7cddba4b2ac6401a3560c71402e609f4b27216ebd30c780b2c193669334a93e8741d309451dea32c87a2a8f48c382ecc6"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f00000005c0)={0x1, {&(0x7f0000002e40)=""/152, 0x98, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)
recvmmsg(r2, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4105, 0x1009}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f00000002c0)=""/125, 0x7d}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0)

6m43.267170748s ago: executing program 5 (id=2842):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0)
statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000cc0)=0xc)
fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = userfaultfd(0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
eventfd2(0x4, 0x81800)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000})
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x80000, 0x0)
write$binfmt_elf64(r8, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x5, 0x3, 0x6, 0x2, 0x3e, 0xfffffc01, 0x14, 0x40, 0x82, 0xf70, 0x1b2b, 0x38, 0x4, 0xde71, 0x0, 0x4000}, [{0x485da62359d661af, 0x9f92, 0x8, 0xfffffffffffffffa, 0x5, 0x4, 0xf9, 0x4}, {0x60000000, 0x1, 0x1, 0x1, 0x1, 0x8001, 0x0, 0x4}, {0x60000000, 0x3, 0x9, 0x5, 0x1, 0x9, 0x634f79d8, 0x1ff}, {0x5, 0x8, 0x6, 0x3, 0x9, 0x100, 0x7fffffffffffffff, 0xb}], "437d8a4c8f9e98d9017e0f2d09b8f606ffe1e61be670ca5f91d2e1cbfc535c7381eb0c6a4ab093ce8e91baea8461d913a58714ee320a8f9e48f5bae14acab1ea60e49c1eebcae6b42f2b1b471a72fb7dc89f79fe20bf35b9b1d3a077afa8ac6bafa37844943760ad3c39df5adecf722adf8a76fef2dd924a9ccbfb1221e6ce00b42677e431f48e654c4a0b6097a3179209ab43505b975255f0f6c9e8e628d61cba2cc63be562776af2c693d4fbb2dea90d6d427b678585", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7d7)
ioctl(r8, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r8, 0xc138fd08, &(0x7f0000000000))

6m42.323168807s ago: executing program 5 (id=2846):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368e80c4dee74f7cec9ec93624925b8e167b66dc9a25e653357527da34e70839372ac9b91ce957d97d046bb6ba1080c1f", 0x53)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r1], 0xb2)

6m42.30517776s ago: executing program 7 (id=2847):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x62, 0xb69f5ca05260f48, 0x39, 0x30, 0x64, 0x37, 0x66, 0x64, 0x31, 0x30, 0x62, 0x30, 0x64, 0x0, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000001c0)={'fscrypt:', @auto=[0x36, 0x36, 0x38, 0x65, 0x34, 0x63, 0x38, 0x64, 0x34, 0x35, 0x31, 0x57, 0x31, 0x32, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "0011223344556677880502d2b9ddff7f00112233445509000000aabbccd3ceff001122aa020000000100", 0x3c}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406"], 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2fbafffff}, 0xc)
add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
keyctl$unlink(0x9, r0, r1)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/oss_mixer\x00', 0x400001, 0x0)
write$proc_mixer(r4, &(0x7f0000000800)=[{'CD', @val={' \'', 'Line'}}, {'BASS', @void}, {'MIC', @void}], 0x28)

6m40.827212281s ago: executing program 7 (id=2851):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x12182)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10)
sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd700003000000110002000c000980080001007dc9"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x804)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000a40)={&(0x7f0000000140)=0x1, 0x80000006, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a00)})
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfc)

6m40.433154344s ago: executing program 5 (id=2852):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mount(&(0x7f0000000100)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pstore\x00', 0x1000080, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="eae300b300ba2000b000eeb892000f00d0baf80c66b8fc89e38566efbafc0cec0f0095040066b8010000000f01d92c00ba430066b80993000066efb818000f00d02e26f3666699", 0x47}], 0x51, 0x4c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r9, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r9, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b566192c60fd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)

6m39.993052063s ago: executing program 37 (id=2852):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mount(&(0x7f0000000100)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pstore\x00', 0x1000080, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="eae300b300ba2000b000eeb892000f00d0baf80c66b8fc89e38566efbafc0cec0f0095040066b8010000000f01d92c00ba430066b80993000066efb818000f00d02e26f3666699", 0x47}], 0x51, 0x4c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r9, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r9, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b566192c60fd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)

6m36.578947891s ago: executing program 8 (id=2860):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x281c02, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r0], 0xb2)

6m36.322129514s ago: executing program 8 (id=2861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000004500)=""/4093, 0xffd}, {&(0x7f0000000780)=""/21, 0x15}], 0x5}, 0x7}], 0x1, 0x40000102, 0x0) (fail_nth: 9)

6m36.147183401s ago: executing program 8 (id=2862):
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x600, 0x1, 0x8, 0x1000007})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400108000000ebaa5503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write(r0, &(0x7f00000000c0)="32b30cc5913fb971fdbf18ec06dd593e66629ae0af2d9e2026d4c2739cead89f833adc5252e9e180033abb02ca9203a3706509a5680de0e25a4eb668de85839e35c6bc7ffe94ffa17f4c821dfb61985c41449810d84b9687e3d51f73713ee6dd3fb4887334f9ff217575f10089c8d6f295f05bbbdc56fd6647da753697eb243ee0e3e4c524d912f7c6321f01c12649d2a941476688", 0x95)
syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000180)={0x20, 0x32, 0x61, {0x61, 0x37, "6b8f9a6dfaae1779d6375fb69a44d8ebfedf28da5a63be0553c49fa01f944b659419a61bd52bf27bb6580c87ff4accb2ee03a48976115d3e3786a838bcb1e8cececed720f4a9790f541a2492854f524fc2fdc67fa051b8b7c672c7ecaa6d50"}}, &(0x7f0000000200)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "95481a0bfbf7bb8551f471bf36df67bfccf8fa62aaced790bc461437820c3e7266f91402b27fc104175a9764a6b52a66dd4e68789d950f5c1d56a51d27658f8d34f7032b5c1736fc433e88e5c3a89e85263259470cef6771b642670725499963551d1a1da8b20a938052c61975ecca8ead20ebb2f2258e92ba8ec8ef5984f20fde61131f0f1a9f5aefa45628d0895895d78682597481698c18ed04a6ee242ab1a90a558b3cb6cfa1d2a0784a094010a3be3af4fc736db058deee6e802b23c3d9268e50da2e9ba38051df3fc4aa8d34bd11f62b333b888ba4d99d0cedba01"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x40, 0xe, 0xf7, "52c94cecc5b35a8434f16458772230cd34a72433819cedb5d044b5166d74f6870873f5283b23e989afde68540d8eea2053688ef5e9fcdbea2474b926bbcd9d3e97e433cdc9a89950d5a3744252e42cc1b604f7aa3dcd83443d4e395200d0e2dccadf52134e95276a66c6e25a87f1c45ceb7d5471161e4f48e980974fcb34a39dbbde78c6127fe6c6bbf4384caba882830e336926a293da5f763c5911824f9ffafc4fce27ce239e554945fe4996614f594b0a72c447f544020d35fe9fe740f579ca1d9ab467f67a8a42d07230a57f603dcf1daff7bf67f6a024a999b48be4ef899d88e84fbad5c0965e6e29148324313c537057de37d407"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0xfffffffe}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "e7319e9e59635cccbebb35278392d34744c7cc0182ce765f8b4160efacdf14faf47307d5d88c5468df666acc22a7fb"}})
write(r1, &(0x7f0000000080)='4', 0x1)

6m32.63554964s ago: executing program 8 (id=2866):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0)
statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000cc0)=0xc)
fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = userfaultfd(0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
eventfd2(0x4, 0x81800)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000})
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x80000, 0x0)
write$binfmt_elf64(r8, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x5, 0x3, 0x6, 0x2, 0x3e, 0xfffffc01, 0x14, 0x40, 0x82, 0xf70, 0x1b2b, 0x38, 0x4, 0xde71, 0x0, 0x4000}, [{0x485da62359d661af, 0x9f92, 0x8, 0xfffffffffffffffa, 0x5, 0x4, 0xf9, 0x4}, {0x60000000, 0x1, 0x1, 0x1, 0x1, 0x8001, 0x0, 0x4}, {0x60000000, 0x3, 0x9, 0x5, 0x1, 0x9, 0x634f79d8, 0x1ff}, {0x5, 0x8, 0x6, 0x3, 0x9, 0x100, 0x7fffffffffffffff, 0xb}], "437d8a4c8f9e98d9017e0f2d09b8f606ffe1e61be670ca5f91d2e1cbfc535c7381eb0c6a4ab093ce8e91baea8461d913a58714ee320a8f9e48f5bae14acab1ea60e49c1eebcae6b42f2b1b471a72fb7dc89f79fe20bf35b9b1d3a077afa8ac6bafa37844943760ad3c39df5adecf722adf8a76fef2dd924a9ccbfb1221e6ce00b42677e431f48e654c4a0b6097a3179209ab43505b975255f0f6c9e8e628d61cba2cc63be562776af2c693d4fbb2dea90d6d427b678585", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7d7)
ioctl(r8, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r8, 0xc138fd08, &(0x7f0000000000))

6m31.524243938s ago: executing program 8 (id=2868):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x281c02, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r0], 0xb2)

6m29.375843166s ago: executing program 8 (id=2875):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000080)=0x8)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r1, 0x40104d06, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
pipe2(&(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
dup3(r4, r3, 0x80000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
close_range(r2, 0xffffffffffffffff, 0x0)

6m28.997340342s ago: executing program 38 (id=2875):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000080)=0x8)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r1, 0x40104d06, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
pipe2(&(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
dup3(r4, r3, 0x80000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
close_range(r2, 0xffffffffffffffff, 0x0)

6m25.655230194s ago: executing program 39 (id=2851):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x12182)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10)
sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd700003000000110002000c000980080001007dc9"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x804)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000a40)={&(0x7f0000000140)=0x1, 0x80000006, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a00)})
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfc)

4m18.971675796s ago: executing program 4 (id=3400):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0})
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000064681a21c7fcfd83cc8b8a55082ad3ea02f76b408424715e8ce6d"], 0x1e)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000)=0xffff23e9, 0x4)
dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f00000001c0)=[@enter_looper, @dead_binder_done, @dead_binder_done], 0xb9, 0x0, &(0x7f0000000280)="b79c7498f2980c59cd2deaae2563ccf57a77f95e57d83bdf1890f0ac084656c36abaef6febcac70f3684ec4a87b2b0de0fe0a149822cb60986c65752d73117e6f9bfbff252ff6b19eb458783c60e702197ad5a56da5c44d1f75ea3aaf587f9e7dbedf627ad227699dfe4137925f6e6fc393ab865589a0b4532f72a39653f5d7b2c8e6837e6197530f792bd5a5150d2e572ebb2e4273aed33989673f6b8aeffcf7d78e1e148818db314809d2011e671f3489bb83727779bd4de"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x10b, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/1, 0x1, 0x1, 0x38}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x110b}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x110a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000d00)={0x0, [{0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xfffffffb, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x41c1, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x55cd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x400, 0x0}, {0x1, 0x0, 0x18a, 0x0}, {0x1, 0x0, 0xfffffffc, 0x0}, {0x3, 0x0, 0x6e5, 0x0}, {0x3, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xad56, 0x0}]})
splice(0xffffffffffffffff, &(0x7f0000000100)=0x6d, r3, &(0x7f0000000140)=0x7, 0x7, 0xb)

4m18.836990592s ago: executing program 4 (id=3401):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000101401"], 0x20}, 0x1, 0x0, 0x0, 0x20001051}, 0xc0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4)
sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="30000000120001e7ffffff000000000010000000", @ANYRES16], 0x30}], 0x1}, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000101401"], 0x20}, 0x1, 0x0, 0x0, 0x20001051}, 0xc0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) (async)
sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="30000000120001e7ffffff000000000010000000", @ANYRES16], 0x30}], 0x1}, 0x0) (async)
capset(&(0x7f0000a31000)={0x20080522}, 0x0) (async)

4m18.567221256s ago: executing program 4 (id=3405):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x8001af85, &(0x7f0000000000))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'geneve1\x00'})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_clgi={0x17f, 0x10}], 0x10})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="c74424000a000000c744240200800000c7442406000000000f011c242e0f01c226f30f1ed20f20e035400000000f22e0650f209c9a02000000d10066ba410066ed3e660f388025000000008fc8a0a21d0900000000c4e2a9b633", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0)

4m18.277594746s ago: executing program 4 (id=3407):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x1600000000000000, &(0x7f0000000080)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

4m18.179172194s ago: executing program 4 (id=3408):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c7", 0x3}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) (async)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000026c0)=[{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)="332d1470a2c1e867faba4128e25e", 0xe}, {&(0x7f0000000180)="f2fb", 0x2}, {&(0x7f0000000380)="faf0bcd70c3254e07c4ca06baf5c492c7849f951a9cc261461c4df9d37e8a1cdf24dd97244831f16d1e245430614faf79f9c0c5061d92d860319556282a22b26bc602a8cd36f918964947af0eb7531223bff8277f93c07f4bfe8832a80bfba6b88560ddfbd792409277087bd1206ebe951f13cbd1158d5eb2b557a47ff24d3b8fc5b4033b6197200325239bebed3a43cd4f6e230bbeacea717498c1cae996dba888fe9fbd839d887fa7e351086183d6385f4e0fc7f137a5f8b10a9ad067048e2", 0xc0}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0xc880) (async)
recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/207, 0xcf}], 0x1}, 0x101}], 0xf4240, 0x20, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) (async)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x569802, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) (async)
r4 = dup(r3)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="1ae963c62b", 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r4, 0xf2169000) (async)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000000)={0x52, 0x7, 0x9, {0x4, 0x8}, {0x5, 0x3}, @rumble={0x1}}) (async)
mmap(&(0x7f000040e000/0x1000)=nil, 0x1000, 0x1, 0x50, r4, 0x82ce7000)

4m16.68714713s ago: executing program 4 (id=3410):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/127, &(0x7f0000000180)=0x7f)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e01000009210000000122050009058103"], 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

4m0.450687854s ago: executing program 40 (id=3410):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/127, &(0x7f0000000180)=0x7f)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e01000009210000000122050009058103"], 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

2m12.494675777s ago: executing program 2 (id=3951):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f80, 0x40, 0x2, 0x29e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1963, 0x1, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5339, 0x10000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6275, 0x8, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000001e40)) (fail_nth: 11)

2m11.919977053s ago: executing program 2 (id=3962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mount$pvfs2(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x1000000, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
clock_settime(0xfffffffb, &(0x7f0000000140)) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
clock_adjtime(0x3, &(0x7f0000000180)={0x5, 0x9, 0x7, 0x9, 0x4, 0x7, 0x0, 0x5, 0x3d, 0x3, 0x3, 0x1, 0xfffffffffffffffd, 0x0, 0x4, 0x29, 0x10, 0x7, 0x2, 0x1, 0x9, 0x9, 0x8, 0x9, 0x2, 0x9}) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000232fa6e0c1969e4027b96905483d19678d40bac9f53c950e327e4e45f6a0d4a3c03f6ba8d175b77c4c00000000d782599f9ebe647947a2b4aa268f9af95dc810ac20f9119a1813375a1a2ced035f9739468a4e1e936e1b5bd5e69d7c7e8d8e63828439eb679de1d7a1e9e9ed0994583efdc8a9537b537a33b64f2717f8510c066f8fa8df8d522f00"/152, @ANYRES16=r1, @ANYBLOB="05090000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)

2m10.9671552s ago: executing program 2 (id=3964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

2m10.929792256s ago: executing program 2 (id=3965):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000000)={'full', 0x20, 0x4, 0x20, 0x7fffffffffffffff}, 0x61)

2m10.734210861s ago: executing program 2 (id=3966):
r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002080)=ANY=[@ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)

2m10.371301139s ago: executing program 2 (id=3967):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000380)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x28)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000140)={0x1, {&(0x7f0000000600)=""/123, 0x7b, &(0x7f0000000100)=""/7, 0x2, 0x3}}, 0x48)
mlock(&(0x7f0000520000/0x1000)=nil, 0x1000)

2m10.096257471s ago: executing program 41 (id=3967):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000380)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x28)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000140)={0x1, {&(0x7f0000000600)=""/123, 0x7b, &(0x7f0000000100)=""/7, 0x2, 0x3}}, 0x48)
mlock(&(0x7f0000520000/0x1000)=nil, 0x1000)

1m20.98462005s ago: executing program 9 (id=4273):
r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x1b, {0x1b, 0xe, "bd949f05fb813f9a52bf237ab6187c8415105d7f68793f00f3"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000300)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x2, [@generic={0xd5, 0x10, 0x3, "2a00b79d24d491f437c4670e75d2caccff339e40f741c1a9762b739f8711161162bc091041a303e064e070d04631f5c3429cc0bfc3e365b3cf1347e070a87b40a77aa6b5c2d28677db33ee8ed6f4ada296e452221c7d20dbef96cb3bc4a00d4b8dc123ba8a363e639a32af4d4726e1402f3536ff6a8e5135bb7098d47a97a2616ca69f7072869470ccd7302d74021df1d4ea6ae572dc56ab518abfd4b75c0c8be94e0e226500d5030cede5682d2c355ecb99b07091cd4405731dfb04959f8bf28c61209191d0e5f220379bbc90626cbef775"}, @ss_container_id={0x14, 0x10, 0x4, 0x53, "f6f3a138d7c643a6f23f83f750b9b7dd"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x10, 0x6, 0x5, "7ffa2895", "fb1a5121"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x8, 0x7, 0xd, 0x6, 0x1ac3, 0xfff}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="000ea30000001abc2c4c69d18b778b5ef534b142692a8c512af577a52d2df91bde864c84c968e97b58f0bc95cd5563e3a77a320000294c7653e802767a7359b012243596c73410d145e77966c5d8bcd2ee5332a2eeb38de512d7c955bb058d8a11618dffa516c86c789fa364bd8ad226cdb92047f8d5d1171befacd37db9bca6aa6804f0e26d41a050494c370806ec9080c51646c6460a223da1225d9cd5419c6f2111554dd9430062"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000700)={0x40, 0xb, 0x2, '%\a'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="85ad704443b2"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "deb9"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3000}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x85}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x6}})
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x1b37, 0x200, 0x0, 0x260}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6714, 0x800, 0x3, 0x2d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xccd1, 0x20000, 0x1, 0x17e}}, {0x0, 0x0, <r4=>0xffffffffffffffff, {0x0, 0xe7d6, 0x80, 0x1, 0x18c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2b5, 0x10, 0x3, 0x9b}}], 0x4, &(0x7f0000001f00)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xcae4}, 0x0, 0x0, '\x00', {0x0, 0xea8, 0x0, &(0x7f0000000f00)=@buf_1k="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"}}, &(0x7f0000001f80))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x61995073, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001fc0)=@new_dev={0x1, 0x707, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f0000002080)=<r5=>0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002140)={{0x1, 0x1, 0x18, <r6=>r2, {0xb3e}}, './file0\x00'})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r7, &(0x7f00000000c0)='1', 0x1)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002180)={0x0, 0x2e45, 0x20, 0x2, 0x2ab}, &(0x7f0000002200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x691a, 0x20, 0x0, 0x1e1}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf195, 0x20, 0x3, 0x22f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda0c, 0x1000, 0x3, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2422, 0x20, 0x1, 0xe3}}], 0x4, &(0x7f0000006400)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x80}, 0x0, 0x0, '\x00', {0x1, 0x67d, 0x0, &(0x7f0000005400)=@buf_max_buf="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"}}, &(0x7f0000006480))
r9 = syz_io_uring_setup(0x6c70, &(0x7f00000064c0)={0x0, 0x6fc4, 0x4000, 0x2, 0x290}, &(0x7f0000006540), &(0x7f0000006580), &(0x7f00000065c0))
r10 = syz_open_dev$ublk_chdev(&(0x7f0000006880), 0x0, 0x8000)
syz_ublk_setup_queues(r4, r5, &(0x7f00000020c0)={0x0, 0xbed5, 0x20, 0x3, 0x73}, &(0x7f0000006600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb82, 0x0, 0x0, 0x206, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5053, 0x4000, 0x3, 0xde, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36d6, 0x2000, 0x2, 0x106, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc8d1, 0x20000, 0x3, 0xab, 0x0, r9}}], 0x4, &(0x7f00000078c0)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x4, 0x921, 0x0, &(0x7f00000068c0)=@buf_1k="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"}}, &(0x7f0000000280))
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28)
ioctl$int_in(r3, 0x5421, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000003000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x1cb8, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c6c, 0x3, 0x0, 0x1, [{0x1298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x324e453}, @NFTA_SET_ELEM_DATA={0x1138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "380d0de08ae16b7df07e555edb7b3205a85e4747098463ba31d2560500000026f99b00000000"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1c05780a34c2feef}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "9bd0197bc07159573b021d0fa7d10a9d3752fc56690cc5a0cf57c2035f8c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xc15f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1657fa23}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xd934}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff75cb}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x62}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4f}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x44}]}}}, {0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xe6e}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, {0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "77a527bfa9a443354dde9df3fb9fbc8b093f752de9a09e5359707159ad779a906d96d4664fd13cf8cc8da49e975678dbdc1c3e78628878a76bdd9a8e7970a560d252a2bccd818a65b90af00cbaee1a120629dccba5b9d34323a4"}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "431f3e004b7c95c676c4f329326399b51327b9b409298d7e54f933b8791f008ed2c63cd000352ff8e833bbd867088c92a84f04870a077bd7133301e595a2a675913b6079b59f235b7db9bb7cec0c31d36b4d8687451a9b6f1aa4164dc424bf8702ebcb45b5e84cd9fbd0826410c812841e022192445c696c04909dfd264a3633e2cfc71df29594c754ccd039eca8f62911f4"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xcb, 0x1, "390ec5a39abe30b557952d7fefecb43b4f8c6d9c91ae85d8093aecdebc0874c6f6b6d5fd33abb4bb9557b1743314e2df6eb5a6c1c827a0ea82f0a7699b9f0ef9539dd6bddf1ea67ac25b0e6eafc11b1149ac570e3b265ab8904995987c8b50e383c4e70bc2ecffb2c046f3c79b739e3bea02f76ef48e7982634cadcaf89d5e99c0284de0a0d53bdd1ba8f14abb9307876440129418f6ea2bb627597de0858e6d84cbee2fcb829f83007c7b59d9229085a50a14bb55e3745926cb931ea0ab40adcf984426b574d5"}]}, @NFTA_SET_ELEM_USERDATA={0xce, 0x6, 0x1, 0x0, "f81c9fad0f1a862e24bb4d3be83f8b377e29f1bfc9dba5a41247ca5b7cd586ac6194088cbf4d8f15c077fe82512b07a69a670183cdc857610bbf274ff41521a6d602c14356493af4ccc316208d400dabc0e51a142b3ff26edea13caff90041539b556c54ac8691d7d4cf14fdacbb4ebc09431f316e87733d24ac74eb2605c80444aa90acf931aca39f26b32783053fb61a3ac6b91c8190fbaf8795e3f921165a48b8113e1286b5c6e7ffa7d1c5011d8fe335afe7148f07542a887dca2dcd5682f3e42547a961ce856bac"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x813}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "4921627f7aa3fb5b1197d8d489f81aa89f1ba8377d875adde7f4182e90faba8a239619c6f8464e69fdecd83fd07d07e0034f63de67c005b799cd3ac365a46d80ad6821288f4234f9460bd31380a50133d0cc5f417c13ca9432892a005a69a4c02bda5aae162a54d2f6e2aa3f03b87259a5502e6e739a95feb58764e145de8ed9337a24288667"}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "c746403ca633112a6b73bbcf5c54c0ed3ed7c9e7444fdcae8842d01e16a0dcbe54cb23b7cc753ef48acae78e449d57bf18cd2f46ebbcf2ce1c0c785c33bbb3a46fd235a4fed787fe11f7fb94241dd92620f458b0c344ee24242a94d95c3a70d4578cf2a57d1e84722ca8528a045e7b632cafd24936581b8a74b9e3159e763d2ea80296b715f0f9fc064709db8f753223b842f680bc7e735ba303cf32b0ac36185efb9cb8ae10b023fd75c273cc5ece3d02d2cf321ae57debc08232f2a65c53eb4a789569"}]}]}, {0x564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "e31e516ae29415d98b2b9b9817a35405e73ea4e0ea6a15b03ecbf7b43062686b233e3d9e9913b3239c9a984384a5f0db8c59df"}, @NFTA_DATA_VALUE={0xb7, 0x1, "3dbcec9a58cc9b7cced7ae188782657bcf54210c3466e7a852991c77d0e07d83fe5d33c35a6059606560d75ccd1854d27a3773cc24d437a2882a0548325d5ac841adb5ff679cb79172de72fa7813f5ecaa123093a2b2fbc1f9a8dc9232ded1480c0c882c7f6be352b7d3df0e76ca5186c8c06675c351511607a7a6fff8ee85d8589f13120b7f14dc392a2f07c51ca04320190c20d135939b38d40c50d7ae8343d0b1813af2ed5c6d003b49a0072c48b1798976"}, @NFTA_DATA_VALUE={0xa2, 0x1, "e85cbd759bc7c3504801e03fb08b72c7b95f999f156edb30e86dfe8092bd7467e48849ded1505cb98ae663775abe8c37469f2a80015031cf86a6bc4388a5ab271cc865e042e10eaf488773ba15b3f63d94e269ac10e0eefd959e4b07b82840593a4ef199f0db0e8535919a1a538a9399f7e938a798457a96653836776ed513b4202eff5b7118e192334a4db609692033f69280b0170656656683ed10856f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "512b13583e245acbf26378d203ca1cdd9733cf9ce1a1179300808fa99b273b25d39c01b2a032b0e19977816417dbbe193258b7ab7f8b789d02de1e6777dd5443a5d24b44c6a675d7f659d1f27598d2b1bb4fa61ddf81342b3a367c88b07d4c59903d0fa1f6e3743085502342a2da23522f23cb77517f787ed0501053e27f210bc9c809a92cecf68be3cef0934a79a8b2255ed04b838955eae5ffbdebb95512ccbd9d6960434906a27e2264c79dbc453ec8210ec91ae6b8a7d65251c8bdbee9ecc2a8d385"}, @NFTA_DATA_VALUE={0x80, 0x1, "4ab4ea1be6ff74ac6ca9cfdf12d8713bcc6a63490a872329864f8d68ebd967e385dfafd5fce21df300dbd8e85cd67fe43d0d24309bb69a96190b419bbb4bb253849c895e697ecc0a5454b178734b65e33f8658395bb6f7ebbd6335d88a503b98c5093f0060729d41721467c061b03c0b8f63f74b260cd03bc2d7de75"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xae, 0x1, "8a92a664671d0b190e0b99361d2dfd09831a7e2bce52d01779ca4e76eaebddcf482bce5970fce60b16ffd2ed3949915ccc9d8186752a990316fd1ef113d42feaaa24a7c88b562482b0fc8d99e17d5ba01e5fa1acbd0d0c5a6421818df06c1994234f8fa5900b577a7fc3861103f9dcd2a4a37a7cc6826ffe37c24913608350b3f531b394ffad37bfa8fc4f22288b0db7158b53842d00724fde410adec7738dfeaa7ce42a7fba41dfafe5"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x44, 0x1, "ffa3b26e67827f62df780e5108192d7385d3744d077c7c818f01e54be08ce166537acf59e75b067d7fe4fe273ab165bd021af0f4c3e94517e023bb986225b287"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x1b8, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "506ea6877167d211a619c712c60b8e5890e3ba0c668cad57d2e9351c4d42f96b9ac38665053467c0798eeae1429dd54b8ae4f06a2065b24c0e71df1d763cd333a01ea350a29e7240f7d2fc8bc7309aaa412ff11a7c1a93def147b50408540609cf479abf28500ac927e95c48f9becda9cc2705aedee74849a4a813f1c53d8cf081656b0c2eb42198300ca97d6fbcc3bb34f7d52addf2908e7266cf3cca5f0b6bb2550cdf3c7e11eacce1c7c51711ccfcc2c7de2f2109b79ea8b1e40fea2bb79bc7ba35d9"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xc7, 0x8, "e77edc7172d6b99889697d6f031a1655e71e7e79476cf3a58be349516a08fdcb6de0543be9a58b3fd034f58bfcee6fcd0a713c47c0ad7dcdb2a41031978e9cae0e5c07dda59e64db94c098f2e118dca5d25a3230f6516a7da0fdb78f8d492905829a96739f4fc5c38c171070576d37d8618803e17df4949cf73218a7a8cd6155e39cac3c3220fa125f5774a948d43df40e63b07e0ae833280241d75a9413ab808992ceacc2212cdc6ecb63d90f7b2dcbe08e71180f6238fc3ed55ba7f073754b997db4"}]}, @NFT_MSG_DELRULE={0x2d0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x18c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x30, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xa504}]}}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x69}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4b}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x59}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1ff}, @NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "3c76498914b6f4d74435ccd68c9ee436"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x170, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_USERDATA={0x85, 0xc, "1d05a9c6e6807a5c08672a6a11f145091552a709bf6a10d1e617e6418828fbd44343419cb7b79618f66ff935db4058353f1b1749ee03f604b488bc53c39639f171711ac51e60aec04f602ff7a9713370ab6a55cfb73146ed26c91c63e646393a252a72f70b03732ab597ea00b59d0bf7d4dce9142102b5213572ca6a9d5dbe0afa"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x63, 0xc, "ac66cb315c76e4379100136a473b7ee130a573fed1f98cc42257097e860a4e4ec97a7912eca9c77e49149e73ff13d0abb2d156615f71ceacccdaf2c6ed6d043d64b0500b47788670057d5ed728d2c54704a97ba1f126e57028ab99c5b099e4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2350}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x10e, &(0x7f0000000a00)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x10, 0x582, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x3, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x38}, [@selector_unit={0x9, 0x24, 0x5, 0x1, 0x6, "2346eacf"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x5, 0xff, "b7dfa6"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x4, 0x2, 0xa}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x8, "ede8"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x1, "c0b44422a2f6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffd, 0x8001, 0xc}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0xb, 0x0, "bd371d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa3, 0x0, 0x13, 0x0, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x459, 0x9, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0xb, {0x7, 0x25, 0x1, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x4, 'b', "a39666"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0x9a, 0x93}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xe, "df93ff", "e4c1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfae, 0x1, 0x6, 0xd9}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0xd3, 0x6, "50879291"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x80, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x53, 0x64, 0x9, {0x7, 0x25, 0x1, 0xc, 0x65, 0x40}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0xc, 0x3, 0x1, 0xff, 0x98}, 0x22, &(0x7f0000000b80)={0x5, 0xf, 0x22, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "44a876dff23ec94ace864c0fc08fbe37"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x300a}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

1m17.742131893s ago: executing program 9 (id=4290):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m17.035966327s ago: executing program 9 (id=4294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="141300001000011300000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0)

1m16.830772106s ago: executing program 9 (id=4297):
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x560, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_atm={{0x8}, {0x60, 0x2, [@TCA_ATM_HDR={0x35, 0x3, "8cc1820b42faa9873708b3d9749fc2b92ff69944b9b0e0591d214da98c8248ec1852ab2c84dc93d492b5fc49155a464ae1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x9}}, @TCA_ATM_HDR={0xd, 0x3, "54f3c10c8f656605f1"}, @TCA_ATM_HDR={0x9, 0x3, "80dd1679ac"}]}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}, @TCA_ATM_HDR={0x35, 0x3, "b051e49891d2463b00db551565d6de24d78513b01eb567068415e76e3f565aef6d57e58cd3cf3b11b0bfbb5c6bd2c22789"}, @TCA_ATM_HDR={0x3d, 0x3, "b321d0604c76804b4e0c0025895221ab73ae60e4fb4da2d7946f2ab607248c2ec706af0db6866bef75dd93ab4b57d6bb69ec7a441f06d9e9bb"}, @TCA_ATM_HDR={0xd, 0x3, "5dfded62605f34e3de"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x8000, 0x0, 0x2, 0xfffffffb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xcc, 0x5, 0x10001, 0x78, 0x8, 0x80000001, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x8, 0xffffffff, 0xae04, 0x41, 0x2, 0x2, 0x8, 0xffff0001, 0x81, 0x8, 0xe, 0x5, 0x5, 0x200, 0x8, 0xff, 0x9, 0x8, 0x5, 0x1, 0x81, 0x685f, 0xb0, 0x8, 0x101, 0x7, 0x1, 0x2154, 0x8, 0x2, 0xffff1905, 0x401, 0xebbe, 0xc, 0x7fffffff, 0x6, 0x8, 0x3, 0x2, 0x6, 0x3, 0x0, 0x10000, 0x401, 0x7ff, 0xf, 0xa000, 0x5, 0x4, 0x200, 0xd, 0x2, 0x5c, 0x63, 0x28649b59, 0x3, 0x6, 0x0, 0x9, 0x6, 0xfffffffb, 0x9, 0x7, 0xffffff1d, 0x8001, 0x7, 0x1, 0x2, 0xfffffffa, 0xa62e, 0x7, 0x9, 0xfffff58f, 0x8, 0x3, 0x9, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x23, 0x6, 0x1, 0x1, 0x100, 0xfffffbff, 0x4, 0x800, 0x7, 0xae36, 0x0, 0x3, 0x1, 0x8, 0x13fb95b7, 0xe816, 0xfffffffe, 0x7, 0x3, 0x6d82, 0x0, 0x19, 0xffffff4f, 0x7, 0x0, 0x1000, 0x0, 0x6, 0x10001, 0x80, 0x101, 0x80, 0x7, 0x0, 0x10001, 0x7, 0x5, 0xc, 0x12000, 0x486, 0x0, 0xffffffff, 0x6, 0x2, 0x80, 0x4, 0x8001, 0xffffff15, 0x6, 0x7, 0x6, 0x0, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x9, 0x682, 0x8000, 0x4, 0x5, 0xd62e, 0x200, 0x4, 0x5, 0x0, 0x85, 0x3, 0x8, 0x6, 0x6, 0x101, 0x10001, 0xfffffff7, 0x53, 0x7fffffff, 0xff, 0x9, 0x9, 0x8, 0x8, 0x8c, 0x9, 0xe0, 0x4, 0x3, 0x4, 0x100, 0xd, 0x80, 0x0, 0xffffff93, 0x7, 0x9, 0xf616, 0x3, 0x5, 0x0, 0x7, 0x5, 0x2, 0x10, 0x6, 0x4, 0x4, 0x5, 0x1, 0x400, 0x7ff, 0x6, 0x8, 0x2, 0x7, 0xff8, 0x4, 0x8, 0x3, 0xff, 0x3, 0x1, 0x639f, 0x9, 0x3f, 0x3, 0xd148, 0xf0, 0x834, 0x9, 0x92a, 0x1, 0x8000, 0x9, 0x4, 0x3, 0x1, 0x10, 0x7ff, 0xdd, 0x5, 0x9, 0xffff, 0xfea, 0x5, 0x9, 0x12, 0x2, 0x8, 0x7, 0x1, 0x9, 0xff, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x6, 0x7, 0xfffff9e5, 0x3, 0x6, 0x2]}]}}]}, 0x560}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f0000000000), 0x92e4, 0x121902)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
listen(0xffffffffffffffff, 0x800)
socket$kcm(0x2, 0xa, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

1m16.598264749s ago: executing program 9 (id=4299):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000380)=0x4)
setns(0xc9, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4)
r5 = socket$kcm(0x2, 0x4, 0x2)
recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35fbd262a9f5542ff355d08d965ce4a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x5a}], 0x1}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020)

1m16.257388921s ago: executing program 9 (id=4301):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r1)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x3})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x2, 0x0, <r10=>r3})
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f00000002c0)={{0x8, 0x5, &(0x7f0000000200)=[{0x6, 0x0, 0x60000}, {0x9, 0x0, 0x1ff}, {0x7, 0x0, 0x3}, {0x4, 0x0, 0x7f}, {0x0, 0x0, 0x80000001}]}, 0x1, 0x7f, 0x55, 0x1, 0x0, 0x9, 0x9, 0x10, 0x0, <r11=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r10, 0xc010644a, &(0x7f0000000600)={r11})
sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_RX_RING(r12, 0x10e, 0x6, &(0x7f0000000100)={0x9, 0x2, 0x2, 0xd}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400080000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040d9}, 0x4008094)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={r6, @in={{0x2, 0x4e26, @rand_addr=0x64010101}}, 0x10000, 0x4, 0x8, 0x9, 0xf3, 0x5a08, 0x8}, &(0x7f0000000140)=0x9c)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r14=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r14, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000180)={0x18, r2})

1m1.205157989s ago: executing program 42 (id=4301):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r1)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x3})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x2, 0x0, <r10=>r3})
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f00000002c0)={{0x8, 0x5, &(0x7f0000000200)=[{0x6, 0x0, 0x60000}, {0x9, 0x0, 0x1ff}, {0x7, 0x0, 0x3}, {0x4, 0x0, 0x7f}, {0x0, 0x0, 0x80000001}]}, 0x1, 0x7f, 0x55, 0x1, 0x0, 0x9, 0x9, 0x10, 0x0, <r11=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r10, 0xc010644a, &(0x7f0000000600)={r11})
sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_RX_RING(r12, 0x10e, 0x6, &(0x7f0000000100)={0x9, 0x2, 0x2, 0xd}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400080000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040d9}, 0x4008094)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={r6, @in={{0x2, 0x4e26, @rand_addr=0x64010101}}, 0x10000, 0x4, 0x8, 0x9, 0xf3, 0x5a08, 0x8}, &(0x7f0000000140)=0x9c)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r14=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r14, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000180)={0x18, r2})

24.796988928s ago: executing program 3 (id=4521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
fcntl$setstatus(r0, 0x4, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
write$tun(r1, &(0x7f0000000340)={@val={0x70, 0x201}, @void, @llc={@snap={0x0, 0x0, "aa", "db4564", 0x88f5}}}, 0xc)
pipe2$9p(&(0x7f0000001900), 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x88, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80c5}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket(0x10, 0x3, 0x0)
unshare(0x40480) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async)
write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x4d)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r2], 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040))
setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000000)=0x3, 0x4)

16.395894262s ago: executing program 3 (id=4548):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x8, r3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8})

16.278826313s ago: executing program 3 (id=4549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x104, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_HDR={0x35, 0x3, "8cc1820b42faa9873708b3d9749fc2b92ff69944b9b0e0591d214da98c8248ec1852ab2c84dc93d492b5fc49155a464ae1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x9}}, @TCA_ATM_HDR={0x9, 0x3, "80dd1679ac"}]}}, @c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}, @TCA_ATM_HDR={0x35, 0x3, "b051e49891d2463b00db551565d6de24d78513b01eb567068415e76e3f565aef6d57e58cd3cf3b11b0bfbb5c6bd2c22789"}, @TCA_ATM_HDR={0x3c, 0x3, "b321d0604c76804b4e0c0025895221ab73ae60e4fb4da2d7946f2ab607248c2ec706af0db6866bef75dd93ab4b57d6bb69ec7a441f06d9e9"}]}}]}, 0x104}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

15.898338487s ago: executing program 3 (id=4551):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
close(0x3) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) (async)
sendmsg(r5, 0x0, 0x4000080) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
bind$inet6(r6, 0x0, 0x0) (async)
sendto$inet6(r6, 0x0, 0x0, 0xe0, 0x0, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async)
r8 = syz_clone(0x100300, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0)
ptrace(0x10, r8) (async)
ptrace$peeksig(0x1a, r8, 0x0, 0x0)
write(r0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

14.525700325s ago: executing program 3 (id=4554):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0xa000}) (fail_nth: 3)

13.278983143s ago: executing program 3 (id=4560):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0xa000})

12.718514076s ago: executing program 43 (id=4560):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x60d000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0xa000})

7.978372886s ago: executing program 0 (id=4577):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

6.689010018s ago: executing program 1 (id=4579):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x550c, &(0x7f00000000c0)=0x18)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x28, r2, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfb}]}, 0x28}}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r6, &(0x7f0000000100)='0fc5:1227:gc', 0xc)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.309329447s ago: executing program 0 (id=4580):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}})
r3 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.416431966s ago: executing program 0 (id=4582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x108, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_HDR={0x35, 0x3, "8cc1820b42faa9873708b3d9749fc2b92ff69944b9b0e0591d214da98c8248ec1852ab2c84dc93d492b5fc49155a464ae1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x9}}, @TCA_ATM_HDR={0x4}, @TCA_ATM_HDR={0x9, 0x3, "80dd1679ac"}]}}, @c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}, @TCA_ATM_HDR={0x35, 0x3, "b051e49891d2463b00db551565d6de24d78513b01eb567068415e76e3f565aef6d57e58cd3cf3b11b0bfbb5c6bd2c22789"}, @TCA_ATM_HDR={0x3c, 0x3, "b321d0604c76804b4e0c0025895221ab73ae60e4fb4da2d7946f2ab607248c2ec706af0db6866bef75dd93ab4b57d6bb69ec7a441f06d9e9"}]}}]}, 0x108}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

4.840589866s ago: executing program 6 (id=4584):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000})

4.595409807s ago: executing program 1 (id=4585):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
bind(r3, &(0x7f0000000000)=@in={0x2, 0x808, @loopback}, 0x10)
listen(r3, 0x5)
r4 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x52d540, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='addr\x00\xe5\xed\xdb\xbb,\xbeX\xe8q\xbe\xd5\xaa\xa3)&\x8f\xc3W\xe9\xd3;\xe8{\xff\xfb\'\x12\xf0$\f\xed\x87\x81E\xfa\xc2W\x8fW\xfd\xa7#\xfe\"Tj\xac\\\xbd*\xf9\x8fF\xa0\xbb\xafNP\"\xeacB\xfb\xbe\x0f@v}\xf5\b\x97-\xd3\x8fL\xcf\xc7\xd6\xfe\b*N\xb6h\x7f\xab\x1c\x1e\xb5@\xaf68\xe0\xd6\xe6\xbf\xbb\xb8e\x10\xf7\x9c\x99/\x0f\xe0\xb0\xbb\x00\xfd\xc6]+:\xb0x\xd7\xaa\xef!\xd1\xb3\xec\x04w\xd1GMk\xa0\xaf\x927\x18\x146\r0\xc0U\x7f\xc1_\xe5\xe63(\a{\x86Oq4\x97@\x1c\xc4\xe7\n\xd3R\xbb,\x8f\xa3qgYT\n9s\x8eko\xd3\'#\x06\xb7k\xcd\x1e\xd2\xf7\xc1R\xa5\x06\xed\x03\xc7Vrl\xc5\xff\xf3[\xc4\x94\xe7\xa8\xbe\xf2\xa93\"\x94\xfd\x02[1\b\xef\x19\x89\xd8\xbb\xa3d\x95\xec\xb0\"\xd0\x91a\xb6\xb1\xa7bg}\xf0\x92\xea', &(0x7f0000000740)='\x8d\x9f\xe5\xd3\x80\x1ci\xdd\r\x8eWgW\x86aOS\x9c\xc1\x85\x97\xa4\xdbP\xe2F\x82\vaE\x87\xa6\xbe\xaf\xe8\xcd\xb2\xee\x02\x88\xff\xff\xff\xff\x00\x00\x00\x00\xc4\xed\xcf|\xcd6\bs2\xad\xa4\xe8\xf2\xec\x8dF\xb5\xa0\xfc\x90c\xaa\x10A\xf0\xf9\x8c\xa6\x806F\xb8q\xa1\x0f\x01D9\xd5\xc3\xe6\xf7\xe1[5(4\x04\xc4\xfa\xba\x97\f\xf3\x82\x06\xdd\xf7\xa1\xa2z\xcc\x93=o?\xb1L\xa7b\xfdnNr\xb0\xca\xae\xfa\x85\xb4\x8cG\xb6z\xad\xf8\xc9wg-\x03\n\x91\x8e\xa8\xa5\x89R\xa1\xaf(Ce\x89\xb5[{\xc5\xa2\xb2N\xd7 \xac\x81\xbf\xb8d+Jx\x8a\xd5<\xda\"}\xa6=r\xc5', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='port\x00', &(0x7f0000000700)='2056\x00', 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000800)='proto\x00', &(0x7f0000000900)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
r7 = accept(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000c00), 0x4)
setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28)
sendto(r7, &(0x7f0000000e00)="15030300020200", 0x7, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})

4.283251141s ago: executing program 6 (id=4586):
r0 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x4b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af25, 0x0)
write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3)
splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1)

3.824362684s ago: executing program 6 (id=4587):
r0 = socket$inet6(0xa, 0x3, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000001c0), &(0x7f0000000340)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x8}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3507, 0x1, 0x8, 0x0, 0x9}}, 0xe8)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4000)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=""/133, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xaf0)
openat(0xffffffffffffff9c, 0x0, 0x22842, 0x1)
socket$inet6(0xa, 0x7, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000000240)='1', 0x1)

3.82223087s ago: executing program 0 (id=4588):
socket$inet_udp(0x2, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
syz_clone(0x840100, &(0x7f0000000000)="3dd399d98a7a297172ae9f47b897781fa55384fd3f305a7ee34530e6edf749d3f6eda28e16abb68113cc5fe7f083057fd9347bd38b7a229249ef1a97e20d6b07c44b0abed72fe2425806a235a27ce68d117506922e2024bd7dd26f222e1e235ddce063fbfc22778065ce41a37493a369ac693e11aff1d23549a018d646864f7511cdb9575888a581db630b1473eec05c0cb857ee9b9e9d31b72b50a2e72d49c8d455e1d7660eead882487995106ea6a75ac29fdc933549c7e4b0ee6c2160fecdac11ac27d1631b614cacc2716af48ad66ad4428defafb6a3620c3d627bddcf9278", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="781f690697fcb73c91f61747d0a01511fd3d12ab33f1d977dc60b63549c682b238cef1775b35fdab85973f0564b42715610fefcf6997dce1abaa3e2e685901e9a666e26afbb1c3cd1ea255b5e693901a4d1f057d3a5436619c04767611465b1fa149875b656576de3ca79aeb492d6a09ad7956dc760977d9c3f05d27f4ae5bcafa85ab48ac24e62106af227199cb4d2e5df2881bc73f61db85362047c48d817ef89b25659422b92548708d8a858a3f19c5b98e6c1d6708fcc8ef24fa6fa8d03037cc252b5fb7fea5f1cc37e58669b878a0cd42b1ded0")
pipe2$watch_queue(0x0, 0x80)
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
open$dir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6001, 0x45)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80200, 0x64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
shmget(0x0, 0x1000, 0x80, &(0x7f00003da000/0x1000)=nil)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x3dd, 0x0, &(0x7f00000000c0))
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0x11, r2, 0x1, &(0x7f0000000180))
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x10, &(0x7f0000000580)=""/230)

3.479180225s ago: executing program 1 (id=4589):
r0 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x4b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af25, 0x0)
write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3)
splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) (fail_nth: 3)

2.986582898s ago: executing program 1 (id=4590):
r0 = socket$inet6(0xa, 0x3, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000001c0), &(0x7f0000000340)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x8}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3507, 0x1, 0x8, 0x0, 0x9}}, 0xe8)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
recvmmsg(r4, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000002e00)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/220, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4000)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=""/133, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ftruncate(r5, 0xaf0)
openat(0xffffffffffffff9c, 0x0, 0x22842, 0x1)
socket$inet6(0xa, 0x7, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r7, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r8, &(0x7f0000000240)='1', 0x1)

1.575421814s ago: executing program 6 (id=4591):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000001c0)="f21fd07061b81ad547ccddfbadf6ecf7d8fbd351e94b701dff5958931b7f0a736fd4bddc93ba5fbf47b3970cd4c49b1790d3a0cce145455b714f8279fed5115987417ce55b9ad6bf2903cccf97597799403933116f8d86faef173c3c524a8f5cef8a13b812f7e52432e6513c9c58513b4783df97bc7699e19a91b5d14f7d1d3e5b45b7aea43d9b08f699a28bf6f4")
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x2b})
r2 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x8000000, 0x2b, 0x1})

862.977765ms ago: executing program 0 (id=4592):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) (fail_nth: 3)

628.44904ms ago: executing program 6 (id=4593):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0210ef050a0000002dbd7000ffdbdf250800120002000100b86b6e000300000006003200020700000e0000000000482e4d79fdc60000fc02000000000000000000000000000000000000000000000002000000000000"], 0x50}}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0xffffffffffffffef, <r2=>r1}, './proc\x00'})
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x11e)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16=<r5=>0xffffffffffffffff, @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0)
write$snapshot(r6, &(0x7f0000000440)="93", 0x1)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'geneve0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r11, &(0x7f00000005c0)='\x00\x00\x00\x00', 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r12, 0x8004745a, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1000000054afab1bad16df1a6a3a55e5b857ca4e15cff6d3ed3a0e1bb616045cabc0f5ba1e46252811fe93d1aabe2af1da8c4e6bf31f0fcaeef519770361a973", @ANYRES16=r15, @ANYBLOB="010026bd7000fbdbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$TIPC_NL_PEER_REMOVE(r13, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r8})

612.324136ms ago: executing program 1 (id=4594):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x90000)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000400)={{0x1, 0x0, 0x1, 0x7}, &(0x7f0000000040)=[{}, {}, {}, {}, {}]})
r1 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x200, 0x125)
r2 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000004c0)=<r3=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000580)={{r2}, r3, 0xc, @inherit={0x70, &(0x7f0000000500)={0x1, 0x5, 0xc, 0x5, {0xc, 0x4, 0x8, 0x80000001, 0xc72}, [0x7, 0xe4, 0x3, 0x2, 0x5]}}, @subvolid=0x946})
ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000001580)={0x6, 0x48})
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000019c0)={0x2f, 0x1, &(0x7f00000015c0)="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"})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000001a00)={0x2180000000000000, 0xffff1000, 0xc4, 0x2, 0x10})
mlockall(0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001a40)={0x0, <r4=>0x0})
mq_notify(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x10, 0x0, @tid=r4})
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000001b00)=0x3)
pselect6(0x40, &(0x7f0000001b40)={0x8, 0x4, 0x5, 0x2, 0x637, 0x9, 0x4, 0xde}, &(0x7f0000001b80)={0x7, 0x0, 0x1, 0x8, 0x6, 0x0, 0x3, 0xf509}, &(0x7f0000001bc0)={0x3, 0x6, 0x6, 0x8001, 0x5, 0x8, 0x14d, 0x2}, &(0x7f0000001c00)={0x0, 0x3938700}, &(0x7f0000001c80)={&(0x7f0000001c40)={[0x3]}, 0x8})
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7bd6, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40441c1}, 0x4040044)
rt_sigprocmask(0x0, &(0x7f0000001dc0)={[0x8]}, &(0x7f0000001e00), 0x8)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001e40)=r4)
pwrite64$ublk_bdev(r2, &(0x7f0000001e80)="36194df3f9f64f45af3d82563166eab610cd8cff7cd29c90188e21cc6ba054a714a7ab7eead744643e1caed68f9b4c1840b9ea8bc1fa8871fa1b251e0b28ce605edc501a2c13faa1f52c3f3c9c58d8dbb525ad37cd3ca0275d6a6098c0b484ebba36e3adac54bc354f4f43ae5b5e7b7e310b3d476ab46e93ba267cf0efa49fc6828013633949a5c64e9295b3f3d8dbb6cc1e16979d13700489f5e0db7fc5708179d01d6b37e8", 0xa6, 0x6)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r1)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xbae7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa900}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44184}, 0x421c7bac66a743bf)
rt_sigtimedwait(&(0x7f00000020c0)={[0x3]}, &(0x7f0000002100), &(0x7f0000002180)={0x0, 0x989680}, 0x8)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000021c0), &(0x7f0000002200)=0x8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000022c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002240), 0x0, 0x1, &(0x7f0000002280)=""/59, 0x3b}, &(0x7f0000002300)=0x40)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000002340)=@ccm_128={{0x304}, "1300700047410d59", "7cc4f6698663d81022038c114fc6f0d0", "3be1330a", "eec799fe27952f7b"}, 0x28)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x81)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x4c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000002600)={0x6, 0x0, [{0x80000000, 0xf, 0x5, 0x6, 0x1, 0x0, 0xc7}, {0x4, 0x4fb, 0x3, 0x98f, 0x8, 0x6, 0x1}, {0xc0000001, 0x6, 0x3, 0x1, 0x4, 0x30000000, 0x2}, {0x5, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3199}, {0x4, 0x9, 0x1, 0x9, 0xa07, 0x7, 0x10}, {0x40000000, 0xba, 0x4, 0x1, 0x4, 0xa, 0x8}]})
ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000002740))

252.657732ms ago: executing program 0 (id=4595):
r0 = socket$inet6(0xa, 0x3, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000001c0), &(0x7f0000000340)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x8}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3507, 0x1, 0x8, 0x0, 0x9}}, 0xe8)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4000)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=""/133, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xaf0)
openat(0xffffffffffffff9c, 0x0, 0x22842, 0x1)
socket$inet6(0xa, 0x7, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000000240)='1', 0x1) (fail_nth: 3)

39.424433ms ago: executing program 6 (id=4596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x110, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_HDR={0x35, 0x3, "8cc1820b42faa9873708b3d9749fc2b92ff69944b9b0e0591d214da98c8248ec1852ab2c84dc93d492b5fc49155a464ae1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x9}}, @TCA_ATM_HDR={0x9, 0x3, "54f3c10c8f"}, @TCA_ATM_HDR={0x9, 0x3, "80dd1679ac"}]}}, @c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}, @TCA_ATM_HDR={0x35, 0x3, "b051e49891d2463b00db551565d6de24d78513b01eb567068415e76e3f565aef6d57e58cd3cf3b11b0bfbb5c6bd2c22789"}, @TCA_ATM_HDR={0x3c, 0x3, "b321d0604c76804b4e0c0025895221ab73ae60e4fb4da2d7946f2ab607248c2ec706af0db6866bef75dd93ab4b57d6bb69ec7a441f06d9e9"}]}}]}, 0x110}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

0s ago: executing program 1 (id=4597):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8095}, 0x40)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, r1, 0xd29, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x2, 0x7ff, 0x13}})
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8d}]})
r10 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r10, 0x0)
madvise(&(0x7f0000049000/0x3000)=nil, 0x3011, 0x16)

kernel console output (not intermixed with test programs):

d=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1030.239561][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.256006][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.276089][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.299220][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.316916][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.336842][ T5754] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1030.369645][ T5754] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1030.369701][ T5754] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1030.392244][   T31] audit: type=1800 audit(1787863681.090:8095): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=375533 res=0 errno=0
[ 1030.392496][ T5754] usb 1-1: USB disconnect, device number 37
[ 1032.076094][T18730] Bluetooth: hci5: command tx timeout
[ 1033.282669][T22425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1033.334422][T22341] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1033.405053][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1033.405961][T22341] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1033.443546][T22501] jffs2: notice: (22501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1033.447277][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1033.465568][T22341] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1033.512980][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1033.523018][T22341] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1033.600558][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1033.964692][T22522] loop8: detected capacity change from 0 to 8
[ 1033.972302][T22522] Dev loop8: unable to read RDB block 8
[ 1033.972358][T22522]  loop8: unable to read partition table
[ 1033.972561][T22522] loop8: partition table beyond EOD, truncated
[ 1033.972613][T22522] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1033.991285][ T5780] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1034.085732][T22341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1034.129912][T22341] 8021q: adding VLAN 0 to HW filter on device team0
[ 1034.138359][ T5780] usb 1-1: device descriptor read/64, error -71
[ 1034.155679][T18730] Bluetooth: hci5: command tx timeout
[ 1034.187116][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.189350][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1034.212263][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1034.212375][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1034.265893][   T31] kauditd_printk_skb: 27 callbacks suppressed
[ 1034.265943][   T31] audit: type=1800 audit(1787863684.961:8123): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1034.346920][T22341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1034.374985][ T5780] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1034.506344][ T5780] usb 1-1: device descriptor read/64, error -71
[ 1034.597523][   T31] audit: type=1800 audit(1787863685.291:8124): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1034.619893][ T5780] usb usb1-port1: attempt power cycle
[ 1034.853326][   T31] audit: type=1800 audit(1787863685.541:8125): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1034.955365][ T5780] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1034.975326][ T5780] usb 1-1: device descriptor read/8, error -71
[ 1035.214964][ T5780] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1035.239713][   T31] audit: type=1800 audit(1787863685.931:8126): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1035.260054][ T5780] usb 1-1: device descriptor read/8, error -71
[ 1035.364862][ T5780] usb usb1-port1: unable to enumerate USB device
[ 1035.543401][T22341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1035.728864][T22341] veth0_vlan: entered promiscuous mode
[ 1035.731956][   T31] audit: type=1800 audit(1787863686.421:8127): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1035.772201][T22341] veth1_vlan: entered promiscuous mode
[ 1035.819308][   T31] audit: type=1800 audit(1787863686.511:8128): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=376399 res=0 errno=0
[ 1035.853624][   T31] audit: type=1800 audit(1787863686.541:8129): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=376403 res=0 errno=0
[ 1035.895930][   T31] audit: type=1800 audit(1787863686.591:8130): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1035.950794][T22341] veth0_macvtap: entered promiscuous mode
[ 1035.962700][T22341] veth1_macvtap: entered promiscuous mode
[ 1035.991903][T22341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1036.021790][T22341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1036.091960][ T6599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.103013][T22576] dns_resolver: Unsupported content type (255)
[ 1036.109673][T21102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.135575][ T8258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.136420][ T8258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.285449][   T31] audit: type=1800 audit(1787863686.981:8131): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1036.412303][   T31] audit: type=1800 audit(1787863687.101:8132): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=376476 res=0 errno=0
[ 1036.841040][ T6599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1036.841083][ T6599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1037.098669][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1037.107894][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1037.276114][  T987] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1037.435190][  T987] usb 7-1: Using ep0 maxpacket: 16
[ 1037.442877][  T987] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1037.458304][  T987] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1037.483455][  T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.483503][  T987] usb 7-1: Product: syz
[ 1037.483550][  T987] usb 7-1: Manufacturer: syz
[ 1037.483571][  T987] usb 7-1: SerialNumber: syz
[ 1037.550734][  T987] r8152-cfgselector 7-1: Unknown version 0x0000
[ 1037.550783][  T987] r8152-cfgselector 7-1: config 0 descriptor??
[ 1037.796980][T22595] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1037.825872][ T5780] r8152-cfgselector 7-1: USB disconnect, device number 32
[ 1037.867775][T22613] jffs2: notice: (22613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1038.661762][T22632] FAULT_INJECTION: forcing a failure.
[ 1038.661762][T22632] name failslab, interval 1, probability 0, space 0, times 0
[ 1038.676261][T22632] CPU: 1 UID: 0 PID: 22632 Comm: syz.0.4426 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1038.676293][T22632] Tainted: [L]=SOFTLOCKUP
[ 1038.676301][T22632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1038.676313][T22632] Call Trace:
[ 1038.676321][T22632]  <TASK>
[ 1038.676330][T22632]  dump_stack_lvl+0xe8/0x150
[ 1038.676363][T22632]  should_fail_ex+0x3eb/0x540
[ 1038.676397][T22632]  should_failslab+0xa8/0x100
[ 1038.676419][T22632]  __kvmalloc_node_noprof+0x176/0x820
[ 1038.676450][T22632]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1038.676477][T22632]  ? io_alloc_cache_init+0x42/0x140
[ 1038.676500][T22632]  ? io_alloc_cache_init+0x42/0x140
[ 1038.676530][T22632]  io_alloc_cache_init+0x42/0x140
[ 1038.676556][T22632]  io_ring_ctx_alloc+0x57d/0xb80
[ 1038.676583][T22632]  io_uring_create+0x50/0x990
[ 1038.676607][T22632]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1038.676634][T22632]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1038.676659][T22632]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1038.676700][T22632]  ? __pfx_ksys_write+0x10/0x10
[ 1038.676736][T22632]  do_syscall_64+0x166/0x520
[ 1038.676757][T22632]  ? trace_irq_disable+0x3b/0x140
[ 1038.676784][T22632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.676804][T22632]  ? clear_bhb_loop+0x70/0xc0
[ 1038.676827][T22632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.676846][T22632] RIP: 0033:0x7ff1a8d9e159
[ 1038.676863][T22632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1038.676878][T22632] RSP: 002b:00007ff1a9d0dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1038.676899][T22632] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007ff1a8d9e159
[ 1038.676913][T22632] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9
[ 1038.676926][T22632] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000
[ 1038.676936][T22632] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888
[ 1038.676949][T22632] R13: 0000200000000890 R14: 00007ff1a9d0dfd8 R15: 0000000000000000
[ 1038.676973][T22632]  </TASK>
[ 1038.843606][ T5780] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[ 1039.024276][ T5780] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1039.032877][ T5780] usb 7-1: not running at top speed; connect to a high speed hub
[ 1039.032940][ T5780] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[ 1039.054311][ T5780] usb 7-1: config 5 has an invalid interface number: 246 but max is 0
[ 1039.054359][ T5780] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.054396][ T5780] usb 7-1: config 5 has no interface number 0
[ 1039.054699][ T5780] usb 7-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 25309, setting to 64
[ 1039.054732][ T5780] usb 7-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1039.054765][ T5780] usb 7-1: config 5 interface 246 has no altsetting 0
[ 1039.122884][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.131215][ T5780] usb 7-1: Product: syz
[ 1039.131240][ T5780] usb 7-1: Manufacturer: syz
[ 1039.131256][ T5780] usb 7-1: SerialNumber: syz
[ 1039.151261][T22628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1039.283454][   T25] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[ 1039.368832][   T31] kauditd_printk_skb: 34 callbacks suppressed
[ 1039.368884][   T31] audit: type=1800 audit(1787863690.062:8167): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377046 res=0 errno=0
[ 1039.434361][   T25] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1039.446757][   T25] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1039.457895][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.466392][   T25] usb 1-1: Product: syz
[ 1039.470690][   T25] usb 1-1: Manufacturer: syz
[ 1039.470713][   T25] usb 1-1: SerialNumber: syz
[ 1039.485195][   T31] audit: type=1800 audit(1787863690.182:8168): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377065 res=0 errno=0
[ 1039.505445][   T31] audit: type=1800 audit(1787863690.182:8169): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=377097 res=0 errno=0
[ 1039.505503][   T31] audit: type=1800 audit(1787863690.182:8170): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=377072 res=0 errno=0
[ 1039.505571][   T31] audit: type=1800 audit(1787863690.182:8171): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=377073 res=0 errno=0
[ 1039.588178][ T5780] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1039.604428][   T31] audit: type=1800 audit(1787863690.302:8172): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=377023 res=0 errno=0
[ 1039.636167][ T5780] usb 7-1: USB disconnect, device number 33
[ 1039.636786][   T31] audit: type=1800 audit(1787863690.332:8173): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=377024 res=0 errno=0
[ 1039.646381][ T6599] usb 7-1: Failed to submit usb control message: -71
[ 1039.646419][ T6599] usb 7-1: unable to send the bmi data to the device: -71
[ 1039.646436][ T6599] usb 7-1: unable to get target info from device
[ 1039.646533][ T6599] usb 7-1: could not get target info (-71)
[ 1039.647112][ T6599] usb 7-1: could not probe fw (-71)
[ 1039.770335][   T31] audit: type=1800 audit(1787863690.462:8174): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=377003 res=0 errno=0
[ 1039.902828][   T31] audit: type=1800 audit(1787863690.592:8175): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1040.013100][   T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202
[ 1040.030707][   T31] audit: type=1800 audit(1787863690.722:8176): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=377094 res=0 errno=0
[ 1040.054584][T22658] netlink: 'syz.3.4429': attribute type 9 has an invalid length.
[ 1040.062439][T22658] netlink: 'syz.3.4429': attribute type 2 has an invalid length.
[ 1040.459303][T22666] FAULT_INJECTION: forcing a failure.
[ 1040.459303][T22666] name failslab, interval 1, probability 0, space 0, times 0
[ 1040.459359][T22666] CPU: 0 UID: 0 PID: 22666 Comm: syz.6.4430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1040.459394][T22666] Tainted: [L]=SOFTLOCKUP
[ 1040.459400][T22666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1040.459411][T22666] Call Trace:
[ 1040.459419][T22666]  <TASK>
[ 1040.459428][T22666]  dump_stack_lvl+0xe8/0x150
[ 1040.459461][T22666]  should_fail_ex+0x3eb/0x540
[ 1040.459496][T22666]  ? dup_task_struct+0x52/0xa00
[ 1040.459519][T22666]  should_failslab+0xa8/0x100
[ 1040.459542][T22666]  ? dup_task_struct+0x52/0xa00
[ 1040.459563][T22666]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1040.459590][T22666]  ? dup_task_struct+0x52/0xa00
[ 1040.459617][T22666]  dup_task_struct+0x52/0xa00
[ 1040.459641][T22666]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1040.459680][T22666]  copy_process+0x820/0x43e0
[ 1040.459712][T22666]  ? __pfx___futex_wait+0x10/0x10
[ 1040.459751][T22666]  ? try_to_wake_up+0x8c5/0x14d0
[ 1040.459775][T22666]  ? __pfx_copy_process+0x10/0x10
[ 1040.459810][T22666]  kernel_clone+0x2d7/0x940
[ 1040.459838][T22666]  ? __pfx_kernel_clone+0x10/0x10
[ 1040.459869][T22666]  ? do_futex+0x3e7/0x4e0
[ 1040.459905][T22666]  __x64_sys_clone+0x1b6/0x230
[ 1040.459933][T22666]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1040.459971][T22666]  ? __pfx___se_sys_futex+0x10/0x10
[ 1040.459994][T22666]  ? __pfx_ksys_write+0x10/0x10
[ 1040.460031][T22666]  do_syscall_64+0x166/0x520
[ 1040.460052][T22666]  ? trace_irq_disable+0x3b/0x140
[ 1040.460082][T22666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.460103][T22666]  ? clear_bhb_loop+0x70/0xc0
[ 1040.460128][T22666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.460149][T22666] RIP: 0033:0x7f7876b9e159
[ 1040.460169][T22666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1040.460187][T22666] RSP: 002b:00007f7877abefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1040.460210][T22666] RAX: ffffffffffffffda RBX: 00007f7876e25fa0 RCX: 00007f7876b9e159
[ 1040.460226][T22666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[ 1040.460239][T22666] RBP: 00007f7876c35024 R08: 0000000000000000 R09: 0000000000000000
[ 1040.460253][T22666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1040.460266][T22666] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1040.460298][T22666]  </TASK>
[ 1040.728342][T22667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1040.737597][T22667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1040.833868][T17102] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1040.974739][T17102] usb 4-1: device descriptor read/64, error -71
[ 1041.233973][T17102] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1041.363019][T17102] usb 4-1: device descriptor read/64, error -71
[ 1041.474503][T17102] usb usb4-port1: attempt power cycle
[ 1041.813324][T17102] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1041.836620][T17102] usb 4-1: device descriptor read/8, error -71
[ 1041.914471][    C1] usblp0: nonzero write bulk status received: -71
[ 1041.924668][ T5754] usb 1-1: USB disconnect, device number 42
[ 1041.940277][ T5754] usblp0: removed
[ 1042.093394][T17102] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1042.118131][T17102] usb 4-1: device descriptor read/8, error -71
[ 1042.237287][T17102] usb usb4-port1: unable to enumerate USB device
[ 1042.322889][T11019] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1042.493685][T11019] usb 7-1: Using ep0 maxpacket: 16
[ 1042.498676][T11019] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1042.500044][T11019] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[ 1042.500070][T11019] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1042.500087][T11019] usb 7-1: config 0 has no interface number 0
[ 1042.506090][T11019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.506117][T11019] usb 7-1: Product: syz
[ 1042.506132][T11019] usb 7-1: Manufacturer: syz
[ 1042.506148][T11019] usb 7-1: SerialNumber: syz
[ 1042.516388][T11019] usb 7-1: config 0 descriptor??
[ 1042.528884][T11019] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 1042.528920][T11019] uvcvideo 7-1:0.105: No valid video chain found.
[ 1042.636426][T17102] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 1042.741728][T11019] usb 7-1: USB disconnect, device number 34
[ 1042.787392][T17102] usb 2-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=46.26
[ 1042.793624][T17102] usb 2-1: config 14 has an invalid interface number: 217 but max is 0
[ 1042.793653][T17102] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping
[ 1042.793672][T17102] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1042.793691][T17102] usb 2-1: config 14 has 2 interfaces, different from the descriptor's value: 1
[ 1042.793712][T17102] usb 2-1: config 14 has no interface number 1
[ 1042.793751][T17102] usb 2-1: config 14 interface 217 has no altsetting 0
[ 1042.800356][T17102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.800385][T17102] usb 2-1: Product: syz
[ 1042.800400][T17102] usb 2-1: Manufacturer: syz
[ 1042.800414][T17102] usb 2-1: SerialNumber: syz
[ 1043.099332][T17102] rndis_host 2-1:14.217: skipping garbage
[ 1043.099412][T17102] rndis_host 2-1:14.217: rndis: master #0/ffff888021ea7000 slave #1/0000000000000000
[ 1043.100758][T17102] cdc_acm 2-1:14.217: skipping garbage
[ 1043.136566][T17102] usb 2-1: USB disconnect, device number 20
[ 1043.862114][T22741] FAULT_INJECTION: forcing a failure.
[ 1043.862114][T22741] name failslab, interval 1, probability 0, space 0, times 0
[ 1043.862179][T22741] CPU: 1 UID: 0 PID: 22741 Comm: syz.0.4446 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1043.862210][T22741] Tainted: [L]=SOFTLOCKUP
[ 1043.862218][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1043.862232][T22741] Call Trace:
[ 1043.862241][T22741]  <TASK>
[ 1043.862251][T22741]  dump_stack_lvl+0xe8/0x150
[ 1043.862283][T22741]  should_fail_ex+0x3eb/0x540
[ 1043.862321][T22741]  ? dup_task_struct+0x52/0xa00
[ 1043.862342][T22741]  should_failslab+0xa8/0x100
[ 1043.862364][T22741]  ? dup_task_struct+0x52/0xa00
[ 1043.862383][T22741]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1043.862413][T22741]  ? dup_task_struct+0x52/0xa00
[ 1043.862441][T22741]  dup_task_struct+0x52/0xa00
[ 1043.862466][T22741]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1043.862502][T22741]  copy_process+0x820/0x43e0
[ 1043.862534][T22741]  ? __pfx___futex_wait+0x10/0x10
[ 1043.862575][T22741]  ? futex_hash+0x4e/0x2b0
[ 1043.862608][T22741]  ? __pfx_copy_process+0x10/0x10
[ 1043.862630][T22741]  ? futex_hash+0x275/0x2b0
[ 1043.862671][T22741]  kernel_clone+0x2d7/0x940
[ 1043.862699][T22741]  ? __pfx_kernel_clone+0x10/0x10
[ 1043.862733][T22741]  ? do_futex+0x3e7/0x4e0
[ 1043.862760][T22741]  __x64_sys_clone+0x1b6/0x230
[ 1043.862790][T22741]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1043.862829][T22741]  ? rcu_is_watching+0x16/0xb0
[ 1043.862862][T22741]  do_syscall_64+0x166/0x520
[ 1043.862884][T22741]  ? trace_irq_disable+0x3b/0x140
[ 1043.862914][T22741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.862936][T22741]  ? clear_bhb_loop+0x70/0xc0
[ 1043.862961][T22741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.862980][T22741] RIP: 0033:0x7ff1a8d9e159
[ 1043.863000][T22741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1043.863018][T22741] RSP: 002b:00007ff1a9d0dfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1043.863043][T22741] RAX: ffffffffffffffda RBX: 00007ff1a9025fa0 RCX: 00007ff1a8d9e159
[ 1043.863061][T22741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1043.863073][T22741] RBP: 00007ff1a8e35024 R08: 0000000000000000 R09: 0000000000000000
[ 1043.863087][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1043.863101][T22741] R13: 00007ff1a9026038 R14: 00007ff1a9025fa0 R15: 00007ffc4051cc58
[ 1043.863133][T22741]  </TASK>
[ 1044.273824][T17102] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1044.376960][   T31] kauditd_printk_skb: 43 callbacks suppressed
[ 1044.377013][   T31] audit: type=1800 audit(1787863695.073:8220): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1044.453277][T17102] usb 2-1: Using ep0 maxpacket: 32
[ 1044.454119][T17102] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[ 1044.455409][T17102] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1044.455440][T17102] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1044.455465][T17102] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1044.455497][T17102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.476124][T17102] usb 2-1: config 0 descriptor??
[ 1044.502501][   T31] audit: type=1800 audit(1787863695.163:8221): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377720 res=0 errno=0
[ 1044.502556][   T31] audit: type=1800 audit(1787863695.163:8222): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=377749 res=0 errno=0
[ 1044.502593][   T31] audit: type=1800 audit(1787863695.183:8223): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=377727 res=0 errno=0
[ 1044.502629][   T31] audit: type=1800 audit(1787863695.183:8224): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=377728 res=0 errno=0
[ 1044.511211][   T31] audit: type=1800 audit(1787863695.203:8225): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=377729 res=0 errno=0
[ 1044.640055][   T31] audit: type=1800 audit(1787863695.333:8226): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1044.662017][   T31] audit: type=1800 audit(1787863695.333:8227): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377778 res=0 errno=0
[ 1044.903657][   T31] audit: type=1800 audit(1787863695.593:8228): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377796 res=0 errno=0
[ 1044.980775][T22766] netlink: 19 bytes leftover after parsing attributes in process `syz.6.4451'.
[ 1044.993577][T22764] ima: policy update failed
[ 1044.998657][   T31] audit: type=1802 audit(1787863695.693:8229): pid=22764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4451" res=0 errno=0
[ 1045.274903][T11019] kernel read not supported for file /vcs (pid: 11019 comm: kworker/0:9)
[ 1045.448318][T17102] hid-alps 0003:044E:120B.0040: failed read register (-71)
[ 1045.448437][T17102] hid-alps 0003:044E:120B.0040: failed U1_DEV_CTRL_1 (-71)
[ 1045.484714][T17102] hid-alps 0003:044E:120B.0040: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0
[ 1045.501299][T22779] Invalid logical block size (8189)
[ 1045.502129][T17102] usb 2-1: USB disconnect, device number 21
[ 1045.573464][T22781] FAULT_INJECTION: forcing a failure.
[ 1045.573464][T22781] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.573520][T22781] CPU: 0 UID: 0 PID: 22781 Comm: syz.0.4454 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1045.573545][T22781] Tainted: [L]=SOFTLOCKUP
[ 1045.573553][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1045.573563][T22781] Call Trace:
[ 1045.573570][T22781]  <TASK>
[ 1045.573577][T22781]  dump_stack_lvl+0xe8/0x150
[ 1045.573607][T22781]  should_fail_ex+0x3eb/0x540
[ 1045.573641][T22781]  should_failslab+0xa8/0x100
[ 1045.573660][T22781]  ? skb_clone+0x212/0x3a0
[ 1045.573687][T22781]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1045.573714][T22781]  ? skb_clone+0x212/0x3a0
[ 1045.573745][T22781]  skb_clone+0x212/0x3a0
[ 1045.573773][T22781]  __netlink_deliver_tap+0x413/0x860
[ 1045.573811][T22781]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1045.573841][T22781]  netlink_deliver_tap+0x19c/0x1b0
[ 1045.573869][T22781]  netlink_unicast+0x781/0x940
[ 1045.573904][T22781]  netlink_sendmsg+0x813/0xb40
[ 1045.573950][T22781]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.573986][T22781]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1045.574015][T22781]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.574042][T22781]  sock_sendmsg_nosec+0x13a/0x180
[ 1045.574074][T22781]  ____sys_sendmsg+0x54e/0x850
[ 1045.574105][T22781]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1045.574139][T22781]  ? import_iovec+0x73/0xa0
[ 1045.574162][T22781]  ___sys_sendmsg+0x2a5/0x360
[ 1045.574186][T22781]  ? __lock_acquire+0x6df/0x2e50
[ 1045.574217][T22781]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1045.574278][T22781]  ? __fget_files+0x2a/0x420
[ 1045.574301][T22781]  ? __fget_files+0x3a2/0x420
[ 1045.574332][T22781]  __x64_sys_sendmsg+0x1b1/0x290
[ 1045.574359][T22781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1045.574404][T22781]  do_syscall_64+0x166/0x520
[ 1045.574424][T22781]  ? trace_irq_disable+0x3b/0x140
[ 1045.574450][T22781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.574470][T22781]  ? clear_bhb_loop+0x70/0xc0
[ 1045.574494][T22781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.574513][T22781] RIP: 0033:0x7ff1a8d9e159
[ 1045.574531][T22781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.574548][T22781] RSP: 002b:00007ff1a9d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.574569][T22781] RAX: ffffffffffffffda RBX: 00007ff1a9025fa0 RCX: 00007ff1a8d9e159
[ 1045.574583][T22781] RDX: 0000000020000054 RSI: 0000200000000780 RDI: 0000000000000003
[ 1045.574597][T22781] RBP: 00007ff1a9d0e090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.574609][T22781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.574622][T22781] R13: 00007ff1a9026038 R14: 00007ff1a9025fa0 R15: 00007ffc4051cc58
[ 1045.574653][T22781]  </TASK>
[ 1046.015829][T22786] fido_id[22786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1046.236521][T17102] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 1046.389227][T17102] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1046.393495][T17102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1046.393531][T17102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.396384][T17102] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1046.396413][T17102] usb 1-1: Manufacturer: syz
[ 1046.409026][T17102] usb 1-1: config 0 descriptor??
[ 1046.601956][T11019] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1046.656569][T22807] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1046.752194][T11019] usb 2-1: Using ep0 maxpacket: 32
[ 1046.754743][T11019] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1046.754795][T11019] usb 2-1: New USB device found, idVendor=106c, idProduct=1a45, bcdDevice=56.66
[ 1046.755998][T11019] usb 2-1: config 8 has an invalid interface number: 114 but max is 0
[ 1046.756024][T11019] usb 2-1: config 8 has no interface number 0
[ 1046.756053][T11019] usb 2-1: config 8 interface 114 has no altsetting 0
[ 1046.766213][T11019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.766241][T11019] usb 2-1: Product: syz
[ 1046.766256][T11019] usb 2-1: Manufacturer: syz
[ 1046.766295][T11019] usb 2-1: SerialNumber: syz
[ 1047.049986][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4462'.
[ 1047.054622][T17102] usbhid 1-1:0.0: can't add hid device: -71
[ 1047.054763][T17102] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1047.070050][T17102] usb 1-1: USB disconnect, device number 43
[ 1047.128927][T11019] qmi_wwan 2-1:8.114: More than one union descriptor, skipping ...
[ 1047.144288][T11019] qmi_wwan 2-1:8.114: probe with driver qmi_wwan failed with error -22
[ 1047.178945][T11019] usb 2-1: USB disconnect, device number 22
[ 1047.601468][T22825] cgroup: fork rejected by pids controller in /syz3
[ 1047.878850][T22860] netlink: 'syz.0.4464': attribute type 10 has an invalid length.
[ 1047.878900][T22860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4464'.
[ 1049.428813][   T31] kauditd_printk_skb: 35 callbacks suppressed
[ 1049.428857][   T31] audit: type=1800 audit(1787863700.124:8265): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1049.495498][   T31] audit: type=1800 audit(1787863700.194:8266): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1049.581321][T17102] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1049.721454][T17102] usb 7-1: device descriptor read/64, error -71
[ 1049.738109][   T31] audit: type=1800 audit(1787863700.434:8267): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1049.781333][  T987] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1049.848191][   T31] audit: type=1800 audit(1787863700.544:8268): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1049.904316][T22898] [U] 
[ 1049.904333][T22898] [U] K{‘
[ 1049.904397][T22898] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç
[ 1049.904439][T22898] [U] tžØ–/,�~ˆÄœ­‹jõÿÊ}8îÊþ'o1�Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î¾ª(È5ˆObü¤‡ÍƒJÖ
[ 1049.904461][T22898] [U] ±k\&—}6£6œXîHX�¥ôµ„Ìþ.`¸a“$Û40|϶¿�9°øÞ¨„¯ÀÏU‚ò4�ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’4”ÿ
[ 1049.904511][T22898] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØI�n¨™[Z(•„C|Të]z{�â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJø�SH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž�÷éwUh„fN—Ž�Çhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<ã	¢Ø°‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿c�Õ³žV¦=�‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI
˜¢œaïì6-úD�úV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯
Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå
[ 1049.904599][T22898] [U] 	+�w‰G?]£Ó'a:	»Ú)Õ
ïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:�^0À�téèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj×;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼�Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿Bĵٜ Nóy"vI2ûÌ
[ 1049.904638][T22898] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ�°¶ºqîÙ
 ŸÇ3‹Æq¯ôN^HP*½Ü$	µ.Î7yÓ±œ2³
[ 1049.904655][T22898] [U] ½?�©ÿhüä*ÙÁ”Î3í�7Üé�¾^#Q�"0~‡‚ð(éoïXLŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ
[ 1049.904699][T22898] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“�®ŸŸñ�2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä�„RTÔ¶ŒBÚ[+/<<R�B�Êäõ|ФeŽžÑÛ –V96#ûúÑͤê¦jºUº%
s81ƒ�þÒ©s�P±¨\£ƒ?qª|L�´QXµ0ÂKÔ1orÉ´2¡½|ÖüdÖFÌ¿»ù�ÚË2Þ”–¨×0ÌåH•}C[/¤»“Ÿpx^¼èo
[ 1049.904755][T22898] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ�_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU�‰AK!aQ`ßË;Fð•�I+ÖÐVUHåðÂmÑj³´Æ·ÙÛZÄcøãz‹¼Â)_矡	ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè
[ 1049.904856][T22898] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj	ãA˜›F¶ß�·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©â
á¥%Ãr6„•(]“¦/Ÿ¶ø�Å™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"Ù
æðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.Rc+Ä@Ëꦇp‡uá
p”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆�øÝ£þ´OTcôÆx¶¨¾4™NË	³Ï&�á­ðÚ‹ŠÓ@¶:m7ß~�+”W*ÛÁ–xMüó>>—¡{q¢Ú×
_²Õ�LX8ÊU„ÇØî{ðZ³íø�)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ�„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q	ìDWŸòø¸=ؽ|q¬	ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE�`ƦM¢Xîâ"ä\
[ 1049.904891][T22898] [U] {;Žõ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_  HPϱœSªD­�¦ø:]‚{Ë©ÔÝæè½
[ 1049.904924][T22898] [U] I,Ç>Çó¤	îÙ5�1ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼Š�Vˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ
[K@ÑëÄü2çǬ–®¡p"^`Á‰í	øß
[ 1049.904938][T22898] [U] 22½“Æ©Ðû©x?0;3u±
[ 1049.904987][T22898] [U] ÞœÕ
æ�ósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_
•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË,	‘Ä	þD~×d©£¡+Ãw;A\˜F
PÉþȘ|$ºø)�
KØ�I³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ	ÝíßËae©�tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç
[ 1049.905016][T22898] [U] [ª['xn€'²÷á¿Ü,mr¦«/žšœâ1D=!DŽx91Bù
wç»R—lf…ƒÆKì¤Zõê# `ì‘lØ›§Ëœ»×b~åmÒÔÖ
[ 1049.905039][T22898] [U] ™LÖ>�ñ�d+ˆd¯§—®Ì"5Žê��h3<ª¨ÅiR=F^”f�nõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ
[ 1049.905052][T22898] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW��]ôÊäì©�
[ 1049.905075][T22898] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSk�YÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ
[ 1049.905109][T22898] [U] ¹ec�
[ 1049.905121][T22898] [U] �—”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·�Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µŽçIÛRió�pmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ
[ 1049.956576][  T987] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1049.958133][  T987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.958180][  T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1049.958205][  T987] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1049.958229][  T987] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1049.958327][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.984432][T17102] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1050.009177][   T31] audit: type=1800 audit(1787863700.694:8269): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=379166 res=0 errno=0
[ 1050.009231][   T31] audit: type=1800 audit(1787863700.704:8270): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=379195 res=0 errno=0
[ 1050.021326][   T31] audit: type=1800 audit(1787863700.714:8271): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=379173 res=0 errno=0
[ 1050.021385][   T31] audit: type=1800 audit(1787863700.714:8272): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=379174 res=0 errno=0
[ 1050.021422][   T31] audit: type=1800 audit(1787863700.714:8273): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=379175 res=0 errno=0
[ 1050.056658][   T31] audit: type=1800 audit(1787863700.734:8274): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=379215 res=0 errno=0
[ 1050.074604][   T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1050.142040][ T5780] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1050.189130][T17102] usb 7-1: device descriptor read/64, error -71
[ 1050.221276][   T25] usb 1-1: Using ep0 maxpacket: 16
[ 1050.222189][   T25] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1050.223768][   T25] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1050.223794][   T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1050.223815][   T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1050.223833][   T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1050.223875][   T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1050.223896][   T25] usb 1-1: config 0 has no interface number 0
[ 1050.223934][   T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1050.223961][   T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1050.223983][   T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1050.224036][   T25] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1050.224062][   T25] usb 1-1: config 0 interface 125 has no altsetting 0
[ 1050.226420][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.226444][   T25] usb 1-1: Product: syz
[ 1050.226458][   T25] usb 1-1: Manufacturer: syz
[ 1050.226494][   T25] usb 1-1: SerialNumber: syz
[ 1050.236430][   T25] usb 1-1: config 0 descriptor??
[ 1050.298211][ T5780] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1050.299547][ T5780] usb 4-1: config 0 has an invalid interface number: 170 but max is 0
[ 1050.299573][ T5780] usb 4-1: config 0 has no interface number 0
[ 1050.299600][ T5780] usb 4-1: too many endpoints for config 0 interface 170 altsetting 25: 72, using maximum allowed: 30
[ 1050.299663][ T5780] usb 4-1: config 0 interface 170 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[ 1050.299691][ T5780] usb 4-1: config 0 interface 170 has no altsetting 0
[ 1050.299722][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.323878][T17102] usb usb7-port1: attempt power cycle
[ 1050.327726][ T5780] usb 4-1: config 0 descriptor??
[ 1050.437129][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1050.437812][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1050.457935][    C1] usb 1-1: async_complete: urb error -71
[ 1050.469714][    C1] usb 1-1: async_complete: urb error -71
[ 1050.470085][    C1] usb 1-1: async_complete: urb error -71
[ 1050.470472][    C1] usb 1-1: async_complete: urb error -71
[ 1050.470784][   T25] get_1284_register: usb error -71
[ 1050.533127][   T25] usb 1-1: USB disconnect, device number 44
[ 1050.635401][T22892] nfs: Deprecated parameter 'nointr'
[ 1050.707189][ T5780] usb 4-1: string descriptor 0 read error: -71
[ 1050.719980][T22897] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ@BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUd
Ç©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx�™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ
[ 1050.736671][ T5780] usb 4-1: Cannot read MAC address
[ 1050.736973][ T5780] MOSCHIP usb-ethernet driver 4-1:0.170: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1050.775066][ T5780] usb 4-1: USB disconnect, device number 105
[ 1050.782796][T17102] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1050.795550][  T987] gud 2-1:1.0: probe with driver gud failed with error -71
[ 1050.815152][T17102] usb 7-1: device descriptor read/8, error -71
[ 1050.847208][  T987] usb 2-1: USB disconnect, device number 23
[ 1051.071128][T17102] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1051.091690][T17102] usb 7-1: device descriptor read/8, error -71
[ 1051.201287][T17102] usb usb7-port1: unable to enumerate USB device
[ 1051.361698][T22909] comedi comedi3: unsupported base address 0x10001
[ 1051.620945][T17102] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1051.710965][   T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1051.770917][T17102] usb 1-1: Using ep0 maxpacket: 8
[ 1051.776801][T17102] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1051.791071][T17102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.791116][T17102] usb 1-1: Product: syz
[ 1051.791145][T17102] usb 1-1: Manufacturer: syz
[ 1051.791162][T17102] usb 1-1: SerialNumber: syz
[ 1051.819473][T17102] usb 1-1: config 0 descriptor??
[ 1051.831110][T17102] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1051.841347][T17102] dvb-usb: bulk message failed: -22 (2/0)
[ 1051.868553][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1051.897755][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.897803][   T10] usb 4-1: Product: syz
[ 1051.897841][   T10] usb 4-1: Manufacturer: syz
[ 1051.897859][   T10] usb 4-1: SerialNumber: syz
[ 1051.923077][T17102] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1051.933925][T17102] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1051.943663][T17102] usb 1-1: media controller created
[ 1051.956475][   T10] usb 4-1: config 0 descriptor??
[ 1051.973339][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1051.987924][T17102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1052.050885][T17102] cxusb: set interface failed
[ 1052.050920][T17102] dvb-usb: bulk message failed: -22 (1/0)
[ 1052.178384][T17102] DVB: Unable to find symbol mt352_attach()
[ 1052.178453][T17102] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1052.300844][T17102] rc_core: IR keymap rc-dvico-portable not found
[ 1052.300883][T17102] Registered IR keymap rc-empty
[ 1052.302306][T17102] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1052.334112][T17102] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input68
[ 1052.352190][T17102] dvb-usb: schedule remote query interval to 100 msecs.
[ 1052.359432][T17102] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1052.378110][T17102] usb 1-1: USB disconnect, device number 45
[ 1052.438902][  T987] usb 4-1: USB disconnect, device number 106
[ 1052.469107][T17102] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1052.873009][T22937] FAULT_INJECTION: forcing a failure.
[ 1052.873009][T22937] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1052.905507][T22937] CPU: 0 UID: 0 PID: 22937 Comm: syz.6.4485 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.905539][T22937] Tainted: [L]=SOFTLOCKUP
[ 1052.905546][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1052.905557][T22937] Call Trace:
[ 1052.905573][T22937]  <TASK>
[ 1052.905582][T22937]  dump_stack_lvl+0xe8/0x150
[ 1052.905614][T22937]  should_fail_ex+0x3eb/0x540
[ 1052.905648][T22937]  prepare_alloc_pages+0x223/0x600
[ 1052.905684][T22937]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1052.905718][T22937]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1052.905752][T22937]  ? __pfx_policy_nodemask+0x10/0x10
[ 1052.905782][T22937]  alloc_pages_mpol+0x21e/0x390
[ 1052.905808][T22937]  alloc_pages_noprof+0xb1/0x2b0
[ 1052.905831][T22937]  get_free_pages_noprof+0xf/0x80
[ 1052.905858][T22937]  __kasan_populate_vmalloc+0x38/0x1c0
[ 1052.905893][T22937]  ? do_raw_spin_unlock+0xf5/0x200
[ 1052.905920][T22937]  alloc_vmap_area+0xd1a/0x1420
[ 1052.905959][T22937]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1052.905979][T22937]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[ 1052.906007][T22937]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[ 1052.906034][T22937]  ? __get_vm_area_node+0x155/0x2f0
[ 1052.906059][T22937]  __get_vm_area_node+0x200/0x2f0
[ 1052.906088][T22937]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1052.906114][T22937]  ? n_tty_open+0x1d/0x150
[ 1052.906151][T22937]  ? lock_acquire+0x115/0x350
[ 1052.906186][T22937]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1052.906220][T22937]  ? n_tty_open+0x1d/0x150
[ 1052.906239][T22937]  vzalloc_noprof+0xb2/0xe0
[ 1052.906264][T22937]  ? n_tty_open+0x1d/0x150
[ 1052.906284][T22937]  n_tty_open+0x1d/0x150
[ 1052.906304][T22937]  tty_ldisc_failto+0x1e1/0x330
[ 1052.906334][T22937]  tty_ldisc_restore+0x57/0x110
[ 1052.906358][T22937]  tty_set_ldisc+0x393/0x540
[ 1052.906385][T22937]  tty_ioctl+0xc30/0xdd0
[ 1052.906410][T22937]  ? __pfx_tty_ioctl+0x10/0x10
[ 1052.906435][T22937]  __se_sys_ioctl+0xfc/0x170
[ 1052.906466][T22937]  do_syscall_64+0x166/0x520
[ 1052.906488][T22937]  ? trace_irq_disable+0x3b/0x140
[ 1052.906515][T22937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.906539][T22937]  ? clear_bhb_loop+0x70/0xc0
[ 1052.906564][T22937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.906584][T22937] RIP: 0033:0x7f7876b9e159
[ 1052.906605][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.906620][T22937] RSP: 002b:00007f7877abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1052.906641][T22937] RAX: ffffffffffffffda RBX: 00007f7876e25fa0 RCX: 00007f7876b9e159
[ 1052.906654][T22937] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000003
[ 1052.906667][T22937] RBP: 00007f7877abf090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.906679][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.906689][T22937] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1052.906720][T22937]  </TASK>
[ 1052.918413][T22937] warn_alloc: 1 callbacks suppressed
[ 1052.918433][T22937] syz.6.4485: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1052.918609][T22937] CPU: 0 UID: 0 PID: 22937 Comm: syz.6.4485 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.918635][T22937] Tainted: [L]=SOFTLOCKUP
[ 1052.918643][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1052.918655][T22937] Call Trace:
[ 1052.918663][T22937]  <TASK>
[ 1052.918672][T22937]  dump_stack_lvl+0xe8/0x150
[ 1052.918702][T22937]  warn_alloc+0x24d/0x270
[ 1052.918732][T22937]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1052.918757][T22937]  ? __pfx_warn_alloc+0x10/0x10
[ 1052.918782][T22937]  ? kfree+0x1c5/0x650
[ 1052.918812][T22937]  ? __get_vm_area_node+0x219/0x2f0
[ 1052.918844][T22937]  __vmalloc_node_range_noprof+0x36b/0x1540
[ 1052.918896][T22937]  ? lock_acquire+0x115/0x350
[ 1052.918930][T22937]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1052.918964][T22937]  ? n_tty_open+0x1d/0x150
[ 1052.918984][T22937]  vzalloc_noprof+0xb2/0xe0
[ 1052.919008][T22937]  ? n_tty_open+0x1d/0x150
[ 1052.919028][T22937]  n_tty_open+0x1d/0x150
[ 1052.919048][T22937]  tty_ldisc_failto+0x1e1/0x330
[ 1052.919078][T22937]  tty_ldisc_restore+0x57/0x110
[ 1052.919105][T22937]  tty_set_ldisc+0x393/0x540
[ 1052.919133][T22937]  tty_ioctl+0xc30/0xdd0
[ 1052.919158][T22937]  ? __pfx_tty_ioctl+0x10/0x10
[ 1052.919184][T22937]  __se_sys_ioctl+0xfc/0x170
[ 1052.919215][T22937]  do_syscall_64+0x166/0x520
[ 1052.919236][T22937]  ? trace_irq_disable+0x3b/0x140
[ 1052.919263][T22937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.919283][T22937]  ? clear_bhb_loop+0x70/0xc0
[ 1052.919307][T22937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.919326][T22937] RIP: 0033:0x7f7876b9e159
[ 1052.919345][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.919366][T22937] RSP: 002b:00007f7877abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1052.919386][T22937] RAX: ffffffffffffffda RBX: 00007f7876e25fa0 RCX: 00007f7876b9e159
[ 1052.919401][T22937] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000003
[ 1052.919414][T22937] RBP: 00007f7877abf090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.919427][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.919439][T22937] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1052.919471][T22937]  </TASK>
[ 1052.919493][T22937] Mem-Info:
[ 1052.919502][T22937] active_anon:3076 inactive_anon:19116 isolated_anon:0
[ 1052.919502][T22937]  active_file:17588 inactive_file:37887 isolated_file:0
[ 1052.919502][T22937]  unevictable:0 dirty:164 writeback:0
[ 1052.919502][T22937]  slab_reclaimable:7462 slab_unreclaimable:113639
[ 1052.919502][T22937]  mapped:41188 shmem:13913 pagetables:1520
[ 1052.919502][T22937]  sec_pagetables:0 bounce:0
[ 1052.919502][T22937]  kernel_misc_reclaimable:0
[ 1052.919502][T22937]  free:1237274 free_pcp:10230 free_cma:0
[ 1052.919556][T22937] Node 0 active_anon:12304kB inactive_anon:76464kB active_file:70328kB inactive_file:151364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164752kB dirty:656kB writeback:0kB shmem:55652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14680kB pagetables:5968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1052.919612][T22937] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1053.019209][T22937] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1053.019276][T22937] lowmem_reserve[]: 0 2482 2484 2484 2484
[ 1053.019313][T22937] Node 0 DMA32 free:983148kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12304kB inactive_anon:76564kB active_file:70328kB inactive_file:151364kB unevictable:0kB writepending:656kB zspages:1972kB present:3129332kB managed:2542340kB mlocked:0kB bounce:0kB free_pcp:40872kB local_pcp:20036kB free_cma:0kB
[ 1053.019373][T22937] lowmem_reserve[]: 0 0 1 1 1
[ 1053.019412][T22937] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1708kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1053.019466][T22937] lowmem_reserve[]: 0 0 0 0 0
[ 1053.019499][T22937] Node 1 Normal free:3950588kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:184kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1053.019556][T22937] lowmem_reserve[]: 0 0 0 0 0
[ 1053.019588][T22937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1053.019751][T22937] Node 0 DMA32: 1969*4kB (UM) 1079*8kB (UME) 991*16kB (UME) 220*32kB (UME) 544*64kB (UME) 531*128kB (UME) 337*256kB (ME) 112*512kB (ME) 63*1024kB (M) 7*2048kB (UM) 151*4096kB (M) = 983148kB
[ 1053.019909][T22937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1053.020004][T22937] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 4*16kB (UM) 1*32kB (M) 4*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950588kB
[ 1053.024289][T22937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1053.024307][T22937] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[ 1053.024324][T22937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1053.024340][T22937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1053.024356][T22937] 69393 total pagecache pages
[ 1053.024364][T22937] 9 pages in swap cache
[ 1053.024435][T22937] Free swap  = 112596kB
[ 1053.024443][T22937] Total swap = 124996kB
[ 1053.024452][T22937] 2097051 pages RAM
[ 1053.024459][T22937] 0 pages HighMem/MovableOnly
[ 1053.024466][T22937] 429423 pages reserved
[ 1053.024474][T22937] 0 pages cma reserved
[ 1053.024503][T22937] Falling back ldisc for ptm0.
[ 1053.744761][T22948] netlink: 'syz.1.4490': attribute type 2 has an invalid length.
[ 1054.060638][  T987] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[ 1054.212244][  T987] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1054.213347][  T987] usb 4-1: config index 0 descriptor too short (expected 60196, got 36)
[ 1054.213373][  T987] usb 4-1: config 0 has an invalid interface number: 41 but max is -1
[ 1054.213393][  T987] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1054.213414][  T987] usb 4-1: config 0 has no interface number 0
[ 1054.213454][  T987] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 2368, setting to 64
[ 1054.213479][  T987] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1054.222888][  T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.222913][  T987] usb 4-1: Product: syz
[ 1054.222927][  T987] usb 4-1: Manufacturer: syz
[ 1054.222942][  T987] usb 4-1: SerialNumber: syz
[ 1054.238933][  T987] usb 4-1: config 0 descriptor??
[ 1054.243720][T22941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1054.310914][T17102] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 1054.446727][T22941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1054.462440][T17102] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1054.476219][T17102] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.476280][T17102] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1054.476310][T17102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1054.476341][T17102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1054.476364][T17102] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1054.536224][T17102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1054.536268][T17102] usb 1-1: Product: syz
[ 1054.536299][T17102] usb 1-1: Manufacturer: syz
[ 1054.536317][T17102] usb 1-1: SerialNumber: syz
[ 1054.565779][T17102] usb 1-1: config 0 descriptor??
[ 1054.574577][   T31] kauditd_printk_skb: 58 callbacks suppressed
[ 1054.574648][   T31] audit: type=1800 audit(1787863705.275:8333): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=380178 res=0 errno=0
[ 1054.587137][   T31] audit: type=1800 audit(1787863705.285:8334): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=380210 res=0 errno=0
[ 1054.589541][   T31] audit: type=1800 audit(1787863705.285:8335): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=380185 res=0 errno=0
[ 1054.593765][   T31] audit: type=1800 audit(1787863705.295:8336): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=380186 res=0 errno=0
[ 1054.623266][   T10] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[ 1054.687490][  T987] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[ 1054.687739][  T987] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[ 1054.698929][   T31] audit: type=1800 audit(1787863705.395:8337): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=380099 res=0 errno=0
[ 1054.701818][   T31] audit: type=1800 audit(1787863705.405:8338): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=380100 res=0 errno=0
[ 1054.703753][  T987] usb 4-1: USB disconnect, device number 107
[ 1054.725522][   T31] audit: type=1800 audit(1787863705.425:8339): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=380079 res=0 errno=0
[ 1054.816707][T17102] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1054.823844][T17102] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1054.839382][   T10] usb 7-1: not running at top speed; connect to a high speed hub
[ 1054.848331][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1054.859021][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1054.870708][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1054.895114][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.895201][   T10] usb 7-1: Product: �鹊ഺ嗾猚竃듓ꇌ蓂䞧歋�㨀᳋�햔ᶪ敃�р�엖퓠蓯绕ꣵ㷵ᅨﭬ㑳ꬹ�ڭ镛�햣紑芞䤡塗䶔ꖰ㠵㻼扊鞆訃�旕꺃窃겆䤛ࣤ嗌ᣊꆔ昵⺪玠�簅㰾钕껴馔ﮜ⡺￩
[ 1054.895225][   T10] usb 7-1: Manufacturer: �
[ 1054.895238][   T10] usb 7-1: SerialNumber: ဉ
[ 1054.945846][   T31] audit: type=1800 audit(1787863705.645:8340): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=380268 res=0 errno=0
[ 1054.967615][T22963] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1054.983089][   T31] audit: type=1800 audit(1787863705.685:8341): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=380300 res=0 errno=0
[ 1055.011749][   T31] audit: type=1800 audit(1787863705.715:8342): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=380275 res=0 errno=0
[ 1055.042301][T17102] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1055.042358][T17102] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[ 1055.043555][T17102] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[ 1055.068281][T17102] usb 1-1: USB disconnect, device number 46
[ 1055.182808][   T10] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[ 1055.182880][   T10] cdc_ncm 7-1:1.0: bind() failure
[ 1055.187778][   T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1055.187824][   T10] cdc_ncm 7-1:1.1: bind() failure
[ 1055.360404][T11019] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1055.411357][T22963] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1055.436469][ T5691] usb 7-1: USB disconnect, device number 39
[ 1055.512725][T11019] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1055.513764][T11019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.513808][T11019] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1055.513830][T11019] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1055.513852][T11019] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1055.513892][T11019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.966163][T11019] gud 2-1:1.0: probe with driver gud failed with error -71
[ 1055.994936][T11019] usb 2-1: USB disconnect, device number 24
[ 1056.330158][ T5780] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1056.490211][ T5780] usb 7-1: Using ep0 maxpacket: 32
[ 1056.497888][ T5780] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1056.512989][ T5780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1056.513235][ T5780] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1056.513279][ T5780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1056.513306][ T5780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1056.565841][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.565889][ T5780] usb 7-1: Product: syz
[ 1056.565920][ T5780] usb 7-1: Manufacturer: syz
[ 1056.565939][ T5780] usb 7-1: SerialNumber: syz
[ 1056.607327][ T5780] usb 7-1: config 0 descriptor??
[ 1056.615766][T22984] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1056.638942][ T5780] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input69
[ 1056.797211][    C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[ 1056.857756][T22984] netlink: 'syz.6.4499': attribute type 5 has an invalid length.
[ 1056.940593][T22997] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4501'.
[ 1056.989785][T22996] netlink: 'syz.6.4499': attribute type 5 has an invalid length.
[ 1056.990963][T23000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.991412][T23000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.150409][T11019] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[ 1057.213093][    C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[ 1057.213093][   T10] usb 7-1: USB disconnect, device number 40
[ 1057.228314][ T8548] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.229068][T22886] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.229186][T22886] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.229220][T22886] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.340820][T11019] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[ 1057.349555][T11019] usb 4-1: config 127 has an invalid interface number: 57 but max is 0
[ 1057.349587][T11019] usb 4-1: config 127 has no interface number 0
[ 1057.349629][T11019] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 1057.357516][T11019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.357544][T11019] usb 4-1: Product: syz
[ 1057.357559][T11019] usb 4-1: Manufacturer: syz
[ 1057.357573][T11019] usb 4-1: SerialNumber: syz
[ 1057.368862][T22994] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1057.627599][T23008] loop0: detected capacity change from 0 to 1
[ 1057.693334][T23008]  loop0:
[ 1057.693409][T23008] loop0: partition table partially beyond EOD, truncated
[ 1057.751584][T18730] Bluetooth: hci1: command 0x0406 tx timeout
[ 1057.785495][T22994] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4503'.
[ 1057.789684][T22994] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1057.992420][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1058.002013][ T1309] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1058.002331][T11019] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1058.002639][T11019] asix 4-1:127.57: probe with driver asix failed with error -71
[ 1058.041457][T11019] usb 4-1: USB disconnect, device number 108
[ 1058.180848][T23014] syzkaller0: entered promiscuous mode
[ 1058.180903][T23014] syzkaller0: entered allmulticast mode
[ 1058.219889][   T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1058.349912][   T10] usb 7-1: device descriptor read/64, error -71
[ 1058.423138][ T5691] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1058.581933][ T5691] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1058.585058][ T5691] usb 1-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[ 1058.585086][ T5691] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1058.586875][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1058.586961][ T5691] usb 1-1: SerialNumber: syz
[ 1058.614083][   T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1058.741588][   T10] usb 7-1: device descriptor read/64, error -71
[ 1058.833529][ T5691] usb 1-1: 0:2 : does not exist
[ 1058.833658][ T5691] usb 1-1: unit 5 not found!
[ 1058.872564][   T10] usb usb7-port1: attempt power cycle
[ 1059.029283][ T5691] usb 1-1: USB disconnect, device number 47
[ 1059.103676][T20110] udevd[20110]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1059.223822][   T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1059.243388][   T10] usb 7-1: device descriptor read/8, error -71
[ 1059.493336][   T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1059.512763][   T10] usb 7-1: device descriptor read/8, error -71
[ 1059.621019][   T10] usb usb7-port1: unable to enumerate USB device
[ 1059.656552][   T31] kauditd_printk_skb: 72 callbacks suppressed
[ 1059.656616][   T31] audit: type=1800 audit(1787863710.356:8415): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1059.709606][   T31] audit: type=1800 audit(1787863710.406:8416): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1059.775636][T23023] loop0: detected capacity change from 0 to 1
[ 1059.856777][   T31] audit: type=1800 audit(1787863710.556:8417): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1059.914335][T23025]  loop0:
[ 1059.914384][T23025] loop0: partition table partially beyond EOD, truncated
[ 1060.060432][   T31] audit: type=1800 audit(1787863710.766:8418): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1060.209542][ T5780] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1060.360375][ T5780] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1060.371226][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.371274][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1060.371328][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.414222][ T5780] usb 2-1: config 0 descriptor??
[ 1060.415642][   T31] audit: type=1800 audit(1787863711.116:8419): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=381596 res=0 errno=0
[ 1060.423386][   T31] audit: type=1800 audit(1787863711.126:8420): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=381625 res=0 errno=0
[ 1060.426107][   T31] audit: type=1800 audit(1787863711.126:8421): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=381603 res=0 errno=0
[ 1060.427307][   T31] audit: type=1800 audit(1787863711.126:8422): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=381604 res=0 errno=0
[ 1060.435229][   T31] audit: type=1800 audit(1787863711.126:8423): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=381605 res=0 errno=0
[ 1060.443490][   T31] audit: type=1800 audit(1787863711.146:8424): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=381645 res=0 errno=0
[ 1061.094938][ T5780] hid_parser_main: 368 callbacks suppressed
[ 1061.095006][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095043][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095073][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095103][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095133][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095162][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.095192][ T5780] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0
[ 1061.125578][ T5780] pyra 0003:1E7D:2CF6.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[ 1061.455543][T23028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.459013][T23028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.575731][ T5780] pyra 0003:1E7D:2CF6.0041: couldn't init struct pyra_device
[ 1061.575809][ T5780] pyra 0003:1E7D:2CF6.0041: couldn't install mouse
[ 1061.595605][ T5780] pyra 0003:1E7D:2CF6.0041: probe with driver pyra failed with error -71
[ 1061.616601][ T5780] usb 2-1: USB disconnect, device number 25
[ 1061.638058][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4521'.
[ 1061.920643][  T987] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1062.082041][  T987] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1062.113000][  T987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.113045][  T987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1062.124837][  T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1062.124865][  T987] usb 4-1: SerialNumber: syz
[ 1062.646412][T23057] infiniband syz0: set active
[ 1062.652860][T23057] infiniband syz0: added bridge_slave_0
[ 1062.695720][T23057] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1062.719322][T23057] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1062.719393][T23057] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1062.759309][T11019] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1062.911240][T11019] usb 7-1: Using ep0 maxpacket: 32
[ 1062.914266][T11019] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1062.916392][T11019] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10
[ 1062.916427][T11019] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1062.916452][T11019] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1062.916484][T11019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.934015][T11019] usb 7-1: config 0 descriptor??
[ 1063.232749][T23057] RDS/IB: syz0: added
[ 1063.232911][T23057] smc: adding ib device syz0 with port count 1
[ 1063.232932][T23057] smc:    ib device syz0 port 1 has no pnetid
[ 1063.369720][T11019] steelseries 0003:1038:1410.0042: unknown main item tag 0x0
[ 1063.369789][T11019] steelseries 0003:1038:1410.0042: unknown main item tag 0x0
[ 1063.369837][T11019] steelseries 0003:1038:1410.0042: unknown main item tag 0x0
[ 1063.376486][T11019] steelseries 0003:1038:1410.0042: missing HID_OUTPUT_REPORT 0
[ 1063.511683][T23099] FAULT_INJECTION: forcing a failure.
[ 1063.511683][T23099] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.511749][T23099] CPU: 0 UID: 0 PID: 23099 Comm: syz.1.4531 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.511777][T23099] Tainted: [L]=SOFTLOCKUP
[ 1063.511785][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1063.511797][T23099] Call Trace:
[ 1063.511805][T23099]  <TASK>
[ 1063.511815][T23099]  dump_stack_lvl+0xe8/0x150
[ 1063.511840][T23099]  should_fail_ex+0x3eb/0x540
[ 1063.511869][T23099]  should_failslab+0xa8/0x100
[ 1063.511892][T23099]  __kmalloc_cache_noprof+0xa3/0x600
[ 1063.511919][T23099]  ? __get_fs_type+0x21/0x280
[ 1063.511945][T23099]  ? alloc_fs_context+0x66/0xd00
[ 1063.511969][T23099]  ? alloc_fs_context+0x66/0xd00
[ 1063.511999][T23099]  alloc_fs_context+0x66/0xd00
[ 1063.512025][T23099]  ? __get_fs_type+0x267/0x280
[ 1063.512051][T23099]  fs_context_for_submount+0x28/0xa0
[ 1063.512077][T23099]  trace_automount+0x86/0x180
[ 1063.512106][T23099]  ? __pfx_trace_automount+0x10/0x10
[ 1063.512135][T23099]  ? try_to_unlazy_next+0x752/0xcb0
[ 1063.512167][T23099]  __traverse_mounts+0x2fe/0x5d0
[ 1063.512200][T23099]  step_into_slowpath+0x4ba/0x820
[ 1063.512226][T23099]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1063.512258][T23099]  link_path_walk+0xd5e/0x1910
[ 1063.512298][T23099]  path_openat+0x1c9/0x1d60
[ 1063.512342][T23099]  do_file_open+0x23e/0x4a0
[ 1063.512372][T23099]  ? __pfx_do_file_open+0x10/0x10
[ 1063.512418][T23099]  ? lock_acquire+0x115/0x350
[ 1063.512457][T23099]  file_open_name+0x162/0x1c0
[ 1063.512480][T23099]  ? __pfx_file_open_name+0x10/0x10
[ 1063.512507][T23099]  ? do_getname+0x151/0x250
[ 1063.512530][T23099]  __se_sys_acct+0xf0/0x9e0
[ 1063.512557][T23099]  ? __pfx___se_sys_acct+0x10/0x10
[ 1063.512592][T23099]  do_syscall_64+0x166/0x520
[ 1063.512614][T23099]  ? trace_irq_disable+0x3b/0x140
[ 1063.512640][T23099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.512667][T23099]  ? clear_bhb_loop+0x70/0xc0
[ 1063.512691][T23099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.512710][T23099] RIP: 0033:0x7fac1559e159
[ 1063.512730][T23099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.512748][T23099] RSP: 002b:00007fac163ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 1063.512768][T23099] RAX: ffffffffffffffda RBX: 00007fac15825fa0 RCX: 00007fac1559e159
[ 1063.512783][T23099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 1063.512796][T23099] RBP: 00007fac163ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.512809][T23099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.512821][T23099] R13: 00007fac15826038 R14: 00007fac15825fa0 R15: 00007fff9f65e8e8
[ 1063.512851][T23099]  </TASK>
[ 1063.708059][T23091] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4528'.
[ 1063.708083][T23091] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4528'.
[ 1063.708109][T23091] netlink: 'syz.6.4528': attribute type 5 has an invalid length.
[ 1063.708122][T23091] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4528'.
[ 1064.078973][ T5691] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[ 1064.250694][ T5691] usb 2-1: not running at top speed; connect to a high speed hub
[ 1064.250776][ T5691] usb 2-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice= 4.82
[ 1064.254157][ T5691] usb 2-1: config 0 has an invalid interface number: 69 but max is 1
[ 1064.254186][ T5691] usb 2-1: config 0 has no interface number 1
[ 1064.254237][ T5691] usb 2-1: config 0 interface 69 has no altsetting 0
[ 1064.254257][ T5691] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1064.260863][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.260890][ T5691] usb 2-1: Product: syz
[ 1064.260906][ T5691] usb 2-1: Manufacturer: syz
[ 1064.260921][ T5691] usb 2-1: SerialNumber: syz
[ 1064.286398][ T5691] usb 2-1: config 0 descriptor??
[ 1064.422977][  T987] usb 4-1: 0:2 : does not exist
[ 1064.498090][T23101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1064.503240][T23101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.531365][ T5691] hub 2-1:0.69: Invalid hub with more than one config or interface
[ 1064.531423][ T5691] hub 2-1:0.69: probe with driver hub failed with error -22
[ 1064.542090][ T5691] rndis_host 2-1:0.69: bogus CDC Union
[ 1064.559136][  T987] usb 4-1: USB disconnect, device number 109
[ 1064.602480][ T5691] hub 2-1:0.0: Invalid hub with more than one config or interface
[ 1064.602539][ T5691] hub 2-1:0.0: probe with driver hub failed with error -22
[ 1064.641042][ T5691] usb 2-1: USB disconnect, device number 26
[ 1064.662733][   T31] kauditd_printk_skb: 47 callbacks suppressed
[ 1064.662811][   T31] audit: type=1800 audit(1787863715.356:8472): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=388341 res=0 errno=0
[ 1064.705017][T20110] udevd[20110]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1064.707631][   T31] audit: type=1800 audit(1787863715.386:8473): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26749 res=0 errno=0
[ 1065.190567][   T31] audit: type=1800 audit(1787863715.886:8474): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1065.495237][T11019] usb 7-1: USB disconnect, device number 45
[ 1065.518934][ T5691] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[ 1065.597409][   T31] audit: type=1800 audit(1787863716.286:8475): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1065.673411][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1065.677525][ T5691] usb 2-1: not running at top speed; connect to a high speed hub
[ 1065.677564][ T5691] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1065.680597][ T5691] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 1065.680623][ T5691] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 1065.680644][ T5691] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.680664][ T5691] usb 2-1: config 14 has no interface number 0
[ 1065.680680][ T5691] usb 2-1: config 14 has no interface number 1
[ 1065.680738][ T5691] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1065.680762][ T5691] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1065.680787][ T5691] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1065.680811][ T5691] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.680833][ T5691] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1065.680852][ T5691] usb 2-1: config 14 interface 228 has no altsetting 0
[ 1065.685703][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.685732][ T5691] usb 2-1: Product: syz
[ 1065.685747][ T5691] usb 2-1: Manufacturer: syz
[ 1065.685762][ T5691] usb 2-1: SerialNumber: syz
[ 1065.742969][   T31] audit: type=1800 audit(1787863716.416:8476): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1065.755508][   T31] audit: type=1800 audit(1787863716.447:8477): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=393263 res=0 errno=0
[ 1065.755581][   T31] audit: type=1800 audit(1787863716.447:8478): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=393295 res=0 errno=0
[ 1065.755617][   T31] audit: type=1800 audit(1787863716.457:8479): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=393270 res=0 errno=0
[ 1065.755653][   T31] audit: type=1800 audit(1787863716.457:8480): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=393271 res=0 errno=0
[ 1066.052440][   T31] audit: type=1800 audit(1787863716.727:8481): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1066.157413][T23111] ADFS-fs (nbd6): error: unable to read block 3, try 0
[ 1066.208926][   T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[ 1066.261922][ T5691] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1066.362487][   T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1066.364161][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.364280][   T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1066.364303][   T10] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1066.368262][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.368288][   T10] usb 1-1: Product: syz
[ 1066.368958][   T10] usb 1-1: Manufacturer: syz
[ 1066.368974][   T10] usb 1-1: SerialNumber: syz
[ 1066.612266][ T5691] legousbtower 2-1:14.228: get version request failed: -32
[ 1066.612433][ T5691] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32
[ 1066.852423][   T10] usb 1-1: unable to init card! (ret=-110)
[ 1066.852962][   T10] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[ 1067.000513][T23119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1067.037500][T23108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.046772][T23108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.057490][ T5698] usb 1-1: USB disconnect, device number 48
[ 1068.511579][   T10] usb 2-1: USB disconnect, device number 27
[ 1069.092618][ T5691] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1069.271583][ T5691] usb 2-1: Using ep0 maxpacket: 32
[ 1069.348431][   T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 1069.362727][T23142] cifs: Unknown parameter 'x8000
[ 1069.362727][T23142] file pivot_root /root/ /root/
[ 1069.362727][T23142] file unmount /
[ 1069.362727][T23142] file write proc:/sys/kernel/hung_task_all_cpu_backtrace
[ 1069.362727][T23142] file write proc:/sys/vm/nr_hugepages
[ 1069.362727][T23142] file write proc:/sys/vm/nr_overcommit_hugepages
[ 1069.362727][T23142] file write proc:/sys/net/core/netdev_unregister_timeout_secs
[ 1069.362727][T23142] file execute /sbin/init exec.realpath'
[ 1069.362925][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1069.362973][ T5691] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1069.367927][ T5691] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1069.367964][ T5691] usb 2-1: can't read configurations, error -71
[ 1069.504123][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1069.510845][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[ 1069.510880][   T10] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1069.512179][   T10] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 1069.512204][   T10] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 1069.512223][   T10] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.512242][   T10] usb 1-1: config 14 has no interface number 0
[ 1069.512257][   T10] usb 1-1: config 14 has no interface number 1
[ 1069.512315][   T10] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1069.512340][   T10] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1069.512367][   T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1069.512394][   T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1069.512415][   T10] usb 1-1: config 14 interface 57 has no altsetting 0
[ 1069.512433][   T10] usb 1-1: config 14 interface 228 has no altsetting 0
[ 1069.514769][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.514793][   T10] usb 1-1: Product: syz
[ 1069.514808][   T10] usb 1-1: Manufacturer: syz
[ 1069.514822][   T10] usb 1-1: SerialNumber: syz
[ 1069.694923][   T31] kauditd_printk_skb: 31 callbacks suppressed
[ 1069.694998][   T31] audit: type=1800 audit(1787863720.387:8513): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1069.805088][   T31] audit: type=1800 audit(1787863720.497:8514): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1069.923928][   T31] audit: type=1800 audit(1787863720.617:8515): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1069.946868][   T25] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1069.993001][   T10] legousbtower 1-1:14.57: interrupt endpoints not found
[ 1070.046063][   T31] audit: type=1800 audit(1787863720.737:8516): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1070.286610][   T31] audit: type=1800 audit(1787863720.977:8517): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0
[ 1070.327016][   T31] audit: type=1800 audit(1787863721.017:8518): pid=23159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4551" name="idProduct" dev="configfs" ino=116595 res=0 errno=0
[ 1070.399413][ T5691] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1070.401046][   T10] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1070.407295][   T10] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1070.419624][   T31] audit: type=1800 audit(1787863721.117:8519): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=414137 res=0 errno=0
[ 1070.420725][   T31] audit: type=1800 audit(1787863721.117:8520): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=414138 res=0 errno=0
[ 1070.426031][   T31] audit: type=1800 audit(1787863721.117:8521): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=414117 res=0 errno=0
[ 1070.432312][   T31] audit: type=1800 audit(1787863721.127:8522): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=414139 res=0 errno=0
[ 1070.552336][ T5691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1070.555568][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.567815][ T5691] usb 2-1: config 0 descriptor??
[ 1070.578215][T11019] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1070.730753][T11019] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1070.737877][T11019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.740155][T11019] usb 4-1: Product: syz
[ 1070.740210][T11019] usb 4-1: Manufacturer: syz
[ 1070.740227][T11019] usb 4-1: SerialNumber: syz
[ 1070.751126][T11019] usb 4-1: config 0 descriptor??
[ 1070.767452][T11019] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1070.767481][T11019] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1070.778449][T11019] f81232 4-1:0.0: f81534a converter detected
[ 1070.985377][T23167] usb 1-1: Couldn't submit interrupt_in_urb -90
[ 1071.028202][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1071.028897][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1071.101228][T23166] FAULT_INJECTION: forcing a failure.
[ 1071.101228][T23166] name failslab, interval 1, probability 0, space 0, times 0
[ 1071.120821][T23166] CPU: 1 UID: 0 PID: 23166 Comm: syz.6.4552 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1071.120854][T23166] Tainted: [L]=SOFTLOCKUP
[ 1071.120862][T23166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1071.120874][T23166] Call Trace:
[ 1071.120884][T23166]  <TASK>
[ 1071.120895][T23166]  dump_stack_lvl+0xe8/0x150
[ 1071.120928][T23166]  should_fail_ex+0x3eb/0x540
[ 1071.120963][T23166]  should_failslab+0xa8/0x100
[ 1071.120986][T23166]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[ 1071.121015][T23166]  ? hugetlbfs_alloc_inode+0xef/0x130
[ 1071.121046][T23166]  ? hugetlbfs_alloc_inode+0xef/0x130
[ 1071.121079][T23166]  ? __kasan_kmalloc+0x93/0xb0
[ 1071.121101][T23166]  hugetlbfs_alloc_inode+0xef/0x130
[ 1071.121127][T23166]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[ 1071.121151][T23166]  alloc_inode+0x6a/0x1b0
[ 1071.121174][T23166]  new_inode+0x1f/0x170
[ 1071.121200][T23166]  hugetlbfs_get_inode+0x73/0x660
[ 1071.121221][T23166]  ? fput+0xa0/0xd0
[ 1071.121246][T23166]  hugetlb_file_setup+0x21d/0x630
[ 1071.121271][T23166]  ksys_mmap_pgoff+0x1ec/0x760
[ 1071.121299][T23166]  do_syscall_64+0x166/0x520
[ 1071.121321][T23166]  ? trace_irq_disable+0x3b/0x140
[ 1071.121347][T23166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.121373][T23166]  ? clear_bhb_loop+0x70/0xc0
[ 1071.121399][T23166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.121426][T23166] RIP: 0033:0x7f7876b9e159
[ 1071.121453][T23166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1071.121470][T23166] RSP: 002b:00007f7877abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1071.121492][T23166] RAX: ffffffffffffffda RBX: 00007f7876e25fa0 RCX: 00007f7876b9e159
[ 1071.121507][T23166] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[ 1071.121521][T23166] RBP: 00007f7877abf090 R08: ffffffffffffffff R09: 0000000000000000
[ 1071.121535][T23166] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[ 1071.121548][T23166] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1071.121579][T23166]  </TASK>
[ 1071.185823][   T10] usb 1-1: USB disconnect, device number 49
[ 1071.210601][T23156] usb 1-1: LEGO USB Tower reset control request failed
[ 1071.248769][   T10] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1071.396527][ T5691] ath6kl: Failed to read usb control message: -32
[ 1071.396721][ T5691] ath6kl: Unable to read the bmi data from the device: -32
[ 1071.396738][ T5691] ath6kl: Unable to recv target info: -32
[ 1071.435004][ T5691] ath6kl: Failed to init ath6kl core: -32
[ 1071.436620][ T5691] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32
[ 1072.137999][  T987] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1072.298492][  T987] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[ 1072.337411][  T987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.337456][  T987] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 4
[ 1072.337518][  T987] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1072.337548][  T987] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1072.337586][  T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.414147][  T987] usb 7-1: interface 1 not found
[ 1072.484518][T11019] f81534a ttyUSB0: f81232_set_register failed status: -71
[ 1072.484646][T11019] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[ 1072.520862][T11019] usb 4-1: USB disconnect, device number 110
[ 1072.563841][T11019] f81232 4-1:0.0: device disconnected
[ 1072.625545][T17102] usb 7-1: USB disconnect, device number 47
[ 1073.118230][  T987] usb 2-1: USB disconnect, device number 29
[ 1073.377969][T22882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.612915][T22882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.212453][T22882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.253850][T14184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1074.287733][T14184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1074.302678][T14184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1074.311414][T14184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1074.326239][T14184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1074.556528][T22882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.782739][   T31] kauditd_printk_skb: 43 callbacks suppressed
[ 1074.782789][   T31] audit: type=1800 audit(1787863725.478:8566): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1074.850349][   T31] audit: type=1800 audit(1787863725.548:8567): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1075.011337][   T31] audit: type=1800 audit(1787863725.708:8568): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1075.285672][   T31] audit: type=1800 audit(1787863725.978:8569): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414854 res=0 errno=0
[ 1075.311505][   T31] audit: type=1800 audit(1787863726.008:8570): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=414859 res=0 errno=0
[ 1075.331263][  T987] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1075.347290][   T31] audit: type=1800 audit(1787863726.038:8571): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=414863 res=0 errno=0
[ 1075.389626][   T31] audit: type=1800 audit(1787863726.038:8572): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=414862 res=0 errno=0
[ 1075.389698][   T31] audit: type=1800 audit(1787863726.088:8573): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=414865 res=0 errno=0
[ 1075.486215][   T31] audit: type=1800 audit(1787863726.178:8574): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1075.519184][  T987] usb 1-1: Using ep0 maxpacket: 32
[ 1075.525141][  T987] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1075.535765][   T31] audit: type=1800 audit(1787863726.218:8575): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414940 res=0 errno=0
[ 1075.555715][  T987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.555742][  T987] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1075.555784][  T987] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[ 1075.555825][  T987] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1075.555862][  T987] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1075.555884][  T987] usb 1-1: config 1 interface 1 has no altsetting 0
[ 1075.604311][T23226] FAULT_INJECTION: forcing a failure.
[ 1075.604311][T23226] name failslab, interval 1, probability 0, space 0, times 0
[ 1075.604348][T23226] CPU: 0 UID: 0 PID: 23226 Comm: syz.6.4567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1075.604376][T23226] Tainted: [L]=SOFTLOCKUP
[ 1075.604383][T23226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1075.604396][T23226] Call Trace:
[ 1075.604404][T23226]  <TASK>
[ 1075.604413][T23226]  dump_stack_lvl+0xe8/0x150
[ 1075.604445][T23226]  should_fail_ex+0x3eb/0x540
[ 1075.604479][T23226]  should_failslab+0xa8/0x100
[ 1075.604502][T23226]  __kmalloc_noprof+0xfe/0x720
[ 1075.604527][T23226]  ? rcu_is_watching+0x16/0xb0
[ 1075.604548][T23226]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1075.604568][T23226]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1075.604596][T23226]  tomoyo_realpath_from_path+0xef/0x640
[ 1075.604630][T23226]  tomoyo_path_perm+0x283/0x560
[ 1075.604657][T23226]  ? tomoyo_path_perm+0x251/0x560
[ 1075.604683][T23226]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1075.604740][T23226]  ? __pfx_current_check_access_path+0x10/0x10
[ 1075.604768][T23226]  ? __up_read+0x29c/0x930
[ 1075.604797][T23226]  ? __pfx___up_read+0x10/0x10
[ 1075.604822][T23226]  tomoyo_path_rmdir+0xaa/0xf0
[ 1075.604844][T23226]  ? __pfx_tomoyo_path_rmdir+0x10/0x10
[ 1075.604869][T23226]  ? kernfs_dop_revalidate+0x404/0x650
[ 1075.604914][T23226]  security_path_rmdir+0x15f/0x330
[ 1075.604937][T23226]  filename_rmdir+0x20d/0x520
[ 1075.604973][T23226]  ? __pfx_filename_rmdir+0x10/0x10
[ 1075.605007][T23226]  ? do_getname+0x151/0x250
[ 1075.605031][T23226]  __se_sys_rmdir+0x2e/0x140
[ 1075.605065][T23226]  do_syscall_64+0x166/0x520
[ 1075.605086][T23226]  ? trace_irq_disable+0x3b/0x140
[ 1075.605114][T23226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.605134][T23226]  ? clear_bhb_loop+0x70/0xc0
[ 1075.605158][T23226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.605178][T23226] RIP: 0033:0x7f7876b9e159
[ 1075.605197][T23226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1075.605214][T23226] RSP: 002b:00007f7877a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 1075.605236][T23226] RAX: ffffffffffffffda RBX: 00007f7876e26090 RCX: 00007f7876b9e159
[ 1075.605250][T23226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[ 1075.605263][T23226] RBP: 00007f7877a9e090 R08: 0000000000000000 R09: 0000000000000000
[ 1075.605275][T23226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1075.605287][T23226] R13: 00007f7876e26128 R14: 00007f7876e26090 R15: 00007ffd28ad9bc8
[ 1075.605320][T23226]  </TASK>
[ 1075.605340][T23226] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1075.649606][  T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.649636][  T987] usb 1-1: Product: syz
[ 1075.649650][  T987] usb 1-1: Manufacturer: syz
[ 1075.649666][  T987] usb 1-1: SerialNumber: syz
[ 1076.048432][T22882] bridge_slave_1: left allmulticast mode
[ 1076.048479][T22882] bridge_slave_1: left promiscuous mode
[ 1076.048774][T22882] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.073200][  T987] usb 1-1: selecting invalid altsetting 0
[ 1076.083982][  T987] usb 1-1: 1:1: cannot get freq (v2/v3): err -32
[ 1076.122685][T22882] bridge_slave_0: left allmulticast mode
[ 1076.122740][T22882] bridge_slave_0: left promiscuous mode
[ 1076.122980][T22882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.315518][  T987] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -434564309
[ 1076.349420][T23240] FAULT_INJECTION: forcing a failure.
[ 1076.349420][T23240] name failslab, interval 1, probability 0, space 0, times 0
[ 1076.362444][T23240] CPU: 0 UID: 0 PID: 23240 Comm: syz.6.4571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1076.362475][T23240] Tainted: [L]=SOFTLOCKUP
[ 1076.362483][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1076.362493][T23240] Call Trace:
[ 1076.362502][T23240]  <TASK>
[ 1076.362511][T23240]  dump_stack_lvl+0xe8/0x150
[ 1076.362540][T23240]  should_fail_ex+0x3eb/0x540
[ 1076.362572][T23240]  should_failslab+0xa8/0x100
[ 1076.362592][T23240]  __kvmalloc_node_noprof+0x176/0x820
[ 1076.362621][T23240]  ? kvm_hv_setup_tsc_page+0x5f7/0xa80
[ 1076.362642][T23240]  ? lock_acquire+0x115/0x350
[ 1076.362670][T23240]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1076.362695][T23240]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1076.362728][T23240]  __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1076.362755][T23240]  ? lock_acquire+0x115/0x350
[ 1076.362782][T23240]  ? kvm_msr_allowed+0x9a/0x490
[ 1076.362816][T23240]  mmu_topup_memory_caches+0x21/0x170
[ 1076.362847][T23240]  kvm_mmu_load+0x9d/0x21e0
[ 1076.362877][T23240]  ? kvm_msr_allowed+0x9a/0x490
[ 1076.362903][T23240]  ? kvm_msr_allowed+0x3f4/0x490
[ 1076.362929][T23240]  ? kvm_msr_allowed+0x9a/0x490
[ 1076.362955][T23240]  ? kvm_msr_allowed+0x9a/0x490
[ 1076.362987][T23240]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1076.363022][T23240]  vcpu_run+0x4f68/0x79b0
[ 1076.363067][T23240]  ? stack_depot_save_flags+0x33/0x7f0
[ 1076.363107][T23240]  ? security_file_ioctl+0xc3/0x2a0
[ 1076.363169][T23240]  ? __pfx_vcpu_run+0x10/0x10
[ 1076.363195][T23240]  ? lock_acquire+0x115/0x350
[ 1076.363239][T23240]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[ 1076.363277][T23240]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[ 1076.363306][T23240]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[ 1076.363341][T23240]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1076.363375][T23240]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1076.363402][T23240]  ? hook_file_ioctl+0x1f2/0x600
[ 1076.363450][T23240]  ? __fget_files+0x2a/0x420
[ 1076.363476][T23240]  ? __fget_files+0x2a/0x420
[ 1076.363497][T23240]  ? __fget_files+0x3a2/0x420
[ 1076.363518][T23240]  ? __fget_files+0x2a/0x420
[ 1076.363544][T23240]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1076.363568][T23240]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1076.363600][T23240]  __se_sys_ioctl+0xfc/0x170
[ 1076.363631][T23240]  do_syscall_64+0x166/0x520
[ 1076.363653][T23240]  ? trace_irq_disable+0x3b/0x140
[ 1076.363680][T23240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.363700][T23240]  ? clear_bhb_loop+0x70/0xc0
[ 1076.363724][T23240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.363744][T23240] RIP: 0033:0x7f7876b9e159
[ 1076.363763][T23240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1076.363780][T23240] RSP: 002b:00007f7877abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1076.363802][T23240] RAX: ffffffffffffffda RBX: 00007f7876e25fa0 RCX: 00007f7876b9e159
[ 1076.363817][T23240] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1076.363829][T23240] RBP: 00007f7877abf090 R08: 0000000000000000 R09: 0000000000000000
[ 1076.363842][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1076.363854][T23240] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1076.363887][T23240]  </TASK>
[ 1076.399710][T18730] Bluetooth: hci5: command tx timeout
[ 1076.909066][T23235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.940928][T23235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.261393][T23251] FAULT_INJECTION: forcing a failure.
[ 1077.261393][T23251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1077.261452][T23251] CPU: 0 UID: 0 PID: 23251 Comm: syz.6.4573 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1077.261478][T23251] Tainted: [L]=SOFTLOCKUP
[ 1077.261484][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1077.261493][T23251] Call Trace:
[ 1077.261500][T23251]  <TASK>
[ 1077.261508][T23251]  dump_stack_lvl+0xe8/0x150
[ 1077.261537][T23251]  should_fail_ex+0x3eb/0x540
[ 1077.261571][T23251]  _copy_to_user+0x31/0xb0
[ 1077.261594][T23251]  simple_read_from_buffer+0xe1/0x170
[ 1077.261630][T23251]  proc_fail_nth_read+0x1bb/0x230
[ 1077.261655][T23251]  ? common_file_perm+0x20e/0x2b0
[ 1077.261687][T23251]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1077.261715][T23251]  ? rw_verify_area+0x24a/0x4c0
[ 1077.261741][T23251]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1077.261767][T23251]  vfs_read+0x213/0xa80
[ 1077.261798][T23251]  ? __pfx___mutex_lock+0x10/0x10
[ 1077.261821][T23251]  ? __pfx_vfs_read+0x10/0x10
[ 1077.261847][T23251]  ? __fget_files+0x2a/0x420
[ 1077.261873][T23251]  ? __fget_files+0x3a2/0x420
[ 1077.261895][T23251]  ? __fget_files+0x2a/0x420
[ 1077.261925][T23251]  ksys_read+0x150/0x270
[ 1077.261952][T23251]  ? __pfx_ksys_read+0x10/0x10
[ 1077.261986][T23251]  do_syscall_64+0x166/0x520
[ 1077.262006][T23251]  ? trace_irq_disable+0x3b/0x140
[ 1077.262033][T23251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.262052][T23251]  ? clear_bhb_loop+0x70/0xc0
[ 1077.262076][T23251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.262096][T23251] RIP: 0033:0x7f7876b5e98e
[ 1077.262114][T23251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1077.262130][T23251] RSP: 002b:00007f7877abefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1077.262155][T23251] RAX: ffffffffffffffda RBX: 00007f7877abf6c0 RCX: 00007f7876b5e98e
[ 1077.262170][T23251] RDX: 000000000000000f RSI: 00007f7877abf0a0 RDI: 0000000000000007
[ 1077.262183][T23251] RBP: 00007f7877abf090 R08: 0000000000000000 R09: 0000000000000000
[ 1077.262196][T23251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1077.262208][T23251] R13: 00007f7876e26038 R14: 00007f7876e25fa0 R15: 00007ffd28ad9bc8
[ 1077.262239][T23251]  </TASK>
[ 1077.376465][T22882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.519663][T22882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.534356][T22882] bond0 (unregistering): Released all slaves
[ 1077.792365][T23256] overlay: filesystem on ./bus not supported as upperdir
[ 1078.153298][ T5691] usb 1-1: USB disconnect, device number 50
[ 1078.184003][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1078.349564][T11019] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1078.475759][T14184] Bluetooth: hci5: command tx timeout
[ 1078.499633][T11019] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1078.500779][T11019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.500805][T11019] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1078.502930][T11019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.502953][T11019] usb 2-1: Product: syz
[ 1078.502968][T11019] usb 2-1: Manufacturer: syz
[ 1078.502983][T11019] usb 2-1: SerialNumber: syz
[ 1078.586755][T11019] usb 2-1: 0:2 : does not exist
[ 1078.754826][T11019] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1078.973124][T11019] usb 2-1: USB disconnect, device number 30
[ 1079.098904][   T25] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1079.200739][T20110] udevd[20110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1079.257873][   T25] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1079.269707][   T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.283910][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.300408][   T25] usb 7-1: config 0 descriptor??
[ 1079.886081][   T31] kauditd_printk_skb: 57 callbacks suppressed
[ 1079.886136][   T31] audit: type=1800 audit(1787863730.578:8633): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1079.996972][   T25] ath6kl: Failed to read usb control message: -71
[ 1080.003585][   T25] ath6kl: Unable to read the bmi data from the device: -71
[ 1080.011762][   T25] ath6kl: unable to read target info byte count: -71
[ 1080.022886][   T25] ath6kl: Failed to init ath6kl core: -71
[ 1080.054073][T22882] hsr_slave_0: left promiscuous mode
[ 1080.054485][   T25] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1080.055000][T22882] hsr_slave_1: left promiscuous mode
[ 1080.055933][T22882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1080.055960][T22882] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1080.064908][T22882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1080.064936][T22882] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1080.125897][   T25] usb 7-1: USB disconnect, device number 48
[ 1080.132123][T22882] veth1_macvtap: left promiscuous mode
[ 1080.132168][T22882] veth0_macvtap: left promiscuous mode
[ 1080.132266][T22882] veth1_vlan: left promiscuous mode
[ 1080.132331][T22882] veth0_vlan: left promiscuous mode
[ 1080.186028][T11019] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1080.351932][T11019] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1080.355451][T11019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.355488][T11019] usb 2-1: Product: syz
[ 1080.355526][T11019] usb 2-1: Manufacturer: syz
[ 1080.355541][T11019] usb 2-1: SerialNumber: syz
[ 1080.361665][   T31] audit: type=1800 audit(1787863731.058:8634): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=420032 res=0 errno=0
[ 1080.368101][   T31] audit: type=1800 audit(1787863731.068:8635): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=420064 res=0 errno=0
[ 1080.370657][   T31] audit: type=1800 audit(1787863731.068:8636): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=420039 res=0 errno=0
[ 1080.383532][   T31] audit: type=1800 audit(1787863731.078:8637): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=420040 res=0 errno=0
[ 1080.546988][T18730] Bluetooth: hci3: command 0x0406 tx timeout
[ 1080.547126][T18730] Bluetooth: hci5: command tx timeout
[ 1080.704510][   T31] audit: type=1800 audit(1787863731.398:8638): pid=23283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4579" name="quirks" dev="sysfs" ino=59788 res=0 errno=0
[ 1080.785675][   T31] audit: type=1800 audit(1787863731.478:8639): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1080.885373][   T31] audit: type=1800 audit(1787863731.578:8640): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1080.947866][   T31] audit: type=1800 audit(1787863731.648:8641): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1081.133812][T11019] rtl8150 2-1:1.0: couldn't reset the device
[ 1081.134146][T11019] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[ 1081.162658][   T31] audit: type=1800 audit(1787863731.858:8642): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=420061 res=0 errno=0
[ 1081.170136][T11019] usb 2-1: USB disconnect, device number 31
[ 1081.421789][T22882] team0 (unregistering): Port device team_slave_1 removed
[ 1081.449352][T22882] team0 (unregistering): Port device team_slave_0 removed
[ 1081.666522][ T6606] smc: removing ib device syz0
[ 1081.981585][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1082.000410][T23314] netlink: 'syz.6.4586': attribute type 13 has an invalid length.
[ 1082.013032][T23314] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4586'.
[ 1082.113789][   T10] syz0: Port: 1 Link DOWN
[ 1082.123717][T23314] erspan0: refused to change device tx_queue_len
[ 1082.130372][T23314] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1082.395221][ T6606] smbdirect: ib_dev[syz0] removed
[ 1082.627952][T11019] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[ 1082.639303][T14184] Bluetooth: hci5: command tx timeout
[ 1082.787006][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1082.799020][T11019] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1082.823769][T23329] netlink: 'syz.1.4589': attribute type 13 has an invalid length.
[ 1082.827995][T11019] usb 7-1: not running at top speed; connect to a high speed hub
[ 1082.828031][T11019] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[ 1082.849122][T11019] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.849155][T11019] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2
[ 1082.865090][T11019] usb 7-1: string descriptor 0 read error: -22
[ 1082.865226][T11019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.889951][T23329] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4589'.
[ 1082.955955][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1082.962003][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1082.969351][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.969376][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1082.976240][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.976268][   T10] usb 1-1: Product: syz
[ 1082.976305][   T10] usb 1-1: Manufacturer: syz
[ 1082.976320][   T10] usb 1-1: SerialNumber: syz
[ 1083.041519][T23329] erspan0: refused to change device tx_queue_len
[ 1083.041593][T23329] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1083.110619][T11019] snd-usb-6fire 7-1:2.0: unknown device firmware state received from device:
[ 1083.110714][T11019] 00 00 00 00 00 00 00 00 
[ 1083.110798][T11019] snd-usb-6fire 7-1:2.0: probe with driver snd-usb-6fire failed with error -5
[ 1083.120409][   T10] usb 1-1: 0:2 : does not exist
[ 1083.579509][T23203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.580813][T23203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.581022][T23203] bridge_slave_0: entered allmulticast mode
[ 1083.624857][T23203] bridge_slave_0: entered promiscuous mode
[ 1083.630044][T11019] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1083.658923][T23203] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.661634][T23203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.661879][T23203] bridge_slave_1: entered allmulticast mode
[ 1083.700947][T23203] bridge_slave_1: entered promiscuous mode
[ 1083.803511][T11019] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1083.805008][T11019] usb 2-1: not running at top speed; connect to a high speed hub
[ 1083.805044][T11019] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[ 1083.806303][T11019] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.806327][T11019] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2
[ 1083.833448][T11019] usb 2-1: string descriptor 0 read error: -22
[ 1083.833618][T11019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.954967][T23343] event trace: Could not enable event p
[ 1083.999405][   T25] usb 7-1: USB disconnect, device number 49
[ 1084.128116][T11019] snd-usb-6fire 2-1:2.0: unknown device firmware state received from device:
[ 1084.128167][T11019] 00 00 00 00 00 00 00 00 
[ 1084.128285][T11019] snd-usb-6fire 2-1:2.0: probe with driver snd-usb-6fire failed with error -5
[ 1084.376424][T23203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.391515][T23203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.595450][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1084.692843][T23355] event trace: Could not enable event p
[ 1084.853834][T23203] team0: Port device team_slave_0 added
[ 1084.867395][ T5780] usb 2-1: USB disconnect, device number 32
[ 1084.900933][T23203] team0: Port device team_slave_1 added
[ 1085.128229][T23203] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1085.128265][T23203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.128311][T23203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1085.183609][T23203] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1085.198232][T23203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.211036][T23203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1085.398678][   T31] kauditd_printk_skb: 26 callbacks suppressed
[ 1085.398721][   T31] audit: type=1800 audit(1787863736.099:8669): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1085.630031][   T31] audit: type=1800 audit(1787863736.319:8670): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
[ 1085.793972][   T31] audit: type=1800 audit(1787863736.489:8671): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1085.881278][T23203] hsr_slave_0: entered promiscuous mode
[ 1085.889996][T23203] hsr_slave_1: entered promiscuous mode
[ 1085.893280][T23203] debugfs: 'hsr0' already exists in 'hsr'
[ 1085.893305][T23203] Cannot create hsr debugfs directory
[ 1086.065662][T23381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1086.076918][T23381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1086.090024][   T31] audit: type=1800 audit(1787863736.789:8672): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0
[ 1086.151366][T23384] FAULT_INJECTION: forcing a failure.
[ 1086.151366][T23384] name failslab, interval 1, probability 0, space 0, times 0
[ 1086.184717][T23384] CPU: 1 UID: 0 PID: 23384 Comm: syz.0.4595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1086.184759][T23384] Tainted: [L]=SOFTLOCKUP
[ 1086.184767][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1086.184779][T23384] Call Trace:
[ 1086.184788][T23384]  <TASK>
[ 1086.184797][T23384]  dump_stack_lvl+0xe8/0x150
[ 1086.184829][T23384]  should_fail_ex+0x3eb/0x540
[ 1086.184863][T23384]  should_failslab+0xa8/0x100
[ 1086.184886][T23384]  __kmalloc_noprof+0xfe/0x720
[ 1086.184920][T23384]  ? tracepoint_add_func+0x351/0xa90
[ 1086.184948][T23384]  ? tracepoint_add_func+0x351/0xa90
[ 1086.184983][T23384]  tracepoint_add_func+0x351/0xa90
[ 1086.185020][T23384]  ? __pfx_probe_sched_wakeup+0x10/0x10
[ 1086.185047][T23384]  tracepoint_probe_register+0x5d/0x90
[ 1086.185074][T23384]  ? __pfx_probe_sched_wakeup+0x10/0x10
[ 1086.185105][T23384]  tracing_start_sched_switch+0x126/0x200
[ 1086.185133][T23384]  __ftrace_event_enable_disable+0x2dc/0x720
[ 1086.185164][T23384]  event_enable_write+0x242/0x330
[ 1086.185197][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1086.185235][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1086.185263][T23384]  vfs_write+0x296/0xba0
[ 1086.185298][T23384]  ? __pfx_vfs_write+0x10/0x10
[ 1086.185326][T23384]  ? __fget_files+0x2a/0x420
[ 1086.185355][T23384]  ? __fget_files+0x3a2/0x420
[ 1086.185377][T23384]  ? __fget_files+0x2a/0x420
[ 1086.185410][T23384]  ksys_write+0x150/0x270
[ 1086.185437][T23384]  ? __pfx_ksys_write+0x10/0x10
[ 1086.185474][T23384]  do_syscall_64+0x166/0x520
[ 1086.185496][T23384]  ? trace_irq_disable+0x3b/0x140
[ 1086.185523][T23384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1086.185543][T23384]  ? clear_bhb_loop+0x70/0xc0
[ 1086.185568][T23384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1086.185589][T23384] RIP: 0033:0x7ff1a8d9e159
[ 1086.185608][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1086.185626][T23384] RSP: 002b:00007ff1a9ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1086.185648][T23384] RAX: ffffffffffffffda RBX: 00007ff1a9026090 RCX: 00007ff1a8d9e159
[ 1086.185664][T23384] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[ 1086.185677][T23384] RBP: 00007ff1a9ced090 R08: 0000000000000000 R09: 0000000000000000
[ 1086.185691][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1086.185703][T23384] R13: 00007ff1a9026128 R14: 00007ff1a9026090 R15: 00007ffc4051cc58
[ 1086.185738][T23384]  </TASK>
[ 1086.197067][T23384] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup_new
[ 1086.552365][   T31] audit: type=1800 audit(1787863737.249:8673): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0
** replaying previous printk message **
[ 1086.630503][T23384] ------------[ cut here ]------------
[ 1086.630591][T23384] IS_ERR(old)
[ 1086.630620][T23384] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x1e6/0xa70, CPU#0: syz.0.4595/23384
[ 1086.655590][T23384] Modules linked in:
[ 1086.659697][T23384] CPU: 0 UID: 0 PID: 23384 Comm: syz.0.4595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1086.670787][T23384] Tainted: [L]=SOFTLOCKUP
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1086.675149][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1086.685549][T23384] RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70
[ 1086.692347][T23384] Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 46 25 0a 89 c3 31 ff 89 c6 e8 22 32
[ 1086.712523][T23384] RSP: 0018:ffffc9000d0cfb28 EFLAGS: 00010293
[ 1086.720103][T23384] RAX: ffffffff81c9b38e RBX: 0000000000000001 RCX: ffff88802d3bbe80
[ 1086.729490][T23384] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1086.739716][T23384] RBP: fffffffffffffffe R08: ffffffff909bb47f R09: 1ffffffff213768f
[ 1086.748162][T23384] R10: dffffc0000000000 R11: fffffbfff2137690 R12: ffffffff90855a70
[ 1086.756265][T23384] R13: ffffffff81d01120 R14: ffffffff90855aa8 R15: 1ffffffff210ab55
[ 1086.764385][T23384] FS:  00007ff1a9ced6c0(0000) GS:ffff888124885000(0000) knlGS:0000000000000000
[ 1086.773576][T23384] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1086.776265][   T31] audit: type=1800 audit(1787863737.459:8674): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0
[ 1086.801288][T23384] CR2: 000000110c4064f4 CR3: 000000005f50c000 CR4: 00000000003526f0
[ 1086.809696][T23384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1086.817755][T23384] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1086.825788][T23384] Call Trace:
[ 1086.830324][T23384]  <TASK>
[ 1086.833295][T23384]  ? probe_event_enable+0x970/0xae0
[ 1086.839394][T23384]  tracing_stop_cmdline_record+0x6d/0xb0
[ 1086.845100][T23384]  __ftrace_event_enable_disable+0x5bb/0x720
[ 1086.851212][T23384]  event_enable_write+0x242/0x330
[ 1086.856507][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1086.862136][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1086.868024][T23384]  vfs_write+0x296/0xba0
[ 1086.872467][T23384]  ? __pfx_vfs_write+0x10/0x10
[ 1086.877559][T23384]  ? __fget_files+0x2a/0x420
[ 1086.881724][T23387] loop4: detected capacity change from 0 to 2640
[ 1086.882425][T23387] buffer_io_error: 50 callbacks suppressed
[ 1086.882445][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882484][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882516][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882547][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882625][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882675][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882720][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882750][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882770][T23387] ldm_validate_partition_table(): Disk read failed.
[ 1086.882868][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.882899][T23387] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1086.894111][T23387] Dev loop4: unable to read RDB block 0
[ 1086.894622][T23387]  loop4: unable to read partition table
[ 1086.894898][T23387] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1086.948702][   T31] audit: type=1800 audit(1787863737.649:8675): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0
[ 1087.023028][T23384]  ? __fget_files+0x3a2/0x420
[ 1087.029813][T23384]  ? __fget_files+0x2a/0x420
[ 1087.035745][T23384]  ksys_write+0x150/0x270
[ 1087.041204][T23384]  ? __pfx_ksys_write+0x10/0x10
[ 1087.046168][T23384]  do_syscall_64+0x166/0x520
[ 1087.050841][T23384]  ? trace_irq_disable+0x3b/0x140
[ 1087.056441][T23384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.062593][T23384]  ? clear_bhb_loop+0x70/0xc0
[ 1087.067443][T23384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.073441][T23384] RIP: 0033:0x7ff1a8d9e159
[ 1087.078162][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.097997][T23384] RSP: 002b:00007ff1a9ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1087.106692][T23384] RAX: ffffffffffffffda RBX: 00007ff1a9026090 RCX: 00007ff1a8d9e159
[ 1087.114730][T23384] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[ 1087.122800][T23384] RBP: 00007ff1a9ced090 R08: 0000000000000000 R09: 0000000000000000
[ 1087.130952][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1087.140307][T23384] R13: 00007ff1a9026128 R14: 00007ff1a9026090 R15: 00007ffc4051cc58
[ 1087.149341][T23384]  </TASK>
[ 1087.152440][T23384] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1087.159734][T23384] CPU: 0 UID: 0 PID: 23384 Comm: syz.0.4595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1087.171163][T23384] Tainted: [L]=SOFTLOCKUP
[ 1087.175503][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1087.185582][T23384] Call Trace:
[ 1087.188877][T23384]  <TASK>
[ 1087.191843][T23384]  vpanic+0x56d/0xa60
[ 1087.195892][T23384]  ? __pfx__printk+0x10/0x10
[ 1087.200522][T23384]  ? __pfx_vpanic+0x10/0x10
[ 1087.205092][T23384]  ? is_bpf_text_address+0x292/0x2b0
[ 1087.210528][T23384]  ? is_bpf_text_address+0x26/0x2b0
[ 1087.215793][T23384]  panic+0xc5/0xd0
[ 1087.219577][T23384]  ? __pfx_panic+0x10/0x10
[ 1087.224044][T23384]  __warn+0x315/0x4c0
[ 1087.228062][T23384]  ? tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.234091][T23384]  ? tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.240300][T23384]  __report_bug+0x276/0x570
[ 1087.244868][T23384]  ? tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.250884][T23384]  ? __pfx___report_bug+0x10/0x10
[ 1087.255933][T23384]  ? rcu_is_watching+0x16/0xb0
[ 1087.260725][T23384]  ? trace_contention_end+0x3d/0x140
[ 1087.266044][T23384]  ? __mutex_lock+0x30b/0x1550
[ 1087.270827][T23384]  ? trace_contention_end+0x3d/0x140
[ 1087.276211][T23384]  ? tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.282209][T23384]  report_bug+0x16b/0x220
[ 1087.286726][T23384]  ? tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.292711][T23384]  ? tracepoint_probe_unregister+0x1e8/0xa70
[ 1087.298703][T23384]  handle_bug+0x9c/0x200
[ 1087.302963][T23384]  exc_invalid_op+0x1a/0x50
[ 1087.307471][T23384]  asm_exc_invalid_op+0x1a/0x20
[ 1087.312321][T23384] RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70
[ 1087.318911][T23384] Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 46 25 0a 89 c3 31 ff 89 c6 e8 22 32
[ 1087.338515][T23384] RSP: 0018:ffffc9000d0cfb28 EFLAGS: 00010293
[ 1087.344587][T23384] RAX: ffffffff81c9b38e RBX: 0000000000000001 RCX: ffff88802d3bbe80
[ 1087.352564][T23384] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1087.360627][T23384] RBP: fffffffffffffffe R08: ffffffff909bb47f R09: 1ffffffff213768f
[ 1087.368681][T23384] R10: dffffc0000000000 R11: fffffbfff2137690 R12: ffffffff90855a70
[ 1087.376649][T23384] R13: ffffffff81d01120 R14: ffffffff90855aa8 R15: 1ffffffff210ab55
[ 1087.384872][T23384]  ? __pfx_probe_sched_switch+0x10/0x10
[ 1087.390441][T23384]  ? tracepoint_probe_unregister+0x1de/0xa70
[ 1087.396449][T23384]  ? tracepoint_probe_unregister+0x1de/0xa70
[ 1087.402521][T23384]  ? probe_event_enable+0x970/0xae0
[ 1087.407735][T23384]  tracing_stop_cmdline_record+0x6d/0xb0
[ 1087.413421][T23384]  __ftrace_event_enable_disable+0x5bb/0x720
[ 1087.419517][T23384]  event_enable_write+0x242/0x330
[ 1087.424647][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1087.430205][T23384]  ? __pfx_event_enable_write+0x10/0x10
[ 1087.435757][T23384]  vfs_write+0x296/0xba0
[ 1087.440110][T23384]  ? __pfx_vfs_write+0x10/0x10
[ 1087.444900][T23384]  ? __fget_files+0x2a/0x420
[ 1087.449513][T23384]  ? __fget_files+0x3a2/0x420
[ 1087.454370][T23384]  ? __fget_files+0x2a/0x420
[ 1087.458974][T23384]  ksys_write+0x150/0x270
[ 1087.463626][T23384]  ? __pfx_ksys_write+0x10/0x10
[ 1087.468705][T23384]  do_syscall_64+0x166/0x520
[ 1087.473387][T23384]  ? trace_irq_disable+0x3b/0x140
[ 1087.478502][T23384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.484578][T23384]  ? clear_bhb_loop+0x70/0xc0
[ 1087.489277][T23384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.495171][T23384] RIP: 0033:0x7ff1a8d9e159
[ 1087.499588][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.519187][T23384] RSP: 002b:00007ff1a9ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1087.527621][T23384] RAX: ffffffffffffffda RBX: 00007ff1a9026090 RCX: 00007ff1a8d9e159
[ 1087.535590][T23384] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[ 1087.543554][T23384] RBP: 00007ff1a9ced090 R08: 0000000000000000 R09: 0000000000000000
[ 1087.551524][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1087.559494][T23384] R13: 00007ff1a9026128 R14: 00007ff1a9026090 R15: 00007ffc4051cc58
[ 1087.567480][T23384]  </TASK>
[ 1087.570757][T23384] Kernel Offset: disabled
[ 1087.575425][T23384] Rebooting in 86400 seconds..