last executing test programs:

23m18.850497764s ago: executing program 32 (id=84):
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/trace_clock\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020)
write$tun(0xffffffffffffffff, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)

22m1.968220945s ago: executing program 33 (id=375):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0x850a})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8010000100001000000000000000000fe80000000000000000000000000007e950000000000000000000000000000000000ecdf000000000a000000000000000328b68b66d9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000040000800000000000000000000000000200000000000000ffffffff2dbd700000008000020004004c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000080000000aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94000000"], 0x1c8}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x300, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r3, 0x2799f5eec7981083, 0x170bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x80)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1, 0x4}}, 0x26)

20m45.263616406s ago: executing program 34 (id=761):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
close(r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x60, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFT_MSG_DELRULE={0x15c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_USERDATA={0xe0, 0x7, 0x1, 0x0, "ae933cd452df5398e2eb80eac083e800065c9ff8a1613b9f2e9400654564c35521e7a3ef81b56cb69d4bb8e4b8dda6fc23a6e732f87c33c9268d645eacc89536a22509afae19a441006b0633f94ea7b01c74ec04ff2861077e46d42a454663ad25c9f17f479ac6d266e0bb677bc58bd2b8621ef7d09f76346464836b722840493f023d8c3345712ed641bfb5334905a85c62c013e5c3e237d258617aafd5adf56f632367d1eb7111af29279692497c190dd7b4db341813a9c8717fd7a332d62ad54f852245d979aeed52678d06c44cfbf6a0cef5350dc58e678ac232"}]}, @NFT_MSG_NEWFLOWTABLE={0x19c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x154, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@updpolicy={0x1a0, 0x19, 0x1, 0x0, 0x11, {{@in=@multicast1, @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2, 0x9, 0x80}}, [@iptfs_pkt_size={0x8, 0x29, 0x6}, @lifetime_val={0x24, 0x9, {0x5cb, 0xf75, 0x2, 0x401}}, @iptfs_max_qsize={0x8, 0x28, 0x1}, @policy={0xac, 0x7, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e21, 0xdd7, 0xa, 0x20, 0x0, 0x0, 0x0, r2}, {0xcb1, 0xc4, 0x6, 0xa, 0x50, 0x260f, 0xc00000000, 0x3}, {0x9, 0x1, 0x3ff, 0xfffffffffffffffd}, 0x90000, 0x6e6bb6, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x1a0}}, 0xc044)

20m15.497076038s ago: executing program 35 (id=885):
r0 = syz_open_procfs(0x0, &(0x7f0000001e40)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f00006b3000/0x2000)=nil)
rmdir(&(0x7f0000001e80)='./file0/file3\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pread64(r0, &(0x7f0000001ec0)=""/154, 0x9a, 0x4)

15m21.760272218s ago: executing program 36 (id=2547):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x40, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6baa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a602", 0x23d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="e0", 0x1}], 0x1}}], 0x2, 0x4000001)
close(0x3)

14m34.081058921s ago: executing program 37 (id=2727):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_debugfs\x00', 0x4)
mount(0x0, &(0x7f0000000240)='./my_debugfs\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
close(0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000580)='./my_debugfs/usb/devices\x00', 0x4000, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x2, 0x40c440)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x482, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000480)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"})
syz_open_pts(r4, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000004c0)={0x4, 0x0, 0x40000003, 0x20b, 0xb, "d206000894f3ffffd51930f9000100"})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000005d40)={0x0, 0x80006d15, 0x1000, 0x3, 0x3d3, 0x0, r2}, &(0x7f0000002640)=[{0x0, 0x0, <r5=>0xffffffffffffffff, {0x0, 0xe3ab, 0x8000, 0x0, 0x18, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3d5, 0x2, 0x1, 0xfa, 0x0, r2}}, {0x0, 0x0, <r6=>0xffffffffffffffff, {0x0, 0xfae5, 0x2400, 0x2, 0x3b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea4, 0x40, 0x3, 0x1e5, 0x0, r2}}], 0x4, &(0x7f0000000500)={0x2e, 0x69, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfffa}, 0x0, 0x0, '\x00', {0x2, 0xa85, 0x0, &(0x7f00000028c0)=@buf_4k="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"}}, &(0x7f0000003940))
r7 = getpid()
newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='.\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
setresuid(r8, r8, 0x0)
statx(r2, &(0x7f0000003a40)='./my_debugfs\x00', 0x100, 0x2, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000003b80))
read$FUSE(r2, &(0x7f0000003bc0)={0x2020}, 0x2020)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000005c00)=<r10=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005c40)={{0x1, 0x1, 0x18, r1, {0xee01, <r11=>0x0}}, './my_debugfs/usb/devices\x00'})
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000005c80)={'\x00', 0x2, 0x1, 0xb4, 0x399b, 0x1, <r12=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000005d00)={0x6, 0x3, {0xffffffffffffffff}, {<r13=>0x0}, 0x6, 0x7fffffffffffffff})
r14 = getegid()
sendmsg$unix(r2, &(0x7f0000005e00)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000005e40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="00fca8001151369667d1e24de48b000000000000000000a0f57c75", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0xc000}, 0x4000)
read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x24}}, {0x8, 0x2, @remote}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040}, 0x44021)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r15=>0x0})
sendto$packet(r0, &(0x7f0000000040)="f1168300", 0x4, 0x4000010, &(0x7f0000000080)={0x11, 0x1b, r15, 0x1, 0x8, 0x6, @random}, 0x14)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c8001a00160001000301"], 0x1f)

13m36.047128617s ago: executing program 38 (id=3050):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f00000026c0)='270', 0x3)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043314, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1)
mount$tmpfs(0x0, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', &(0x7f00000002c0), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000300)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000340)=ANY=[], 0x8)
openat$audio1(0xffffffffffffff9c, &(0x7f00000007c0), 0x129202, 0x0)
mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x0, 0x0)
r4 = openat(r1, &(0x7f0000002640)='./dir0\x00', 0x54402, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8)
quotactl_fd$Q_SETINFO(r4, 0xf60703b24f698d9f, r5, &(0x7f0000000480)={0x9, 0x6, 0x1, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff)
mount(&(0x7f0000002840)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000002880)='./dir0\x00', &(0x7f00000028c0)='ceph\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf2503000000580001800d0001007564703a73797a32000000004400040020000100e8384e26fffffffeff0200000000000000000000000000012a7f0000200002"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6a3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e1a949741220620778ed075825f1365c6913bf918e0dcf39e8c2d46c57049744a8743d33"}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x592}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbc68d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008890}, 0x0)

9m43.262086798s ago: executing program 39 (id=4048):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000640)=0x40000003, 0xb)
listen(r1, 0x10001)
r2 = syz_open_dev$audion(&(0x7f0000000680), 0x6, 0x149b00)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe0, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "1bd681c20281d8f0e5a679d77fa9bd0441"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee086e37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000040}, 0x8008480)
r4 = socket$unix(0x1, 0x1, 0x0)
capset(&(0x7f0000000300)={0x20080522, 0xffffffffffffffff}, &(0x7f00000005c0)={0x4, 0x10001, 0x1000, 0x173b, 0x4, 0x5})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'caif0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x43, 0x21e2, 0x10000, 0x67, "05ee32b300662d257ae8ace661bbff44cc7562d70f837a5cd88068ec60ca0875e3766de87c449393bbd116bee674b14184f412ec2967ec0f28b4d71b3d9cf06ae56037d4b0b15f7b0fda34cc8ffe92fb5771281520cc0cfbb35c17ab806641a1eeb4a99ad911a3"}})
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0xd72, 0x4)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYBLOB="01012dbd70eafddbdf250100000005000600090000000500000000000005000500020000004c7ad3"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000600)={0x1, 'bridge0\x00', {}, 0xfffc})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000440)={0x3b, @broadcast, 0x4e24, 0x0, 'ovf\x00', 0xf, 0x4, 0x7f}, 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x4000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r9, &(0x7f00000009c0)='10', 0x2)
unshare(0x6000480)
read(r8, &(0x7f0000000200)=""/9, 0xfffffd87)
lgetxattr(&(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)=@random={'btrfs.', ']!%!\xa6-,\x00'}, &(0x7f00000000c0)=""/45, 0x2d)

8m58.707903168s ago: executing program 40 (id=4116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000004240)=[{0x0}, {&(0x7f0000004280)="2edca94a4b3fa20071786a24a92319a5b07d268ce0270f9c3f7727c3a46c8208cc34bddc46d7b5c88247af1ac8d809f548d63649", 0x34}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000042c0), 0x400, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000004300)=ANY=[@ANYBLOB="040e"], 0x8)
write(r0, &(0x7f0000000140)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee1", 0x37)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r3, &(0x7f0000000240)=""/16384, 0x4000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x301, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd(0x2000005)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x27800000000, 0x0, 0x1, r6, 0x1})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000004480)={0x9, 0x1000, 0x2, r3, 0x5})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004380), r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000044c0)='./sys\x00', &(0x7f0000004500)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004540)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r8, &(0x7f0000004580)='10000', 0x5)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x30, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0x7, 0x5f}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x30}}, 0x5)

7m52.759638422s ago: executing program 7 (id=4468):
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/test\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000680)='nfs\x00', 0x0, &(0x7f0000000800)='addr=127.0.0.1,vers=2,proto=udp\x00')
sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8006, 0x4, 0x2}}], 0x20, 0x4008010}, 0x8050)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={<r1=>0x0, 0x5}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={r1, 0xed}, &(0x7f0000000640)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000004c0), 0x4)
syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x6, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x22}, [@mixer_unit={0x7, 0x24, 0x4, 0x6, 0x8, "c526"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, 0x5, [0x4, 0x1, 0x5, 0xb, 0x7], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x4, 0x7f, 0xd, "", "ce"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xfa, 0x1, 0xb4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x99, 0x0, 0x0, {0x7, 0x25, 0x1, 0x8, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x80, "", "fb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x0, 0x7, {0x7, 0x25, 0x1, 0x8, 0x1, 0x2}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xb3, 0x3, 0x9, 0x40, 0xff}, 0xc6, &(0x7f0000000a80)={0x5, 0xf, 0xc6, 0x4, [@generic={0x97, 0x10, 0x3, "954027bcef98fa04377976331252caf046f6a1f526099581e3350ee5b0b2cde61ca0493275b1b7a8f28c94320add1a4613770599e9ec733256bbdc8e3aec9cb97843ebd8b0aba435a8281fe0007d425cdde75b20e383e064be88983cb5f8bc67a547caa63219b709af4968f655d6dd9279bfa86d9f10aa41e2687199422bbde16cd61fd1b05fcd0c1c25979a97214a85b6549e1f"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4636f7033d0f8f0000900000000000e5"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x5, 0x803}, @generic={0xf, 0x10, 0x2, "4326c24f07a5812e45e06ddf"}]}, 0x5, [{0x4e, &(0x7f0000000200)=@string={0x4e, 0x3, "39ca4418ee3756f34a1b09163eaa88d77b6ec96fe781e3ab084d3bf7a17761648e7ecb757b7ba66cc47045d20c4d02dad696dee3ef72bc599e02ca023d0fbb944c4466c11cde58cfa43db011"}}, {0x45, &(0x7f0000000280)=@string={0x45, 0x3, "9431c5d7564e169a1fdf7b5a4afe49e8d8c5cff90009e13353d681acbbdba12587d788fc1e096d137c36725b2699e1029b50c7f5f68a8608976c98c3fb2135c4ec8d25"}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "df5e56d529f73804d879b80c2ad4b2daa4f9cb860525cb4c5da9a66eabe46861e97f1e72d5b75448ed594601a0529a1123fbfc4858af6ca9667727f58774591fe53af6cbaede408724a4db942aede319f36ef2d7a8b0d56bbc6962f640a5a9b200886c093540633654b78d08fceb0ecfdd95ad3f5f54927be11cb9a29b7ce4474a7ba0faa5163df781046c9778af887a1a7ccace11e25d4cef61f36981e79a91e04bc2d4d5af41dee17235004b0ac42fda0c2a08b78ab8db5ccb9f90cd4a43ae32de751fe2b790981b278de03dcf0df4533d7fbc23a2c8cffd9db42fefc778c5a38aa9ad57461aaec45a57c6a3a389425c5bad0127e69ba0f72992de462ccf8a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x89dc50d50f23fe57}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3047}}]})
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000110015c00000000000000000c000280"], 0x1c}], 0x1, 0x0, 0x0, 0x440d0}, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

7m50.971862914s ago: executing program 7 (id=4474):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
connect(r1, &(0x7f0000000200)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80)
bind$inet(r1, &(0x7f0000000280)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)
r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x40040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000001c0)={0x3, 0x200, 0x0, 0xfffff803, 0x2})

7m47.759351462s ago: executing program 7 (id=4481):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

7m47.565037185s ago: executing program 7 (id=4482):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = getpgid(0x0)
process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=[{0x0}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000002140), 0x400000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002180)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000021c0)='./nfsd\x00', &(0x7f0000002200)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./nfsd/max_block_size\x00', 0x1, 0x0)
write$cgroup_devices(r2, &(0x7f0000002280)=ANY=[], 0x9)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ipvlan0\x00', 0x8})
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
syz_pidfd_open(r1, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000002280)={[0xd42, 0x8, 0x81, 0x4, 0xfff8, 0x0, 0x1000, 0x7fff7ffffffe, 0x8000000004bf5, 0x4, 0x10000, 0xfffc, 0xffffffffffffffff, 0x5, 0x7, 0x3], 0x0, 0x28657})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r4, 0x2, &(0x7f00000023c0))
ptrace$cont(0x21, r4, 0x5, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7)

7m47.078144807s ago: executing program 7 (id=4487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./security\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000100)='./security/ima/policy\x00', 0x2000, 0x149)
pread64(r0, &(0x7f0000000140)=""/259, 0xfffffe7b, 0x91)

7m45.177410616s ago: executing program 7 (id=4494):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f00000007c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)="a2", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0xc010)

7m44.306162694s ago: executing program 41 (id=4494):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f00000007c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)="a2", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0xc010)

6m2.229802279s ago: executing program 3 (id=4929):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

6m2.069150568s ago: executing program 3 (id=4930):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000040)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, <r1=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x5f0, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a400, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001900), 0x8000, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001a00), 0x2000, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000001940)={0x80})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1b)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000400)=0x4, 0x4)
r8 = dup(r5)
r9 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000440)={0x0, 0xf649, 0x20, 0x1, 0x16, 0x0, r8}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd069, 0x224, 0x1, 0x1a4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x50cf, 0x8000, 0x2, 0x123, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2cf, 0x600, 0x3, 0x327, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c32, 0x1000, 0x0, 0x2d4, 0x0, r8}}], 0x4, &(0x7f0000001780)={0x2e, 0x23, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r1, '\x00', {0x2, 0x339, 0x0, &(0x7f0000000780)=@buf_512="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"}}, &(0x7f0000001800))
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000001c0)='tcp_nodelay\x00', &(0x7f0000000200)='1\x00', 0x0)
chdir(&(0x7f0000001a40)='./cgroup\x00')
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x14e174135c0b87af)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='recover_session\x00', &(0x7f0000000300)='no\x00', 0x0)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000280)={0x0, 0x1, 0x1f00, 0x1000001, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x18, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r1, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

6m1.188866908s ago: executing program 3 (id=4934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r0, &(0x7f0000000980)=""/10, 0x5b)

6m0.791711917s ago: executing program 3 (id=4936):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000003040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000003080)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r3, &(0x7f00000030c0)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)
add_key(&(0x7f0000003280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x46, &(0x7f00000032c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xdc, 0x2d988a17, 0x7, 0x3, 0x7fff, <r5=>0xffffffffffffffff})
r6 = socket$inet(0x2, 0x4, 0x7)
getresuid(&(0x7f0000001900), &(0x7f0000001940)=<r7=>0x0, &(0x7f0000001980))
sendmsg$netlink(r4, &(0x7f0000002d40)={&(0x7f0000000140), 0xc, &(0x7f0000002cc0)=[{&(0x7f0000000200)={0x30, 0x34, 0x300, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0xa6, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x77, 0x0, 0x0, @fd=r6}, @nested={0x10, 0xaf, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0x2a4}]}]}, 0x30}, {&(0x7f0000000240)={0xe8, 0x33, 0x100, 0x70bd25, 0x25dfdbfb, "", [@nested={0xd5, 0x44, 0x0, 0x1, [@generic="c6ace534db98614a03cbff063c7665b6711d28d20f592d94a8e32e0333de5148be4a6acdaaa6106e41ab1ca1bf44a5af02911454bb095868f565ab934148b7ea39e804bc6bab31b3d2eab8542955e3296eede445f8ed37aaabdb831511adacccd9e43add51b0f1263a86fa8111dba393ca6b855dfa1037a20cc6963ea15563c4113b472a0844883d42706c8cd19778e55c50af2330ea852e63a2676aa35f0d8a57e1920981c54ace98b355c5724ec850a2d5f5fa669906c23257861c01", @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xd4}, @typed={0x8, 0x138, 0x0, 0x0, @u32=0x8000}]}]}, 0xe8}, {&(0x7f0000000340)=ANY=[@ANYBLOB="601500000100000226bd7000fddbdf254611ae8004004080cf7fe2f5dbbacb8c0cc106f1b53abef4ab5e0f2e37508f2deaa77d9cec1ed877ce7b30ed8d201db4fba7b340cfc7f36b4b07763c5535da9ab87762cafd6057d4eceb78c5a8f1d07b3b046c7d92ff6b23123271b1fd8aadfbbfe00a692739c4573998cf020ed8d0619e22e7de03db8f47c82e0693686f7ce87cb301c9142d3cf808000c00ffffffffd3736be9c22f541a14d9b4cf11a603b4b7837532c76c5fbf3140b1b5a4867271a0ced34707cca5ddc4dda3e07c45d595e675030ca14fe0f465dce7790ccedfcf469378f80aa8753ee98f7cbca520bd19aa0900f830d8152beff9f2c2622976a1c908b00c68718e075215a25b9c429a9097638ab05af92f0d9b8f32cc098e6cc740c8cab62e1cdcc65619602bb0022b915e076f9efd8acdea0b46f17d28157623126fad5b228a958dc3d0b140eced0a84b917303b52d5b680de66b87d9e416317c9f114be881fd586795e69079f5ce3472a6e7cff1b580ef8efa6dc82c9adcce8c7e94eec8a0b6640c5c749b62827bac5c930cceb723e9a234ed335082b1ef756aae6b80cb4b74a88afd43f7e983330c8ffb8ae483a72217b559ad435e0ec4a977e2209d22dd7a401cbf7d7ef57f9ea3682db16fe504c55e22034492fb114bebbf13724273d8cd40e580844511c6cdc6a2728258179cff344d79de4412ef3e80dbb80fefa5fcadfd75e477f0ec3ad8301076bfb8b505447722fe1477cd6ae1aae724c5f484c60cd9046d4d96be89248bf4aec67910e506720a9ecfacd8da5bbcc3bc063f832e52da54d8788ace04c758dd370591ed885663f713f18fde7d8653478875efa26c80ca49ece272af27fbae4e648d40a9a42eb62933a655abcda1ad7f3897eaa376be83be39724786ee78643b6431a3c7aab291b3c6d7b8a86ef1a2610d0a70940a71935dcc536ff068c75cc42965f7eb4a688c5c3b341bd11979f54da31295f45c51f1c3b36a43d5d19b1a2d017f20ce106a8059feedeb5f3328931ffb0e2a967c0c83e5fd4361344df50b78fb9f2ee391b8fcecbc18fc9d51891b0de9211e7b1ceea071d8b6cf6e832a7a09131b3c667be8910180ffd2395361e24cfdab30357f5310b50d3c1c4c2ab430123755800972c54336c2d4de539c8618e52c2e5713a838f51af25a89fee4abe66d63cb994d148101d9e3f49ead656ee3f96837cc190678db954149ab53f8268fc980337b9f456d5a733d19a31b95f46faadb1ff03267608417bf366155de76b78df63287b340456f381d4144c8ee50a99b3649f3cc71038ececeeae67789174d33e400cf9def728f79b9443d5406aa33fbe5755e79e8a2c02242dbbe019f4dec9c2573044b753bd0fc317b86eeb2901798b1f047d1747476dcde9a407ddaef85261cb9b54e801e3161194dc61313c36fb9d48c5a7a684a33ea30b3f27fd06e090688cda4c5ad2493fa1f1c14de332c926c29a03e19e0bbf5508f0ff541d7f6da100e6d9034facd85240990273d880663538489d968d6c3bac3cb17e6a51153289b777445f402dc866ef9466d792d7577ae7d537185eb01f6e641e4e0d975a57f5ab920fcd16d8dabc9a9c9170635a30da49f84c8319c2e61b7b0c3c83c3011e91e714430d548d96b22e75c1f4bb19b4a739425b5a6162a9a47a0a81f5980473de090c8377c22d4faa2b04eb953fddc5ed5a9c3b32c1ea9bc6c6c3be3654fa4f8a879361ef2a89ecbf3d898877ba34ccd252400268b0a08fa1a6e7902756726cb7bda65b7e28416283da48732bf7f7d4082208d4dcfc0136bfdb4794e2eda7087992fdc77a4d2f4967f2e4c850be9c5bbbc291ec20117aef8475462f1e6695d59a3db4a6e4e746115f43e7a6f287a6b16c51e28f40c317ea372676ad47522938f6ee2b37d6b11d3b066ecb7b5483e3c5111bc95ff52d2b35e6f25c8a4e093977e8ab9b9b9ed6e7c1387e6242e444b67f27d05e9566c248e42a8f5b60531ca75b5350a1f9e3b06ef55349c9f2754b24907153cc857e90e3df45d7d714af3f797f8ae4f2d62ca2717f48e4c4f4574c87440a6286ce14de4fe6a3bfc6b92a17a8da5ef0925530889791ce9760f478959af5fc3c8796876633cb67b2a49fe65f26acab357abc376c07931175bb331e0d610b201c5ce2228e612d4f7189afecbc6bcb12492f01b3d424f8d1541e1cd44d91e6c7d0e7e465047a316e95adc4e2459d651d12f3d6a374cf89b29c2eb51a47680f61b94131be2c2eb4de48e8ee83a07ff91237ed367741a72dfccc03d7de838825d63eb4d3dd5b555cde12adf3785b63742d9df616bac7776ad6d8b3a96e81d3603a83af7c3aaa963cc9287db75f64b1577f0daa62e5139b9a25c492ce39d483dc939ced388650ec1b3104c834448b7eae48e9982bc6ab594aced93eaea78797f4665f1b0a34ddc2e0e36632d28cb2a47def9c7153e4ecb80b804050371d84488223563c166ff26fb30ddbd3e4b779b42bdc118094ea15fde5fadc74985aff13cee6ee91d51d9916ab0e1bf7b0cc23813f142d9fd3a44fde0b59535d1eeec9825826af8561c39d70eabe94135471cf9c1b6e5a31d70feff1396ff71d257f161170b85e145b864403702f9a2c560b8db420cc0714c05aff8fb18f27bc13e67a75881c1b0cca33797767094460e6c5868c02b7d3062e200da4bd4ec2dafeb214b61f37bf89162734b7fce01d07d20f04576d9def29946380bcf580b1ce703e06151da9619dea25fcfed3c19b71d921630c79cbbfd3c4eaa38bf289fd7f1cb728508fca11488d59f1e03f3c2a648db8e1fe80a001fbbae11c9efa5e46a816164331cc4d4d32d7162cd1e39bdca1a453c4df9cd2c54f20c6dde8c2fcd7cd492fdc09257fa997fe25cdf543bcd1f124d7d47f9eb2d9c4be788f185e90d2104efc54678ba19afbb3b2f43682cb1f0d873696a4e049b805b5ea5a2f3f811f898bea0bc59858f5f0b93d42bb58ec13970484a6c3bda5331b4bc78ed715e6eace4b646c98d53c28ea374fbb2dde2318d6a9cf514687d14b1dbf9f577149bb28613533566c53d29eb86c339b3f1252fb87bd434f7ad4312a952d8af7be6a980fd2221a7714b826df20e8c191359b3e69a05210bdff28559798152bcd2afa9fc4734f5daa88e3b87f92b01f3f00690437f1f8771b9c7e2dc0270355d05cb717f0d3d30e8b413903507d356478596823dcfd087ac79ab0d9f7af17ebb1c7f6a72dabdb79d6a07338c0fdd671b2f81ac6c40b12d4ae8a510e17d45da97e18c31dfb8098ab6fc9e5fdcde4f99b3b6ffcc4c2a49c01a1d1562813eee0a06b00b7c21c562a0b7e19c73785cf74a8590e3d1a540340049e37a1a9d889dacf3b27b53561acf1039874a9ab370839e4dd3ae530dd9b9a6ee5abad02dbfc8f872dc787328036c57251a96c3757ade05d0f4130dece7dd205cf71dbad0476c75c24d5ae0a702106d355c0323246861b718e68ed04c566deafcf98e0c03ba07be75043c4c2fb7c86cc86461c446161cb8ea334343effaa38d5e9ac3fb6beaeb3bdc4fd4e2cdf35a30c2e3ad43db7d74f370ccd3dd51ec2e3d865f9de282de5e1b6216dd91af24c3b0f90e5431277e2d513e98488921807cc3e86506c320b84e77afca5821846e1c33a253e556357a52d4f8abd54ee81883979aaef69e7f987c5153a35ce426dd9bbe0326d1fa45aea040d714e9b9364c0aaeeeb1aec8c87a69651901c0b14e89e331c0ec4b74b40d6aea8c47ee487268584c68337268370f581c8fd3ccab8402c98efd5714d48fe8eaf83bdb093a640086d5c1732f2243c0d983b8c4ec350675968deca68c9d09ebdb409177dc2c2a175a5ac971365654d924eaa49a34ed8d210ca4a48a4d409aa72ef37142f67dc98a44cd8130d17676121002300ecef5c9f35dd8e423d7ede6e2ae24efcd7504ab39c79f386026cfed3e56246f576664da841dd5bec1e1fbe4915a673ebbcac42ba445df90eb83adbab8c0ea23ee3244c05686576c66908ebc5bba3277a66aab9093f59ded7a36b158b5afafeac42d445c25596c5bae3f2ba652eec3d6fa359aa3f7654827ae247165471d6b5d467f6c93e3f39818f5f52ac8a5d17484aaae3d020fb72e1a760d2cf1f9e802dc0889bdf07bf30f38f6835f4676991bc38f9018c5ddd2d39c02c996036de2e1b837573affd6a14ec75de6a78f4b0b5f24ac9691854a75e07166c11a25a798cef31cdb2236e93793e2141bf9d6d87772be42fd42c736d7fb0f6f6a7af0639fa1dfe9b61e7135e179e817f456f14427e106430cabdda723aac001eeb825436860723abe1c16bb970cfb3b934b284ef56f1afe37a2bb386f0acf3cddf5b5ec4fcf6b7af7ea8bf4111e33f2afc9c3c771ab1d7722223f63d3e4e22051fc69a78796724c9928aeead4c8718abe122edda9206cce917f308a52dfcbe990b1f9f47e50dab48be4bf67a85e467bef5bef92a85bf3a5cf90ed10b7dbfd1fb925d3072d813eeccc22ab1e335971ffcc42a744dee0aea15761d684138dbe2f9502e7b2c7fccf2073b6e6618bd5fa6dfd0f44b3aeca06a1f08d76fa859ff06626bf11e8a02450e55de52b687c46ccbcdb752780922516d1655d9a8f259fc7547c42f92ef507468aee715580b5c5521443ea53eb6bdb7ce9142a1f080ba2ed074a4817cad7e0a5e2881321642500415caee8940083f9e84e56d8336116607e2191e8244d299a094febc4d3c7ed03951c8d689ce4efb11261e8c174c0c1924f157925ebd3d9a1b9ec6cfc258d4cc818ba1e48ef17cc6763e7413452668a1d28a84a9b5075021887d3236bf34e5011a1bde57543545bad1c9588b788f5474949da299a04a07ccc4a35ea9ff7636814428d9e75719d499527a9985cc690bc10c3b8b124f846e4c9a4cbf5a3972fe06f3bed4b3b65d686aef6f4bb17ae5ba9b3842eef6246621f0c00860e84717a929e95f590ef64f36d34df0f125fe4d28696ccd9e9cd7f1f836e3d908f65c98d9e5e964aa3b2b9923ab886d693b44f385451c81baa474846dd1402c4141400c046c300d3aed9832319fc8d4c840d5da74496671266c4903cdf7716c3708db16af508748a2b68c0abbfe7dcf692a2fbabc2ec62ff877ddc3c86bfaad88069f7564aa9ba336c6a7a03b4dff4b6984a9349381cd9f762438c47884ea2220357fff9737548cbf372ea45e41d06bf85eea452591f4e7fa39b619323c718148004bbaa037b3be9a3ed61865b8a437c582a03db485a44948a082d0933cbe1b0c23747ab593dab71dae00291675188464b362dea0fbc48ccaf452fd427616372d96a8f56a9f03f737acef4eece12b1d026eb9529569fae4f1b73f68274ac11ab31bd7e182c0896991c81124df0321f850265e9ed1b4c7e2b5d9b75819f09d90a8d8a15db1e5ecfb51aff0af700d3b5f3518b0e866047392782c0c223577ad1eb21af65d9fe114332879e452251e6588c111b1ce70abc5cf0cd1497b5a30662bb77e833b1711500a6d9db6938080398cf02af6202f927b1048b743541f46ac27cd9b9aec849896978e006441041708cf8fa46c91669e1a6eaa427c013effd6ce28459b69165ee2bcbe840804144362900d5f4d57d3c5280b51f8fc13b280576a0688db74093610452dd692ff960a7b322f524adc1b881d5f61d3b6504a9ff24bbb24e747e0ba16a3e41f2998b713406ec3a626fd6afe3da590d8f6f61bb0848ac701e5f0d4d991d3cc48d1140179c45b9f8084e3a38ffc147ce04d7f717950e05389995da4c4739c966b3620c2085fe84223bd5cf8e927daf2761512a031169c487c3059124f63cda06e7b42f582689f44b1671fc60baeb3d0006add8908f86e7e1eaa8ab35a10700b386b6d26e39dd066fc71088134920bafe2212465c1ad7bcd3136fa8d609fb6fde0ea74f3e71b7467a2750f35ea09bd04d7043239758340d86bbb1be1eee6bc25364c3700bbcf3ff857005798dd8edb349b47d0700ff1ea96add5b1016e685fd2f899ccc0eeb0bc6ef6d6d5876a669a0a83812c9c68af52e1146f14dc96907714921b0bebaaa5690dd9d5a111dc9a385cd42994886e0e60c7341ebdd7e467f05cafbfe74a0c673e9a757822da744e186450bf95d17f14fa3a767d461ac27c0964f48afdb493b568395869513e91e9687896d9408d7feb1827fcfbe05f86e1c501f4cb4e180a02cfc5c20c335485e0d7a28cb79c1bba1c92e9e05074407ce1254ae0aa014994dcbc7b3f7b3cc549c390855dc47345040051800000937d1a9cfe00f218e209021feca006cd8e5eff14f14a1e3237e92929509efd445189392bc6a7bdf38e6eb1a66767e786be7b931868e8e8fc78eb2fc851aa9be2148dcd05437c7eb016154cb87e0dd9995c899c41078c6e6388cea79e228c51bb40d540b8802fdebe1e1292b51469e93330460f806cbc926095e49f4d9f37b9a2e8bb66348c5d290ed0e07aa3dc062aeed3e8dc48d086be50b0064eaf6fccf2c424c9f115c293dda8ed78cd5403e7d6b8d87bfd48f46f0c355dbb81208cd6470434a6e8832539a171387dd8e1b17855161af0f2a39e54e0009d56f4d81c51123c9b3fd70024002d39603fb217d3307fe3538dbdadb5696565520c1647225bcfb332c3483d695fc4d72ceb62ce93875e4cf8a154404a7ef67dc620a0fdef32a1c6b232490d7c63fc14ec85d617c92bfadbd88905374e822f84144cfbf397de9a0f9489fe2568134b885a65e3337c91018a3fa09981413cd199d22c104a723a8c01e114a5cd2926fbf021a766ec03f56a4a9271e3a8e28a319ea75dfa97c6fbdcb50f5c9122504fbd6d67a2f5bcfb066a18dc55a9c7199e9057d21fa50e28b74b11d1309b685b7476ab0685d7707339658d606f0ed2815e4289d7000d008a006d707463705f706d000000003c0240807d598a681bc12f544fb6bb4498b1229250967a75b3bff7276d2a2d5620c1e51f0a3b6792ca91f1a9bc99f8792cce4a2da0828d614eec76ce0320d0a7fd1260486b2f899a391fb653735e00d8af3e70fb6611e05e1695e07ad157eca75d3492a1581f04004c80df56dc5173817cdfad38702c4136aae1b9e62de8875b57fb1586942076e0a66710a03be68a1c4b43815b64b6517f12ea1fb35f26b7c9655a7b71a711b2fa5869665e1e49068f45f610b22af87337dd1dc2b1e421a6d311522297e92f4223a23bd15e5f8e0896f75fe9335e8156a830b42f2b3563958f86cb1ba1c9594103c76dc2f593aff615ce6fe4b78e03c3477279c9f979caf1e16654ccb68ecb87974a5aa15aeeda12e05b9d662a108b76465b42ab3c099068e5a03b7f313df77abe9a08845c02d6c74e643eb9844f73d27fd38805b39bef5eae4bdb02822053287a385ed227ef192053aa67371d29c27a0c3a6547583b7b86014332eeb0d8e88865cf9280b7077f330017005d89c99e3a7deba2f0897314417dbe5ad4e92aeb8373d28cc2cb20f1e6061e02072a1a3a76232217e99b8c8e4d1bc800754d809ab731a6ec96e332960283ddd5aac1bf2e05de60878266782894179d37d49b92c3306b717ff53b0dfe6faa004323f840fed82bab7da321d6d69221678bf9d15e8c85723bcc35651420f02b76f2f2837f4148b0541304dfe16bef36c6f84b7e30215f55e42627a12cc100fc03c92b6c6f96c579e7eabc074830137a04a14b2e9bee3f1008001000", @ANYRES32=0xee00, @ANYBLOB='\b\x00K\x00', @ANYRES32=r0, @ANYBLOB="00afd4302680"], 0x1560}, {&(0x7f00000018c0)={0x1c, 0x31, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x21, 0x0, 0x0, @u64=0x6}]}, 0x1c}, {&(0x7f00000019c0)=ANY=[@ANYBLOB="a01200001b0010002dbd7000fedbdf257011698001012900c9e856b412e1311545d703f6d9e69747b56bedd37f902d24cbf512726a987c11bbdcc62a49b22b5ca7da4abf10c34a5fddcad89f3bec9dd9320a8358e5eed99aeb7f6ca465e73b291d978a3839bce73230c790c68d9509d74b6e151a51a2788762f8008c4f0893fa28159fce181c21189fec327d94a9098b6d66cf644881143f46c4197352e9988d07c93322076af59c5fdd3a1f70878edb8ca4dcf16fa47b0000751db4c8faffc90d7090bd5b4592b00e4ef1e58c8117422faaa2c606ec7da29b259427200f468d90205e39afaec04adc3b85b96da9afe37d5dd0b3f42b65f4dd422d48ad14f328c51891d5fe7c4856bd3f3fb793220cd83ebcc0a25c000000080049008c0a00000400cf80040093800800ca00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="fffe"], 0x12a0}, {&(0x7f0000002c80)={0x18, 0x3f, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x1}]}, 0x18}], 0x6, 0x0, 0x0, 0x8c1}, 0x20000800)
r8 = syz_ublk_setup_io_uring(0x22, &(0x7f0000002d80)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000002e00)=<r9=>0x0, &(0x7f0000002e40)=<r10=>0x0, &(0x7f0000002e80)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000002ec0)=@IORING_OP_RENAMEAT={0x23, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x1})
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000003300)={0x0, 0x7}, 0x8)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000002f40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002fc0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x14)
writev(r12, &(0x7f0000003200)=[{&(0x7f0000003240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r13 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r13, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003180)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a01a0e69ee517d344000000000000ce27251e61829433711c34d6aaceb8cdbf9367b4fa0600fe00c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x15, {{0x5}, {0x5, 0x24, 0x0, 0xb12c}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x400, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x70}, @mbim_extended={0x6, 0x24, 0x1c, 0xd552, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0xea, 0x51}}}}}]}}]}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000003000)=ANY=[@ANYBLOB], 0x6)

5m58.583890387s ago: executing program 3 (id=4941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='27', 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$kcm(0x21, 0x5, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$peekuser(0x3, r2, 0x288)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x408c0)

5m58.475026701s ago: executing program 3 (id=4942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000800), &(0x7f0000000840), 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x7, 0xc, 0x4, 0xfffffffffffffffd, 0x8, 0xe25, 0x800004, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x1f5886000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000600)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m57.683689333s ago: executing program 2 (id=4945):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="ee", 0xfffffe5e}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (async)
syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x3, 0x2, 0x4000010, r1, 0x80c495b9)

5m54.955863394s ago: executing program 2 (id=4948):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000280)=""/232, &(0x7f0000000380)=0xe8)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x2, 0x1, {0x0}})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x7, 0x2, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b5, 0x2, 0xfffffff8]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/vmallocinfo\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000001840))
syz_emit_vhci(&(0x7f0000001880)=ANY=[@ANYBLOB="02c90012000e00050017420a00000000020002"], 0x17)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'pimreg\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000001780)='E\x00', 0x2, 0x0, &(0x7f00000017c0)={0x11, 0x800, r5, 0x0, 0x0, 0x0}, 0x14)
connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r7 = fcntl$dupfd(r3, 0x0, r3)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1)
sendto$inet6(r3, &(0x7f0000000600)="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", 0x1000, 0x800, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001600)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/220, 0xdc, 0x1, 0x0}, &(0x7f0000001740)=0x40)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000003c0)={0x1, @sliced={0x8001, [0x6c3, 0x3, 0x973, 0x8, 0x4, 0x5, 0xfffe, 0xff, 0x7ff, 0x7f, 0x9, 0x2, 0x9, 0xc, 0x2, 0x3, 0x9, 0xfffd, 0x9, 0x5, 0x4, 0x1, 0x3, 0x6e40, 0xd, 0x0, 0x2, 0x4, 0x4, 0x1, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x401, 0x9, 0x6, 0x5, 0x7, 0x4, 0xe, 0x4, 0x6, 0x1, 0x7, 0xe6, 0x7], 0x5c}})

5m53.21196235s ago: executing program 2 (id=4950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

5m53.0784302s ago: executing program 2 (id=4951):
openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r2=>0x0})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r2, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0xa, 0x402b7906, 0xd2b1c})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r4, 0x0, 0xffff, 0x2, &(0x7f00000004c0)='|0', 0x5})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats={0x1c}})
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x40102)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000100)=0xfdfdfffd)
socket(0x1a, 0xa, 0x7fffffff)
r8 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r8, &(0x7f0000000380)=[{&(0x7f0000002400)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r6, &(0x7f0000002900)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYRES32=0xee01], 0x20e)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r9=>r6, {0x1, 0x3}}, './file0\x00'})
ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000001c0)={0x7, 0x3, 0x4})

5m52.120676171s ago: executing program 2 (id=4955):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @pix_mp={0x8, 0x5, 0x40365f42, 0x0, 0xb, [{0x0, 0xfaf7}, {0xed400036, 0x5cc0}, {0x6, 0x7}, {0x5, 0x1}, {0x88, 0x1}, {0x8, 0xc}, {0x9, 0x101}, {0xffffffff, 0x9}], 0x8, 0x1, 0x4, 0x0, 0x1}}) (async)
fchdir(r0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) (async)
syz_clone(0x4200000, &(0x7f0000000ac0)="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", 0x1000, &(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)="b8828fdd4a2f06e3862f9e304271caf00521bc3df3") (async)
write(r1, &(0x7f0000000240)='27', 0x2) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = fsopen(&(0x7f0000000a80)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) (async)
accept(r2, 0x0, 0x0)

5m51.710513541s ago: executing program 2 (id=4957):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf8"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

5m43.359100149s ago: executing program 42 (id=4942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000800), &(0x7f0000000840), 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x7, 0xc, 0x4, 0xfffffffffffffffd, 0x8, 0xe25, 0x800004, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x1f5886000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000600)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m36.333219034s ago: executing program 43 (id=4957):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf8"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

3m17.539283341s ago: executing program 6 (id=5471):
r0 = syz_open_dev$video(&(0x7f0000000300), 0x101, 0xab02)
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vim2m(&(0x7f0000000480), 0x2000000f5, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f00000004c0)={0x3, @win={{0x0, 0x5, 0x79, 0x6}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x7f}})
write(r0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x191058b0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15dedc9a}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) (rerun: 64)
sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x11c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cc5a24c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5ca2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31a70ee8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6973e477}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async, rerun: 64)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)

3m15.771690261s ago: executing program 6 (id=5477):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000400)={[{0x4, 0x200, 0x8, 0x84, 0x2, 0x7, 0xc4, 0x1, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x10, 0x6, 0x16, 0x1, 0x6, 0x12005}, {0xfffffffc, 0x807, 0xa, 0x13, 0x2, 0x14, 0x40, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x11})
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$dsp(r3, &(0x7f0000000540)=""/4096, 0x1000)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0xfffffffffffffffd, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0xc, 0x7], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x103401, 0x0)
write$dsp(r4, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x3d}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0x6, 0x1}}, 0x44)
sendmsg$sock(r5, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x6000, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m14.957046493s ago: executing program 6 (id=5479):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x40040)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x3, 0x200, 0x0, 0xfffff803, 0x2})

3m13.093044121s ago: executing program 6 (id=5488):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r1, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x8000)
mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x20000, 0x0)

3m12.485707113s ago: executing program 6 (id=5494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x301, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902120001fd0090020904b80200ff00ff"], 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x27800000000, 0x0, 0x1, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x27800000000, 0x0, 0x1, r2, 0x5})

3m12.228035417s ago: executing program 6 (id=5497):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1bd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)

3m11.252360729s ago: executing program 44 (id=5497):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1bd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)

1m56.871802934s ago: executing program 4 (id=5783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0xf5ffffff, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

1m56.600710632s ago: executing program 4 (id=5786):
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0xffffff20)
write(r2, &(0x7f0000000200), 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x4000, 0x3, 0x2}, 0x30, 0x2)
landlock_restrict_self(r3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x20000015)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x300002, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt/trace_marker\x00', &(0x7f0000000080)='gfs2\x00', 0x104024, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/trace_marker\x00', 0x1, 0x5a)
write(r6, &(0x7f0000000380)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee16a1d71f8876bd9dd39cbd283", 0x43)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x100, 0x0)
read(r7, &(0x7f0000000740)=""/16384, 0x4000)
write(r5, &(0x7f0000000340)='27', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone3(&(0x7f00000006c0)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x404488e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
close(r8)
socket(0x2, 0x80805, 0x0)

1m55.50408508s ago: executing program 4 (id=5792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xd9, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m55.171761566s ago: executing program 4 (id=5794):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc094, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0x10, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x7fff, 0x93, 0x1, {0x22, 0x32a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x4, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x200, 0x6, 0x6, 0x8, 0x8, 0x7}, 0x19, &(0x7f00000010c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "bea4759efbeb91084bbf05e33eaa12c2"}]}, 0x1, [{0xc5, &(0x7f0000001100)=@string={0xc5, 0x3, "875993d65817b57b13babfe53bee9c9d986a2e5f1c15ac12bb240097feaa07fea9c9e755b94accd0a055ea53d96a9f9367d3d74b489948872a9d618379e4bfa8658160dea9d70895d5283be82f286a68a1240c4207e3b9cfe27e73a6846fbcf1548081c0edea03a2052d3c0e149765ef260d3db4b8d7915176d0ed21cd00a71a2159d402e6c8afea67770cc705b430f73aefaafbdb69989fd987784e9c4d7225154bff5f321b02841ccd5111dd56e4a21ab8628a9b1ce91a177a1abc2b72c1426cdb33"}}]})
syz_usb_ep_read(r1, 0x3, 0x4e, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0xf, 0x1000, &(0x7f0000000040)=""/4096)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x9, 0x31, &(0x7f0000001240)="c5502779acbb1990893be92f356d2971086d8ad048adbbc5c4ceed3c4dec67dd736ff2f9c79b09d4c70fe717b6b3669a23")
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)

1m52.871354637s ago: executing program 4 (id=5803):
mkdirat(0xffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808)
write(r0, &(0x7f0000000280)='isp1301 0x2', 0xb)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r6 = syz_usb_connect(0xe, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r5], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000)
syz_usb_control_io$rtl8150(r6, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040))

1m51.599523812s ago: executing program 4 (id=5806):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180))
r2 = socket$netlink(0x10, 0x3, 0x14)
writev(r2, &(0x7f0000000300), 0x0)

1m36.496446933s ago: executing program 45 (id=5806):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180))
r2 = socket$netlink(0x10, 0x3, 0x14)
writev(r2, &(0x7f0000000300), 0x0)

49.434473724s ago: executing program 5 (id=6010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000b80)="a80000004200010003000000e400000003010000102700003200010000112233445566778899aabb080045000020000140204011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)

49.150335646s ago: executing program 5 (id=6013):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000980)=0x6, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090010000000000000010000000500070004000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000079e18b1400200000000000000000000000ffffac1414bb06001b004e230100"], 0x64}}, 0x64044000)
r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x121002, 0x0)
writev(r4, 0x0, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0xc)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2, 0x0, 0x0)
bind$inet6(r5, 0x0, 0x0)
syz_memcpy_off$KVM_DIRTY_GFN(0x0, 0x8000000000000000, &(0x7f0000000080)={0x3, 0x1, 0x9}, 0x0, 0x10)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2fa)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x7, {0x400, 0x81, 0x101, 0xffffffe1}, {0x8, 0x7, 0x1, 0x7ff}, {0x1}})
futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x80000002, 0xd090c3)
preadv2(r7, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000840)=""/184, 0xb8}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/118, 0x76}], 0x9, 0x0, 0x9, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x300, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'})
syz_create_resource$futex(&(0x7f0000000780)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x180)
mknodat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1/file2\x00', 0x1000, 0x0)
r9 = landlock_create_ruleset(&(0x7f0000000bc0)={0x2001}, 0x18, 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x202000, 0x13b)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000c40)={0x2001, r10}, 0x0)
landlock_restrict_self(r9, 0x0)

48.800445916s ago: executing program 5 (id=6014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x14)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000440))

48.315377832s ago: executing program 5 (id=6015):
r0 = userfaultfd(0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000015c0)={0x0, 0x7}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001840)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000001880)=0x5, 0x12)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001600)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001640), 0x0)
sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f00000016c0)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x0, 0x11}}], 0x1, 0x81)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001780)=ANY=[], 0x1000f)
mount$fuse(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x8001, &(0x7f00000018c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000001400)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000001480)='.\x00', 0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x88000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000001540)='\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x224)
epoll_create(0xffffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
recvmsg(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40010161)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0)
preadv2(r10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x101, 0x1, 0xe)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='k\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000000000002b00000008000300", @ANYRES32=r11, @ANYBLOB="04004600080026006c09000005003400000000002c0051802000008009000100dba06c891400000005000200020000000800030001ac0f000400008004000080"], 0x5c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080)

47.927483807s ago: executing program 5 (id=6016):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000003040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000003080)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r3, &(0x7f00000030c0)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f00000000c0)="4c00000011000e14000300020000000002000000200000", 0x17)
add_key(&(0x7f0000003280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x46, &(0x7f00000032c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xdc, 0x2d988a17, 0x7, 0x3, 0x7fff, 0xffffffffffffffff})
socket$inet(0x2, 0x4, 0x7)
getresuid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980))
sendmsg$netlink(r4, &(0x7f0000002d40)={&(0x7f0000000140), 0xc, 0x0, 0x0, 0x0, 0x0, 0x8c1}, 0x20000800)
r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000002d80)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000002e00)=<r6=>0x0, &(0x7f0000002e40)=<r7=>0x0, &(0x7f0000002e80)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000002ec0)=@IORING_OP_RENAMEAT={0x23, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x1})
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, 0x0, 0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000002f40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002fc0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
writev(r9, &(0x7f0000003200)=[{&(0x7f0000003240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003180)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a01a0e69ee517d344000000000000ce27251e61829433711c34d6aaceb8cdbf9367b4fa0600fe00c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x15, {{0x5}, {0x5, 0x24, 0x0, 0xb12c}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x400, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x70}, @mbim_extended={0x6, 0x24, 0x1c, 0xd552, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0xea, 0x51}}}}}]}}]}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000003000)=ANY=[@ANYBLOB], 0x6)

45.196237011s ago: executing program 5 (id=6021):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000480)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000500)={&(0x7f0000000540)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x943, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

44.792946372s ago: executing program 46 (id=6021):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000480)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000500)={&(0x7f0000000540)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x943, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

7.526689307s ago: executing program 1 (id=6154):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0x695d8e8, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000700)={0x100000, 0x0, 0xfffffffc})
setrlimit(0x40000000000008, &(0x7f0000000000))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100007000080000000000000ff020000000000000000000000000001fe8000000000000000000000000000aaffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000002b000000fc000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000020000000000000000000017793eb16835ab5bf51d00000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e00fc010000000000000000000000000001"], 0x104}}, 0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000480)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000500)="c4e1fd10fdc44164596512c744240047000000c744240247000000ff1c24b9800000c00f32b9590800000f320f300f20e035000002000f22e066b839010f00d866ba420066b8dd7666efc4a17853abb00c00003e470f019c1030000000440f20c0350e000000440f22c0", 0x6a}], 0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40c1, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',posixa,k'])
setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5.944744366s ago: executing program 9 (id=6163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000500)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f00000005c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, @in=@empty, @in6=@remote, 0x33, 0x2, 0x0, 0x3504, 0x2, 0x2}]}]}, 0xa0}}, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f00000001c0), 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="f7", 0x101d0}], 0x1}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53da96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x2, 0x0, [{0x7fffffff, 0x5, 0x0, 0x0, @adapter={0x8, 0xa4, 0xffffffffffffffff, 0x10001, 0x5}}, {0x6b737f10, 0x4, 0x0, 0x0, @msi={0x7fff, 0x1, 0x9, 0x7}}]})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0xc})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0)

5.809832746s ago: executing program 0 (id=6164):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
setns(0xc9, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ptype\x00')
preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, 0x4f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
r4 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b40)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b80)=[@text32={0x20, &(0x7f0000000000)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x1d, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000001c0)=<r7=>0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x4, 0x0, 0x0)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0xe2100, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900"], 0x12c}}, 0x0)
r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r10, &(0x7f0000000500)=ANY=[], 0x4000)
close(r10)
ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c00)=[@textreal={0x8, &(0x7f0000000040)="ba430066eddfe00fae36b8000fae2967a8050fc7710e650f01c80f20e06635000010000f22e0ba4300ecd24e3d", 0x2d}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.463790712s ago: executing program 9 (id=6165):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$netlink(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180000005600"], 0x18}], 0x1}, 0x0)
write(r1, &(0x7f00000007c0)="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", 0x188) (async)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x14bb42, 0x8c) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x30, 0x0}, 0x21) (async)
r4 = socket$kcm(0x10, 0x2, 0x0) (async)
r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) (async, rerun: 32)
syz_open_dev$midi(&(0x7f0000001480), 0x3, 0x8ac02) (rerun: 32)
syz_usb_disconnect(r5) (async, rerun: 32)
write$cgroup_subtree(r4, &(0x7f0000001400)=ANY=[], 0xfe33) (async, rerun: 32)
r6 = socket$inet(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000001400)=0x1e) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 32)
r7 = timerfd_create(0x7, 0x80000) (rerun: 32)
ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000000)=0xacb)
getxattr(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0xfb)

4.587151416s ago: executing program 0 (id=6167):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1002})
syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
prctl$PR_SET_NAME(0x53564d41, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x1, 0x23)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fdfc, @local, 0xfffffffe}, 0x1c)
dup2(r2, r0)

3.968677931s ago: executing program 8 (id=6170):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0xa9, &(0x7f00000004c0)=ANY=[@ANYBLOB="20c923c1ef9f"], 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x109)
accept4(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x84, 0x618900)
ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0)

3.835855921s ago: executing program 1 (id=6171):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
read$dsp(r0, &(0x7f0000000540)=""/4096, 0x1000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='cpuset\x00', 0x2041213, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control\x00', 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000001580)='./security\x00', &(0x7f00000015c0)='securityfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./security/ima/policy\x00', 0x1, 0x0)
write(r5, &(0x7f0000001640)='appraise', 0x8)
socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002e00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000002e40)='./debug\x00', &(0x7f0000002e80)='debugfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x0, 0x0)
read(r6, 0x0, 0x0)
read$dsp(r5, &(0x7f0000000400)=""/205, 0xcd)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002c00)={'wg1\x00'})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\t\x00', @ANYRES16=r7, @ANYBLOB="a9172bbd7000ffdbdf251c00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
recvmsg$can_bcm(r3, &(0x7f0000002bc0)={&(0x7f0000001680)=@vsock, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001700)=""/208, 0xd0}, {&(0x7f0000001800)=""/237, 0xed}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/159, 0x9f}, {&(0x7f00000029c0)=""/88, 0x58}], 0x5, &(0x7f0000002ac0)=""/231, 0xe7}, 0x2000)
ioctl(r3, 0xc138fd0d, &(0x7f0000000140)="0400000000000000000000007801")
socket$xdp(0x2c, 0x3, 0x0)

3.231258369s ago: executing program 8 (id=6172):
r0 = landlock_create_ruleset(&(0x7f0000000700)={0x10, 0x6}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x3f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x3c, r4, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x84, 0x5, 0x9, 0x3, 0x0, 0x1]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000000080))
r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x1, 0x316, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000180)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x2001}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x3e)

3.178955975s ago: executing program 1 (id=6173):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcffffff1000000008000800040000001800018014000200776c616e300000000000000000000000080007"], 0x3c}}, 0x0)

3.017327297s ago: executing program 0 (id=6174):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000003040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000003080)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r3, &(0x7f00000030c0)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f00000000c0)="4c00000011000e14000300020000000002000000200000", 0x17)
add_key(&(0x7f0000003280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x46, &(0x7f00000032c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xdc, 0x2d988a17, 0x7, 0x3, 0x7fff, 0xffffffffffffffff})
socket$inet(0x2, 0x4, 0x7)
getresuid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980))
sendmsg$netlink(r4, &(0x7f0000002d40)={&(0x7f0000000140), 0xc, 0x0, 0x0, 0x0, 0x0, 0x8c1}, 0x20000800)
r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000002d80)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000002e00)=<r6=>0x0, &(0x7f0000002e40)=<r7=>0x0, &(0x7f0000002e80)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000002ec0)=@IORING_OP_RENAMEAT={0x23, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x1})
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000003300)={0x0, 0x7}, 0x8)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000002f40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002fc0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
writev(r9, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003180)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a01a0e69ee517d344000000000000ce27251e61829433711c34d6aaceb8cdbf9367b4fa0600fe00c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x15, {{0x5}, {0x5, 0x24, 0x0, 0xb12c}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x400, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x70}, @mbim_extended={0x6, 0x24, 0x1c, 0xd552, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0xea, 0x51}}}}}]}}]}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000003000)=ANY=[@ANYBLOB], 0x6)

2.997331571s ago: executing program 1 (id=6175):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x30, 0xcf, {0xcf, 0x2, "f6c0a3908048226c691492c9ba76881459ce2e2c3e37ff862b03269711e2335389e2f1bb34c75c0da54d72d8d10927962fa34f8f803b93300d515d137e2be5b88658a06b30e8286f981e6620ac65487dfe1dc7a017365a16f9684cc147b40641c55ba574313e4303912f1d36b76908603f797881a22d89081e9d7d8f05b1ed761c078123c857f65a87d0c2380fb1250ce39fe503e90c10e8a77d594795ff1003e1454d2efd3efae47eddfd380eae7be37a171a18c6a91b26eeb72e2d710e7b51f4375e4d9bd50cf947c240ab75"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000002c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x8, 0x36, 0xfff7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "48cdd72dd96f50d0476a484a4a8e4178"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x8, 0x0, 0x5, "162073f3", "39a8c86e"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x3, 0x0, 0x5, 0x1, 0x0, 0xb}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x13, 0xf6, "5020aed4d1cf185facfbe100859e684595d39c387dec26a8b314bf5366377a8457913276551ab241bb3921d3a0e08739efb55a7f18b5375bb9f2cf980f49f7a7de0aa2d741fd36fb8b5030cc390078985ced35ab30ec2f491c028814bbfef327dbb1595db95cf6d3cfcad55777e804fade38f200375c6b6c07d012768f4f00dc14a96681ffd52a4e44e3f65146c9258372ce3c24194a008a92a4f38bbd20ece6162ede4fc7d48ce5ab195c84a44c589858b7c170be21df4e717412ba2cb64f82707a7424fd715b18191db3990672d28c403caab16863fc662079a16971a7597865f8e37f63cb955379ae3eac7c5838c87a8bbbdee44b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000640)={0x40, 0xb, 0x2, "1ff5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "8f88"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xe}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xe}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="397f04000000677afef2"], 0x0, 0x0})

2.003955891s ago: executing program 8 (id=6176):
r0 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000240)='Ia==7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0)

1.958740933s ago: executing program 9 (id=6177):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0xffffffff, 0x5})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x0, 0x0, &(0x7f0000000180)})

1.738360456s ago: executing program 8 (id=6178):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000380)="280320000a00140000007ef506be00000000000000040000000000143baa111f1f858ce632f47042195e05781bc3f80d1e2904102c3708f8ce2afd5fdc5a7a2c16f94806e7b48f962e199cf5", 0x4c, 0x400c010, &(0x7f0000000400)={0x11, 0x3, r1, 0x1, 0xe1, 0x6, @random="76caa646ae4c"}, 0x14)

1.640131824s ago: executing program 9 (id=6179):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0)
socket$inet(0xa, 0x801, 0x84)
r1 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x143142, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x1c1002, 0x40)
write(r5, &(0x7f00000004c0)='t', 0x1)
sendfile(r5, r4, 0x0, 0x7fffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000000)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r6, 0xfffffffffffffff0, 0xffff})
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)

1.585514321s ago: executing program 8 (id=6180):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xd, 0x28580)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
sendmsg$alg(r2, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0)

1.459950041s ago: executing program 9 (id=6181):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000040)={0x0, 0x35da, 0x2000, 0x7, 0x367}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0))
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1fe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x40, 0x9, 0xf, 0x4, 0xf, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x78051})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x94}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x4, 0x80)
sendfile(r4, r4, &(0x7f00000006c0)=0xfffffffffffffff9, 0xbe21)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000700)=0x1, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x18103, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000780)=0x7f, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000007c0), 0x0)
listen(r5, 0x5)
syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x42, 0xa}, {0x80, 0x40, 0x100, 0x100, 0xa}}}}, 0x17)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0)

1.224240644s ago: executing program 0 (id=6182):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa47}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40050)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x40, 0x5, 0x7, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x11, 0x40, 0x8, 0x7e}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x22}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd)
r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=<r3=>0xffffffffffffffff)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000440)={0xa30000, 0x3, 0x5, r3, 0x0, &(0x7f0000000400)={0x9909ca, 0x82db, '\x00', @p_u16=&(0x7f00000003c0)=0x7}})
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
r4 = signalfd(r2, &(0x7f0000000580), 0x8)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)=""/5, 0x4000, 0x1800, 0x0, 0x2}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000640)=0x1)
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000680), 0x2)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0), 0x280002, 0x0)
ioctl(r5, 0x900000, &(0x7f0000000700)="009cd317dfac9c6561524a2b79aa600b7b967b8eb69896ed8ba6dad2655dec9cc12bc6bbee9f11860eff079e23eb9b3fe6eec457e0ce4f368711f322bbbc827124900ee000a3e34c63e1d2e69bc4ca7d6826bf6146d420e50f66f1c5d9ff99630055e24fd9cd96a7170e50b21bb07202d0052710fbca048f70fabda68ca1e77d805e8dda1363240ea033dbc5e5dc06a4948076c79e4c3ae509fcbc95a13c85b8d076c046703aba4af9f33010c72d5e4049aead53ce6649dd713163f44d")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x138, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x684e8e7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048040)
stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchownat(r2, &(0x7f0000000a80)='./file0\x00', 0xee00, r6, 0x100)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040040)
faccessat(r2, &(0x7f0000000cc0)='./file0\x00', 0x1b9)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x200, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x996, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xf}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0x14}, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5943}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff7d7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private1, 0x82}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7af}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff8e9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe3f}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8040}, 0x4048000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4dcf79585d99efb4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80000000, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3a, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000001140)={0x10200, 0x2, 0xffc, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x8000, r4})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, 0x0, 0x6e122b313624064f, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)

1.112153907s ago: executing program 1 (id=6183):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev/ttyS0\x00', 0x2, 0x9)
ioctl$TCSBRK(r1, 0x5409, 0x0)
ioctl$MTDFILEMODE(r1, 0x4d13, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000004c0)="cb1ed1dde0d287507b2b638121137f1b417d8223b077915421533fc48c794ee911f6cc5220d521d75468ae55456ed29ca383c5a0f23e81ce4979c771242d3565ef4c2a9d2701bfc72eb793ee2698d3d8679fdc969126")
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
ioctl$ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000100))
r4 = open(&(0x7f0000000000)='.\x00', 0x100000, 0x115)
symlinkat(&(0x7f00000000c0)='./file2\x00', r4, &(0x7f0000000180)='./dev\x00')
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2882, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000080))

1.019582363s ago: executing program 0 (id=6184):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000040)="b669a5509f9f83a531f50293bd8a4d9ea6a669306d153ec8e79c7ba66e81373acd35f203f11e234b91a059056d06212b3226820d4afd818433dec5482f454173b855a8c670d8931dc20b4bcdd67cd4aae63de320fb4dc8d58c", 0x59, 0xc004, &(0x7f00000000c0)=@sco, 0x80)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x18802, 0x19)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={<r3=>0x0, 0xe}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x81, 0x8006, 0x69f3c350, 0x5, <r4=>r3}, &(0x7f0000000240)=0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x134, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_LABELS_MASK={0xc, 0x17, [0x0, 0xeac5]}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}]}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004000)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0xc0000000, 0x4)
read$char_usb(r0, &(0x7f00000004c0)=""/172, 0xac)
ioctl$I2C_TENBIT(r2, 0x704, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000580)={r3, 0x80}, 0x8)
clock_gettime(0x0, &(0x7f00000005c0)={<r6=>0x0, <r7=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000700)=@multiplanar_userptr={0xc9f1, 0x1, 0x4, 0x1000, 0xe5, {r6, r7/1000+60000}, {0x1, 0x0, 0x6, 0x8, 0x3, 0x2, "ab20f44f"}, 0x7ff, 0x2, {&(0x7f0000000680)=[{0x1, 0x3, {&(0x7f0000000600)}, 0x89a1}, {0x80000000, 0xff, {&(0x7f0000000640)}, 0xd}]}, 0x7, 0x0, r2})
ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)={&(0x7f0000ffe000/0x1000)=nil, 0xf000, 0xfffffffffffffffa}})
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000800)=0xea8)
read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020)
r8 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002880)="76e272a904f8e922ae514dce4cbc207f57692250ac25bef073a02ad089853f359b01b26641fd48aa7a971b037116a8a291b8b556", 0x34}, {&(0x7f00000028c0)="20f960176f588b7f94b4c2ab3a3b30dbe48519354c51c706382a2941ae1e630670d1f8b3152a2421aa953988571f215322d2ef56110df4a80945b8dda27d9e7a4ad3a7649a46a3e9ac3a4fcbd1e03416e7a84243ea2bd2d6b79dfb7ccca97f4f425b292e14e9a4f7743ecbc58992eb8fa126315c55fbe73762930f1bc65ebef284a240066390a65f5dea79008a0b2acf0eac6051b66129b76490446f5e7a4d424e66eb090d5548da2179f9a65bec31a2bfd18f801b618cc5fedd0225f433a93bed7fd12c29b09daf5f0f4a0670ccca8b01dbbe31a65714a336397e04234de53adcd30ac61b6635bcee9c815df7", 0xed}, {&(0x7f00000029c0)="5f09128dfa2adae3d9bb0437e502cd4cb50ddad595da9ed15f2c4048e3488ad19c6d699db7189820e5d63a8afada542a4a40dc2993a9cd5c40473574e84a2514bae3e62a5a206e95ceadc5be75088c5678802290d7021c671e0fe0ccea5baadc0768ea5dfa373e04d90b672f8c8c0708c529c7848bf51dd951cc5580af55e0084b42680101addc9b4c68e9ebb9d982a105fa557ada0983c6baf7c68fc0f5fe3338f9650022f0fb76dbb3cd09dcc55a9a0cedac966adbd89b0a8f13b07e6d99b7be1db80b5df82c6196d727c0061efb7fab3c40d93018e538666b2b", 0xdb}], 0x3, &(0x7f0000002b00)=[{0x1010, 0x11, 0x800000, "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"}, {0xd8, 0x10e, 0xa0d0, "a1701c446c883b38a7126a7ebff80a0d82ecf54a997fe840d5f7b18de02f01fce4ddf98282282d2de29ee9443a3a78783587d15e1210a1fb3c8345e94da9891f3ab944ba42aeb926c3f3c36b5843f1938717b790d36c60ef892cc93b5f1dc0c102d5041cc6e93390b4cb9d0cb9f8b1b6d2ec0ce15c24af5682d3bb3b9624df542048d912503063187efbd7f20d6204aed330b185118264ff7aa8273cbc5e6c1b962ce366b7a85814f715bacb759fcf660488fb512e07acc728de9d9ec19d691612723b"}, {0xe8, 0x3a, 0x101, "9d4f29f79c7ff53824da22c79138ab038763f2543831eede2d860d000b0ed1f760b9e3d165be01447b51f7cc4f2b83d8b3663d043444cfa04b20f29916c8a9d7b559833bab40c04a750cda29180c91062be1e2e1bba88d2bac4eb03bcdf5c22d64ae792efb398e6f4fbf6f7d2f877c2527679a5e2e3d6061959d529275bd5f1b25648febb540498cdb238a1f9df48bcdfaf12ecf1da22af5e8cc79b682ebac02a3be5afd701faecae62a4392b0c25fcfce77d93b26d140d4f6a8985091225a4242344af28bc09ff1fb8db70c71c509000f099cb4755ff3"}, {0x1010, 0x3a, 0x4, "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"}], 0x21e0}, 0x24002001)
splice(r8, &(0x7f0000004d40)=0x1, r1, &(0x7f0000004d80)=0x9, 0xe, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000004dc0)={r4, 0x7, 0x80000001, 0x5}, 0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000004e00)={<r9=>r4, 0xa, 0x6, 0x1}, &(0x7f0000004e40)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000004e80)={r9, 0x1}, &(0x7f0000004ec0)=0x8)
bind$inet6(r2, &(0x7f0000004f00)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x4}, 0x1c)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000005180)={{0x9, 0x4, 0xfffffffb, 0xfffffff7, 0x7ff}, &(0x7f0000004f40)=[{}, {}, {}]})
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000005200)=@assoc_value={<r10=>0x0}, &(0x7f0000005240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000005280)={<r11=>r10}, &(0x7f00000052c0)=0xc)
landlock_restrict_self(r2, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000005300)={'macvlan0\x00', {0x2, 0x4e20, @empty}})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000005340)=@assoc_value={r11, 0x2}, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)

722.909351ms ago: executing program 9 (id=6185):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvfrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0x8)
sendto$inet(r1, &(0x7f0000000700)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000740)={0x2, 0x4e22, @remote}, 0x10)
setns(0xc9, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x95, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000180)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000200)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f00000000c0)='z', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x81, @loopback, 0x1}, 0x1c)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./trace/trace\x00', 0x80000, 0x11e)
lseek(r6, 0xffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r8, 0x29, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x346}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20004010)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="cf2c", 0x2}], 0x1)
shutdown(r5, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x4d)
fallocate(r9, 0x100000000000011, 0x2000, 0x2f93)
socket$rxrpc(0x21, 0x2, 0xa)

100.742173ms ago: executing program 1 (id=6186):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
unshare(0x22020600)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
poll(&(0x7f0000000280), 0x20000000000000b5, 0x9)
chdir(&(0x7f0000000440)='./file0\x00')
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902", @ANYRESOCT=0x0], 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f00000001c0)=0x1)
setresuid(0xee01, 0xee01, 0x0)
eventfd(0x2)
fchmod(0xffffffffffffffff, 0x20)
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x5)
accept4$vsock_stream(r0, 0x0, 0x0, 0x80800)
landlock_restrict_self(0xffffffffffffffff, 0xc)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e)
write(r1, &(0x7f0000000480)='27', 0x2)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)

100.352085ms ago: executing program 8 (id=6187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r0 = syz_io_uring_setup(0xec6, &(0x7f0000000000)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close_range(r0, r0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f00000002c0)=<r3=>0x0)
syz_ublk_setup_queues(r2, r3, 0x0, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x2, 0x141, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r2}}], 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, 0x0)

0s ago: executing program 0 (id=6188):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x301, 0x70bd2b, 0x25dfdbfe, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (fail_nth: 8)

kernel console output (not intermixed with test programs):

istered  with mce emulator interface version 1
[ 1449.768304][T16341] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1449.813463][  T195] usb 6-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1449.813483][  T195] usb 6-1: couldn't find an output bulk endpoint. Bailing out.
[ 1450.082910][T26686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1450.100511][T26686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1450.205505][  T195] usb 9-1: USB disconnect, device number 100
[ 1450.360045][T16341] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1450.446907][ T5601] usb 6-1: USB disconnect, device number 125
[ 1450.507511][T16341] usb 1-1: Using ep0 maxpacket: 32
[ 1450.510263][T16341] usb 1-1: New USB device found: idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[ 1450.513658][T16341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.513677][T16341] usb 1-1: Product: syz
[ 1450.513689][T16341] usb 1-1: Manufacturer: syz
[ 1450.513700][T16341] usb 1-1: SerialNumber: syz
[ 1450.562387][T16341] visor 1-1:1.0: Interface 0 is not authorized for usage
[ 1450.568483][T16341] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[ 1451.015795][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5993'.
[ 1451.363058][T26710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5995'.
[ 1451.380554][T26710] 9p: Bad value for 'rfdno'
[ 1451.648387][ T5601] usb 9-1: new high-speed USB device number 101 using dummy_hcd
[ 1451.798076][ T5601] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[ 1451.810285][ T5601] usb 9-1: config 0 has no interfaces?
[ 1451.813326][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1451.813356][ T5601] usb 9-1: SerialNumber: syz
[ 1451.843188][ T5601] usb 9-1: config 0 descriptor??
[ 1452.069916][ T5601] usb 9-1: USB disconnect, device number 101
[ 1453.150778][T26736] syzkaller0: tun_chr_ioctl cmd 1074025678
[ 1453.150798][T26736] syzkaller0: group set to 0
[ 1453.185637][  T195] usb 1-1: USB disconnect, device number 27
[ 1453.398726][T26740] FAULT_INJECTION: forcing a failure.
[ 1453.398726][T26740] name failslab, interval 1, probability 5, space 10, times 9868
[ 1453.398755][T26740] CPU: 0 UID: 0 PID: 26740 Comm: syz.0.6001 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1453.398780][T26740] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1453.398787][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1453.398797][T26740] Call Trace:
[ 1453.398804][T26740]  <TASK>
[ 1453.398811][T26740]  dump_stack_lvl+0xe8/0x150
[ 1453.398839][T26740]  should_fail_ex+0x3eb/0x540
[ 1453.398866][T26740]  should_failslab+0xa8/0x100
[ 1453.398885][T26740]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 1453.398910][T26740]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[ 1453.398934][T26740]  ? v9fs_init_fs_context+0x145/0x540
[ 1453.398954][T26740]  ? v9fs_init_fs_context+0x145/0x540
[ 1453.398978][T26740]  kstrdup+0x42/0x100
[ 1453.399000][T26740]  v9fs_init_fs_context+0x145/0x540
[ 1453.399021][T26740]  alloc_fs_context+0x99e/0xd00
[ 1453.399045][T26740]  do_new_mount+0x177/0xb00
[ 1453.399072][T26740]  ? __pfx_do_new_mount+0x10/0x10
[ 1453.399096][T26740]  ? ns_capable+0x84/0xe0
[ 1453.399115][T26740]  ? path_mount+0x647/0x1050
[ 1453.399140][T26740]  ? user_path_at+0xd4/0x160
[ 1453.399170][T26740]  __se_sys_mount+0x31d/0x420
[ 1453.399198][T26740]  ? __pfx___se_sys_mount+0x10/0x10
[ 1453.399226][T26740]  ? __x64_sys_mount+0x20/0xc0
[ 1453.399251][T26740]  do_syscall_64+0x166/0x520
[ 1453.399273][T26740]  ? trace_irq_disable+0x3b/0x140
[ 1453.399292][T26740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.399308][T26740]  ? clear_bhb_loop+0x70/0xc0
[ 1453.399328][T26740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.399344][T26740] RIP: 0033:0x7fa91d59e559
[ 1453.399359][T26740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1453.399374][T26740] RSP: 002b:00007fa91b7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1453.399391][T26740] RAX: ffffffffffffffda RBX: 00007fa91d825fa0 RCX: 00007fa91d59e559
[ 1453.399403][T26740] RDX: 00002000000009c0 RSI: 0000200000000980 RDI: 0000200000000940
[ 1453.399415][T26740] RBP: 00007fa91b7f6090 R08: 0000200000000a00 R09: 0000000000000000
[ 1453.399426][T26740] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000002
[ 1453.399436][T26740] R13: 00007fa91d826038 R14: 00007fa91d825fa0 R15: 00007fff83110e78
[ 1453.399461][T26740]  </TASK>
[ 1454.018445][  T195] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1454.057722][T16341] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1454.176577][  T195] usb 2-1: Using ep0 maxpacket: 32
[ 1454.185785][  T195] usb 2-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1454.197774][  T195] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[ 1454.197796][  T195] usb 2-1: config 0 has no interface number 0
[ 1454.197825][  T195] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1454.197842][  T195] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1454.197862][  T195] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1454.197883][  T195] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1454.197901][  T195] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1454.197931][  T195] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1454.197947][  T195] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1454.197965][  T195] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1454.197982][  T195] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1454.203466][  T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.203487][  T195] usb 2-1: Product: syz
[ 1454.203499][  T195] usb 2-1: Manufacturer: syz
[ 1454.203512][  T195] usb 2-1: SerialNumber: syz
[ 1454.218181][ T5601] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1454.239351][T16341] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[ 1454.240166][  T195] usb 2-1: config 0 descriptor??
[ 1454.240944][T26744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1454.269390][T16341] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1454.269468][T16341] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1454.269490][T16341] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1454.269507][T16341] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1454.269538][T16341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.414417][ T5601] usb 1-1: Using ep0 maxpacket: 8
[ 1454.427132][  T195] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1454.427150][  T195] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[ 1454.453410][ T5601] usb 1-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40
[ 1454.463224][ T5601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1454.463244][ T5601] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1454.463283][ T5601] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1454.541760][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.541782][ T5601] usb 1-1: Product: syz
[ 1454.541793][ T5601] usb 1-1: Manufacturer: syz
[ 1454.541804][ T5601] usb 1-1: SerialNumber: syz
[ 1454.643408][T26756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1454.643830][T26756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1454.811743][ T5601] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[ 1454.812497][ T5601] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage
[ 1454.841560][ T5601] usbtest 1-1:1.1: Interface 1 is not authorized for usage
[ 1454.861796][ T5601] snd-usb-audio 1-1:1.1: Interface 1 is not authorized for usage
[ 1454.898360][T16341] gud 6-1:1.0: probe with driver gud failed with error -5
[ 1455.107767][ T5601] usb 2-1: USB disconnect, device number 67
[ 1455.109793][T16341] usb 6-1: USB disconnect, device number 126
[ 1455.761735][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1455.778411][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1455.794447][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1455.812685][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1456.809928][T26772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6004'.
[ 1457.007399][ T9456] usb 9-1: new high-speed USB device number 102 using dummy_hcd
[ 1457.072875][T26792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6013'.
[ 1457.168240][ T9456] usb 9-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00
[ 1457.170928][ T9456] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1457.170973][ T9456] usb 9-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 1457.215604][ T9456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.215627][ T9456] usb 9-1: Product: syz
[ 1457.215639][ T9456] usb 9-1: Manufacturer: syz
[ 1457.215650][ T9456] usb 9-1: SerialNumber: syz
[ 1457.271766][ T9456] usb-storage 9-1:1.0: USB Mass Storage device detected
[ 1457.305033][ T9456] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[ 1457.321967][T26795] ufs: You didn't specify the type of your ufs filesystem
[ 1457.321967][T26795] 
[ 1457.321967][T26795] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1457.321967][T26795] 
[ 1457.321967][T26795] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1457.322028][T26795] ufs: ufstype=old is supported read-only
[ 1457.374347][ T9456] scsi host1: usb-storage 9-1:1.0
[ 1457.501069][T26788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.503553][T26788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.505717][T26795] ufs: ufs_fill_super(): bad magic number
[ 1457.594702][ T9456] usb 9-1: USB disconnect, device number 102
[ 1457.978687][T26808] fuse: Bad value for 'user_id'
[ 1457.978704][T26808] fuse: Bad value for 'user_id'
[ 1458.043394][ T9456] usb 1-1: USB disconnect, device number 28
[ 1458.677049][ T9456] usb 9-1: new high-speed USB device number 103 using dummy_hcd
[ 1458.830552][ T9456] usb 9-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00
[ 1458.831508][ T9456] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1458.831543][ T9456] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1458.831563][ T9456] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1458.831579][ T9456] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1458.831611][ T9456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.119659][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1459.120021][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1459.120760][T26824] tmpfs: Bad value for 'mpol'
[ 1459.120938][T26824] tmpfs: Bad value for 'mpol'
[ 1459.121103][T26824] tmpfs: Bad value for 'mpol'
[ 1459.121272][T26824] tmpfs: Bad value for 'mpol'
[ 1459.123135][T26824] tmpfs: Bad value for 'mpol'
[ 1459.123303][T26824] tmpfs: Bad value for 'mpol'
[ 1459.186186][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1459.186596][T26824] tmpfs: Bad value for 'mpol'
[ 1459.186802][T26824] tmpfs: Bad value for 'mpol'
[ 1459.186999][T26824] tmpfs: Bad value for 'mpol'
[ 1459.187564][T26824] tmpfs: Bad value for 'mpol'
[ 1459.187758][T26824] tmpfs: Bad value for 'mpol'
[ 1459.187925][T26824] tmpfs: Bad value for 'mpol'
[ 1459.207785][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1459.224807][T26824] tmpfs: Bad value for 'mpol'
[ 1459.257574][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1459.257928][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1459.258480][T26824] tmpfs: Bad value for 'mpol'
[ 1459.258666][T26824] tmpfs: Bad value for 'mpol'
[ 1459.258835][T26824] tmpfs: Bad value for 'mpol'
[ 1459.258997][T26824] tmpfs: Bad value for 'mpol'
[ 1459.259161][T26824] tmpfs: Bad value for 'mpol'
[ 1459.259328][T26824] tmpfs: Bad value for 'mpol'
[ 1459.259490][T26824] tmpfs: Bad value for 'mpol'
[ 1459.259669][T26824] tmpfs: Bad value for 'mpol'
[ 1459.259847][T26824] tmpfs: Bad value for 'mpol'
[ 1459.338734][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1459.339093][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1459.339647][T26824] tmpfs: Bad value for 'mpol'
[ 1459.339869][T26824] tmpfs: Bad value for 'mpol'
[ 1459.340057][T26824] tmpfs: Bad value for 'mpol'
[ 1459.366180][T26824] tmpfs: Bad value for 'mpol'
[ 1459.387824][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1459.388182][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1459.389177][T26824] tmpfs: Bad value for 'mpol'
[ 1459.389358][T26824] tmpfs: Bad value for 'mpol'
[ 1459.389538][T26824] tmpfs: Bad value for 'mpol'
[ 1459.389703][T26824] tmpfs: Bad value for 'mpol'
[ 1459.389883][T26824] tmpfs: Bad value for 'mpol'
[ 1459.390073][T26824] tmpfs: Bad value for 'mpol'
[ 1459.390267][T26824] tmpfs: Bad value for 'mpol'
[ 1459.390431][T26824] tmpfs: Bad value for 'mpol'
[ 1459.390697][ T9456] lg-g15 0003:046D:C222.006F: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0
[ 1459.473979][ T9456] lg-g15 0003:046D:C222.006F: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[ 1459.490979][T26824] tmpfs: Bad value for 'mpol'
[ 1459.491151][T26824] tmpfs: Bad value for 'mpol'
[ 1459.491337][T26824] tmpfs: Bad value for 'mpol'
[ 1459.491497][T26824] tmpfs: Bad value for 'mpol'
[ 1459.493740][T26824] tmpfs: Bad value for 'mpol'
[ 1459.517936][T26824] tmpfs: Bad value for 'mpol'
[ 1459.540961][T26824] tmpfs: Bad value for 'mpol'
[ 1459.541149][T26824] tmpfs: Bad value for 'mpol'
[ 1459.541319][T26824] tmpfs: Bad value for 'mpol'
[ 1459.541479][T26824] tmpfs: Bad value for 'mpol'
[ 1459.541653][T26824] tmpfs: Bad value for 'mpol'
[ 1459.541821][T26824] tmpfs: Bad value for 'mpol'
[ 1459.542061][T26824] tmpfs: Bad value for 'mpol'
[ 1459.542223][T26824] tmpfs: Bad value for 'mpol'
[ 1459.571894][ T5718] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1459.601301][T26824] tmpfs: Bad value for 'mpol'
[ 1459.601506][T26824] tmpfs: Bad value for 'mpol'
[ 1459.601705][T26824] tmpfs: Bad value for 'mpol'
[ 1459.601904][T26824] tmpfs: Bad value for 'mpol'
[ 1459.602065][T26824] tmpfs: Bad value for 'mpol'
[ 1459.635478][T26824] tmpfs: Bad value for 'mpol'
[ 1459.635708][T26824] tmpfs: Bad value for 'mpol'
[ 1459.635892][T26824] tmpfs: Bad value for 'mpol'
[ 1459.636060][T26824] tmpfs: Bad value for 'mpol'
[ 1459.636227][T26824] tmpfs: Bad value for 'mpol'
[ 1459.636510][T26824] tmpfs: Bad value for 'mpol'
[ 1459.636685][T26824] tmpfs: Bad value for 'mpol'
[ 1459.678834][T26824] tmpfs: Bad value for 'mpol'
[ 1459.684963][T26824] tmpfs: Bad value for 'mpol'
[ 1459.685155][T26824] tmpfs: Bad value for 'mpol'
[ 1459.685321][T26824] tmpfs: Bad value for 'mpol'
[ 1459.685570][T26824] tmpfs: Bad value for 'mpol'
[ 1459.747769][ T5718] usb 1-1: Using ep0 maxpacket: 32
[ 1459.748293][ T5718] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[ 1459.749197][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1459.749219][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1459.749248][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.802433][ T5718] usb 1-1: config 0 descriptor??
[ 1459.816880][ T5718] hub 1-1:0.0: Interface 0 is not authorized for usage
[ 1459.831452][ T5718] usbtest 1-1:0.0: Interface 0 is not authorized for usage
[ 1459.832766][ T5718] usbhid 1-1:0.0: Interface 0 is not authorized for usage
[ 1460.379541][ T9456] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1460.538412][ T9456] usb 2-1: Using ep0 maxpacket: 32
[ 1460.540181][ T9456] usb 2-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1460.563045][ T9456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1460.565082][ T9456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.565102][ T9456] usb 2-1: Product: syz
[ 1460.565113][ T9456] usb 2-1: Manufacturer: syz
[ 1460.565125][ T9456] usb 2-1: SerialNumber: syz
[ 1460.612337][ T9456] usb 2-1: config 0 descriptor??
[ 1460.627622][ T9456] cdc_ether 2-1:0.0: skipping garbage
[ 1460.627640][ T9456] usb 2-1: No union descriptors
[ 1460.644453][ T9456] usb 2-1: unsupported MDLM descriptors
[ 1460.824687][ T5718] usb 2-1: USB disconnect, device number 68
[ 1461.480547][ T5718] usb 9-1: USB disconnect, device number 103
[ 1461.627211][T22229] Bluetooth: hci1: Malformed HCI Event
[ 1461.715978][T26138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1461.724845][T26138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1461.748656][T26138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1461.749713][T26138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1461.750148][T26138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1462.094442][ T9456] usb 1-1: USB disconnect, device number 29
[ 1462.245887][T26860] netlink: 'syz.0.6026': attribute type 4 has an invalid length.
[ 1462.245908][T26860] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.6026'.
[ 1462.470360][T26866] FAULT_INJECTION: forcing a failure.
[ 1462.470360][T26866] name failslab, interval 1, probability 5, space 10, times 9867
[ 1462.470389][T26866] CPU: 0 UID: 0 PID: 26866 Comm: syz.8.6027 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1462.470426][T26866] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1462.470433][T26866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1462.470444][T26866] Call Trace:
[ 1462.470451][T26866]  <TASK>
[ 1462.470458][T26866]  dump_stack_lvl+0xe8/0x150
[ 1462.470487][T26866]  should_fail_ex+0x3eb/0x540
[ 1462.470514][T26866]  should_failslab+0xa8/0x100
[ 1462.470534][T26866]  __kmalloc_noprof+0xf9/0x710
[ 1462.470556][T26866]  ? rcu_is_watching+0x16/0xb0
[ 1462.470577][T26866]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1462.470603][T26866]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1462.470634][T26866]  tomoyo_realpath_from_path+0xef/0x640
[ 1462.470671][T26866]  tomoyo_check_open_permission+0x229/0x470
[ 1462.470694][T26866]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1462.470717][T26866]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1462.470740][T26866]  ? __asan_memset+0x22/0x50
[ 1462.470785][T26866]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1462.470814][T26866]  security_file_open+0xa9/0x240
[ 1462.470836][T26866]  do_dentry_open+0x495/0x1360
[ 1462.470866][T26866]  vfs_open_consume+0x4a/0x350
[ 1462.470888][T26866]  ? path_openat+0x16e1/0x20f0
[ 1462.470907][T26866]  path_openat+0x16fc/0x20f0
[ 1462.470938][T26866]  do_file_open+0x23e/0x4a0
[ 1462.470959][T26866]  ? __pfx_do_file_open+0x10/0x10
[ 1462.470993][T26866]  ? _raw_spin_unlock+0x28/0x50
[ 1462.471013][T26866]  ? alloc_fd+0x6af/0x760
[ 1462.471044][T26866]  do_sys_openat2+0x115/0x200
[ 1462.471066][T26866]  ? __se_sys_futex+0x3a8/0x450
[ 1462.471089][T26866]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1462.471115][T26866]  ? rcu_is_watching+0x16/0xb0
[ 1462.471139][T26866]  __x64_sys_openat+0x138/0x170
[ 1462.471164][T26866]  do_syscall_64+0x166/0x520
[ 1462.471187][T26866]  ? trace_irq_disable+0x3b/0x140
[ 1462.471204][T26866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.471222][T26866]  ? clear_bhb_loop+0x70/0xc0
[ 1462.471243][T26866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.471259][T26866] RIP: 0033:0x7f6712f5ed8e
[ 1462.471275][T26866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1462.471290][T26866] RSP: 002b:00007f6713d9af18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1462.471309][T26866] RAX: ffffffffffffffda RBX: 00007f6713d9b6c0 RCX: 00007f6712f5ed8e
[ 1462.471322][T26866] RDX: 0000000000000000 RSI: 00007f67130351e6 RDI: ffffffffffffff9c
[ 1462.471333][T26866] RBP: 00007f6713035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1462.471344][T26866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1462.471355][T26866] R13: 00007f6713226038 R14: 00007f6713225fa0 R15: 00007fff7fb5d888
[ 1462.471380][T26866]  </TASK>
[ 1462.636079][T26866] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1463.177101][ T5718] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1463.269402][T16341] usb 9-1: new high-speed USB device number 104 using dummy_hcd
[ 1463.326713][ T5718] usb 1-1: Using ep0 maxpacket: 32
[ 1463.328107][ T5718] usb 1-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1463.331246][ T5718] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1463.331267][ T5718] usb 1-1: config 0 has no interface number 0
[ 1463.331296][ T5718] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1463.331312][ T5718] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1463.331332][ T5718] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1463.331351][ T5718] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1463.331376][ T5718] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1463.331394][ T5718] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1463.331411][ T5718] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1463.331429][ T5718] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1463.331446][ T5718] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1463.381900][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.381922][ T5718] usb 1-1: Product: syz
[ 1463.381933][ T5718] usb 1-1: Manufacturer: syz
[ 1463.381944][ T5718] usb 1-1: SerialNumber: syz
[ 1463.456677][T16341] usb 9-1: Using ep0 maxpacket: 16
[ 1463.482212][T16341] usb 9-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1463.493577][ T5718] usb 1-1: config 0 descriptor??
[ 1463.498454][T26873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1463.547282][T16341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.547303][T16341] usb 9-1: Product: syz
[ 1463.547315][T16341] usb 9-1: Manufacturer: syz
[ 1463.547326][T16341] usb 9-1: SerialNumber: syz
[ 1463.549916][ T5718] microtekX6 1-1:0.146: Interface 146 is not authorized for usage
[ 1463.555701][T16341] usb 9-1: config 0 descriptor??
[ 1463.570232][ T5718] usbtest 1-1:0.146: Interface 146 is not authorized for usage
[ 1463.712188][T26852] rxe_eth0 speed is unknown, defaulting to 1000
[ 1463.767151][T22229] Bluetooth: hci0: command tx timeout
[ 1463.826282][T26886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1463.830252][T26886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1464.161369][T16341] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[ 1464.192708][T16341] usb 9-1: USB disconnect, device number 104
[ 1464.301479][ T5718] usb 1-1: USB disconnect, device number 30
[ 1464.760813][T26906] binfmt_misc: register: failed to install interpreter ./file0
[ 1464.855739][ T5718] usb 9-1: new full-speed USB device number 105 using dummy_hcd
[ 1464.987700][ T5718] usb 9-1: device descriptor read/64, error -71
[ 1465.226715][ T5718] usb 9-1: new full-speed USB device number 106 using dummy_hcd
[ 1465.355872][ T5718] usb 9-1: device descriptor read/64, error -71
[ 1465.467530][ T5718] usb usb9-port1: attempt power cycle
[ 1465.738932][T26931] tmpfs: Bad value for 'mpol'
[ 1465.795153][T26936] netlink: 'syz.1.6041': attribute type 62 has an invalid length.
[ 1465.815755][ T5718] usb 9-1: new full-speed USB device number 107 using dummy_hcd
[ 1465.836893][ T5718] usb 9-1: device descriptor read/8, error -71
[ 1465.845821][T22229] Bluetooth: hci0: command tx timeout
[ 1465.873239][T26938] FAULT_INJECTION: forcing a failure.
[ 1465.873239][T26938] name failslab, interval 1, probability 5, space 10, times 9866
[ 1465.873267][T26938] CPU: 0 UID: 0 PID: 26938 Comm: syz.1.6041 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1465.873291][T26938] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1465.873299][T26938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1465.873309][T26938] Call Trace:
[ 1465.873316][T26938]  <TASK>
[ 1465.873323][T26938]  dump_stack_lvl+0xe8/0x150
[ 1465.873353][T26938]  should_fail_ex+0x3eb/0x540
[ 1465.873382][T26938]  should_failslab+0xa8/0x100
[ 1465.873403][T26938]  ? security_inode_alloc+0x39/0x310
[ 1465.873431][T26938]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1465.873457][T26938]  ? security_inode_alloc+0x39/0x310
[ 1465.873488][T26938]  security_inode_alloc+0x39/0x310
[ 1465.873516][T26938]  inode_init_always_gfp+0x97e/0xd30
[ 1465.873545][T26938]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1465.873564][T26938]  alloc_inode+0x82/0x1b0
[ 1465.873588][T26938]  new_inode+0x1f/0x170
[ 1465.873615][T26938]  __debugfs_create_file+0xb8/0x400
[ 1465.873641][T26938]  debugfs_create_file_full+0x3f/0x60
[ 1465.873662][T26938]  ref_tracker_dir_debugfs+0x197/0x360
[ 1465.873688][T26938]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1465.873736][T26938]  ? __kasan_kmalloc+0x93/0xb0
[ 1465.873755][T26938]  ? __raw_spin_lock_init+0x45/0x100
[ 1465.873782][T26938]  preinit_net+0x1ca/0x760
[ 1465.873804][T26938]  copy_net_ns+0x2c3/0x770
[ 1465.873828][T26938]  create_new_namespaces+0x3f0/0x6b0
[ 1465.873852][T26938]  ? security_capable+0x7e/0x2c0
[ 1465.873880][T26938]  unshare_nsproxy_namespaces+0x144/0x190
[ 1465.873904][T26938]  ksys_unshare+0x532/0x890
[ 1465.873927][T26938]  ? __pfx_ksys_unshare+0x10/0x10
[ 1465.873950][T26938]  ? rcu_is_watching+0x16/0xb0
[ 1465.873980][T26938]  __x64_sys_unshare+0x38/0x50
[ 1465.874000][T26938]  do_syscall_64+0x166/0x520
[ 1465.874023][T26938]  ? trace_irq_disable+0x3b/0x140
[ 1465.874042][T26938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.874060][T26938]  ? clear_bhb_loop+0x70/0xc0
[ 1465.874089][T26938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.874106][T26938] RIP: 0033:0x7fd22679e559
[ 1465.874122][T26938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1465.874137][T26938] RSP: 002b:00007fd2249d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1465.874155][T26938] RAX: ffffffffffffffda RBX: 00007fd226a26090 RCX: 00007fd22679e559
[ 1465.874168][T26938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400
[ 1465.874178][T26938] RBP: 00007fd226835ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1465.874189][T26938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1465.874199][T26938] R13: 00007fd226a26128 R14: 00007fd226a26090 R15: 00007ffd0b0a9708
[ 1465.874225][T26938]  </TASK>
[ 1465.971939][T26938] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88807dc9d240'
[ 1466.107982][ T5718] usb 9-1: new full-speed USB device number 108 using dummy_hcd
[ 1466.187097][ T5718] usb 9-1: device descriptor read/8, error -71
[ 1466.299062][ T5718] usb usb9-port1: unable to enumerate USB device
[ 1466.332318][T26852] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1466.334672][T26852] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.352509][T26852] bridge_slave_0: entered allmulticast mode
[ 1466.364397][T26852] bridge_slave_0: entered promiscuous mode
[ 1466.384177][T26852] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1466.384256][T26852] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.384385][T26852] bridge_slave_1: entered allmulticast mode
[ 1466.417404][T26852] bridge_slave_1: entered promiscuous mode
[ 1466.550939][T26852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1466.551660][T26938] rxe_eth0 speed is unknown, defaulting to 1000
[ 1466.583568][T26852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1466.679973][T26852] team0: Port device team_slave_0 added
[ 1466.694356][T26852] team0: Port device team_slave_1 added
[ 1466.776055][T16341] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1466.798505][T26852] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1466.798520][T26852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1466.798542][T26852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1466.803318][T26852] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1466.803332][T26852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1466.803353][T26852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1466.936040][T16341] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1466.938857][T16341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1466.938900][T16341] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1466.938929][T16341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.979021][T16341] usb 1-1: config 0 descriptor??
[ 1467.073971][T26852] hsr_slave_0: entered promiscuous mode
[ 1467.082702][T26852] hsr_slave_1: entered promiscuous mode
[ 1467.083357][T26852] debugfs: 'hsr0' already exists in 'hsr'
[ 1467.083375][T26852] Cannot create hsr debugfs directory
[ 1467.227598][ T5718] usb 1-1: USB disconnect, device number 31
[ 1467.927389][T22229] Bluetooth: hci0: command tx timeout
[ 1468.296728][ T9456] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1468.449072][ T9456] usb 1-1: Using ep0 maxpacket: 32
[ 1468.456718][ T9456] usb 1-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1468.461276][ T9456] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1468.461300][ T9456] usb 1-1: config 0 has no interface number 0
[ 1468.461330][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1468.461346][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1468.461367][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1468.461387][ T9456] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1468.461405][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1468.461424][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1468.461440][ T9456] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1468.461459][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1468.461475][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1468.513898][ T9456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1468.513920][ T9456] usb 1-1: Product: syz
[ 1468.513931][ T9456] usb 1-1: Manufacturer: syz
[ 1468.513943][ T9456] usb 1-1: SerialNumber: syz
[ 1468.621333][ T9456] usb 1-1: config 0 descriptor??
[ 1468.632824][T26945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1468.662784][ T9456] microtekX6 1-1:0.146: Interface 146 is not authorized for usage
[ 1468.663331][ T9456] usbtest 1-1:0.146: Interface 146 is not authorized for usage
[ 1468.799187][T26951] netlink: 'syz.8.6047': attribute type 1 has an invalid length.
[ 1468.799205][T26951] netlink: 'syz.8.6047': attribute type 2 has an invalid length.
[ 1468.799215][T26951] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6047'.
[ 1469.008071][T26954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.013127][T26954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.113779][T26852] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1469.138652][T26852] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1469.140629][T26852] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1469.173904][T26852] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1469.189430][T26852] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1469.214334][T26959] FAULT_INJECTION: forcing a failure.
[ 1469.214334][T26959] name failslab, interval 1, probability 5, space 10, times 9865
[ 1469.214362][T26959] CPU: 0 UID: 0 PID: 26959 Comm: syz.1.6050 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1469.214387][T26959] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1469.214394][T26959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1469.214404][T26959] Call Trace:
[ 1469.214411][T26959]  <TASK>
[ 1469.214418][T26959]  dump_stack_lvl+0xe8/0x150
[ 1469.214445][T26959]  should_fail_ex+0x3eb/0x540
[ 1469.214472][T26959]  should_failslab+0xa8/0x100
[ 1469.214491][T26959]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 1469.214515][T26959]  ? __kasan_kmalloc+0x93/0xb0
[ 1469.214531][T26959]  ? snd_timer_instance_new+0x6a/0x260
[ 1469.214551][T26959]  ? snd_timer_instance_new+0x6a/0x260
[ 1469.214570][T26959]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1469.214595][T26959]  kstrdup+0x42/0x100
[ 1469.214618][T26959]  snd_timer_instance_new+0x6a/0x260
[ 1469.214638][T26959]  snd_seq_timer_open+0x23e/0x620
[ 1469.214670][T26959]  ? __pfx_snd_seq_timer_open+0x10/0x10
[ 1469.214706][T26959]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1469.214730][T26959]  snd_seq_queue_alloc+0x3ba/0x740
[ 1469.214758][T26959]  snd_seq_ioctl_create_queue+0x7f/0x3c0
[ 1469.214792][T26959]  snd_seq_oss_open+0x657/0xf40
[ 1469.214816][T26959]  ? __pfx_snd_seq_oss_open+0x10/0x10
[ 1469.214861][T26959]  ? rcu_is_watching+0x16/0xb0
[ 1469.214881][T26959]  ? trace_contention_end+0x3d/0x140
[ 1469.214917][T26959]  ? __pfx___mutex_lock+0x10/0x10
[ 1469.214945][T26959]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 1469.214964][T26959]  ? __pfx_free_devinfo+0x10/0x10
[ 1469.214983][T26959]  ? do_raw_spin_unlock+0xf5/0x200
[ 1469.215008][T26959]  ? soundcore_open+0x2da/0x490
[ 1469.215031][T26959]  odev_open+0x67/0xa0
[ 1469.215049][T26959]  chrdev_open+0x4d9/0x600
[ 1469.215071][T26959]  ? __pfx_chrdev_open+0x10/0x10
[ 1469.215089][T26959]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 1469.215110][T26959]  ? devcgroup_check_permission+0x31/0x8f0
[ 1469.215132][T26959]  ? __pfx_chrdev_open+0x10/0x10
[ 1469.215150][T26959]  do_dentry_open+0x80e/0x1360
[ 1469.215179][T26959]  vfs_open_consume+0x4a/0x350
[ 1469.215197][T26959]  ? path_openat+0x16e1/0x20f0
[ 1469.215216][T26959]  path_openat+0x16fc/0x20f0
[ 1469.215246][T26959]  do_file_open+0x23e/0x4a0
[ 1469.215267][T26959]  ? __pfx_do_file_open+0x10/0x10
[ 1469.215300][T26959]  ? _raw_spin_unlock+0x28/0x50
[ 1469.215318][T26959]  ? alloc_fd+0x6af/0x760
[ 1469.215348][T26959]  do_sys_openat2+0x115/0x200
[ 1469.215371][T26959]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1469.215392][T26959]  ? ksys_write+0x242/0x270
[ 1469.215417][T26959]  ? __pfx_ksys_write+0x10/0x10
[ 1469.215445][T26959]  __x64_sys_openat+0x138/0x170
[ 1469.215469][T26959]  do_syscall_64+0x166/0x520
[ 1469.215490][T26959]  ? trace_irq_disable+0x3b/0x140
[ 1469.215507][T26959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1469.215523][T26959]  ? clear_bhb_loop+0x70/0xc0
[ 1469.215543][T26959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1469.215559][T26959] RIP: 0033:0x7fd22679e559
[ 1469.215575][T26959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1469.215589][T26959] RSP: 002b:00007fd2249f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1469.215606][T26959] RAX: ffffffffffffffda RBX: 00007fd226a25fa0 RCX: 00007fd22679e559
[ 1469.215618][T26959] RDX: 0000000000000400 RSI: 0000200000000580 RDI: ffffffffffffff9c
[ 1469.215630][T26959] RBP: 00007fd2249f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1469.215640][T26959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1469.215650][T26959] R13: 00007fd226a26038 R14: 00007fd226a25fa0 R15: 00007ffd0b0a9708
[ 1469.215676][T26959]  </TASK>
[ 1469.272682][T26852] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1469.284112][T26852] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1469.587144][T26852] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1469.708796][  T195] usb 1-1: USB disconnect, device number 32
[ 1469.796864][T16341] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1469.944006][T26852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1469.953174][T16341] usb 2-1: New USB device found: idVendor=1604, idProduct=8005, bcdDevice=8e.01
[ 1469.954191][T16341] usb 2-1: config 1 has an invalid interface number: 173 but max is 0
[ 1469.954212][T16341] usb 2-1: config 1 has no interface number 0
[ 1469.954256][T16341] usb 2-1: config 1 interface 173 has no altsetting 0
[ 1469.993319][T16341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1469.993340][T16341] usb 2-1: Product: syz
[ 1469.993352][T16341] usb 2-1: Manufacturer: syz
[ 1469.993363][T16341] usb 2-1: SerialNumber: syz
[ 1470.008451][T22229] Bluetooth: hci0: command tx timeout
[ 1470.069694][T26852] 8021q: adding VLAN 0 to HW filter on device team0
[ 1470.101973][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1470.102062][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1470.142238][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1470.142327][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1470.285681][ T5718] usb 9-1: new high-speed USB device number 109 using dummy_hcd
[ 1470.409644][T16341] usb 2-1: USB disconnect, device number 69
[ 1470.437964][T26974] PKCS7: Unknown OID: [5] 1.2.840.113549.1.7.31
[ 1470.437982][T26974] PKCS7: Only support pkcs7_signedData type
[ 1470.438176][ T5718] usb 9-1: Using ep0 maxpacket: 16
[ 1470.465570][ T5718] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1470.465609][ T5718] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a4, bcdDevice=23.17
[ 1470.495534][ T5718] usb 9-1: config 164 has an invalid interface number: 153 but max is 0
[ 1470.495556][ T5718] usb 9-1: config 164 has no interface number 0
[ 1470.495585][ T5718] usb 9-1: config 164 interface 153 altsetting 4 endpoint 0xA has an invalid bInterval 255, changing to 7
[ 1470.495606][ T5718] usb 9-1: config 164 interface 153 altsetting 4 endpoint 0xD has invalid maxpacket 47158, setting to 1024
[ 1470.495627][ T5718] usb 9-1: config 164 interface 153 altsetting 4 bulk endpoint 0xD has invalid maxpacket 1024
[ 1470.495646][ T5718] usb 9-1: config 164 interface 153 altsetting 4 bulk endpoint 0xB has invalid maxpacket 1024
[ 1470.495664][ T5718] usb 9-1: config 164 interface 153 has no altsetting 0
[ 1470.578108][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.578130][ T5718] usb 9-1: Product: syz
[ 1470.578141][ T5718] usb 9-1: Manufacturer: syz
[ 1470.578153][ T5718] usb 9-1: SerialNumber: syz
[ 1470.630841][T26970] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1470.630925][T26970] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1470.838587][ T5718] usbtest 9-1:164.153: couldn't get endpoints, -22
[ 1470.842576][ T5718] usbtest 9-1:164.153: probe with driver usbtest failed with error -22
[ 1470.892293][ T5718] usb 9-1: USB disconnect, device number 109
[ 1471.245206][ T9456] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[ 1471.397099][ T9456] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1471.397537][ T9456] usb 2-1: not running at top speed; connect to a high speed hub
[ 1471.397561][ T9456] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1471.398445][ T9456] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 1471.398463][ T9456] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 1471.398478][ T9456] usb 2-1: config 14 has no interface number 0
[ 1471.398492][ T9456] usb 2-1: config 14 has no interface number 1
[ 1471.398535][ T9456] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1471.398553][ T9456] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1471.398573][ T9456] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[ 1471.398594][ T9456] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1471.398626][ T9456] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1471.398641][ T9456] usb 2-1: config 14 interface 228 has no altsetting 0
[ 1471.400516][ T9456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.400537][ T9456] usb 2-1: Product: syz
[ 1471.400549][ T9456] usb 2-1: Manufacturer: syz
[ 1471.400560][ T9456] usb 2-1: SerialNumber: syz
[ 1471.967463][ T9456] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1472.049476][T26852] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1472.093041][   T33] audit: type=1326 audit(1792227224.341:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.6055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e559 code=0x7fc00000
[ 1472.093257][   T33] audit: type=1326 audit(1792227224.341:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.6055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91d59e559 code=0x7fc00000
[ 1472.093501][   T33] audit: type=1326 audit(1792227224.341:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.6055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e559 code=0x7fc00000
[ 1472.093680][   T33] audit: type=1326 audit(1792227224.341:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.6055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e559 code=0x7fc00000
[ 1472.093890][   T33] audit: type=1326 audit(1792227224.341:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.6055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e559 code=0x7fc00000
[ 1472.440838][ T9456] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 90.189 build 39714
[ 1472.456309][ T9456] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1472.882058][T27007] fuse: Bad value for 'rootmode'
[ 1473.035215][T26852] veth0_vlan: entered promiscuous mode
[ 1473.061054][T26852] veth1_vlan: entered promiscuous mode
[ 1473.135329][T26852] veth0_macvtap: entered promiscuous mode
[ 1473.144904][ T9456] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1473.167876][T26852] veth1_macvtap: entered promiscuous mode
[ 1473.205834][T26852] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1473.229794][T26852] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1473.298464][T18668] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.299029][ T6644] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.299061][ T6644] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.299088][ T6644] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.309619][ T9456] usb 1-1: Using ep0 maxpacket: 32
[ 1473.320661][ T9456] usb 1-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1473.357214][ T9456] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1473.357237][ T9456] usb 1-1: config 0 has no interface number 0
[ 1473.357274][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1473.357290][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1473.357310][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1473.357330][ T9456] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1473.357349][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1473.357367][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1473.357383][ T9456] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1473.357401][ T9456] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1473.357418][ T9456] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1473.498695][ T9456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.498718][ T9456] usb 1-1: Product: syz
[ 1473.498730][ T9456] usb 1-1: Manufacturer: syz
[ 1473.498742][ T9456] usb 1-1: SerialNumber: syz
[ 1473.504209][ T9456] usb 1-1: config 0 descriptor??
[ 1473.538867][T27006] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1473.554296][ T9456] microtekX6 1-1:0.146: Interface 146 is not authorized for usage
[ 1473.573797][ T9456] usbtest 1-1:0.146: Interface 146 is not authorized for usage
[ 1473.791072][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1473.791090][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1473.851991][T27010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.852337][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.987724][T21170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1473.987743][T21170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1474.109759][  T195] usb 2-1: USB disconnect, device number 70
[ 1474.151129][  T195] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1474.236148][ T5601] usb 1-1: USB disconnect, device number 33
[ 1474.246069][ T6644] IPVS: starting estimator thread 0...
[ 1474.339926][T27020] veth1_to_hsr: entered allmulticast mode
[ 1474.391386][T27015] IPVS: Scheduler module ip_vs_foobar not found
[ 1474.391445][T27016] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1474.640887][T27032] sg_write: data in/out 576239/136 bytes for SCSI command 0x0-- guessing data in;
[ 1474.640887][T27032]    program syz.8.6064 not setting count and/or reply_len properly
[ 1475.180490][T27019] veth1_to_hsr: left allmulticast mode
[ 1475.669278][T27053] FAULT_INJECTION: forcing a failure.
[ 1475.669278][T27053] name failslab, interval 1, probability 5, space 10, times 9864
[ 1475.669307][T27053] CPU: 0 UID: 0 PID: 27053 Comm: syz.8.6070 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1475.669332][T27053] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1475.669340][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1475.669350][T27053] Call Trace:
[ 1475.669357][T27053]  <TASK>
[ 1475.669365][T27053]  dump_stack_lvl+0xe8/0x150
[ 1475.669392][T27053]  should_fail_ex+0x3eb/0x540
[ 1475.669421][T27053]  should_failslab+0xa8/0x100
[ 1475.669440][T27053]  ? alloc_vfsmnt+0x23/0x510
[ 1475.669458][T27053]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1475.669484][T27053]  ? alloc_vfsmnt+0x23/0x510
[ 1475.669507][T27053]  alloc_vfsmnt+0x23/0x510
[ 1475.669528][T27053]  clone_mnt+0x4c/0xad0
[ 1475.669552][T27053]  mnt_clone_internal+0x62/0xc0
[ 1475.669572][T27053]  __se_sys_acct+0x17c/0x9d0
[ 1475.669601][T27053]  ? __pfx___se_sys_acct+0x10/0x10
[ 1475.669636][T27053]  do_syscall_64+0x166/0x520
[ 1475.669659][T27053]  ? trace_irq_disable+0x3b/0x140
[ 1475.669677][T27053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.669694][T27053]  ? clear_bhb_loop+0x70/0xc0
[ 1475.669715][T27053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.669731][T27053] RIP: 0033:0x7f6712f9e559
[ 1475.669748][T27053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1475.669766][T27053] RSP: 002b:00007f6713d9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 1475.669785][T27053] RAX: ffffffffffffffda RBX: 00007f6713225fa0 RCX: 00007f6712f9e559
[ 1475.669798][T27053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[ 1475.669809][T27053] RBP: 00007f6713035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1475.669819][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1475.669830][T27053] R13: 00007f6713226038 R14: 00007f6713225fa0 R15: 00007fff7fb5d888
[ 1475.669856][T27053]  </TASK>
[ 1476.162691][T27059] nfs: Unknown parameter '7ÌOþè'
[ 1476.258621][   T33] audit: type=1326 audit(1792227228.511:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27056 comm="syz.8.6073" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6712f9e559 code=0x0
[ 1476.429346][T27067] wg0: entered promiscuous mode
[ 1476.442087][T27067] netlink: 'syz.9.6075': attribute type 1 has an invalid length.
[ 1476.442104][T27067] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6075'.
[ 1476.495232][ T5718] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1476.647928][ T5718] usb 2-1: Using ep0 maxpacket: 32
[ 1476.651451][ T5718] usb 2-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1476.653238][ T5718] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[ 1476.653258][ T5718] usb 2-1: config 0 has no interface number 0
[ 1476.653286][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1476.653303][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1476.653322][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1476.653343][ T5718] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1476.653360][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1476.653379][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1476.653396][ T5718] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1476.653414][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1476.653431][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1476.776532][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.776554][ T5718] usb 2-1: Product: syz
[ 1476.776566][ T5718] usb 2-1: Manufacturer: syz
[ 1476.776578][ T5718] usb 2-1: SerialNumber: syz
[ 1476.851859][ T5718] usb 2-1: config 0 descriptor??
[ 1476.853340][T27063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1476.874856][ T5718] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1476.874876][ T5718] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[ 1477.008534][T27071] netlink: 'syz.9.6077': attribute type 3 has an invalid length.
[ 1477.008554][T27071] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6077'.
[ 1477.143147][T27073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1477.160043][T27073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1477.355556][ T5601] usb 2-1: USB disconnect, device number 71
[ 1477.464324][ T5718] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1477.616570][ T5718] usb 10-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01
[ 1477.617762][ T5718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.850687][    C0] dln2 10-1:1.0: short response: 0
[ 1477.868626][ T5718] dln2 10-1:1.0: USB write failed: -110
[ 1477.868991][ T5718] dln2 10-1:1.0: failed to initialize hardware
[ 1477.873996][ T5718] dln2 10-1:1.0: probe with driver dln2 failed with error -110
[ 1478.379018][ T5718] usb 10-1: USB disconnect, device number 59
[ 1478.607565][T27086] fuse: Unknown parameter '_id'
[ 1479.021560][T27093] FAULT_INJECTION: forcing a failure.
[ 1479.021560][T27093] name failslab, interval 1, probability 5, space 10, times 9863
[ 1479.021589][T27093] CPU: 0 UID: 0 PID: 27093 Comm: syz.0.6083 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1479.021613][T27093] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1479.021620][T27093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1479.021631][T27093] Call Trace:
[ 1479.021638][T27093]  <TASK>
[ 1479.021645][T27093]  dump_stack_lvl+0xe8/0x150
[ 1479.021671][T27093]  should_fail_ex+0x3eb/0x540
[ 1479.021698][T27093]  should_failslab+0xa8/0x100
[ 1479.021718][T27093]  __kmalloc_cache_noprof+0x9e/0x600
[ 1479.021742][T27093]  ? alloc_fs_context+0x66/0xd00
[ 1479.021758][T27093]  ? alloc_fs_context+0x66/0xd00
[ 1479.021775][T27093]  ? __get_fs_type+0x21/0x280
[ 1479.021796][T27093]  alloc_fs_context+0x66/0xd00
[ 1479.021812][T27093]  ? __get_fs_type+0x267/0x280
[ 1479.021826][T27093]  ? __get_fs_type+0x21/0x280
[ 1479.021847][T27093]  do_new_mount+0x177/0xb00
[ 1479.021874][T27093]  ? __pfx_do_new_mount+0x10/0x10
[ 1479.021904][T27093]  ? ns_capable+0x84/0xe0
[ 1479.021924][T27093]  ? path_mount+0x647/0x1050
[ 1479.021948][T27093]  ? user_path_at+0xd4/0x160
[ 1479.021975][T27093]  __se_sys_mount+0x31d/0x420
[ 1479.022003][T27093]  ? __pfx___se_sys_mount+0x10/0x10
[ 1479.022031][T27093]  ? __x64_sys_mount+0x20/0xc0
[ 1479.022056][T27093]  do_syscall_64+0x166/0x520
[ 1479.022078][T27093]  ? trace_irq_disable+0x3b/0x140
[ 1479.022096][T27093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.022112][T27093]  ? clear_bhb_loop+0x70/0xc0
[ 1479.022132][T27093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.022148][T27093] RIP: 0033:0x7fa91d59e559
[ 1479.022163][T27093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1479.022177][T27093] RSP: 002b:00007fa91b7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1479.022195][T27093] RAX: ffffffffffffffda RBX: 00007fa91d825fa0 RCX: 00007fa91d59e559
[ 1479.022207][T27093] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240
[ 1479.022219][T27093] RBP: 00007fa91b7f6090 R08: 0000200000000300 R09: 0000000000000000
[ 1479.022230][T27093] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002
[ 1479.022241][T27093] R13: 00007fa91d826038 R14: 00007fa91d825fa0 R15: 00007fff83110e78
[ 1479.022266][T27093]  </TASK>
[ 1479.341956][T21170] IPVS: starting estimator thread 0...
[ 1479.426921][T27096] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1479.549776][T27101] FAULT_INJECTION: forcing a failure.
[ 1479.549776][T27101] name failslab, interval 1, probability 5, space 10, times 9862
[ 1479.549806][T27101] CPU: 0 UID: 0 PID: 27101 Comm: syz.8.6086 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1479.549830][T27101] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1479.549838][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1479.549849][T27101] Call Trace:
[ 1479.549855][T27101]  <TASK>
[ 1479.549863][T27101]  dump_stack_lvl+0xe8/0x150
[ 1479.549891][T27101]  should_fail_ex+0x3eb/0x540
[ 1479.549918][T27101]  should_failslab+0xa8/0x100
[ 1479.549939][T27101]  __kmalloc_noprof+0xf9/0x710
[ 1479.549961][T27101]  ? __pfx_update_last_data+0x10/0x10
[ 1479.549988][T27101]  ? trace_parser_get_init+0x3d/0xc0
[ 1479.550006][T27101]  ? trace_parser_get_init+0x3d/0xc0
[ 1479.550038][T27101]  trace_parser_get_init+0x3d/0xc0
[ 1479.550060][T27101]  ftrace_event_write+0x119/0x2b0
[ 1479.550083][T27101]  ? __pfx_ftrace_event_write+0x10/0x10
[ 1479.550113][T27101]  ? __pfx_ftrace_event_write+0x10/0x10
[ 1479.550132][T27101]  vfs_write+0x296/0xba0
[ 1479.550164][T27101]  ? __pfx_vfs_write+0x10/0x10
[ 1479.550190][T27101]  ? __fget_files+0x2a/0x420
[ 1479.550213][T27101]  ? __fget_files+0x3a2/0x420
[ 1479.550236][T27101]  ? __fget_files+0x2a/0x420
[ 1479.550262][T27101]  ? fdget+0x1ac/0x250
[ 1479.550295][T27101]  ksys_write+0x150/0x270
[ 1479.550322][T27101]  ? __pfx_ksys_write+0x10/0x10
[ 1479.550356][T27101]  do_syscall_64+0x166/0x520
[ 1479.550379][T27101]  ? trace_irq_disable+0x3b/0x140
[ 1479.550396][T27101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.550413][T27101]  ? clear_bhb_loop+0x70/0xc0
[ 1479.550434][T27101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.550450][T27101] RIP: 0033:0x7f6712f9e559
[ 1479.550466][T27101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1479.550480][T27101] RSP: 002b:00007f6713d9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1479.550497][T27101] RAX: ffffffffffffffda RBX: 00007f6713225fa0 RCX: 00007f6712f9e559
[ 1479.550509][T27101] RDX: 0000000000000016 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1479.550520][T27101] RBP: 00007f6713d9b090 R08: 0000000000000000 R09: 0000000000000000
[ 1479.550530][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1479.550540][T27101] R13: 00007f6713226038 R14: 00007f6713225fa0 R15: 00007fff7fb5d888
[ 1479.550566][T27101]  </TASK>
[ 1480.084507][T27108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.084858][T27108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.085776][ T4941] blk_print_req_error: 17 callbacks suppressed
[ 1480.085790][ T4941] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.085811][ T4941] buffer_io_error: 6 callbacks suppressed
[ 1480.085820][ T4941] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1480.087873][ T4941] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.087896][ T4941] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1480.088039][ T4941] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088059][ T4941] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1480.088139][ T4941] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088158][ T4941] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1480.088246][ T4941] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088266][ T4941] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1480.088341][ T4941] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088360][ T4941] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1480.088434][ T4941] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088454][ T4941] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1480.088528][ T4941] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088548][ T4941] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1480.088638][ T4941] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088658][ T4941] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1480.088733][ T4941] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1480.088753][ T4941] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1480.154965][T27108] ldm_validate_partition_table(): Disk read failed.
[ 1480.227182][ T9456] usb 9-1: new high-speed USB device number 110 using dummy_hcd
[ 1480.257959][T27108] Dev nbd0: unable to read RDB block 0
[ 1480.317977][T27108]  nbd0: unable to read partition table
[ 1480.362018][T27108] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[ 1480.363957][ T5601] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[ 1480.381793][T27108] dummy0: entered allmulticast mode
[ 1480.434574][ T9456] usb 9-1: Using ep0 maxpacket: 32
[ 1480.435123][ T9456] usb 9-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1480.436730][ T9456] usb 9-1: config 0 has an invalid interface number: 146 but max is 0
[ 1480.436749][ T9456] usb 9-1: config 0 has no interface number 0
[ 1480.436778][ T9456] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1480.436794][ T9456] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1480.436813][ T9456] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1480.436842][ T9456] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1480.436860][ T9456] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1480.436879][ T9456] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1480.436896][ T9456] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1480.436913][ T9456] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1480.436930][ T9456] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1480.459805][ T9456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.459826][ T9456] usb 9-1: Product: syz
[ 1480.459837][ T9456] usb 9-1: Manufacturer: syz
[ 1480.459848][ T9456] usb 9-1: SerialNumber: syz
[ 1480.554553][ T5601] usb 1-1: device descriptor read/64, error -71
[ 1480.575201][T27110] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[ 1480.599513][ T9456] usb 9-1: config 0 descriptor??
[ 1480.605229][T27103] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1480.634108][ T9456] usb 9-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1480.634127][ T9456] usb 9-1: couldn't find an output bulk endpoint. Bailing out.
[ 1480.793833][ T5601] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 1480.888368][T27114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.889714][T27114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.923918][ T5601] usb 1-1: device descriptor read/64, error -71
[ 1480.973986][ T9456] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1481.004750][ T5718] usb 9-1: USB disconnect, device number 110
[ 1481.034214][ T5601] usb usb1-port1: attempt power cycle
[ 1481.125705][ T9456] usb 10-1: Using ep0 maxpacket: 32
[ 1481.129876][ T9456] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1481.129914][ T9456] usb 10-1: New USB device found: idVendor=04e2, idProduct=1412, bcdDevice=9d.bb
[ 1481.131704][ T9456] usb 10-1: config 1 has an invalid interface number: 128 but max is 0
[ 1481.131724][ T9456] usb 10-1: config 1 has no interface number 0
[ 1481.131747][ T9456] usb 10-1: config 1 interface 128 has no altsetting 0
[ 1481.186964][ T9456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.186986][ T9456] usb 10-1: Product: syz
[ 1481.186997][ T9456] usb 10-1: Manufacturer: syz
[ 1481.187009][ T9456] usb 10-1: SerialNumber: syz
[ 1481.383942][ T5601] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[ 1481.406308][T27112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.417164][ T5601] usb 1-1: device descriptor read/8, error -71
[ 1481.418367][T27112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1481.422130][T27112] FAULT_INJECTION: forcing a failure.
[ 1481.422130][T27112] name failslab, interval 1, probability 5, space 10, times 9861
[ 1481.422156][T27112] CPU: 0 UID: 0 PID: 27112 Comm: syz.9.6090 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1481.422180][T27112] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1481.422187][T27112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1481.422197][T27112] Call Trace:
[ 1481.422204][T27112]  <TASK>
[ 1481.422211][T27112]  dump_stack_lvl+0xe8/0x150
[ 1481.422241][T27112]  should_fail_ex+0x3eb/0x540
[ 1481.422277][T27112]  should_failslab+0xa8/0x100
[ 1481.422297][T27112]  __kmalloc_noprof+0xf9/0x710
[ 1481.422321][T27112]  ? __memcg_list_lru_alloc+0x1d9/0x760
[ 1481.422343][T27112]  ? __memcg_list_lru_alloc+0x1d9/0x760
[ 1481.422372][T27112]  __memcg_list_lru_alloc+0x1d9/0x760
[ 1481.422399][T27112]  ? xa_load+0x60/0x210
[ 1481.422424][T27112]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[ 1481.422460][T27112]  __memcg_slab_post_alloc_hook+0x3b2/0xdb0
[ 1481.422491][T27112]  ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0
[ 1481.422530][T27112]  kmem_cache_alloc_lru_noprof+0x34c/0x5f0
[ 1481.422553][T27112]  ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0
[ 1481.422576][T27112]  ? __d_alloc+0x37/0x820
[ 1481.422600][T27112]  ? __d_alloc+0x37/0x820
[ 1481.422629][T27112]  __d_alloc+0x37/0x820
[ 1481.422658][T27112]  d_make_root+0x41/0x80
[ 1481.422673][T27112]  kernfs_get_tree+0x5e9/0x980
[ 1481.422706][T27112]  ? __pfx_kernfs_get_tree+0x10/0x10
[ 1481.422733][T27112]  ? apparmor_capable+0x126/0x170
[ 1481.422753][T27112]  ? bpf_lsm_capable+0x9/0x20
[ 1481.422776][T27112]  vfs_get_tree+0x92/0x2a0
[ 1481.422794][T27112]  do_new_mount+0x325/0xb00
[ 1481.422822][T27112]  ? __pfx_do_new_mount+0x10/0x10
[ 1481.422847][T27112]  ? ns_capable+0x84/0xe0
[ 1481.422866][T27112]  ? path_mount+0x647/0x1050
[ 1481.422892][T27112]  ? user_path_at+0xd4/0x160
[ 1481.422920][T27112]  __se_sys_mount+0x31d/0x420
[ 1481.422949][T27112]  ? __pfx___se_sys_mount+0x10/0x10
[ 1481.422978][T27112]  ? __x64_sys_mount+0x20/0xc0
[ 1481.423003][T27112]  do_syscall_64+0x166/0x520
[ 1481.423025][T27112]  ? trace_irq_disable+0x3b/0x140
[ 1481.423043][T27112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.423060][T27112]  ? clear_bhb_loop+0x70/0xc0
[ 1481.423080][T27112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.423097][T27112] RIP: 0033:0x7f8ef139e559
[ 1481.423112][T27112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1481.423126][T27112] RSP: 002b:00007f8ef22c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1481.423144][T27112] RAX: ffffffffffffffda RBX: 00007f8ef1625fa0 RCX: 00007f8ef139e559
[ 1481.423157][T27112] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000
[ 1481.423168][T27112] RBP: 00007f8ef1435ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1481.423179][T27112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1481.423189][T27112] R13: 00007f8ef1626038 R14: 00007f8ef1625fa0 R15: 00007ffe28438138
[ 1481.423215][T27112]  </TASK>
[ 1481.709370][ T5601] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[ 1481.762124][ T5601] usb 1-1: device descriptor read/8, error -71
[ 1481.826841][ T9456] usb 10-1: USB disconnect, device number 60
[ 1481.864824][ T5601] usb usb1-port1: unable to enumerate USB device
[ 1482.117045][T27119] FAULT_INJECTION: forcing a failure.
[ 1482.117045][T27119] name failslab, interval 1, probability 5, space 10, times 9860
[ 1482.117075][T27119] CPU: 0 UID: 0 PID: 27119 Comm: syz.1.6092 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1482.117100][T27119] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1482.117107][T27119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1482.117118][T27119] Call Trace:
[ 1482.117125][T27119]  <TASK>
[ 1482.117132][T27119]  dump_stack_lvl+0xe8/0x150
[ 1482.117178][T27119]  should_fail_ex+0x3eb/0x540
[ 1482.117206][T27119]  should_failslab+0xa8/0x100
[ 1482.117226][T27119]  __kmalloc_cache_noprof+0x9e/0x600
[ 1482.117251][T27119]  ? __se_sys_fspick+0x203/0x3c0
[ 1482.117272][T27119]  ? __se_sys_fspick+0x203/0x3c0
[ 1482.117303][T27119]  __se_sys_fspick+0x203/0x3c0
[ 1482.117325][T27119]  ? __pfx___se_sys_fspick+0x10/0x10
[ 1482.117354][T27119]  do_syscall_64+0x166/0x520
[ 1482.117377][T27119]  ? trace_irq_disable+0x3b/0x140
[ 1482.117396][T27119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.117414][T27119]  ? clear_bhb_loop+0x70/0xc0
[ 1482.117434][T27119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.117451][T27119] RIP: 0033:0x7fd22679e559
[ 1482.117466][T27119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1482.117480][T27119] RSP: 002b:00007fd2249f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[ 1482.117498][T27119] RAX: ffffffffffffffda RBX: 00007fd226a25fa0 RCX: 00007fd22679e559
[ 1482.117511][T27119] RDX: 0000000000000000 RSI: 0000200000002d40 RDI: ffffffffffffff9c
[ 1482.117522][T27119] RBP: 00007fd226835ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1482.117533][T27119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1482.117543][T27119] R13: 00007fd226a26038 R14: 00007fd226a25fa0 R15: 00007ffd0b0a9708
[ 1482.117569][T27119]  </TASK>
[ 1482.121426][T27119] random: crng reseeded on system resumption
[ 1482.557595][T27124] 9p: Could not find request transport: xen
[ 1482.578159][ T9456] usb 9-1: new low-speed USB device number 111 using dummy_hcd
[ 1482.607080][T27128] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6093'.
[ 1482.607205][T27128] FAULT_INJECTION: forcing a failure.
[ 1482.607205][T27128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1482.607228][T27128] CPU: 0 UID: 0 PID: 27128 Comm: syz.9.6093 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1482.607252][T27128] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1482.607259][T27128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1482.607269][T27128] Call Trace:
[ 1482.607276][T27128]  <TASK>
[ 1482.607283][T27128]  dump_stack_lvl+0xe8/0x150
[ 1482.607310][T27128]  should_fail_ex+0x3eb/0x540
[ 1482.607337][T27128]  _copy_to_user+0x31/0xb0
[ 1482.607362][T27128]  simple_read_from_buffer+0xe1/0x170
[ 1482.607391][T27128]  proc_fail_nth_read+0x1bb/0x230
[ 1482.607411][T27128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1482.607432][T27128]  ? rw_verify_area+0x24a/0x4c0
[ 1482.607457][T27128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1482.607474][T27128]  vfs_read+0x213/0xa80
[ 1482.607502][T27128]  ? __pfx___mutex_lock+0x10/0x10
[ 1482.607525][T27128]  ? __pfx_vfs_read+0x10/0x10
[ 1482.607550][T27128]  ? __fget_files+0x2a/0x420
[ 1482.607572][T27128]  ? __fget_files+0x3a2/0x420
[ 1482.607594][T27128]  ? __fget_files+0x2a/0x420
[ 1482.607620][T27128]  ? fdget+0x1ac/0x250
[ 1482.607647][T27128]  ksys_read+0x150/0x270
[ 1482.607673][T27128]  ? __pfx_ksys_read+0x10/0x10
[ 1482.607706][T27128]  do_syscall_64+0x166/0x520
[ 1482.607727][T27128]  ? trace_irq_disable+0x3b/0x140
[ 1482.607744][T27128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.607761][T27128]  ? clear_bhb_loop+0x70/0xc0
[ 1482.607781][T27128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.607797][T27128] RIP: 0033:0x7f8ef135ed8e
[ 1482.607812][T27128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1482.607826][T27128] RSP: 002b:00007f8ef22c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1482.607844][T27128] RAX: ffffffffffffffda RBX: 00007f8ef22c76c0 RCX: 00007f8ef135ed8e
[ 1482.607856][T27128] RDX: 000000000000000f RSI: 00007f8ef22c70a0 RDI: 0000000000000004
[ 1482.607867][T27128] RBP: 00007f8ef22c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1482.607878][T27128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1482.607888][T27128] R13: 00007f8ef1626038 R14: 00007f8ef1625fa0 R15: 00007ffe28438138
[ 1482.607913][T27128]  </TASK>
[ 1482.744538][ T9456] usb 9-1: New USB device found: idVendor=1b3d, idProduct=0197, bcdDevice=ad.42
[ 1482.756334][ T9456] usb 9-1: config 6 has an invalid interface number: 113 but max is 0
[ 1482.756355][ T9456] usb 9-1: config 6 has no interface number 0
[ 1482.772541][ T9456] usb 9-1: string descriptor 0 read error: -22
[ 1482.772636][ T9456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.862564][ T9456] ftdi_sio 9-1:6.113: FTDI USB Serial Device converter detected
[ 1482.863616][ T9456] ftdi_sio ttyUSB0: unknown device type: 0xad42
[ 1483.115910][ T5718] usb 9-1: USB disconnect, device number 111
[ 1483.120233][ T5718] ftdi_sio 9-1:6.113: device disconnected
[ 1483.193013][T27108] dummy0: left allmulticast mode
[ 1483.222549][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6095'.
[ 1483.222569][T27134] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6095'.
[ 1483.391196][T27138] Bluetooth: MGMT ver 1.23
[ 1483.573759][ T5718] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1483.703617][ T5718] usb 10-1: device descriptor read/64, error -71
[ 1483.769990][T27145] netlink: 'syz.0.6100': attribute type 1 has an invalid length.
[ 1483.770008][T27145] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6100'.
[ 1483.791917][ T5601] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1483.943765][ T5718] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1483.943911][ T5601] usb 2-1: Using ep0 maxpacket: 32
[ 1483.944963][ T5601] usb 2-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1483.946412][ T5601] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[ 1483.946432][ T5601] usb 2-1: config 0 has no interface number 0
[ 1483.946461][ T5601] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1483.946477][ T5601] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1483.946497][ T5601] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1483.946517][ T5601] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1483.946535][ T5601] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1483.946554][ T5601] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1483.946570][ T5601] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1483.946588][ T5601] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1483.946604][ T5601] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1483.948409][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.948428][ T5601] usb 2-1: Product: syz
[ 1483.948439][ T5601] usb 2-1: Manufacturer: syz
[ 1483.948451][ T5601] usb 2-1: SerialNumber: syz
[ 1483.950495][ T5601] usb 2-1: config 0 descriptor??
[ 1483.951181][T27143] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1483.952916][ T5601] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1483.952932][ T5601] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[ 1484.050229][T16341] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1484.081513][ T5718] usb 10-1: device descriptor read/64, error -71
[ 1484.183799][ T5718] usb usb10-port1: attempt power cycle
[ 1484.217049][T16341] usb 1-1: Using ep0 maxpacket: 32
[ 1484.217772][T16341] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1484.218723][T16341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1484.223854][T16341] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1484.223875][T16341] usb 1-1: Product: syz
[ 1484.223886][T16341] usb 1-1: Manufacturer: syz
[ 1484.223898][T16341] usb 1-1: SerialNumber: syz
[ 1484.252972][T16341] usb 1-1: config 0 descriptor??
[ 1484.254860][T27145] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1484.276779][T16341] hub 1-1:0.0: Interface 0 is not authorized for usage
[ 1484.307255][T16341] usbtest 1-1:0.0: Interface 0 is not authorized for usage
[ 1484.307476][T16341] chaoskey 1-1:0.0: Interface 0 is not authorized for usage
[ 1484.342497][T27151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1484.342834][T27151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1484.524003][ T5718] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1484.532577][T16341] usb 1-1: USB disconnect, device number 38
[ 1484.550626][ T5718] usb 10-1: device descriptor read/8, error -71
[ 1484.582437][ T5601] usb 2-1: USB disconnect, device number 72
[ 1484.783578][ T5718] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1484.804461][ T5718] usb 10-1: device descriptor read/8, error -71
[ 1484.913637][ T5718] usb usb10-port1: unable to enumerate USB device
[ 1485.473531][ T5718] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1485.561242][T27163] input: syz0 as /devices/virtual/input/input135
[ 1485.628475][ T5718] usb 1-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00
[ 1485.630004][ T5718] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1485.630023][ T5718] usb 1-1: config 1 has no interface number 0
[ 1485.630051][ T5718] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1485.630072][ T5718] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 63
[ 1485.630091][ T5718] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1485.700583][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.700615][ T5718] usb 1-1: Product: syz
[ 1485.700628][ T5718] usb 1-1: Manufacturer: syz
[ 1485.700641][ T5718] usb 1-1: SerialNumber: syz
[ 1485.731510][T27157] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1485.745238][ T5718] sierra_net 1-1:1.7: Interface 7 is not authorized for usage
[ 1485.745946][ T5718] usbtest 1-1:1.7: Interface 7 is not authorized for usage
[ 1486.331646][T27172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.331990][T27172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.378292][T22229] Bluetooth: hci0: unexpected event 0x3e length: 1004 > 255
[ 1486.378315][T22229] Bluetooth: hci0: unexpected subevent 0x0d length: 1003 > 254
[ 1486.404595][T27171] FAULT_INJECTION: forcing a failure.
[ 1486.404595][T27171] name failslab, interval 1, probability 5, space 10, times 9859
[ 1486.404624][T27171] CPU: 0 UID: 0 PID: 27171 Comm: syz.9.6110 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1486.404649][T27171] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1486.404656][T27171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1486.404666][T27171] Call Trace:
[ 1486.404672][T27171]  <TASK>
[ 1486.404679][T27171]  dump_stack_lvl+0xe8/0x150
[ 1486.404706][T27171]  should_fail_ex+0x3eb/0x540
[ 1486.404738][T27171]  should_failslab+0xa8/0x100
[ 1486.404757][T27171]  ? security_file_alloc+0x34/0x310
[ 1486.404777][T27171]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1486.404808][T27171]  ? rcu_is_watching+0x16/0xb0
[ 1486.404829][T27171]  ? security_file_alloc+0x34/0x310
[ 1486.404853][T27171]  security_file_alloc+0x34/0x310
[ 1486.404874][T27171]  init_file+0x90/0x2b0
[ 1486.404897][T27171]  alloc_empty_file+0x74/0x1d0
[ 1486.404919][T27171]  path_openat+0x96/0x20f0
[ 1486.404950][T27171]  do_file_open+0x23e/0x4a0
[ 1486.404971][T27171]  ? __pfx_do_file_open+0x10/0x10
[ 1486.405003][T27171]  ? _raw_spin_unlock+0x28/0x50
[ 1486.405023][T27171]  ? alloc_fd+0x6af/0x760
[ 1486.405054][T27171]  do_sys_openat2+0x115/0x200
[ 1486.405075][T27171]  ? __se_sys_futex+0x3a8/0x450
[ 1486.405098][T27171]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1486.405123][T27171]  ? rcu_is_watching+0x16/0xb0
[ 1486.405147][T27171]  __x64_sys_openat+0x138/0x170
[ 1486.405172][T27171]  do_syscall_64+0x166/0x520
[ 1486.405194][T27171]  ? trace_irq_disable+0x3b/0x140
[ 1486.405212][T27171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.405229][T27171]  ? clear_bhb_loop+0x70/0xc0
[ 1486.405249][T27171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.405266][T27171] RIP: 0033:0x7f8ef139e559
[ 1486.405281][T27171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1486.405295][T27171] RSP: 002b:00007f8ef22c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1486.405313][T27171] RAX: ffffffffffffffda RBX: 00007f8ef1625fa0 RCX: 00007f8ef139e559
[ 1486.405326][T27171] RDX: 0000000000200000 RSI: 00002000000009c0 RDI: ffffffffffffff9c
[ 1486.405337][T27171] RBP: 00007f8ef1435ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1486.405348][T27171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1486.405358][T27171] R13: 00007f8ef1626038 R14: 00007f8ef1625fa0 R15: 00007ffe28438138
[ 1486.405384][T27171]  </TASK>
[ 1486.797079][T27176] gfs2: not a GFS2 filesystem
[ 1487.187075][T27182] FAULT_INJECTION: forcing a failure.
[ 1487.187075][T27182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1487.187103][T27182] CPU: 0 UID: 0 PID: 27182 Comm: syz.9.6113 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1487.187126][T27182] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1487.187134][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1487.187144][T27182] Call Trace:
[ 1487.187150][T27182]  <TASK>
[ 1487.187157][T27182]  dump_stack_lvl+0xe8/0x150
[ 1487.187185][T27182]  should_fail_ex+0x3eb/0x540
[ 1487.187211][T27182]  _copy_from_user+0x2d/0xb0
[ 1487.187235][T27182]  io_submit_one+0xd2/0x13d0
[ 1487.187259][T27182]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1487.187283][T27182]  ? irqentry_exit+0x2a0/0x9b0
[ 1487.187307][T27182]  ? __pfx_io_submit_one+0x10/0x10
[ 1487.187324][T27182]  ? lock_acquire+0x115/0x350
[ 1487.187351][T27182]  ? __might_fault+0xaf/0x130
[ 1487.187372][T27182]  __se_sys_io_submit+0x195/0x340
[ 1487.187390][T27182]  ? __pfx___se_sys_io_submit+0x10/0x10
[ 1487.187405][T27182]  ? ksys_write+0x242/0x270
[ 1487.187442][T27182]  do_syscall_64+0x166/0x520
[ 1487.187463][T27182]  ? trace_irq_disable+0x3b/0x140
[ 1487.187481][T27182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1487.187497][T27182]  ? clear_bhb_loop+0x70/0xc0
[ 1487.187517][T27182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1487.187532][T27182] RIP: 0033:0x7f8ef139e559
[ 1487.187548][T27182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1487.187562][T27182] RSP: 002b:00007f8ef22c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1487.187579][T27182] RAX: ffffffffffffffda RBX: 00007f8ef1625fa0 RCX: 00007f8ef139e559
[ 1487.187591][T27182] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 00007f8ef22a5000
[ 1487.187602][T27182] RBP: 00007f8ef22c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1487.187613][T27182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1487.187623][T27182] R13: 00007f8ef1626038 R14: 00007f8ef1625fa0 R15: 00007ffe28438138
[ 1487.187657][T27182]  </TASK>
[ 1487.202634][T16341] usb 9-1: new high-speed USB device number 112 using dummy_hcd
[ 1487.393223][T16341] usb 9-1: Using ep0 maxpacket: 32
[ 1487.441955][T16341] usb 9-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1487.442856][T16341] usb 9-1: config 0 has an invalid interface number: 146 but max is 0
[ 1487.442875][T16341] usb 9-1: config 0 has no interface number 0
[ 1487.464851][T16341] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1487.464872][T16341] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1487.464893][T16341] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1487.464913][T16341] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1487.464931][T16341] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1487.464950][T16341] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1487.464966][T16341] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1487.464984][T16341] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1487.465000][T16341] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1487.598733][T16341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.598755][T16341] usb 9-1: Product: syz
[ 1487.598766][T16341] usb 9-1: Manufacturer: syz
[ 1487.598777][T16341] usb 9-1: SerialNumber: syz
[ 1487.629967][T16341] usb 9-1: config 0 descriptor??
[ 1487.630908][T27179] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1487.651180][T16341] usb 9-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1487.651200][T16341] usb 9-1: couldn't find an output bulk endpoint. Bailing out.
[ 1487.930169][T27190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.930516][T27190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.207475][ T5718] usb 9-1: USB disconnect, device number 112
[ 1488.306986][ T5601] usb 1-1: USB disconnect, device number 39
[ 1488.355895][T27197] FAULT_INJECTION: forcing a failure.
[ 1488.355895][T27197] name failslab, interval 1, probability 5, space 10, times 9858
[ 1488.355923][T27197] CPU: 0 UID: 0 PID: 27197 Comm: syz.9.6117 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1488.355947][T27197] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1488.355954][T27197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1488.355964][T27197] Call Trace:
[ 1488.355971][T27197]  <TASK>
[ 1488.355979][T27197]  dump_stack_lvl+0xe8/0x150
[ 1488.356005][T27197]  should_fail_ex+0x3eb/0x540
[ 1488.356030][T27197]  ? __alloc_skb+0x1db/0x7a0
[ 1488.356051][T27197]  should_failslab+0xa8/0x100
[ 1488.356069][T27197]  ? __alloc_skb+0x1db/0x7a0
[ 1488.356087][T27197]  kmem_cache_alloc_node_noprof+0x9c/0x600
[ 1488.356109][T27197]  ? __alloc_skb+0x18d/0x7a0
[ 1488.356129][T27197]  ? __alloc_skb+0x1db/0x7a0
[ 1488.356153][T27197]  __alloc_skb+0x1db/0x7a0
[ 1488.356176][T27197]  netlink_sendmsg+0x5cd/0xb20
[ 1488.356200][T27197]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1488.356221][T27197]  ? aa_sock_msg_perm+0x144/0x210
[ 1488.356248][T27197]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1488.356270][T27197]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1488.356287][T27197]  sock_sendmsg_nosec+0x14e/0x190
[ 1488.356308][T27197]  ____sys_sendmsg+0x54e/0x850
[ 1488.356336][T27197]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1488.356365][T27197]  ? import_iovec+0x73/0xa0
[ 1488.356391][T27197]  ___sys_sendmsg+0x2a5/0x360
[ 1488.356412][T27197]  ? __lock_acquire+0x747/0x2de0
[ 1488.356432][T27197]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1488.356493][T27197]  ? __fget_files+0x3a2/0x420
[ 1488.356517][T27197]  ? __fget_files+0x2a/0x420
[ 1488.356547][T27197]  __x64_sys_sendmsg+0x1b1/0x290
[ 1488.356573][T27197]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1488.356612][T27197]  do_syscall_64+0x166/0x520
[ 1488.356635][T27197]  ? trace_irq_disable+0x3b/0x140
[ 1488.356653][T27197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.356669][T27197]  ? clear_bhb_loop+0x70/0xc0
[ 1488.356695][T27197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.356712][T27197] RIP: 0033:0x7f8ef139e559
[ 1488.356728][T27197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.356743][T27197] RSP: 002b:00007f8ef22c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1488.356761][T27197] RAX: ffffffffffffffda RBX: 00007f8ef1625fa0 RCX: 00007f8ef139e559
[ 1488.356773][T27197] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1488.356784][T27197] RBP: 00007f8ef22c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.356794][T27197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1488.356804][T27197] R13: 00007f8ef1626038 R14: 00007f8ef1625fa0 R15: 00007ffe28438138
[ 1488.356829][T27197]  </TASK>
[ 1488.778550][T27201] netlink: 'syz.0.6119': attribute type 1 has an invalid length.
[ 1488.781465][T27201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6119'.
[ 1488.815039][T27201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6119'.
[ 1489.070147][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6121'.
[ 1489.193088][ T5718] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1489.255229][T27211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6123'.
[ 1489.358346][ T5718] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 1489.362107][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1489.362144][ T5718] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1489.362186][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1489.501300][T27217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6125'.
[ 1489.501324][T27217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6125'.
[ 1489.501371][T27217] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[ 1489.534873][T27217] ./mnt: Can't lookup blockdev
[ 1489.878815][ T5718] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -71
[ 1489.907153][ T5718] usb 2-1: USB disconnect, device number 73
[ 1490.032730][T16341] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1490.184065][T16341] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[ 1490.184931][T16341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1490.184954][T16341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1490.184971][T16341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1490.185003][T16341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.191622][T16341] usb 1-1: config 0 descriptor??
[ 1490.240207][ T5601] usb 9-1: new high-speed USB device number 113 using dummy_hcd
[ 1490.272117][T16341] usbtest 1-1:0.0: Interface 0 is not authorized for usage
[ 1490.281455][T16341] usbhid 1-1:0.0: Interface 0 is not authorized for usage
[ 1490.415597][ T5601] usb 9-1: Using ep0 maxpacket: 32
[ 1490.416495][ T5601] usb 9-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1490.417329][ T5601] usb 9-1: config 0 has an invalid interface number: 146 but max is 0
[ 1490.417347][ T5601] usb 9-1: config 0 has no interface number 0
[ 1490.417375][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1490.417392][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1490.417412][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1490.417432][ T5601] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1490.417451][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1490.417470][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1490.417486][ T5601] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1490.417505][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1490.417521][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1490.420141][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.420160][ T5601] usb 9-1: Product: syz
[ 1490.420171][ T5601] usb 9-1: Manufacturer: syz
[ 1490.420182][ T5601] usb 9-1: SerialNumber: syz
[ 1490.516558][ T5601] usb 9-1: config 0 descriptor??
[ 1490.574468][T27228] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1490.608307][ T5601] usb 9-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1490.608326][ T5601] usb 9-1: couldn't find an output bulk endpoint. Bailing out.
[ 1490.737358][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6130'.
[ 1490.861209][T27233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1490.876061][T27233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1490.929857][   T33] audit: type=1807 audit(1792227243.183:696): action=measure uid>+ res=0
[ 1490.930011][   T33] audit: type=1802 audit(1792227243.183:697): pid=27235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.6131" res=0 errno=-22
[ 1491.067593][ T5601] usb 9-1: USB disconnect, device number 113
[ 1491.161966][T27234] ima: policy update failed
[ 1491.162127][   T33] audit: type=1802 audit(1792227243.413:698): pid=27234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6131" res=0 errno=-22
[ 1491.416345][T27250] unsupported nlmsg_type 40
[ 1491.500481][T27252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.500854][T27252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.634324][T27258] syzkaller0: entered allmulticast mode
[ 1491.662709][ T5601] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1491.822676][ T5601] usb 2-1: Using ep0 maxpacket: 16
[ 1491.830390][ T5601] usb 2-1: New USB device found: idVendor=0547, idProduct=6801, bcdDevice=f3.70
[ 1491.830423][ T5601] usb 2-1: too many configurations: 179, using maximum allowed: 8
[ 1491.857629][ T5601] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1491.857657][ T5601] usb 2-1: can't read configurations, error -61
[ 1491.886535][T27254] syzkaller0 (unregistering): left allmulticast mode
[ 1491.983268][ T5601] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1492.132559][ T5601] usb 2-1: Using ep0 maxpacket: 16
[ 1492.133207][ T5601] usb 2-1: New USB device found: idVendor=0547, idProduct=6801, bcdDevice=f3.70
[ 1492.133236][ T5601] usb 2-1: too many configurations: 179, using maximum allowed: 8
[ 1492.134440][ T5601] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1492.134465][ T5601] usb 2-1: can't read configurations, error -61
[ 1492.134702][ T5601] usb usb2-port1: attempt power cycle
[ 1492.299258][T27264] MTD: Couldn't look up './file0': -15
[ 1492.330330][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6136'.
[ 1492.473926][ T5601] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1492.495297][ T5601] usb 2-1: Using ep0 maxpacket: 16
[ 1492.497163][ T5601] usb 2-1: New USB device found: idVendor=0547, idProduct=6801, bcdDevice=f3.70
[ 1492.497194][ T5601] usb 2-1: too many configurations: 179, using maximum allowed: 8
[ 1492.498677][ T5601] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1492.498703][ T5601] usb 2-1: can't read configurations, error -61
[ 1492.603929][ T9456] usb 10-1: new full-speed USB device number 65 using dummy_hcd
[ 1492.622395][ T5601] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1492.644768][ T5601] usb 2-1: Using ep0 maxpacket: 16
[ 1492.646195][ T5601] usb 2-1: New USB device found: idVendor=0547, idProduct=6801, bcdDevice=f3.70
[ 1492.646224][ T5601] usb 2-1: too many configurations: 179, using maximum allowed: 8
[ 1492.647465][ T5601] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1492.647490][ T5601] usb 2-1: can't read configurations, error -61
[ 1492.647723][ T5601] usb usb2-port1: unable to enumerate USB device
[ 1492.775917][ T9456] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1492.776446][ T9456] usb 10-1: not running at top speed; connect to a high speed hub
[ 1492.776470][ T9456] usb 10-1: New USB device found: idVendor=14f7, idProduct=0004, bcdDevice=4.6f
[ 1492.778772][ T9456] usb 10-1: config 6 has an invalid interface number: 201 but max is 0
[ 1492.778791][ T9456] usb 10-1: config 6 has no interface number 0
[ 1492.778812][ T9456] usb 10-1: config 6 interface 201 has no altsetting 0
[ 1492.821997][ T9456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.822019][ T9456] usb 10-1: Product: syz
[ 1492.822031][ T9456] usb 10-1: Manufacturer: syz
[ 1492.822043][ T9456] usb 10-1: SerialNumber: syz
[ 1492.836867][T16341] usb 9-1: new high-speed USB device number 114 using dummy_hcd
[ 1492.981385][ T5718] usb 1-1: USB disconnect, device number 40
[ 1492.990380][T16341] usb 9-1: Using ep0 maxpacket: 8
[ 1492.991189][T16341] usb 9-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1493.011203][T16341] usb 9-1: config index 0 descriptor too short (expected 12336, got 18)
[ 1493.011225][T16341] usb 9-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1493.011241][T16341] usb 9-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[ 1493.011260][T16341] usb 9-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1493.061163][T16341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.061184][T16341] usb 9-1: Product: syz
[ 1493.061196][T16341] usb 9-1: Manufacturer: syz
[ 1493.061208][T16341] usb 9-1: SerialNumber: syz
[ 1493.304378][ T9456] hub 10-1:6.201: bad descriptor, ignoring hub
[ 1493.304401][ T9456] hub 10-1:6.201: probe with driver hub failed with error -5
[ 1493.407831][T27267] FAULT_INJECTION: forcing a failure.
[ 1493.407831][T27267] name failslab, interval 1, probability 5, space 10, times 9857
[ 1493.407881][T27267] CPU: 0 UID: 0 PID: 27267 Comm: syz.8.6135 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1493.407906][T27267] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1493.407914][T27267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1493.407925][T27267] Call Trace:
[ 1493.407932][T27267]  <TASK>
[ 1493.407939][T27267]  dump_stack_lvl+0xe8/0x150
[ 1493.407967][T27267]  should_fail_ex+0x3eb/0x540
[ 1493.407997][T27267]  should_failslab+0xa8/0x100
[ 1493.408017][T27267]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[ 1493.408049][T27267]  ? alloc_inode+0xb8/0x1b0
[ 1493.408070][T27267]  ? alloc_inode+0xb8/0x1b0
[ 1493.408096][T27267]  alloc_inode+0xb8/0x1b0
[ 1493.408119][T27267]  new_inode+0x1f/0x170
[ 1493.408145][T27267]  rust_binderfs_create_proc_file+0x144/0x480
[ 1493.408295][T27267]  ? __pfx_rust_binderfs_create_proc_file+0x10/0x10
[ 1493.408322][T27267]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1493.408345][T27267]  ? _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessENtNtB7_9allocator8KVmallocE30push_within_capacity_uncheckedB1g_+0x201/0x2b0
[ 1493.408389][T27267]  _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10e9/0x1760
[ 1493.408427][T27267]  ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10
[ 1493.408459][T27267]  ? apparmor_file_open+0x523/0x6c0
[ 1493.408486][T27267]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1493.408507][T27267]  ? fsnotify_open_perm_and_set_mode+0x13c/0x6b0
[ 1493.408526][T27267]  ? devcgroup_check_permission+0x31/0x8f0
[ 1493.408548][T27267]  ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10
[ 1493.408576][T27267]  do_dentry_open+0x80e/0x1360
[ 1493.408605][T27267]  vfs_open_consume+0x4a/0x350
[ 1493.408624][T27267]  ? path_openat+0x16e1/0x20f0
[ 1493.408642][T27267]  path_openat+0x16fc/0x20f0
[ 1493.408672][T27267]  do_file_open+0x23e/0x4a0
[ 1493.408693][T27267]  ? __pfx_do_file_open+0x10/0x10
[ 1493.408725][T27267]  ? _raw_spin_unlock+0x28/0x50
[ 1493.408743][T27267]  ? alloc_fd+0x6af/0x760
[ 1493.408774][T27267]  do_sys_openat2+0x115/0x200
[ 1493.408795][T27267]  ? __se_sys_futex+0x3a8/0x450
[ 1493.408818][T27267]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1493.408844][T27267]  ? rcu_is_watching+0x16/0xb0
[ 1493.408868][T27267]  __x64_sys_openat+0x138/0x170
[ 1493.408894][T27267]  do_syscall_64+0x166/0x520
[ 1493.408916][T27267]  ? trace_irq_disable+0x3b/0x140
[ 1493.408934][T27267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1493.408951][T27267]  ? clear_bhb_loop+0x70/0xc0
[ 1493.408972][T27267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1493.408988][T27267] RIP: 0033:0x7f6712f9e559
[ 1493.409004][T27267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1493.409025][T27267] RSP: 002b:00007f67111f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1493.409044][T27267] RAX: ffffffffffffffda RBX: 00007f6713226090 RCX: 00007f6712f9e559
[ 1493.409057][T27267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1493.409069][T27267] RBP: 00007f6713035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1493.409079][T27267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1493.409089][T27267] R13: 00007f6713226128 R14: 00007f6713226090 R15: 00007fff7fb5d888
[ 1493.409114][T27267]  </TASK>
[ 1493.579158][ T9456] dvb-usb: found a 'TechniSat AirStar TeleStick 2' in warm state.
[ 1493.889661][ T9456] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1493.891587][ T9456] dvbdev: DVB: registering new adapter (TechniSat AirStar TeleStick 2)
[ 1493.891627][ T9456] usb 10-1: media controller created
[ 1493.929797][ T9456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1494.124662][ T9456] DVB: Unable to find symbol dib7000p_attach()
[ 1494.124677][ T9456] dvb-usb: no frontend was attached by 'TechniSat AirStar TeleStick 2'
[ 1494.345736][ T9456] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1494.345752][ T9456] Registered IR keymap rc-empty
[ 1494.345984][ T9456] dvb-usb: could not initialize remote control.
[ 1494.346009][ T9456] dvb-usb: TechniSat AirStar TeleStick 2 successfully initialized and connected.
[ 1494.395762][ T9456] usb 10-1: USB disconnect, device number 65
[ 1494.525489][ T9456] dvb-usb: TechniSat AirStar TeleStick 2 successfully deinitialized and disconnected.
[ 1495.292568][ T5601] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1495.356837][T16341] usb 9-1: USB disconnect, device number 114
[ 1495.452419][ T5601] usb 1-1: Using ep0 maxpacket: 32
[ 1495.453289][ T5601] usb 1-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1495.454586][ T5601] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1495.454609][ T5601] usb 1-1: config 0 has no interface number 0
[ 1495.454638][ T5601] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1495.454655][ T5601] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1495.454675][ T5601] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1495.454695][ T5601] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1495.454713][ T5601] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1495.454732][ T5601] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1495.454749][ T5601] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1495.454775][ T5601] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1495.454792][ T5601] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1495.459290][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.459309][ T5601] usb 1-1: Product: syz
[ 1495.459353][ T5601] usb 1-1: Manufacturer: syz
[ 1495.459364][ T5601] usb 1-1: SerialNumber: syz
[ 1495.610352][ T5601] usb 1-1: config 0 descriptor??
[ 1495.620443][T27283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1495.657501][ T5601] microtekX6 1-1:0.146: Interface 146 is not authorized for usage
[ 1495.677885][ T5601] usbtest 1-1:0.146: Interface 146 is not authorized for usage
[ 1495.929397][T27291] usb usb7: check_ctrlrecip: process 27291 (syz.9.6145) requesting ep 01 but needs 81
[ 1495.929422][T27291] usb usb7: usbfs: process 27291 (syz.9.6145) did not claim interface 0 before use
[ 1495.930664][T27292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1495.931007][T27292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1495.962840][T27291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1496.000352][T27291] FAULT_INJECTION: forcing a failure.
[ 1496.000352][T27291] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1496.000380][T27291] CPU: 0 UID: 0 PID: 27291 Comm: syz.9.6145 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1496.000414][T27291] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1496.000423][T27291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1496.000433][T27291] Call Trace:
[ 1496.000441][T27291]  <TASK>
[ 1496.000449][T27291]  dump_stack_lvl+0xe8/0x150
[ 1496.000476][T27291]  should_fail_ex+0x3eb/0x540
[ 1496.000505][T27291]  get_futex_key+0x1ab/0x1410
[ 1496.000536][T27291]  ? __pfx_get_futex_key+0x10/0x10
[ 1496.000555][T27291]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1496.000589][T27291]  futex_wake+0x119/0x5f0
[ 1496.000614][T27291]  ? __pfx_i_callback+0x10/0x10
[ 1496.000641][T27291]  ? __pfx_futex_wake+0x10/0x10
[ 1496.000697][T27291]  ? __destroy_inode+0x445/0x630
[ 1496.000722][T27291]  ? evict+0x987/0xb50
[ 1496.000742][T27291]  do_futex+0x458/0x4e0
[ 1496.000769][T27291]  ? __pfx_do_futex+0x10/0x10
[ 1496.000789][T27291]  ? do_raw_spin_unlock+0xf5/0x200
[ 1496.000819][T27291]  __se_sys_futex+0x3a8/0x450
[ 1496.000846][T27291]  ? __pfx___se_sys_futex+0x10/0x10
[ 1496.000875][T27291]  ? __x64_sys_futex+0x21/0xf0
[ 1496.000899][T27291]  do_syscall_64+0x166/0x520
[ 1496.000922][T27291]  ? trace_irq_disable+0x3b/0x140
[ 1496.000940][T27291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.000957][T27291]  ? clear_bhb_loop+0x70/0xc0
[ 1496.000977][T27291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.000993][T27291] RIP: 0033:0x7f8ef139e559
[ 1496.001009][T27291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1496.001024][T27291] RSP: 002b:00007f8ef22c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1496.001043][T27291] RAX: ffffffffffffffda RBX: 00007f8ef1625fa8 RCX: 00007f8ef139e559
[ 1496.001055][T27291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ef1625fac
[ 1496.001067][T27291] RBP: 00007f8ef1625fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 1496.001078][T27291] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1496.001090][T27291] R13: 00007f8ef1626038 R14: 00007ffe28438050 R15: 00007ffe28438138
[ 1496.001115][T27291]  </TASK>
[ 1496.311340][T27297] FAULT_INJECTION: forcing a failure.
[ 1496.311340][T27297] name failslab, interval 1, probability 5, space 10, times 9856
[ 1496.311369][T27297] CPU: 0 UID: 0 PID: 27297 Comm: syz.8.6146 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1496.311395][T27297] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1496.311402][T27297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1496.311413][T27297] Call Trace:
[ 1496.311419][T27297]  <TASK>
[ 1496.311427][T27297]  dump_stack_lvl+0xe8/0x150
[ 1496.311455][T27297]  should_fail_ex+0x3eb/0x540
[ 1496.311483][T27297]  should_failslab+0xa8/0x100
[ 1496.311504][T27297]  __kmalloc_noprof+0xf9/0x710
[ 1496.311528][T27297]  ? __memcg_list_lru_alloc+0x1d9/0x760
[ 1496.311550][T27297]  ? __memcg_list_lru_alloc+0x1d9/0x760
[ 1496.311578][T27297]  __memcg_list_lru_alloc+0x1d9/0x760
[ 1496.311607][T27297]  ? xa_load+0x60/0x210
[ 1496.311640][T27297]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[ 1496.311664][T27297]  ? xa_load+0x60/0x210
[ 1496.311701][T27297]  __memcg_slab_post_alloc_hook+0x3b2/0xdb0
[ 1496.311732][T27297]  ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0
[ 1496.311771][T27297]  kmem_cache_alloc_lru_noprof+0x34c/0x5f0
[ 1496.311794][T27297]  ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0
[ 1496.311817][T27297]  ? __d_alloc+0x37/0x820
[ 1496.311840][T27297]  ? __d_alloc+0x37/0x820
[ 1496.311870][T27297]  __d_alloc+0x37/0x820
[ 1496.311894][T27297]  ? _raw_spin_unlock+0x28/0x50
[ 1496.311915][T27297]  d_make_root+0x41/0x80
[ 1496.311930][T27297]  pseudo_fs_fill_super+0x2e4/0x440
[ 1496.311948][T27297]  ? __pfx_pseudo_fs_fill_super+0x10/0x10
[ 1496.311966][T27297]  get_tree_nodev+0xbb/0x150
[ 1496.311994][T27297]  vfs_get_tree+0x92/0x2a0
[ 1496.312012][T27297]  do_new_mount+0x325/0xb00
[ 1496.312040][T27297]  ? __pfx_do_new_mount+0x10/0x10
[ 1496.312064][T27297]  ? ns_capable+0x84/0xe0
[ 1496.312084][T27297]  ? path_mount+0x647/0x1050
[ 1496.312110][T27297]  ? user_path_at+0xd4/0x160
[ 1496.312137][T27297]  __se_sys_mount+0x31d/0x420
[ 1496.312165][T27297]  ? __pfx___se_sys_mount+0x10/0x10
[ 1496.312194][T27297]  ? __x64_sys_mount+0x20/0xc0
[ 1496.312220][T27297]  do_syscall_64+0x166/0x520
[ 1496.312241][T27297]  ? trace_irq_disable+0x3b/0x140
[ 1496.312260][T27297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.312277][T27297]  ? clear_bhb_loop+0x70/0xc0
[ 1496.312298][T27297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.312314][T27297] RIP: 0033:0x7f6712f9e559
[ 1496.312330][T27297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1496.312345][T27297] RSP: 002b:00007f6713d9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1496.312363][T27297] RAX: ffffffffffffffda RBX: 00007f6713225fa0 RCX: 00007f6712f9e559
[ 1496.312375][T27297] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 00002000000002c0
[ 1496.312387][T27297] RBP: 00007f6713035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1496.312398][T27297] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1496.312409][T27297] R13: 00007f6713226038 R14: 00007f6713225fa0 R15: 00007fff7fb5d888
[ 1496.312434][T27297]  </TASK>
[ 1496.859774][ T5601] usb 1-1: USB disconnect, device number 41
[ 1497.161984][T16341] usb 9-1: new high-speed USB device number 115 using dummy_hcd
[ 1497.211999][ T5723] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1497.313738][T16341] usb 9-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1497.314652][T16341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.316880][T16341] usb 9-1: config 0 descriptor??
[ 1497.364213][ T5723] usb 2-1: New USB device found: idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[ 1497.365144][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.403368][ T5723] pwc: Logitech/Cisco VT Camera webcam detected.
[ 1497.598174][T27310] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1497.612339][ T5723] pwc: Failed to set LED on/off time (-71)
[ 1497.616455][ T5723] pwc: send_video_command error -71
[ 1497.616470][ T5723] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1497.616568][ T5723] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71
[ 1497.657569][ T5723] usb 2-1: USB disconnect, device number 78
[ 1497.713050][T27312]   extrace-0138 ex_trace_point        : Method Begin [\_SB.LNKA._STA] execution.
[ 1497.713590][T27312]   extrace-0138 ex_trace_point        : Method Begin [\_SB.IQST] execution.
[ 1497.713680][T27312]   extrace-0174 ex_trace_args         :  8a
[ 1497.714404][T27312]   extrace-0138 ex_trace_point        : Method End [\_SB.IQST] execution.
[ 1497.719081][T27312]   extrace-0138 ex_trace_point        : Method End [\_SB.LNKA._STA] execution.
[ 1497.973841][T27315]   extrace-0138 ex_trace_point        : Method Begin [\_SB.LNKA._STA] execution.
[ 1497.974346][T27315]   extrace-0138 ex_trace_point        : Method Begin [\_SB.IQST] execution.
[ 1497.974445][T27315]   extrace-0174 ex_trace_args         :  8a
[ 1497.980753][T27315]   extrace-0138 ex_trace_point        : Method End [\_SB.IQST] execution.
[ 1497.980949][T27315]   extrace-0138 ex_trace_point        : Method End [\_SB.LNKA._STA] execution.
[ 1498.059117][T27318] random: crng reseeded on system resumption
[ 1498.080423][T16341] usb 9-1: Cannot read MAC address
[ 1498.080603][T16341] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1498.112913][T16341] usb 9-1: USB disconnect, device number 115
[ 1498.739339][   T33] audit: type=1800 audit(1792227250.974:699): pid=27315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.6152" name="/" dev="sysfs" ino=1 res=0 errno=-13
[ 1498.912247][T16341] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1499.062328][T16341] usb 2-1: Using ep0 maxpacket: 8
[ 1499.063135][T16341] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1499.063985][T16341] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1499.064032][T16341] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1499.064049][T16341] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1499.064068][T16341] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1499.064087][T16341] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1499.064118][T16341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.217971][T27334] FAULT_INJECTION: forcing a failure.
[ 1499.217971][T27334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1499.217999][T27334] CPU: 0 UID: 0 PID: 27334 Comm: syz.0.6159 Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1499.218024][T27334] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1499.218031][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1499.218044][T27334] Call Trace:
[ 1499.218051][T27334]  <TASK>
[ 1499.218058][T27334]  dump_stack_lvl+0xe8/0x150
[ 1499.218085][T27334]  should_fail_ex+0x3eb/0x540
[ 1499.218112][T27334]  _copy_from_user+0x2d/0xb0
[ 1499.218137][T27334]  ___sys_sendmsg+0x1c6/0x360
[ 1499.218160][T27334]  ? __lock_acquire+0x747/0x2de0
[ 1499.218180][T27334]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1499.218229][T27334]  ? __fget_files+0x3a2/0x420
[ 1499.218253][T27334]  ? __fget_files+0x2a/0x420
[ 1499.218288][T27334]  __x64_sys_sendmsg+0x1b1/0x290
[ 1499.218314][T27334]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1499.218353][T27334]  do_syscall_64+0x166/0x520
[ 1499.218375][T27334]  ? trace_irq_disable+0x3b/0x140
[ 1499.218393][T27334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.218409][T27334]  ? clear_bhb_loop+0x70/0xc0
[ 1499.218428][T27334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.218444][T27334] RIP: 0033:0x7fa91d59e559
[ 1499.218459][T27334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1499.218473][T27334] RSP: 002b:00007fa91b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1499.218492][T27334] RAX: ffffffffffffffda RBX: 00007fa91d825fa0 RCX: 00007fa91d59e559
[ 1499.218505][T27334] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004
[ 1499.218516][T27334] RBP: 00007fa91b7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.218527][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1499.218537][T27334] R13: 00007fa91d826038 R14: 00007fa91d825fa0 R15: 00007fff83110e78
[ 1499.218562][T27334]  </TASK>
[ 1499.470977][T16341] usb 2-1: GET_CAPABILITIES returned 0
[ 1499.471014][T16341] usbtmc 2-1:16.0: can't read capabilities
[ 1499.534719][ T5601] usb 9-1: new high-speed USB device number 116 using dummy_hcd
[ 1499.683805][ T5601] usb 9-1: Using ep0 maxpacket: 32
[ 1499.686190][ T5601] usb 9-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1499.690509][ T5601] usb 9-1: config 0 has an invalid interface number: 146 but max is 0
[ 1499.690530][ T5601] usb 9-1: config 0 has no interface number 0
[ 1499.690559][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1499.690576][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1499.690595][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1499.690615][ T5601] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1499.690634][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1499.690652][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1499.690668][ T5601] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1499.690687][ T5601] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1499.690703][ T5601] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1499.736405][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.736428][ T5601] usb 9-1: Product: syz
[ 1499.736440][ T5601] usb 9-1: Manufacturer: syz
[ 1499.736450][ T5601] usb 9-1: SerialNumber: syz
[ 1499.867005][ T5601] usb 9-1: config 0 descriptor??
[ 1499.870772][T27333] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1499.891210][ T5601] usb 9-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1499.891230][ T5601] usb 9-1: couldn't find an output bulk endpoint. Bailing out.
[ 1500.168199][T27346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1500.168540][T27346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1500.498792][ T5601] usb 9-1: USB disconnect, device number 116
[ 1500.638952][T27355] ALSA: mixer_oss: invalid OSS volume 'net/ptype'
[ 1500.638969][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.638978][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.638988][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.638997][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.639006][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.639016][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1500.639733][T27355] ALSA: mixer_oss: invalid OSS volume 'ALL'
[ 1501.445394][ T5601] usb 2-1: USB disconnect, device number 79
[ 1501.846288][T16341] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1501.993112][T16341] usb 1-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1501.994859][T16341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.000392][T16341] usb 1-1: config 0 descriptor??
[ 1502.037338][T16341] MOSCHIP usb-ethernet driver 1-1:0.0: Interface 0 is not authorized for usage
[ 1502.055709][T16341] usbtest 1-1:0.0: Interface 0 is not authorized for usage
[ 1502.316194][T27382] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1502.371056][   T33] audit: type=1807 audit(1792227254.625:700): action=appraise res=1
[ 1502.460069][T16341] usb 1-1: USB disconnect, device number 42
[ 1502.819736][T27380] ima: policy update completed
[ 1502.819877][   T33] audit: type=1802 audit(1792227255.075:701): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.6171" res=1 errno=0
[ 1503.284623][   T33] audit: type=1800 audit(1792227255.535:702): pid=27393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="syz.0.6174" name="cgroup.procs" dev="cgroup2" ino=2 res=0 errno=-61
[ 1503.471111][ T5601] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1503.561342][ T5723] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1503.626629][ T5601] usb 2-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1503.642842][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.642864][ T5601] usb 2-1: Product: syz
[ 1503.642884][ T5601] usb 2-1: Manufacturer: syz
[ 1503.642895][ T5601] usb 2-1: SerialNumber: syz
[ 1503.649089][ T5601] usb 2-1: config 0 descriptor??
[ 1503.690154][ T5601] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 080
[ 1503.723708][ T5723] usb 1-1: Using ep0 maxpacket: 32
[ 1503.724447][ T5723] usb 1-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1503.725701][ T5723] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1503.725735][ T5723] usb 1-1: config 0 has no interface number 0
[ 1503.725764][ T5723] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1503.725805][ T5723] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1503.725826][ T5723] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1503.725846][ T5723] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1503.725889][ T5723] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1503.725908][ T5723] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1503.725925][ T5723] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1503.725944][ T5723] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1503.725960][ T5723] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1503.729791][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.729810][ T5723] usb 1-1: Product: syz
[ 1503.729821][ T5723] usb 1-1: Manufacturer: syz
[ 1503.729989][ T5723] usb 1-1: SerialNumber: syz
[ 1503.908666][ T5723] usb 1-1: config 0 descriptor??
[ 1503.915266][T27395] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1503.933737][ T5723] microtekX6 1-1:0.146: Interface 146 is not authorized for usage
[ 1503.934372][ T5723] usbtest 1-1:0.146: Interface 146 is not authorized for usage
[ 1504.163800][ T5601]  (null): failure reading functionality
[ 1504.203290][   T33] audit: type=1800 audit(1792227256.455:703): pid=27397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u8:3" name="/sbin/modprobe" dev="sda1" ino=1312 res=0 errno=-61
[ 1504.211544][ T5601] i2c i2c-2: connected i2c-tiny-usb device
[ 1504.244867][T27395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1504.245246][T27395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1504.272556][   T33] audit: type=1800 audit(1792227256.535:704): pid=27399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u8:3" name="/sbin/modprobe" dev="sda1" ino=1312 res=0 errno=-61
[ 1504.304349][ T5601] usb 1-1: USB disconnect, device number 43
[ 1504.386211][ T5723] usb 2-1: USB disconnect, device number 80
[ 1504.761878][T27410] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6181'.
[ 1505.770896][T16341] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1505.922261][T16341] usb 10-1: Using ep0 maxpacket: 32
[ 1505.923378][T16341] usb 10-1: New USB device found: idVendor=0458, idProduct=5019, bcdDevice=0.00
[ 1505.930626][T16341] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1505.930782][T16341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.969948][T16341] usb 10-1: config 0 descriptor??
[ 1506.130225][T27424] MTD: Couldn't look up './file0': -15
[ 1506.169551][T27426] sd 0:0:1:0: PR command failed: 1026
[ 1506.169596][T27426] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1506.169646][T27426] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1506.230783][ T4979] 
[ 1506.233166][ T4979] ======================================================
[ 1506.240239][ T4979] WARNING: possible circular locking dependency detected
[ 1506.247333][ T4979] syzkaller #0 Tainted: G S           L      
[ 1506.253394][ T4979] ------------------------------------------------------
[ 1506.260444][ T4979] udevd/4979 is trying to acquire lock:
[ 1506.266002][ T4979] ffff88804e7a32d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[ 1506.274434][ T4979] 
[ 1506.274434][ T4979] but task is already holding lock:
[ 1506.281805][ T4979] ffff88807baa4ab0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[ 1506.292507][ T4979] 
[ 1506.292507][ T4979] which lock already depends on the new lock.
[ 1506.292507][ T4979] 
[ 1506.302919][ T4979] 
[ 1506.302919][ T4979] the existing dependency chain (in reverse order) is:
[ 1506.311943][ T4979] 
[ 1506.311943][ T4979] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[ 1506.321256][ T4979]        __mutex_lock+0x197/0x15a0
[ 1506.326430][ T4979]        process_measurement+0x7d0/0x1c10
[ 1506.332193][ T4979]        ima_post_read_file+0x1bc/0x270
[ 1506.337749][ T4979]        security_kernel_post_read_file+0xcd/0x2b0
[ 1506.344264][ T4979]        kernel_read_file+0x570/0x680
[ 1506.349653][ T4979]        kernel_read_file_from_path_initns+0x19a/0x1e0
[ 1506.356510][ T4979]        _request_firmware+0xa2b/0x1750
[ 1506.362147][ T4979]        request_firmware+0x36/0x50
[ 1506.367359][ T4979]        reg_reload_regdb+0x94/0x580
[ 1506.372701][ T4979]        genl_family_rcv_msg_doit+0x233/0x340
[ 1506.378784][ T4979]        genl_rcv_msg+0x614/0x7a0
[ 1506.383817][ T4979]        netlink_rcv_skb+0x226/0x4a0
[ 1506.389106][ T4979]        genl_rcv+0x28/0x40
[ 1506.393622][ T4979]        netlink_unicast+0x8ef/0xa80
[ 1506.398925][ T4979]        netlink_sendmsg+0x7f0/0xb20
[ 1506.404217][ T4979]        sock_sendmsg_nosec+0x14e/0x190
[ 1506.409792][ T4979]        ____sys_sendmsg+0x54e/0x850
[ 1506.415092][ T4979]        ___sys_sendmsg+0x2a5/0x360
[ 1506.420319][ T4979]        __x64_sys_sendmsg+0x1b1/0x290
[ 1506.425790][ T4979]        do_syscall_64+0x166/0x520
[ 1506.430913][ T4979]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.437340][ T4979] 
[ 1506.437340][ T4979] -> #3 (cb_lock){++++}-{4:4}:
[ 1506.444298][ T4979]        down_read+0x45/0x320
[ 1506.449019][ T4979]        genl_release+0x89/0x1e0
[ 1506.453970][ T4979]        netlink_release+0xeaa/0x1a90
[ 1506.459370][ T4979]        __sock_release+0xa0/0x1f0
[ 1506.464494][ T4979]        sock_close+0x1c/0x30
[ 1506.469175][ T4979]        __fput+0x408/0xa40
[ 1506.473693][ T4979]        fput_close_sync+0x11f/0x240
[ 1506.479005][ T4979]        __se_sys_close+0xa2/0x160
[ 1506.484131][ T4979]        do_syscall_64+0x166/0x520
[ 1506.489256][ T4979]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.495771][ T4979] 
[ 1506.495771][ T4979] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}:
[ 1506.504802][ T4979]        down_write+0x91/0x200
[ 1506.509594][ T4979]        __sock_release+0x7a/0x1f0
[ 1506.514709][ T4979]        sock_close+0x1c/0x30
[ 1506.519407][ T4979]        __fput+0x408/0xa40
[ 1506.523914][ T4979]        nvme_tcp_alloc_queue+0x1948/0x1ff0
[ 1506.529900][ T4979]        nvme_tcp_configure_admin_queue+0x23/0x3f0
[ 1506.536413][ T4979]        nvme_tcp_setup_ctrl+0xc3/0x1670
[ 1506.542069][ T4979]        nvme_tcp_create_ctrl+0xa59/0xf00
[ 1506.547795][ T4979]        nvmf_dev_write+0x24ca/0x2d90
[ 1506.553217][ T4979]        vfs_write+0x296/0xba0
[ 1506.557990][ T4979]        ksys_write+0x150/0x270
[ 1506.562848][ T4979]        do_syscall_64+0x166/0x520
[ 1506.567968][ T4979]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.574396][ T4979] 
[ 1506.574396][ T4979] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}:
[ 1506.582000][ T4979]        __mutex_lock+0x197/0x15a0
[ 1506.587136][ T4979]        nvmf_dev_show+0x2c/0x180
[ 1506.592175][ T4979]        traverse+0x229/0x620
[ 1506.596868][ T4979]        seq_read_iter+0xb6a/0xca0
[ 1506.601979][ T4979]        seq_read+0x367/0x480
[ 1506.606656][ T4979]        vfs_readv+0x57c/0x850
[ 1506.611419][ T4979]        __x64_sys_preadv+0x19c/0x2b0
[ 1506.616790][ T4979]        do_syscall_64+0x166/0x520
[ 1506.621920][ T4979]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.628337][ T4979] 
[ 1506.628337][ T4979] -> #0 (&p->lock){+.+.}-{4:4}:
[ 1506.635370][ T4979]        __lock_acquire+0x164c/0x2de0
[ 1506.640742][ T4979]        lock_acquire+0x115/0x350
[ 1506.645759][ T4979]        __mutex_lock+0x197/0x15a0
[ 1506.650887][ T4979]        seq_read_iter+0xa4/0xca0
[ 1506.655935][ T4979]        __kernel_read+0x4ca/0x960
[ 1506.661057][ T4979]        integrity_kernel_read+0x89/0xd0
[ 1506.666757][ T4979]        ima_calc_file_hash+0x451/0x890
[ 1506.672308][ T4979]        ima_collect_measurement+0x51b/0xa00
[ 1506.678376][ T4979]        process_measurement+0x1272/0x1c10
[ 1506.684184][ T4979]        ima_file_check+0xdc/0x130
[ 1506.689293][ T4979]        security_file_post_open+0xb3/0x260
[ 1506.695202][ T4979]        path_openat+0x1748/0x20f0
[ 1506.700309][ T4979]        do_file_open+0x23e/0x4a0
[ 1506.705330][ T4979]        do_sys_openat2+0x115/0x200
[ 1506.710532][ T4979]        __x64_sys_openat+0x138/0x170
[ 1506.715911][ T4979]        do_syscall_64+0x166/0x520
[ 1506.721042][ T4979]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.727455][ T4979] 
[ 1506.727455][ T4979] other info that might help us debug this:
[ 1506.727455][ T4979] 
[ 1506.737692][ T4979] Chain exists of:
[ 1506.737692][ T4979]   &p->lock --> cb_lock --> &ima_iint_mutex_key[depth]
[ 1506.737692][ T4979] 
[ 1506.750376][ T4979]  Possible unsafe locking scenario:
[ 1506.750376][ T4979] 
[ 1506.757819][ T4979]        CPU0                    CPU1
[ 1506.763225][ T4979]        ----                    ----
[ 1506.768591][ T4979]   lock(&ima_iint_mutex_key[depth]);
[ 1506.774005][ T4979]                                lock(cb_lock);
[ 1506.780243][ T4979]                                lock(&ima_iint_mutex_key[depth]);
[ 1506.788131][ T4979]   lock(&p->lock);
[ 1506.791936][ T4979] 
[ 1506.791936][ T4979]  *** DEADLOCK ***
[ 1506.791936][ T4979] 
[ 1506.800110][ T4979] locks held by udevd/4979: 1, last CPU#0:
[ 1506.805952][ T4979]  #0: ffff88807baa4ab0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[ 1506.817032][ T4979] 
[ 1506.817032][ T4979] stack backtrace:
[ 1506.822921][ T4979] CPU: 0 UID: 0 PID: 4979 Comm: udevd Tainted: G S           L       syzkaller #0 PREEMPT(full) 
[ 1506.833417][ T4979] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1506.839573][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1506.849624][ T4979] Call Trace:
[ 1506.853001][ T4979]  <TASK>
[ 1506.855966][ T4979]  dump_stack_lvl+0xe8/0x150
[ 1506.860588][ T4979]  print_circular_bug+0x2e2/0x300
[ 1506.865632][ T4979]  check_noncircular+0x12f/0x150
[ 1506.870586][ T4979]  __lock_acquire+0x164c/0x2de0
[ 1506.875442][ T4979]  ? lock_acquire+0x115/0x350
[ 1506.880118][ T4979]  ? lock_acquire+0x115/0x350
[ 1506.884796][ T4979]  lock_acquire+0x115/0x350
[ 1506.889301][ T4979]  ? seq_read_iter+0xa4/0xca0
[ 1506.893988][ T4979]  __mutex_lock+0x197/0x15a0
[ 1506.898589][ T4979]  ? seq_read_iter+0xa4/0xca0
[ 1506.903269][ T4979]  ? __kernel_text_address+0xd/0x30
[ 1506.908468][ T4979]  ? unwind_get_return_address+0x4d/0x90
[ 1506.914101][ T4979]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1506.920263][ T4979]  ? arch_stack_walk+0xfb/0x150
[ 1506.925113][ T4979]  ? seq_read_iter+0xa4/0xca0
[ 1506.929794][ T4979]  ? __pfx___mutex_lock+0x10/0x10
[ 1506.934824][ T4979]  ? stack_trace_save+0xa9/0x100
[ 1506.939764][ T4979]  ? stack_depot_save_flags+0x33/0x7f0
[ 1506.945232][ T4979]  seq_read_iter+0xa4/0xca0
[ 1506.949735][ T4979]  ? ima_calc_file_hash+0x40f/0x890
[ 1506.954955][ T4979]  ? ima_collect_measurement+0x51b/0xa00
[ 1506.960606][ T4979]  ? process_measurement+0x1272/0x1c10
[ 1506.966066][ T4979]  ? ima_file_check+0xdc/0x130
[ 1506.970846][ T4979]  ? __asan_memset+0x22/0x50
[ 1506.975444][ T4979]  ? kernfs_fop_read_iter+0x144/0x6a0
[ 1506.980821][ T4979]  __kernel_read+0x4ca/0x960
[ 1506.985436][ T4979]  ? __pfx___kernel_read+0x10/0x10
[ 1506.990562][ T4979]  ? rcu_is_watching+0x16/0xb0
[ 1506.995344][ T4979]  integrity_kernel_read+0x89/0xd0
[ 1507.000466][ T4979]  ? __pfx_integrity_kernel_read+0x10/0x10
[ 1507.006279][ T4979]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1507.011832][ T4979]  ? ima_calc_file_hash+0x40f/0x890
[ 1507.017034][ T4979]  ? ima_calc_file_hash+0x40f/0x890
[ 1507.022233][ T4979]  ima_calc_file_hash+0x451/0x890
[ 1507.027280][ T4979]  ? __pfx_ima_calc_file_hash+0x10/0x10
[ 1507.033030][ T4979]  ima_collect_measurement+0x51b/0xa00
[ 1507.038590][ T4979]  ? __pfx_ima_collect_measurement+0x10/0x10
[ 1507.044591][ T4979]  ? __pfx_ima_get_hash_algo+0x10/0x10
[ 1507.050056][ T4979]  process_measurement+0x1272/0x1c10
[ 1507.055353][ T4979]  ? __pfx_process_measurement+0x10/0x10
[ 1507.060991][ T4979]  ? trace_contention_end+0x3d/0x140
[ 1507.066300][ T4979]  ? kernfs_put_active+0xa0/0x100
[ 1507.071327][ T4979]  ? kernfs_fop_open+0xb0b/0xd20
[ 1507.076270][ T4979]  ima_file_check+0xdc/0x130
[ 1507.080860][ T4979]  ? do_dentry_open+0xcf9/0x1360
[ 1507.085814][ T4979]  ? __pfx_ima_file_check+0x10/0x10
[ 1507.091033][ T4979]  security_file_post_open+0xb3/0x260
[ 1507.096443][ T4979]  path_openat+0x1748/0x20f0
[ 1507.101067][ T4979]  do_file_open+0x23e/0x4a0
[ 1507.105612][ T4979]  ? __pfx_do_file_open+0x10/0x10
[ 1507.110653][ T4979]  ? _raw_spin_unlock+0x28/0x50
[ 1507.115514][ T4979]  ? alloc_fd+0x6af/0x760
[ 1507.119860][ T4979]  do_sys_openat2+0x115/0x200
[ 1507.124543][ T4979]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1507.129747][ T4979]  ? do_readlinkat+0x451/0x510
[ 1507.134524][ T4979]  ? __pfx_do_readlinkat+0x10/0x10
[ 1507.139667][ T4979]  ? __pfx_ksys_read+0x10/0x10
[ 1507.144458][ T4979]  __x64_sys_openat+0x138/0x170
[ 1507.149319][ T4979]  do_syscall_64+0x166/0x520
[ 1507.153935][ T4979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.160018][ T4979]  ? clear_bhb_loop+0x70/0xc0
[ 1507.164701][ T4979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.170607][ T4979] RIP: 0033:0x7f7e284a7407
[ 1507.175023][ T4979] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1507.194624][ T4979] RSP: 002b:00007fff8886f850 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1507.203043][ T4979] RAX: ffffffffffffffda RBX: 00007f7e28b73880 RCX: 00007f7e284a7407
[ 1507.211016][ T4979] RDX: 0000000000080000 RSI: 00007fff8886f9d0 RDI: ffffffffffffff9c
[ 1507.219006][ T4979] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[ 1507.226990][ T4979] R10: 0000000000000000 R11: 0000000000000202 R12: 000055874da1b7f5
[ 1507.234964][ T4979] R13: 000055874da1b7f5 R14: 0000000000000001 R15: 00007fff88874020
[ 1507.242941][ T4979]  </TASK>
[ 1507.292298][T16341] hid (null): unknown global tag 0xfd
[ 1507.307076][T16341] input: HID 0458:5019 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5019.0070/input/input137
[ 1507.342925][T16341] input: HID 0458:5019 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5019.0070/input/input138
[ 1507.343213][   T33] audit: type=1800 audit(1792227259.605:705): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36183 res=0 errno=-22
[ 1507.343856][   T33] audit: type=1800 audit(1792227259.605:706): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36183 res=0 errno=-22
[ 1507.413522][T16341] kye 0003:0458:5019.0070: input,hiddev0,hidraw0: USB HID v0.08 Device [HID 0458:5019] on usb-dummy_hcd.9-1/input0
[ 1507.542082][ T5723] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1507.552977][T16341] usb 10-1: USB disconnect, device number 66
[ 1507.691847][ T5723] usb 2-1: Using ep0 maxpacket: 8
[ 1507.692325][ T5723] usb 2-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1507.693082][ T5723] usb 2-1: config index 0 descriptor too short (expected 12336, got 18)
[ 1507.693101][ T5723] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1507.693116][ T5723] usb 2-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[ 1507.693131][ T5723] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1507.694617][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.694635][ T5723] usb 2-1: Product: syz
[ 1507.694645][ T5723] usb 2-1: Manufacturer: syz
[ 1507.694656][ T5723] usb 2-1: SerialNumber: syz
[ 1509.109966][ T5723] usb 2-1: USB disconnect, device number 81