last executing test programs:

3m22.804496641s ago: executing program 32 (id=147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc8}}, 0x0)

2m27.090571005s ago: executing program 33 (id=343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020)

2m19.879341619s ago: executing program 1 (id=434):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfd, 0x51, 0x5c, 0x8, 0x2013, 0x25c, 0xa4f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x5, 0x20, 0xb, "", [{{0x9, 0x4, 0x7e, 0x9, 0x0, 0xf0, 0x9e, 0x6a, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x0, 0x31, 0x5, "ad25ad3828"}, 0x0, 0x0, 0x0, 0x0})

2m18.518938808s ago: executing program 1 (id=443):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x4, 0x6, 0x0, 0xe, 0xd7d, 0x4})
pwrite64(r0, &(0x7f00000002c0)="10c9", 0x2, 0xfff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0x1001, 0x4}, 0x6) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010006, 0x0, 0x1}]}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

2m18.295285122s ago: executing program 1 (id=444):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m16.621096053s ago: executing program 1 (id=454):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b31080008", @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$tipc(0x1e, 0x4, 0x0)
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000400000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2m16.55406759s ago: executing program 1 (id=455):
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xb2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_ublk_setup_io_uring(0x440, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='base=0x20000000 size=', 0x15)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
recvfrom$inet(r8, 0x0, 0x0, 0x40000006, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81901)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00f00f", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf250d00000008000300", @ANYRES32=r9, @ANYBLOB="08000c0006000000080001000300000008000c000300000008000c0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc040)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r10, 0x6, 0x22, 0x0, &(0x7f0000000200))
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)

2m15.60294304s ago: executing program 1 (id=462):
syz_clone(0x2a800211, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000041000701fefeffff00000000017c0000040042801800018006000600800a00fb0b001500faffffffffffffff040002"], 0x34}, 0x1, 0x0, 0x0, 0x404c095}, 0xc010)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1)
io_setup(0x3, &(0x7f0000002500)=<r2=>0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0)
io_submit(r2, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r0, 0x0, 0x0, 0x1}])
syz_open_dev$sndmidi(&(0x7f0000000080), 0x100000000, 0x4a801)

2m7.514577086s ago: executing program 2 (id=485):
set_mempolicy(0x1, &(0x7f0000000000)=0x6, 0x2)
r0 = syz_usbip_server_init(0x5)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x20110, r0, 0x257a1000)
set_mempolicy(0x3, &(0x7f0000000040)=0x1000, 0x7fffffffffffffff)
syz_usbip_server_init(0x4)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pvfs2\x00', 0x20, &(0x7f0000000140)='&\x00')
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x4})
r1 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x4000)
ioctl$MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000280)={0x9, 0x6d, &(0x7f0000000200)="bb0912e5cb9a2c153da6da56e8b996a3b7687dcd7ae23cda56fdb16d72f8fcca707c0a7cdddaae85180af04cc0889f10980106e9d7f0edb5fde274c5126610ecce6c47d9669011f443010338d0e174cf16ab5d7ed20ed3224b1c09fc32d29d511f238061dd8a85641bc6148920"})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc8}}}, 0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x408001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x30)
set_mempolicy(0x4001, &(0x7f0000000380)=0x4, 0x100)
ioctl$MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000480)={0xa, 0xbd, &(0x7f00000003c0)="3fdf988e05d7b0ffe62bce20bed8368a8cbb4b897c3758c4cf5cd416a05aed7817d959e142ec931a2aef26c507d3dbe4c3b09495b3c75993acc4e7f2d84324b470733ce6d7d79bc6fc1102d23b2d76f0081aedb1f332930add94ce10acbceb1723204a83164193aee865aad15e438df267303aa5b7ae8126a6262aa97c3ff717595da91eca12cc0ac5cde0a18f198b8ce8c8379422f9a3cf73b67dd6c1a9b220a2eb22e87e4df349711785c2fcad4e291b94a6b2fcb9a562afcf946f75"})
r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14, 0x400)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000580)=0x14)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000005c0)={r6, 0x1, 0x6, @broadcast}, 0x10)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000600)={0x2})
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000640)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0xfffffffffffffff9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x47b, 0x3, 0x1, 0x1ff}}, @code={0xa, 0x4a, {"b805000000b900e0c3220f01c10f01cff36d66b8cb000f00d00f32f2440f1be1b805000000b90a0000000f01d966ba4100ec0f01f867470f07"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x646, 0x7fff, 0xffffffff80000000, 0x1ff}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x57f}}, @wr_crn={0x67, 0x20, {0x4, 0x13481163}}, @in_dx={0x69, 0x20, {0x9eec, 0x2}}, @cpuid={0x64, 0x18, {0xfffffff1, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x66, 0x2, 0x6, 0xfffffffffffffffd}}, @code={0xa, 0x5d, {"4655450febc4b805000000b9d77700000f01c1470f073664f2470f07b91f0900000f32420f060f9ed6c7442400793a0000c7442402fc7f0000c7442406000000000f011c2466b881000f00d0"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x4b, 0x3, 0x2, 0x9}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xb12}}, @out_dx={0x6a, 0x28, {0x218b, 0x6, 0x6}}, @nested_load_code={0x12e, 0x71, {0x2, "b9350b0000b800000000ba000000800f3066ba210066b8000066ef410f01f848b8c1458ad0876476390f23d80f21f835000000200f23f836400f01c96764360fc76d00460f79510d0f20d835200000000f22d82e0f01c441f4"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0xf9c, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x52b, 0x9, 0x4a, 0x327f}}], 0x3a0})
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000a40)={{0x10000, 0x8080000, 0xb, 0x2, 0x8, 0x5, 0x4, 0x5, 0x1, 0x1, 0x9, 0xf7}, {0xdddd1000, 0x26000, 0xd, 0x2, 0x54, 0x10, 0xb, 0x3, 0x26, 0x7d, 0x8, 0x40}, {0xe000, 0x26000, 0xe, 0x10, 0x7, 0x5, 0x2, 0x4a, 0x2, 0x0, 0x1, 0x1}, {0x7000, 0xdddd1000, 0xb, 0x7, 0x5, 0xd0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5}, {0x1ffc, 0x2000, 0x9, 0xb7, 0x81, 0x8, 0x9, 0x9, 0x0, 0xe9, 0x2, 0x8}, {0xdddd1000, 0xdddd0000, 0xe, 0x7, 0x8, 0x16, 0x8, 0x5, 0x3, 0xb3, 0x1, 0x2}, {0x25000, 0xdddd1000, 0x4, 0x3, 0xfa, 0x8, 0x3b, 0xfa, 0x9, 0x2a, 0x6, 0xe}, {0x1ffc, 0x5000, 0x9, 0x9, 0x6, 0x4, 0x81, 0xa, 0x5, 0x3, 0xe, 0x3}, {0x3000, 0x3}, {0xc000, 0x1}, 0x80010000, 0x0, 0x70000, 0x500, 0xa, 0x2000, 0x1ffe, [0x6, 0xd10, 0xfffffffffffffff8, 0xa26]})
fchdir(r2)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x0, 0x3343, 0x4000, 0x1, 0x39e}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa40, 0x10, 0x3, 0x2f4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb099, 0x1000, 0x0, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbad0, 0x0, 0x3, 0x143}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x963c, 0x20, 0x1, 0xae, 0x0, r5}}], 0x4, &(0x7f0000001e80)={0x2e, 0x40, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0xff1, 0x0, &(0x7f0000000e80)=@buf_4k="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"}}, &(0x7f0000001f00)=<r8=>0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001f40)={0x0, 0x6007, 0x2000, 0x0, 0x25b, 0x0, r3}, &(0x7f0000001fc0)=[{0x0, 0x0, <r9=>0xffffffffffffffff, {0x0, 0x7937, 0x80, 0x2, 0x163}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6659, 0x200, 0x0, 0x3dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c, 0x800, 0x2, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d0, 0x20000, 0x0, 0x190}}], 0x4, &(0x7f0000003240)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x2, 0xbc9, 0x0, &(0x7f0000002240)=@buf_4k="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"}}, &(0x7f00000032c0))
syz_ublk_process_io(r8, 0x2, 0x2, &(0x7f0000004300)=@ublk_io_need_get_data_sqe={0x2e, 0x48, 0x0, r9, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x9db, 0x0, &(0x7f0000003300)=@buf_1k="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"}}, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0x0)
connect$rxrpc(r10, &(0x7f0000004380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6dce}}, 0x24)
io_destroy(0x0)
setpgid(0x0, 0x0)

2m6.882872596s ago: executing program 2 (id=488):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000f40)={0x6, 0x118, 0xfa00, {{0x9, 0xd767, "6be475dc246509a4b20c875bf1a289d1a0a2dad36287056053b61cf6316d36ff98077ba69ef3174e3de8b836227cb52d5140c45a114628ec4633ac0fc1ff3445364d356108949874a132a90f6e9d8423cf73caf9039b509b3bd5bbc9e8e843a5118442c52aabe7120e57aa86a260c72b727073a62f53809d99f7ecf71c56e6bb5db338667c42941c9391e288c1802f300e8da37649b1517c2d2640bf84e05acd64562bca281ae54052e20c70cd3300cdf51a3a94fc0c50fe64f4244208ae8495e8c2917452583639c1d1f6aa22ea551fac524a26581146b2ea759e4dd2fdb84f0b07a627d50d435ccfcbc0b0577ce9ba17c793c564bc8c00", 0x0, 0x7, 0x8, 0x85, 0x2, 0x3, 0x8}}}, 0x120)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
ioctl(r1, 0x80000001, &(0x7f0000000080)="c3205beac37a48eb862c8c200bd8ce8e74ee0f748b84316e6b8e88fd88bea2fe4d22941ad1d91838496066726122603619a8b319712e0c3cb3949bd8a0b1fb8b316fb5dff35a74fca478d10cd1a6a68d5970a1571dfce1a8cc0355ab0262a5602fa85e3643376111690820daac1c0d101f8b474c69a4845dcc7cbe69bf8008")
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r2, &(0x7f0000000280))
listen(r1, 0x5)

2m6.775288732s ago: executing program 2 (id=489):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r1, 0x1, &(0x7f00000037c0)=[&(0x7f00000004c0)={0x500000000000000, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x54, 0x6508d016}])

2m6.72622747s ago: executing program 2 (id=490):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000003000000)

2m5.739283334s ago: executing program 2 (id=491):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x4, 0x6, 0x20})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560b, 0x0)
prctl$PR_SET_SECCOMP(0x4f, 0x2, &(0x7f0000000080)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r2)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4040)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r8=>0x0)
io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xfffffdfc}])
io_destroy(r8)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})

2m5.407685642s ago: executing program 2 (id=493):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x60, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0)

2m0.287821073s ago: executing program 34 (id=462):
syz_clone(0x2a800211, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000041000701fefeffff00000000017c0000040042801800018006000600800a00fb0b001500faffffffffffffff040002"], 0x34}, 0x1, 0x0, 0x0, 0x404c095}, 0xc010)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1)
io_setup(0x3, &(0x7f0000002500)=<r2=>0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0)
io_submit(r2, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r0, 0x0, 0x0, 0x1}])
syz_open_dev$sndmidi(&(0x7f0000000080), 0x100000000, 0x4a801)

1m50.3483016s ago: executing program 35 (id=493):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x60, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0)

1m12.394626433s ago: executing program 7 (id=697):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c)
listen(r0, 0xb)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000140), 0x0, 0x20088058)

1m12.155126344s ago: executing program 7 (id=699):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = dup(r2)
write$UHID_INPUT(r3, 0x0, 0x3e)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="f2470f32430f01cb67d9fb0ff85c8c00c7442400616018d6c744240202000000c7442406000000000f01142466ba2100b87e000000eff4262ef04680b503e588025d40d9ea3636f30fc732", 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000340)="0f2d4e6bf3ab0f01df0fc7bab4000fc7a81868660f57dd676626660f38170c6a0f00164df3676664ab66b9800000c00f326635004000000f30", 0x39}], 0x1, 0x5b, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xaf, 0xc, '\x00', 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='jffs2\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)='reiserfs\x00', 0x84da, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f0000000040)='./dev\x00', 0x4c27e, 0x130)
ftruncate(r4, 0xfffffffe)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000080)={@local, @remote})

1m11.369553502s ago: executing program 7 (id=704):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000003800048018000180080001006f7366000c0002800800f79cc1b8240140000000041c0001800a0001007265646972f000000c0002800800014000000017140000001100010000000000000000"], 0x74}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m11.133144705s ago: executing program 7 (id=705):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet(0x2, 0x800, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000001000))
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x8}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$can_raw(r8, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x900, 0x2}, 0x20044850)
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r11, 0xcdb5b000)
getgroups(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000080)=ANY=[], 0x2e)

1m10.488130923s ago: executing program 7 (id=707):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r0, &(0x7f0000000600)='dir .', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x45041)
r4 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r3, 0x0, 0x2)
inotify_add_watch(r2, &(0x7f0000000140)='./file1\x00', 0x2000000)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84)
chdir(&(0x7f00000001c0)='./file0\x00')
r6 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x60)
setpgid(r6, 0x0)
setpgid(0x0, r6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44)
write(r0, &(0x7f0000000700)='bind', 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0xee24, 0x0, 0x4e21, 0xfffc, 0x2, 0x0, 0x0, 0x21}, {0x80003, 0x200000004, 0x40000000004, 0x5, 0x100000000, 0x0, 0x200000003, 0x9}, {0x6}, 0x5, 0x0, 0x0, 0xa9f1e7a894752004, 0x4, 0x3}, {{@in6=@private2, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x3506, 0x3, 0x8, 0x2, 0x9075, 0xef}}, 0xe8)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c0001800800327c5a5a646d14a40870efe7eacba901407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x24044811}, 0x2000c000)

1m10.251246039s ago: executing program 7 (id=708):
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
syz_clone3(&(0x7f0000001180)={0x106085280, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_clone3(&(0x7f0000001180)={0x106085280, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)

1m0.068983404s ago: executing program 6 (id=746):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)

59.743210682s ago: executing program 6 (id=747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/4113, 0x1011}, {&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000004b00)=""/4098, 0x1002}], 0x4}, 0x19}], 0x3, 0x0, 0x0)

58.880762106s ago: executing program 6 (id=748):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="c7442400cf000000c74424020a000000b97c0900000f32c74424000d000000c744240287000000c7442406000000000f011c2466b822018ed0b874225984ef66bafc0cb8ff3d0000ef440f12e6b9800000c00f3235008000000f30420f01ca66400f380b4d0f0f22470f01f86767f2446e", 0x71}], 0x1, 0x26, 0x0, 0x0)

58.799961079s ago: executing program 6 (id=749):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2420, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x1d, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000340)=""/161, 0xa1, 0xab)

58.643090515s ago: executing program 6 (id=750):
socket$netlink(0x10, 0x3, 0x10)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000540)=""/157, 0x9d)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x4, 0x6, 0x40, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x3ff, 0x6, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x404001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x7, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x7a7], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x6, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x7, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6cfe, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xa, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x800, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x5, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x3, 0x6, 0x2, 0xffff, 0x80000003, 0x1072, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x10, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0x8, 0x8, 0x9, 0x1, 0x6c0b, 0x40000000, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

57.73568372s ago: executing program 6 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x81, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
write(r2, &(0x7f0000000340)='4', 0x1)

56.8541359s ago: executing program 5 (id=753):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000))
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

56.735665431s ago: executing program 5 (id=754):
getresuid(&(0x7f0000000100), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x200, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, {}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2, 0x4, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x80000, 0x0, 0x4}}, @algo_comp={0xeb, 0x3, {{'deflate\x00'}, 0x518, "f96071e44a677f3f80b2e1f0979149c44154e3bae9477bd31af42cf5bf1cd3f94ae865e70d6e5d639c2800394dc2fa1d3c064264925b5aeebdf5708c304727bb6f4e5f29f8acc958d3a8d416a98259477621b9bded67e0001e4ce191544fb49c8c6773d6e122e5955bbce60905271e2c80f17ef883238347ab3bc0d621f65e71b3e442a0d9213dbecda40268d387f9960331feec5930d78fcdc7c13aa207e1c876e8dd"}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x200}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r1, 0x560d, 0x1000000000003)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

56.291241064s ago: executing program 5 (id=755):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x40)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)

55.765946494s ago: executing program 5 (id=756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/4113, 0x1011}, {&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000004b00)=""/4098, 0x1002}], 0x4}, 0x19}], 0x3, 0x0, 0x0)

54.885437269s ago: executing program 5 (id=757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x6000)

54.858758556s ago: executing program 36 (id=708):
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
syz_clone3(&(0x7f0000001180)={0x106085280, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_clone3(&(0x7f0000001180)={0x106085280, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)

54.785601266s ago: executing program 5 (id=759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d02, &(0x7f0000000900))
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)

42.501430874s ago: executing program 37 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x81, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
write(r2, &(0x7f0000000340)='4', 0x1)

39.633945375s ago: executing program 38 (id=759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d02, &(0x7f0000000900))
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)

35.348147425s ago: executing program 9 (id=797):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5) (async)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0)

34.511790152s ago: executing program 9 (id=802):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x40)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)

33.893371331s ago: executing program 9 (id=804):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x2, 0x4c, {0x4c, 0x7, "a65deb36f1ff8ebf239f31d170ea68d522d800c9d1a395237f6b2ae8cb1fd4641e2090707e826e89467b7ba96f2ad4d45fc8b60e8f5aa1416749bbe5081e7ade2ea954008a5fa7fbd6bf"}}, &(0x7f0000000240)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "626a93b9bb86b45501f744ac98173f12d5ce2daac5fb373c187cc78c"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x1c, 0x38, "c6a4bcb9da2e222efceeb2bf1c8699c7f09621188c5bba8ec12fd90bd085c923ff2daa962d140e8a29da5f70d27e963ac4c511066b7a4571"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x73, {0x71, "9b9ebbda8f13aa519199b101eda09bfe75b5160ded7ed53e4b228199970c774c54258af2fafaba198f409b63d76bba0fdeb33c901672cd9f625142873b605e49a9a779cfd34ae8f3d287886a5956bc6bcd4006c22853f391fd334a7bd43c2669dcddcb95ae0b95c4277feb49f6cfaae1d4"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x69}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x16}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r2 = semget(0x1, 0x4, 0x39c)
semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r2, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1)
semctl$IPC_RMID(r2, 0x0, 0x0)
write$binfmt_format(r1, &(0x7f0000000140)='1\x00', 0x2)

31.235402037s ago: executing program 9 (id=807):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xd, 0x1d, 0x3, 0x2e, 0x4, '\x00', 0xf, 0xffffffffffffff80})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

30.821922265s ago: executing program 9 (id=809):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1, 0x0, 0x0, 0xc804}, 0x4054)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r1, 0x7ffffffd, 0x8)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r2, 0x80000})
ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xfffffee2)
r6 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000480)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd0, 0x0, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)

29.786154365s ago: executing program 9 (id=811):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x64000600)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201e3dd00000008b804020240000102030109021b000115053003090400000007"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000efffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000ee0000000000000808000000000000000000000000000000440005000a010101000000000000000000000000000000003c"], 0xfc}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00009ea000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e86000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000b9a000/0x4000)=nil, &(0x7f0000c5b000/0x2000)=nil, &(0x7f0000cd9000/0x3000)=nil, &(0x7f0000afe000/0x1000)=nil, &(0x7f0000000300)="dc528fea2f27a563f3cc5ce022e33910ceb4cdbafb055c0d75988695335bd581b3558bf48e467f0dfc5ad2f2a174bddd2a1b982bd6ca0ba108c4d817d400414e9e8f29d3cf4969ec30f44455b4a01143bd807f21cc5d3050e6811cb1d62173b3f59e83b67fef71f979ed250f2e9d437b390bca77c9041e362d67ae931c993f55f2f633a935a6f1c44395fb21625f8b5100141d6523718ff7", 0x98, r0}, 0x68)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES64, @ANYRES32=r3, @ANYBLOB="3c0033008000e100ffffffffffff0802110000005050505050500000deaf0000000800006400034801000301", @ANYRESDEC=0x0], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0)

14.364086838s ago: executing program 39 (id=811):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x64000600)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201e3dd00000008b804020240000102030109021b000115053003090400000007"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000efffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000ee0000000000000808000000000000000000000000000000440005000a010101000000000000000000000000000000003c"], 0xfc}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00009ea000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e86000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000b9a000/0x4000)=nil, &(0x7f0000c5b000/0x2000)=nil, &(0x7f0000cd9000/0x3000)=nil, &(0x7f0000afe000/0x1000)=nil, &(0x7f0000000300)="dc528fea2f27a563f3cc5ce022e33910ceb4cdbafb055c0d75988695335bd581b3558bf48e467f0dfc5ad2f2a174bddd2a1b982bd6ca0ba108c4d817d400414e9e8f29d3cf4969ec30f44455b4a01143bd807f21cc5d3050e6811cb1d62173b3f59e83b67fef71f979ed250f2e9d437b390bca77c9041e362d67ae931c993f55f2f633a935a6f1c44395fb21625f8b5100141d6523718ff7", 0x98, r0}, 0x68)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES64, @ANYRES32=r3, @ANYBLOB="3c0033008000e100ffffffffffff0802110000005050505050500000deaf0000000800006400034801000301", @ANYRESDEC=0x0], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0)

8.822405332s ago: executing program 0 (id=886):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0x3ff, 0xef5c}, {0x101, 0x3}]}, 0x14, 0x3)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ec0000, 0x2})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000280)="1ebcd0caede107d248bb7e5d412b8ccb1c5e875ef0a5ada766fc6efdcdbbf8b4a0c189c78c458debb1ffbe1c33460dc2e342d9cf9c8479c32313a1ce2c677655886adc4a2830458230584eb106", 0x4d, 0x800, &(0x7f0000000240)={0x11, 0x15, r1, 0x1, 0x1, 0x6, @multicast}, 0x14)
pwrite64(r8, &(0x7f0000000340)="329ef9cafd695515979158a05b529d2f7f5b06907835260de578960300254577900a37f5d361fb933798b51e0180f6ff31502d30db9099340b0f85975544aba06789dace7a34bd7b61117e3982f0cb849231dbc5d854c13975afe013c89490cd87ecae72656c6640681adf00a4f61c58afc5b5e4cfa681b40b1613135dcf147c059138a907b598fd03d7f22cefe0e239a58741500e7709a5360e46dddff2df9221854eda5fec87e200e67889ef8292bc2da8edc1b05acc42b3b47537b5216ed6df59e7b246ec05", 0xc7, 0x9)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x39, 0xa, 0x6, 0xa, 0x0, 0x0, 0x12f})
close_range(r0, 0xffffffffffffffff, 0x0)

8.548415504s ago: executing program 0 (id=887):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000500)={0x0, 0x21, 0x28, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

6.459134698s ago: executing program 0 (id=892):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x2, 0x6, 0xc0f, 0x83, 0xffffffff})
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x2d, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRES16=r0], 0x0}, 0x0)

6.122181961s ago: executing program 3 (id=894):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x2, 0x2, 0x73)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x10000000)

4.711910915s ago: executing program 0 (id=897):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/4113, 0x1011}, {&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000004b00)=""/4098, 0x1002}], 0x4}, 0x19}], 0x3, 0x0, 0x0)

4.557697781s ago: executing program 0 (id=899):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac057a0200000000000109022400010000200209040005020300840009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0)
unshare(0x6020400)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x28b, 0x0, 0x3}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

3.672301823s ago: executing program 4 (id=902):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x20001, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000440))

3.614222473s ago: executing program 8 (id=903):
add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8)
shutdown(r1, 0x1)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c825800000105050000000000000000060000002d0002"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0)

3.415246791s ago: executing program 8 (id=904):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x1ec}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0xf8, 0x3, 0x1, 0x0, 0x7, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
eventfd2(0x3, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000580)={0x6, 0x0, @ioapic={0xffffffffff600000, 0x8000, 0x8, 0x7, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x40, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x7, 0xc, '\x00', 0x5}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0x8, '\x00', 0x8d}, {0xa, 0x9, 0x4}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x9, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x1, 0x4, '\x00', 0xdd}, {0x9, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0xc, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb7, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x5, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0x52}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.975119748s ago: executing program 3 (id=905):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x51, 0x102}}], 0x18}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
preadv(r1, 0x0, 0x0, 0xc4, 0xb)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
setpriority(0x2, 0xff, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x807, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008f, 0x10000, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x7a8, 0x20000010, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)

2.876949175s ago: executing program 3 (id=906):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'wrr\x00', 0x17, 0x3, 0x53}, {@local, 0x4e20, 0x4, 0x9, 0x3ff, 0x7}}, 0x44)
r3 = socket$inet6(0x10, 0x2, 0x4)
splice(r3, &(0x7f0000000180)=0x2, r2, &(0x7f00000001c0)=0x101, 0xffffffffffff0001, 0x2)
r4 = socket(0x400000000010, 0x3, 0x0)
write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

2.490062485s ago: executing program 0 (id=907):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)={0x38, r2, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904"], 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/mdstat\x00', 0x1800, 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, 0x8, 0x1)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78})
sched_getattr(r6, &(0x7f0000000180)={0x38}, 0x38, 0x0)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)
r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101203, 0x28)
openat(r7, &(0x7f0000000080)='./file0\x00', 0x303000, 0x1c0)

2.399470503s ago: executing program 4 (id=908):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x40)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)

2.315312827s ago: executing program 8 (id=909):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x8}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.218163504s ago: executing program 8 (id=910):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000002c0)=@svm={0x101, 0x1, 0x1080, {0xeeef0000, 0x6}, {"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"}})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xd, 0x1d, 0x3, 0x2e, 0x4, '\x00', 0xf, 0xffffffffffffff80})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.97619004s ago: executing program 3 (id=911):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6)
mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='hfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='0', 0x1)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)="df0953b33d076bd04cff7e0a9b91c286ec008692e0491c29d05ec747fafe74a2b727f90749dd267f4d48368a512eeba10fc9304dd6ecc53877d620338730868d9b6ece83f22a026e47e463590ca07651e7a73b9ee2cf741661f65f0c08d5990783c500495fbd43284e9f2110b96069be29c0809da9bf0937c17a058b891531acbea8f4a3f40e6bbc00a1a65e234612fb80463f0e175c3b9cf29c6a965748623b221ba1db2c1050c16a73009f7ebbaff6f8a5e7a8ff4735183c17b7c7162f2d719a0c5bc80a8b798e409ff6cab09ecd714edd08bde004fab167c57ad9", 0xdc, 0x3)

1.795152856s ago: executing program 3 (id=912):
add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8)
shutdown(r1, 0x1)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c825800000105050000000000000000060000002d0002"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0)

1.739209755s ago: executing program 4 (id=913):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c80)={{<r2=>r1, &(0x7f0000000280)='/dev/kvm\x00', 0x80000, &(0x7f00000002c0)={@align=0x9, {0x8, 0x9, 0x401, 0x10001}}, 0x0, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0xbc7}, 0x9, &(0x7f0000000b40)=[{0x1, 0x1ff, &(0x7f0000000440)='$$.*\x00', &(0x7f0000000500)="0bdc79a382c49d8a34fe0733f2099919f44d57f2fb77b803d0a4a6c1d31e078e8592737e3a189b0caee4b4e3609955315e631878089dc4c717858be0a697799d1d0322303646cf205f52f9353e00", 0x4e}, {0x1, 0x6, &(0x7f0000000580)='./binderfs/binder0\x00', &(0x7f00000005c0)="002fdac40e93ff42e13547d0c1f6d885", 0x10, 0x12}, {0x3, 0x7, &(0x7f0000000600)='.\x00', &(0x7f0000000640)="8f54ed6c26abfee3ac1ee0b6c4c6dfa115dc1280623b955963d8d8b57edb8c5753f853937511948302e676e67acdf0ff5db6f1dac4f995", 0x37, 0x8}, {0x3, 0x10, &(0x7f0000000680)='/dev/kvm\x00', &(0x7f00000006c0)="207b580338697466f001975b01e214b1a8de757d23764855051dc83185a3bc05b68d2557f4150c3136cd30936269223764ce8bb513097c796f09e4369e21253c22b388bab47211f18a9b3f51fbd0964ae2fa77f0573a1322e32ada7551ebb93155ce0f87d48c03adb3cef5277e7eedde2ddbe58c23a74eced3565e5398841f952eb44b6b19695cf250950ef089d2bef739d4823d32ae7380de1f99cedcb5ec1a965a2099da6f9ba74273ab06592ade5c396334900e9ec3d1b1c8ab", 0xbb, 0x3a}, {0x1, 0x4, &(0x7f0000000780)='\xa4,\x00', &(0x7f00000007c0)="648c15343eaae57d5199bdd5211c933ed08ae80b7d5dfa57dd302f4858e9b98ca4e9d1916e84283e8b8475d47bfd6f7474c0624ba6cc6ddd1c56709f6a8d0779d22e4c3a425628c361444dc71b8526869dfd6978d7b66152d1b862934af4d050a7196ce7d1b5e7a1628bf2889d43ad84778a2c9c", 0x74}, {0x2, 0x1ff, &(0x7f0000000840)='/dev/kvm\x00', &(0x7f0000000880)="7173fda2e9b92dc47a9b3bfa2f644fbf82639da55e3556d8b9c9b097273c7f0f8ec0950d36da533e2d71ed26e78ffc0ed1370f09a49d5afa8388178aa2c60c4e2cd0f9f6357e1827a0f2b7d66a3b7e8e15943835e6", 0x55, 0x12}, {0x2, 0x40, &(0x7f0000000900)='./binderfs/binder0\x00', &(0x7f0000000940)="a4c8f414290cd03ac54f289aa833808b1ac5225ab4ada73968cd525ce0ac21a6fae5cd348548563fe00a23df18c878bbb79279f09c7f79e11c9254762712866d83ba2ed6d3daffe66a52aae3cb16ceae7bbbb5d7c3d8af09286c13e3e446c8b6be09c293268cdfb5559d41725ff0ad2f3d2e12c6900627ca63f632aba7f43e3f6024a6989262b52a2539b1dfdccbee9673ea3ebf4a8cac20dfb7341bdde5da58b3b2906c24094d2b1ab95f", 0xab, 0x2a}, {0x1, 0x0, &(0x7f0000000a00)='$[(+:\x00', &(0x7f0000000a40)="6242011544a2909c914d9d9c69c53894d14f514d52c24868b71d5b3e8f79a3a5889ebbe607c7d144e9fa024fef5a832b4c46e61ba65a16f4b6aaef71e85a1849d333c2dbacefb269bef4c9cd5bfbb56c65cd60b30063472a", 0x58, 0x14}, {0x2, 0xfffffffe, &(0x7f0000000ac0)='./binderfs/binder0\x00', &(0x7f0000000b00)="716ece2466c0cd6fb12c27cbd73a11ffc392960d71", 0x15, 0x6}]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ec0)={0x78, 0x0, &(0x7f0000000dc0)=[@register_looper, @request_death={0x400c630e, 0x3}, @enter_looper, @exit_looper, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000d00)={@fd={0x66642a85, 0x0, r2}, @fd, @fda={0x66646185, 0x5, 0x7, 0x1d}}, &(0x7f0000000d80)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x5}], 0x69, 0x0, &(0x7f0000000e40)="2efd5486ec2133f3b1f7b73806dad0b232bedd21adf293462d296c1423b618d99dd3342647720383e5362a7c38e7a0d0e8879879c0edb68e3b2b2bab61811f7dfa831f20421979c3bf11ee371ddcdd3c0f7307df5b13b13b42c7fb8f6d8a1802e57affc87845ddf04c"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fcntl$setlease(r5, 0x400, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioperm(0x0, 0xe, 0x9)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000240)={0x7f, 0x1ff})

1.531454654s ago: executing program 4 (id=914):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000000)='7', 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x162}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003f40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x121, 0x1, {0x1}})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xa32, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f00000004c0))

1.303152328s ago: executing program 4 (id=915):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x6, 0x0, 0x29}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 13)

1.284087803s ago: executing program 8 (id=916):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x20001, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000440))

108.604249ms ago: executing program 4 (id=917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0)
flock(0xffffffffffffffff, 0x2)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x98d2d90c43c13ee7}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a500000000b0a05000000000000000000030000090800054000000001240011800c0001007061796c6f616400140002800800034000000052080001400000000c100011800b00010072656a65637400003c0100000b0a030000000000000000000a0000060900020073797a310000000008000c400000000408000640ffffff0008000c40000000030c0010400000000000000004d7000d40e784a20d0095feeeea0f0fdd7c0cd564451b200e11f7ead1bdb6a5648589452ccc4db181cb1e8d940119f4e03a7531641d156956b966184226fcd4d62c3926e10947bef3010cf856a5658f04e84dab79f0fc3121071b20d66c3b68c9fc4e7e6f49835ad26723dfb053dd63f6236bfff0efe684186d0356e021d451d5773fad38423db82bf048d392ffbbb5c88dc3a28642632c58de919776e077ff225ada3e6dfe79437496f701e30f9e93663a908ad92525ff9fdde94ea4339e3076e143fcd8f0127f11cdae662b99d4e82648310dc6eb53a17c6c00100011800c0001006269747769736500080008400000000008000340000000682c0400000c0a01080000000000000000030000020900010073797a31000000000800044000000001f8030380d402008014000b80100001800a00010072616e676500000050020280da000100aa7169f5f82cb1565efd3c39b7b377480ad354881ac4fecb2ca6d427bf4545451cefeaf1e5c6c94658db9a75a9a6dffeb54e34a58e726a0f0523ba5f773fc0676ff81459dc48f685ea4fb1cffa65e250a5b58ed99906f1c2dadc8e5475515f31fa8601ffc9e71961c16e7ff367aa9c4570a6720c4f55dc1b832ef5347d875f36a07fc4d7daf9f230d1c5b99fe25e29f94c27ed86882f4466080e02aa674f1b3ad783f5114af1ca2d092bc97c4e3764c8dec8ce2fc5e9e2d647f8e4a52d6b034e2c5e0b30a92cac9bc5c506ec02440f7fddcc7df0031200003000028008000180fffffffe08000180fffffffd080003400000000108000180ffffffff0900020073797a31000000009e0001004f20f935da3ad9ef81824930d6aef83dae88272a1bab836d3aa76926ae305454fa6bf7c74a0ce46667ec915f7b6395a31ad4bdebbb3fb7c087eed9ed0b41da5b4f328a8b40660bef400818e83c8cdf257be1c7ff7b0f3981cddd9b4ccbf6c5c1fe6e4eaac5193a68dd8e555fa3126642be24e156d2afaf83a70da6875beb565a0b7fb5c6c17d0b9ed51c99c1b7afff708cd526c8c5e86f5650e2000014000280080001800000000208000340000000031400028008000180fffffffe080001800000000078000100a039e21d0bd72a63b0117bd3082d3938c3df437bef06942726591d7e153c4c66ca21c924451525418bce4a106a42b52f17038036dec2b2b3aecc1c17241fb4841311042ff9ae39ddb5028f79f32b1f66688145b679d8b6e6882ddd5c46c787ebf0ebba7707604b861373c20eca76a83c783a54e26c0002802f0001007abfcc5f8596b27a03fc8bfe463be055f49de0911112b4acf05415740c7216025238fb3ea1c8b57664b354000b00010084e648c25b4e6e002c0002800900020073797a300000000008000180fffffffb08000180000000000900020073797a3000000000040000801c010080b00006405691095ab1856273784f14019fea4e94c3de4800fc11324ef609499ac2ad4ea65085247c9a43c57cdbf0541cf48fcd3baea1dba9dc33f6b587fb440c59b8d5c4ec103cf4c60e20f19335251850a32155ebb77be6d62f49a2325c13ff14aa40a2b7c1ee113a3195549249f694284f976006e78e500996ff3d014c62d267a5b75ce5309719aa2baa11c7d49595ee0e99731623e37dc9839886f5e266da7d3b6bbe7a06f01686468b74aa967a5704000280640007800a000100696e6e65720000005400028008000240000000bb080002400000002c08000240000000610800014000000000140005800e000100696d6d6564696174650000000800044000000028140005800e000100696d6d6564696174650000000900010073797a310000000088000000060a01010000000000000000000000060900010073797a3000000000080009400000000208000940000000010900010073797a30000000003000048010000180090001006d617371000000001c0001800b000100736f636b657400000c00028008000300000000d508000a400000000308000a40000000000c000340000000000000000554000000030a05000000000000000000020000040c0002400000000000000003340008800c00024000000000000000030c00024000000000000000060c00014000000000000000000c000140000000000000000698000000030a01080000000000000000020000060c00024000000000000000034c0008800c00024000000000000000040c00024000000000000000810c00024000000000000000060c00014000000000000009d90c00024000000000000000990c00014000000000000000090900030073797a32000000000900030073797a320000000008000a400000000008000540fffffffc040008801400000011000100"/1876], 0x754}, 0x1, 0x0, 0x0, 0x10}, 0x40084)
flock(r1, 0x1)
flock(r1, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, 0x0, 0x0)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000))
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0}], 0x1})
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x16}}, './file0\x00'})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_getres(0xffffffffffffffed, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r6, 0x5)
landlock_restrict_self(r6, 0x0)

35.125344ms ago: executing program 3 (id=918):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r2, &(0x7f0000000240)=""/157, 0x9d)
r3 = dup(r1)
write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"20e31f30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000035c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000003600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2b702bbd7000fddbdf251b00000008000300", @ANYRES32=r6, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0xa800)

0s ago: executing program 8 (id=919):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file1\x00', 0x121042, 0x7)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r2, &(0x7f0000002100)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba4572d170b345ccb3b1b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c9635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b21b96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172489d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000000340)={&(0x7f00000001c0)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x8a00010, 0x100, 0x1a73, 0x80000084, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0xa, {0x7, 0x0, 0x0, {0x0, 0x80800000009, 0x10000000000, 0x9, 0x9, 0xfffffffffffffffe, 0x10, 0xc6, 0x978, 0xc000, 0xfffffff8, 0x0, 0xee00, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000400000000000000000000000100"/29], 0x28)

kernel console output (not intermixed with test programs):

ble UDC or it's busy
[  221.646804][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.736396][ T5759] usb 6-1: unable to get BOS descriptor or descriptor too short
[  221.736426][ T5759] usb 6-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[  221.736446][ T5759] usb 6-1: no configurations
[  221.736452][ T5759] usb 6-1: can't read configurations, error -22
[  221.973881][ T7762] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  222.056768][ T8352] input: syz1 as /devices/virtual/input/input22
[  222.077559][ T8352] fuse: Bad value for 'rootmode'
[  222.104979][ T7762] usb 7-1: device descriptor read/64, error -71
[  222.214598][ T8002] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  222.344762][ T7762] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  222.363752][ T8002] usb 8-1: Using ep0 maxpacket: 16
[  222.364260][ T8002] usb 8-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  222.365261][ T8002] usb 8-1: config index 0 descriptor too short (expected 51443, got 18)
[  222.366989][ T8002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.367002][ T8002] usb 8-1: Product: syz
[  222.367009][ T8002] usb 8-1: Manufacturer: syz
[  222.367017][ T8002] usb 8-1: SerialNumber: syz
[  222.372342][ T8002] r8152-cfgselector 8-1: Unknown version 0x0000
[  222.372355][ T8002] r8152-cfgselector 8-1: config 0 descriptor??
[  222.493443][ T7762] usb 7-1: device descriptor read/64, error -71
[  222.604061][ T7762] usb usb7-port1: attempt power cycle
[  222.943548][ T7762] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  222.963943][ T7762] usb 7-1: device descriptor read/8, error -71
[  223.124848][ T8373] bridge0: entered allmulticast mode
[  223.125456][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'.
[  223.125504][ T8373] bridge_slave_1: left allmulticast mode
[  223.125515][ T8373] bridge_slave_1: left promiscuous mode
[  223.127674][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.171933][ T8373] bridge_slave_0: left allmulticast mode
[  223.171949][ T8373] bridge_slave_0: left promiscuous mode
[  223.172088][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.204717][ T8373] bridge0 (unregistering): left allmulticast mode
[  223.220521][ T8374] Device name cannot be null; rc = [-22]
[  223.229401][ T7762] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  223.254902][ T7762] usb 7-1: device descriptor read/8, error -71
[  223.364324][ T7762] usb usb7-port1: unable to enumerate USB device
[  223.814453][ T5759] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  223.965882][ T5759] usb 4-1: unable to get BOS descriptor or descriptor too short
[  223.966269][ T5759] usb 4-1: not running at top speed; connect to a high speed hub
[  223.966287][ T5759] usb 4-1: New USB device found: idVendor=2466, idProduct=8010, bcdDevice=0.40
[  223.967087][ T5759] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 4
[  223.970187][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.970201][ T5759] usb 4-1: Product: syz
[  223.970209][ T5759] usb 4-1: Manufacturer: syz
[  223.970216][ T5759] usb 4-1: SerialNumber: syz
[  224.075710][ T7762] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  224.224651][ T7762] usb 6-1: not running at top speed; connect to a high speed hub
[  224.224671][ T7762] usb 6-1: New USB device found: idVendor=05d8, idProduct=8108, bcdDevice=44.eb
[  224.225575][ T7762] usb 6-1: config 65 has an invalid interface number: 105 but max is 0
[  224.225588][ T7762] usb 6-1: config 65 has no interface number 0
[  224.225603][ T7762] usb 6-1: config 65 interface 105 has no altsetting 0
[  224.227463][ T7762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.227476][ T7762] usb 6-1: Product: syz
[  224.227483][ T7762] usb 6-1: Manufacturer: syz
[  224.227491][ T7762] usb 6-1: SerialNumber: syz
[  224.437455][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.437728][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.462716][ T7762] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state.
[  224.462960][ T7762] dvb-usb: bulk message failed: -22 (3/0)
[  224.493811][ T7762] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  224.495211][ T7762] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235)
[  224.495256][ T7762] usb 6-1: media controller created
[  224.496782][ T7762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.501584][ T7762] dvb-usb: bulk message failed: -22 (6/0)
[  224.501687][ T7762] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235'
[  224.553656][ T7762] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23
[  224.556936][ T7762] dvb-usb: schedule remote query interval to 150 msecs.
[  224.556985][ T7762] dvb-usb: bulk message failed: -22 (3/0)
[  224.582591][ T7762] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully initialized and connected.
[  224.610951][ T7762] usb 6-1: USB disconnect, device number 27
[  224.722348][ T7762] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully deinitialized and disconnected.
[  224.741750][ T5759] usb 4-1: USB disconnect, device number 47
[  224.848156][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.972094][ T7762] r8152-cfgselector 8-1: USB disconnect, device number 7
[  225.333455][ T7762] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  225.349160][ T8397] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[  225.476850][ T8401] tmpfs: Bad value for 'mpol'
[  225.489919][ T7762] usb 8-1: New USB device found: idVendor=0bda, idProduct=8152, bcdDevice=30.11
[  225.490984][ T7762] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.491010][ T7762] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  225.503705][ T7762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.503719][ T7762] usb 8-1: Product: syz
[  225.503727][ T7762] usb 8-1: Manufacturer: syz
[  225.503734][ T7762] usb 8-1: SerialNumber: syz
[  225.564279][ T7762] r8152-cfgselector 8-1: Unknown version 0x0000
[  225.569039][ T7762] r8152 8-1:1.0: Expected endpoints are not found
[  225.676627][ T8404] ima: policy update failed
[  225.676723][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  225.676731][   T33] audit: type=1802 audit(1790857159.772:51): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.673" res=0 errno=-22
[  225.787242][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.787533][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.844361][ T7762] r8152-cfgselector 8-1: USB disconnect, device number 8
[  226.011811][ T8411] netlink: 88 bytes leftover after parsing attributes in process `syz.5.676'.
[  226.129603][ T8419] FAULT_INJECTION: forcing a failure.
[  226.129603][ T8419] name failslab, interval 1, probability 0, space 0, times 0
[  226.129623][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.5.676 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  226.129639][ T8419] Tainted: [L]=SOFTLOCKUP
[  226.129643][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  226.129650][ T8419] Call Trace:
[  226.129655][ T8419]  <TASK>
[  226.129660][ T8419]  dump_stack_lvl+0xe8/0x150
[  226.129680][ T8419]  should_fail_ex+0x3eb/0x540
[  226.129696][ T8419]  should_failslab+0xa8/0x100
[  226.129712][ T8419]  __kmalloc_cache_noprof+0x9e/0x600
[  226.129727][ T8419]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  226.129737][ T8419]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  226.129760][ T8419]  tcp_sendmsg_fastopen+0x1e7/0x5f0
[  226.129774][ T8419]  tcp_sendmsg_locked+0x4b02/0x5400
[  226.129798][ T8419]  ? __pfx___futex_wait+0x10/0x10
[  226.129812][ T8419]  ? __pfx_futex_wake_mark+0x10/0x10
[  226.129829][ T8419]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  226.129845][ T8419]  ? tcp_sendmsg+0x21/0x50
[  226.129856][ T8419]  ? __local_bh_enable_ip+0xd6/0x140
[  226.129872][ T8419]  tcp_sendmsg+0x2f/0x50
[  226.129883][ T8419]  ? __pfx_inet_sendmsg+0x10/0x10
[  226.129897][ T8419]  sock_sendmsg_nosec+0x10e/0x180
[  226.129914][ T8419]  __sys_sendto+0x408/0x5a0
[  226.129927][ T8419]  ? __pfx___sys_sendto+0x10/0x10
[  226.129951][ T8419]  ? rcu_is_watching+0x16/0xb0
[  226.129968][ T8419]  __x64_sys_sendto+0xde/0x100
[  226.129981][ T8419]  do_syscall_64+0x166/0x520
[  226.129993][ T8419]  ? trace_irq_disable+0x3b/0x140
[  226.130006][ T8419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.130017][ T8419]  ? clear_bhb_loop+0x70/0xc0
[  226.130029][ T8419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.130040][ T8419] RIP: 0033:0x7f469939e159
[  226.130051][ T8419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.130060][ T8419] RSP: 002b:00007f469a240028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  226.130072][ T8419] RAX: ffffffffffffffda RBX: 00007f4699626090 RCX: 00007f469939e159
[  226.130080][ T8419] RDX: 0000000000000014 RSI: 00002000000000c0 RDI: 0000000000000003
[  226.130087][ T8419] RBP: 00007f469943506b R08: 0000000000000000 R09: 0000000000000000
[  226.130094][ T8419] R10: 00000000340080d1 R11: 0000000000000246 R12: 0000000000000000
[  226.130101][ T8419] R13: 00007f4699626128 R14: 00007f4699626090 R15: 00007fff5e915e98
[  226.130117][ T8419]  </TASK>
[  226.639498][ T8429] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.934387][ T5340] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  227.084685][ T5340] usb 8-1: Using ep0 maxpacket: 32
[  227.085182][ T5340] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  227.085978][ T5340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.085995][ T5340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.086016][ T5340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.088324][ T5340] usb 8-1: config 0 descriptor??
[  227.108112][ T5340] hub 8-1:0.0: USB hub found
[  227.292701][ T5340] hub 8-1:0.0: 1 port detected
[  227.583643][ T7762] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  227.735319][ T7762] usb 7-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47
[  227.736157][ T7762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.737843][ T7762] usb 7-1: config 0 descriptor??
[  227.772858][ T7762] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  228.350152][ T5340] hub 8-1:0.0: config failed, can't get hub status (err -32)
[  228.365312][ T5340] usbhid 8-1:0.0: can't add hid device: -32
[  228.365374][ T5340] usbhid 8-1:0.0: probe with driver usbhid failed with error -32
[  228.764020][ T5340] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  228.915434][ T5340] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  228.916251][ T5340] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  228.916277][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.142103][ T5340] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  229.171609][ T5340] wwan wwan0: port wwan0qmi0 attached
[  229.804915][ T8002] usb 8-1: USB disconnect, device number 9
[  230.399802][ T7762] usb 7-1: USB disconnect, device number 16
[  230.559464][ T8553] tipc: Started in network mode
[  230.560997][ T8553] tipc: Node identity 7f000001, cluster identity 4711
[  230.599220][ T8553] tipc: Enabled bearer <udp:syz1>, priority 10
[  230.779663][ T8561] No source specified
[  230.910023][ T6741] Bluetooth: hci0: Frame reassembly failed (-84)
[  231.144611][ T5707] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  231.296297][ T5707] usb 7-1: Using ep0 maxpacket: 8
[  231.302290][ T5707] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  231.319908][ T5707] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  231.319924][ T5707] usb 7-1: config 179 has no interface number 0
[  231.319962][ T5707] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  231.319977][ T5707] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  231.319991][ T5707] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  231.320004][ T5707] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  231.320018][ T5707] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  231.320040][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.418554][ T8562] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  231.569082][   T54] Bluetooth: min 0 < 6
[  231.584963][ T8002] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  231.694968][ T5707] tipc: Node number set to 2130706433
[  231.721578][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.721916][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.733723][ T8002] usb 4-1: Using ep0 maxpacket: 8
[  231.756136][ T5707] usb 7-1: USB disconnect, device number 17
[  231.756190][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  231.756215][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  231.757787][ T8002] usb 4-1: unable to get BOS descriptor or descriptor too short
[  231.757812][ T8002] usb 4-1: New USB device found: idVendor=05da, idProduct=1018, bcdDevice=a2.59
[  231.763681][ T8002] usb 4-1: config 1 has an invalid interface number: 91 but max is 0
[  231.763696][ T8002] usb 4-1: config 1 has no interface number 0
[  231.763711][ T8002] usb 4-1: config 1 interface 91 has no altsetting 0
[  231.838255][ T8002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.838269][ T8002] usb 4-1: Product: syz
[  231.838292][ T8002] usb 4-1: Manufacturer: syz
[  231.838301][ T8002] usb 4-1: SerialNumber: syz
[  232.110851][ T8002] gspca_main: sunplus-2.14.0 probing 05da:1018
[  232.127852][ T8002] gspca_sunplus: reg_w_riv err -71
[  232.127897][ T8002] sunplus 4-1:1.91: probe with driver sunplus failed with error -71
[  232.152600][ T8002] usb 4-1: USB disconnect, device number 48
[  232.458449][ T8602] gfs2: path_lookup on  returned error -2
[  232.514374][ T8602] CacheFiles: Failed to register: -95
[  232.529303][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.707'.
[  232.984961][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  232.985013][ T4922] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  233.411994][ T5340] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 32:ba:92:34:06:17
[  233.431724][ T5340] usb 6-1: USB disconnect, device number 28
[  233.447420][ T5340] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device
[  233.535452][ T5340] wwan wwan0: port wwan0qmi0 disconnected
[  233.623466][ T4922] Bluetooth: hci4: command tx timeout
[  234.326397][ T8643] overlay: ./file0 is not a directory
[  234.544885][ T5340] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  234.674824][ T5340] usb 7-1: device descriptor read/64, error -71
[  234.914043][ T5340] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  235.043478][ T5340] usb 7-1: device descriptor read/64, error -71
[  235.154320][ T5340] usb usb7-port1: attempt power cycle
[  235.494837][ T5340] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  235.515234][ T5340] usb 7-1: device descriptor read/8, error -71
[  235.743606][ T7762] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  235.761143][ T5340] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  235.774918][ T5340] usb 7-1: device descriptor read/8, error -71
[  235.884431][ T5340] usb usb7-port1: unable to enumerate USB device
[  235.900828][ T7762] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[  235.901665][ T7762] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.901691][ T7762] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.903262][ T7762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.903276][ T7762] usb 6-1: Product: syz
[  235.903283][ T7762] usb 6-1: Manufacturer: syz
[  235.903291][ T7762] usb 6-1: SerialNumber: syz
[  236.248343][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.719'.
[  236.335370][ T7762] usb 6-1: USB disconnect, device number 29
[  237.515335][ T8667] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  237.515353][ T8667] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  237.515371][ T8667] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000
[  237.515380][ T8667] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  237.515387][ T8667] page dumped because: unmovable page
[  237.515405][ T8667] page_owner info is not present (never set?)
[  238.274837][ T8002] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  238.425808][ T8002] usb 7-1: Using ep0 maxpacket: 16
[  238.431627][ T8002] usb 7-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27
[  238.432724][ T8002] usb 7-1: config index 0 descriptor too short (expected 16456, got 72)
[  238.432739][ T8002] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[  238.432750][ T8002] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[  238.432760][ T8002] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[  238.432770][ T8002] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  238.432780][ T8002] usb 7-1: config 0 has no interface number 0
[  238.432802][ T8002] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  238.432817][ T8002] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  238.432828][ T8002] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  238.432844][ T8002] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  238.432857][ T8002] usb 7-1: config 0 interface 125 has no altsetting 0
[  238.432866][ T8002] usb 7-1: config 0 interface 125 has no altsetting 2
[  238.563988][ T8002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.564003][ T8002] usb 7-1: Product: syz
[  238.564011][ T8002] usb 7-1: Manufacturer: syz
[  238.564018][ T8002] usb 7-1: SerialNumber: syz
[  238.567861][ T8002] usb 7-1: config 0 descriptor??
[  238.605064][ T8002] usb 7-1: selecting invalid altsetting 2
[  238.739654][ T8680] FAULT_INJECTION: forcing a failure.
[  238.739654][ T8680] name failslab, interval 1, probability 0, space 0, times 0
[  238.739681][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.3.727 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  238.739696][ T8680] Tainted: [L]=SOFTLOCKUP
[  238.739700][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  238.739710][ T8680] Call Trace:
[  238.739715][ T8680]  <TASK>
[  238.739720][ T8680]  dump_stack_lvl+0xe8/0x150
[  238.739741][ T8680]  should_fail_ex+0x3eb/0x540
[  238.739756][ T8680]  should_failslab+0xa8/0x100
[  238.739771][ T8680]  ? do_getname+0x2e/0x250
[  238.739788][ T8680]  kmem_cache_alloc_noprof+0x9c/0x600
[  238.739800][ T8680]  ? do_futex+0x3e7/0x4e0
[  238.739816][ T8680]  ? do_getname+0x2e/0x250
[  238.739834][ T8680]  do_getname+0x2e/0x250
[  238.739848][ T8680]  ? getname_flags+0x11/0x20
[  238.739864][ T8680]  do_sys_openat2+0xce/0x200
[  238.739880][ T8680]  ? __se_sys_futex+0x3a8/0x450
[  238.739896][ T8680]  ? __pfx_do_sys_openat2+0x10/0x10
[  238.739915][ T8680]  ? rcu_is_watching+0x16/0xb0
[  238.739931][ T8680]  __x64_sys_openat+0x138/0x170
[  238.739949][ T8680]  do_syscall_64+0x166/0x520
[  238.739962][ T8680]  ? trace_irq_disable+0x3b/0x140
[  238.739974][ T8680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.739986][ T8680]  ? clear_bhb_loop+0x70/0xc0
[  238.739999][ T8680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.740009][ T8680] RIP: 0033:0x7f857059e159
[  238.740020][ T8680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.740030][ T8680] RSP: 002b:00007f8571453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  238.740042][ T8680] RAX: ffffffffffffffda RBX: 00007f8570825fa0 RCX: 00007f857059e159
[  238.740050][ T8680] RDX: 0000000000028041 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  238.740058][ T8680] RBP: 00007f857063506b R08: 0000000000000000 R09: 0000000000000000
[  238.740064][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.740071][ T8680] R13: 00007f8570826038 R14: 00007f8570825fa0 R15: 00007ffd0d82cf38
[  238.740086][ T8680]  </TASK>
[  239.082114][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.083790][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.111555][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.111792][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.435926][ T7762] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  239.586254][ T7762] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  239.587094][ T7762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.587118][ T7762] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  239.587131][ T7762] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  239.591450][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.591465][ T7762] usb 4-1: Product: syz
[  239.591472][ T7762] usb 4-1: Manufacturer: syz
[  239.591480][ T7762] usb 4-1: SerialNumber: syz
[  239.648347][ T8002] get_1284_register timeout
[  239.648456][    C0] usb 7-1: async_complete: urb error -104
[  239.648558][    C0] usb 7-1: async_complete: urb error -104
[  239.648624][    C0] usb 7-1: async_complete: urb error -104
[  239.648688][    C0] usb 7-1: async_complete: urb error -104
[  239.705850][ T7762] cdc_mbim 4-1:1.0: skipping garbage
[  239.911508][ T8687] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  240.518865][ T8687] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  240.746400][ T8687] netlink: 128 bytes leftover after parsing attributes in process `syz.3.730'.
[  240.749918][ T8687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.787586][ T7762] cdc_mbim 4-1:1.0: bind() failure
[  240.807222][ T7762] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  240.816837][ T7762] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  240.818936][ T7762] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  240.842633][ T7762] usb 4-1: USB disconnect, device number 49
[  241.083287][ T7762] usb 7-1: USB disconnect, device number 22
[  241.928282][ T8717] FAULT_INJECTION: forcing a failure.
[  241.928282][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.928303][ T8717] CPU: 0 UID: 0 PID: 8717 Comm: syz.5.737 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  241.928319][ T8717] Tainted: [L]=SOFTLOCKUP
[  241.928323][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  241.928330][ T8717] Call Trace:
[  241.928334][ T8717]  <TASK>
[  241.928339][ T8717]  dump_stack_lvl+0xe8/0x150
[  241.928358][ T8717]  should_fail_ex+0x3eb/0x540
[  241.928376][ T8717]  strncpy_from_user+0x36/0x2c0
[  241.928389][ T8717]  do_getname+0x77/0x250
[  241.928407][ T8717]  do_sys_openat2+0xce/0x200
[  241.928423][ T8717]  ? __se_sys_futex+0x3a8/0x450
[  241.928440][ T8717]  ? __pfx_do_sys_openat2+0x10/0x10
[  241.928458][ T8717]  ? rcu_is_watching+0x16/0xb0
[  241.928474][ T8717]  __x64_sys_openat+0x138/0x170
[  241.928493][ T8717]  do_syscall_64+0x166/0x520
[  241.928505][ T8717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.928516][ T8717]  ? clear_bhb_loop+0x70/0xc0
[  241.928529][ T8717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.928539][ T8717] RIP: 0033:0x7f469939e159
[  241.928549][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.928558][ T8717] RSP: 002b:00007f469a261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  241.928571][ T8717] RAX: ffffffffffffffda RBX: 00007f4699625fa0 RCX: 00007f469939e159
[  241.928579][ T8717] RDX: 0000000000028041 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  241.928587][ T8717] RBP: 00007f469943506b R08: 0000000000000000 R09: 0000000000000000
[  241.928593][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.928599][ T8717] R13: 00007f4699626038 R14: 00007f4699625fa0 R15: 00007fff5e915e98
[  241.928615][ T8717]  </TASK>
[  242.840531][ T8746] FAULT_INJECTION: forcing a failure.
[  242.840531][ T8746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.840553][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.6.746 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  242.840569][ T8746] Tainted: [L]=SOFTLOCKUP
[  242.840573][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  242.840580][ T8746] Call Trace:
[  242.840584][ T8746]  <TASK>
[  242.840589][ T8746]  dump_stack_lvl+0xe8/0x150
[  242.840611][ T8746]  should_fail_ex+0x3eb/0x540
[  242.840626][ T8746]  strncpy_from_user+0x36/0x2c0
[  242.840639][ T8746]  do_getname+0x77/0x250
[  242.840658][ T8746]  do_sys_openat2+0xce/0x200
[  242.840673][ T8746]  ? __se_sys_futex+0x3a8/0x450
[  242.840689][ T8746]  ? __pfx_do_sys_openat2+0x10/0x10
[  242.840708][ T8746]  ? rcu_is_watching+0x16/0xb0
[  242.840724][ T8746]  __x64_sys_openat+0x138/0x170
[  242.840742][ T8746]  do_syscall_64+0x166/0x520
[  242.840755][ T8746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.840766][ T8746]  ? clear_bhb_loop+0x70/0xc0
[  242.840778][ T8746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.840789][ T8746] RIP: 0033:0x7f9bac39e159
[  242.840799][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.840809][ T8746] RSP: 002b:00007f9bad1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  242.840822][ T8746] RAX: ffffffffffffffda RBX: 00007f9bac625fa0 RCX: 00007f9bac39e159
[  242.840830][ T8746] RDX: 0000000000028041 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  242.840838][ T8746] RBP: 00007f9bac43506b R08: 0000000000000000 R09: 0000000000000000
[  242.840845][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.840851][ T8746] R13: 00007f9bac626038 R14: 00007f9bac625fa0 R15: 00007fff78e17358
[  242.840867][ T8746]  </TASK>
[  243.025308][ T7762] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  243.184423][ T7762] usb 4-1: device descriptor read/64, error -71
[  243.323474][ T8002] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  243.424707][ T7762] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  243.473919][ T8002] usb 6-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00
[  243.474895][ T8002] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  243.474910][ T8002] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.476423][ T8002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  243.476436][ T8002] usb 6-1: SerialNumber: syz
[  243.574180][ T7762] usb 4-1: device descriptor read/64, error -71
[  243.685186][ T7762] usb usb4-port1: attempt power cycle
[  243.719627][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.719899][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.024133][ T7762] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  244.044189][ T7762] usb 4-1: device descriptor read/8, error -71
[  244.283770][ T7762] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  244.306773][ T7762] usb 4-1: device descriptor read/8, error -71
[  244.414319][ T7762] usb usb4-port1: unable to enumerate USB device
[  245.395885][ T8002] usb 6-1: 0:2 : does not exist
[  245.395936][ T8002] usb 6-1: unit 5: unexpected type 0x0d
[  245.481845][ T8002] usb 6-1: USB disconnect, device number 30
[  245.521260][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.810013][  T257] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  248.209120][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.213823][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.229892][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.238790][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.239139][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.505280][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.589610][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.667394][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.706196][ T8764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.712023][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'.
[  248.759000][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.002480][   T13] bridge_slave_1: left allmulticast mode
[  249.002497][   T13] bridge_slave_1: left promiscuous mode
[  249.002613][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.028843][   T13] bridge_slave_0: left allmulticast mode
[  249.028857][   T13] bridge_slave_0: left promiscuous mode
[  249.028972][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.062167][ T8797] fuse: Unknown parameter '0x0000000000000005'
[  249.299609][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.303057][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.314507][ T7762] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  249.335333][   T13] bond0 (unregistering): Released all slaves
[  249.485053][ T7762] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[  249.487421][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.487443][ T7762] usb 4-1: Product: syz
[  249.487450][ T7762] usb 4-1: Manufacturer: syz
[  249.487458][ T7762] usb 4-1: SerialNumber: syz
[  249.658601][   T13] hsr_slave_0: left promiscuous mode
[  249.659171][   T13] hsr_slave_1: left promiscuous mode
[  249.659701][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.659713][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.660172][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.660182][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.720345][   T13] veth1_macvtap: left promiscuous mode
[  249.720368][   T13] veth0_macvtap: left promiscuous mode
[  249.722048][   T13] veth1_vlan: left promiscuous mode
[  249.722089][   T13] veth0_vlan: left promiscuous mode
[  249.917034][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  249.917071][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  250.064693][   T13] team0 (unregistering): Port device team_slave_1 removed
[  250.071463][   T13] team0 (unregistering): Port device team_slave_0 removed
[  250.187671][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17
[  250.349079][   T54] Bluetooth: hci0: command tx timeout
[  250.498737][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.498851][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.498926][ T8782] bridge_slave_0: entered allmulticast mode
[  250.501513][ T8782] bridge_slave_0: entered promiscuous mode
[  250.540016][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.540071][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.540154][ T8782] bridge_slave_1: entered allmulticast mode
[  250.564484][ T8782] bridge_slave_1: entered promiscuous mode
[  250.617429][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.634547][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.685820][ T8782] team0: Port device team_slave_0 added
[  250.689219][ T8782] team0: Port device team_slave_1 added
[  250.737551][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.737560][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.737574][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.739809][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.739817][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.739832][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.897702][ T8782] hsr_slave_0: entered promiscuous mode
[  250.898364][ T8782] hsr_slave_1: entered promiscuous mode
[  251.194033][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18
[  251.285752][ T8782] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  251.307409][ T8782] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  251.309268][ T8782] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  251.332355][ T8782] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  251.333041][ T8782] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  251.358528][ T8782] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  251.359042][ T8782] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  251.362619][ T8782] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  251.516027][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.552563][ T8782] 8021q: adding VLAN 0 to HW filter on device team0
[  251.572677][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.572742][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.597585][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.597649][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.762745][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  251.763054][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  251.791722][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  251.791755][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  251.792130][ T7762] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  251.830161][ T7762] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  251.871547][ T7762] usb 4-1: USB disconnect, device number 54
[  252.148576][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19
[  252.321949][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.426348][   T54] Bluetooth: hci0: command tx timeout
[  252.675327][   T33] audit: type=1800 audit(1790857186.772:52): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.762" name="/0//deleted" dev="devpts" ino=3 res=0 errno=-13
[  252.800378][ T8782] veth0_vlan: entered promiscuous mode
[  252.819972][ T8782] veth1_vlan: entered promiscuous mode
[  252.868541][ T8782] veth0_macvtap: entered promiscuous mode
[  252.872761][ T8782] veth1_macvtap: entered promiscuous mode
[  252.893511][ T7762] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  252.902707][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.937603][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.972885][  T186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.973073][  T186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.973274][  T186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.973354][  T186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.045718][ T7762] usb 4-1: Using ep0 maxpacket: 32
[  253.080007][ T7762] usb 4-1: unable to get BOS descriptor or descriptor too short
[  253.080040][ T7762] usb 4-1: New USB device found: idVendor=2a39, idProduct=3f8c, bcdDevice=0.40
[  253.115686][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.115700][ T7762] usb 4-1: Product: syz
[  253.115708][ T7762] usb 4-1: Manufacturer: syz
[  253.115716][ T7762] usb 4-1: SerialNumber: syz
[  253.151210][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20
[  253.209702][ T6741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.209714][ T6741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.271812][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.271840][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.399584][ T7762] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  253.451108][ T8891] netlink: 14 bytes leftover after parsing attributes in process `syz.8.758'.
[  253.500464][ T7762] usb 4-1: USB disconnect, device number 55
[  253.539926][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.618686][ T8892] 9p: Bad value for 'wfdno'
[  254.503629][   T54] Bluetooth: hci0: command tx timeout
[  255.221840][ T8913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  255.629014][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  255.785039][ T5340] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  255.873514][ T8002] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  255.933527][ T5340] usb 9-1: Using ep0 maxpacket: 8
[  255.935926][ T5340] usb 9-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40
[  255.936834][ T5340] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.936852][ T5340] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.938610][ T5340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.938624][ T5340] usb 9-1: Product: syz
[  255.938631][ T5340] usb 9-1: Manufacturer: syz
[  255.938639][ T5340] usb 9-1: SerialNumber: syz
[  256.074416][ T8002] usb 4-1: Using ep0 maxpacket: 16
[  256.075391][ T8002] usb 4-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  256.076346][ T8002] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  256.076362][ T8002] usb 4-1: config 0 interface 0 has no altsetting 0
[  256.078191][ T8002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.078204][ T8002] usb 4-1: Product: syz
[  256.078212][ T8002] usb 4-1: Manufacturer: syz
[  256.078219][ T8002] usb 4-1: SerialNumber: syz
[  256.079823][ T8002] usb 4-1: config 0 descriptor??
[  256.165399][ T5340] usb 9-1: unit 6 not found!
[  256.197732][ T5340] usb 9-1: USB disconnect, device number 2
[  256.231931][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.583944][   T54] Bluetooth: hci0: command tx timeout
[  256.768887][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  256.792554][ T8002] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25
[  256.818850][ T8002] imon:send_packet: packet tx failed (-71)
[  256.834806][ T8002] imon 4-1:0.0: panel buttons/knobs setup failed
[  256.934784][ T8002] rc_core: IR keymap rc-imon-pad not found
[  256.934796][ T8002] Registered IR keymap rc-empty
[  256.934841][ T8002] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  256.934851][ T8002] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  256.936447][ T8002] imon:send_packet: packet tx failed (-71)
[  256.955483][ T8002] imon 4-1:0.0: remote input dev register failed
[  256.955607][ T8002] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  257.091888][ T8002] imon 4-1:0.0: unable to initialize intf0, err 0
[  257.109273][ T8002] usb 4-1: USB disconnect, device number 56
[  257.544546][ T7762] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[  257.698211][ T7762] usb 4-1: New USB device found: idVendor=056a, idProduct=00fb, bcdDevice=0.00
[  257.698983][ T7762] usb 4-1: config index 0 descriptor too short (expected 36, got 35)
[  257.698997][ T7762] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  257.699019][ T7762] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  257.699032][ T7762] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.699049][ T7762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.700531][ T7762] usb 4-1: config 0 descriptor??
[  257.771880][ T7762] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  257.906226][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.906473][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.965392][ T8943] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  260.327185][ T5340] usb 4-1: USB disconnect, device number 57
[  260.549410][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  260.563311][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  260.575348][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  260.575893][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  260.576212][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  261.064516][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.064627][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.064842][ T8958] bridge_slave_0: entered allmulticast mode
[  261.065818][ T8958] bridge_slave_0: entered promiscuous mode
[  261.095770][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.095824][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.096553][ T8958] bridge_slave_1: entered allmulticast mode
[  261.097478][ T8958] bridge_slave_1: entered promiscuous mode
[  261.147279][ T8958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.149556][ T8958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.185410][ T8958] team0: Port device team_slave_0 added
[  261.187238][ T8958] team0: Port device team_slave_1 added
[  261.216068][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.216077][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.216091][ T8958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.217193][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.217201][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.217215][ T8958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.389639][ T8958] hsr_slave_0: entered promiscuous mode
[  261.393113][ T8958] hsr_slave_1: entered promiscuous mode
[  261.408212][ T8958] debugfs: 'hsr0' already exists in 'hsr'
[  261.408234][ T8958] Cannot create hsr debugfs directory
[  261.713996][ T8958] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  261.716096][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  261.716742][ T8958] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  261.719012][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.719614][ T8958] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  261.721651][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  261.722357][ T8958] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  261.782183][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.805069][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.805133][ T8958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.805280][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.805340][ T8958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.873308][ T8958] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.888214][ T7762] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  261.892968][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.893347][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.921132][ T8958] 8021q: adding VLAN 0 to HW filter on device team0
[  261.932293][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.932347][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.957535][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.957589][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.034488][ T7762] usb 4-1: New USB device found: idVendor=2b73, idProduct=0034, bcdDevice=0.40
[  262.035262][ T7762] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  262.035274][ T7762] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  262.035284][ T7762] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  262.035294][ T7762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.035311][ T7762] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 107, using maximum allowed: 30
[  262.035330][ T7762] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  262.036948][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.036962][ T7762] usb 4-1: Product: syz
[  262.036969][ T7762] usb 4-1: Manufacturer: syz
[  262.036977][ T7762] usb 4-1: SerialNumber: syz
[  262.249637][   T33] audit: type=1800 audit(1790857196.342:53): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.786" name=08 dev="sda1" ino=2056 res=0 errno=-22
[  262.609044][ T8958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.664765][ T4922] Bluetooth: hci2: command tx timeout
[  262.819983][ T8958] veth0_vlan: entered promiscuous mode
[  262.835387][ T8958] veth1_vlan: entered promiscuous mode
[  262.882850][ T8958] veth0_macvtap: entered promiscuous mode
[  262.899317][ T8958] veth1_macvtap: entered promiscuous mode
[  262.930013][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.948229][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.985908][  T186] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.986084][  T186] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.986543][  T186] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.988046][  T186] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.180743][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.180756][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.287667][  T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.287679][  T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.477272][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.482844][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.502134][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.513571][ T5708] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  263.513801][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.514700][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.663979][ T5708] usb 9-1: Using ep0 maxpacket: 16
[  263.666401][ T5708] usb 9-1: New USB device found: idVendor=0b05, idProduct=1866, bcdDevice=0.40
[  263.667240][ T5708] usb 9-1: config 1 interface 0 has no altsetting 0
[  263.671017][ T5708] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.671032][ T5708] usb 9-1: Manufacturer: ӿ
[  263.671040][ T5708] usb 9-1: SerialNumber: Њ
[  263.940029][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.791'.
[  263.940047][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.791'.
[  264.312493][ T9026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  264.725262][ T7762] usb 4-1: USB disconnect, device number 58
[  264.743868][ T4922] Bluetooth: hci2: command tx timeout
[  265.271624][ T9061] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  265.624567][ T4922] Bluetooth: hci3: command tx timeout
[  265.730149][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.730220][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.730310][ T9027] bridge_slave_0: entered allmulticast mode
[  265.761093][ T9027] bridge_slave_0: entered promiscuous mode
[  265.779466][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.800738][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.800818][ T9027] bridge_slave_1: entered allmulticast mode
[  265.822778][ T9027] bridge_slave_1: entered promiscuous mode
[  266.032507][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.061416][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.204236][ T5759] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  266.278628][ T9027] team0: Port device team_slave_0 added
[  266.309259][ T9027] team0: Port device team_slave_1 added
[  266.354370][ T5759] usb 4-1: Using ep0 maxpacket: 8
[  266.376470][ T5759] usb 4-1: unable to get BOS descriptor or descriptor too short
[  266.376514][ T5759] usb 4-1: New USB device found: idVendor=05da, idProduct=1018, bcdDevice=a2.59
[  266.380865][ T5759] usb 4-1: config 1 has an invalid interface number: 91 but max is 0
[  266.380881][ T5759] usb 4-1: config 1 has no interface number 0
[  266.380897][ T5759] usb 4-1: config 1 interface 91 has no altsetting 0
[  266.435285][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.435300][ T5759] usb 4-1: Product: syz
[  266.435308][ T5759] usb 4-1: Manufacturer: syz
[  266.435316][ T5759] usb 4-1: SerialNumber: syz
[  266.559663][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.559673][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.559687][ T9027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.655026][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.655036][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.655051][ T9027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.766739][ T5759] gspca_main: sunplus-2.14.0 probing 05da:1018
[  266.774834][ T5759] gspca_sunplus: reg_w_riv err -71
[  266.774878][ T5759] sunplus 4-1:1.91: probe with driver sunplus failed with error -71
[  266.803872][ T5759] usb 4-1: USB disconnect, device number 59
[  266.823672][ T4922] Bluetooth: hci2: command tx timeout
[  267.020632][ T9027] hsr_slave_0: entered promiscuous mode
[  267.021252][ T9027] hsr_slave_1: entered promiscuous mode
[  267.021716][ T9027] debugfs: 'hsr0' already exists in 'hsr'
[  267.021727][ T9027] Cannot create hsr debugfs directory
[  267.615502][ T5708] usbhid 9-1:1.0: can't add hid device: -71
[  267.615562][ T5708] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  267.641628][ T5708] usb 9-1: USB disconnect, device number 3
[  267.704996][ T4922] Bluetooth: hci3: command tx timeout
[  268.207958][ T9098] netlink: 32 bytes leftover after parsing attributes in process `syz.8.800'.
[  268.387763][ T9106] fuse: Bad value for 'fd'
[  268.904023][ T4922] Bluetooth: hci2: command tx timeout
[  269.219721][ T9027] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  269.246040][ T9027] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  269.247788][ T9027] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  269.267973][ T5708] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  269.279173][ T9027] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  269.281768][ T9027] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  269.306605][ T9027] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  269.308614][ T9027] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  269.344158][ T9027] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  269.414904][ T5708] usb 10-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00
[  269.415722][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.594518][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.648197][ T9027] 8021q: adding VLAN 0 to HW filter on device team0
[  269.672356][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.672426][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.718752][  T186] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.718808][  T186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.786029][ T4922] Bluetooth: hci3: command tx timeout
[  270.155764][ T7762] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  270.320388][ T7762] usb 4-1: unable to get BOS descriptor or descriptor too short
[  270.320419][ T7762] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.40
[  270.321232][ T7762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.321245][ T7762] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  270.321276][ T7762] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7
[  270.322902][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.322916][ T7762] usb 4-1: Product: syz
[  270.322924][ T7762] usb 4-1: Manufacturer: syz
[  270.322931][ T7762] usb 4-1: SerialNumber: syz
[  270.451277][ T5708] usb 10-1: non-Atmel transceiver xxxx1fc6
[  270.608206][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.623137][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.653351][ T5708] usb 10-1: Firmware version (0.0) predates our first public release.
[  270.653364][ T5708] usb 10-1: Please update to version 0.2 or newer
[  270.998585][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.018488][ T5708] usb 10-1: atusb_probe: initialization failed, error = -19
[  271.040651][ T5708] usb 10-1: USB disconnect, device number 2
[  271.070177][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.070459][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.185020][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.185295][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.186640][ T9027] veth0_vlan: entered promiscuous mode
[  271.243095][ T9027] veth1_vlan: entered promiscuous mode
[  271.331673][ T9027] veth0_macvtap: entered promiscuous mode
[  271.358639][ T9027] veth1_macvtap: entered promiscuous mode
[  271.388858][ T7762] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[  271.388885][ T7762] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 1
[  271.388904][ T7762] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  271.426128][ T7762] usb 4-1: unit 2 not found!
[  271.426141][ T7762] usb 4-1: unit 0 not found!
[  271.453686][ T9027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.489794][ T9027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.704302][  T257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.724060][ T7762] usb 4-1: USB disconnect, device number 60
[  271.726452][ T9174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  271.743707][  T267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.744699][  T267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.744721][  T267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.864657][ T4922] Bluetooth: hci3: command tx timeout
[  271.882875][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.013308][  T257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.013320][  T257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.129300][  T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.129311][  T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.946195][ T5269] 8021q: adding VLAN 0 to HW filter on device macsec0
[  273.357066][ T5750] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  273.393377][ T9202] orangefs_devreq_write_iter: total:26: must be at least:8240:
[  273.508663][ T5750] usb 9-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[  273.512150][ T5750] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.512178][ T5750] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  273.512191][ T5750] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.565207][ T5750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  273.565222][ T5750] usb 9-1: Product: syz
[  273.565230][ T5750] usb 9-1: Manufacturer: syz
[  273.598250][ T9197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  273.601603][ T5750] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[  273.644327][ T5750] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  273.699736][ T9210] FAULT_INJECTION: forcing a failure.
[  273.699736][ T9210] name failslab, interval 1, probability 0, space 0, times 0
[  273.699756][ T9210] CPU: 0 UID: 0 PID: 9210 Comm: syz.3.814 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  273.699771][ T9210] Tainted: [L]=SOFTLOCKUP
[  273.699776][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  273.699783][ T9210] Call Trace:
[  273.699787][ T9210]  <TASK>
[  273.699792][ T9210]  dump_stack_lvl+0xe8/0x150
[  273.699811][ T9210]  should_fail_ex+0x3eb/0x540
[  273.699826][ T9210]  should_failslab+0xa8/0x100
[  273.699843][ T9210]  __kmalloc_cache_noprof+0x9e/0x600
[  273.699859][ T9210]  ? snd_pcm_hw_param_near+0x80/0x4d0
[  273.699871][ T9210]  ? snd_pcm_hw_param_near+0x80/0x4d0
[  273.699886][ T9210]  snd_pcm_hw_param_near+0x80/0x4d0
[  273.699901][ T9210]  snd_pcm_oss_change_params_locked+0x1e5e/0x3c80
[  273.699928][ T9210]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  273.699948][ T9210]  ? try_to_wake_up+0x8ce/0x14e0
[  273.699963][ T9210]  ? __lock_acquire+0x747/0x2de0
[  273.699978][ T9210]  snd_pcm_oss_write+0x26e/0xba0
[  273.699997][ T9210]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  273.700008][ T9210]  vfs_write+0x296/0xba0
[  273.700032][ T9210]  ? __pfx_vfs_write+0x10/0x10
[  273.700045][ T9210]  ? __fget_files+0x2a/0x420
[  273.700056][ T9210]  ? __fget_files+0x3a2/0x420
[  273.700068][ T9210]  ? __fget_files+0x2a/0x420
[  273.700082][ T9210]  ? fdget+0x1ac/0x250
[  273.700096][ T9210]  ksys_write+0x150/0x270
[  273.700110][ T9210]  ? __pfx_ksys_write+0x10/0x10
[  273.700129][ T9210]  do_syscall_64+0x166/0x520
[  273.700141][ T9210]  ? trace_irq_disable+0x3b/0x140
[  273.700154][ T9210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.700165][ T9210]  ? clear_bhb_loop+0x70/0xc0
[  273.700179][ T9210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.700190][ T9210] RIP: 0033:0x7f857059e159
[  273.700201][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.700210][ T9210] RSP: 002b:00007f8571453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  273.700223][ T9210] RAX: ffffffffffffffda RBX: 00007f8570825fa0 RCX: 00007f857059e159
[  273.700231][ T9210] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
[  273.700238][ T9210] RBP: 00007f857063506b R08: 0000000000000000 R09: 0000000000000000
[  273.700244][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.700250][ T9210] R13: 00007f8570826038 R14: 00007f8570825fa0 R15: 00007ffd0d82cf38
[  273.700267][ T9210]  </TASK>
[  274.140220][ T7762] usb 9-1: USB disconnect, device number 4
[  274.169587][ T7762] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  274.189345][ T7762] garmin_gps 9-1:1.0: device disconnected
[  274.428487][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.485805][ T9221] FAULT_INJECTION: forcing a failure.
[  274.485805][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.485825][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.0.817 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  274.485841][ T9221] Tainted: [L]=SOFTLOCKUP
[  274.485845][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.485852][ T9221] Call Trace:
[  274.485856][ T9221]  <TASK>
[  274.485861][ T9221]  dump_stack_lvl+0xe8/0x150
[  274.485880][ T9221]  should_fail_ex+0x3eb/0x540
[  274.485895][ T9221]  _copy_to_user+0x31/0xb0
[  274.485910][ T9221]  do_fcntl+0x153a/0x1a20
[  274.485926][ T9221]  ? lock_acquire+0x115/0x350
[  274.485948][ T9221]  ? __pfx_do_fcntl+0x10/0x10
[  274.485965][ T9221]  ? __fget_files+0x2a/0x420
[  274.485978][ T9221]  ? __fget_files+0x2a/0x420
[  274.485993][ T9221]  ? bpf_lsm_file_fcntl+0x9/0x20
[  274.486009][ T9221]  __se_sys_fcntl+0xc8/0x150
[  274.486024][ T9221]  do_syscall_64+0x166/0x520
[  274.486036][ T9221]  ? trace_irq_disable+0x3b/0x140
[  274.486049][ T9221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.486060][ T9221]  ? clear_bhb_loop+0x70/0xc0
[  274.486073][ T9221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.486084][ T9221] RIP: 0033:0x7fe7e619e159
[  274.486094][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.486104][ T9221] RSP: 002b:00007fe7e7016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  274.486116][ T9221] RAX: ffffffffffffffda RBX: 00007fe7e6425fa0 RCX: 00007fe7e619e159
[  274.486124][ T9221] RDX: 0000200000000100 RSI: 0000000000000010 RDI: 0000000000000004
[  274.486131][ T9221] RBP: 00007fe7e623506b R08: 0000000000000000 R09: 0000000000000000
[  274.486137][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.486144][ T9221] R13: 00007fe7e6426038 R14: 00007fe7e6425fa0 R15: 00007ffe1be10ee8
[  274.486160][ T9221]  </TASK>
[  275.695443][ T9250] netlink: 80 bytes leftover after parsing attributes in process `syz.3.821'.
[  276.114094][ T7762] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  276.132181][ T9261] FAULT_INJECTION: forcing a failure.
[  276.132181][ T9261] name failslab, interval 1, probability 0, space 0, times 0
[  276.132200][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.8.824 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  276.132216][ T9261] Tainted: [L]=SOFTLOCKUP
[  276.132220][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.132227][ T9261] Call Trace:
[  276.132232][ T9261]  <TASK>
[  276.132236][ T9261]  dump_stack_lvl+0xe8/0x150
[  276.132256][ T9261]  should_fail_ex+0x3eb/0x540
[  276.132270][ T9261]  should_failslab+0xa8/0x100
[  276.132287][ T9261]  __kmalloc_cache_noprof+0x9e/0x600
[  276.132301][ T9261]  ? snd_pcm_hw_param_near+0x80/0x4d0
[  276.132312][ T9261]  ? snd_pcm_hw_param_near+0x80/0x4d0
[  276.132327][ T9261]  snd_pcm_hw_param_near+0x80/0x4d0
[  276.132342][ T9261]  snd_pcm_oss_change_params_locked+0x1e5e/0x3c80
[  276.132368][ T9261]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  276.132388][ T9261]  ? try_to_wake_up+0x8ce/0x14e0
[  276.132403][ T9261]  ? __lock_acquire+0x747/0x2de0
[  276.132419][ T9261]  snd_pcm_oss_write+0x26e/0xba0
[  276.132438][ T9261]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  276.132448][ T9261]  vfs_write+0x296/0xba0
[  276.132465][ T9261]  ? __pfx_vfs_write+0x10/0x10
[  276.132478][ T9261]  ? __fget_files+0x2a/0x420
[  276.132489][ T9261]  ? __fget_files+0x3a2/0x420
[  276.132499][ T9261]  ? __fget_files+0x2a/0x420
[  276.132512][ T9261]  ? fdget+0x1ac/0x250
[  276.132527][ T9261]  ksys_write+0x150/0x270
[  276.132540][ T9261]  ? __pfx_ksys_write+0x10/0x10
[  276.132558][ T9261]  do_syscall_64+0x166/0x520
[  276.132570][ T9261]  ? trace_irq_disable+0x3b/0x140
[  276.132583][ T9261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.132594][ T9261]  ? clear_bhb_loop+0x70/0xc0
[  276.132606][ T9261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.132617][ T9261] RIP: 0033:0x7f1256d9e159
[  276.132628][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.132637][ T9261] RSP: 002b:00007f1257cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  276.132649][ T9261] RAX: ffffffffffffffda RBX: 00007f1257025fa0 RCX: 00007f1256d9e159
[  276.132657][ T9261] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
[  276.132664][ T9261] RBP: 00007f1256e3506b R08: 0000000000000000 R09: 0000000000000000
[  276.132671][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.132677][ T9261] R13: 00007f1257026038 R14: 00007f1257025fa0 R15: 00007ffd3ae687a8
[  276.132694][ T9261]  </TASK>
[  276.283739][ T7762] usb 4-1: Using ep0 maxpacket: 8
[  276.284653][ T7762] usb 4-1: New USB device found: idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  276.425776][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  276.425792][ T7762] usb 4-1: Product: syz
[  276.425799][ T7762] usb 4-1: Manufacturer: syz
[  276.425807][ T7762] usb 4-1: SerialNumber: syz
[  276.471635][ T7762] usb 4-1: config 0 descriptor??
[  276.484873][ T7762] gspca_main: sq905-2.14.0 probing 2770:9120
[  276.707237][ T9267] orangefs_devreq_write_iter: total:26: must be at least:8240:
[  276.833599][ T5750] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  276.984838][ T5750] usb 1-1: Using ep0 maxpacket: 8
[  276.994709][ T5750] usb 1-1: unable to get BOS descriptor or descriptor too short
[  276.994738][ T5750] usb 1-1: New USB device found: idVendor=05da, idProduct=1018, bcdDevice=a2.59
[  276.997065][ T5750] usb 1-1: config 1 has an invalid interface number: 91 but max is 0
[  276.997080][ T5750] usb 1-1: config 1 has no interface number 0
[  276.997095][ T5750] usb 1-1: config 1 interface 91 has no altsetting 0
[  277.041841][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.041854][ T5750] usb 1-1: Product: syz
[  277.041884][ T5750] usb 1-1: Manufacturer: syz
[  277.041892][ T5750] usb 1-1: SerialNumber: syz
[  277.289504][ T5750] gspca_main: sunplus-2.14.0 probing 05da:1018
[  277.301441][ T5750] gspca_sunplus: reg_w_riv err -71
[  277.301485][ T5750] sunplus 1-1:1.91: probe with driver sunplus failed with error -71
[  277.348733][ T5750] usb 1-1: USB disconnect, device number 13
[  277.598663][ T7762] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  277.598712][ T7762] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[  277.623596][ T7762] usb 4-1: USB disconnect, device number 61
[  277.902146][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'.
[  277.902159][ T9286] tipc: Invalid UDP bearer configuration
[  277.902182][ T9286] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  278.183831][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  278.251533][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.251767][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.278732][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.278964][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.279477][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.282039][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.323898][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.324130][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.354352][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.354577][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.383007][ T9302] netlink: 80 bytes leftover after parsing attributes in process `syz.3.831'.
[  278.404352][ T7762] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  278.535560][ T7762] usb 1-1: device descriptor read/64, error -71
[  278.775460][ T7762] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  278.904234][ T7762] usb 1-1: device descriptor read/64, error -71
[  279.015842][ T7762] usb usb1-port1: attempt power cycle
[  279.354391][ T7762] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  279.374686][ T7762] usb 1-1: device descriptor read/8, error -71
[  279.591256][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'.
[  279.591287][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'.
[  279.613667][ T7762] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  279.637270][ T7762] usb 1-1: device descriptor read/8, error -71
[  279.744567][ T7762] usb usb1-port1: unable to enumerate USB device
[  280.084006][ T7762] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  280.234760][ T7762] usb 9-1: Using ep0 maxpacket: 8
[  280.236776][ T7762] usb 9-1: unable to get BOS descriptor or descriptor too short
[  280.236804][ T7762] usb 9-1: New USB device found: idVendor=05da, idProduct=1018, bcdDevice=a2.59
[  280.238652][ T7762] usb 9-1: config 1 has an invalid interface number: 91 but max is 0
[  280.238667][ T7762] usb 9-1: config 1 has no interface number 0
[  280.238683][ T7762] usb 9-1: config 1 interface 91 has no altsetting 0
[  280.282554][ T7762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.282569][ T7762] usb 9-1: Product: syz
[  280.282577][ T7762] usb 9-1: Manufacturer: syz
[  280.282585][ T7762] usb 9-1: SerialNumber: syz
[  280.543127][ T7762] gspca_main: sunplus-2.14.0 probing 05da:1018
[  280.552520][ T7762] gspca_sunplus: reg_w_riv err -71
[  280.552572][ T7762] sunplus 9-1:1.91: probe with driver sunplus failed with error -71
[  280.572390][ T7762] usb 9-1: USB disconnect, device number 5
[  280.656563][ T5708] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  280.808720][ T5708] usb 4-1: Using ep0 maxpacket: 8
[  280.810558][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short
[  280.810586][ T5708] usb 4-1: New USB device found: idVendor=0b3c, idProduct=c005, bcdDevice=7b.81
[  280.811354][ T5708] usb 4-1: config 5 has an invalid interface number: 201 but max is 2
[  280.811368][ T5708] usb 4-1: config 5 has an invalid interface number: 168 but max is 2
[  280.811378][ T5708] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  280.811388][ T5708] usb 4-1: config 5 has an invalid interface number: 64 but max is 2
[  280.811398][ T5708] usb 4-1: config 5 has no interface number 0
[  280.811407][ T5708] usb 4-1: config 5 has no interface number 1
[  280.811415][ T5708] usb 4-1: config 5 has no interface number 2
[  280.811447][ T5708] usb 4-1: config 5 interface 168 altsetting 55 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  280.811461][ T5708] usb 4-1: config 5 interface 168 altsetting 55 has an invalid descriptor for endpoint zero, skipping
[  280.811473][ T5708] usb 4-1: config 5 interface 168 altsetting 55 has an invalid descriptor for endpoint zero, skipping
[  280.811484][ T5708] usb 4-1: config 5 interface 168 altsetting 55 has a duplicate endpoint with address 0x5, skipping
[  280.811496][ T5708] usb 4-1: config 5 interface 168 altsetting 55 endpoint 0x7 has an invalid bInterval 26, changing to 7
[  280.811517][ T5708] usb 4-1: config 5 interface 168 altsetting 55 endpoint 0xA has invalid maxpacket 1007, setting to 64
[  280.811538][ T5708] usb 4-1: config 5 interface 64 altsetting 9 endpoint 0x6 has an invalid bInterval 127, changing to 7
[  280.811551][ T5708] usb 4-1: config 5 interface 201 has no altsetting 0
[  280.811561][ T5708] usb 4-1: config 5 interface 168 has no altsetting 0
[  280.811570][ T5708] usb 4-1: config 5 interface 64 has no altsetting 0
[  280.813201][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.813214][ T5708] usb 4-1: Product: ⶿暢거퓆筡狛隋䊸࣎圧翢ꄹ蟕쓛錸゙ᶊᦛ獹伖黔ꁥ㲋팘⤿㩿Ⳇ먏⪀邞⶷䗯朋ट儞場뢓췥앢몢崋ￚﾴ띘忆̖ꓧ蹈ज़쇄렰⁈ۤ硲载Ὦ㼄쟂㙠㣪ᛓଠ恚㳅䳁䖷⺬ꇊ 㗑孻Ȩ⧾鉹퀍芪⓲
[  280.813229][ T5708] usb 4-1: Manufacturer: ෕쾻잰牺ᆒ挴㕃솩㧧๝依껺砡ࢼ픡糍ᴴⶒ≮ࣶ
[  280.813239][ T5708] usb 4-1: SerialNumber: ࠬ
[  281.295987][ T5708] option 4-1:5.201: GSM modem (1-port) converter detected
[  281.334806][ T5708] option 4-1:5.168: GSM modem (1-port) converter detected
[  281.361928][ T5708] option 4-1:5.64: GSM modem (1-port) converter detected
[  281.387112][ T5708] usb 4-1: USB disconnect, device number 62
[  281.388089][ T5708] option 4-1:5.201: device disconnected
[  281.431540][ T5708] option 4-1:5.168: device disconnected
[  281.447260][ T5708] option 4-1:5.64: device disconnected
[  281.524128][ T5759] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  281.674323][ T5759] usb 9-1: Using ep0 maxpacket: 32
[  281.674751][ T5759] usb 9-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  281.680006][ T5759] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  281.680042][ T5759] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  281.680057][ T5759] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.680071][ T5759] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  281.712525][ T5759] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.712539][ T5759] usb 9-1: Product: syz
[  281.712547][ T5759] usb 9-1: Manufacturer: syz
[  281.712555][ T5759] usb 9-1: SerialNumber: syz
[  281.795652][    C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  281.797195][ T5759] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input27
[  281.959358][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'.
[  282.014718][ T5759] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  282.014731][ T5759]  (id 0x00)
[  282.196529][ T5759] rc_core: IR keymap rc-imon-pad not found
[  282.196539][ T5759] Registered IR keymap rc-empty
[  282.196581][ T5759] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  282.196591][ T5759] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  282.242189][ T9359] input: syz0 as /devices/virtual/input/input29
[  282.292643][ T5759] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0
[  282.339381][ T5759] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input28
[  282.363572][ T7762] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  282.377072][ T5759] imon 9-1:155.0: iMON device (15c2:ffdc) on usb<9:6> initialized
[  282.514796][ T7762] usb 4-1: Using ep0 maxpacket: 8
[  282.516603][ T7762] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  282.523012][ T7762] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.523033][ T7762] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  282.523053][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  282.523067][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  282.523080][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  282.523093][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  282.523107][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  282.523122][ T7762] usb 4-1: config 168 interface 0 has no altsetting 0
[  282.539708][ T7762] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.539727][ T7762] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  282.539747][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  282.539761][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  282.539774][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  282.539787][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  282.539802][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  282.539823][ T7762] usb 4-1: config 168 interface 0 has no altsetting 0
[  282.550357][ T7762] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  282.550377][ T7762] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  282.550397][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  282.550411][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  282.550424][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  282.550447][ T7762] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  282.550461][ T7762] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  282.550475][ T7762] usb 4-1: config 168 interface 0 has no altsetting 0
[  282.630864][ T7762] usb 4-1: string descriptor 0 read error: -22
[  282.630938][ T7762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.888642][ T7762] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  282.956760][ T7762] usb 4-1: USB disconnect, device number 63
[  283.039814][ T9386] No source specified
[  283.320616][ T9395] imon:send_packet: task interrupted
[  283.320628][ T9395] imon:send_packet: packet tx failed (-512)
[  283.321134][ T9395] imon:vfd_write: send packet #2 failed
[  283.504209][ T5759] usb 9-1: USB disconnect, device number 6
[  283.965163][ T5708] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  284.113817][ T5708] usb 1-1: Using ep0 maxpacket: 32
[  284.116591][ T5708] usb 1-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa
[  284.118765][ T5708] usb 1-1: config 245 has an invalid interface number: 214 but max is 0
[  284.118780][ T5708] usb 1-1: config 245 has no interface number 0
[  284.118796][ T5708] usb 1-1: config 245 interface 214 has no altsetting 0
[  284.162393][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.162407][ T5708] usb 1-1: Product: syz
[  284.162415][ T5708] usb 1-1: Manufacturer: syz
[  284.162423][ T5708] usb 1-1: SerialNumber: syz
[  284.257468][ T9423] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  284.505199][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.851'.
[  284.646836][ T9435] netlink: 80 bytes leftover after parsing attributes in process `syz.3.852'.
[  285.341060][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.859'.
[  286.063766][ T7762] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  286.213853][ T7762] usb 9-1: Using ep0 maxpacket: 16
[  286.216413][ T7762] usb 9-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00
[  286.217664][ T7762] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  286.217690][ T7762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.222032][ T7762] usb 9-1: config 0 descriptor??
[  286.223178][ T9484] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  286.533880][ T5759] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  286.675810][ T7762] hid_parser_main: 30 callbacks suppressed
[  286.675825][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.675844][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.675860][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.675876][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.675891][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.678327][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.678392][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.678409][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.681949][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.681969][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0
[  286.723894][ T5759] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[  286.754277][ T5759] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.754304][ T5759] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.820257][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.820273][ T5759] usb 4-1: Product: syz
[  286.820281][ T5759] usb 4-1: Manufacturer: syz
[  286.820289][ T5759] usb 4-1: SerialNumber: syz
[  286.862956][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: unbalanced collection at end of report description
[  286.880072][ T7762] aquacomputer_d5next 0003:0C70:F00D.000D: probe with driver aquacomputer_d5next failed with error -22
[  286.909314][ T7762] usb 9-1: USB disconnect, device number 7
[  286.942152][ T5708] f81534a_ctrl 1-1:245.214: probe with driver f81534a_ctrl failed with error -71
[  286.977822][ T5708] usb 1-1: USB disconnect, device number 18
[  287.072384][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.072617][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.102679][ T9501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.867'.
[  287.497409][ T9513] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  287.668192][ T7762] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  287.743793][ T5340] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  287.815072][ T7762] usb 1-1: Using ep0 maxpacket: 32
[  287.818702][ T7762] usb 1-1: unable to get BOS descriptor or descriptor too short
[  287.818730][ T7762] usb 1-1: New USB device found: idVendor=09e8, idProduct=0062, bcdDevice=0.40
[  287.821367][ T7762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.821381][ T7762] usb 1-1: Product: syz
[  287.821389][ T7762] usb 1-1: Manufacturer: syz
[  287.821397][ T7762] usb 1-1: SerialNumber: syz
[  287.894975][ T5340] usb 9-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  287.895779][ T5340] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  287.895793][ T5340] usb 9-1: config 0 has no interface number 0
[  287.897498][ T5340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.897511][ T5340] usb 9-1: Product: syz
[  287.897520][ T5340] usb 9-1: Manufacturer: syz
[  287.897527][ T5340] usb 9-1: SerialNumber: syz
[  287.902983][ T5340] usb 9-1: config 0 descriptor??
[  287.979401][ T5340] usb 9-1: selecting invalid altsetting 1
[  287.979960][ T5340] dvb_ttusb_budget: ttusb_init_controller: error
[  287.979970][ T5340] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  288.091734][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.092008][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.137190][ T7762] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  288.199449][ T5340] DVB: Unable to find symbol stv0299_attach()
[  288.318504][ T5340] DVB: Unable to find symbol tda8083_attach()
[  288.318513][ T5340] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  288.345590][ T5340] usb 9-1: USB disconnect, device number 8
[  288.423033][ T7762] usb 1-1: USB disconnect, device number 19
[  288.478674][ T5708] usb 4-1: USB disconnect, device number 64
[  288.588176][ T7062] udevd[7062]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.021593][ T9536] can: request_module (can-proto-0) failed.
[  289.107596][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  289.113115][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  289.138188][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  289.138737][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  289.139058][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  289.217044][ T9546] random: crng reseeded on system resumption
[  289.735463][ T9563] FAULT_INJECTION: forcing a failure.
[  289.735463][ T9563] name failslab, interval 1, probability 0, space 0, times 0
[  289.735485][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.0.876 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  289.735501][ T9563] Tainted: [L]=SOFTLOCKUP
[  289.735505][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.735513][ T9563] Call Trace:
[  289.735517][ T9563]  <TASK>
[  289.735523][ T9563]  dump_stack_lvl+0xe8/0x150
[  289.735542][ T9563]  should_fail_ex+0x3eb/0x540
[  289.735557][ T9563]  should_failslab+0xa8/0x100
[  289.735574][ T9563]  __kvmalloc_node_noprof+0x171/0x820
[  289.735590][ T9563]  ? __kmalloc_cache_noprof+0x31c/0x600
[  289.735603][ T9563]  ? alloc_netdev_mqs+0xd59/0x12c0
[  289.735618][ T9563]  ? alloc_netdev_mqs+0xd59/0x12c0
[  289.735635][ T9563]  alloc_netdev_mqs+0xd59/0x12c0
[  289.735652][ T9563]  ip6_tnl_locate+0x686/0x840
[  289.735674][ T9563]  ? __pfx_ip6_tnl_locate+0x10/0x10
[  289.735688][ T9563]  ? __might_fault+0xaf/0x130
[  289.735704][ T9563]  ? ip6_tnl_siocdevprivate+0x601/0xad0
[  289.735720][ T9563]  ip6_tnl_siocdevprivate+0x631/0xad0
[  289.735738][ T9563]  ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10
[  289.735763][ T9563]  ? __pfx___mutex_lock+0x10/0x10
[  289.735776][ T9563]  ? full_name_hash+0x92/0xe0
[  289.735791][ T9563]  dev_ifsioc+0xb56/0x1360
[  289.735806][ T9563]  dev_ioctl+0x84c/0x1150
[  289.735818][ T9563]  sock_ioctl+0x753/0x7e0
[  289.735834][ T9563]  ? __pfx_sock_ioctl+0x10/0x10
[  289.735849][ T9563]  ? __fget_files+0x2a/0x420
[  289.735863][ T9563]  ? bpf_lsm_file_ioctl+0x9/0x20
[  289.735877][ T9563]  ? __pfx_sock_ioctl+0x10/0x10
[  289.735891][ T9563]  __se_sys_ioctl+0xfc/0x170
[  289.735906][ T9563]  do_syscall_64+0x166/0x520
[  289.735919][ T9563]  ? trace_irq_disable+0x3b/0x140
[  289.735932][ T9563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.735943][ T9563]  ? clear_bhb_loop+0x70/0xc0
[  289.735956][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.735967][ T9563] RIP: 0033:0x7fe7e619e159
[  289.735978][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.735988][ T9563] RSP: 002b:00007fe7e7016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  289.736001][ T9563] RAX: ffffffffffffffda RBX: 00007fe7e6425fa0 RCX: 00007fe7e619e159
[  289.736010][ T9563] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000004
[  289.736017][ T9563] RBP: 00007fe7e623506b R08: 0000000000000000 R09: 0000000000000000
[  289.736024][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.736030][ T9563] R13: 00007fe7e6426038 R14: 00007fe7e6425fa0 R15: 00007ffe1be10ee8
[  289.736047][ T9563]  </TASK>
[  289.749110][ T7762] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  289.878824][ T7762] usb 4-1: device descriptor read/64, error -71
[  290.144318][ T7762] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  290.222711][ T6741] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.274405][ T7762] usb 4-1: device descriptor read/64, error -71
[  290.376561][ T6741] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.396617][ T7762] usb usb4-port1: attempt power cycle
[  290.523117][ T6741] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.621441][ T6741] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.743889][ T7762] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  290.766533][ T7762] usb 4-1: device descriptor read/8, error -71
[  290.805114][ T5340] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  290.898316][ T6741] bridge_slave_1: left allmulticast mode
[  290.898332][ T6741] bridge_slave_1: left promiscuous mode
[  290.898458][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.910922][ T6741] bridge_slave_0: left allmulticast mode
[  290.910936][ T6741] bridge_slave_0: left promiscuous mode
[  290.911054][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.964026][ T5340] usb 1-1: Using ep0 maxpacket: 16
[  290.964859][ T5340] usb 1-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  290.967182][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.967196][ T5340] usb 1-1: Product: syz
[  290.967205][ T5340] usb 1-1: Manufacturer: syz
[  290.967213][ T5340] usb 1-1: SerialNumber: syz
[  290.971894][ T5340] usb 1-1: config 0 descriptor??
[  291.011367][ T7762] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  291.032480][ T5340] gspca_main: spca508-2.14.0 probing 041e:4018
[  291.055985][ T7762] usb 4-1: device descriptor read/8, error -71
[  291.166652][ T7762] usb usb4-port1: unable to enumerate USB device
[  291.226076][ T4922] Bluetooth: hci6: command tx timeout
[  291.269363][ T5340] gspca_spca508: reg_read err -32
[  291.269811][ T5340] gspca_spca508: reg_read err -32
[  291.338605][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.341563][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.342491][ T6741] bond0 (unregistering): Released all slaves
[  291.383492][ T4922] Bluetooth: hci7: command 0x1003 tx timeout
[  291.383547][   T54] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  291.491820][ T5340] gspca_spca508: reg_read err -71
[  291.492130][ T5340] gspca_spca508: reg_read err -71
[  291.507361][ T5340] gspca_spca508: reg write: error -71
[  291.507407][ T5340] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  291.537289][ T5340] usb 1-1: USB disconnect, device number 20
[  291.801604][ T6741] hsr_slave_0: left promiscuous mode
[  291.801988][ T6741] hsr_slave_1: left promiscuous mode
[  291.802469][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.802481][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.835850][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.835863][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.859355][ T6741] veth1_macvtap: left promiscuous mode
[  291.859376][ T6741] veth0_macvtap: left promiscuous mode
[  291.859440][ T6741] veth1_vlan: left promiscuous mode
[  291.859475][ T6741] veth0_vlan: left promiscuous mode
[  292.265122][ T6741] team0 (unregistering): Port device team_slave_1 removed
[  292.271461][ T6741] team0 (unregistering): Port device team_slave_0 removed
[  292.390173][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1
[  292.444656][ T5759] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  292.604720][ T5759] usb 1-1: Using ep0 maxpacket: 8
[  292.608473][ T5759] usb 1-1: unable to get BOS descriptor or descriptor too short
[  292.608500][ T5759] usb 1-1: New USB device found: idVendor=05da, idProduct=1018, bcdDevice=a2.59
[  292.609268][ T5759] usb 1-1: config 1 has an invalid interface number: 91 but max is 0
[  292.609283][ T5759] usb 1-1: config 1 has no interface number 0
[  292.609300][ T5759] usb 1-1: config 1 interface 91 has no altsetting 0
[  292.612330][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.612344][ T5759] usb 1-1: Product: syz
[  292.612352][ T5759] usb 1-1: Manufacturer: syz
[  292.612360][ T5759] usb 1-1: SerialNumber: syz
[  292.694029][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.694085][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.694178][ T9543] bridge_slave_0: entered allmulticast mode
[  292.731926][ T9543] bridge_slave_0: entered promiscuous mode
[  292.741525][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.741581][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.741662][ T9543] bridge_slave_1: entered allmulticast mode
[  292.770254][ T9543] bridge_slave_1: entered promiscuous mode
[  292.783589][ T5708] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  292.841426][ T5759] gspca_main: sunplus-2.14.0 probing 05da:1018
[  292.843364][ T5759] gspca_sunplus: reg_w_riv err -71
[  292.844366][ T5759] sunplus 1-1:1.91: probe with driver sunplus failed with error -71
[  292.867236][ T5759] usb 1-1: USB disconnect, device number 21
[  292.911440][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.934512][ T5340] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  292.945719][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.965870][ T5708] usb 9-1: Using ep0 maxpacket: 8
[  292.967009][ T5708] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  292.969441][ T5708] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  292.969470][ T5708] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  292.969482][ T5708] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  292.969495][ T5708] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  292.969508][ T5708] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  292.969529][ T5708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.106227][ T5340] usb 4-1: Using ep0 maxpacket: 8
[  293.106950][ T5340] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  293.107738][ T5340] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  293.107764][ T5340] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.107776][ T5340] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.107790][ T5340] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.107802][ T5340] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.107824][ T5340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.209012][ T5708] usb 9-1: usb_control_msg returned -32
[  293.209055][ T5708] usbtmc 9-1:16.0: can't read capabilities
[  293.229365][ T9543] team0: Port device team_slave_0 added
[  293.247063][ T9543] team0: Port device team_slave_1 added
[  293.299101][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.299112][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.299126][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.303176][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.303186][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.303215][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.304958][   T54] Bluetooth: hci6: command tx timeout
[  293.419576][ T5340] usb 4-1: usb_control_msg returned -32
[  293.419603][ T5340] usbtmc 4-1:16.0: can't read capabilities
[  293.520088][ T9543] hsr_slave_0: entered promiscuous mode
[  293.531176][ T9543] hsr_slave_1: entered promiscuous mode
[  293.531909][ T9543] debugfs: 'hsr0' already exists in 'hsr'
[  293.531922][ T9543] Cannot create hsr debugfs directory
[  293.551565][ T9621] random: crng reseeded on system resumption
[  293.817509][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.884'.
[  293.933021][ T9634] usbtmc 9-1:16.0: usb_control_msg returned -32
[  294.128970][ T5340] usb 9-1: USB disconnect, device number 9
[  294.130794][ T9641] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -19
[  294.148053][ T9641] usbtmc 9-1:16.0: usb_control_msg returned -19
[  294.201372][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2
[  294.593576][ T5340] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  294.744192][ T5340] usb 1-1: Using ep0 maxpacket: 8
[  294.744612][ T5340] usb 1-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00
[  294.745836][ T5340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  294.745853][ T5340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  294.745874][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.749399][ T5340] usb 1-1: config 0 descriptor??
[  294.997541][ T9543] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  295.042461][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  295.043279][ T9543] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  295.085207][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  295.087318][ T9543] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  295.111322][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  295.112926][ T9543] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  295.152778][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  295.175019][ T5340] hid_parser_main: 403 callbacks suppressed
[  295.175032][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175052][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175067][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175082][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175097][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175112][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175176][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.175194][ T5340] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0
[  295.252789][ T5340] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  295.287514][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3
[  295.384536][   T54] Bluetooth: hci6: command tx timeout
[  295.510926][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.539657][ T9543] 8021q: adding VLAN 0 to HW filter on device team0
[  295.557562][  T267] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.557620][  T267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.591410][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.591473][ T6741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.648315][ T7762] usb 4-1: USB disconnect, device number 69
[  295.675077][ T5708] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  295.781714][ T5340] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71
[  295.782785][ T5340] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71
[  295.812707][ T5340] usb 1-1: USB disconnect, device number 22
[  295.828169][ T5708] usb 9-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00
[  295.830790][ T5708] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.830807][ T5708] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  295.830829][ T5708] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.830844][ T5708] usb 9-1: config 0 interface 0 has no altsetting 0
[  295.830862][ T5708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.913002][ T5708] usb 9-1: config 0 descriptor??
[  295.913718][ T9672] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  296.419212][ T5708] usbhid 9-1:0.0: can't add hid device: -71
[  296.419271][ T5708] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  296.443885][ T5708] usb 9-1: USB disconnect, device number 10
[  296.681270][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4
[  296.693592][ T5340] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  296.761938][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.853685][ T5340] usb 1-1: Using ep0 maxpacket: 8
[  296.855233][ T5340] usb 1-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00
[  296.856234][ T5340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.856251][ T5340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.856262][ T5340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.856284][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.857794][ T5340] usb 1-1: config 0 descriptor??
[  297.143746][ T8002] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  297.295527][ T8002] usb 4-1: Using ep0 maxpacket: 32
[  297.297590][ T8002] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  297.298718][ T8002] usb 4-1: config 0 has no interfaces?
[  297.300463][ T8002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.300477][ T8002] usb 4-1: Product: syz
[  297.300485][ T8002] usb 4-1: Manufacturer: syz
[  297.300493][ T8002] usb 4-1: SerialNumber: syz
[  297.321803][ T8002] usb 4-1: config 0 descriptor??
[  297.464984][   T54] Bluetooth: hci6: command tx timeout
[  297.482463][ T9543] veth0_vlan: entered promiscuous mode
[  297.509431][ T9543] veth1_vlan: entered promiscuous mode
[  297.565411][ T5340] sony 0003:054C:042F.000F: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  297.590787][ T5340] sony 0003:054C:042F.000F: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0
[  297.590806][ T5340] sony 0003:054C:042F.000F: failed to claim input
[  297.636751][ T5340] usb 1-1: USB disconnect, device number 23
[  297.638420][ T9543] veth0_macvtap: entered promiscuous mode
[  297.663126][ T9543] veth1_macvtap: entered promiscuous mode
[  297.720966][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.749017][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.813079][ T9737] fido_id[9737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  297.885611][  T267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.885937][  T267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.885958][  T267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.885976][  T267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.098412][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.098425][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.200540][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.200553][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.582368][ T9759] FAULT_INJECTION: forcing a failure.
[  298.582368][ T9759] name failslab, interval 1, probability 0, space 0, times 0
[  298.582393][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.8.900 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  298.582408][ T9759] Tainted: [L]=SOFTLOCKUP
[  298.582412][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.582421][ T9759] Call Trace:
[  298.582429][ T9759]  <TASK>
[  298.582434][ T9759]  dump_stack_lvl+0xe8/0x150
[  298.582453][ T9759]  should_fail_ex+0x3eb/0x540
[  298.582468][ T9759]  should_failslab+0xa8/0x100
[  298.582483][ T9759]  __kmalloc_noprof+0xf9/0x710
[  298.582496][ T9759]  ? sk_prot_alloc+0xe7/0x210
[  298.582507][ T9759]  ? sk_prot_alloc+0xe7/0x210
[  298.582518][ T9759]  ? x25_negotiate_facilities+0x51d/0x8f0
[  298.582533][ T9759]  sk_prot_alloc+0xe7/0x210
[  298.582551][ T9759]  ? sk_alloc+0x27/0x390
[  298.582562][ T9759]  sk_alloc+0x3a/0x390
[  298.582572][ T9759]  ? x25_find_listener+0x2fd/0x360
[  298.582584][ T9759]  x25_make_new+0x92/0x8a0
[  298.582596][ T9759]  x25_rx_call_request+0x483/0xca0
[  298.582610][ T9759]  ? __pfx_x25_rx_call_request+0x10/0x10
[  298.582629][ T9759]  ? __local_bh_enable_ip+0xd6/0x140
[  298.582643][ T9759]  ? lockdep_hardirqs_on+0x7b/0x110
[  298.582655][ T9759]  ? x25_find_socket+0x10b/0x190
[  298.582664][ T9759]  ? __local_bh_enable_ip+0xd6/0x140
[  298.582679][ T9759]  x25_lapb_receive_frame+0x433/0xfb0
[  298.582693][ T9759]  ? netif_receive_skb+0x102/0xbf0
[  298.582707][ T9759]  ? netif_receive_skb+0x102/0xbf0
[  298.582720][ T9759]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  298.582732][ T9759]  netif_receive_skb+0x4af/0xbf0
[  298.582749][ T9759]  ? __pfx_netif_receive_skb+0x10/0x10
[  298.582765][ T9759]  ? tun_rx_batched+0x185/0x790
[  298.582777][ T9759]  tun_rx_batched+0x1de/0x790
[  298.582790][ T9759]  ? __pfx_tun_rx_batched+0x10/0x10
[  298.582801][ T9759]  ? lock_acquire+0x115/0x350
[  298.582816][ T9759]  ? tun_get_user+0x23ba/0x44d0
[  298.582826][ T9759]  ? __local_bh_enable_ip+0xd6/0x140
[  298.582838][ T9759]  ? tun_get_user+0x27b0/0x44d0
[  298.582849][ T9759]  tun_get_user+0x2be0/0x44d0
[  298.582865][ T9759]  ? tun_get_user+0x27b0/0x44d0
[  298.582874][ T9759]  ? aa_file_perm+0x18b/0x15f0
[  298.582888][ T9759]  ? aa_file_perm+0x4ed/0x15f0
[  298.582902][ T9759]  ? __pfx_tun_get_user+0x10/0x10
[  298.582913][ T9759]  ? __lock_acquire+0x747/0x2de0
[  298.582926][ T9759]  ? kstrtoull+0x137/0x1d0
[  298.582945][ T9759]  ? ref_tracker_alloc+0x341/0x4b0
[  298.582957][ T9759]  ? lock_acquire+0x115/0x350
[  298.582968][ T9759]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  298.582982][ T9759]  ? lock_acquire+0x115/0x350
[  298.582993][ T9759]  ? tun_get+0x1c/0x2f0
[  298.583005][ T9759]  ? tun_get+0x1c/0x2f0
[  298.583014][ T9759]  ? tun_get+0x1c/0x2f0
[  298.583026][ T9759]  tun_chr_write_iter+0x113/0x200
[  298.583043][ T9759]  vfs_write+0x612/0xba0
[  298.583060][ T9759]  ? __pfx_vfs_write+0x10/0x10
[  298.583073][ T9759]  ? __fget_files+0x3a2/0x420
[  298.583084][ T9759]  ? __fget_files+0x2a/0x420
[  298.583097][ T9759]  ? fdget+0x1ac/0x250
[  298.583111][ T9759]  ksys_write+0x150/0x270
[  298.583124][ T9759]  ? __pfx_ksys_write+0x10/0x10
[  298.583141][ T9759]  do_syscall_64+0x166/0x520
[  298.583153][ T9759]  ? trace_irq_disable+0x3b/0x140
[  298.583165][ T9759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.583176][ T9759]  ? clear_bhb_loop+0x70/0xc0
[  298.583188][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.583198][ T9759] RIP: 0033:0x7f1256d9e159
[  298.583209][ T9759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.583218][ T9759] RSP: 002b:00007f1257cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  298.583230][ T9759] RAX: ffffffffffffffda RBX: 00007f1257025fa0 RCX: 00007f1256d9e159
[  298.583238][ T9759] RDX: 0000000000000097 RSI: 0000200000000140 RDI: 0000000000000007
[  298.583245][ T9759] RBP: 00007f1257cd5090 R08: 0000000000000000 R09: 0000000000000000
[  298.583252][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.583258][ T9759] R13: 00007f1257026038 R14: 00007f1257025fa0 R15: 00007ffd3ae687a8
[  298.583274][ T9759]  </TASK>
[  298.596962][ T8002] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  299.025334][ T8002] usb 1-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  299.077073][ T8002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.077089][ T8002] usb 1-1: Product: syz
[  299.077098][ T8002] usb 1-1: Manufacturer: syz
[  299.077106][ T8002] usb 1-1: SerialNumber: syz
[  299.083643][ T8002] usb 1-1: config 0 descriptor??
[  299.252692][ T9766] random: crng reseeded on system resumption
[  299.309368][ T8002] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22
[  299.402660][ T9768] netlink: 32 bytes leftover after parsing attributes in process `syz.8.903'.
[  299.512793][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.513063][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.820724][ T5759] usb 4-1: USB disconnect, device number 70
[  299.902664][ T9788] input: syz0 as /devices/virtual/input/input31
[  300.075515][ T9795] IPVS: set_ctl: invalid protocol: 44 172.30.1.4:20004
[  300.076572][ T9795] netlink: 'syz.3.906': attribute type 15 has an invalid length.
[  300.076583][ T9795] netlink: 666 bytes leftover after parsing attributes in process `syz.3.906'.
[  300.353006][ T8002] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  300.387138][ T9766] hwrng_fill thread creation failed
[  300.397417][ T8002] usb 1-1: USB disconnect, device number 24
[  300.784988][ T8002] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  300.939864][ T8002] usb 1-1: New USB device found: idVendor=0403, idProduct=bca4, bcdDevice=2.23
[  300.956991][ T8002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.957006][ T8002] usb 1-1: Product: syz
[  300.957014][ T8002] usb 1-1: Manufacturer: syz
[  300.957023][ T8002] usb 1-1: SerialNumber: syz
[  300.960116][ T8002] usb 1-1: config 0 descriptor??
[  301.234949][ T9834] binder: Write failure EINVAL in pid:14
[  301.583107][ T9845] FAULT_INJECTION: forcing a failure.
[  301.583107][ T9845] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  301.583131][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.4.915 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  301.583147][ T9845] Tainted: [L]=SOFTLOCKUP
[  301.583151][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.583158][ T9845] Call Trace:
[  301.583163][ T9845]  <TASK>
[  301.583168][ T9845]  dump_stack_lvl+0xe8/0x150
[  301.583187][ T9845]  should_fail_ex+0x3eb/0x540
[  301.583202][ T9845]  prepare_alloc_pages+0x21e/0x5f0
[  301.583218][ T9845]  __alloc_frozen_pages_noprof+0x17a/0x400
[  301.583233][ T9845]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  301.583250][ T9845]  ? policy_nodemask+0x2cc/0x8e0
[  301.583265][ T9845]  ? reacquire_held_locks+0x117/0x1a0
[  301.583281][ T9845]  alloc_pages_mpol+0x21e/0x390
[  301.583298][ T9845]  alloc_pages_noprof+0xb1/0x2b0
[  301.583314][ T9845]  pte_alloc_one+0x22/0x370
[  301.583327][ T9845]  __pte_alloc+0x25/0x1a0
[  301.583337][ T9845]  ? walk_to_pmd+0x2b8/0x450
[  301.583353][ T9845]  insert_page+0x3cc/0x440
[  301.583367][ T9845]  ? __pfx_insert_page+0x10/0x10
[  301.583381][ T9845]  ? vm_insert_page+0x20c/0x380
[  301.583395][ T9845]  _RNvMs3_NtCswPamI0U300_11rust_binder10page_rangeNtB5_19ShrinkablePageRange13use_page_slow+0x40e/0x5d0
[  301.583421][ T9845]  _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process12buffer_alloc+0x16ba/0x2330
[  301.583474][ T9845]  ? __pfx__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process12buffer_alloc+0x10/0x10
[  301.583520][ T9845]  _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0xbc4/0x3450
[  301.583547][ T9845]  ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10
[  301.583638][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.583662][ T9845]  ? _RNvMs0_NtCswPamI0U300_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x381/0x740
[  301.583679][ T9845]  _RNvMs0_NtCswPamI0U300_11rust_binder11transactionNtB5_11Transaction3new+0x31d/0x1b10
[  301.583710][ T9845]  ? __pfx__RNvMs0_NtCswPamI0U300_11rust_binder11transactionNtB5_11Transaction3new+0x10/0x10
[  301.583733][ T9845]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process20get_transaction_node+0x217/0xbf0
[  301.583754][ T9845]  ? __mutex_unlock_slowpath+0x731/0x900
[  301.583769][ T9845]  ? lock_acquire+0x115/0x350
[  301.583780][ T9845]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  301.583796][ T9845]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process20get_transaction_node+0x43a/0xbf0
[  301.583814][ T9845]  ? __asan_memcpy+0x40/0x70
[  301.583826][ T9845]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process20get_transaction_node+0x43a/0xbf0
[  301.583848][ T9845]  ? __pfx__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process20get_transaction_node+0x10/0x10
[  301.583875][ T9845]  ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread21read_transaction_info+0x10/0x10
[  301.583894][ T9845]  ? _RNvNtCsbuTvttuFvbr_6kernel5error9to_result+0x89/0x220
[  301.583910][ T9845]  ? __pfx__RNvNtCsbuTvttuFvbr_6kernel5error9to_result+0x10/0x10
[  301.583926][ T9845]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.583945][ T9845]  ? _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread11transaction+0x758/0x5220
[  301.583963][ T9845]  _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread11transaction+0xe08/0x5220
[  301.584005][ T9845]  ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10
[  301.584098][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584122][ T9845]  ? lock_acquire+0x115/0x350
[  301.584141][ T9845]  ? __might_fault+0xaf/0x130
[  301.584160][ T9845]  _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x1357/0xd1f0
[  301.584219][ T9845]  ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10
[  301.584274][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584287][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584308][ T9845]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.584326][ T9845]  ? __kfree_rcu_sheaf+0x21/0x690
[  301.584341][ T9845]  ? __kfree_rcu_sheaf+0x21/0x690
[  301.584352][ T9845]  ? __kfree_rcu_sheaf+0x21/0x690
[  301.584364][ T9845]  ? ma_leaf_max_gap+0x39c/0x500
[  301.584382][ T9845]  ? mas_update_gap+0x39a/0x510
[  301.584398][ T9845]  ? mas_wr_store_entry+0x5fc2/0x7cf0
[  301.584423][ T9845]  ? __pfx_mas_wr_store_entry+0x10/0x10
[  301.584443][ T9845]  ? mas_wr_store_entry+0x5fc2/0x7cf0
[  301.584464][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584478][ T9845]  ? __pfx_mas_wr_store_entry+0x10/0x10
[  301.584489][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584502][ T9845]  ? mas_wr_store_entry+0x5fc2/0x7cf0
[  301.584518][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584533][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584547][ T9845]  ? __pfx_mas_wr_store_entry+0x10/0x10
[  301.584558][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584575][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584590][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584609][ T9845]  ? lock_acquire+0x115/0x350
[  301.584624][ T9845]  ? lock_acquire+0x115/0x350
[  301.584639][ T9845]  ? is_bpf_text_address+0x26/0x2b0
[  301.584657][ T9845]  ? is_bpf_text_address+0x292/0x2b0
[  301.584671][ T9845]  ? is_bpf_text_address+0x26/0x2b0
[  301.584686][ T9845]  ? kernel_text_address+0xa5/0xe0
[  301.584700][ T9845]  ? __kernel_text_address+0xd/0x30
[  301.584711][ T9845]  ? unwind_get_return_address+0x4d/0x90
[  301.584722][ T9845]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  301.584734][ T9845]  ? arch_stack_walk+0xfb/0x150
[  301.584749][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584764][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584780][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584793][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584808][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.584824][ T9845]  ? lock_acquire+0x115/0x350
[  301.584837][ T9845]  ? lock_acquire+0x115/0x350
[  301.584855][ T9845]  ? lock_acquire+0x115/0x350
[  301.584871][ T9845]  ? is_bpf_text_address+0x26/0x2b0
[  301.584888][ T9845]  ? is_bpf_text_address+0x292/0x2b0
[  301.584902][ T9845]  ? is_bpf_text_address+0x26/0x2b0
[  301.584917][ T9845]  ? kernel_text_address+0xa5/0xe0
[  301.584929][ T9845]  ? __kernel_text_address+0xd/0x30
[  301.584940][ T9845]  ? unwind_get_return_address+0x4d/0x90
[  301.584951][ T9845]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  301.584963][ T9845]  ? arch_stack_walk+0xfb/0x150
[  301.584979][ T9845]  ? stack_trace_save+0xa9/0x100
[  301.584990][ T9845]  ? __pfx_stack_trace_save+0x10/0x10
[  301.585002][ T9845]  ? stack_depot_save_flags+0x33/0x7f0
[  301.585013][ T9845]  ? kasan_save_track+0x4f/0x80
[  301.585025][ T9845]  ? kasan_save_track+0x3e/0x80
[  301.585038][ T9845]  ? kasan_save_track+0x4f/0x80
[  301.585049][ T9845]  ? kasan_save_track+0x3e/0x80
[  301.585060][ T9845]  ? __kasan_kmalloc+0x93/0xb0
[  301.585072][ T9845]  ? __kmalloc_node_track_caller_noprof+0x4af/0x720
[  301.585084][ T9845]  ? krealloc_node_align_noprof+0x19a/0x390
[  301.585095][ T9845]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x765/0x1390
[  301.585112][ T9845]  ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x36b/0x3dc0
[  301.585128][ T9845]  ? __se_sys_ioctl+0xfc/0x170
[  301.585141][ T9845]  ? do_syscall_64+0x166/0x520
[  301.585152][ T9845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.585175][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.585194][ T9845]  ? rcu_is_watching+0x16/0xb0
[  301.585208][ T9845]  ? trace_kmalloc+0x2a/0xf0
[  301.585220][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.585238][ T9845]  ? do_raw_spin_unlock+0xf5/0x200
[  301.585254][ T9845]  ? _raw_spin_unlock+0x28/0x50
[  301.585265][ T9845]  ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xd65/0x1390
[  301.585284][ T9845]  ? lock_acquire+0x115/0x350
[  301.585303][ T9845]  ? __might_fault+0xaf/0x130
[  301.585317][ T9845]  ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18b4/0x3dc0
[  301.585337][ T9845]  _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1901/0x3dc0
[  301.585358][ T9845]  ? stack_depot_save_flags+0x33/0x7f0
[  301.585369][ T9845]  ? __lock_acquire+0x747/0x2de0
[  301.585383][ T9845]  ? kasan_save_track+0x4f/0x80
[  301.585394][ T9845]  ? kasan_save_track+0x3e/0x80
[  301.585405][ T9845]  ? kasan_save_free_info+0x40/0x50
[  301.585414][ T9845]  ? __kasan_slab_free+0x5c/0x80
[  301.585426][ T9845]  ? kfree+0x1c5/0x650
[  301.585434][ T9845]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  301.585449][ T9845]  ? security_file_ioctl+0xc3/0x2a0
[  301.585464][ T9845]  ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[  301.585502][ T9845]  ? kasan_quarantine_put+0xbb/0x1f0
[  301.585518][ T9845]  ? tomoyo_path_number_perm+0x219/0x5f0
[  301.585534][ T9845]  ? tomoyo_path_number_perm+0x219/0x5f0
[  301.585553][ T9845]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  301.585584][ T9845]  ? __fget_files+0x2a/0x420
[  301.585597][ T9845]  ? __fget_files+0x2a/0x420
[  301.585612][ T9845]  ? __fget_files+0x2a/0x420
[  301.585625][ T9845]  ? bpf_lsm_file_ioctl+0x9/0x20
[  301.585639][ T9845]  ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[  301.585656][ T9845]  __se_sys_ioctl+0xfc/0x170
[  301.585674][ T9845]  do_syscall_64+0x166/0x520
[  301.585686][ T9845]  ? trace_irq_disable+0x3b/0x140
[  301.585698][ T9845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.585709][ T9845]  ? clear_bhb_loop+0x70/0xc0
[  301.585722][ T9845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.585732][ T9845] RIP: 0033:0x7f83bbb9e159
[  301.585744][ T9845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.585753][ T9845] RSP: 002b:00007f83bcaa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  301.585766][ T9845] RAX: ffffffffffffffda RBX: 00007f83bbe25fa0 RCX: 00007f83bbb9e159
[  301.585774][ T9845] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  301.585781][ T9845] RBP: 00007f83bcaa0090 R08: 0000000000000000 R09: 0000000000000000
[  301.585788][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.585795][ T9845] R13: 00007f83bbe26038 R14: 00007f83bbe25fa0 R15: 00007ffed6bd90e8
[  301.585811][ T9845]  </TASK>
[  302.251689][ T9845] binder: Error in use_page_slow: ENOMEM
[  302.251702][ T9845] binder: use_range failure ENOMEM
[  302.251790][ T9845] binder: Failed to allocate buffer. len:104, is_oneway:true
[  302.251816][ T9845] binder: Failure in copy_transaction_data: ENOMEM
[  302.750141][ T9845] syz.4.915 (9845) used greatest stack depth: 11208 bytes left
[  302.753278][ T9849] random: crng reseeded on system resumption
[  302.871621][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'.
[  303.123872][ T8002] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  303.235521][ T5708] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  303.253640][ T8002] usb 5-1: device descriptor read/64, error -71
[  303.389682][ T5708] usb 4-1: New USB device found: idVendor=19d2, idProduct=1275, bcdDevice=7.84
[  303.392108][ T5708] usb 4-1: config 7 descriptor has 1 excess byte, ignoring
[  303.392122][ T5708] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2
[  303.424568][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.424583][ T5708] usb 4-1: Product: syz
[  303.424592][ T5708] usb 4-1: Manufacturer: syz
[  303.424600][ T5708] usb 4-1: SerialNumber: syz
[  303.463171][ T5708] rndis_host 4-1:7.0: skipping garbage
[  303.463184][ T5708] rndis_host 4-1:7.0: rndis: master #0/ffff888028ccf000 slave #1/0000000000000000
[  303.485834][ T5708] option 4-1:7.0: GSM modem (1-port) converter detected
[  303.514089][ T8002] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  303.644770][ T8002] usb 5-1: device descriptor read/64, error -71
[  303.696921][ T9859] 
[  303.699244][ T9859] ======================================================
[  303.706232][ T9859] WARNING: possible circular locking dependency detected
[  303.713229][ T9859] syzkaller #0 Tainted: G             L      
[  303.719264][ T9859] ------------------------------------------------------
[  303.726250][ T9859] syz.3.918/9859 is trying to acquire lock:
[  303.732111][ T9859] ffff8880222c6408 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: iterate_dir+0x209/0x4d0
[  303.741742][ T9859] 
[  303.741742][ T9859] but task is already holding lock:
[  303.749078][ T9859] ffff888059d091c8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  303.759829][ T9859] 
[  303.759829][ T9859] which lock already depends on the new lock.
[  303.759829][ T9859] 
[  303.770201][ T9859] 
[  303.770201][ T9859] the existing dependency chain (in reverse order) is:
[  303.779183][ T9859] 
[  303.779183][ T9859] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  303.787836][ T9859]        down_read+0x45/0x320
[  303.792493][ T9859]        lookup_slow+0x46/0x80
[  303.797232][ T9859]        ovl_lookup_single+0x323/0xe90
[  303.802665][ T9859]        ovl_lookup_layer+0x377/0x440
[  303.808013][ T9859]        ovl_lookup+0x9ae/0x1c80
[  303.812936][ T9859]        lookup_open+0x94b/0x1970
[  303.817934][ T9859]        path_openat+0x673/0x1da0
[  303.822937][ T9859]        do_file_open+0x23e/0x4a0
[  303.827935][ T9859]        do_sys_openat2+0x115/0x200
[  303.833111][ T9859]        __x64_sys_openat+0x138/0x170
[  303.838457][ T9859]        do_syscall_64+0x166/0x520
[  303.843542][ T9859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.849928][ T9859] 
[  303.849928][ T9859] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  303.857712][ T9859]        __d_alloc_parallel+0xc32/0x1700
[  303.863322][ T9859]        __lookup_slow+0x82/0x2f0
[  303.868322][ T9859]        lookup_slow+0x59/0x80
[  303.873059][ T9859]        link_path_walk+0xd22/0x1910
[  303.878316][ T9859]        path_openat+0x1c4/0x1da0
[  303.883317][ T9859]        do_file_open+0x23e/0x4a0
[  303.888327][ T9859]        do_sys_openat2+0x115/0x200
[  303.893502][ T9859]        __x64_sys_openat+0x138/0x170
[  303.898852][ T9859]        do_syscall_64+0x166/0x520
[  303.903935][ T9859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.910322][ T9859] 
[  303.910322][ T9859] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}:
[  303.918718][ T9859]        __lock_acquire+0x164c/0x2de0
[  303.924063][ T9859]        lock_acquire+0x115/0x350
[  303.929060][ T9859]        down_read_killable+0x4b/0x3b0
[  303.934495][ T9859]        iterate_dir+0x209/0x4d0
[  303.939407][ T9859]        ovl_dir_read+0x141/0x4a0
[  303.944403][ T9859]        ovl_iterate+0x1646/0x2160
[  303.949484][ T9859]        wrap_directory_iterator+0x96/0xe0
[  303.955267][ T9859]        iterate_dir+0x2e2/0x4d0
[  303.960177][ T9859]        __se_sys_getdents64+0xf1/0x280
[  303.965701][ T9859]        do_syscall_64+0x166/0x520
[  303.970785][ T9859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.977171][ T9859] 
[  303.977171][ T9859] other info that might help us debug this:
[  303.977171][ T9859] 
[  303.987369][ T9859] Chain exists of:
[  303.987369][ T9859]   &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth]
[  303.987369][ T9859] 
[  304.002367][ T9859]  Possible unsafe locking scenario:
[  304.002367][ T9859] 
[  304.009788][ T9859]        CPU0                    CPU1
[  304.015127][ T9859]        ----                    ----
[  304.020462][ T9859]   lock(&ovl_i_mutex_dir_key[depth]);
[  304.025892][ T9859]                                lock(DCACHE_PAR_LOOKUP);
[  304.032972][ T9859]                                lock(&ovl_i_mutex_dir_key[depth]);
[  304.040922][ T9859]   rlock(&type->i_mutex_dir_key#5);
[  304.046181][ T9859] 
[  304.046181][ T9859]  *** DEADLOCK ***
[  304.046181][ T9859] 
[  304.054293][ T9859] locks held by syz.3.918/9859: 2, last CPU#0:
[  304.060426][ T9859]  #0: ffff8880327295f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160
[  304.069442][ T9859]  #1: ffff888059d091c8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  304.080627][ T9859] 
[  304.080627][ T9859] stack backtrace:
[  304.086489][ T9859] CPU: 0 UID: 0 PID: 9859 Comm: syz.3.918 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  304.097306][ T9859] Tainted: [L]=SOFTLOCKUP
[  304.101602][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  304.111641][ T9859] Call Trace:
[  304.114897][ T9859]  <TASK>
[  304.117804][ T9859]  dump_stack_lvl+0xe8/0x150
[  304.122376][ T9859]  print_circular_bug+0x2e2/0x300
[  304.127380][ T9859]  check_noncircular+0x12f/0x150
[  304.132295][ T9859]  __lock_acquire+0x164c/0x2de0
[  304.137121][ T9859]  ? __pfx___schedule+0x10/0x10
[  304.141946][ T9859]  ? apparmor_file_open+0x523/0x6c0
[  304.147119][ T9859]  lock_acquire+0x115/0x350
[  304.151598][ T9859]  ? iterate_dir+0x209/0x4d0
[  304.156164][ T9859]  ? iterate_dir+0x209/0x4d0
[  304.160731][ T9859]  down_read_killable+0x4b/0x3b0
[  304.165643][ T9859]  ? iterate_dir+0x209/0x4d0
[  304.170221][ T9859]  iterate_dir+0x209/0x4d0
[  304.174614][ T9859]  ovl_dir_read+0x141/0x4a0
[  304.179090][ T9859]  ? __pfx_ovl_dir_read+0x10/0x10
[  304.184090][ T9859]  ? __kmalloc_cache_noprof+0x148/0x600
[  304.189610][ T9859]  ? ovl_iterate+0x14d9/0x2160
[  304.194346][ T9859]  ? ovl_iterate+0x14d9/0x2160
[  304.199082][ T9859]  ovl_iterate+0x1646/0x2160
[  304.203649][ T9859]  ? __pfx_ovl_iterate+0x10/0x10
[  304.208558][ T9859]  ? __lock_acquire+0x1511/0x2de0
[  304.213556][ T9859]  ? __pfx_ovl_fill_plain+0x10/0x10
[  304.218729][ T9859]  ? __pfx_ovl_fill_real+0x10/0x10
[  304.223816][ T9859]  ? down_write+0x166/0x200
[  304.228309][ T9859]  ? wrap_directory_iterator+0x52/0xe0
[  304.233742][ T9859]  ? __pfx_ovl_iterate+0x10/0x10
[  304.238650][ T9859]  wrap_directory_iterator+0x96/0xe0
[  304.243912][ T9859]  iterate_dir+0x2e2/0x4d0
[  304.248305][ T9859]  __se_sys_getdents64+0xf1/0x280
[  304.253306][ T9859]  ? __pfx___se_sys_getdents64+0x10/0x10
[  304.258912][ T9859]  ? __pfx_filldir64+0x10/0x10
[  304.263649][ T9859]  ? rcu_is_watching+0x16/0xb0
[  304.268391][ T9859]  do_syscall_64+0x166/0x520
[  304.272954][ T9859]  ? trace_irq_disable+0x3b/0x140
[  304.277958][ T9859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.283999][ T9859]  ? clear_bhb_loop+0x70/0xc0
[  304.288648][ T9859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.294511][ T9859] RIP: 0033:0x7f857059e159
[  304.298903][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.318479][ T9859] RSP: 002b:00007f8571453028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  304.326865][ T9859] RAX: ffffffffffffffda RBX: 00007f8570825fa0 RCX: 00007f857059e159
[  304.334807][ T9859] RDX: 000000000000009d RSI: 0000200000000240 RDI: 0000000000000006
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  304.342750][ T9859] RBP: 00007f857063506b R08: 0000000000000000 R09: 0000000000000000
[  304.350699][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.358640][ T9859] R13: 00007f8570826038 R14: 00007f8570825fa0 R15: 00007ffd0d82cf38
[  304.366586][ T9859]  </TASK>
[  304.394128][ T8002] usb usb5-port1: attempt power cycle
[  304.409998][ T5759] usb 1-1: USB disconnect, device number 25
[  304.873460][ T8002] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  305.260182][ T5759] usb 4-1: USB disconnect, device number 71
[  305.260592][ T5759] option 4-1:7.0: device disconnected
[  305.307620][ T8002] usb 5-1: device descriptor read/8, error -71
[  305.338056][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.364652][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.396556][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.419074][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.472253][   T51] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.518532][   T51] dvmrp12: left allmulticast mode
[  305.600005][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.600769][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.601250][   T51] bond0 (unregistering): Released all slaves
[  305.648328][   T51] tipc: Left network mode
[  305.756004][   T51] hsr_slave_0: left promiscuous mode
[  305.756218][   T51] hsr_slave_1: left promiscuous mode
[  305.756482][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.756493][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.756758][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.756766][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.761372][   T51] veth1_macvtap: left promiscuous mode
[  305.761389][   T51] veth0_macvtap: left promiscuous mode
[  305.761423][   T51] veth1_vlan: left promiscuous mode
[  305.761446][   T51] veth0_vlan: left promiscuous mode
[  305.940971][   T51] team0 (unregistering): Port device team_slave_1 removed
[  305.957758][   T51] team0 (unregistering): Port device team_slave_0 removed
[  306.116915][   T51] IPVS: stop unused estimator thread 0...
[  306.148791][   T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.176800][   T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.224868][   T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.257433][   T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.370183][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.388501][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.410154][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.438021][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.494761][   T51] bridge_slave_1: left allmulticast mode
[  306.494776][   T51] bridge_slave_1: left promiscuous mode
[  306.494862][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.495894][   T51] bridge_slave_0: left allmulticast mode
[  306.495905][   T51] bridge_slave_0: left promiscuous mode
[  306.495983][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.541078][   T51] bridge_slave_1: left allmulticast mode
[  306.541092][   T51] bridge_slave_1: left promiscuous mode
[  306.541168][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.543492][   T51] bridge_slave_0: left allmulticast mode
[  306.543505][   T51] bridge_slave_0: left promiscuous mode
[  306.543575][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.679406][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.681751][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.707274][   T51] bond0 (unregistering): Released all slaves
[  306.755478][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.757774][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.758249][   T51] bond0 (unregistering): Released all slaves
[  306.929559][   T51] hsr_slave_0: left promiscuous mode
[  306.929786][   T51] hsr_slave_1: left promiscuous mode
[  306.930037][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.930047][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.930302][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.930310][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.932129][   T51] hsr_slave_0: left promiscuous mode
[  306.932349][   T51] hsr_slave_1: left promiscuous mode
[  306.932597][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.932607][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.932859][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.932867][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.021667][   T51] veth1_macvtap: left promiscuous mode
[  307.021684][   T51] veth0_macvtap: left promiscuous mode
[  307.021717][   T51] veth1_vlan: left promiscuous mode
[  307.021748][   T51] veth0_vlan: left promiscuous mode
[  307.047203][   T51] veth1_macvtap: left promiscuous mode
[  307.047227][   T51] veth0_macvtap: left promiscuous mode
[  307.047266][   T51] veth1_vlan: left promiscuous mode
[  307.047288][   T51] veth0_vlan: left promiscuous mode
[  307.251851][   T51] team0 (unregistering): Port device team_slave_1 removed
[  307.268005][   T51] team0 (unregistering): Port device team_slave_0 removed
[  307.399267][   T51] team0 (unregistering): Port device team_slave_1 removed
[  307.401760][   T51] team0 (unregistering): Port device team_slave_0 removed
[  307.456341][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  307.809414][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14
[  308.000313][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15
[  308.192227][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16
[  308.384242][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21
[  308.508930][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22
[  308.904411][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  309.107473][ T5269] 8021q: adding VLAN 0 to HW filter on device eth23
[  309.295909][ T5269] 8021q: adding VLAN 0 to HW filter on device eth24
[  309.483170][ T5269] 8021q: adding VLAN 0 to HW filter on device eth25
[  309.671690][ T5269] 8021q: adding VLAN 0 to HW filter on device eth26
[  309.862760][ T5269] 8021q: adding VLAN 0 to HW filter on device eth27
[  310.052065][ T5269] 8021q: adding VLAN 0 to HW filter on device eth28
[  310.240424][ T5269] 8021q: adding VLAN 0 to HW filter on device eth29
[  310.738316][  T267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.757165][  T267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.785688][  T267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.807104][  T267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.869697][  T267] bridge_slave_1: left allmulticast mode
[  310.869710][  T267] bridge_slave_1: left promiscuous mode
[  310.869789][  T267] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.872526][  T267] bridge_slave_0: left allmulticast mode
[  310.872538][  T267] bridge_slave_0: left promiscuous mode
[  310.872612][  T267] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.980738][  T267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.981493][  T267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.985918][  T267] bond0 (unregistering): Released all slaves
[  311.092046][  T267] hsr_slave_0: left promiscuous mode
[  311.099420][  T267] hsr_slave_1: left promiscuous mode
[  311.100618][  T267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.100629][  T267] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.100897][  T267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.100906][  T267] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.143362][  T267] veth1_macvtap: left promiscuous mode
[  311.143380][  T267] veth0_macvtap: left promiscuous mode
[  311.144692][  T267] veth1_vlan: left promiscuous mode
[  311.144718][  T267] veth0_vlan: left promiscuous mode
[  311.308169][  T267] team0 (unregistering): Port device team_slave_1 removed
[  311.312335][  T267] team0 (unregistering): Port device team_slave_0 removed
[  311.396806][ T5269] 8021q: adding VLAN 0 to HW filter on device eth30
[  311.711729][ T5269] 8021q: adding VLAN 0 to HW filter on device eth31
[  311.906238][ T5269] 8021q: adding VLAN 0 to HW filter on device eth32
[  312.100221][ T5269] 8021q: adding VLAN 0 to HW filter on device eth33