last executing test programs:

2m46.409242957s ago: executing program 0 (id=22):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
userfaultfd(0x1)
write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500090003000000", 0x68)

2m46.246961971s ago: executing program 0 (id=23):
socket$inet_sctp(0x2, 0x8e5d430106e851a3, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465767369", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="1d001780040002400400010004000500040001000400030004000400040006000800050006"], 0x44}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0xc, 0xc, 0x3, 0x0, 0x6})
r11 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x4, 0xffff1000, 0x2000, &(0x7f0000017000/0x2000)=nil})
socket$key(0xf, 0x3, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

2m45.925522744s ago: executing program 0 (id=24):
setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x3, 0x8, 0x2)
mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x10000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r1, {0x7, 0x2d, 0xc, 0x400000c0, 0x0, 0x0, 0xc, 0xa, 0x0, 0x0, 0x8, 0x7}}, 0x50)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002240), 0x800, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000002280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xcef}}, 0x10)
r5 = open(&(0x7f00000022c0)='./file0\x00', 0x84902, 0xd0)
connect$bt_l2cap(r4, &(0x7f0000002300)={0x1f, 0x0, @none, 0x9}, 0xe)
getsockname$inet6(r4, &(0x7f0000002340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002380)=0x1c)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000023c0)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r6 = fanotify_init(0x1, 0x8000)
fanotify_mark(r6, 0x0, 0x48000030, r4, &(0x7f0000002800)='./file0\x00')
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r4, 0xd95cf000)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000002840)={0x38, 0x6, 0x0, {0x4, 0x3, 0xf, 0x0, '/dev/dlm_plock\x00'}}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_int(r4, &(0x7f0000002880)=0xc, 0x12)
fallocate(r3, 0x2, 0x2, 0x3)
r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000028c0), 0x2, 0x0)
ftruncate(r7, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002900)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x62}}, './file0/file0\x00'})
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000002940)={0x7, 0x2}, 0x2)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0)
write$FUSE_LSEEK(r9, &(0x7f00000029c0)={0x18, 0xffffffffffffffda, r1, {0x404a}}, 0x18)
read$msr(r8, &(0x7f0000002a00)=""/105, 0x69)
mount$overlay(0x0, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0), 0x10, &(0x7f0000002b00)={[{@xino_auto}, {@xino_off}, {@redirect_dir_follow}, {@nfs_export_on}, {@redirect_dir_off}, {@nfs_export_on}], [{@uid_eq={'uid', 0x3d, r2}}, {@flag='dirsync'}, {@dont_appraise}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '@-\x00'}}]})
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000002bc0)={{0x2, 0x3ff}, 0x100, './file1\x00'})

2m45.840917005s ago: executing program 0 (id=25):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x286e, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'dvmrp1\x00', {0x2, 0x0, @dev}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0)
write$sequencer(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r1], 0x10)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40)
socket(0x2, 0x3, 0xff) (async)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x286e, 0x4) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'dvmrp1\x00', {0x2, 0x0, @dev}}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) (async)
write$sequencer(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r1], 0x10) (async)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) (async)

2m45.45932166s ago: executing program 0 (id=26):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000100)=""/9, 0xfffffd87)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@multiplanar_overlay={0x30, 0x2, 0x4, 0x2, 0x5f19, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x0, 0xe, 0x0, "cf8196dd"}, 0x4, 0x3, {&(0x7f0000000040)=[{0x7, 0xef2, {0xffffffff}}, {0x8000, 0x9, {0x8000}, 0x6}]}, 0x4})
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

2m44.367399205s ago: executing program 0 (id=33):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe})
syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66)
fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1})
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xe5})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0))
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0xa646, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x4, '\x00', @value64=0x7}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="2e66f2406d2e400f20da66450f388078800f01dfc4a36d5f19b2b9800000c00f3235000800000f30b9ca0200000f320fc72a0f01c3c7442400a5000000c744240207000000ff1c24", 0x48}], 0x1, 0x43, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e2400fa050001"], 0x1e8}, 0x1, 0x0, 0x0, 0x48895}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m35.687937843s ago: executing program 32 (id=7):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x9, 0x1, 0x2}) (async)
syz_io_uring_setup(0x60fa, &(0x7f0000000040)={0x0, 0x5952, 0x800, 0x1, 0x1e3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x4609, 0x8, 0x0, 0x183}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880b, 0x4, 0x2, 0x186}, 0xffffffffffffffff, 0x0, <r2=>0x0}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0x973, 0x4, 0x2, 0x187}}, {0x0, 0x0, <r4=>0xffffffffffffffff, {0x0, 0x7ef8, 0x8000, 0x0, 0xc0}}, {0x0, 0x0, <r5=>0xffffffffffffffff, {0x0, 0xebc9, 0x20, 0x2, 0x48}}], 0x4, &(0x7f0000001480)={0x2e, 0x11, 0x0, <r6=>0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x332, 0x0, &(0x7f0000000480)=@buf_512="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"}}, &(0x7f0000001500))
r7 = syz_io_uring_complete(r1, r2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001540)={0x10002, 0x0, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000001580)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff}, './file0\x00'}) (async)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000015c0)={0x1, 0xffff, 0x1ff, 0x1000000000000, 0x9, 0x8}) (async)
pipe(&(0x7f0000001600)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001640)) (async)
pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000001680)="9d872b4dfb24e8df180cc9b01b12283983ad9803f856f08f286a664ec8a95c93bd21a0f6c9eb94444a00e1435ee6eca92161bf2da30e4e8cf1e36491875f4fc08aaccc8c0366ed5e8dbeba05737cd197ac3b10eb07a9f96677aadfce639604631b902d4a72b6765b103c95da5a7af11e2abd9208a791608fdf4f", 0x7a}], 0x1, 0x5, 0x5) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001740)) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x48, 0x1411, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4048050) (async)
recvfrom$x25(r11, &(0x7f00000018c0)=""/200, 0xc8, 0x40000002, &(0x7f00000019c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async)
r12 = fcntl$dupfd(r11, 0x0, r5)
ioctl$BTRFS_IOC_SEND(r11, 0x40489426, &(0x7f0000001a40)={{r12}, 0x7, &(0x7f0000001a00)=[0x24e, 0x0, 0xb8e5, 0x1, 0x4, 0x8, 0x4], 0x8}) (async)
syz_kvm_setup_cpu$x86(r12, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001b00)=[@text16={0x10, &(0x7f0000001ac0)="ead9004200440f20c0663501000000440f22c0640f01c5b82d018ed8c0ac1d0009262e660f3881190fc75e00e00a67f30fc7fc670f780a", 0x37}], 0x1, 0x8, &(0x7f0000001b40), 0x0)
ioctl$BTRFS_IOC_FS_INFO(r11, 0x8400941f, &(0x7f0000001b80)) (async)
syz_usb_connect(0x1, 0x5b3, &(0x7f0000001f80)={{0x12, 0x1, 0x200, 0x6c, 0x77, 0x3, 0xff, 0x67b, 0x2304, 0xb832, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a1, 0x3, 0x4, 0x2, 0x40, 0x80, "", [{{0x9, 0x4, 0xd0, 0x8, 0x1, 0x16, 0x28, 0x70, 0x3, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "a7406587d5"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xd, 0x8, 0x70}, {0x6, 0x24, 0x1a, 0x13, 0xd}, [@dmm={0x7, 0x24, 0x14, 0xff, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xd323, 0x8001, 0x3, 0x7, 0xe3d1, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x8d, 0x10, 0x83}, @obex={0x5, 0x24, 0x15, 0x9}, @acm={0x4}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "db3828"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5e, 0x7, 0x9, 0xb}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0x7, 0x6, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x81, 0x9, 0x4}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x1, [0x2, 0x876, 0xfff, 0x8000]}, @dmm={0x7, 0x24, 0x14, 0x8}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x40, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @generic={0xb2, 0x6, "8d37c21c64a9b752976b5a4446d9df1d539f7c997480900a92131e72fa99dcaec92d4f32e20d3ed3f228c953f706516531a25814091414b3a851a247e522025f74085040cc6e57d95c9d50522a812be63b7e6111f3351339de2613eb639c259c76454be4b40abb7b731a970a8f8b5628f36aadfca2c794932222e2d55d291f970a323a1301be150cec5d4c7c3f12b2f1ce49037a1e6aa49a1eba0e4364da2e3125729b83fb61a7c6b7ddc9e85165182f"}]}}]}}, {{0x9, 0x4, 0x34, 0x9, 0x7, 0x32, 0x3f, 0x90, 0xc, [], [{{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x8, 0x6, 0x5, [@generic={0xbf, 0x1, "805abe3798eaa00e29404687c846f9ae6ef1d3182dcbadc077e29fd5af034c3f1da5cbd29becc8d653cbf14b87f91fb9b7ddf65fcd01355f11fbf9498d8607bdd6e44751f804db9bb59883ef2fb524835b332cbf073b75b35a3a0937f92b38692cd43df95db3d81b9ef01f2b728c098878c2fb547cd932cfc487506e5a08ab9ccb68f314c6ecd86ece25b3f56fbcfde5b7f9f9d2e95d03a61a4c5f30dabc6837d864df925270d7b1ba8c37734d54370abfe16524e24f86b0413cf49548"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xa, 0xf0, 0x3}}, {{0x9, 0x5, 0x85, 0x3, 0x200, 0x8, 0x17, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x6, 0xc, 0x5, [@generic={0x24, 0x24, "bfcf5c357af609cc063447e6a6a274975f03b9c9ea1e5e337057b3789e48ff80c6aa"}, @generic={0x68, 0xf, "ef898668db4dca1ac978669882f37e56ed8ff0b23fca5966aec11f0cafe1daefeaf47c2b2cd5fa063238e7714b7deee144a19f0a238aeb219b3d550af87f7e0288efc67c4b8b0d30359956fab419013fc48d21a561993e0375357907dc287872f6593ca0533e"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x63, 0xfa}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0x0, 0xef, [@generic={0x76, 0x5, "c8b1fb2a1868622e2a3dfe4032fd8d2a18b782c049c46016775d551791bc6f4132faea2b24025f5715b620942d9f820093d9925bf460d91976109dae3ccfa387ad2c57526fb83fb927fc32cef7ed5ad8135fa4ba389ead270d39d299f37527f262051a5679e43cc8a40ea6206606924eba64743e"}, @generic={0xf, 0x11, "2668e3203108a92b6776f1b153"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0xfd, 0x1}}]}}, {{0x9, 0x4, 0x7, 0x1, 0xc, 0x40, 0x8, 0x14, 0x7f, [@generic={0x51, 0x19, "e137c72481c77dd7d3e94f9dbf157290721560a4f6a7617d6895249203d46727ee2957d9b8d279d399def6abc54312a8141033676897869c26c0fada6ac2058e88114fa2aea433e10a4be40b7c6318"}], [{{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x2, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x7}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x9, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x40, 0x9, 0xa1}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x60, 0x9, 0x8, [@generic={0x19, 0xa, "64c1c39b7cfcb5b51f691b80c7f8ce22dd034d859f4d07"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x40, 0xf7, 0x5}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x89, 0x29, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0x9, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xe25}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x0, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3ff}, @generic={0xf, 0x6, "088bd78bb3c4cebd43eaf714f8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x4, 0x81, 0x5}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x16, 0x9, 0xff, [@generic={0xaf, 0x363bc488e4cc86e4, "3b8e66cc737bff72071e31086c9426eaa5b464ab8a7e06d68afb39e0a0c15a61060d640f70c191c5c1322e3b5460d41888677a8aa0351960bd129adfcaeab389c0ce6ec450fd1b2bc4dd94378cbdb5f179b3c1b6a059fb4d8af90e20b7f5cee0bf53dee37f62afd0e1bbb296aa886a642de8d64b0b73729ce567fe94b1a07603d306af9eed92b88e54fef2738c9d78667ffd39e68b9c4c14f55216cd96bb5ad492fd205fa7c83260c8d0e8ca13"}, @generic={0x2a, 0x34, "f8f5e2bf2c380634c18ab204a1adc1e4a00bb7d049fd59f86e82d20d30e7d887dc7a1c6f4dce6292"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x8, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x7, 0x1, 0x21, [@generic={0x2d, 0x10, "128dba00511858ae59b7d66f319a3e5799a74b911eb72bc830feddfde80c4bd67804daf89fd80b7e5ca02f"}]}}]}}]}}]}}, &(0x7f00000027c0)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x201, 0x0, 0x5, 0x3, 0xff, 0x5}, 0x11, &(0x7f0000002580)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x3, 0xf}]}, 0x5, [{0xe3, &(0x7f00000025c0)=@string={0xe3, 0x3, "a203af7599b3414d1b69c72068c0f2a2051727811cc23415f3c49ae7e666222d32bfe56fcc22f717bd3558d7eb1564ed4575feaf8590963a9ffee1112f2fa3bd1aae1d659e7d5d0a167e6a8047eb6840299d5f4a7b4bd27126f398f8f0b6731f4a564c7c4740706a1033848919b93cd5922ffc59810727893c167f3fa80be056fff46549bb64227726ac8c1dd44bb0757b2f7f777aab6e840706dfe71d5007ed2ac081b716fa118213d34ef1db7f03bf64a970640bbede9635e36533fef6241105dadceb7ddaa024aab1d335e8bf263fa3a0a5346f376b72374f5b2beb7533a4ec"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0xc0c}}]})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
recvmsg(r8, &(0x7f0000002a80)={&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002a00)=[{&(0x7f00000028c0)}, {0xffffffffffffffff}, {&(0x7f0000002900)=""/243, 0xf3}], 0x3, &(0x7f0000002a40)=""/19, 0x13}, 0x0) (async)
r13 = fanotify_init(0x20, 0x800)
ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000002ac0)={0x100000000, <r14=>0xffffffffffffffff, 0x1})
fanotify_mark(r13, 0x4, 0x1, r14, &(0x7f0000002b00)='./file0\x00') (async)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', 0x400, 0x168) (async)
getdents64(r10, &(0x7f0000002b80)=""/4096, 0x1000)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000003bc0)={0x4, &(0x7f0000003b80)=[{0x6, 0xfc, 0x5, 0xa1cd}, {0x0, 0x3a, 0x3, 0x10000}, {0x4, 0xd7, 0x8, 0x6}, {0x10, 0x5, 0x22, 0x5}]}, 0x10) (async)
socket$netlink(0x10, 0x3, 0xe)

2m29.26180471s ago: executing program 33 (id=33):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe})
syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66)
fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1})
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xe5})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0))
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0xa646, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x4, '\x00', @value64=0x7}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="2e66f2406d2e400f20da66450f388078800f01dfc4a36d5f19b2b9800000c00f3235000800000f30b9ca0200000f320fc72a0f01c3c7442400a5000000c744240207000000ff1c24", 0x48}], 0x1, 0x43, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48895}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m29.247536189s ago: executing program 2 (id=67):
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fchmod(r0, 0x140)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'rose0\x00'})
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000140)={@rand_addr=0x64010101, @multicast1, 0x0, "f3317b3ef737838e7dee7f576b6aefe40e18b0640089c77110b799757a32a592", 0xc, 0x0, 0x8, 0xb27}, 0x3c)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0x9)
syz_usb_connect(0x3, 0xd3f, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd6, 0xb5, 0xc0, 0x40, 0x403, 0xfa33, 0xf7da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2d, 0x4, 0x6, 0x40, 0x0, 0x67, "", [{{0x9, 0x4, 0x5d, 0x4, 0xa, 0xf3, 0xe8, 0x82, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x761}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "35c224"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x8000, 0x3}}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x2, 0x11}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x2, 0x82, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xde}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xbd, 0x9}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x2, 0x8, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xf7, 0xe0, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @generic={0x41, 0x21, "f7ec72e0cc43ce721399fbd50e55ef9978d7a5ffb6df1bf6b68e1828e71e9ee88145c6c688ce7a5bd2a8d0344fb4accb4d402cd45d83fe963ffc3664463c56"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0xb125}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xff, 0xd, 0x45}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x1, 0x9, 0x9, [@generic={0x69, 0x30, "37742b9b86e8086fd3b5eeb640791a396a708811a45a9fa980eb4a1b6274902101705290113da54b35adfcaa6b2d3906de38c6b10f92a6f39a3b040369de16c89e7fbf0f0366ed9e5362867ee0ebc6fc888757ec85036146df7599a1f4d8ace61270196c67a585"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x10, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x8a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xaa, 0x2a, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5e}]}}, {{0x9, 0x5, 0xf, 0x2, 0x210, 0x5, 0x4, 0x7f}}]}}, {{0x9, 0x4, 0xd0, 0xa, 0xe, 0x54, 0x62, 0xf8, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "536a3ce7fa5e"}, {0x5, 0x24, 0x0, 0xfc00}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x6, 0xfc}, [@acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x8000}]}, @generic={0x101, 0x9, "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"}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0xff, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x6c, 0xfb, 0xc6}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x9, 0x7, 0x5, [@generic={0x9e, 0xc, "89683f33a91cc1c7d5b7d1d9d72b717107b8244b639919e962234efbedff4e66c68d1ac0f8fd48356d306c5fc7457ac8bde2bebcdbc9c1eaad55b18118ce12eddd74a3180f67af61dfc63da207b7c80ba801adb8847d0991aadcecd6f81cc16e74ed98f38533388c279fab8b605e72d9394ccb328f72b44c6573768925f8d54835ae09e51c8fe219293d9275d18082d94c6cd728443a61ec5f0c9430"}, @generic={0x18, 0xe, "a6e6a486022a4a6635929fb1a1e3d4bb4db465d6d790"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x210, 0x40, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x7, 0x7, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xd1, 0x1b, 0xd1, [@generic={0x9e, 0xb, "f8e3d9b44576e7e3af860f9ef4f3324381e9cf12f12f03a5fadfc96e0f94e3f46ca3efda45a501841f8859a84ba03cbe7a02c42455b0c99dbe8ad1f6af7bacec10374db8cb5559ade4960df776890963f592501fe90a105db3e9dbd0093c8ff2ae7fe654283e4512e669f17945019f91e4a180424e3c58f2c744e3e2071ab2072b31e8187c1388ac0b5a4ef34e01d21282206e30e1c34fa7de27acaf"}, @generic={0xee, 0x23, "4d6b727d27d91b373086f0bfa4db230755a6e2bbacbbdfa06873d32ac777d80cf70d86b60cc268cd1c7a3f5a591636d1c4080b3e0a9e7bfe6e992b2f4f563d82fa322acf3314ce3c6ce26ed1df04572a873a18953d1acb780bff93d8b351dd820175bea05d56f3d1d903ab3d75fd6f7e0ce62a6063b0e1b0148db9ece664b7ba932ffa4239a5edbcbeec328375273898c158ad8002fc1c097cec6059cb4a770e4e00412689d8e7306a7a3aca4746d81c402f02b0a80e80f3af92c3435c29e6784d8455a2036837a4df297174f31ccc86805c5e2bdc24597300c42888c5caef891e44f379be9b5c912550c4e0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x9, 0x9c, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xf}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x6, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xce, 0x2, 0x40, [@generic={0xbe, 0x21, "f3913bdef58bf59ee560a00663f7a6f593b0e980def572a3dcaa2a4de88cece9b2d3e38d39491e6cb29b75e1621d79ce5576103361463292dd93e4de95683e3cf25488e2684a0ea65812ea852bf6937c7574d121981da5dee97ec8b08ec6474f9ce63899f0df8af6e9145d7baa72c52e3f2377bda138f88fae083f0ce0f0181b566a7e9ea51398a71fafe188af5953d27c8487c8c379c9a98ae47601340a25da338d1029939e3b1f76e41e5080fc15e4a353afa726906de7383ff9e5"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x1e, 0x1, 0x7f, [@generic={0xd7, 0x23, "3b0fdb527d58c1ec6aad5cd711d1d14e15215951641c26922771fd19a7621fd097858d12e41b33759ddbf226bad5d4a1eec466ad299fc4da52430ed842fcfe1f1aea01161b0f3e1be7aabd269cddca6cb349a22e979f123d8c9e211ed71be84d625d3a94c5f61342f2219ecb7cccf6f686848325a2effc6316ff1c08a01dcb1537cd7fa29b19c1e7656b280a5910bf5eebe77abf79b87126538f9745f2b99d4a80527a6e494679825d9a02503d19ff94a4efd340a87bd04cffd853fda2762058fde0e6f39f9e231c8ba89f89fad5156351d203a251"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x0, 0xe7, 0x6, [@generic={0x25, 0x23, "5d83596b9d3450751ca6eb400b24632962fd6560663032f4699f44192e2b3eb417f8b8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3d, 0x5, 0xb}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0x70, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x5c, 0x40, 0xb, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x8, 0x5, 0x7, [@generic={0x64, 0x5, "c00e145ab3b4c0a0dc240c663c306b8e790c531c86571e4f4fd4e236840349901fec942a1e7803997e87a1e43c3665d14a71fc9ceac2e32c4722ac0d17df55f6466e645c958cbda3b29b5e7d47f07c628d009de4df1455a3fd7bd03d433aa212840f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x8, 0x9, 0x2}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x0, 0x1, 0xb}}, {{0x9, 0x5, 0xa, 0x3, 0x0, 0x3, 0x5, 0xf2}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x80, 0x6, 0x0, [@generic={0xa7, 0x24, "30fb0f46f4363dae4d9812a3adde1c27a012f5a50fadb6cb6600cec7855259dd16d0daef92c1af76dce3a6b864f024f7abbd53c9d0a70e7071954879b6b41e162d0507ac38857092d8a0abfa0d4cb3eae2528ca4675b342361aac0131d5b66ed0d0c46907690a85ce317aa3c9b9d6d763ba45dd10f9390eeb7d604d6041c34f8f980972e956222a48cb820bdd1734a7aa99040dd1833dd0cbb5de41dff4c3929ec74e48d63"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xd, 0xe, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}, @generic={0x15, 0x8, "4f86bec1685f75d19939a8d97a947d391de045"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x30, 0x45, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xf8, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xf12a}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x40, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xb0, 0x24, 0xfe}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xf, 0xfa, 0x7}}]}}, {{0x9, 0x4, 0xdb, 0x26, 0xe, 0x84, 0x26, 0xe4, 0x9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfff8, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x11}}], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x7, 0x3, 0x2, [@generic={0x9e, 0x30, "482e46df35c7070ed5a1ebdb45129de2ccc815354e0e8dc4825d95828313f0ffdf10d2ebf9a1a1876583f9a403e1741aa82bf9814842f83bf1c52016689d3a240e0017a085a65b3a09f65ca458094acafde976e9f2e33e32a9d4a428abf0de497a5055ff84af00ce7bbc3f7947fe56c7fef72ac3a18e1a81eae54d5ad13f56a03cd723ab18358edfd6dee4bcc09038d38b51412c312729b2eb477fd8"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x3, 0x5}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x1, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x13}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x8, 0xfe, [@generic={0xfe, 0x3, "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"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x7, 0x6, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0x0, 0xf5}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x80, 0x80}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xbe, 0x4, 0x8a, [@generic={0xdb, 0x22, "04c59e1e4e10db46a5c214f536d8ea4172d1b1419566afb1803c4396ab0b76e945837dc38eac41e80c386b39813579bafee80c87c0c946722376f73f112b417c549184d522634b515aacec96766f982b73b8af4d85c13be5afa6eab6cb37e4f8a8abe55b9a6ed2b04990513e8fbb85d7e899d296aa738877ce5f9a204cdabcf1ba545ff4a62e5e0fd6ab556304a5c25e6a9b0993eefa0ebcfc1f24b8672db841834d97193f38e720fc179d1b451cee6e244d3b43996f74e6fb4b9a86d8e4fb89d59016c70313e75679ee2b63e3c3a70c0576f0b00428584e9d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x44, 0x3, 0x4, [@generic={0xf2, 0x22, "b7a39fa5c2c303bcfda0068513f562121bf8e56ecc6989db849717b1429da5681c0eb1dcf0e666f503ca26887fade9e88f06c82e652afb7919612e43a3adbb0e91c76ae04ed09499c983670b15d9ce24128a5f92ea512c874d4e95e913a921878cd1769822bf414884f75b1bb395ca78d072708ea85ca4b258f570548c85e0146e5d0e1fef3aeb1d4d70d66e8e4be6167359ead5e495788ea6788e7d00ff131d87d3ef2cb43c529ca90147fedcf0c5bd114e709bf766be02dc6b4fa7bd1ba319c4069f888db6ab516a721efefff42aa320334853787d6944c729c4b7528d4aa6560b165a6cad375d2b3d8e0bb033f046"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x6, 0x6, 0x81, [@generic={0x5, 0x24, "0996a1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb2, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x8, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xff, 0x6, 0x40}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x6, 0x10, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x82, 0x7f}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x3, 0x5d, 0x6, 0x10, 0x2}, 0x3a, &(0x7f0000000f40)={0x5, 0xf, 0x3a, 0x2, [@generic={0x32, 0x10, 0x2, "b0e6e6619edd30abd4cf32eef02a2f206aa19aa475d981e3385fa86cc997614c77f52bc7e9a21c40b6a918d5ebd415"}, @ptm_cap={0x3}]}, 0x2, [{0x9c, &(0x7f0000000f80)=@string={0x9c, 0x3, "57f2e735f4ca246cf07840128ce79dcc8ff381291c457b963c1f821c2b9ff4c2c99bcc076a2a4db1116fd212713caf5107e07ddc51b8b0f6824170d5a607bab8d58396a836cf280ebc9307d928d4c0ca0070395e26d1d0aae05b2949d4e00f31b8f4b1b968885f753ade8a3f561c79199e5a53595bb8cb76fe6d1a9450f3b377df6512416927fba8c63423f2d6dbe4d5af2dd49fab4b85e8d715"}}, {0x67, &(0x7f0000001040)=@string={0x67, 0x3, "548279d59a12dbe10227e3ef287c4b4fc4439f432396728c4917966e888a5ba5e13580eb18f5cfece566d0bb28a4b52c633753943dcd8b56736e5c2c540719a9f156ad1519975bb2a87dbd6b11f8a5bbd0452e1b958ae6fad447953dbecb4593da749a34de"}}]})
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001100)={0x101}, 0x4)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001140)=0xfffffc00)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001180), 0x224001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001200)={0x10000, 0x1, 0x4, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
syz_usb_connect(0x1, 0x375, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0xc8, 0x7d, 0x81, 0x20, 0xbda, 0x8050, 0x7cef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x363, 0x1, 0x7, 0xa, 0x10, 0x3, "", [{{0x9, 0x4, 0xd9, 0x2, 0x9, 0x97, 0xfc, 0x12, 0x8, [], [{{0x9, 0x5, 0x80, 0x2, 0x0, 0x6, 0x9, 0x7, [@generic={0xf0, 0x21, "a449099a28443839fe5a76204bbab16fec47d520c8d155fdba86b78e4e6319786d1b82968388b1e37190341ec1cc1b8cdbd620a07d130e4af41182ae068ab3987a3e6ef3816bfec96902004c32fa18116fc858aefc6ad9815b4442d104c6292f06bbd4da94cd6eb678ace180cb333112635baaa12768d01cfecc23edefc84b21b1c08ab1ab09d34a00dcd13aa5b6f28d77329602fa5b2df633751d31e4ca96ab254fcc36194b07976f4ceba7db41ec456e3e1968a175f7a5f4ec1d3b53ad61fafa93bf3da16ec02a2241933a90a8b7b8506343fd75fc6bf405098b8ef5b3d2b1f4daf3f7646d45ab72373cafe98b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x8, 0x96, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x7f7, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x3d7, 0x38, 0x80, 0x6f}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x3, 0xfa, 0x0, [@generic={0x7, 0x2, "55d35bd4ce"}, @generic={0xc8, 0x23, "2f03361f3ea06e34e67945387e58af19094491acd927c59b2fdc5d8a36b096ef7e396aca261205f462f72954c5e261e45f18de484345a6fad4fb8493a5e8eed4bde2d03d9dd34f78b193c5cf5f65eff5b7222aad5ad08a1746e9ec6b8f9b78be65a755d04d41478cfc8297e13f308481e7629b7c7fcfa368aa9ad84263a5d17b73a80d9473cb1e01b4ef9c3263ca5866898827addc2bf4aa2bca350a82a3bbccb96a4ddb680d3949417bbf0e47f271014b19fc7792fef5b5b2f25036242c73e6049860257967"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x54, 0x1, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x3, 0x3, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x18f, 0xff, 0xfb, 0x3, [@generic={0xe8, 0xb, "e9b7cbf77964deba46d57bb962d7de9f922fb8f5b525ee09ea67ade9bff754f2800a3e9d7e58972c1acfa247eec56bf34ae765225ab660d3687ff38fd4811da53a5031a27381f6e4ce9081885b315d5d6c8a373d99c8dfe0eeb806ab07cdea405e99ca27de965c7fa62b04804059ee557707c7e10a769d6e31b4bee8f7ac5fa280ba52e7e441d197500b8c762e1b03d14cacf1975c201d07e2214d85428c9aa7fbc4e79bfab7c95b8b7710104d071044e37c710cb250369aa2df55b5a09b6fa0c6e42486ad2aa7e8e8710de464d89d1f13ed4e224b96755278b0b3b54d3725eeb4759da1817a"}, @generic={0x52, 0x6, "9fe6e26651f909f688a698b00f3d4de23bb09d73662c2123165f6d08547b27c52f3907302e8824c95a7410193050887163c181f38488b8e528252829081c1da5709a2bfe63edb7879c28d8f3f667e21d"}]}}]}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f00000015c0)={0xa, 0x6, 0x201, 0x6, 0x6, 0x6, 0x40, 0x40}, 0x2b, &(0x7f0000001600)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xb, 0xe8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x6, 0x8, 0x8, 0xf6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f77b37d95e8f4001833ff10868a204ba"}]}, 0x1, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x430}}]})
pwritev(r2, &(0x7f0000001780)=[{&(0x7f00000016c0)="2fae0ed69588f944a4607a6f039916caee56371ac10950", 0x17}, {&(0x7f0000001700)="f2170548d134be810151aaf169548b382cd0da1ea69e695887f86af8b7fdce55b45ef37efb05766dbdfdbc10cd77e4eebc06f5797fa038e9653ffdf34e832a8cc031cef55c4617d36911ad330fe29913c1148a0b1dbe1af2c6d8673ff8f9b0d6839a411a6d14ca47b979d343ac61fc7f689177381f5062fd", 0x78}], 0x2, 0xf5, 0x5)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r3)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001900)=0x1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x804)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000001ac0)={0x2, 0x93, "277666be725c8d7c34ab03a08143c0e25ec79e9261e5c1e824551db13eaee59af65a0cce04d4e4b93c685858922c4e1b7653db9df9dbf853a9632250b39632bf0d732689bf1fe792f1bd11d6e01e3b1304aedc9ac74c372a07f7cbf70e5a233cd6e5cbe114042a930100d894687b4aea31f234dd84d2bfdb668f1f2733d971ff4437a1ce4270f724ad9b214698d05ea20390e4"})
bind$rxrpc(r3, &(0x7f0000001b80)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001bc0)=0x6)
ioctl$sock_bt_hci(r3, 0x400448dc, &(0x7f0000001c00)="e706f66c1676b3c7ab9a3869e0a61d4ada3127cda42c5b16d9c4ff3a819705f5eb40f991dac43f19eef145bf4f3bd9cbfdde1bfbfd7c029eeb")
request_key(&(0x7f0000001c40)='keyring\x00', &(0x7f0000001c80)={'syz', 0x3}, &(0x7f0000001cc0)=',}?\x00', 0xfffffffffffffff9)
stat(&(0x7f0000001d00)='./file0/file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r7, {r8, r9}}, './file0\x00'})

2m26.615567919s ago: executing program 2 (id=69):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) (async, rerun: 32)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32)

2m25.579243569s ago: executing program 2 (id=70):
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180))
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001200)={0x2, &(0x7f00000011c0)=[{0xffff, 0xa2, &(0x7f0000000000)="8c012d01d292118e7f07aeec633a28a52a9f2438b339b9f564d3b345d89dd54bbfeb9cf952a51fa9dcb123756bff782aeb2a762a71c356f4b49d0b9af6cde583a1e90f22c5d904142d54be43805886a62dc2f80319ffe0caf986c3010b0e34fbf1af61bc578f231c6186e1b5af730d211b9b2e82060c3fb9b9451e7cdcc6e45271dc3ec6828f9947111e28e426e219bb8673a60dad27046379992d0602d814853bfe"}, {0x4a31, 0x1000, &(0x7f00000001c0)="26c0ab38e2fea9ef58e0f62bccbc971d48741923c24c36589c9043ec55f2f7f4d278579c05fabcb607ed56527183d83112eeb5d3c7db704c11c610ee4a26d2c30215c5142824ca798a98edaba07cd34d42431ec021f6df6f946f616431dbd7d950fe8134c00b3a370bb01755cafa9030f2ace9966aaf1a309a2235710daec11c09dfbeeb46476dbda3765f2c6dd7d424f4fdb08103a8df1be08c767c890c051b7ee5c76c22e451a51187af9edc897936981125b230146fde3580ee7ed277996af3ee3e943229d2ce90eec16dcce5453f13c706935e84b3766d7cd720d4b5c3172961fa4069718ca9c11e8f9a7f24a43996cb2e943ca55f0437a991da44f7ccf5cedd7019db286d1ee8fd95dee625593f7dcacd3bc0d3305359f1b86e518865cc3113f853e00d4a5104cb1b4a69ab4a788194d2150b8a256403e9596edf1a786a4df0e8ce546fd69f8b4294b90311c829dac70328dd39d0019e4e15ffc993ed7a189f2ac8df9d2fbe150fd12c1394c0cef124b655013d31f23f5f39e83b354c539f27002a84b4d155b48edceba1edf824fe7b31b1baf29e73624204b3137890fbf309050099dc139320831877a98bde982c0c65cf1b0e488bceb6b24ec2153cb2ef8d75f86576ec0cb4803fda1acbca3e899ccaf0b8a794d147bbdaece3f6570996077ba49ff97b815bf01dc12ff77a9c1b3d8e4ffeacf1e52f684b5192823da31961c5b4573eb06e38329a403b004f5c18ea3ef6fa90d7e12b0a19300c682c657e378412593cb0f638ac6394ac180bf4667824167cc5332c6bc0518ff07759727ce40d6b43128cfe78892558b23163646f84df1485cdc637bc649a01af824befea8600e627872928e29479e2bc61b135ee31c2ec1416f6cb4f58fc271f0a88934649c0bb50bdf438e095b1aa6c14675e4255fbc706f400e31bc47c271274b0fa39c4905ad5856c290c4feea430e6c5d23f11ca27f6784ba70381e84a5381652f96ae4126db5546533ce50b7c4853462f5ed924e0a77fa7872fe9f14c88dce8d31e4888103825653847a6e847c3b81b4c0646897f4c7e145b0dd26da6cd3512f882e3aab1335052026cdf0628db0cb9d5b53e13f5c9c61ce5ee26b06db8d46b424a577f7120cc5f68d0ed77e51652a83f2c84cbe2970db31e720fcd37496f2f345561b88e88086ef54bfa5ad0b395b0ef3daa794a11a316c4a709636a507f263142df9dba3df2ebaf355242802708c1c9bab7c1c1b957db821a9a03ca6b212ee249e784a3f95f68fa976aa265d26a820a27185fcc457621f722390491c5e47eb44e2a234f37dc938c25b07d8039db9d8bc23ded6d93a5870a77224fb7381d61de7269daa9c4263761b7d4adfbde134f57534c0442630c4885b275ce47b295a7e5575f04a89478d45b150bd5933a8000e74f4ff94203d799c77b4b59fbbf53b40e560b46235c5f1134df254a1732accd3e05e8b3c5c07bdc20b81f2dc93e18bfa9632a36796cb5d3d1662d01cb398313f5df15483719b59ea623aada5bdc6e5c3e47a8286adb128e0f0f8fd0fc2ec40c4b72e4b0b73b79ed9e5d964ced53f039c951025fd088c1114ff6424a9f6b9fdb3f1c81d6984b14d417b94e834fe9536d40013eca1afe6a4d132f7d2eb0e27616945b6efe00682d8bd4bae8f993dd2bdcffef3483a3ded2759a814892b6c22849ed382e3fa81dfe144ff0bfb22d0284ca8811c32314f4bcce699ff0040b19e9534f0f3456eec0baf187b9b4fbcd0666a795a1140854005745281b641f3b5b19f3e93a52270a9c955cf0209233e807ea7b39abdfa9cec87000a61669f08ae28526f32020323d9ca70714b6c86f9d9898db63ed460e8e1a06cf1806c49c761c84481e82870bdef8143c02bb577a89a82257323e6726805d7eede54d0bf19d13f7ba6285d02875e9f06e9be17c369e3241bc8f2f1c95e4088d7c5a7d63bf27f90cc6ee0865f82897a5a7ff76a7b00374d6e126969cf2f665aa7ca405303499a291939ac4cc216128b188bf23fcb5782012ab6cf514fc8609d722d7ce14b9ad288d1b19a9687e9446f5961ca4e5b2e235e9598cccd6e87c9b09ad4aa23340d935c44e8440d284dd6bcf3fe803a2ba702d47cc9c3694d8504d29b488f15c19ce378971ceae00e04ecb214f67611ff5e420dace42135ea25ee72f2281a19e126cc3a5753e77984d3d744f7b77c8662128a84363985cfacaf763d409bfe964c34db1e7ef2fb0f189719a628c818dd50c4f0bc36a9f7d8630a057cd6f520e90eab40aa809a68137aa2958f6466831a607b0f1c706116ecbf384d4fa244dc12c93694aff80c277e2e25560e4ae357aaa2dfd40b8b629193fde65de6b760e2d7773ea8687ccc03bded30bab0351a04edf8c1007fecfdb43ed36fc74b6c0984ff4f9e43d2c5d1e50a6cc3700f775806e1b010d9d62576c1c0938075658448d5fee841d811128760da26e3490702066982582292da2044fc20bed8247b9e36e6632539de744dc270a3595407ed9fd6e71ebeff7f91388600332a4bf2040bbd0b0f3d6b80c69c707705307bf5dfb7f124053cb14f18e2d87019aad41f942b81a68cd723a11fb9373cdb3e98bb1555bc273e531cab4587d9044b8468ac9e08aa8e6ad106769ffada5f2a490cd35b3be90e44179f29e85e2b4862b06729a589c5dd12131e93618ba2631a1098f2cdc0fda1531ca2b0126636d098570fc5c2ffcb4fa16214a8288d638b1251dd6791b6e3165a7001b0cdeb90a28615f308999e99eab3f7da007c26154ac6b621fede252a21485932b25f9bc8c3be68ad4c57c52f3e42d42fb1a64515fd11432d0acfe57ba3510f2f8f46337bf12ff99d3de0d142697ccbe24bac03dc81be36c1533cf79076a1bab73af92b0d23b07bb9f17a0b1cc832b981885142d32c882c7eab5b65d60b662d60ca166f694dd59cfa3c90a462145812d00d83f136e5985771911392bbbbd223da082de98ca07a50337b466de4d1e8db3685326272c91250612ab1847ecc8dc9230413741c103940378fc57345f2ef6ae3c9714c3594dd4697ac115d064c3f249d92d99b01721fb986c63359bf93ed97f7b13f056145f93f70b5fe9b18a8906662c0dec2753bee2c575a4e96d7dc2505b0bc415853b41d28ab727cf011a45b2f06f670ed3cf209fef371a123014cea8eedd2ba5bc336e1d3beab873b2cc9d112b83b3d08d6a9faf7a103c220c8431a8fa7980c023729de60a45d730ad620624ddc6228a9c80b652e0e1ccf467c8fc64ffe8a00cb10178073fbb968d211fe78438367adc81493b01891d42f943bc4f3a80571dcadd03374c8d6013e971de46c8aa5aa3dc8fd5794708bed2f4a891ee10c024e45e05a3ff9ce68111b2d550390e84ad7bdc862a5e35e5275267e9f8e09f949f9a093eb2140b5460747c6a75b3f90b9fcac49bc5f4fa1562bd7a2f3832352d5bd4c10c7eca0a864ac2bff80fdf70a334d491819bcca61dc0ebea9297379a6ecf2bbb9119f84faffb29627951be3b42fa90a6ca0c6748442410c32dd23c769c268722350571292f1c132aec464598d4ef048f12c5b9df1a9819b428ace3bf5bae0b89083f90bd86f32baa54722b32c406573aca4bd3fd1794dfc1cf59a283c4e58984df48eb1872cec41f967c4e8f8f24e15c99ece702db0438e880054d2a7f539acc3c535e6dd2351c9ab478cd413375ba5489ef02d0206c6e281008ab05ec651be0a5abb9e65d3b8e4bfc12ac998470b7953040aabb3bfd22c27e587bd12609c2a80e4eac25209addafc89f5ab6ab3605909d1b0ce3ae1d6bba9eb0f7e0f9e4dfdd32f54a6c13279ce835ed5b6fd5af396d8b1323ce423bb1a00c169c93d8f75afbbe12c0d3b8c9d933d65a74c9cab0066c7c95aefcc7ab535ec1a7486d78d90e540017e0d0c3053ae028f0c5864fcac0373a56010a969351af242b20c414e8e05ba37258b1eb7982ca3eb2b249eb699a33ddc72155322bdd982717c2873d881bdc750c1e5eb53e64e0dc140c93f22cf35d54ffe8db508de0f43365243d6dbbc99e90080923ed9378eab51e1678ad33232837dc03d87e0e58281fe621c7bbb335dec727d60d16f79d1b8a162c88cc0ff0b8605cfe9ac72a30f614f877ac81247d6896a848e976d28b43e165ddb408a1e643f24a5035436294216c17dadb0ec800e294d4679a43c207dc98e578a13b9cc16eb3ac3d532be61c447a23fe1b94ba0d3f108bb00a4f53ed86f04524214154d3e0251c47a5fa0b31c32bb7f9086865b9441f90a1035d3b28bdd475a1540c429eaa19f512f533807f69185a26f2e1248cccb60461885558534abe039bc4f9e87961f670187572d6631462764c211816242c4dd616d0505b8d56eae6520581ce2fe5e8dd546283c50291b3188ba9ba7a4e2862c52918f864b8cd3b79fef82c714adc634ae723bc0748a09699dd7126b9bd2c67c7998accaab8ac9a4a19e5cd13ee002a9a24eda2f5b86c752d9af06d5593cf004c7570698b49c673628706d0638116547eab24eeafbb0b482e905d07a26d239750b8226b60fd489a39580d50c91d89d297a58707b2ea17e544ea6406577d67196d929a8eba32185726bc828b4b4f3d80bb46ec0872156cde6b174b2a03fce22fd242683fd8baf963866da53f6ef657602b744f20c9f5c76ecb569a38eb20d19f6461261dcf69b55773cafca21b9217e0d9d2a3c306f85f605b9774bb53e43873b643d13e4c0a3a6fd64017d11f83a0c2fcd3de7ca4ba4ffe3353cbdf8f2330fdc9ae1768bda62a82799edb747ab2897f63d0bfab4a13dcf95b3e12e10dcced4ebcfcd29d3ed2875249e3c8dbc1ed9bf3891dccb5a942e0c45dd2566ee8f0640d48f9d92c07d6948181c18d1d61b2e7cfe828c5fe49807d2b97a0f4c19a01121e5ea299b7669971295fa73d902acba5ff9a293630c3881c2fbb0014c186a7e4b0a9a4bc7fa4cd752e11cdb774f60fddc317085ac5beb04610ced33ea708b4e6e6c8a5bdbf93b5f7d2bc1f1fec1147ef2c7f0886cad4f927103e627c6e3f518a2bc8c6b81228a58eace66c9237fa5ad47dddb78c0c3914e3d9558f5eb6af5aa2a391e422f6b18de9a5857cd8c88f340a55bb5c3edc6f0f36f168dfa97d8b64a33163ff301aa5628ec49f87600d7d3a3d250fbfe198e827be85a86c80000046688de0eb2518fe94d2e0951f37fb5b6ec35d67326ea9005235fe9f6bfcdfffee3a710a5a6e2742002dc6176353259eced84162ab7c9f2e9989ad0d2a7b076b8915adf8012029b616bbf62990cc660c77655d05815ea00007300a07d1cef74e56336c9824f5e0e970236748a1ce27af87d27fd59647b1381142a3c8023a0c07c6102a388871e50e8523a997d5a4a1291f086592ec946c7a9efe26621926c25a34de3fe4a273e6c81c9361684bb3458bc92421d150cd6afc408ad2974b73e9b4617342107746473e516b0a96d71baa06edda5ee97dec940c1e6b55bcd1a7dbc57164dc97239c16976973bc5f0e1e1873e2c4cfa5b320f90f6cd0591a3ac04b2e4fdaa28636dcb1019e7e324fa40e9b921727426084af2c115ef52e7809db8ae093e27aa13871bab43bc20b3eb63d1b63a0b03745e8d612e191fe601ae242e348cecba2ef79133a45581b024be99ef6b9f409787db8ad6a3d930f17343c71da33fac62159d81e9d73875a7aedd0ac8fe4e94abc8964d99f23c93481399f0fb61713941a78afc24f88cd93c46455209bbfef95f952fd86ba668cb1bb498c963fa23b3d66072ba4fa06ebc85dcda0aa518eff337869", 0x1, 0xcba56f4c48c3be2d}]}) (async, rerun: 32)
r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000001480)="82865805b68da320e1fdd22107278e1fdfdd62c8c2892a70af023996261b1945dd2fa05a826631ee0eabdd5861acd193a4361218877f2550c04c522c96db23c780c172f6ab4a3da78c390900a7aa44d678c7577012e844c970d8a8c61e10f7287a123d83139ae0372d687d677cb66463e36e13cfe20af43eecad12f6185f2a70f966c582365bb2b3c4b02305134d2e56a03ded096ead9db1aa2e27700e7c51924570d93094490314c6898ed615802f4e1a47a7dd64d1e139b718bdf0259d7c29f21c07033e2c5cb2e3a0db2b7be1f27df53076fe2086db13853400e7bbd156da69fd275cc7d6173f7a8cbf761bb7c6030f5a9a77") (async, rerun: 32)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001400)={{r0, &(0x7f00000000c0)='ns/user\x00', 0x20, &(0x7f0000000100)={@align=0x2, {0x8001, 0x0, 0xfffffffc}}, 0x4, &(0x7f0000000140), &(0x7f0000001240)=0x1000}, 0x1, &(0x7f00000013c0)=[{0x1, 0x0, &(0x7f0000001280)='ns/user\x00', &(0x7f00000012c0)="499f9e18b7c5ac71baa603ccb75a134315c5e478d3c1ae5bbef635bbb826837a60b9fa037baa50d16abfeae89dd6e014e1caea2c2bebe834c87f06d2133776027b7470569ee77af0c01d86f3db61d112fb6104dec36ecbe99f3d2182ea64a3d1acfe0f74a4376b38cc48f6582e53c7821ff0a886f9e6eaafac7e1f5b5416f78c1b9f51904be48dc5ad85f055f6c5f54ef0e8117ba0efe05c8b25d59c8efa73273dd12282db4c16f2a3b6079943e865cba40237f6d02e9b97f8a7c16bcc9d5ffcbca7924b94", 0xc5, 0x22}]}) (rerun: 32)

2m25.416308782s ago: executing program 2 (id=72):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x158, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x144, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x158}}, 0x20000000)
r0 = socket(0x10, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async)
mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=0'])
sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2m24.599903079s ago: executing program 2 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000580)="6d643095", 0x4)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000040)=0xffffffffffffffff, 0x2, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe3]}})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7)
linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000180)='./file0\x00', 0x1000)
unlink(0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write(r5, &(0x7f0000000600)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f', 0x6b)

2m23.826105602s ago: executing program 2 (id=77):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x5406)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'vlan0', 0x32, 0x39}, 0x8)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10)
fcntl$setstatus(r1, 0x4, 0x400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) (async)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async)
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x5406) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) (async)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'vlan0', 0x32, 0x39}, 0x8) (async)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10) (async)
fcntl$setstatus(r1, 0x4, 0x400) (async)

2m17.42922309s ago: executing program 1 (id=110):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f"], 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f9) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f9)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r7, &(0x7f0000000000)='3', 0x4e) (async)
write(r7, &(0x7f0000000000)='3', 0x4e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) (async)
write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x5, 0x4, 0x9, 0x0, [{0x7, 0x7, 0x5a, '\x00', 0xcd}, {0x4, 0x9, 0x6, '\x00', 0xb}, {0x6, 0xfe, 0x3c, '\x00', 0x4}, {0xa, 0x40, 0x8, '\x00', 0x3}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x6, 0x3, 0x5, '\x00', 0x82}, {0x0, 0x80, 0x6, '\x00', 0x9}, {0x7, 0x7f, 0x28, '\x00', 0xbb}, {0x40, 0x3a, 0xa7, '\x00', 0xf}, {0x7, 0x6, 0x8, '\x00', 0x7}, {0x4, 0x4, 0x7, '\x00', 0x10}, {0x5, 0x5, 0x34}, {0x7, 0x46, 0x7, '\x00', 0x9}, {0xc, 0x1, 0x8c, '\x00', 0x9}, {0xfa, 0xdf, 0x1, '\x00', 0x1}, {0x80, 0x5, 0xb, '\x00', 0x15}, {0x7, 0x60, 0x5, '\x00', 0x81}, {0x1, 0x2, 0xe}, {0xb4, 0x0, 0x4, '\x00', 0x7}, {0x4, 0x7f, 0x3, '\x00', 0x32}, {0x8, 0xfd, 0x4, '\x00', 0x4}, {0x3, 0x7, 0x5, '\x00', 0xdd}, {0x8, 0x2, 0x5, '\x00', 0x3}, {0x0, 0x40, 0x8, '\x00', 0x6}]}})
socket$xdp(0x2c, 0x3, 0x0)

2m16.409147183s ago: executing program 1 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)
r2 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="f7e4000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
shutdown(r6, 0x1)
syz_usb_control_io(r2, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000040)=0xc, 0x4)
syz_usb_control_io(r2, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r7, 0xc00c6f3e, 0x0)

2m9.991704761s ago: executing program 1 (id=128):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x800})
r2 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r3})

2m9.954814418s ago: executing program 1 (id=129):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00890d0180c20000030eb6ff7fffff86dd694fd2cd0000000000000002ff02cdcd8abc0000000000000000000187009078fc00000000000000000000000000000100"/78], 0x4e)

2m9.850553266s ago: executing program 1 (id=130):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4)

2m9.731783118s ago: executing program 1 (id=131):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x80241)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='-# -3\x00-4\n', 0x9)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0xc, 0x1}}, 0x0, 0xa4b, 0x0}) (async)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0xc, 0x1}}, 0x0, 0xa4b, 0x0})
syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x100) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x100)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fchown(r2, 0xee00, 0x0) (async)
fchown(r2, 0xee00, 0x0)

2m8.766986164s ago: executing program 34 (id=77):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x5406)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'vlan0', 0x32, 0x39}, 0x8)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10)
fcntl$setstatus(r1, 0x4, 0x400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) (async)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async)
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x5406) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) (async)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'vlan0', 0x32, 0x39}, 0x8) (async)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10) (async)
fcntl$setstatus(r1, 0x4, 0x400) (async)

1m55.567739152s ago: executing program 4 (id=178):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x84, 0xfe, 0x80}, {0x6, 0x48, 0xfc, 0x909f}]})
r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2102, r3}, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)

1m54.590365442s ago: executing program 35 (id=131):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x80241)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='-# -3\x00-4\n', 0x9)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0xc, 0x1}}, 0x0, 0xa4b, 0x0}) (async)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0xc, 0x1}}, 0x0, 0xa4b, 0x0})
syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x100) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x100)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fchown(r2, 0xee00, 0x0) (async)
fchown(r2, 0xee00, 0x0)

1m54.572389693s ago: executing program 4 (id=185):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x31, 0x8, {0x8, 0xd, "e75bcf47a88a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m53.037260134s ago: executing program 4 (id=188):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7b5}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7b5}, &(0x7f0000000040)=0x8)
syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f00100000000090400000371055800090582eb10017d0009636b05"], 0x0) (async)
r3 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f00100000000090400000371055800090582eb10017d0009636b05"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[], 0x0)

1m49.898692337s ago: executing program 4 (id=191):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000440)={0x28, 0x3, r3, r1, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000400)={0x30, r4, 0x0, 0x0, 0x30243ab, 0x579, 0xd3, 0x0})
r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r9 = gettid()
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x8df, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x5}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000e58f1ff43fda26d3bdccc03f9474d5e7f55deba9c09a66a7158592b198a7a0c008351c5daa514c8faee5e5a026e00889f5ef859ecf77c8b5f7831cf323ebe4393dc16a8a788f77c858fb5f1878620a23e6fd575c224416b9333f67505b30f383df307a4c9faabc60bbb160cd9ec3c7f67c84d7c3f5e45613d9c83d850e5b6fee5f54aebdd77aed87167c3a5ac1c680902c9108d66bcdba2fc804d9", @ANYRES16=r14, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040444}, 0x4)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r18=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r18, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r19 = dup(r11)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200)
syz_ublk_setup_queues(r19, r10, &(0x7f0000000780)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x248d, 0x1, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x20, 0x3, 0xffffffff, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x8000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r19, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)

1m48.761111693s ago: executing program 4 (id=197):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x726b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x160, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x1, 0x1737f80c3f2f9b05, 0x1, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0xbfe}}, {{{0x9, 0x5, 0x81, 0x3, 0x658, 0x0, 0x40, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xa6, 0x4, 0xe, 0xff, 0x5}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xf, 0xff, 0x800, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5fc565e230264b37bf1265c9893a3609"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4001}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x1, 0x4, "6a75a952"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x84, &(0x7f00000016c0)={0x20, 0xe, 0xd, "caf2d940ccae5eed41c0c180dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="20010d"], 0x0})

1m48.343107326s ago: executing program 4 (id=198):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xff, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)

1m47.297593178s ago: executing program 36 (id=198):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xff, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)

1m25.515391955s ago: executing program 8 (id=300):
r0 = timerfd_create(0x8, 0x0) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x6, r0, 0x0, 0xe, 0x1}]) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x44) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x8000, 0x7, 0x9, 0x1, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @multicast1}}}}) (async)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x68) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x17, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f})

1m25.290327702s ago: executing program 8 (id=301):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052404000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r2)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r2)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000))
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xb609, 0x30}, &(0x7f00000001c0)=0xc)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000000040)=0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r9=>0x0})
connect$can_bcm(r0, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r9}, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000001000080007c6d82fdf254612f0000f7ff0000e90100", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRESOCT=r4, @ANYRES64=0x0, @ANYBLOB="010000e001000000f60000e005030800ef141eea"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)
mmap$IORING_OFF_SQES(0x0, 0xffffffff, 0x6, 0x20010, 0xffffffffffffffff, 0x10000000)

1m23.217540269s ago: executing program 8 (id=311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00890d0180c20000030eb6ff7fffff86dd694fd2cd0000000000000002ff02cdcd8abc0000000000000000000187009078fc00000000000000000000000000000100"/78], 0x4e)

1m22.577718798s ago: executing program 8 (id=312):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff28}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "9018c976", {0x3, 0x2, 0x0, 0x8, 0x43c, 0x3, 0x5}})
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xc8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020002005000048018000180080001006f7366000c000280080001400000001424000180090001006d6574610000000014000280080002400000000c0800034000000015100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x0)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r7, 0xffffffffffffffff, 0x2)
ptrace(0x10, r5)
wait4(r5, 0x0, 0x0, 0x0)
ptrace$getregs(0xc, r5, 0x0, &(0x7f00000001c0)=""/216)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x4, 0x99, '\x00', 0x6})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0)

1m20.147034504s ago: executing program 8 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8000108, @local, 0x4}, {0xa, 0x4e1f, 0x7, @empty, 0x5}, 0x1, {[0x1, 0x7, 0x3, 0x106, 0xe10, 0x100e, 0x3, 0x2]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffe6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000140))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000080)={0x50000, 0x11000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

1m19.635059964s ago: executing program 8 (id=322):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (async)
r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
close(r3) (async)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1', 0x1)

1m19.304550823s ago: executing program 37 (id=322):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (async)
r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
close(r3) (async)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1', 0x1)

59.192165286s ago: executing program 7 (id=408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0x4e)

58.914582256s ago: executing program 7 (id=409):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = eventfd2(0xfffffffe, 0x1)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2})
pread64(r0, &(0x7f0000000000)=""/16, 0x10, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

58.771016647s ago: executing program 7 (id=410):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
exit(0x4)
write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="b009000041000701fefeffff00000000017c0000040042801400018006000600800a000008001300", @ANYRES32=0x0, @ANYBLOB="840902"], 0x9b0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000006c0)={0x0, 0x1, 0x1, "b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001480)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(r0, &(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x1ff)
getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=""/63, &(0x7f0000000180)=0x3f)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x4000, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCSBRK(r3, 0x5427)

53.877924867s ago: executing program 7 (id=428):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8) (async)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000540), 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0xecf86c37d53049dc)
close(r1) (async)
execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000008ec0)={0x8, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x51)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0xd5) (async)
socket(0x10, 0x5, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
setresuid(0xee01, r4, 0x0) (async)
openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0xc274aa3dbb99d7eb, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async)
r7 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x100, 0x2) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="a847a1200bf1df2062202a3a340977"], 0xa)
ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000400)={0x1, @raw_data="aa6aa2ada1cbb682fd912022c769ca1b2eb8b7e2392b6945417ae589d8b1b92e824c72b055f59ea77839b219868afedf601b2fdd7d7c0f5ec505c628db7820f223775ede035bb4d82f7a9c5e7de1f6a97de998f3b1a3a571dcca2f8726ab98556bf26cb31bb710a4a40c57c1cf8751db5bc21318e14255ad8c54d331554aad949a7287a08e205ea4308a0c1aafcf7dedcc122541b5a781083a720d2b29458afc880ae74cfc9b2279f1e25ce8e90bc1f604ba5188f299ec102ffd40b39c404e2d5b9d9cf88f009955"}) (async)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

53.607407221s ago: executing program 7 (id=430):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = syz_open_procfs(0x0, &(0x7f0000000780)='comm\x00')
read$FUSE(r1, &(0x7f0000009a40)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0)
connect$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e)
ioctl(r3, 0xc180fd08, &(0x7f0000002000)="040000000000000000000000800100003801000001000000000000000000000000000000000000006d")
ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000140))
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000240)={&(0x7f0000000280)='batadv_slave_0\x00', &(0x7f0000000500)=']P/,#\x00~\xe1\x00\xb7\xbd\'yE\x97/\xce\xa6\x82W.\r\xed\xcdj\xc1\xf8\xbc\x00\xe1\ao\xa8\x02L\x9c\xb6\xad\b\r\xaf\xce\x8ac\x03\x00\x00\x00\x00\x00\x00\x00\xcc[\x8d&\xcdj\xd1f\xb8-q\fRE{\xffyK\x15\x99,B\xd5\xdd\x87\x84\x187\xf10#\x19\xa2\x81\xaa\xd9\xd1xw\xabJ\xabf\x1a\xdd\xf5\x1c\b\xcc\x8c\xc0\x95\xdbr~\vk\xday`\xc7_\xfa\x04 \xa8\t\xfb\'\xa8<n\xa3\xbfQ\xaeYR\xa2\xe56\xff\x8f\xca?|B`~\xcd\x93C`\xe4\v\xa1\xa8\xdc\x818!`\xfe\xce\xd6\xa9\xe6x{\xd5\xfc}\x8d\xc5-5\x14\xdf\xf4\xb3\x02\x06\xef+\xee\x98\x8c\xf2\xb3\xa7\xb9\x94a\xbdS\xea-bh\xeaP\x84\x1c\x8e\xc4\xae8\xe4u\xcfI|\xe5%\xab\xcfC\xd53\xaf\xa5\xd6h\xbf\x8a\xc2O\xfc\xe6\xb3\x95\xde\xcb\xad\t`\xe7\xc0\xa1o\xb8z\x9e\xdc8\xa5\x00\xc8\x80\f', 0x9})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040001}, 0x4811)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x20004009)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0x5, 0x2, 0x0, 0x20, 0x2b, r4, r2}, {0x7, 0xfffffffffffffff9, 0x3ff, 0x7fff, 0x4, 0x5, 0x0, 0x1}, {0x0, 0x5, 0x3, 0x8}, 0xb, 0x6e6bbb, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3504, 0x5, 0x2, 0x1, 0x9, 0x3, 0x8}}, 0xe8)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0)
write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0xff2e)
r7 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0xffffffffffffffff)
r8 = syz_open_pts(r6, 0xc0400)
ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000080))
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f00000004c0))

53.278703376s ago: executing program 7 (id=432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sched_rr_get_interval(0x0, &(0x7f0000000480))
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x394)
ioctl(r5, 0xc138fd02, &(0x7f0000000000)="0400000000000000")
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010270000050000001000000010000000e8"], 0x120}}, 0x0)

52.954912529s ago: executing program 38 (id=432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sched_rr_get_interval(0x0, &(0x7f0000000480))
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x394)
ioctl(r5, 0xc138fd02, &(0x7f0000000000)="0400000000000000")
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010270000050000001000000010000000e8"], 0x120}}, 0x0)

30.249857415s ago: executing program 6 (id=523):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x800}, 0x8)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r2 = dup(r0)
write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff07000000000000020003000400000004000000386d26a5c84f5dfc90000000d60000100000ef00fe"], 0x58)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

30.079610879s ago: executing program 6 (id=524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_TXQ_QUANTUM={0xffffff96}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x20040800)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x40, 0x43, 0x32, 0x40, 0x1608, 0x305, 0x98de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x44, 0xd, 0x2, 0x21, 0x81, 0x5f, 0x8, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x83, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0)

28.470914827s ago: executing program 6 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x20000000000ff01)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000140)={0xff, 0x0, 0x9, 0x7})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0xd7)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
r3 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r4, 0x0)
lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setreuid(r5, r4)
r6 = getuid()
lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740))
getresgid(&(0x7f00000007c0)=<r7=>0x0, &(0x7f0000000800), &(0x7f0000000840))
newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r9=>r1, {0xee01, <r10=>0xee01}}, './bus\x00'})
getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=<r11=>0x0)
getresgid(&(0x7f0000000a40)=<r12=>0x0, &(0x7f0000000a80), &(0x7f0000000ac0))
r13 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB="2c726f6f746d6f64653df8959dde3070722b3030303034303030302c757365725f69643d00"/52, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, <r14=>0x0, <r15=>0x0, <r16=>0x0}, 0x2020)
write$FUSE_INIT(r13, &(0x7f0000000380)={0x50, 0x0, r14, {0x7, 0x28, 0x7fffffff, 0x40020104, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xcaab}}, 0x50)
syz_fuse_handle_req(r13, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r15, r16, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYRES8=r14, @ANYRESHEX=r9, @ANYBLOB="02000200", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r9, @ANYRES32=r6, @ANYBLOB="040001000000000008000200", @ANYRESOCT, @ANYBLOB="080001007dfb3d62b108bf8ede7275f97637d5960ae5083c53cb100ccf43fb0126fe10cb34b87a21015eec3d592aad747bcedb5e2b32cbd4200314768fc0d8e065104c4117439e16eefe0cd52f2f897805883210bbb17a3afa28bc4ab42ea7024d85680fabf87f8e5a1c46909f290005d1169454453d58b8fd51f9d2aa0678631a962cda861b664890c922c3b7a88e9e1c4f1228863f960b816880e445da5e13ae88ee19549289863d86ec11c783d68ce3e0ed17a0bb145c30bdf408ebebe29ce649a29e92f22a99f975e8f46e75ce03c330ed00"/223, @ANYBLOB="62546267c4cf4c9c859b16041c3c85612610eab314afd0afd1b5367ebba50748010c71ad8d2d7b12ce26ac37cccdcb78a64f4536f21483957fc53862a8415a407756a2a4df751599b9233ba0857e60c4ddf9f1398aabf61057e72cc5717c3ad97fea33b71775f03d2c0ebada8fea3c02f3d0c381d321c6beefda9a2cc3816d4c262797e79577d567c066b242a228cd8874570400eb5a5d00002f8bd5db532310646f56254a", @ANYBLOB="08000400", @ANYRES32=r7, @ANYRES8, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRES16=r9, @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r16, @ANYBLOB="10000400000000002000050000000000"], 0x9c, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', 0x0, 0x0)

28.329249907s ago: executing program 6 (id=530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffff7}}, './file0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x800})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000340)="592308040000007d", 0x8}, 0x1, 0x0, 0x0, 0x20008810}, 0x4004080)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "8f834b94", {0x1, 0xffff, 0x0, 0xa4, 0x27}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffd, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0xeea9, 0xb, 0xfffb, 0xb}, 0x0, 0x0}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x800}) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
sendmsg$802154_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000340)="592308040000007d", 0x8}, 0x1, 0x0, 0x0, 0x20008810}, 0x4004080) (async)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "8f834b94", {0x1, 0xffff, 0x0, 0xa4, 0x27}}) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffd, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0xeea9, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) (async)

25.190825694s ago: executing program 6 (id=545):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x3}, {0x7, 0x1, 0xb9}}}}, 0x9)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/127, 0x7f}], 0xa, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20}, 0x2050)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x1a, r2, 0x0, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
syz_fuse_handle_req(r1, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000006100)={&(0x7f0000002cc0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x6, 0x2000000, 0x3e, 0x6, 0x6, 0x9, 0x0, 0x0, 0x10, 0x8643}}, &(0x7f0000002d40)={0x18, 0x0, 0xfffffffffffffff8, {0x3}}, &(0x7f0000002d80)={0x18, 0x0, 0x10000, {0x7}}, &(0x7f0000002dc0)={0x18, 0x0, 0x1ff, {0x2}}, &(0x7f0000002e00)={0x18, 0x0, 0x3, {0x222}}, &(0x7f0000004e80)={0x28, 0x0, 0x9, {{0x79, 0x7, 0x2}}}, &(0x7f0000004ec0)={0x60, 0x0, 0x1000, {{0x100000000000, 0x529fe79f, 0x9, 0x631e, 0x8, 0x3, 0x5}}}, &(0x7f0000004f40)={0x18, 0xfffffffffffffffe, 0x8e, {0x7}}, &(0x7f0000004f80)={0x11, 0xffffffffffffffda, 0x6, {'\x00'}}, &(0x7f0000004fc0)={0x20, 0xfffffffffffffff5, 0x55, {0x0, 0xd}}, &(0x7f0000005000)={0x78, 0xfffffffffffffff5, 0x2, {0x6, 0x8, 0x0, {0x1, 0x7, 0x1, 0x7fffffffffffffff, 0x4, 0x8, 0x1, 0xfffffffa, 0x4, 0x4000, 0xd, 0x0, 0x0, 0x3, 0x4}}}, &(0x7f0000005100)={0x90, 0xfffffffffffffff5, 0x6, {0x6, 0x2, 0x9, 0x8000000000000001, 0x1, 0x1000, {0x0, 0x8, 0x4dae, 0x0, 0x6151, 0x3, 0x24, 0x5, 0x7f, 0x8000, 0x6, 0x0, 0x0, 0xdf000, 0xa3bb}}}, &(0x7f00000051c0)={0x70, 0xffffffffffffffda, 0x81, [{0x0, 0x5, 0x2, 0x9, '%*'}, {0x6, 0x4, 0x5, 0x3ff, '\x06:-\xdf{'}, {0x6, 0x8, 0x6, 0x4, ',},@,\\'}]}, &(0x7f0000002e40)={0xb0, 0xfffffffffffffffe, 0x9, [{{0x2, 0x3, 0x80, 0xfffffffffffffffe, 0x7, 0x10000, {0x3, 0x6, 0x6, 0x5, 0x2d, 0x6, 0x4, 0x6, 0x6, 0x6000, 0x1, 0x0, 0xee01, 0x7, 0x1}}, {0x0, 0x100000001, 0x4, 0x7, '}-]-'}}]}, 0x0, 0x0, &(0x7f0000005fc0)={0x130, 0x0, 0x2, {0xf6b, 0x64a, 0x0, '\x00', {0x10000, 0x2b0, 0xfffffffffffffff9, 0xffffff7a, 0x0, 0x0, 0x2000, '\x00', 0x4, 0xffffffffffff451c, 0x8, 0x2, {0x5, 0x100}, {0xfffffffffffffff3, 0x2}, {0x7fffffffffffffff, 0x40}, {0x6, 0x9}, 0x6, 0xf, 0x6, 0x4}}}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
keyctl$set_reqkey_keyring(0xe, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f00000000c0)=@x86={0xe, 0x7f, 0x8, 0x0, 0x1000000, 0x3, 0xff, 0xf8, 0x3, 0x80, 0x8, 0x7, 0x0, 0x7, 0x4, 0x3, 0xfd, 0x6, 0x56, '\x00', 0x9, 0x40})

25.07648233s ago: executing program 6 (id=546):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000280))
r6 = dup(r5)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r6, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="418b"])
accept(r5, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000240)={0x8, r13})
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000140))
sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000091)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12.480815655s ago: executing program 5 (id=581):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
write(r0, 0x0, 0x0)

11.477577289s ago: executing program 5 (id=583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000140)=0x6)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000) (async)
setns(r3, 0x24020000)
syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000440)={@val={0x70, 0x500}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) (async)
write$tun(r5, &(0x7f0000000440)={@val={0x70, 0x500}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)
wait4(r4, 0x0, 0x80000000, 0x0) (async)
wait4(r4, 0x0, 0x80000000, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)

9.660465654s ago: executing program 39 (id=546):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000280))
r6 = dup(r5)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r6, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="418b"])
accept(r5, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000240)={0x8, r13})
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000140))
sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000091)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.258721036s ago: executing program 5 (id=592):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
write(r0, 0x0, 0x0)

7.237594715s ago: executing program 5 (id=598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='traceon', 0x7)

6.918959384s ago: executing program 5 (id=599):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x4, 0x0, 0x0, 0x4c, &(0x7f0000000200)="6935a2fa0628053213ac0449819c195600e22e09786fa2f9fc1c6b024b05006f2402a37b8219b9a9a9462bf12c9eb499513ffe943beda4d23b6a5506e7bf07345cfc15f93241b8120228778b", 0x2b})
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000001100000000bbf48f0e"])
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r2})

6.500358345s ago: executing program 5 (id=600):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2082)
statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002080)={{0x1, 0x1, 0x18, <r4=>r0, {0x2}}, './file0/file0\x00'})
openat(r4, &(0x7f0000002140)='./file0/file0\x00', 0x541602, 0x78)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x401, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x923, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x1, 0x0, [0x49, 0x10, 0x5, 0xdc, 0xb, 0x4006974, 0xb, 0x2]})
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x121002, 0x0)
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000280)={0xe000003, 0x40000000000001b6, &(0x7f0000000080), 0x0, 0x4000007})
read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r7}, 0x10)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000)
getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000002180)={@broadcast, @multicast1}, &(0x7f00000042c0)=0xc)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local})
socket$kcm(0x29, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, 0x0)
umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3)

6.355108448s ago: executing program 3 (id=601):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fsopen(&(0x7f0000000180)='ocfs2_dlmfs\x00', 0x1)
close_range(r1, r3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>r1, {0x4}}, './file0\x00'})
mknodat$loop(r5, &(0x7f0000000200)='./file0\x00', 0x800, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x853, 0x9}}}}}, 0x20}}, 0x8004)

6.24671556s ago: executing program 9 (id=602):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x4000, 0x2}, 0x10) (async)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x442}) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async)
r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) (async)
syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000e0f000000cf0d416510d44aa84085a068b5207a08ab85a9e40bcf77f8f7686806322d52f04c43e8baa7e729672c437dc9cc3522153b8312e52ed9b57690adb4001bb9cd1c87a420c6f7fe1517a3c4c57d54f6d7a5bccb5cadb0bd6e06be83c0f2fad8f04ea55747e356b1f631992930160c95c8ce1269f16761ad426b5ccdd1e595867c50fab305621b1dd10071a5659bb2afbb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)

5.966131754s ago: executing program 3 (id=603):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001400)={'pcl816\x00', [0x100, 0xd, 0xd0, 0x2, 0x1, 0x103, 0x2001, 0x20000000, 0x8, 0x9, 0x0, 0x407, 0x1, 0x401, 0x10001, 0x0, 0x0, 0x8, 0xee9, 0x401, 0x68ef, 0x2, 0x4, 0x9, 0x3, 0x21, 0x7, 0x0, 0x7, 0x7, 0x1000008]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x28, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4.213635168s ago: executing program 3 (id=604):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
shutdown(r2, 0x2000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x1, 0x11, r4, 0x0)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003140), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000003180)={0x5, 0x2, 0x40, "33282a0b376c97e46274c2d69da6894a9bac9dcc26066ee692d53de73e6b2c4a", 0x74751a})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00e22fad", @ANYRES16=r6, @ANYBLOB="000328bd7000ff03000031000000080001000a0000000c009900b70000002f0000000800010048000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000014)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1f0ac1ff1df367d2, 0x0)
setns(0xc9, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300040008004a000200000008004b00"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r7, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r10, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0xa, @empty}, 0x1c, &(0x7f0000001880), 0x0, &(0x7f0000001b00)=ANY=[], 0xf8}}], 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, 0x0, 0x0)

3.877225803s ago: executing program 3 (id=605):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000100000022", @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="cf37ec65d617c83cf8dc75d60c0638c25dcd5987dfd59dd3d52f8810fbbeb9d9a3562832238a9d98f1f249fcd77f5ea7d369e180bdbc294dad0cd93dcd01414763d67000eefc638bfa8a828800059c26718d74d368c4f01536c5be2f0a443641b2752d942ecc9c16414d748eb33111e80b3379735155439e24d4949a398228a6322979aef39eda6ed6fb35b43c0edb7917de9f4918698cc774629f815a12dde8e03c25d4cb9b33e7714ee8d99e1397668094cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r3=>0x0, 0xed, 0x5, 0x401}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e21, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0xffff, 0x4}, 0x90)
sendto$inet6(r0, &(0x7f0000847fff)='V', 0x1, 0xf1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffff0}, 0x1c)

3.017796479s ago: executing program 9 (id=606):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000440)})
r3 = getpgid(0x0)
syz_clone3(&(0x7f0000000d80)={0x200080, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3], 0x1}, 0x58)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000004c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x1, 0xd000, 0x1000, &(0x7f0000035000/0x1000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'})
r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$peeksig(0x4209, r7, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000240)=@routing={0x21, 0x2, 0x2, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, 0x18)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0xc025, 0x2})

1.734703648s ago: executing program 9 (id=607):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa942)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x6, 0x4000000000001, 0x80000003, 0x0})
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)
pipe(&(0x7f0000000040))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x70, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0xfb, 0x0, 0x1, [@generic="33a368dfcb83fc24d3350fc63af0907201bf0dd0fab243fc5fd6ddd5985a35adfb4d2c0fbdf2dd9d706ab4c9223312c0f7783839c55a039ef0c2c8a11160028092bea6ec"]}]}]}, 0x70}], 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000)

1.431046234s ago: executing program 9 (id=608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00890d0180c20000030eb6ff7fffff86dd694fd2cd0000000000000002ff02cdcd8abc0000000000000000000187009078fc000000000000000000000000000001"], 0x4e) (fail_nth: 2)

1.096315215s ago: executing program 9 (id=609):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9b})
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
write(r0, 0x0, 0x0)

555.322437ms ago: executing program 3 (id=610):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_hsr\x00', 0x10) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x5, 0x2}, @fda={0x66646185, 0x7fffffffffffffff, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x130a, 0x2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f0000000000)) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000002940)=[{{&(0x7f0000000040)=@nfc, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/94}, {&(0x7f0000000240)=""/252}, {&(0x7f0000000340)=""/198}, {&(0x7f0000000440)=""/68}], 0x0, &(0x7f0000000540)=""/75}, 0x6}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)=""/44}, {&(0x7f0000000680)=""/4096}, {&(0x7f0000001680)=""/117}]}, 0x5}, {{&(0x7f0000001740)=@phonet, 0x0, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/69}, {&(0x7f0000001840)=""/94}, {&(0x7f00000018c0)=""/131}, {&(0x7f0000001980)=""/110}, {&(0x7f0000001a00)=""/244}, {&(0x7f0000001b00)=""/105}], 0x0, &(0x7f0000001c00)=""/214}, 0x10000}, {{&(0x7f0000001d00)=@xdp, 0x0, &(0x7f0000002000)=[{&(0x7f0000001d80)=""/217}, {&(0x7f0000001e80)=""/31}, {&(0x7f0000001ec0)=""/149}, {&(0x7f0000001f80)=""/14}, {&(0x7f0000001fc0)=""/56}], 0x0, &(0x7f0000002080)=""/159}, 0x3}, {{&(0x7f0000002140)=@l2tp={0x2, 0x0, @loopback}, 0x0, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/235}, {&(0x7f00000022c0)=""/3}, {&(0x7f0000002300)=""/58}, {&(0x7f0000002340)=""/126}], 0x0, &(0x7f0000002400)=""/214}, 0x4}, {{&(0x7f0000002500)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000002880)=[{&(0x7f0000002580)=""/212}, {&(0x7f0000002680)=""/137}, {&(0x7f0000002740)=""/138}, {&(0x7f0000002800)=""/49}, {&(0x7f0000002840)=""/37}], 0x0, &(0x7f0000002900)=""/32}, 0xd6}], 0x40000000000010a, 0x0, 0x0)

95.935547ms ago: executing program 9 (id=611):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x1000002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12)
write(r0, &(0x7f0000000240)='1', 0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x7}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='gfs2\x00', 0x80, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x406, 0x0, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0)

0s ago: executing program 3 (id=612):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x3, 0x3a)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f00000000c0))
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r11, @ANYBLOB="cfd9995ad9c62b65f44a76"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
r12 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x100000001, 0x200001)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r12, 0xc2604111, &(0x7f0000000580)={0x4, [[0x6, 0x3, 0x5, 0x1, 0x3, 0xec97, 0x8, 0x9], [0xfffff801, 0x4, 0x4, 0x7, 0x4, 0x1, 0x969f, 0x9], [0xffffff01, 0x4eb2, 0x2, 0xff, 0x7, 0xfffffffb, 0x7, 0x2d]], '\x00', [{0x7, 0x5, 0x0, 0x0, 0x1, 0x1}, {0xff, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x10, 0x4}, {0x6, 0xc2, 0x1, 0x1, 0x0, 0x1}, {0xc17, 0x7, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x343, 0x1, 0x1}, {0x0, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x1000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7, 0xfffffff9, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1, 0x0, 0x0, 0x1}], '\x00', 0xc5})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0022891424ae", @ANYRES64=r3], 0xb2)

kernel console output (not intermixed with test programs):

batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.074076][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.074091][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.074116][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.154879][ T7527] hsr_slave_0: entered promiscuous mode
[  183.156042][ T7527] hsr_slave_1: entered promiscuous mode
[  183.157059][ T7527] debugfs: 'hsr0' already exists in 'hsr'
[  183.157078][ T7527] Cannot create hsr debugfs directory
[  183.199719][   T25] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  183.252877][ T4944] mceusb 6-1:1.0: Error: mce write timed out (expire = 100 (1000ms))
[  183.275774][ T4944] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0
[  183.299364][ T4944] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0/input15
[  183.355086][   T25] usb 7-1: unable to get BOS descriptor or descriptor too short
[  183.355217][   T25] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  183.383381][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.383410][   T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.425231][   T25] usb 7-1: string descriptor 0 read error: -22
[  183.425542][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.521534][   T25] usb 7-1: selecting invalid altsetting 1
[  183.532962][   T25] usb 7-1: unit 3 not found!
[  183.646377][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14
[  183.696221][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.697428][   T25] usb 7-1: cannot request logical cluster ID: 0 (err: -5)
[  183.697454][   T25] usb 7-1: invalid MIXER UNIT descriptor 6
[  183.724963][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.745720][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.764190][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.783289][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.803193][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.823303][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.845631][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.863565][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.883227][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.887790][   T25] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -5
[  183.909405][ T4944] mceusb 6-1:1.0: Error: mce write urb status = -71
[  183.933130][ T4944] mceusb 6-1:1.0: Registered  with mce emulator interface version 1
[  183.933159][ T4944] mceusb 6-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  183.937477][ T4944] usb 6-1: USB disconnect, device number 21
[  183.941822][ T2238] usb 7-1: USB disconnect, device number 23
[  184.435683][ T7527] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  184.469163][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  184.470520][ T7527] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  184.499255][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  184.504314][ T7527] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  184.526351][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  184.527692][ T7527] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  184.585526][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  184.640818][ T7638] FAULT_INJECTION: forcing a failure.
[  184.640818][ T7638] name failslab, interval 1, probability 0, space 0, times 0
[  184.640857][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.5.341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.640889][ T7638] Tainted: [L]=SOFTLOCKUP
[  184.640897][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  184.640911][ T7638] Call Trace:
[  184.640920][ T7638]  <TASK>
[  184.640930][ T7638]  dump_stack_lvl+0xe8/0x150
[  184.640965][ T7638]  should_fail_ex+0x3eb/0x540
[  184.641005][ T7638]  should_failslab+0xa8/0x100
[  184.641031][ T7638]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  184.641062][ T7638]  ? __d_alloc+0x37/0x6f0
[  184.641089][ T7638]  ? __d_alloc+0x37/0x6f0
[  184.641124][ T7638]  __d_alloc+0x37/0x6f0
[  184.641158][ T7638]  d_alloc_pseudo+0x21/0xc0
[  184.641189][ T7638]  alloc_path_pseudo+0x107/0x220
[  184.641216][ T7638]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  184.641242][ T7638]  ? do_raw_spin_lock+0x12b/0x2f0
[  184.641275][ T7638]  alloc_file_pseudo+0xa8/0x1e0
[  184.641302][ T7638]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  184.641328][ T7638]  ? _raw_spin_unlock+0x28/0x50
[  184.641356][ T7638]  ? alloc_fd+0x651/0x6c0
[  184.641386][ T7638]  sock_alloc_file+0xb8/0x2e0
[  184.641412][ T7638]  ? __sys_socket+0x12b/0x1b0
[  184.641444][ T7638]  __sys_socket+0x13f/0x1b0
[  184.641477][ T7638]  __x64_sys_socket+0x7a/0x90
[  184.641507][ T7638]  do_syscall_64+0x166/0x520
[  184.641525][ T7638]  ? trace_irq_disable+0x3b/0x140
[  184.641554][ T7638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.641575][ T7638]  ? clear_bhb_loop+0x70/0xc0
[  184.641602][ T7638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.641623][ T7638] RIP: 0033:0x7f3ba259e159
[  184.641644][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.641662][ T7638] RSP: 002b:00007f3ba3505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  184.641687][ T7638] RAX: ffffffffffffffda RBX: 00007f3ba2825fa0 RCX: 00007f3ba259e159
[  184.641703][ T7638] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  184.641716][ T7638] RBP: 00007f3ba263503b R08: 0000000000000000 R09: 0000000000000000
[  184.641730][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.641743][ T7638] R13: 00007f3ba2826038 R14: 00007f3ba2825fa0 R15: 00007ffd01ed50c8
[  184.641776][ T7638]  </TASK>
[  184.951068][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.016842][ T7527] 8021q: adding VLAN 0 to HW filter on device team0
[  185.047002][ T7662] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  185.047027][ T7662] UDF-fs: Scanning with blocksize 512 failed
[  185.048698][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.048824][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.051147][ T7662] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  185.051168][ T7662] UDF-fs: Scanning with blocksize 1024 failed
[  185.051509][ T7662] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  185.051526][ T7662] UDF-fs: Scanning with blocksize 2048 failed
[  185.063250][ T7663] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  185.063270][ T7663] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  185.065170][ T7662] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  185.065189][ T7662] UDF-fs: Scanning with blocksize 4096 failed
[  185.102935][ T4932] Bluetooth: hci4: command tx timeout
[  185.150714][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15
[  185.162287][ T3803] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.162410][ T3803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.685222][   T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  185.834907][   T25] usb 6-1: Using ep0 maxpacket: 8
[  185.838973][   T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  185.840686][   T25] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  185.840716][   T25] usb 6-1: config 179 has no interface number 0
[  185.840763][   T25] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  185.840792][   T25] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  185.840844][   T25] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  185.840871][   T25] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  185.840893][   T25] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  185.840922][   T25] usb 6-1: config 179 interface 65 has no altsetting 0
[  185.840959][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.004160][   T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16
[  186.505954][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16
[  186.759843][ T4932] Bluetooth: hci0: SCO packet too small
[  186.865577][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.173022][ T4932] Bluetooth: hci4: command tx timeout
[  187.378358][ T7527] veth0_vlan: entered promiscuous mode
[  187.397082][ T7527] veth1_vlan: entered promiscuous mode
[  187.451408][ T7527] veth0_macvtap: entered promiscuous mode
[  187.465887][ T7527] veth1_macvtap: entered promiscuous mode
[  187.500257][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.521304][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.590384][ T7704] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  187.602258][   T32] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.602303][   T32] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.602335][   T32] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.683475][   T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.877048][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.877076][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.040533][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.040558][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.227040][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.351'.
[  188.242983][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243084][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243187][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243277][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243367][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243455][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243546][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243632][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243720][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243818][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.243912][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.244001][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.248650][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249399][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249505][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249602][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249696][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249796][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249894][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.249985][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250166][ T7727] rust_binder: 7725:7727 got reply transaction with no transaction stack
[  188.250189][ T7727] rust_binder: 7725:7727 transaction reply to 0:0 failed EINVAL, code 0 size 72-24
[  188.250431][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250523][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250611][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250700][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250853][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.250944][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251034][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251131][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251221][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251309][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251401][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.251489][ T7726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.274705][ T5693] rust_binder: 7725: undelivered TRANSACTION_ERROR: 29201
[  188.275596][ T7727] syz.7.351 (7727) used greatest stack depth: 17776 bytes left
[  188.300437][ T5693] usb 6-1: USB disconnect, device number 22
[  188.802462][ T7736] Bluetooth: MGMT ver 1.23
[  188.815339][ T7734] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  188.816392][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.7.352'.
[  188.884643][ T7736] syzkaller1: entered promiscuous mode
[  188.884670][ T7736] syzkaller1: entered allmulticast mode
[  188.900132][ T7736] netlink: 156 bytes leftover after parsing attributes in process `syz.5.353'.
[  189.303778][ T7746] IPv6: NLM_F_CREATE should be specified when creating new route
[  189.422511][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.436760][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.460449][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.460946][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.471422][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.476773][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.655223][ T4944] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  189.716564][ T7759] netlink: 4516 bytes leftover after parsing attributes in process `syz.6.360'.
[  189.756689][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.360'.
[  189.756703][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.360'.
[  189.793910][ T4944] usb 6-1: device descriptor read/64, error -71
[  189.869998][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.6.361'.
[  189.872491][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.361'.
[  189.939989][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.940318][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.033197][ T4944] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  190.162982][ T4944] usb 6-1: device descriptor read/64, error -71
[  190.181498][   T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  190.273619][ T4944] usb usb6-port1: attempt power cycle
[  190.332956][   T25] usb 7-1: Using ep0 maxpacket: 16
[  190.333789][   T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  190.335142][   T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.335192][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8
[  190.335219][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.335242][   T25] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  190.335267][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[  190.335293][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.338269][   T25] usb 7-1: config 0 descriptor??
[  190.545495][   T25] usbhid 7-1:0.0: can't add hid device: -71
[  190.545605][   T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  190.568954][   T25] usb 7-1: USB disconnect, device number 24
[  190.694029][ T4944] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  190.703502][ T4932] Bluetooth: hci4: command tx timeout
[  190.717782][ T4944] usb 6-1: device descriptor read/8, error -71
[  190.916521][ T7781] syzkaller1: entered promiscuous mode
[  190.916541][ T7781] syzkaller1: entered allmulticast mode
[  190.953140][ T4944] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  190.973774][ T4944] usb 6-1: device descriptor read/8, error -71
[  191.083350][ T4944] usb usb6-port1: unable to enumerate USB device
[  191.201544][ T7786] FAULT_INJECTION: forcing a failure.
[  191.201544][ T7786] name fail_futex, interval 1, probability 0, space 0, times 0
[  191.201581][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.6.367 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  191.201611][ T7786] Tainted: [L]=SOFTLOCKUP
[  191.201619][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  191.201631][ T7786] Call Trace:
[  191.201640][ T7786]  <TASK>
[  191.201650][ T7786]  dump_stack_lvl+0xe8/0x150
[  191.201684][ T7786]  should_fail_ex+0x3eb/0x540
[  191.201713][ T7786]  get_futex_key+0x1b4/0x1580
[  191.201749][ T7786]  ? __pfx_futex_wake_mark+0x10/0x10
[  191.201782][ T7786]  ? __pfx_get_futex_key+0x10/0x10
[  191.201813][ T7786]  ? futex_hash+0x4e/0x2b0
[  191.201842][ T7786]  ? futex_hash+0x275/0x2b0
[  191.201888][ T7786]  futex_wake+0x119/0x5f0
[  191.201906][ T7786]  ? __pfx_futex_wait+0x10/0x10
[  191.201922][ T7786]  ? __pfx_futex_wake+0x10/0x10
[  191.201947][ T7786]  ? __lock_acquire+0x747/0x2de0
[  191.201967][ T7786]  do_futex+0x458/0x4e0
[  191.201984][ T7786]  ? __pfx_do_futex+0x10/0x10
[  191.201997][ T7786]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  191.202014][ T7786]  __se_sys_futex+0x3a8/0x450
[  191.202032][ T7786]  ? __pfx___se_sys_futex+0x10/0x10
[  191.202046][ T7786]  ? native_tss_update_io_bitmap+0x339/0x530
[  191.202068][ T7786]  ? __x64_sys_futex+0x21/0xf0
[  191.202083][ T7786]  do_syscall_64+0x166/0x520
[  191.202094][ T7786]  ? trace_irq_disable+0x3b/0x140
[  191.202111][ T7786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.202124][ T7786]  ? clear_bhb_loop+0x70/0xc0
[  191.202140][ T7786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.202152][ T7786] RIP: 0033:0x7f739d79e159
[  191.202165][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.202176][ T7786] RSP: 002b:00007f739e6530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  191.202192][ T7786] RAX: ffffffffffffffda RBX: 00007f739da25fa8 RCX: 00007f739d79e159
[  191.202202][ T7786] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f739da25fac
[  191.202210][ T7786] RBP: 00007f739da25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  191.202219][ T7786] R10: 00000000000000dc R11: 0000000000000246 R12: 0000000000000000
[  191.202227][ T7786] R13: 00007f739da26038 R14: 00007fff7c3ed0c0 R15: 00007fff7c3ed1a8
[  191.202246][ T7786]  </TASK>
[  191.206939][ T7788] comedi comedi1: Minor 4 specified more than once!
[  191.275336][ T7787] CIFS: bad ip= option (127�0.0.1)
[  191.275690][ T7788] CIFS: Attempting to mount (null)
[  191.400279][ T7788] CIFS: VFS: Error connecting to socket. Aborting operation.
[  191.400395][ T7788] CIFS: VFS: cifs_mount failed w/return code = -111
[  191.534852][ T5701] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  191.683062][ T5701] usb 7-1: Using ep0 maxpacket: 16
[  191.687400][ T5701] usb 7-1: unable to get BOS descriptor or descriptor too short
[  191.687454][ T5701] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  191.688962][ T5701] usb 7-1: config 1 has an invalid interface number: 236 but max is 2
[  191.688989][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.689009][ T5701] usb 7-1: config 1 has no interface number 0
[  191.689059][ T5701] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 150, changing to 7
[  191.689076][ T5701] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50795, setting to 1024
[  191.689099][ T5701] usb 7-1: config 1 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  191.689115][ T5701] usb 7-1: config 1 interface 2 has no altsetting 0
[  191.691099][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.691115][ T5701] usb 7-1: Product: syz
[  191.691124][ T5701] usb 7-1: Manufacturer: syz
[  191.691132][ T5701] usb 7-1: SerialNumber: syz
[  191.832875][ T5722] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  191.911112][ T5701] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  191.973905][ T5701] usb 7-1: USB disconnect, device number 25
[  191.987999][ T5722] usb 8-1: Using ep0 maxpacket: 16
[  191.991691][ T5722] usb 8-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40
[  191.994802][ T5722] usb 8-1: config 1 interface 0 has no altsetting 0
[  192.031639][ T5722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.031672][ T5722] usb 8-1: SerialNumber: syz
[  192.068324][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.236/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.278334][ T5722] usbhid 8-1:1.0: can't add hid device: -71
[  192.278444][ T5722] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  192.288695][ T5722] usb 8-1: USB disconnect, device number 9
[  192.539050][ T7802] netlink: 76 bytes leftover after parsing attributes in process `syz.6.370'.
[  192.797007][ T7811] 9p: Bad value for 'rfdno'
[  192.945619][ T7817] ./dev/sda1: Can't open blockdev
[  192.946557][ T7813] syzkaller1: entered promiscuous mode
[  192.946579][ T7813] syzkaller1: entered allmulticast mode
[  192.981616][ T7818] ./dev/sda1: Can't open blockdev
[  193.169266][   T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  193.349169][   T25] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  193.364317][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.364347][   T25] usb 8-1: Product: syz
[  193.364362][   T25] usb 8-1: Manufacturer: syz
[  193.364377][   T25] usb 8-1: SerialNumber: syz
[  193.420287][   T25] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  193.454293][  T189] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  193.575514][ T7834] 9pnet_fd: Insufficient options for proto=fd
[  193.613681][  T189] usb 10-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00
[  193.616574][  T189] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  193.616607][  T189] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.616635][  T189] usb 10-1: config 0 interface 0 has no altsetting 0
[  193.616669][  T189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.620716][  T189] usb 10-1: config 0 descriptor??
[  194.031461][ T7815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  194.046397][  T189] wacom 0003:056A:0021.0008: Unknown device_type for 'HID 056a:0021'. Assuming pen.
[  194.053105][  T189] wacom 0003:056A:0021.0008: hidraw0: USB HID v80.00 Joystick [HID 056a:0021] on usb-dummy_hcd.9-1/input0
[  194.060452][  T189] input: Wacom Intuos 6x8 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0021.0008/input/input17
[  194.259009][  T189] usb 10-1: USB disconnect, device number 2
[  194.466682][ T5722] usb 8-1: USB disconnect, device number 10
[  194.542935][ T7848] FAULT_INJECTION: forcing a failure.
[  194.542935][ T7848] name failslab, interval 1, probability 0, space 0, times 0
[  194.542984][ T7848] CPU: 1 UID: 0 PID: 7848 Comm: syz.5.384 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.543017][ T7848] Tainted: [L]=SOFTLOCKUP
[  194.543026][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  194.543039][ T7848] Call Trace:
[  194.543048][ T7848]  <TASK>
[  194.543059][ T7848]  dump_stack_lvl+0xe8/0x150
[  194.543094][ T7848]  should_fail_ex+0x3eb/0x540
[  194.543123][ T7848]  should_failslab+0xa8/0x100
[  194.543150][ T7848]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  194.543182][ T7848]  ? __d_alloc+0x37/0x6f0
[  194.543210][ T7848]  ? __d_alloc+0x37/0x6f0
[  194.543244][ T7848]  __d_alloc+0x37/0x6f0
[  194.543277][ T7848]  d_alloc_pseudo+0x21/0xc0
[  194.543308][ T7848]  alloc_path_pseudo+0x107/0x220
[  194.543335][ T7848]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  194.543360][ T7848]  ? do_raw_spin_lock+0x12b/0x2f0
[  194.543393][ T7848]  alloc_file_pseudo+0xa8/0x1e0
[  194.543421][ T7848]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  194.543446][ T7848]  ? _raw_spin_unlock+0x28/0x50
[  194.543473][ T7848]  ? alloc_fd+0x651/0x6c0
[  194.543501][ T7848]  sock_alloc_file+0xb8/0x2e0
[  194.543527][ T7848]  ? __sys_socket+0x12b/0x1b0
[  194.543558][ T7848]  __sys_socket+0x13f/0x1b0
[  194.543591][ T7848]  __x64_sys_socket+0x7a/0x90
[  194.543622][ T7848]  do_syscall_64+0x166/0x520
[  194.543641][ T7848]  ? trace_irq_disable+0x3b/0x140
[  194.543671][ T7848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.543694][ T7848]  ? clear_bhb_loop+0x70/0xc0
[  194.543719][ T7848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.543740][ T7848] RIP: 0033:0x7f3ba259e159
[  194.543761][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.543779][ T7848] RSP: 002b:00007f3ba3505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  194.543803][ T7848] RAX: ffffffffffffffda RBX: 00007f3ba2825fa0 RCX: 00007f3ba259e159
[  194.543819][ T7848] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  194.543832][ T7848] RBP: 00007f3ba263503b R08: 0000000000000000 R09: 0000000000000000
[  194.543846][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.543859][ T7848] R13: 00007f3ba2826038 R14: 00007f3ba2825fa0 R15: 00007ffd01ed50c8
[  194.543894][ T7848]  </TASK>
[  194.631723][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.631782][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.819521][   T25] usb 8-1: Service connection timeout for: 256
[  194.819546][   T25] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  194.820419][   T25] ath9k_htc: Failed to initialize the device
[  194.822491][ T5722] usb 8-1: ath9k_htc: USB layer deinitialized
[  194.950393][ T7857] syzkaller1: entered promiscuous mode
[  194.950419][ T7857] syzkaller1: entered allmulticast mode
[  195.095451][  T189] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  195.243680][  T189] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  195.249608][  T189] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  195.249637][  T189] usb 6-1: config 0 has no interface number 0
[  195.249678][  T189] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  195.249707][  T189] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.249729][  T189] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.249756][  T189] usb 6-1: config 0 interface 1 has no altsetting 0
[  195.262551][  T189] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  195.262578][  T189] usb 6-1: Manufacturer: syz
[  195.278454][  T189] usb 6-1: config 0 descriptor??
[  195.319750][ T7879] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  195.319773][ T7879] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  195.320975][ T7881] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  195.320992][ T7881] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  195.718773][  T189] uclogic 0003:145F:0212.0009: pen parameters not found
[  195.718812][  T189] uclogic 0003:145F:0212.0009: interface is invalid, ignoring
[  195.745009][  T189] usb 6-1: USB disconnect, device number 27
[  195.863002][ T7862] cgroup: fork rejected by pids controller in /syz6
[  196.133296][ T5701] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  196.143144][ T5722] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  196.284154][ T5722] usb 8-1: device descriptor read/64, error -71
[  196.299357][ T5701] usb 10-1: unable to get BOS descriptor or descriptor too short
[  196.299408][ T5701] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=af.1e
[  196.301000][ T5701] usb 10-1: config 228 has an invalid interface number: 99 but max is 0
[  196.301023][ T5701] usb 10-1: config 228 has no interface number 0
[  196.301064][ T5701] usb 10-1: config 228 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  196.304991][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.305014][ T5701] usb 10-1: Product: syz
[  196.305027][ T5701] usb 10-1: Manufacturer: syz
[  196.305040][ T5701] usb 10-1: SerialNumber: syz
[  196.534501][ T5722] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[  196.607925][ T5701] ath6kl: Failed to submit usb control message: -71
[  196.607983][ T5701] ath6kl: unable to send the bmi data to the device: -71
[  196.607999][ T5701] ath6kl: Unable to send get target info: -71
[  196.638830][ T5701] ath6kl: Failed to init ath6kl core: -71
[  196.639987][ T5701] ath6kl_usb 10-1:228.99: probe with driver ath6kl_usb failed with error -71
[  196.688357][ T5722] usb 8-1: device descriptor read/64, error -71
[  196.702093][ T5701] usb 10-1: USB disconnect, device number 3
[  196.801608][ T5722] usb usb8-port1: attempt power cycle
[  196.856256][ T7934] syzkaller1: entered promiscuous mode
[  196.856283][ T7934] syzkaller1: entered allmulticast mode
[  197.163942][ T5722] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  197.184715][ T5722] usb 8-1: device descriptor read/8, error -71
[  197.280465][   T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  197.314624][   T25] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  197.423287][ T5722] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  197.445160][ T5722] usb 8-1: device descriptor read/8, error -71
[  197.555326][ T5722] usb usb8-port1: unable to enumerate USB device
[  197.692001][ T7940] netlink: 'syz.9.401': attribute type 10 has an invalid length.
[  197.706350][ T7942] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.760064][ T7940] batman_adv: batadv0: Adding interface: dummy0
[  197.760083][ T7940] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.760115][ T7940] batman_adv: batadv0: Interface activated: dummy0
[  197.987482][ T7942] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.989160][ T7952] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  198.259492][ T7942] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.305293][ T7966] bond0: option slaves: interface -Vet��N��6h0-g does not exist!
[  198.412402][ T7942] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.477881][ T5693] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  198.630109][ T5693] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  198.645986][ T5693] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  198.646016][ T5693] usb 10-1: config 0 has no interface number 0
[  198.664790][ T5693] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.664818][ T5693] usb 10-1: Product: syz
[  198.664832][ T5693] usb 10-1: Manufacturer: syz
[  198.664846][ T5693] usb 10-1: SerialNumber: syz
[  198.680231][ T5693] usb 10-1: config 0 descriptor??
[  198.869325][ T7978] syzkaller1: entered promiscuous mode
[  198.869350][ T7978] syzkaller1: entered allmulticast mode
[  198.889048][ T5693] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  198.938232][ T5693] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  198.938603][ T5693] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  198.938658][ T5693] usb 10-1: media controller created
[  198.953601][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.517001][   T43] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  199.663496][   T43] usb 8-1: Using ep0 maxpacket: 32
[  199.672065][   T43] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  199.679495][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.711323][   T43] usb 8-1: config 0 descriptor??
[  199.730389][   T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  199.822287][ T8005] netlink: 'syz.6.412': attribute type 27 has an invalid length.
[  200.022930][ T4944] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  200.050640][ T8010] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers
[  200.054506][ T5693] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  200.176694][ T4944] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  200.178715][ T4944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.178852][ T4944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  200.178876][ T4944] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  200.178901][ T4944] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.179027][ T4944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.241096][ T5693] usb 10-1: USB disconnect, device number 4
[  200.748099][ T8031] syzkaller1: entered promiscuous mode
[  200.748125][ T8031] syzkaller1: entered allmulticast mode
[  200.953797][ T8038] CacheFiles: No cache directory specified
[  201.195079][ T5693] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  201.330440][ T8003] futex_wake_op: syz.5.411 tries to shift op by 144; fix this program
[  201.330641][ T8003] futex_wake_op: syz.5.411 tries to shift op by 144; fix this program
[  201.352902][ T5693] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  201.354662][ T5693] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  201.354694][ T5693] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.356935][ T5693] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  201.356970][ T5693] usb 7-1: Product: syz
[  201.356985][ T5693] usb 7-1: Manufacturer: syz
[  201.359355][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.430798][ T5693] hub 7-1:4.0: USB hub found
[  201.530014][ T4944] [drm] Initialized gud 1.0.0 for 6-1:1.0 on minor 1
[  201.625095][ T5693] hub 7-1:4.0: 1 port detected
[  201.709577][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.710615][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.824961][ T5693] hub 7-1:4.0: config failed, can't get hub status (err -71)
[  201.868626][ T5693] usb 7-1: USB disconnect, device number 26
[  202.035303][ T1234] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  202.184660][ T1234] usb 10-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  202.187509][ T1234] usb 10-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  202.187537][ T1234] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 129
[  202.198218][ T1234] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.198243][ T1234] usb 10-1: Product: syz
[  202.198258][ T1234] usb 10-1: Manufacturer: syz
[  202.198271][ T1234] usb 10-1: SerialNumber: syz
[  202.218269][ T1234] usb 10-1: config 0 descriptor??
[  202.527634][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.9.420'.
[  202.628240][ T8073] overlayfs: failed to resolve './bus': -2
[  202.719537][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17
[  202.736958][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.737584][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.017912][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.019235][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.270733][ T1234] mos7840 10-1:0.0: required endpoints missing
[  203.306829][   T43] gspca_vc032x: reg_r err -110
[  203.306852][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306864][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306874][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306885][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306977][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306989][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.306998][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307006][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307015][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307024][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307034][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307043][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307053][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307062][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307164][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307174][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307183][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  203.307193][   T43] gspca_vc032x: Unknown sensor...
[  203.307368][   T43] vc032x 8-1:0.0: probe with driver vc032x failed with error -22
[  203.309100][ T1234] usb 10-1: USB disconnect, device number 5
[  203.583896][ T8099] netlink: 52 bytes leftover after parsing attributes in process `syz.9.423'.
[  203.961511][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18
[  204.031669][ T8112] syzkaller1: entered promiscuous mode
[  204.031696][ T8112] syzkaller1: entered allmulticast mode
[  204.076668][  T189] usb 8-1: USB disconnect, device number 15
[  204.206028][ T8119] overlayfs: overlapping lowerdir path
[  204.394937][ T1234] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  204.564507][ T1234] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  204.566960][ T1234] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  204.567081][ T1234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.795624][ T1234] usb 7-1: string descriptor 0 read error: -71
[  204.802004][ T1234] hub 7-1:32.0: bad descriptor, ignoring hub
[  204.802036][ T1234] hub 7-1:32.0: probe with driver hub failed with error -5
[  204.903974][ T5693] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  205.063992][ T5693] usb 10-1: unable to get BOS descriptor or descriptor too short
[  205.064050][ T5693] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  205.066347][ T5693] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.066372][ T5693] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  205.066420][ T5693] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  205.066461][ T5693] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  205.066503][ T5693] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  205.066530][ T5693] usb 10-1: config 1 interface 1 has no altsetting 0
[  205.154433][ T5693] usb 10-1: string descriptor 0 read error: -22
[  205.154588][ T5693] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.227049][ T1234] usb 7-1: USB disconnect, device number 27
[  205.387974][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  205.395954][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  205.400662][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  205.416604][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  205.418168][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  205.420820][ T8135] netlink: 32 bytes leftover after parsing attributes in process `syz.9.431'.
[  205.420842][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.9.431'.
[  205.620309][ T5693] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2)
[  205.620340][ T5693] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  205.620361][ T5693] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  205.827737][ T5693] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2)
[  205.950491][ T5693] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2)
[  206.049179][ T5693] usb 10-1: USB disconnect, device number 6
[  206.126320][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19
[  206.333438][ T1234] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  206.483892][ T1234] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  206.485673][ T1234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  206.485750][ T1234] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  206.485776][ T1234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  206.485799][ T1234] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  206.485841][ T1234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.557428][ T1234] usb 7-1: config 0 descriptor??
[  206.838504][ T1234] hdpvr 7-1:0.0: unexpected answer of status request, len -71
[  206.838530][ T1234] hdpvr 7-1:0.0: device init failed
[  206.838617][ T1234] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12
[  206.881777][ T1234] usb 7-1: USB disconnect, device number 28
[  207.016129][ T4944] Console: switching to colour frame buffer device 128x48
[  207.041018][ T4944] gud 6-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  207.137927][ T8174] syzkaller1: entered promiscuous mode
[  207.137954][ T8174] syzkaller1: entered allmulticast mode
[  207.144436][ T2238] usb 6-1: USB disconnect, device number 28
[  207.225315][ T2238] Console: switching to colour VGA+ 128x48
[  207.492980][ T5614] Bluetooth: hci5: command tx timeout
[  207.602592][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20
[  207.913625][  T189] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  208.033280][ T2238] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  208.054408][ T1234] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  208.069049][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.069237][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.069634][ T8140] bridge_slave_0: entered allmulticast mode
[  208.071548][ T8140] bridge_slave_0: entered promiscuous mode
[  208.080922][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.081562][  T189] usb 10-1: not running at top speed; connect to a high speed hub
[  208.081594][  T189] usb 10-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=57.17
[  208.082191][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.082866][  T189] usb 10-1: config 56 has an invalid interface number: 151 but max is 0
[  208.082890][  T189] usb 10-1: config 56 has no interface number 0
[  208.082929][  T189] usb 10-1: config 56 interface 151 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  208.082956][  T189] usb 10-1: config 56 interface 151 altsetting 7 endpoint 0xD has an invalid bInterval 158, changing to 4
[  208.082981][  T189] usb 10-1: config 56 interface 151 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  208.083007][  T189] usb 10-1: config 56 interface 151 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  208.083030][  T189] usb 10-1: config 56 interface 151 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 1023
[  208.083054][  T189] usb 10-1: config 56 interface 151 has no altsetting 0
[  208.084599][ T8140] bridge_slave_1: entered allmulticast mode
[  208.087428][ T8140] bridge_slave_1: entered promiscuous mode
[  208.089351][  T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.089374][  T189] usb 10-1: Product: syz
[  208.089387][  T189] usb 10-1: Manufacturer: syz
[  208.089401][  T189] usb 10-1: SerialNumber: syz
[  208.100542][ T8185] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  208.101524][ T8185] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  208.194427][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.201491][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.213014][ T2238] usb 6-1: Using ep0 maxpacket: 16
[  208.214174][ T2238] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  208.216946][ T2238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.216979][ T2238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.217000][ T2238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  208.217119][ T2238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.229818][ T2238] usb 6-1: config 0 descriptor??
[  208.254940][ T1234] usb 7-1: Using ep0 maxpacket: 32
[  208.272364][ T1234] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  208.345885][ T1234] usb 7-1: unable to read config index 0 descriptor/start: -61
[  208.345928][ T1234] usb 7-1: can't read configurations, error -61
[  208.376488][  T189] option 10-1:56.151: GSM modem (1-port) converter detected
[  208.409141][ T8140] team0: Port device team_slave_0 added
[  208.430137][ T8140] team0: Port device team_slave_1 added
[  208.451621][  T189] usb 10-1: USB disconnect, device number 7
[  208.489011][  T189] option 10-1:56.151: device disconnected
[  208.502861][ T1234] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  208.545943][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.546056][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.546084][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.561759][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.561829][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.561854][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.686225][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686264][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686290][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686324][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686350][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686375][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686401][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686426][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686451][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.686476][ T2238] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  208.689002][ T8140] hsr_slave_0: entered promiscuous mode
[  208.690131][ T8140] hsr_slave_1: entered promiscuous mode
[  208.690931][ T8140] debugfs: 'hsr0' already exists in 'hsr'
[  208.690951][ T8140] Cannot create hsr debugfs directory
[  208.711542][ T2238] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input20
[  208.759923][ T1234] usb 7-1: Using ep0 maxpacket: 32
[  208.773321][ T1234] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  208.798195][ T2238] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  208.830095][ T1234] usb 7-1: unable to read config index 0 descriptor/start: -61
[  208.830137][ T1234] usb 7-1: can't read configurations, error -61
[  208.830633][ T1234] usb usb7-port1: attempt power cycle
[  208.916872][ T2238] usb 6-1: USB disconnect, device number 29
[  209.164187][ T1234] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  209.185533][ T1234] usb 7-1: Using ep0 maxpacket: 32
[  209.186394][ T1234] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  209.192283][ T1234] usb 7-1: unable to read config index 0 descriptor/start: -61
[  209.192325][ T1234] usb 7-1: can't read configurations, error -61
[  209.223540][   T43] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  209.353530][ T1234] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  209.374626][ T1234] usb 7-1: Using ep0 maxpacket: 32
[  209.375330][ T1234] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  209.377335][ T1234] usb 7-1: unable to read config index 0 descriptor/start: -61
[  209.377371][ T1234] usb 7-1: can't read configurations, error -61
[  209.377929][ T1234] usb usb7-port1: unable to enumerate USB device
[  209.423466][   T43] usb 10-1: unable to get BOS descriptor or descriptor too short
[  209.423520][   T43] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.426459][   T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.426509][   T43] usb 10-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  209.426536][   T43] usb 10-1: config 1 interface 0 has no altsetting 0
[  209.484359][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.484390][   T43] usb 10-1: Product: syz
[  209.484406][   T43] usb 10-1: Manufacturer: syz
[  209.484421][   T43] usb 10-1: SerialNumber: syz
[  209.573844][ T5614] Bluetooth: hci5: command tx timeout
[  209.642569][ T8219] tmpfs: Unknown parameter 'gi�|0x0000000000000000'
[  209.751098][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.757726][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.851243][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.851736][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.884278][   T43] cdc_mbim 10-1:1.0: MBIM functional descriptor missing
[  209.884333][   T43] cdc_mbim 10-1:1.0: bind() failure
[  209.909615][   T43] usb 10-1: USB disconnect, device number 8
[  210.073383][ T5694] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[  210.124532][ T8140] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  210.129501][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  210.130727][ T8140] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  210.149379][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  210.155447][ T8140] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  210.174814][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  210.176282][ T8140] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  210.194161][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  210.213223][ T5694] usb 6-1: device descriptor read/64, error -71
[  210.322428][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.355225][ T8140] 8021q: adding VLAN 0 to HW filter on device team0
[  210.364849][  T243] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.364958][  T243] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.373328][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.373435][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.463589][ T5694] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[  210.593117][ T5694] usb 6-1: device descriptor read/64, error -71
[  210.703514][ T5694] usb usb6-port1: attempt power cycle
[  210.731941][ T8248] syzkaller1: entered promiscuous mode
[  210.731966][ T8248] syzkaller1: entered allmulticast mode
[  211.019046][ T8258] netlink: 168 bytes leftover after parsing attributes in process `syz.6.448'.
[  211.062956][ T5694] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  211.085914][ T5694] usb 6-1: device descriptor read/8, error -71
[  211.244622][ T8268] netlink: 822 bytes leftover after parsing attributes in process `syz.9.451'.
[  211.297728][ T8268] FAULT_INJECTION: forcing a failure.
[  211.297728][ T8268] name failslab, interval 1, probability 0, space 0, times 0
[  211.297768][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.9.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  211.297800][ T8268] Tainted: [L]=SOFTLOCKUP
[  211.297808][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  211.297820][ T8268] Call Trace:
[  211.297829][ T8268]  <TASK>
[  211.297838][ T8268]  dump_stack_lvl+0xe8/0x150
[  211.297872][ T8268]  should_fail_ex+0x3eb/0x540
[  211.297898][ T8268]  ? dup_task_struct+0x52/0xa00
[  211.297921][ T8268]  should_failslab+0xa8/0x100
[  211.297946][ T8268]  ? dup_task_struct+0x52/0xa00
[  211.297967][ T8268]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  211.297999][ T8268]  ? dup_task_struct+0x52/0xa00
[  211.298030][ T8268]  dup_task_struct+0x52/0xa00
[  211.298053][ T8268]  ? _raw_spin_unlock_irq+0x23/0x50
[  211.298087][ T8268]  copy_process+0x81b/0x43e0
[  211.298120][ T8268]  ? preempt_schedule_thunk+0x16/0x40
[  211.298153][ T8268]  ? preempt_schedule_common+0x7f/0xd0
[  211.298192][ T8268]  ? try_to_wake_up+0x901/0x14d0
[  211.298217][ T8268]  ? __pfx_copy_process+0x10/0x10
[  211.298244][ T8268]  ? futex_private_hash_put+0x132/0x160
[  211.298292][ T8268]  kernel_clone+0x2d7/0x940
[  211.298318][ T8268]  ? __pfx_futex_wake+0x10/0x10
[  211.298346][ T8268]  ? __pfx_kernel_clone+0x10/0x10
[  211.298382][ T8268]  ? do_futex+0x458/0x4e0
[  211.298416][ T8268]  __x64_sys_clone+0x1b6/0x230
[  211.298444][ T8268]  ? __pfx___x64_sys_clone+0x10/0x10
[  211.298483][ T8268]  ? rcu_is_watching+0x16/0xb0
[  211.298518][ T8268]  do_syscall_64+0x166/0x520
[  211.298537][ T8268]  ? trace_irq_disable+0x3b/0x140
[  211.298566][ T8268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.298587][ T8268]  ? clear_bhb_loop+0x70/0xc0
[  211.298613][ T8268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.298632][ T8268] RIP: 0033:0x7fadef59e159
[  211.298653][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.298671][ T8268] RSP: 002b:00007fadf037ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  211.298695][ T8268] RAX: ffffffffffffffda RBX: 00007fadef825fa0 RCX: 00007fadef59e159
[  211.298711][ T8268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  211.298723][ T8268] RBP: 00007fadef63503b R08: 0000000000000000 R09: 0000000000000000
[  211.298737][ T8268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  211.298750][ T8268] R13: 00007fadef826038 R14: 00007fadef825fa0 R15: 00007fff612398e8
[  211.298783][ T8268]  </TASK>
[  211.345373][ T5694] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  211.374799][ T5694] usb 6-1: device descriptor read/8, error -71
[  211.484435][ T5694] usb usb6-port1: unable to enumerate USB device
[  211.654094][ T5614] Bluetooth: hci5: command tx timeout
[  211.742469][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.866675][ T8140] veth0_vlan: entered promiscuous mode
[  211.882212][ T8140] veth1_vlan: entered promiscuous mode
[  211.949048][ T8140] veth0_macvtap: entered promiscuous mode
[  211.955355][ T8140] veth1_macvtap: entered promiscuous mode
[  211.972342][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.999944][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.073154][    T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  212.128483][   T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.134206][  T243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.135018][  T243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.156056][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.235821][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.235847][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.280902][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  212.280959][    T9] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  212.281920][    T9] usb 10-1: unable to read config index 0 descriptor/start: -71
[  212.281957][    T9] usb 10-1: can't read configurations, error -71
[  212.345152][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.345177][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.658154][ T8307] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  213.117074][ T8323] syzkaller1: entered promiscuous mode
[  213.117101][ T8323] syzkaller1: entered allmulticast mode
[  213.165874][ T4944] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  213.314181][ T4944] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  213.316164][ T4944] usb 7-1: config 0 has an invalid interface number: 127 but max is 1
[  213.316191][ T4944] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.316211][ T4944] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  213.316242][ T4944] usb 7-1: config 0 has no interface number 0
[  213.316293][ T4944] usb 7-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  213.326733][ T4944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.326759][ T4944] usb 7-1: Product: syz
[  213.326773][ T4944] usb 7-1: Manufacturer: syz
[  213.326787][ T4944] usb 7-1: SerialNumber: syz
[  213.342305][ T4944] usb 7-1: config 0 descriptor??
[  213.587278][ T4944] usb-storage 7-1:0.127: USB Mass Storage device detected
[  213.628310][ T4944] usb-storage 7-1:0.127: Quirks match for vid 1908 pid 1315: 20000
[  213.705791][ T4944] usb 7-1: USB disconnect, device number 33
[  213.733190][ T5614] Bluetooth: hci5: command tx timeout
[  213.905255][ T8354] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  214.210344][ T8369] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  214.223376][ T4944] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  214.353043][ T4944] usb 6-1: device descriptor read/64, error -71
[  214.363201][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  214.518761][   T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  214.522092][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.522127][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  214.522154][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  214.522181][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  214.522226][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.537129][   T25] usb 4-1: config 0 descriptor??
[  214.538491][ T8365] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  214.596413][ T4944] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  214.603450][ T5751] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  214.724087][ T4944] usb 6-1: device descriptor read/64, error -71
[  214.756259][ T5751] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  214.759015][ T5751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  214.759070][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.766458][ T5751] usb 7-1: config 0 descriptor??
[  214.768404][ T8374] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  214.835585][ T4944] usb usb6-port1: attempt power cycle
[  214.943357][  T189] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  214.971027][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.971605][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.991733][   T25] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  215.020824][   T25] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  215.133063][  T189] usb 10-1: Using ep0 maxpacket: 32
[  215.136636][  T189] usb 10-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  215.138275][  T189] usb 10-1: config 151 has too many interfaces: 37, using maximum allowed: 32
[  215.138302][  T189] usb 10-1: config 151 has 1 interface, different from the descriptor's value: 37
[  215.138351][  T189] usb 10-1: config 151 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.138378][  T189] usb 10-1: config 151 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.138402][  T189] usb 10-1: config 151 interface 0 has no altsetting 0
[  215.138437][  T189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.164392][  T189] usbhid 10-1:151.0: fixing wrong optional hid class descriptors count
[  215.192603][ T5751] hid (null): invalid report_count 742916608
[  215.203229][ T4944] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  215.241965][ T5751] hid (null): report_id 0 is invalid
[  215.253954][ T4944] usb 6-1: device descriptor read/8, error -71
[  215.255284][ T5751] hid_parser_main: 5 callbacks suppressed
[  215.255305][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255334][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255359][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255385][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255447][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255475][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255500][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255525][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255550][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.255575][ T5751] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[  215.256641][ T5751] logitech-djreceiver 0003:046D:C71F.000D: invalid report_count 742916608
[  215.256663][ T5751] logitech-djreceiver 0003:046D:C71F.000D: item 0 4 1 9 parsing failed
[  215.257409][ T5751] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed
[  215.257483][ T5751] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22
[  215.512981][ T4944] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  215.533736][ T4944] usb 6-1: device descriptor read/8, error -71
[  215.624063][  T189] evision 0003:320F:5041.000E: unexpected long global item
[  215.632553][  T189] evision 0003:320F:5041.000E: probe with driver evision failed with error -22
[  215.656624][ T4944] usb usb6-port1: unable to enumerate USB device
[  215.840236][ T1234] usb 10-1: USB disconnect, device number 11
[  215.953072][  T189] usb 7-1: USB disconnect, device number 34
[  216.486648][  T189] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  216.635097][  T189] usb 7-1: Using ep0 maxpacket: 16
[  216.638177][  T189] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice=f9.85
[  216.641714][  T189] usb 7-1: unable to read config index 0 descriptor/start: -61
[  216.641750][  T189] usb 7-1: can't read configurations, error -61
[  216.723012][ T4944] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  216.773088][  T189] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  216.853197][ T4944] usb 10-1: device descriptor read/64, error -71
[  216.924409][  T189] usb 7-1: Using ep0 maxpacket: 16
[  216.925064][  T189] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice=f9.85
[  216.926720][  T189] usb 7-1: unable to read config index 0 descriptor/start: -61
[  216.926757][  T189] usb 7-1: can't read configurations, error -61
[  216.927041][  T189] usb usb7-port1: attempt power cycle
[  217.095736][ T4944] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  217.200466][ T8449] 9p: Bad value for 'wfdno'
[  217.222856][ T4944] usb 10-1: device descriptor read/64, error -71
[  217.284852][  T189] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  217.308183][  T189] usb 7-1: Using ep0 maxpacket: 16
[  217.310778][  T189] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice=f9.85
[  217.313335][  T189] usb 7-1: unable to read config index 0 descriptor/start: -61
[  217.313376][  T189] usb 7-1: can't read configurations, error -61
[  217.345334][ T1234] usb 4-1: USB disconnect, device number 2
[  217.355766][ T4944] usb usb10-port1: attempt power cycle
[  217.443305][  T189] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  217.467107][  T189] usb 7-1: Using ep0 maxpacket: 16
[  217.470093][  T189] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice=f9.85
[  217.476682][  T189] usb 7-1: unable to read config index 0 descriptor/start: -61
[  217.476717][  T189] usb 7-1: can't read configurations, error -61
[  217.477206][  T189] usb usb7-port1: unable to enumerate USB device
[  217.695201][ T4944] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  217.714785][ T4944] usb 10-1: device descriptor read/8, error -71
[  217.772864][ T5751] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  217.923149][ T5751] usb 6-1: Using ep0 maxpacket: 32
[  217.926230][ T5751] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  217.927024][ T5751] usb 6-1: config 0 has no interfaces?
[  217.929218][ T5751] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  217.929245][ T5751] usb 6-1: Product: syz
[  217.929255][ T5751] usb 6-1: Manufacturer: syz
[  217.929264][ T5751] usb 6-1: SerialNumber: syz
[  217.967919][ T4944] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  217.988036][ T5751] usb 6-1: config 0 descriptor??
[  218.003719][ T4944] usb 10-1: device descriptor read/8, error -71
[  218.113287][ T4944] usb usb10-port1: unable to enumerate USB device
[  218.177305][ T8477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  218.196060][ T8477] kvm: pic: non byte read
[  218.197690][ T8477] kvm: pic: level sensitive irq not supported
[  218.198654][ T8477] kvm: pic: non byte read
[  218.199094][ T8477] kvm: pic: level sensitive irq not supported
[  218.199265][ T8477] kvm: pic: non byte read
[  218.199866][ T8477] kvm: pic: level sensitive irq not supported
[  218.208395][ T8477] kvm: pic: non byte read
[  218.242987][ T8486] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  218.286421][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.286932][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.346940][  T189] usb 6-1: USB disconnect, device number 38
[  219.247277][ T8524] tipc: Started in network mode
[  219.247312][ T8524] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  219.260768][ T8524] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  219.265196][ T8524] tipc: Enabled bearer <udp:syz0>, priority 10
[  219.413673][ T5751] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  219.543400][ T1234] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  219.563909][ T5751] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  219.565076][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.567988][ T5751] usb 4-1: config 0 descriptor??
[  219.571619][ T5751] cp210x 4-1:0.0: cp210x converter detected
[  219.612870][    T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  219.695163][ T1234] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  219.696404][ T1234] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  219.696422][ T1234] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  219.696445][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.706884][ T1234] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[  219.726092][ T1234] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[  219.758520][    T9] usb 7-1: device descriptor read/64, error -71
[  219.882854][ T4944] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  219.978048][ T5751] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  220.002896][    T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  220.035003][ T4944] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.036653][ T4944] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  220.036753][ T4944] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  220.036795][ T4944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.045163][ T8528] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  220.051680][ T4944] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  220.102434][ T8526] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  220.108236][ T8526] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  220.111828][ T8526] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  220.154124][    T9] usb 7-1: device descriptor read/64, error -71
[  220.196198][ T8526] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  220.220234][ T5751] usb 4-1: cp210x converter now attached to ttyUSB1
[  220.259616][ T5693] tipc: Node number set to 1
[  220.269050][    T9] usb usb7-port1: attempt power cycle
[  220.316203][ T4944] usb 10-1: USB disconnect, device number 16
[  220.403892][ T8525] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  220.406385][ T5693] usb 6-1: USB disconnect, device number 39
[  220.439829][ T5693] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  220.440574][ T5693] spcp8x5 6-1:1.0: device disconnected
[  220.602961][    T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  220.627368][    T9] usb 7-1: device descriptor read/8, error -71
[  220.862844][    T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  220.883775][    T9] usb 7-1: device descriptor read/8, error -71
[  220.993474][    T9] usb usb7-port1: unable to enumerate USB device
[  221.043462][ T8535] overlayfs: missing 'lowerdir'
[  221.871779][   T30] audit: type=1326 audit(1789306656.874:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.9.491" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadef59e159 code=0x0
[  221.932860][ T5751] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  222.094928][ T5751] usb 6-1: Using ep0 maxpacket: 16
[  222.096330][ T5751] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  222.100476][ T5751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.100497][ T5751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.100510][ T5751] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  222.100536][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.107528][ T5751] usb 6-1: config 0 descriptor??
[  222.228972][   T43] usb 4-1: USB disconnect, device number 3
[  222.249470][   T43] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  222.280496][   T43] cp210x 4-1:0.0: device disconnected
[  222.350782][ T5751] hid (null): unknown global tag 0xe
[  222.368997][ T5751] shield 0003:0955:7214.000F: unknown global tag 0xe
[  222.369026][ T5751] shield 0003:0955:7214.000F: item 0 0 1 14 parsing failed
[  222.369784][ T5751] shield 0003:0955:7214.000F: Parse failed
[  222.369881][ T5751] shield 0003:0955:7214.000F: probe with driver shield failed with error -22
[  222.993907][ T5751] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  223.033248][   T43] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  223.143758][ T5751] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00
[  223.145634][ T5751] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  223.145695][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  223.148243][ T5751] usb 4-1: New USB device strings: Mfr=165, Product=128, SerialNumber=0
[  223.148270][ T5751] usb 4-1: Product: syz
[  223.148285][ T5751] usb 4-1: Manufacturer: syz
[  223.152161][ T5751] usb 4-1: config 0 descriptor??
[  223.155445][ T8599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  223.162943][   T43] usb 7-1: device descriptor read/64, error -71
[  223.165144][ T5751] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22
[  223.380719][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.382096][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.400294][ T4968] bcm5974 4-1:0.0: could not read from device
[  223.417010][   T43] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  223.419160][ T4968] bcm5974 4-1:0.0: could not read from device
[  223.440751][ T5751] usb 4-1: USB disconnect, device number 4
[  223.459056][ T4968] bcm5974 4-1:0.0: could not read from device
[  223.468895][ T4968] bcm5974 4-1:0.0: could not read from device
[  223.543124][   T43] usb 7-1: device descriptor read/64, error -71
[  223.663633][   T43] usb usb7-port1: attempt power cycle
[  223.927671][ T8621] orangefs_mount: mount request failed with -4
[  224.007926][   T43] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  224.024959][   T43] usb 7-1: device descriptor read/8, error -71
[  224.178296][ T8650] netlink: 'syz.9.502': attribute type 21 has an invalid length.
[  224.178356][ T8650] netlink: 156 bytes leftover after parsing attributes in process `syz.9.502'.
[  224.180703][ T8650] netlink: 'syz.9.502': attribute type 8 has an invalid length.
[  224.180717][ T8650] netlink: 'syz.9.502': attribute type 9 has an invalid length.
[  224.180725][ T8650] netlink: 'syz.9.502': attribute type 10 has an invalid length.
[  224.180733][ T8650] netlink: 'syz.9.502': attribute type 11 has an invalid length.
[  224.180740][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.502'.
[  224.272938][   T43] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  224.294192][   T43] usb 7-1: device descriptor read/8, error -71
[  224.352853][ T5693] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  224.403178][   T43] usb usb7-port1: unable to enumerate USB device
[  224.418312][ T8655] netlink: 'syz.9.504': attribute type 21 has an invalid length.
[  224.504106][ T5693] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00
[  224.506125][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.558535][ T5693] mvusb_mdio 4-1:1.0: probe with driver mvusb_mdio failed with error -5
[  224.686383][ T5751] usb 6-1: USB disconnect, device number 40
[  224.718504][ T5763] usb 4-1: USB disconnect, device number 5
[  224.979010][ T8668] netlink: 'syz.5.506': attribute type 1 has an invalid length.
[  224.980235][ T8669] netlink: 'syz.5.506': attribute type 1 has an invalid length.
[  225.145795][   T30] audit: type=1326 audit(1789306660.154:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.9.504" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadef59e159 code=0x7fc00000
[  226.160474][ T8697] netlink: 830 bytes leftover after parsing attributes in process `syz.6.516'.
[  226.160506][ T8697] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  226.183910][ T8697] sg_write: data in/out 401372/136 bytes for SCSI command 0x0-- guessing data in;
[  226.183910][ T8697]    program syz.6.516 not setting count and/or reply_len properly
[  226.401895][ T8695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.545947][ T2238] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  226.662507][ T8695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.704271][ T8713] syz.3.519 (8713) used obsolete PPPIOCDETACH ioctl
[  226.720269][ T2238] usb 6-1: Using ep0 maxpacket: 32
[  226.721975][ T2238] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  226.748095][ T2238] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  226.748127][ T2238] usb 6-1: config 0 has no interface number 0
[  226.751766][ T2238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.751793][ T2238] usb 6-1: Product: syz
[  226.751807][ T2238] usb 6-1: Manufacturer: syz
[  226.751822][ T2238] usb 6-1: SerialNumber: syz
[  226.781050][ T2238] usb 6-1: config 0 descriptor??
[  226.824493][ T8695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.903632][ T8695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.942916][   T43] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  227.094254][   T43] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  227.096629][   T43] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[  227.096657][   T43] usb 10-1: config 0 has no interface number 0
[  227.096700][   T43] usb 10-1: config 0 interface 41 has no altsetting 0
[  227.099151][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.099188][   T43] usb 10-1: Product: syz
[  227.099203][   T43] usb 10-1: Manufacturer: syz
[  227.099217][   T43] usb 10-1: SerialNumber: syz
[  227.112241][   T43] usb 10-1: config 0 descriptor??
[  227.263462][ T2238] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  227.263496][ T2238] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  227.316890][ T8725] syzkaller1: entered promiscuous mode
[  227.316916][ T8725] syzkaller1: entered allmulticast mode
[  227.341406][ T8720] loop6: detected capacity change from 0 to 7
[  227.345646][   T43] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  228.050451][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'.
[  228.293788][ T5763] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  228.466267][ T5763] usb 7-1: New USB device found, idVendor=1608, idProduct=0305, bcdDevice=98.de
[  228.468364][ T5763] usb 7-1: config 2 has an invalid interface number: 68 but max is 0
[  228.468457][ T5763] usb 7-1: config 2 has no interface number 0
[  228.468503][ T5763] usb 7-1: config 2 interface 68 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  228.468529][ T5763] usb 7-1: config 2 interface 68 altsetting 13 bulk endpoint 0x83 has invalid maxpacket 8
[  228.468630][ T5763] usb 7-1: config 2 interface 68 has no altsetting 0
[  228.492948][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.493030][ T5763] usb 7-1: Product: syz
[  228.493045][ T5763] usb 7-1: Manufacturer: syz
[  228.493058][ T5763] usb 7-1: SerialNumber: syz
[  228.550305][ T8741] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  228.550640][ T8741] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  228.686086][ T8746] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  228.798854][ T5763] io_ti 7-1:2.68: required endpoints missing
[  228.888399][ T5763] usb 7-1: USB disconnect, device number 47
[  229.203387][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'.
[  229.435020][ T2238] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[  229.435318][ T2238] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  229.471199][ T2238] usb 6-1: USB disconnect, device number 41
[  229.743052][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  229.770128][   T43] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  229.770161][   T43] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  229.770403][   T43] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71
[  229.782245][   T43] usb 10-1: USB disconnect, device number 17
[  229.898585][    T9] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  229.900025][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.901444][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.937021][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.937084][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.966879][    T9] usb 4-1: config 0 descriptor??
[  229.983463][    T9] rndis_host 4-1:0.0: rndis: master #0/ffff8880226ca000 slave #1/0000000000000000
[  230.002963][ T2238] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  230.070454][ T8766] i2c i2c-0: new_device: Instantiated device isp1301 at 0x29
[  230.070857][ T8773] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0029'
[  230.070881][ T8773] CPU: 1 UID: 0 PID: 8773 Comm: syz.9.531 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.070910][ T8773] Tainted: [L]=SOFTLOCKUP
[  230.070919][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  230.070931][ T8773] Call Trace:
[  230.070939][ T8773]  <TASK>
[  230.070954][ T8773]  dump_stack_lvl+0xe8/0x150
[  230.070987][ T8773]  sysfs_create_dir_ns+0x271/0x2a0
[  230.071020][ T8773]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  230.071053][ T8773]  ? do_raw_spin_unlock+0xf5/0x200
[  230.071083][ T8773]  kobject_add_internal+0x622/0xcd0
[  230.071116][ T8773]  kobject_add+0x163/0x240
[  230.071138][ T8773]  ? rcu_is_watching+0x16/0xb0
[  230.071164][ T8773]  ? __pfx_kobject_add+0x10/0x10
[  230.071190][ T8773]  ? class_to_subsys+0xb6/0x120
[  230.071221][ T8773]  ? get_device_parent+0xbc/0x3a0
[  230.071250][ T8773]  device_add+0x3fa/0xb80
[  230.071278][ T8773]  i2c_new_client_device+0xa29/0x1130
[  230.071320][ T8773]  ? __pfx_i2c_new_client_device+0x10/0x10
[  230.071348][ T8773]  ? __mutex_lock+0x305/0x15a0
[  230.071368][ T8773]  ? new_device_store+0x132/0x530
[  230.071404][ T8773]  new_device_store+0x24b/0x530
[  230.071435][ T8773]  ? lock_acquire+0x115/0x350
[  230.071464][ T8773]  ? sysfs_file_kobj+0x1a/0x230
[  230.071490][ T8773]  ? __pfx_new_device_store+0x10/0x10
[  230.071528][ T8773]  ? sysfs_file_kobj+0x1a/0x230
[  230.071551][ T8773]  ? sysfs_file_kobj+0x1a/0x230
[  230.071586][ T8773]  ? sysfs_file_kobj+0x1e4/0x230
[  230.071613][ T8773]  ? sysfs_kf_write+0x166/0x260
[  230.071644][ T8773]  ? __pfx_sysfs_kf_write+0x10/0x10
[  230.071668][ T8773]  kernfs_fop_write_iter+0x3a4/0x540
[  230.071698][ T8773]  vfs_write+0x612/0xba0
[  230.071737][ T8773]  ? __pfx_vfs_write+0x10/0x10
[  230.071778][ T8773]  ? __fget_files+0x2a/0x420
[  230.071815][ T8773]  ksys_write+0x150/0x270
[  230.071845][ T8773]  ? __pfx_ksys_write+0x10/0x10
[  230.071887][ T8773]  do_syscall_64+0x166/0x520
[  230.071907][ T8773]  ? trace_irq_disable+0x3b/0x140
[  230.071934][ T8773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.071955][ T8773]  ? clear_bhb_loop+0x70/0xc0
[  230.071982][ T8773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.072003][ T8773] RIP: 0033:0x7fadef59e159
[  230.072022][ T8773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.072039][ T8773] RSP: 002b:00007faded793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  230.072063][ T8773] RAX: ffffffffffffffda RBX: 00007fadef826360 RCX: 00007fadef59e159
[  230.072079][ T8773] RDX: 000000000000000d RSI: 0000200000000140 RDI: 0000000000000003
[  230.072093][ T8773] RBP: 00007fadef63503b R08: 0000000000000000 R09: 0000000000000000
[  230.072107][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.072119][ T8773] R13: 00007fadef8263f8 R14: 00007fadef826360 R15: 00007fff612398e8
[  230.072155][ T8773]  </TASK>
[  230.072363][ T8773] kobject: kobject_add_internal failed for 0-0029 with -EEXIST, don't try to register things with the same name in the same directory.
[  230.072401][ T8773] i2c i2c-0: Failed to register i2c client isp1301 at 0x29 (-17)
[  230.205930][   T43] usb 4-1: USB disconnect, device number 6
[  230.254610][ T2238] usb 7-1: device descriptor read/64, error -71
[  230.502857][ T2238] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  230.632885][ T2238] usb 7-1: device descriptor read/64, error -71
[  230.743302][ T2238] usb usb7-port1: attempt power cycle
[  230.883113][ T4944] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  231.035949][ T4944] usb 6-1: Using ep0 maxpacket: 8
[  231.036971][ T4944] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  231.041451][ T4944] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 189, changing to 7
[  231.047265][ T4944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.047291][ T4944] usb 6-1: Product: syz
[  231.047304][ T4944] usb 6-1: Manufacturer: syz
[  231.047318][ T4944] usb 6-1: SerialNumber: syz
[  231.085141][ T2238] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  231.105888][ T2238] usb 7-1: device descriptor read/8, error -71
[  231.334228][ T4944] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  231.347562][ T2238] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  231.364729][ T2238] usb 7-1: device descriptor read/8, error -71
[  231.376961][ T4944] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[  231.473187][ T2238] usb usb7-port1: unable to enumerate USB device
[  231.729188][ T4944] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22
[  231.757035][ T4944] usb 6-1: USB disconnect, device number 42
[  231.807579][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.906583][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.9.540'.
[  231.906808][ T8831] Unknown options in mask b7f2
[  232.113251][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  232.244884][ T8842] fuse: Bad value for 'fd'
[  232.266515][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  232.266551][    T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  232.266574][    T9] usb 4-1: too many configurations: 240, using maximum allowed: 8
[  232.267885][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  232.267907][    T9] usb 4-1: can't read configurations, error -61
[  232.303711][ T4944] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  232.402955][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  232.455921][ T4944] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  232.458788][ T4944] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.458823][ T4944] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.458851][ T4944] usb 6-1: config 0 interface 0 has no altsetting 0
[  232.458885][ T4944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.461281][ T4944] usb 6-1: config 0 descriptor??
[  232.534150][ T4932] Bluetooth: hci1: command 0x0406 tx timeout
[  232.596063][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  232.596120][    T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  232.596157][    T9] usb 4-1: too many configurations: 240, using maximum allowed: 8
[  232.598023][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  232.598059][    T9] usb 4-1: can't read configurations, error -61
[  232.598497][    T9] usb usb4-port1: attempt power cycle
[  232.830156][ T8848] FAULT_INJECTION: forcing a failure.
[  232.830156][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.830194][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.6.545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  232.830230][ T8848] Tainted: [L]=SOFTLOCKUP
[  232.830238][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  232.830251][ T8848] Call Trace:
[  232.830260][ T8848]  <TASK>
[  232.830269][ T8848]  dump_stack_lvl+0xe8/0x150
[  232.830297][ T8848]  should_fail_ex+0x3eb/0x540
[  232.830315][ T8848]  strncpy_from_user+0x36/0x2c0
[  232.830332][ T8848]  do_getname+0x77/0x250
[  232.830348][ T8848]  do_sys_openat2+0xcc/0x200
[  232.830362][ T8848]  ? __se_sys_futex+0x3a8/0x450
[  232.830377][ T8848]  ? __pfx_do_sys_openat2+0x10/0x10
[  232.830391][ T8848]  ? ksys_read+0x242/0x270
[  232.830407][ T8848]  ? __pfx___se_sys_futex+0x10/0x10
[  232.830420][ T8848]  ? __pfx_ksys_read+0x10/0x10
[  232.830439][ T8848]  __x64_sys_openat+0x138/0x170
[  232.830456][ T8848]  do_syscall_64+0x166/0x520
[  232.830469][ T8848]  ? trace_irq_disable+0x3b/0x140
[  232.830486][ T8848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.830499][ T8848]  ? clear_bhb_loop+0x70/0xc0
[  232.830514][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.830535][ T8848] RIP: 0033:0x7f739d79e159
[  232.830548][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.830559][ T8848] RSP: 002b:00007f739e653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  232.830575][ T8848] RAX: ffffffffffffffda RBX: 00007f739da25fa0 RCX: 00007f739d79e159
[  232.830585][ T8848] RDX: 000400000000a882 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  232.830594][ T8848] RBP: 00007f739d83503b R08: 0000000000000000 R09: 0000000000000000
[  232.830602][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.830610][ T8848] R13: 00007f739da26038 R14: 00007f739da25fa0 R15: 00007fff7c3ed1a8
[  232.830629][ T8848]  </TASK>
[  232.878538][ T4944] usbhid 6-1:0.0: can't add hid device: -71
[  232.878640][ T4944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  232.885534][ T4944] usb 6-1: USB disconnect, device number 43
[  233.016416][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  233.077021][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  233.077078][    T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  233.077116][    T9] usb 4-1: too many configurations: 240, using maximum allowed: 8
[  233.079525][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  233.079572][    T9] usb 4-1: can't read configurations, error -61
[  233.203404][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  233.227320][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  233.227374][    T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  233.227413][    T9] usb 4-1: too many configurations: 240, using maximum allowed: 8
[  233.229466][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  233.229503][    T9] usb 4-1: can't read configurations, error -61
[  233.230056][    T9] usb usb4-port1: unable to enumerate USB device
[  233.434707][   T43] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  233.583860][   T43] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  233.586279][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.589564][   T43] usb 10-1: config 0 descriptor??
[  233.702871][ T4944] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  233.804948][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.805759][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.856833][ T4944] usb 6-1: Using ep0 maxpacket: 16
[  233.858972][ T4944] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  233.863587][ T4944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  233.871483][ T4944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.871507][ T4944] usb 6-1: Product: syz
[  233.871521][ T4944] usb 6-1: Manufacturer: syz
[  233.871534][ T4944] usb 6-1: SerialNumber: syz
[  233.881317][ T4944] usb 6-1: config 0 descriptor??
[  233.905497][ T4944] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  233.905532][ T4944] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  234.166972][ T4944] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  234.660530][ T4944] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  234.660639][ T4944] em28xx 6-1:0.0: board has no eeprom
[  234.733260][ T4944] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  234.733294][ T4944] em28xx 6-1:0.0: dvb set to bulk mode.
[  234.733606][ T5751] em28xx 6-1:0.0: Binding DVB extension
[  234.768804][ T4944] usb 6-1: USB disconnect, device number 44
[  234.786335][ T4944] em28xx 6-1:0.0: Disconnecting em28xx
[  235.072061][ T5751] em28xx 6-1:0.0: Registering input extension
[  235.087806][ T4944] em28xx 6-1:0.0: Closing input extension
[  235.357841][ T4944] em28xx: Freeing device
[  235.476790][   T43] usb 10-1: Cannot set autoneg
[  235.477015][   T43] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  235.489122][   T43] usb 10-1: USB disconnect, device number 18
[  236.193207][ T4944] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  236.199379][ T8881] netlink: 'syz.5.556': attribute type 11 has an invalid length.
[  236.343206][ T4944] usb 4-1: Using ep0 maxpacket: 32
[  236.345397][ T4944] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  236.346948][ T4944] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  236.346974][ T4944] usb 4-1: config 0 has no interface number 0
[  236.347020][ T4944] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  236.347046][ T4944] usb 4-1: config 0 interface 184 has no altsetting 0
[  236.352408][ T4944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.352435][ T4944] usb 4-1: Product: syz
[  236.352450][ T4944] usb 4-1: Manufacturer: syz
[  236.352465][ T4944] usb 4-1: SerialNumber: syz
[  236.383865][ T4944] usb 4-1: config 0 descriptor??
[  236.392920][   T43] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  236.402628][ T8875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  236.544892][   T43] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.548616][   T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.569860][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.569889][   T43] usb 10-1: Product: syz
[  236.569955][   T43] usb 10-1: Manufacturer: syz
[  236.569969][   T43] usb 10-1: SerialNumber: syz
[  236.617909][ T8875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  236.829911][ T4944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  236.829945][ T4944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  236.830059][ T4944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  236.830643][ T4944] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[  237.363264][ T8891] overlayfs: missing 'lowerdir'
[  237.363264][ T8890] overlayfs: missing 'lowerdir'
[  237.472539][   T43] cdc_ncm 10-1:1.0: SET_CRC_MODE failed
[  237.495745][   T43] cdc_ncm 10-1:1.0: bind() failure
[  237.515149][   T43] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  237.515204][   T43] cdc_ncm 10-1:1.1: bind() failure
[  237.542657][   T43] usb 10-1: USB disconnect, device number 19
[  237.639225][ T5751] hid_parser_main: 132 callbacks suppressed
[  237.639251][ T5751] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  237.727470][ T5751] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  238.163809][ T8901] comedi comedi1: adq12b: I/O base address or length out of range
[  238.553393][   T43] usb 10-1: new low-speed USB device number 20 using dummy_hcd
[  238.558278][ T8906] netlink: 'syz.5.561': attribute type 28 has an invalid length.
[  238.558295][ T8906] netlink: 'syz.5.561': attribute type 28 has an invalid length.
[  238.558305][ T8906] netlink: 132 bytes leftover after parsing attributes in process `syz.5.561'.
[  238.703958][   T43] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  238.707080][   T43] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  238.707124][   T43] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30
[  238.707163][   T43] usb 10-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  238.707190][   T43] usb 10-1: config 0 interface 0 has no altsetting 0
[  238.707225][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.711402][   T43] usb 10-1: config 0 descriptor??
[  238.940758][ T4944] usb 10-1: USB disconnect, device number 20
[  239.081019][ T5693] usb 4-1: USB disconnect, device number 11
[  239.844822][ T8916] rdma_op ffff88807212d238 conn xmit_rdma 0000000000000000
[  240.316502][   T43] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  240.473189][ T5693] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  240.476950][   T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  240.479006][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.479049][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.484803][   T43] usb 6-1: config 0 descriptor??
[  240.623528][ T5693] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  240.625894][ T5693] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  240.625923][ T5693] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.625944][ T5693] usb 10-1: config 0 has no interfaces?
[  240.625975][ T5693] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.687531][ T5693] usb 10-1: config 0 descriptor??
[  240.746457][   T30] audit: type=1804 audit(1789306675.754:868): pid=8930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.572" name="file1" dev="ramfs" ino=33368 res=1 errno=0
[  240.759317][   T43] usbhid 6-1:0.0: can't add hid device: -71
[  240.759421][   T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  240.762121][   T43] usb 6-1: USB disconnect, device number 45
[  240.933018][ T5614] Bluetooth: hci5: command tx timeout
[  240.982274][   T43] usb 10-1: USB disconnect, device number 21
[  242.333287][    T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  242.343035][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  242.492839][   T43] usb 4-1: Using ep0 maxpacket: 8
[  242.493776][   T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  242.494661][   T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  242.495123][    T9] usb 10-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00
[  242.497749][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.497774][   T43] usb 4-1: Product: syz
[  242.497788][   T43] usb 4-1: Manufacturer: syz
[  242.497803][   T43] usb 4-1: SerialNumber: syz
[  242.504690][   T43] usb 4-1: config 0 descriptor??
[  242.518708][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.518732][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.518752][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.518804][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.573093][ T1234] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  242.621483][    T9] usb 10-1: config 0 descriptor??
[  242.727314][ T1234] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  242.739445][ T1234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.739474][ T1234] usb 6-1: Product: syz
[  242.739488][ T1234] usb 6-1: Manufacturer: syz
[  242.739501][ T1234] usb 6-1: SerialNumber: syz
[  242.838320][   T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  242.921290][   T43] usb 4-1: USB disconnect, device number 12
[  243.057388][ T8940] orangefs_devreq_write_iter: total:4: must be at least:8240:
[  243.059817][    T9] usbhid 10-1:0.0: can't add hid device: -71
[  243.059938][    T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  243.091388][    T9] usb 10-1: USB disconnect, device number 22
[  243.748507][ T8951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.894100][   T25] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  243.896108][   T25] ath9k_htc: Failed to initialize the device
[  244.046489][   T25] usb 6-1: ath9k_htc: USB layer deinitialized
[  244.100453][ T8952] netlink: 84 bytes leftover after parsing attributes in process `syz.9.578'.
[  244.103147][ T8954] netlink: 84 bytes leftover after parsing attributes in process `syz.9.578'.
[  244.129344][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.145131][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.352969][ T1234] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  244.485771][ T1234] usb 10-1: device descriptor read/64, error -71
[  244.723030][ T1234] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  244.734605][ T5751] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  244.854912][ T1234] usb 10-1: device descriptor read/64, error -71
[  244.884714][ T5751] usb 4-1: Using ep0 maxpacket: 16
[  244.889027][ T5751] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  244.892475][ T5751] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 138, changing to 7
[  244.892521][ T5751] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7
[  244.898560][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.898588][ T5751] usb 4-1: Product: 甍喝텿쫞蹡섉ᶌ⾆Ƀ㏗為캂曛ᩙમ訋끼蒙睗䝞趸䞈汓洪剗ᓧ
[  244.898678][ T5751] usb 4-1: Manufacturer: 첓⢁௢灓涴缥曈륝ꏞ틘췕㌜臟ꓶ梨灧黈ꟚƓ軤ﵜ鄆왤虙楾罙ۻ賬緳ꇧᶓ尻湎曄襁펲䏓Ⳟ瀝茻ᷴඩ휱Ƨ呙均䞞晁辢㹍ぞ䴷潅堹
[  244.898703][ T5751] usb 4-1: SerialNumber: о
[  244.966811][ T1234] usb usb10-port1: attempt power cycle
[  245.171010][ T5751] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[  245.171092][ T5751] usb 4-1: 1:1 : unsupported sample bitwidth 8 in 231 bytes
[  245.171930][ T5751] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  245.315923][ T1234] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  245.334683][ T1234] usb 10-1: device descriptor read/8, error -71
[  245.342145][ T5751] usb 4-1: USB disconnect, device number 13
[  245.468418][ T4944] usb 6-1: USB disconnect, device number 46
[  245.573249][ T1234] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  245.587622][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.595150][ T1234] usb 10-1: device descriptor read/8, error -71
[  245.703365][ T1234] usb usb10-port1: unable to enumerate USB device
[  245.849472][ T8967] fuse: Unknown parameter 'grkup_id'
[  247.065787][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.585'.
[  247.205369][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.206562][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.422911][ T2238] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  247.495969][ T8995] syzkaller1: entered allmulticast mode
[  247.573484][ T5693] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  247.573596][ T2238] usb 10-1: Using ep0 maxpacket: 8
[  247.705918][ T2238] usb 10-1: unable to get BOS descriptor or descriptor too short
[  247.705974][ T2238] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.708618][ T2238] usb 10-1: unable to read config index 0 descriptor/start: -71
[  247.708657][ T2238] usb 10-1: can't read configurations, error -71
[  247.722809][ T5693] usb 4-1: Using ep0 maxpacket: 32
[  247.723721][ T5693] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  247.727738][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.727760][ T5693] usb 4-1: Product: syz
[  247.727774][ T5693] usb 4-1: Manufacturer: syz
[  247.727788][ T5693] usb 4-1: SerialNumber: syz
[  247.744515][ T5693] usb 4-1: config 0 descriptor??
[  247.752623][ T5693] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  248.644339][ T4932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.648200][ T4932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.652600][ T4932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.669897][ T4932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.683042][ T4932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  248.974510][ T9004] netlink: 240 bytes leftover after parsing attributes in process `syz.3.587'.
[  249.184963][ T5693] gspca_ov534_9: reg_r err -32
[  249.201388][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.328712][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.443228][ T5693] gspca_ov534_9: Unknown sensor 0000
[  249.443339][ T5693] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  249.557574][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.749572][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.773840][ T9030] loop7: detected capacity change from 0 to 16384
[  249.970058][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.9.593'.
[  249.970276][ T9036] bridge_slave_1: left allmulticast mode
[  249.970308][ T9036] bridge_slave_1: left promiscuous mode
[  249.970563][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.005014][ T9036] bridge_slave_0: left allmulticast mode
[  250.005045][ T9036] bridge_slave_0: left promiscuous mode
[  250.005303][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.379672][ T5693] usb 4-1: USB disconnect, device number 14
[  250.589971][   T13] bridge_slave_1: left allmulticast mode
[  250.590002][   T13] bridge_slave_1: left promiscuous mode
[  250.590231][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.616867][ T9056] FAULT_INJECTION: forcing a failure.
[  250.616867][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.616892][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.3.596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  250.616910][ T9056] Tainted: [L]=SOFTLOCKUP
[  250.616915][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  250.616923][ T9056] Call Trace:
[  250.616928][ T9056]  <TASK>
[  250.616933][ T9056]  dump_stack_lvl+0xe8/0x150
[  250.616959][ T9056]  should_fail_ex+0x3eb/0x540
[  250.616977][ T9056]  _copy_from_iter+0x1d3/0x1660
[  250.616997][ T9056]  ? __lock_acquire+0x747/0x2de0
[  250.617015][ T9056]  ? __pfx__copy_from_iter+0x10/0x10
[  250.617038][ T9056]  tun_get_user+0x26b/0x44d0
[  250.617065][ T9056]  ? aa_file_perm+0x18b/0x15f0
[  250.617083][ T9056]  ? aa_file_perm+0x4ed/0x15f0
[  250.617098][ T9056]  ? __pfx_tun_get_user+0x10/0x10
[  250.617117][ T9056]  ? __lock_acquire+0x747/0x2de0
[  250.617136][ T9056]  ? kstrtoull+0x137/0x1d0
[  250.617158][ T9056]  ? ref_tracker_alloc+0x341/0x4b0
[  250.617172][ T9056]  ? lock_acquire+0x115/0x350
[  250.617189][ T9056]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  250.617206][ T9056]  ? lock_acquire+0x115/0x350
[  250.617224][ T9056]  ? tun_get+0x1c/0x2f0
[  250.617244][ T9056]  ? tun_get+0x1c/0x2f0
[  250.617261][ T9056]  ? tun_get+0x1c/0x2f0
[  250.617282][ T9056]  tun_chr_write_iter+0x113/0x200
[  250.617301][ T9056]  vfs_write+0x612/0xba0
[  250.617324][ T9056]  ? __pfx_vfs_write+0x10/0x10
[  250.617346][ T9056]  ? __fget_files+0x2a/0x420
[  250.617366][ T9056]  ksys_write+0x150/0x270
[  250.617385][ T9056]  ? __pfx_ksys_write+0x10/0x10
[  250.617408][ T9056]  do_syscall_64+0x166/0x520
[  250.617420][ T9056]  ? trace_irq_disable+0x3b/0x140
[  250.617436][ T9056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.617449][ T9056]  ? clear_bhb_loop+0x70/0xc0
[  250.617465][ T9056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.617478][ T9056] RIP: 0033:0x7f4668b9e159
[  250.617490][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.617503][ T9056] RSP: 002b:00007f4669a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  250.617519][ T9056] RAX: ffffffffffffffda RBX: 00007f4668e26090 RCX: 00007f4668b9e159
[  250.617529][ T9056] RDX: 000000000000004e RSI: 0000200000000040 RDI: 0000000000000003
[  250.617538][ T9056] RBP: 00007f4669a23090 R08: 0000000000000000 R09: 0000000000000000
[  250.617546][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.617554][ T9056] R13: 00007f4668e26128 R14: 00007f4668e26090 R15: 00007ffe3f75bdf8
[  250.617572][ T9056]  </TASK>
[  250.639499][   T13] bridge_slave_0: left allmulticast mode
[  250.639525][   T13] bridge_slave_0: left promiscuous mode
[  250.639740][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.775834][ T5614] Bluetooth: hci6: command tx timeout
[  251.329789][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.358361][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.361031][   T13] bond0 (unregistering): Released all slaves
[  251.386801][ T9053] syzkaller1: entered promiscuous mode
[  251.386827][ T9053] syzkaller1: entered allmulticast mode
[  251.536447][   T13] tipc: Disabling bearer <udp:syz0>
[  251.541873][   T13] tipc: Left network mode
[  251.840408][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  251.860980][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.861182][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.861361][ T9013] bridge_slave_0: entered allmulticast mode
[  251.877333][ T9013] bridge_slave_0: entered promiscuous mode
[  251.880712][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.880819][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.881011][ T9013] bridge_slave_1: entered allmulticast mode
[  251.885155][ T9013] bridge_slave_1: entered promiscuous mode
[  252.052856][   T25] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  252.094115][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.096328][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.185634][ T9013] team0: Port device team_slave_0 added
[  252.209248][ T9013] team0: Port device team_slave_1 added
[  252.248405][   T25] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  252.249622][   T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  252.249649][   T25] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  252.249691][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.306558][   T13] hsr_slave_0: left promiscuous mode
[  252.307415][   T13] hsr_slave_1: left promiscuous mode
[  252.308992][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.309014][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.310198][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.310218][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.354837][   T13] veth1_macvtap: left promiscuous mode
[  252.354877][   T13] veth0_macvtap: left promiscuous mode
[  252.354988][   T13] veth1_vlan: left promiscuous mode
[  252.355059][   T13] veth0_vlan: left promiscuous mode
[  252.355239][   T25] usb 10-1: probing VID:PID(0424:012C)   
[  252.359865][   T25] usb 10-1: vub300 testing BULK IN EndPoint(0) 81
[  252.359894][   T25] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02
[  252.359913][   T25] usb 10-1: vub300 testing BULK IN EndPoint(2) 83
[  252.359931][   T25] usb 10-1: vub300 testing BULK OUT EndPoint(3) 04
[  252.359949][   T25] usb 10-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  252.365574][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  252.511636][   T25] usb 10-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  252.512959][    T9] usb 4-1: Using ep0 maxpacket: 8
[  252.514037][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  252.516278][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  252.516310][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  252.516349][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.529157][    T9] usb 4-1: config 0 descriptor??
[  252.586077][   T25] vub300 10-1:1.0: probe with driver vub300 failed with error -32
[  252.853581][ T5614] Bluetooth: hci6: command tx timeout
[  252.991403][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991445][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991472][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991497][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991524][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991549][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991575][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  252.991599][    T9] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[  253.028946][    T9] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  253.191667][    T9] lenovo 0003:17EF:6047.0011: Failed to switch F7/9/11 mode: -71
[  253.195757][    T9] lenovo 0003:17EF:6047.0011: Failed to switch middle button: -71
[  253.198876][    T9] lenovo 0003:17EF:6047.0011: Fn-lock setting failed: -71
[  253.201599][    T9] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71
[  253.250513][    T9] usb 4-1: USB disconnect, device number 15
[  253.335463][ T9095] fido_id[9095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  253.508584][   T13] team0 (unregistering): Port device team_slave_1 removed
[  253.528151][   T13] team0 (unregistering): Port device team_slave_0 removed
[  253.834446][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  253.866899][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.866921][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.866948][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.878710][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.878727][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.878751][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.004528][ T9097] FAULT_INJECTION: forcing a failure.
[  254.004528][ T9097] name failslab, interval 1, probability 0, space 0, times 0
[  254.004567][ T9097] CPU: 0 UID: 0 PID: 9097 Comm: syz.3.604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  254.004598][ T9097] Tainted: [L]=SOFTLOCKUP
[  254.004606][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  254.004620][ T9097] Call Trace:
[  254.004629][ T9097]  <TASK>
[  254.004639][ T9097]  dump_stack_lvl+0xe8/0x150
[  254.004678][ T9097]  should_fail_ex+0x3eb/0x540
[  254.004707][ T9097]  ? __pfx_sock_alloc_inode+0x10/0x10
[  254.004735][ T9097]  should_failslab+0xa8/0x100
[  254.004760][ T9097]  ? __pfx_sock_alloc_inode+0x10/0x10
[  254.004786][ T9097]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  254.004818][ T9097]  ? sock_alloc_inode+0x2c/0x1a0
[  254.004844][ T9097]  ? sock_alloc_inode+0x2c/0x1a0
[  254.004871][ T9097]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  254.004897][ T9097]  ? __pfx_sock_alloc_inode+0x10/0x10
[  254.004925][ T9097]  sock_alloc_inode+0x2c/0x1a0
[  254.004954][ T9097]  ? __pfx_sock_alloc_inode+0x10/0x10
[  254.004981][ T9097]  alloc_inode+0x6a/0x1b0
[  254.005009][ T9097]  __sock_create+0x127/0xac0
[  254.005049][ T9097]  __sys_socket+0xd6/0x1b0
[  254.005085][ T9097]  __x64_sys_socket+0x7a/0x90
[  254.005118][ T9097]  do_syscall_64+0x166/0x520
[  254.005137][ T9097]  ? trace_irq_disable+0x3b/0x140
[  254.005167][ T9097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.005190][ T9097]  ? clear_bhb_loop+0x70/0xc0
[  254.005217][ T9097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.005237][ T9097] RIP: 0033:0x7f4668b9e159
[  254.005257][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.005277][ T9097] RSP: 002b:00007f4669a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  254.005303][ T9097] RAX: ffffffffffffffda RBX: 00007f4668e25fa0 RCX: 00007f4668b9e159
[  254.005320][ T9097] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a
[  254.005333][ T9097] RBP: 00007f4668c3503b R08: 0000000000000000 R09: 0000000000000000
[  254.005346][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.005360][ T9097] R13: 00007f4668e26038 R14: 00007f4668e25fa0 R15: 00007ffe3f75bdf8
[  254.005403][ T9097]  </TASK>
[  254.009945][ T9097] socket: no more sockets
[  254.208615][ T9013] hsr_slave_0: entered promiscuous mode
[  254.230134][ T9013] hsr_slave_1: entered promiscuous mode
[  254.230921][ T9013] debugfs: 'hsr0' already exists in 'hsr'
[  254.241506][ T9013] Cannot create hsr debugfs directory
[  254.405785][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3
[  254.522825][   T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  254.624209][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4
[  254.683954][   T25] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  254.685518][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.712296][   T25] usb 4-1: config 0 descriptor??
[  254.744399][   T25] cp210x 4-1:0.0: cp210x converter detected
[  254.923769][   T25] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[  254.923812][   T25] cp210x 4-1:0.0: querying part number failed
[  254.933438][ T5614] Bluetooth: hci6: command tx timeout
[  254.937990][ T5693] usb 10-1: USB disconnect, device number 29
[  254.963205][   T25] usb 4-1: cp210x converter now attached to ttyUSB0
[  256.066268][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  256.066346][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.186309][ T9013] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  256.202117][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  256.211982][ T9013] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  256.233627][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  256.234722][ T9013] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  256.241829][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  256.264485][ T9013] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  256.292258][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  256.634859][ T9145] syzkaller1: entered promiscuous mode
[  256.634884][ T9145] syzkaller1: entered allmulticast mode
[  256.646456][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.792127][ T9013] 8021q: adding VLAN 0 to HW filter on device team0
[  256.799259][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.799406][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.829078][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.829202][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.013545][ T5614] Bluetooth: hci6: command tx timeout
[  257.048434][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.119076][ T9013] veth0_vlan: entered promiscuous mode
[  257.139585][ T9013] veth1_vlan: entered promiscuous mode
[  257.203885][   T30] audit: type=1804 audit(1789306692.214:869): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/127/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0
[  257.207082][ T9013] veth0_macvtap: entered promiscuous mode
[  257.246261][ T9013] veth1_macvtap: entered promiscuous mode
[  257.279433][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.302511][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.317085][ T5693] usb 4-1: USB disconnect, device number 16
[  257.330323][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.335978][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.392475][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.393226][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.416448][ T5693] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  257.417146][ T5693] cp210x 4-1:0.0: device disconnected
[  257.426498][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.426706][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.426896][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.441013][  T243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.444620][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.445555][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.445908][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.446186][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.457593][ T1272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.458545][ T4983] udevd[4983]: could not touch /run/udev/queue: No such file or directory
[  257.776124][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.776149][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.955542][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.955568][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.974115][   T31] INFO: task syz.2.77:6196 blocked for more than 143 seconds.
[  257.974145][   T31]       Tainted: G             L      syzkaller #0
[  257.974157][   T31] "echo 0 > /proc/sys/kerne
** replaying previous printk message **
[  257.974157][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  257.974168][   T31] task:syz.2.77        state:D stack:28696 pid:6196  tgid:6191  ppid:5622   task_flags:0x400140 flags:0x00080002
[  257.974235][   T31] Call Trace:
[  257.974243][   T31]  <TASK>
[  257.974265][   T31]  __schedule+0x17dd/0x5940
[  257.974341][   T31]  ? __pfx___schedule+0x10/0x10
[  257.974381][   T31]  ? schedule+0x90/0x2b0
[  257.974414][   T31]  schedule+0x164/0x2b0
[  257.974446][   T31]  schedule_preempt_disabled+0x13/0x30
[  257.974476][   T31]  __mutex_lock+0x7c4/0x15a0
[  257.974502][   T31]  ? __mutex_lock+0x5cd/0x15a0
[  257.974527][   T31]  ? fdget_pos+0x246/0x320
[  257.974557][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  257.974584][   T31]  ? __fget_files+0x2a/0x420
[  257.974616][   T31]  ? __fget_files+0x3a2/0x420
[  257.974641][   T31]  ? __fget_files+0x2a/0x420
[  257.974672][   T31]  fdget_pos+0x246/0x320
[  257.974702][   T31]  ksys_write+0x79/0x270
[  257.974735][   T31]  ? __pfx_ksys_write+0x10/0x10
[  257.974777][   T31]  do_syscall_64+0x166/0x520
[  257.974797][   T31]  ? trace_irq_disable+0x3b/0x140
[  257.974825][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.974847][   T31]  ? clear_bhb_loop+0x70/0xc0
[  257.974875][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.974897][   T31] RIP: 0033:0x7f9b4b79e159
[  257.975031][   T31] RSP: 002b:00007f9b4c5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  257.975057][   T31] RAX: ffffffffffffffda RBX: 00007f9b4ba26360 RCX: 00007f9b4b79e159
[  257.975074][   T31] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004
[  257.975089][   T31] RBP: 00007f9b4b83503b R08: 0000000000000000 R09: 0000000000000000
[  257.975102][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.975115][   T31] R13: 00007f9b4ba263f8 R14: 00007f9b4ba26360 R15: 00007ffc67f29718
[  257.975150][   T31]  </TASK>
[  257.975189][   T31] 
[  257.975189][   T31] Showing all locks held in the system:
[  257.975199][   T31] locks held by pr/ttyS0/16: 1, last CPU#1:
[  257.975215][   T31]  #0: ffffffff8ee363b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  257.975291][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  257.975306][   T31]  #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  257.975362][   T31] locks held by kworker/0:2/189: 3, on CPU#0:
[  257.975377][   T31]  #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  257.975432][   T31]  #1: ffffc90002ea7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  257.975486][   T31]  #2: ffff88807844b250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0
[  257.975615][   T31] locks held by getty/5378: 2, on CPU#1:
[  257.975630][   T31]  #0: ffff888032b650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  257.975692][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  257.975751][   T31] locks held by syz-executor/6070: 3, last CPU#0:
[  257.975766][   T31]  #0: ffff88807fc3e460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200
[  257.975831][   T31]  #1: ffff888076097040 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: vfs_fileattr_set+0x160/0xc80
[  257.975894][   T31]  #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0
[  257.975954][   T31] locks held by syz.2.77/6192: 3, on CPU#1:
[  257.975968][   T31]  #0: ffff88802a5fdb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  257.976023][   T31]  #1: ffff888034196460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  257.976085][   T31]  #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  257.976140][   T31] locks held by syz.2.77/6196: 1, on CPU#0:
[  257.976154][   T31]  #0: ffff88802a5fdb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  257.976210][   T31] locks held by syz.1.131/6514: 3, on CPU#0:
[  257.976226][   T31]  #0: ffff88807ed50d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  257.979711][   T31]  #1: ffff888055aec460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  257.979789][   T31]  #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  257.979850][   T31] locks held by syz-executor/7527: 2, last CPU#0:
[  257.979866][   T31]  #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470
[  257.979919][   T31]  #1: ffff88807b8583b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  257.979978][   T31] locks held by syz-executor/8140: 2, last CPU#1:
[  257.979993][   T31]  #0: ffff88807ac59c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x11a9/0x1d00
[  257.980053][   T31]  #1: ffffffff8ef5c8c0 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260
[  257.980115][   T31] locks held by syz-executor/9013: 4, last CPU#0:
[  257.980130][   T31]  #0: ffff88807fc3e460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  257.980193][   T31]  #1: ffff8880616acc00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  257.980264][   T31]  #2: ffff88807fc3a938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  257.980330][   T31]  #3: ffff888046d23878 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0
[  257.980394][   T31] locks held by syz.5.599/9074: 1, last CPU#1:
[  257.980410][   T31]  #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  257.980465][   T31] 
[  257.980472][   T31] =============================================
[  257.980472][   T31] 
[  257.980482][   T31] NMI backtrace for cpu 0
[  257.980499][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  257.980531][   T31] Tainted: [L]=SOFTLOCKUP
[  257.980539][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  257.980552][   T31] Call Trace:
[  257.980560][   T31]  <TASK>
[  257.980569][   T31]  dump_stack_lvl+0xe8/0x150
[  257.980598][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  257.980626][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  257.980656][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  257.980686][   T31]  sys_info+0x135/0x170
[  257.980709][   T31]  watchdog+0x1058/0x10d0
[  257.980746][   T31]  ? watchdog+0x209/0x10d0
[  257.980779][   T31]  kthread+0x38b/0x480
[  257.980808][   T31]  ? __pfx_watchdog+0x10/0x10
[  257.980834][   T31]  ? __pfx_kthread+0x10/0x10
[  257.980863][   T31]  ret_from_fork+0x514/0xb70
[  257.980894][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  257.980922][   T31]  ? __switch_to+0xc89/0x1420
[  257.980951][   T31]  ? __pfx_kthread+0x10/0x10
[  257.980979][   T31]  ret_from_fork_asm+0x1a/0x30
[  257.981020][   T31]  </TASK>
[  257.981073][   T31] Sending NMI from CPU 0 to CPUs 1:
[  257.981103][    C1] NMI backtrace for cpu 1
[  257.981123][    C1] CPU: 1 UID: 0 PID: 8140 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  257.981148][    C1] Tainted: [L]=SOFTLOCKUP
[  257.981155][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  257.981165][    C1] RIP: 0010:__lock_acquire+0x5ae/0x2de0
[  257.981194][    C1] Code: 44 89 e0 49 ff c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 <25> ff 1f 00 00 48 0f a3 05 95 a2 1e 13 73 10 48 69 c0 c8 00 00 00
[  257.981210][    C1] RSP: 0018:ffffc90006547360 EFLAGS: 00000097
[  257.981226][    C1] RAX: 82000000000404f6 RBX: ffff888035fd6990 RCX: 00000000ffffffff
[  257.981239][    C1] RDX: 0000000000000004 RSI: 0000000000010000 RDI: 8300000000000000
[  257.981252][    C1] RBP: ffff888035fd6998 R08: ffffffff821f011f R09: 0000000000000000
[  257.981267][    C1] R10: ffffc90006547640 R11: fffff52000ca8ed7 R12: ffffffffffffff05
[  257.981281][    C1] R13: 0000000000000000 R14: ffff888035fd5dc0 R15: 0000000000000000
[  257.981321][    C1] FS:  000055557eb49500(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000
[  257.981338][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.981350][    C1] CR2: 00007f4668ded158 CR3: 0000000033586000 CR4: 00000000003526f0
[  257.981368][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  257.981378][    C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  257.981390][    C1] Call Trace:
[  257.981397][    C1]  <TASK>
[  257.981407][    C1]  ? ring_buffer_unlock_commit+0x51d/0x6c0
[  257.981427][    C1]  ? trace_event_buffer_commit+0x258/0x7a0
[  257.981449][    C1]  lock_acquire+0x115/0x350
[  257.981472][    C1]  ? __might_fault+0xaf/0x130
[  257.981496][    C1]  ? __might_fault+0xaf/0x130
[  257.981515][    C1]  __might_fault+0xcb/0x130
[  257.981534][    C1]  ? __might_fault+0xaf/0x130
[  257.981554][    C1]  _copy_from_user+0x28/0xb0
[  257.981577][    C1]  copy_everything_to_user+0x1fb/0xcd0
[  257.981604][    C1]  ? find_inlist_lock_noload+0x49/0x260
[  257.981630][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  257.981646][    C1]  ? __pfx_copy_everything_to_user+0x10/0x10
[  257.981677][    C1]  ? find_inlist_lock_noload+0xc6/0x260
[  257.981703][    C1]  do_ebt_get_ctl+0x541/0x1f30
[  257.981733][    C1]  ? __pfx_do_ebt_get_ctl+0x10/0x10
[  257.981757][    C1]  ? release_sock+0x2f/0x260
[  257.981793][    C1]  ? do_ip_getsockopt+0x12fb/0x1d00
[  257.981818][    C1]  ? do_ip_getsockopt+0x12fb/0x1d00
[  257.981843][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  257.981864][    C1]  ? __mutex_trylock_common+0x15f/0x270
[  257.981883][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  257.981902][    C1]  ? rcu_is_watching+0x16/0xb0
[  257.981918][    C1]  ? trace_contention_end+0x3d/0x140
[  257.981945][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  257.981967][    C1]  nf_getsockopt+0x26e/0x290
[  257.981987][    C1]  ip_getsockopt+0x19e/0x230
[  257.982004][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[  257.982020][    C1]  ? __might_fault+0xaf/0x130
[  257.982040][    C1]  ? sock_common_getsockopt+0x2d/0xb0
[  257.982063][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  257.982087][    C1]  do_sock_getsockopt+0x51d/0x7e0
[  257.982106][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  257.982123][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  257.982150][    C1]  ? exc_page_fault+0x6a/0xc0
[  257.982176][    C1]  __x64_sys_getsockopt+0x1a4/0x240
[  257.982197][    C1]  do_syscall_64+0x166/0x520
[  257.982212][    C1]  ? trace_irq_disable+0x3b/0x140
[  257.982235][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.982252][    C1]  ? clear_bhb_loop+0x70/0xc0
[  257.982271][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.982288][    C1] RIP: 0033:0x7f4668b9f92a
[  257.982303][    C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  257.982317][    C1] RSP: 002b:00007ffe3f75ba78 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  257.982336][    C1] RAX: ffffffffffffffda RBX: 00007f4668ded160 RCX: 00007f4668b9f92a
[  257.982349][    C1] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003
[  257.982360][    C1] RBP: 0000000000000003 R08: 00007ffe3f75ba9c R09: 0000000000000000
[  257.982371][    C1] R10: 00007ffe3f75baa0 R11: 0000000000000202 R12: 00007ffe3f75baa0
[  257.982383][    C1] R13: 00007ffe3f75ba9c R14: 0000000000000002 R15: 0000000000000000
[  257.982400][    C1]  </TASK>
[  258.008144][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  259.082475][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  259.093161][   T31] Tainted: [L]=SOFTLOCKUP
[  259.097488][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  259.107544][   T31] Call Trace:
[  259.110837][   T31]  <TASK>
[  259.113771][   T31]  vpanic+0x56d/0xa70
[  259.117770][   T31]  ? __pfx___schedule+0x10/0x10
[  259.122632][   T31]  ? __pfx_vpanic+0x10/0x10
[  259.127157][   T31]  panic+0xc5/0xd0
[  259.130894][   T31]  ? __pfx_panic+0x10/0x10
[  259.135322][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  259.140795][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  259.146179][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  259.152348][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  259.158509][   T31]  watchdog+0x10cc/0x10d0
[  259.162858][   T31]  ? watchdog+0x209/0x10d0
[  259.167292][   T31]  kthread+0x38b/0x480
[  259.171371][   T31]  ? __pfx_watchdog+0x10/0x10
[  259.176229][   T31]  ? __pfx_kthread+0x10/0x10
[  259.180832][   T31]  ret_from_fork+0x514/0xb70
[  259.185437][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  259.190561][   T31]  ? __switch_to+0xc89/0x1420
[  259.195247][   T31]  ? __pfx_kthread+0x10/0x10
[  259.199851][   T31]  ret_from_fork_asm+0x1a/0x30
[  259.204635][   T31]  </TASK>
[  259.208053][   T31] Kernel Offset: disabled
[  259.212378][   T31] Rebooting in 86400 seconds..