last executing test programs:

6.179454626s ago: executing program 1 (id=677):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x2004c005)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r7=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}])
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r9, &(0x7f0000006800)="10", 0x20)

3.257933518s ago: executing program 2 (id=693):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"})
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
listen(0xffffffffffffffff, 0x0)
syz_usbip_server_init(0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})

2.850288327s ago: executing program 1 (id=694):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='1:0', 0x3)
write(r1, &(0x7f0000000500), 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef)
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f00000007c0)='active', 0x6)

2.529801737s ago: executing program 0 (id=696):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (fail_nth: 3)

2.383690399s ago: executing program 0 (id=697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x12a06, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_VF_PORTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
r2 = socket$kcm(0x29, 0x7, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x8, 0x9d1a552416497993)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x2}, 0x16, 0x3)

2.371785185s ago: executing program 1 (id=698):
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc002, 0x4, 0x5, 0xff, 0xfa, 0x3, 0x8, 0x45, 0x3, 0xfa, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x47, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xd9e, 0x3, 0x3a, 0xf, 0x84, 0x7, 0x3, 0x50, 0x1, 0x45, 0x4, 0x5, 0x3a}], 0xffffffff})
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000001c0)={0x7, 0x54, @name="2181fb71d1531abd204a6f0f592b26a32790d374c1c884413b25dabc1ae89a37"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @mcast1, 0x4}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @loopback, @mcast2, {[], {0x4e1c, 0x4e20, 0x3e, 0x0, @wg=@cookie={0x3, 0xfffffffe, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='udf\x00', 0x80011, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r6, &(0x7f0000000640)='algo=\"s', 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000000000000000900006effff7f140000009dc9354d6d4de1a45f4a73c7ebf51031b500"/53, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000000000000100"/28], 0x50)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x4080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f00004e5000/0x2000)=nil, 0x2000}, 0x1})

2.239057997s ago: executing program 0 (id=699):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x20000, 0x0, 0x20002f7})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0x5, 0x118f, 0x8000}, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x36, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xf5, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd648", 0x4d}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="c00000000f010000750a0000ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f4200508c2d566a10a5b33b795cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e62c0000000200000031fe7c354d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70f40000000c0100000d00000008b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc8575f8ffffff084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e00980000000f01000004000000977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c500000001601000003000000e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f3765900003c000000010100c977038b00ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a93465320000000c00000008010000fa08000010ba88147c2e394d16782ec73439287f38f388a30ee6797bc53a6f90ed675da87d03ac4b58b35a4d7ed3cf0d19c2e4106315706f4fb6cd8eccb3610ff690d5d83e2a34bb39d5d04d050cb53b9c526d7bf37ba22f28304da14491960ba0a2801985f78f9789e209c0d2c2242582770d0b5eabec4cab4132176c72d984c0450613046dfbdc7d188f1047dd6a8eaa71e0398c7fed0443f5a1cd68e4ec319d4ccb3c21b4851778fb3ed69281bbd2b34b7e3f6acc7b4ef76d28760115"], 0x310}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc202, 0x0)

2.10954363s ago: executing program 2 (id=701):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, <r4=>0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x8, 0x1}, 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

1.960279751s ago: executing program 2 (id=702):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xa}}, 0x20)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r7 = socket$inet(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, r10}, 0x14)

1.612487288s ago: executing program 1 (id=703):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0)
write(r0, &(0x7f0000000e00)='1\n', 0x2)
openat(r0, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\n', 0x2)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000002000), 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="40004c080a000200aaaaaaaaaa0c"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
r5 = socket(0x10, 0x803, 0x0)
write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r9, @ANYBLOB='F'], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)

1.321197223s ago: executing program 3 (id=704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0xc8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x4a, 0x91, "c8818dbdb18f281ec8e200ac40841de626f29c6aa159e311d6dc3964e08bd7d43e93d43b55a64e11461d988233da5719c083430b0a84db7b49e89a041ff88a83021c3536b9d4"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc8}}, 0x0)

1.301743674s ago: executing program 1 (id=705):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000fc0)={0x4, 0x1, 0x7000, 0x1000, &(0x7f0000264000/0x1000)=nil})
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000803000/0x3000)=nil)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000040), 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000180)='.\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@ng, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x74}}, 0x0)
recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000001980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0", 0x579, 0xfffffffffffffffb)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28)

1.248414856s ago: executing program 3 (id=706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="985e", 0x2}], 0x1}, 0x80)

1.199304688s ago: executing program 0 (id=707):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='0', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x50)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e1d, @local}, 0x10)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2711, 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 '], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.137104943s ago: executing program 0 (id=708):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="b230cea0ee9914a8460d21f56e6640cb6489e85d84ba36c2b45738c50839dbfa07de6689795625f3d566996b2151f7be185cef2f50d31797b4e20380c3c41cd930218adc0b45398b937ca72dafca5a8580"}, {&(0x7f0000000500)="901e67116a446640bc0e4adf227a49d205967e6f1871d6ab6d9a726fae8300930f65696b1efe4cf39c56b63d744717b4d12f83e4df2fbb9fa877ae24a9508f73dd2d400a68a98053903e719ca444f5d7870f7b33f5ec45463e18fdea67ae2b7e93ea4b3bbcc1afd0314bedaf52fe365f7a25b6124c4b186a84f57cb8779c1defc5b17b9eb26e5f1ec571db337e626b601e96eafbf187189bdd5842abb7df02af66c996ec769bb0c8979c143003814784363a3cc35e7f4093e45dc3a4"}], 0x9047f0f6e8f5fff)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x400200, 0x50)
write(r1, &(0x7f0000000240)='0000:00:1d.7', 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000003c0)="5e737c6dd3be7c06dfd62d63f329c16f799d1836bfc45a7b2dc8faed9c44000048722117600b00d00fb2bc4a111dda42112650d289000000000000000000000000c0a700", 0x0, 0xfffffecf)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0)

1.1230864s ago: executing program 2 (id=709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0xc8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x4a, 0x91, "c8818dbdb18f281ec8e200ac40841de626f29c6aa159e311d6dc3964e08bd7d43e93d43b55a64e11461d988233da5719c083430b0a84db7b49e89a041ff88a83021c3536b9d4"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc8}}, 0x0) (fail_nth: 3)

1.032365112s ago: executing program 3 (id=710):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0) (async)
listen(r1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) (async)
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
sendmmsg$sock(r0, &(0x7f0000002b00)=[{{&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="53caf3f216919626a91f1d842f1018bacc27b898a01b8e589fc785", 0x1b}, {&(0x7f0000000180)="c0d12a0e603068e3332a33b5bd4ba23141aa2f7dd62d425f19a9ee5ea5301736fce07aa52b11b8f869a146869efc721c519416846103197b93b21479d86c6a4885f7e4cbf575f8e3bbfd79d7d14480c55cb88306b684e6e6ff7902ed4b9bbfa921e134a13d284b3942c61d12f4d7e7f1b663b17c7fe6c14f17158817d9", 0x7d}, {&(0x7f0000000200)="a2743008cab96061c133a1345b127778f62607faf0454f9f29815fcd251aa5c80c47bc646e654318b255e61c2c836b5213f4336d989ff7d7440db017511bc2a26c2008e44152f6ef67731c", 0x4b}, {&(0x7f0000000280)="55d893e08d165d709f6cbddcba178499ae9c25af1fef5aec2166fe75204101acb9751e84c05e566e24f1ff3853253beab07d54a8a56ea966df74e4daea7bd5689e01d22120fc7ae5cc488b172e6fb1b1b3ab1b59d28716abef77e3b178814318", 0x60}], 0x5, &(0x7f0000000380)=[@timestamping={{0x10, 0x1, 0x25, 0x80000000}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x4ee}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x540}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x81}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x6375}}], 0xb0}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @remote, 'veth0_vlan\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="27b3427e3e3a05cd68deb8d415783d902e55c03a91010e6c6214e6a17e30e96561130068b761e8431164eb33dc9b1df52cab89a7579a8c62b2970ab65dea5fb42be619504f8c36291fc6f60f4e43356e50868a1dd45036adf955e3e096c278d982849db4aa69eaedc57b253b99e0048af88a498f58bbf93cdf02617215270085e88f7444e225508a25bd6317d3ecf97d11610fe24d7e3bd8433c3703dc246fa3254512752fbe8be2672ed20e914301f019fb18a2ff", 0xb5}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="0135d83949def95e81cab713309052aebc60d79154051326187b40714972bb8b72e737ff89639bdd6870caa15273b3", 0x2f}, {&(0x7f00000006c0)="536455baca663886a14070a8857efb3d9ee075f7eeed3136f5cba8fe1adbf63bc0d4cfac0b7f38f3361ec1cbe1b68919963e9a48b15b77be78e70ee56501313d3eda0b4696b43e91029b2a092f77df0bc38cd358dd28098e19e9a3773baee4548e3501285ceee40ab0eef75dc0fa5121c6bb2c9457817b6324f0602e582309fa3c8a84203ee80b19ed819c43ab9752bf0532177f2cf8e12f50933d4a901ab38dd8ca", 0xa2}, {&(0x7f0000000780)="73b596d915b8fe4166867829c48d5e9f786d52eceaf8b4fe54bb9d8bc0955244356d62512489578870d3bb4bb92075d9596f112333d4ae848d6bece5558df1846708e7a92bf80a7ace8425fed964762510a1fd4888fc60a02b3d239ae31be33622f3145f418403eb35736bdd510ca469d7927c65abff808d3627246ec30cacc020042ad82d7e8f35140d0acff4bde8645656c5097ea5987f7d4b576150aafadbf4e3b9f742ace092d73d5f96182acc530b9e86980ada22666fa3a32e27643d29110358a364ef05950a05709e435db56bda2c1f107e56d6159510ca5f56ea815492137c7190527515f9a239e4a1ec9821", 0xf0}, {&(0x7f0000000880)="013093012edf74edddfa5ec308d34f7cbbb246d45547789ded8cf553bf40c342cd03347ef550b4c9ae971414e9bc4cbe899ae34e98deea7d15654219f0f8e0d64d3eea047dc40ab3bfd5b2abbe69b22b0a6013d70ff6a292ec6b3d1d65c84a2e383350b56e92a1701f7ceac586", 0x6d}], 0x6, &(0x7f0000000940)=[@timestamping={{0x10, 0x1, 0x25, 0x3}}, @timestamping={{0x10, 0x1, 0x25, 0x401}}, @timestamping={{0x10, 0x1, 0x25, 0xf2}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}], 0x74}}, {{&(0x7f00000009c0)=@qipcrtr={0x2a, 0x3}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a40)="e49c23f9d10f7cd2973652f06124f1658357ebb446d74364ad5a49b56010e57990c3ecd3f5338c923fc708b360a162ad4184a31e522b5b48f9244b6209e08b45c6446ef06834a3cd623dd149378c9faea709fa9e9cddcb518b647f75b8764636e013efe8824c5f38a2082b3ac2780eea387ab1533c", 0x75}, {&(0x7f0000000ac0)="68665f2a8183399b06d3eeb55141a44a7330c460f57947727b85da2b6c96641f70aee9c93c72a1d826079a868102fc12cd58ea82969cd08410e5d754dea3a09802be47aaa4f1c2847b5c59112d901b5f2443f032911cf50acb35acda893df35a4a0a", 0x62}, {&(0x7f0000000b40)="8d5341942228914d96630fa3d7299a3224a9b612718d4344612c1dfa08268960f41a7b5154eba9266d132993e63613389fc21673bd009a1fe2b0791a2032b2918c6215006772cfea69cb58c3efdf4da096845056e2d0913dccc508f8ebc6884097c8871b04914fdf722f852126a3da981eed9515ba025654bf8a69d6e1e36ac8b5d8f610f7b3f57990c08548cd1160088fb4a6cdf83ebc3c8eebe6d0ade24ea1321bb2195fdfee7c4eef6a05cd5564bf8c88a93a4a31a3212b6ec35af1869b758a8911d2d2705b80fea9", 0xca}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="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", 0x1000}], 0x5, &(0x7f0000001cc0)=[@mark={{0x10}}, @txtime={{0x14}}], 0x24}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d00)="c5ebd5263400562bd0858e17c6e020e2b4094dc601d2b81afea66fa706c4b9fcf701e0244c0089aa0b8f751cf04c5c9ad42e0d1b25cd8ca7a134", 0x3a}, {&(0x7f0000001d40)="b545833d4b8d2762747128586b6269", 0xf}, {&(0x7f0000001d80)="f8a5e6c6b2e0cbdbc7525fd67205e738abcd1e7f7bfdf3abcb2be1038e29869890c267140795cc36918bcf0b3a3c3b664a42ba340341cf1340de30d260", 0x3d}, {&(0x7f0000001dc0)="0bf5646174543444eadfaf1bbdc7709dd1e40008c85e6bee6cdaa3eb0f4441d8f7634344786f6181b3ca2b4a8c108760d4b2553e77395e728ba3e36f405f07ebe40158dd77d500a858dd5cb773236026e5080f1170a93adf386df8b08fb94d4414fc11573520d5081bea8874c61f218164e771bc7be637f5190507de95ead403b1b0d2410ba84459acb07916e854d38f62247a76ef633836175451b3d4fae67d4c17be", 0xa3}, {&(0x7f0000001e80)="6de508a024095afa357aabf545f5abf4f5eebe8b83ce12d7a7d1c2ffc065db3dfa93ca8cc51818fb2b64684b4ed64099d4b93a59259ce66c48f44818c32e1250ad085ccbfdbae597a0739fba328be53787d4893f97cf2b6207089ac580f99b307d965d791214cbc9a54938a18e5eedbfb9d4ddf8db955fe80b7565828f0b645653eb24267ce3c521ac732f8effdd57fce7647398e6be288644077ea52a217cd5b0820d9211bf47c56fa95b534518652e1df79ba5264a8cd70fcf2c0409ef1b417f804aa7fe0ef138eb49102d12d2ad10acd0", 0xd2}, {&(0x7f0000001f80)="f8ba53ca02c1817a89a076bb1ccf277500a0257b8e48f561123a2b8cadabb9bfa3c8f7324f132e6909608a8fca9c2381692feadea5860cda45888b2d91245a8465b2b851b276bd449f81faba0f56c6b0e145d417e197add5e699dc9325634f1adcdef81c0e19729814d81352eeb7e1c9cca3aa2544ec49f8e87b13d95814eb4119aa32f43a48cdc84db0b3c32f75be5977dfe0a88a46e552a75c10a1a6efc9dc7ba451069eef1f68413eb89a80273dcf4e9b4721b74283020a0957021f1705290b0d4cb93d3697a30772233278f042a420fa63ed8f4938d92d634ce8f1613e657134cf697b9ec0b5", 0xe8}], 0x6, &(0x7f00000020c0)=[@mark={{0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}], 0x6c}}, {{&(0x7f0000002140)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80, &(0x7f0000002340)=[{&(0x7f00000021c0)="b55fa8105f90a1d2d9e83ad4e48a087132c7291d17572340dab29b69c73794d410227c2ef2a198630f665e94487cadce4b85d43ab59ae779c086b8efd4155ea545cc1ad7c89269efe18edd353fd5dc660331b2887e3293e887781049694309949dc78928725cab9ae8bae9f9e1f839f59b14e0aca02f8ec37342a6a182baf88d6c4e86b26a8a064a2ee456a36b33b5e1f477cfb66fe9", 0x96}, {&(0x7f0000002280)="da1371d5da4cdab5bae33b69cf05b2155ab6605eea14bf0fa2adc059f76822893ffaf7bcb78712d083016c8754c932755ee0e3466a7452313bd919a11d2d1ea279266f50ffb3df20cc1d71da6443387227a1735412d7d1582fffa64171ac31c986297305f98107fbfb4d483245e0373cc77481f6dad171de7bcf516cb3d5ba38070531708ab152fd09d6f94a1c61135b1b321bb46f36a2c5490dc53f20b36b1120122fb1d064a5889e", 0xa9}], 0x2, &(0x7f0000002380)=[@timestamping={{0x10, 0x1, 0x25, 0x7fffffff}}], 0x10}}, {{&(0x7f00000023c0)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002440)="f994802efa63019cad9c9d491108dbe58cc473c488a52eae7e36f02274e87a1e3b7d9fa8546593225d742d456efcb6f7486ad9d24065684a185fede30b787b06bb4e92c0ed93decfe18152cdbc2c0129b6a3197d60e02828b2c7ee2d28340e754a2b2e6a4196e80927c0b5d33c02296c7b11fef1b02b8cb26da7708e850086d21046eff782427808c0856f5d5b14a7968ece017b67edd5b45d664e42c929c08a5a3ce3dea5e93ddcd815b4a4ecb9a264489da1015fe8dd926a1e0e9b88b065e3343f42a5aee44bf02c688f27d37a0c08ba4b9564fa7eb7ad772a3260e34c1f76a2", 0xe1}, {&(0x7f0000002540)="f85af07294923dad20b272cafaa3d9aeca52ef8c12f7073518208895709240beed7ba638c291cd6464e10016e96ac74757187b59bfed7650e47bd0137960d59540b698cf47e24656800931f6cb0ac8247c8e1b2d0ad735b4fd5ed0cb56edb0a5ed182efbb308407cc141b751e32151c37276121063ca09cbde059644334a41e107885284d34cb0a816211507af3fc7434aee361897ea33f779dd85e365087d4d78639616b9b7d655e4286bba88f13b67c739b16145b62f4a70cdea82e36884bc5ea357a4ba107ba9f92a88aa9e194c858c66423445fa9ef39ee47659eb5a6d2503cb70325b9c946c7b6bf6d05787717e7fc786681d", 0xf5}, {&(0x7f0000002640)="4d42cb0bbc9a6b6182", 0x9}, {&(0x7f0000002680)="f1b09c5a0156a0324e745b73f59f9c621fc55bc4d794b86b4b019e", 0x1b}, {&(0x7f00000026c0)="84346c4a33cea99a176366e271bb8e3ee7590e", 0x13}, {&(0x7f0000002c00)="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", 0x167}, {&(0x7f0000002800)="4f5720b78240f26684c2e0fa6f3153005c327c7478d36a477d79f90109ed03fdbdd9a5ef537ae5bb7e0f7d4ca3a9881fa0d92e13c19da39d50759e0cd65da16350d6fedac1ed332cdea277d1428d121f7993798a4ac05f1419db7ab4a534205dba63e09c4949b1098d7f688d5d9674209693cefb7dbe94962e98630d1cadaca765a2ced3ad2350f896a3cd6583de3c50801f057eb3011af02ec2870b5b4e7364a9c40b1a6bc1792d00c4fb2bbbfde4c8d6e1dd61b6b5225d2385b1134859de24a00db66b5dec6362f10db62aeb67deec6def", 0xd2}], 0x7}}, {{&(0x7f0000002940)=@in6={0xa, 0x4e24, 0xf, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)="220f42d8bcc6f853ae462d715915fd1dd717330877bdc15f7a7475a7fcdac7fde9ec900c6d7f14bbb7df669f67c16f17c6082cf3d3e45c761207c92e0b018ce7e7612774dfd5d3142708e727414c5ecca7f0e01b815ba642be23cfa9f2ef8a5e4835837fd4c5469d0107bf15f69850a68437a9d247c6b644081c713e984de77d175ba4a4e2ce70cf52025f7eeddc774794fe2c80232a49857ecaf8c83a88a5f6b6d3f8c6e31781aafdde5777d78831a7", 0xb0}], 0x1, &(0x7f0000002ac0)=[@timestamping={{0x10, 0x1, 0x25, 0x8001}}], 0x10}}], 0x7, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl(r3, 0x2202, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000100), 0x0, &(0x7f0000000640)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe)

1.025728406s ago: executing program 2 (id=711):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x20000, 0x0, 0x20002f7})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0x5, 0x118f, 0x8000}, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x36, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xf5, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd648", 0x4d}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x310}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc202, 0x0)

949.931736ms ago: executing program 3 (id=712):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200), 0x1000)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)

667.622649ms ago: executing program 1 (id=713):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='e:m__read_msr1 msr/read_msr', 0x1b)

197.509277ms ago: executing program 0 (id=714):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r4 = open(&(0x7f0000000440)='./file0\x00', 0x149800, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0x560c89bb)
io_setup(0x1, &(0x7f0000000b80)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x4}])
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(r2, 0x0, r6, 0x0, 0x8000, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r7 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000003c0)={0x2, 0x0, 0x8, 0x9, 0x6, 0x3})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r14)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r13, 0x100000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330f25e13c0"], 0x48)

71.615431ms ago: executing program 3 (id=715):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x2, 0x3d8, 0xe0, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x35}, 0xf, 0x1}}}, {{@arp={@multicast2, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 0x0, 0x1, {@mac=@random="c21287bb0b36", {[0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0xa, 0xfffc, 0x8001, 0x41e, 0xfffa, 'hsr0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0x83}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @rand_addr=0x64010101, @loopback, 0x1, 0xffffffff}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
r5 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000070601046b3b0123000000000500000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)

62.63562ms ago: executing program 2 (id=716):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000003c0)='.\x00', 0x5db)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
r7 = inotify_init()
r8 = inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x1400037e)
inotify_add_watch(r6, &(0x7f0000000300)='./file1\x00', 0xa0000006)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x4, 0xf})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="99feffff1c00010029b57000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="c5c50b"], 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r10=>0x0})
syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRESDEC=0x0, @ANYRESHEX=r9, @ANYRES64=r3], 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

0s ago: executing program 3 (id=717):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f911, 0x80008002, '\x00', @p_u8=&(0x7f0000000100)=0x1}})
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)
syz_emit_ethernet(0x84, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x72, 0x4, 0x0, 0x0, 0x1, 0x0, @multicast2, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x23, 0x7, 0x67, 0xfffd, 0x3, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0xc, 0xcb, 0x0, 0x6, [0x8, 0x5]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x12, "29ed35fdfa26268201defa29e5c72c10"}]}, @generic={0x44, 0x7, "8d4a929e9e"}, @ssrr={0x89, 0x13, 0x7e, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast]}]}}, "6616"}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x24, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000010000fd2579e46a04a7ca2ca02e52689f8bb3db0025250000007464658b73696da69b36660002004d81f39427979b15686e6574000000000000"], 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RXATTRCREATE(r2, &(0x7f00000004c0)={0x7, 0x21, 0x1}, 0x7)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf255e0000000500180105000000080022013402000005001901040000000800a10001800000e4b2173304c795b6d7380e4f8ad304092afac8ae7a35c577e918d801d93b520aa3c6775df0cf71b1574f17261d2662e2f79a5f7a5a1154a4f6b116f774a036f405c5e8d83dca7432c135087d9f04cb73d50a710d69bf896f7b847f149447907822958b45447628c02d3cc68d228394e5809ecfaa9e71f0798c2083f49cf8262d31f54e0069a9ce7f7b92ddf2fe534eb67d38d26b7313cf142d13"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, 0x0, 0x0, 0x40)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04093f2707001f14179c042791e4c58d04"], 0x6)

kernel console output (not intermixed with test programs):

roduct=0, SerialNumber=0
[   63.237289][  T851] as10x_usb: device has been detected
[   63.243505][  T851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   63.266771][  T851] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   63.287655][   T40] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   63.308024][ T2316] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[   63.310759][  T851] as10x_usb: error during firmware upload part1
[   63.315217][ T2316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.316770][  T851] Registered device Abilis Systems DVB-Titan
[   63.458400][   T40] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   63.466269][   T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   63.470948][   T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   63.477279][   T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.480736][   T40] usb 7-1: Product: syz
[   63.482569][   T40] usb 7-1: Manufacturer: syz
[   63.484615][   T40] usb 7-1: SerialNumber: syz
[   63.488489][   T40] usb 7-1: config 0 descriptor??
[   63.494188][   T40] hub 7-1:0.0: bad descriptor, ignoring hub
[   63.496412][   T40] hub 7-1:0.0: probe with driver hub failed with error -5
[   63.500634][   T40] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5
[   64.601517][   T10] usb 8-1: USB disconnect, device number 3
[   64.602980][ T5089] Bluetooth: hci4: Reading Intel version command failed (-71)
[   65.087982][ T5839] usb 6-1: USB disconnect, device number 3
[   65.116244][ T5839] Unregistered device Abilis Systems DVB-Titan
[   65.119871][ T5839] as10x_usb: device has been disconnected
[   65.339174][ T6122] jffs2: notice: (6122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   66.192738][  T851] usb 7-1: USB disconnect, device number 2
[   66.561036][  T851] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   66.748543][  T851] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   66.755858][  T851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.762320][  T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.781421][  T851] as10x_usb: device has been detected
[   66.784121][  T851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   66.796001][  T851] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   66.804422][  T851] as10x_usb: error during firmware upload part1
[   66.807245][  T851] Registered device Abilis Systems DVB-Titan
[   67.541054][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   67.547496][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   68.612253][   T34] usb 7-1: USB disconnect, device number 3
[   68.630672][   T34] Unregistered device Abilis Systems DVB-Titan
[   68.632340][   T34] as10x_usb: device has been disconnected
[   70.049084][ T6206] fuse: Unknown parameter 'grou00000000000000000000'
[   70.287446][ T2316] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   70.437924][ T2316] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   70.447028][ T2316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.450545][ T2316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.475314][ T2316] as10x_usb: device has been detected
[   70.479193][ T2316] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   70.510103][ T2316] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   70.522840][ T2316] as10x_usb: error during firmware upload part1
[   70.526959][ T2316] Registered device Abilis Systems DVB-Titan
[   70.908081][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   70.913005][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[   71.767474][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   72.209024][ T5815] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   72.213062][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.217009][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.227675][ T5815] as10x_usb: device has been detected
[   72.229874][ T5815] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   72.238337][ T5815] usb 6-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[   72.245009][ T5815] as10x_usb: error during firmware upload part1
[   72.247464][ T5815] Registered device Abilis Systems DVB-Titan
[   72.319250][   T41] audit: type=1804 audit(1786321339.859:4): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.73" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0
[   72.384819][   T56] usb 7-1: USB disconnect, device number 4
[   72.410295][   T56] Unregistered device Abilis Systems DVB-Titan
[   72.412959][   T56] as10x_usb: device has been disconnected
[   74.202956][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'.
[   74.244550][ T6267] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[   74.318593][ T6271] comedi comedi0: comedi_bond: 4:2  attached, 32 channels from 1 devices
[   74.637471][ T5806] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   74.788276][ T5806] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[   74.792151][ T5806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.907305][ T5806] usb 6-1: USB disconnect, device number 4
[   74.942377][ T5806] Unregistered device Abilis Systems DVB-Titan
[   74.945874][ T5806] as10x_usb: device has been disconnected
[   75.328486][ T6291] fuse: Unknown parameter 'grou00000000000000000000'
[   75.567503][   T40] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   75.718054][   T40] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   75.722960][   T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.726394][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.736960][   T40] as10x_usb: device has been detected
[   75.740321][   T40] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   75.752795][   T40] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   75.761928][   T40] as10x_usb: error during firmware upload part1
[   75.769585][   T40] Registered device Abilis Systems DVB-Titan
[   76.818352][   T64] Bluetooth: hci4: command 0xfc05 tx timeout
[   76.818689][ T5089] Bluetooth: hci4: Reading Intel version command failed (-110)
[   76.820757][   T64] Bluetooth: hci4: Resetting usb device.
[   76.930324][ T6313] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.958900][ T6002] usb 8-1: reset high-speed USB device number 4 using dummy_hcd
[   77.087444][ T6002] usb 8-1: device descriptor read/64, error -32
[   77.138217][ T6285] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   77.556687][   T40] usb 5-1: USB disconnect, device number 4
[   77.575437][   T40] Unregistered device Abilis Systems DVB-Titan
[   77.576793][   T40] as10x_usb: device has been disconnected
[   77.775864][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   77.781954][ T6325] netlink: 136 bytes leftover after parsing attributes in process `syz.1.94'.
[   77.787393][ T6325] tipc: Started in network mode
[   77.789459][ T6325] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[   77.793335][ T6325] tipc: Enabled bearer <udp:s>, priority 10
[   77.984950][ T5839] usb 8-1: USB disconnect, device number 4
[   78.809735][ T5815] tipc: Node number set to 4269801492
[   79.111663][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.99'.
[   79.465179][ T6355] jffs2: notice: (6355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.288819][   T41] audit: type=1800 audit(1786321347.829:5): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.105" name="/newroot/22" dev="tmpfs" ino=149 res=0 errno=0
[   81.236379][   T50] cfg80211: failed to load regulatory.db
[   81.958456][   T41] audit: type=1804 audit(1786321349.499:6): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.109" name="/newroot/29/file0" dev="fuse" ino=1 res=1 errno=0
[   81.978034][   T41] audit: type=1804 audit(1786321349.509:7): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.109" name="/newroot/29/file0" dev="fuse" ino=1 res=1 errno=0
[   82.073638][ T6388] bond0: entered allmulticast mode
[   82.076189][ T6388] bond_slave_0: entered allmulticast mode
[   82.080500][ T6388] bond_slave_1: entered allmulticast mode
[   83.437471][   T40] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   83.867945][   T40] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[   83.872275][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.927549][   T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   84.088270][   T50] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[   84.093901][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.183654][ T5089] Bluetooth: hci4: Reading Intel version command failed (-71)
[   84.191142][  T851] usb 6-1: USB disconnect, device number 5
[   85.415671][   T64] Bluetooth: hci5: Reading Intel version command failed (-71)
[   85.421363][   T50] usb 7-1: USB disconnect, device number 5
[   85.746027][ T6463] kernel profiling enabled (shift: 63)
[   85.749645][ T6463] profiling shift: 63 too large
[   85.944167][ T6466] trusted_key: encrypted_key: insufficient parameters specified
[   86.135517][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'.
[   86.142915][ T6474] tipc: Started in network mode
[   86.144618][ T6474] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[   86.148153][ T6474] tipc: Enabled bearer <udp:s>, priority 10
[   86.293642][   T41] audit: type=1804 audit(1786321353.829:8): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.137" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0
[   86.463445][ T6481] bond0: entered allmulticast mode
[   86.472785][ T6481] bond_slave_0: entered allmulticast mode
[   86.475390][ T6481] bond_slave_1: entered allmulticast mode
[   87.149412][ T5806] tipc: Node number set to 4269801492
[   87.737536][   T50] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   87.898003][   T50] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   87.902149][   T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   87.905807][   T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   87.911024][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.913906][   T50] usb 6-1: Product: syz
[   87.915389][   T50] usb 6-1: Manufacturer: syz
[   87.916918][   T50] usb 6-1: SerialNumber: syz
[   87.937846][   T50] usb 6-1: config 0 descriptor??
[   87.945298][   T50] hub 6-1:0.0: bad descriptor, ignoring hub
[   87.947240][   T50] hub 6-1:0.0: probe with driver hub failed with error -5
[   87.953195][   T50] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6
[   88.468276][ T6511] Zero length message leads to an empty skb
[   88.479157][   T41] audit: type=1804 audit(1786321356.019:9): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.149" name="/newroot/37/file0" dev="fuse" ino=1 res=1 errno=0
[   89.012414][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'.
[   89.018268][ T6544] tipc: Started in network mode
[   89.020372][ T6544] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[   89.024657][ T6544] tipc: Enabled bearer <udp:s>, priority 10
[   89.749279][   T41] audit: type=1800 audit(1786321357.289:10): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.157" name="/newroot/39" dev="tmpfs" ino=237 res=0 errno=0
[   89.845760][   T41] audit: type=1804 audit(1786321357.379:11): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.158" name="/newroot/41/file0" dev="fuse" ino=1 res=1 errno=0
[   89.992026][ T6570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   90.144587][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[   90.147612][ T5806] tipc: Node number set to 4269801492
[   90.325552][ T6581] jffs2: notice: (6581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   90.428431][   T34] usb 6-1: USB disconnect, device number 6
[   90.667479][   T41] audit: type=1804 audit(1786321358.139:12): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.167" name="/newroot/37/file0" dev="fuse" ino=1 res=1 errno=0
[   90.680100][ T6596] bond0: entered allmulticast mode
[   90.681726][ T6596] bond_slave_0: entered allmulticast mode
[   90.683632][ T6596] bond_slave_1: entered allmulticast mode
[   91.201126][ T6620] syzkaller0: entered promiscuous mode
[   91.203053][ T6620] syzkaller0: entered allmulticast mode
[   91.212181][ T6620] capability: warning: `syz.1.172' uses 32-bit capabilities (legacy support in use)
[   91.417788][   T41] audit: type=1800 audit(1786321358.949:13): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.174" name="/newroot/41" dev="tmpfs" ino=253 res=0 errno=0
[   91.727549][ T5806] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   91.836139][ T6649] fuse: Bad value for 'user_id'
[   91.837969][ T6649] fuse: Bad value for 'user_id'
[   91.898277][ T5806] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   91.902862][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   91.906435][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   91.912026][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.914755][ T5806] usb 8-1: Product: syz
[   91.916179][ T5806] usb 8-1: Manufacturer: syz
[   91.917895][ T5806] usb 8-1: SerialNumber: syz
[   91.921562][ T5806] usb 8-1: config 0 descriptor??
[   91.925699][ T5806] hub 8-1:0.0: bad descriptor, ignoring hub
[   91.928014][ T5806] hub 8-1:0.0: probe with driver hub failed with error -5
[   91.932125][ T5806] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7
[   92.077445][ T5839] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   92.238062][ T5839] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   92.244203][ T5839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.249398][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.256694][ T5839] as10x_usb: device has been detected
[   92.260291][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   92.272099][ T5839] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   92.277054][ T5839] as10x_usb: error during firmware upload part1
[   92.279558][ T5839] Registered device Abilis Systems DVB-Titan
[   92.329178][ T6657] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   93.042690][ T6672] jffs2: notice: (6672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   93.222529][    C2] Unknown status report in ack skb
[   94.085372][ T5815] usb 7-1: USB disconnect, device number 6
[   94.097100][ T5815] Unregistered device Abilis Systems DVB-Titan
[   94.099184][ T5815] as10x_usb: device has been disconnected
[   94.338031][ T5806] usb 8-1: USB disconnect, device number 5
[   94.914394][ T6710] FAULT_INJECTION: forcing a failure.
[   94.914394][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.919174][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.2.199 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   94.919192][ T6710] Tainted: [L]=SOFTLOCKUP
[   94.919196][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.919203][ T6710] Call Trace:
[   94.919208][ T6710]  <TASK>
[   94.919212][ T6710]  dump_stack_lvl+0x100/0x190
[   94.919234][ T6710]  should_fail_ex.cold+0x5/0xa
[   94.919249][ T6710]  _copy_to_user+0x32/0xd0
[   94.919268][ T6710]  simple_read_from_buffer+0xcb/0x170
[   94.919288][ T6710]  proc_fail_nth_read+0x1af/0x230
[   94.919304][ T6710]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.919320][ T6710]  ? rw_verify_area+0xce/0x6d0
[   94.919336][ T6710]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.919351][ T6710]  vfs_read+0x1e4/0xb40
[   94.919363][ T6710]  ? __pfx_vfs_read+0x10/0x10
[   94.919371][ T6710]  ? find_held_lock+0x2b/0x80
[   94.919386][ T6710]  ? __fget_files+0x215/0x3d0
[   94.919399][ T6710]  ? __fget_files+0x21f/0x3d0
[   94.919412][ T6710]  ksys_read+0x12a/0x250
[   94.919422][ T6710]  ? __pfx_ksys_read+0x10/0x10
[   94.919435][ T6710]  do_int80_emulation+0x14b/0x720
[   94.919458][ T6710]  asm_int80_emulation+0x1a/0x20
[   94.919469][ T6710] RIP: 0023:0xf71474eb
[   94.919479][ T6710] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   94.919489][ T6710] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   94.919501][ T6710] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd5d0
[   94.919507][ T6710] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   94.919513][ T6710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   94.919518][ T6710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   94.919524][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   94.919537][ T6710]  </TASK>
[   95.208513][ T6718] FAULT_INJECTION: forcing a failure.
[   95.208513][ T6718] name failslab, interval 1, probability 0, space 0, times 0
[   95.214311][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.3.203 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.214330][ T6718] Tainted: [L]=SOFTLOCKUP
[   95.214334][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.214340][ T6718] Call Trace:
[   95.214345][ T6718]  <TASK>
[   95.214350][ T6718]  dump_stack_lvl+0x100/0x190
[   95.214368][ T6718]  should_fail_ex.cold+0x5/0xa
[   95.214381][ T6718]  should_failslab+0xc2/0x120
[   95.214398][ T6718]  kmem_cache_alloc_noprof+0x91/0x6a0
[   95.214413][ T6718]  ? __pmd_alloc+0xbf/0x950
[   95.214431][ T6718]  __pmd_alloc+0xbf/0x950
[   95.214448][ T6718]  __handle_mm_fault+0xa9c/0x2a00
[   95.214461][ T6718]  ? mt_find+0x45e/0x8e0
[   95.214472][ T6718]  ? __pfx___handle_mm_fault+0x10/0x10
[   95.214482][ T6718]  ? __pfx_mt_find+0x10/0x10
[   95.214498][ T6718]  ? find_vma+0xbf/0x140
[   95.214512][ T6718]  ? __pfx_find_vma+0x10/0x10
[   95.214526][ T6718]  handle_mm_fault+0x37b/0xa30
[   95.214539][ T6718]  do_user_addr_fault+0x74c/0x12f0
[   95.214559][ T6718]  exc_page_fault+0x6f/0xd0
[   95.214574][ T6718]  asm_exc_page_fault+0x26/0x30
[   95.214585][ T6718] RIP: 0010:_copy_from_user+0x93/0xd0
[   95.214603][ T6718] Code: 41 ee fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 89 db 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 3c
[   95.214613][ T6718] RSP: 0018:ffffc9000646fab8 EFLAGS: 00050297
[   95.214623][ T6718] RAX: 0000000000000001 RBX: 0000000080000200 RCX: 000000000000003c
[   95.214629][ T6718] RDX: 0000000000000001 RSI: 0000000080000200 RDI: ffffc9000646fbb8
[   95.214635][ T6718] RBP: 000000000000003c R08: 0000000000000001 R09: fffff52000c8df7e
[   95.214641][ T6718] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[   95.214646][ T6718] R13: ffffc9000646fbb8 R14: 1ffff92000c8df67 R15: ffff888025874090
[   95.214659][ T6718]  ? _copy_from_user+0x87/0xd0
[   95.214675][ T6718]  ip_mroute_setsockopt+0xe3c/0x12b0
[   95.214695][ T6718]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[   95.214717][ T6718]  do_ip_setsockopt+0x382/0x3200
[   95.214736][ T6718]  ? __pfx_do_ip_setsockopt+0x10/0x10
[   95.214752][ T6718]  ? aa_sk_perm+0x309/0xaa0
[   95.214767][ T6718]  ? rcu_read_lock_any_held+0x6a/0xa0
[   95.214784][ T6718]  ? __pfx_aa_sk_perm+0x10/0x10
[   95.214800][ T6718]  ip_setsockopt+0x5a/0xf0
[   95.214817][ T6718]  raw_setsockopt+0x60/0x1b0
[   95.214833][ T6718]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   95.214846][ T6718]  do_sock_setsockopt+0xf3/0x1d0
[   95.214864][ T6718]  __sys_setsockopt+0x119/0x190
[   95.214881][ T6718]  __ia32_sys_setsockopt+0xbc/0x160
[   95.214895][ T6718]  ? __do_fast_syscall_32+0x98/0x970
[   95.214911][ T6718]  ? lockdep_hardirqs_on+0x78/0x100
[   95.214925][ T6718]  __do_fast_syscall_32+0xe7/0x970
[   95.214940][ T6718]  ? lockdep_hardirqs_on+0x78/0x100
[   95.214955][ T6718]  do_fast_syscall_32+0x32/0x70
[   95.214971][ T6718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   95.214985][ T6718] RIP: 0023:0xf7f17fec
[   95.214998][ T6718] Code: Unable to access opcode bytes at 0xf7f17fc2.
[   95.215002][ T6718] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[   95.215012][ T6718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[   95.215018][ T6718] RDX: 00000000000000d2 RSI: 0000000080000200 RDI: 000000000000003c
[   95.215023][ T6718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   95.215029][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.215035][ T6718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   95.215047][ T6718]  </TASK>
[   95.443461][ T6727] fuse: Bad value for 'user_id'
[   95.445008][ T6727] fuse: Bad value for 'user_id'
[   95.448994][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.452488][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.527505][ T5839] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[   95.529725][ T6729] jffs2: notice: (6729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   95.688271][ T5839] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   95.692432][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   95.696071][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   95.700846][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.703526][ T5839] usb 7-1: Product: syz
[   95.704907][ T5839] usb 7-1: Manufacturer: syz
[   95.706444][ T5839] usb 7-1: SerialNumber: syz
[   95.710547][ T5839] usb 7-1: config 0 descriptor??
[   95.715271][ T5839] hub 7-1:0.0: bad descriptor, ignoring hub
[   95.717176][ T5839] hub 7-1:0.0: probe with driver hub failed with error -5
[   95.721495][ T5839] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8
[   96.042989][   T41] audit: type=1800 audit(1786321363.579:14): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.208" name="/newroot/60" dev="tmpfs" ino=358 res=0 errno=0
[   96.668352][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   96.705243][ T6750] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   96.765294][ T6752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.213'.
[   97.852010][ T6764] fuse: Bad value for 'user_id'
[   97.853623][ T6764] fuse: Bad value for 'user_id'
[   98.088262][ T5839] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   98.187715][   T40] usb 7-1: USB disconnect, device number 7
[   98.238280][ T5839] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   98.245710][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.249890][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.272259][ T5839] as10x_usb: device has been detected
[   98.279940][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   98.292443][ T5839] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   98.298406][ T5839] as10x_usb: error during firmware upload part1
[   98.301537][ T5839] Registered device Abilis Systems DVB-Titan
[   99.086507][ T6799] FAULT_INJECTION: forcing a failure.
[   99.086507][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.093246][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.3.227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   99.093264][ T6799] Tainted: [L]=SOFTLOCKUP
[   99.093267][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.093275][ T6799] Call Trace:
[   99.093279][ T6799]  <TASK>
[   99.093283][ T6799]  dump_stack_lvl+0x100/0x190
[   99.093302][ T6799]  should_fail_ex.cold+0x5/0xa
[   99.093314][ T6799]  _copy_to_user+0x32/0xd0
[   99.093332][ T6799]  simple_read_from_buffer+0xcb/0x170
[   99.093351][ T6799]  proc_fail_nth_read+0x1af/0x230
[   99.093367][ T6799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   99.093382][ T6799]  ? rw_verify_area+0xce/0x6d0
[   99.093398][ T6799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   99.093413][ T6799]  vfs_read+0x1e4/0xb40
[   99.093424][ T6799]  ? __pfx_vfs_read+0x10/0x10
[   99.093434][ T6799]  ? do_compat_pselect+0x1cf/0x2b0
[   99.093453][ T6799]  ? __pfx_do_compat_pselect+0x10/0x10
[   99.093469][ T6799]  ? __ia32_sys_futex_time32+0x2f4/0x470
[   99.093485][ T6799]  ? xfd_validate_state+0x129/0x190
[   99.093500][ T6799]  ksys_read+0x12a/0x250
[   99.093509][ T6799]  ? __pfx_ksys_read+0x10/0x10
[   99.093522][ T6799]  do_int80_emulation+0x14b/0x720
[   99.093540][ T6799]  asm_int80_emulation+0x1a/0x20
[   99.093551][ T6799] RIP: 0023:0xf71174eb
[   99.093560][ T6799] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   99.093570][ T6799] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   99.093581][ T6799] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d65d0
[   99.093587][ T6799] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   99.093593][ T6799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   99.093599][ T6799] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   99.093605][ T6799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   99.093616][ T6799]  </TASK>
[   99.517524][ T5815] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[   99.668123][ T5815] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   99.672147][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   99.675689][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   99.681896][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.684779][ T5815] usb 7-1: Product: syz
[   99.686170][ T5815] usb 7-1: Manufacturer: syz
[   99.687644][ T5815] usb 7-1: SerialNumber: syz
[   99.692256][ T5815] usb 7-1: config 0 descriptor??
[   99.697736][ T5815] hub 7-1:0.0: bad descriptor, ignoring hub
[   99.699720][ T5815] hub 7-1:0.0: probe with driver hub failed with error -5
[   99.703673][ T5815] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9
[  100.081597][ T5823] usb 6-1: USB disconnect, device number 7
[  100.095353][ T5823] Unregistered device Abilis Systems DVB-Titan
[  100.096935][ T5823] as10x_usb: device has been disconnected
[  100.655958][ T6832] FAULT_INJECTION: forcing a failure.
[  100.655958][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.666045][ T6832] CPU: 2 UID: 0 PID: 6832 Comm: syz.1.235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.666066][ T6832] Tainted: [L]=SOFTLOCKUP
[  100.666069][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.666076][ T6832] Call Trace:
[  100.666081][ T6832]  <TASK>
[  100.666085][ T6832]  dump_stack_lvl+0x100/0x190
[  100.666103][ T6832]  should_fail_ex.cold+0x5/0xa
[  100.666116][ T6832]  _copy_from_iter+0x1f4/0x1690
[  100.666136][ T6832]  ? __pfx__copy_from_iter+0x10/0x10
[  100.666151][ T6832]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  100.666165][ T6832]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  100.666181][ T6832]  skb_copy_datagram_from_iter+0x11f/0x720
[  100.666198][ T6832]  packet_sendmsg+0x224f/0x4eb0
[  100.666219][ T6832]  ? __pfx___might_resched+0x10/0x10
[  100.666240][ T6832]  ? aa_sk_perm+0x309/0xaa0
[  100.666261][ T6832]  ? __pfx_aa_sk_perm+0x10/0x10
[  100.666274][ T6832]  ? __pfx_packet_sendmsg+0x10/0x10
[  100.666287][ T6832]  ? __might_fault+0xc5/0x140
[  100.666303][ T6832]  ? apparmor_socket_sendmsg+0x15b/0x270
[  100.666317][ T6832]  __sys_sendto+0x48b/0x4e0
[  100.666330][ T6832]  ? __pfx_packet_sendmsg+0x10/0x10
[  100.666344][ T6832]  ? __pfx___sys_sendto+0x10/0x10
[  100.666366][ T6832]  ? fput+0x79/0x100
[  100.666380][ T6832]  ? ksys_write+0x1ac/0x250
[  100.666391][ T6832]  __ia32_sys_sendto+0xdd/0x1b0
[  100.666404][ T6832]  ? __do_fast_syscall_32+0x98/0x970
[  100.666421][ T6832]  ? lockdep_hardirqs_on+0x78/0x100
[  100.666435][ T6832]  __do_fast_syscall_32+0xe7/0x970
[  100.666450][ T6832]  ? lockdep_hardirqs_on+0x78/0x100
[  100.666465][ T6832]  do_fast_syscall_32+0x32/0x70
[  100.666480][ T6832]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  100.666494][ T6832] RIP: 0023:0xf7f36fec
[  100.666509][ T6832] Code: Unable to access opcode bytes at 0xf7f36fc2.
[  100.666514][ T6832] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  100.666525][ T6832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  100.666532][ T6832] RDX: 000000000000000e RSI: 0000000000040880 RDI: 0000000080000200
[  100.666538][ T6832] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  100.666554][ T6832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  100.666560][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  100.666572][ T6832]  </TASK>
[  101.325823][ T6842] input: syz0 as /devices/virtual/input/input10
[  102.127753][   T40] usb 7-1: USB disconnect, device number 8
[  102.194300][   T41] audit: type=1804 audit(1786321369.729:15): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.241" name="/newroot/52/file0" dev="fuse" ino=1 res=1 errno=0
[  102.229209][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[  102.387435][ T6869] FAULT_INJECTION: forcing a failure.
[  102.387435][ T6869] name failslab, interval 1, probability 0, space 0, times 0
[  102.397820][ T6869] CPU: 3 UID: 0 PID: 6869 Comm: syz.1.243 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.397840][ T6869] Tainted: [L]=SOFTLOCKUP
[  102.397844][ T6869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.397850][ T6869] Call Trace:
[  102.397854][ T6869]  <TASK>
[  102.397859][ T6869]  dump_stack_lvl+0x100/0x190
[  102.397877][ T6869]  should_fail_ex.cold+0x5/0xa
[  102.397890][ T6869]  should_failslab+0xc2/0x120
[  102.397930][ T6869]  kmem_cache_alloc_noprof+0x91/0x6a0
[  102.397944][ T6869]  ? __pfx_map_id_range_down+0x10/0x10
[  102.397960][ T6869]  ? security_inode_alloc+0x3b/0x2c0
[  102.397976][ T6869]  security_inode_alloc+0x3b/0x2c0
[  102.397988][ T6869]  inode_init_always_gfp+0xc77/0xfb0
[  102.398003][ T6869]  alloc_inode+0x8e/0x250
[  102.398018][ T6869]  sock_alloc+0x44/0x280
[  102.398034][ T6869]  ? security_socket_create+0x7f/0x250
[  102.398047][ T6869]  __sock_create+0xc2/0x860
[  102.398061][ T6869]  __sys_socket+0x14d/0x260
[  102.398073][ T6869]  ? __pfx___sys_socket+0x10/0x10
[  102.398088][ T6869]  __ia32_compat_sys_socketcall+0x65b/0x770
[  102.398100][ T6869]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  102.398117][ T6869]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  102.398128][ T6869]  ? __fget_files+0x21f/0x3d0
[  102.398142][ T6869]  ? __pfx_ksys_write+0x10/0x10
[  102.398155][ T6869]  __do_fast_syscall_32+0xe7/0x970
[  102.398171][ T6869]  ? lockdep_hardirqs_on+0x78/0x100
[  102.398186][ T6869]  do_fast_syscall_32+0x32/0x70
[  102.398201][ T6869]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  102.398215][ T6869] RIP: 0023:0xf7f36fec
[  102.398230][ T6869] Code: Unable to access opcode bytes at 0xf7f36fc2.
[  102.398234][ T6869] RSP: 002b:00000000f53d44a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066
[  102.398250][ T6869] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f53d44b0
[  102.398256][ T6869] RDX: 00000000f73c7ff4 RSI: 0000000000000000 RDI: 00000000f73c7ff4
[  102.398262][ T6869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  102.398268][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.398274][ T6869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  102.398286][ T6869]  </TASK>
[  102.398421][ T6869] socket: no more sockets
[  102.502565][ T6874] vim2m vim2m.0: Removing vim2m
[  102.524297][ T6874] vim2m vim2m.0: Device registered as /dev/video3
[  102.603695][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.317575][ T5839] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  103.478793][ T5839] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  103.509215][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  103.548994][   T41] audit: type=1800 audit(1786321371.079:16): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.245" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  103.567836][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  103.576503][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.580390][ T5839] usb 6-1: Product: syz
[  103.583173][ T5839] usb 6-1: Manufacturer: syz
[  103.585975][ T5839] usb 6-1: SerialNumber: syz
[  103.590700][ T5839] usb 6-1: config 0 descriptor??
[  103.601572][ T5839] hub 6-1:0.0: bad descriptor, ignoring hub
[  103.605301][ T5839] hub 6-1:0.0: probe with driver hub failed with error -5
[  103.610591][ T5839] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11
[  103.958602][ T6906] jffs2: notice: (6906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  104.437572][ T5823] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  104.587642][ T5823] usb 7-1: Using ep0 maxpacket: 8
[  104.591392][ T5823] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  104.596344][ T5823] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  104.600252][ T5823] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  104.603824][ T5823] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  104.607759][ T5823] usb 7-1: config 250 has no interface number 0
[  104.610530][ T5823] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  104.615273][ T5823] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  104.619677][ T5823] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  104.624037][ T5823] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  104.628383][ T5823] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  104.634335][ T5823] usb 7-1: config 250 interface 228 has no altsetting 0
[  104.639319][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  104.642060][ T5823] usb 7-1: Product: syz
[  104.643461][ T5823] usb 7-1: SerialNumber: syz
[  104.648649][ T5823] hub 7-1:250.228: bad descriptor, ignoring hub
[  104.651639][ T5823] hub 7-1:250.228: probe with driver hub failed with error -5
[  104.727733][ T6002] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  104.853828][ T5823] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  104.915264][ T5839] IPVS: starting estimator thread 0...
[  104.919576][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'.
[  104.956172][ T6002] usb 8-1: unable to get BOS descriptor or descriptor too short
[  104.960324][ T6002] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  104.963970][ T6002] usb 8-1: unable to read config index 0 descriptor/start: -71
[  104.966685][ T6002] usb 8-1: can't read configurations, error -71
[  105.007638][ T6917] IPVS: using max 30 ests per chain, 72000 per kthread
[  105.442508][ T6911] usb 7-1: reset high-speed USB device number 9 using dummy_hcd
[  105.593146][ T6921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.257'.
[  105.737649][ T5839] usb 6-1: USB disconnect, device number 8
[  105.766267][   T41] audit: type=1804 audit(1786321373.299:17): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.259" name="/newroot/60/file0" dev="fuse" ino=1 res=1 errno=0
[  106.127742][ T2316] usb 7-1: USB disconnect, device number 9
[  106.133817][ T2316] usblp0: removed
[  106.157545][ T6002] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  106.172128][ T6939] pim6reg: entered allmulticast mode
[  106.194108][ T6939] pim6reg: left allmulticast mode
[  106.333366][ T6002] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  106.348460][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.460511][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'.
[  107.650284][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'.
[  107.683971][ T5806] usb 6-1: USB disconnect, device number 9
[  107.686515][   T64] Bluetooth: hci4: Reading Intel version command failed (-71)
[  107.765820][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.771353][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.620049][ T6990] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[  109.427647][ T7000] jffs2: notice: (7000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  109.566615][   T41] audit: type=1800 audit(1786321377.099:18): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.279" name="/newroot/68" dev="tmpfs" ino=390 res=0 errno=0
[  110.441825][ T7025] fuse: Bad value for 'fd'
[  110.563371][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[  110.652859][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.677516][  T851] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  110.828199][ T7031] FAULT_INJECTION: forcing a failure.
[  110.828199][ T7031] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  110.833647][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.833666][ T7031] Tainted: [L]=SOFTLOCKUP
[  110.833670][ T7031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.833676][ T7031] Call Trace:
[  110.833681][ T7031]  <TASK>
[  110.833686][ T7031]  dump_stack_lvl+0x100/0x190
[  110.833705][ T7031]  should_fail_ex.cold+0x5/0xa
[  110.833715][ T7031]  ? prepare_alloc_pages+0x16d/0x5f0
[  110.833734][ T7031]  should_fail_alloc_page+0xeb/0x140
[  110.833751][ T7031]  prepare_alloc_pages+0x1f0/0x5f0
[  110.833769][ T7031]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  110.833784][ T7031]  ? __lock_acquire+0x49f/0x1a40
[  110.833800][ T7031]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  110.833813][ T7031]  ? is_bpf_text_address+0x8a/0x1a0
[  110.833830][ T7031]  ? is_bpf_text_address+0x8a/0x1a0
[  110.833845][ T7031]  ? bpf_ksym_find+0x124/0x1c0
[  110.833877][ T7031]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  110.833896][ T7031]  ? is_bpf_text_address+0x94/0x1a0
[  110.833911][ T7031]  ? kernel_text_address+0x8d/0x100
[  110.833932][ T7031]  ? __lock_acquire+0x49f/0x1a40
[  110.833942][ T7031]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  110.833959][ T7031]  ? policy_nodemask+0xed/0x4f0
[  110.833977][ T7031]  alloc_pages_mpol+0x1fb/0x540
[  110.833993][ T7031]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  110.834012][ T7031]  folio_alloc_mpol_noprof+0x36/0x260
[  110.834024][ T7031]  vma_alloc_folio_noprof+0xed/0x1d0
[  110.834034][ T7031]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  110.834049][ T7031]  do_anonymous_page+0xb2b/0x2080
[  110.834061][ T7031]  ? rcu_read_unlock+0x2d/0xb0
[  110.834076][ T7031]  __handle_mm_fault+0x1d2c/0x2a00
[  110.834089][ T7031]  ? mt_find+0x45e/0x8e0
[  110.834100][ T7031]  ? __pfx___handle_mm_fault+0x10/0x10
[  110.834112][ T7031]  ? __pfx_mt_find+0x10/0x10
[  110.834130][ T7031]  ? find_vma+0xbf/0x140
[  110.834143][ T7031]  ? __pfx_find_vma+0x10/0x10
[  110.834157][ T7031]  handle_mm_fault+0x37b/0xa30
[  110.834171][ T7031]  do_user_addr_fault+0x74c/0x12f0
[  110.834190][ T7031]  exc_page_fault+0x6f/0xd0
[  110.834205][ T7031]  asm_exc_page_fault+0x26/0x30
[  110.834216][ T7031] RIP: 0010:_copy_to_iter+0x4c0/0x1720
[  110.834234][ T7031] Code: 00 e8 74 a6 f0 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 2c 40 60 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 <f3> a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08
[  110.834243][ T7031] RSP: 0018:ffffc900038bf9e8 EFLAGS: 00050246
[  110.834253][ T7031] RAX: 0000000000000001 RBX: 0000000000000090 RCX: 0000000000000090
[  110.834259][ T7031] RDX: 0000000000000001 RSI: ffff88804af4e000 RDI: 0000000080002a40
[  110.834265][ T7031] RBP: ffffc900038bfbf0 R08: 0000000000000000 R09: ffffed10095e9c11
[  110.834271][ T7031] R10: ffff88804af4e08f R11: 0000000000000000 R12: ffff88804af4e000
[  110.834277][ T7031] R13: 0000000000000000 R14: 0000000080002a40 R15: 0000000000000090
[  110.834291][ T7031]  ? _copy_to_iter+0x4b4/0x1720
[  110.834309][ T7031]  ? __pfx__copy_to_iter+0x10/0x10
[  110.834324][ T7031]  ? __pfx_bpf_link_show_fdinfo+0x10/0x10
[  110.834338][ T7031]  ? fput+0x79/0x100
[  110.834349][ T7031]  ? __pfx_bpf_link_show_fdinfo+0x10/0x10
[  110.834362][ T7031]  ? seq_show+0x590/0x870
[  110.834380][ T7031]  seq_read_iter+0xdab/0x1270
[  110.834403][ T7031]  seq_read+0x344/0x4d0
[  110.834419][ T7031]  ? __pfx_seq_read+0x10/0x10
[  110.834434][ T7031]  ? __pfx___might_resched+0x10/0x10
[  110.834451][ T7031]  ? lock_acquire+0x1b9/0x370
[  110.834467][ T7031]  ? rw_verify_area+0xce/0x6d0
[  110.834482][ T7031]  ? __pfx_seq_read+0x10/0x10
[  110.834498][ T7031]  vfs_read+0x1e4/0xb40
[  110.834509][ T7031]  ? __pfx_vfs_read+0x10/0x10
[  110.834521][ T7031]  ? find_held_lock+0x2b/0x80
[  110.834540][ T7031]  ? __fget_files+0x215/0x3d0
[  110.834558][ T7031]  ? __fget_files+0x21f/0x3d0
[  110.834583][ T7031]  ksys_read+0x12a/0x250
[  110.834599][ T7031]  ? __pfx_ksys_read+0x10/0x10
[  110.834613][ T7031]  ? ksys_write+0x1ac/0x250
[  110.834622][ T7031]  ? __pfx_ksys_write+0x10/0x10
[  110.834635][ T7031]  __do_fast_syscall_32+0xe7/0x970
[  110.834651][ T7031]  ? lockdep_hardirqs_on+0x78/0x100
[  110.834678][ T7031]  do_fast_syscall_32+0x32/0x70
[  110.834696][ T7031]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.834709][ T7031] RIP: 0023:0xf709efec
[  110.834724][ T7031] Code: Unable to access opcode bytes at 0xf709efc2.
[  110.834728][ T7031] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  110.834738][ T7031] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002a40
[  110.834744][ T7031] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000
[  110.834750][ T7031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.834755][ T7031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  110.834761][ T7031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.834774][ T7031]  </TASK>
[  110.888389][  T851] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  110.993366][  T851] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.996634][  T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.011455][  T851] as10x_usb: device has been detected
[  111.013618][  T851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  111.028760][  T851] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  111.034127][  T851] as10x_usb: error during firmware upload part1
[  111.036429][  T851] Registered device Abilis Systems DVB-Titan
[  111.707421][   T41] audit: type=1804 audit(1786321379.209:19): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.290" name="/newroot/61/file0" dev="fuse" ino=1 res=1 errno=0
[  112.152853][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.915422][ T7057] Invalid ELF header magic: != ELF
[  112.948253][ T5815] usb 8-1: USB disconnect, device number 8
[  112.960876][ T5815] Unregistered device Abilis Systems DVB-Titan
[  112.961586][ T5815] as10x_usb: device has been disconnected
[  113.164055][ T7057] syz.1.292 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  113.206349][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.225346][ T7057] overlayfs: overlapping lowerdir path
[  113.573534][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'.
[  115.047546][  T851] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  115.167523][ T5815] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  115.278671][  T851] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  115.293462][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  115.297452][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  115.307180][  T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.311785][  T851] usb 7-1: Product: syz
[  115.314889][  T851] usb 7-1: Manufacturer: syz
[  115.316471][  T851] usb 7-1: SerialNumber: syz
[  115.321911][  T851] usb 7-1: config 0 descriptor??
[  115.326103][  T851] hub 7-1:0.0: bad descriptor, ignoring hub
[  115.328221][ T5815] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  115.329048][  T851] hub 7-1:0.0: probe with driver hub failed with error -5
[  115.332600][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.336724][  T851] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12
[  115.876304][ T7099] jffs2: notice: (7099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  116.074508][ T7103] fuse: Bad value for 'fd'
[  116.077650][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.080449][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.459333][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  117.457505][ T5089] Bluetooth: hci4: command 0xfc05 tx timeout
[  117.460663][   T64] Bluetooth: hci4: Reading Intel version command failed (-110)
[  117.462187][ T5089] Bluetooth: hci4: Resetting usb device.
[  117.577672][ T6002] usb 7-1: USB disconnect, device number 10
[  117.630063][ T7094] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  117.637492][ T5823] usb 8-1: reset high-speed USB device number 9 using dummy_hcd
[  117.822394][ T5823] usb 8-1: device descriptor read/64, error -32
[  118.502792][ T7138] jffs2: notice: (7138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  118.575432][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[  118.734301][ T2316] usb 8-1: USB disconnect, device number 9
[  118.818325][ T7146] fuse: Bad value for 'fd'
[  119.147471][ T2316] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  119.307829][ T5815] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  119.338153][ T2316] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  119.341759][ T2316] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.344890][ T2316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.354402][ T2316] as10x_usb: device has been detected
[  119.356418][ T2316] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  119.364944][ T2316] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  119.372825][ T2316] as10x_usb: error during firmware upload part1
[  119.374977][ T2316] Registered device Abilis Systems DVB-Titan
[  119.479391][ T5815] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  119.485145][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  119.488856][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  119.493981][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.496583][ T5815] usb 6-1: Product: syz
[  119.498002][ T5815] usb 6-1: Manufacturer: syz
[  119.499468][ T5815] usb 6-1: SerialNumber: syz
[  119.505176][ T5815] usb 6-1: config 0 descriptor??
[  119.508973][ T5815] hub 6-1:0.0: bad descriptor, ignoring hub
[  119.510862][ T5815] hub 6-1:0.0: probe with driver hub failed with error -5
[  119.515017][ T5815] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13
[  120.856328][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.860381][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.178439][  T851] usb 8-1: USB disconnect, device number 10
[  121.193517][  T851] Unregistered device Abilis Systems DVB-Titan
[  121.194419][  T851] as10x_usb: device has been disconnected
[  121.523785][ T7185] jffs2: notice: (7185) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  121.699899][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[  122.007792][   T10] usb 6-1: USB disconnect, device number 10
[  122.977468][ T7180] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  123.516124][ T7219] jffs2: notice: (7219) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  123.734163][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[  123.754377][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'.
[  123.833027][ T7237] fuse: Bad value for 'fd'
[  123.837184][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.844567][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.177664][ T2316] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  124.329055][ T2316] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  124.334193][ T2316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  124.338842][ T2316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  124.344686][ T2316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.348149][ T2316] usb 6-1: Product: syz
[  124.349929][ T2316] usb 6-1: Manufacturer: syz
[  124.351714][ T2316] usb 6-1: SerialNumber: syz
[  124.355005][ T2316] usb 6-1: config 0 descriptor??
[  124.358277][ T2316] hub 6-1:0.0: bad descriptor, ignoring hub
[  124.360173][ T2316] hub 6-1:0.0: probe with driver hub failed with error -5
[  124.365947][ T2316] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14
[  125.419999][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.426547][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.549994][   T41] audit: type=1800 audit(1786321393.089:20): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.346" name="/newroot/83" dev="tmpfs" ino=470 res=0 errno=0
[  126.132379][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'.
[  126.139983][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'.
[  126.175845][ T7273] fuse: Invalid rootmode
[  126.427514][ T5823] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  126.588009][ T5823] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  126.592532][ T5823] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.595929][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.605506][ T5823] as10x_usb: device has been detected
[  126.607757][ T5823] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  126.615629][ T5823] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  126.621241][ T5823] as10x_usb: error during firmware upload part1
[  126.623659][ T5823] Registered device Abilis Systems DVB-Titan
[  126.847701][ T6002] usb 6-1: USB disconnect, device number 11
[  126.921481][ T7279] jffs2: notice: (7279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  127.537649][ T7259] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  128.428876][ T5815] usb 8-1: USB disconnect, device number 11
[  128.447209][ T5815] Unregistered device Abilis Systems DVB-Titan
[  128.448736][ T5815] as10x_usb: device has been disconnected
[  128.569489][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[  128.600652][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'.
[  128.843844][ T7313] FAULT_INJECTION: forcing a failure.
[  128.843844][ T7313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.848859][ T7313] CPU: 2 UID: 0 PID: 7313 Comm: syz.1.359 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.848887][ T7313] Tainted: [L]=SOFTLOCKUP
[  128.848893][ T7313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.848903][ T7313] Call Trace:
[  128.848910][ T7313]  <TASK>
[  128.848917][ T7313]  dump_stack_lvl+0x100/0x190
[  128.848944][ T7313]  should_fail_ex.cold+0x5/0xa
[  128.848964][ T7313]  _copy_from_user+0x2e/0xd0
[  128.848996][ T7313]  __sys_bpf+0x2f5/0x4e80
[  128.849023][ T7313]  ? __pfx___sys_bpf+0x10/0x10
[  128.849042][ T7313]  ? find_held_lock+0x2b/0x80
[  128.849062][ T7313]  ? get_pid_task+0xfc/0x250
[  128.849083][ T7313]  ? get_pid_task+0xfc/0x250
[  128.849109][ T7313]  ? proc_fail_nth_write+0x9f/0x220
[  128.849132][ T7313]  ? find_held_lock+0x2b/0x80
[  128.849157][ T7313]  ? rcu_read_lock_any_held+0x6a/0xa0
[  128.849180][ T7313]  ? find_held_lock+0x2b/0x80
[  128.849198][ T7313]  ? ksys_write+0x190/0x250
[  128.849215][ T7313]  ? ksys_write+0x190/0x250
[  128.849246][ T7313]  ? fput+0x79/0x100
[  128.849267][ T7313]  ? __ia32_sys_bpf+0xcc/0x170
[  128.849301][ T7313]  __ia32_sys_bpf+0xcc/0x170
[  128.849320][ T7313]  ? __do_fast_syscall_32+0x98/0x970
[  128.849346][ T7313]  __do_fast_syscall_32+0xe7/0x970
[  128.849368][ T7313]  ? lockdep_hardirqs_on+0x78/0x100
[  128.849392][ T7313]  do_fast_syscall_32+0x32/0x70
[  128.849416][ T7313]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  128.849437][ T7313] RIP: 0023:0xf7f36fec
[  128.849458][ T7313] Code: Unable to access opcode bytes at 0xf7f36fc2.
[  128.849479][ T7313] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  128.849497][ T7313] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600
[  128.849508][ T7313] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  128.849517][ T7313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  128.849525][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.849534][ T7313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  128.849556][ T7313]  </TASK>
[  129.084686][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'.
[  129.141506][ T7314] block nbd1: shutting down sockets
[  129.555901][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[  129.575428][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[  130.387476][ T6002] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  130.446902][ T7357] fuse: Invalid rootmode
[  130.548706][ T6002] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  130.559353][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  130.564093][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  130.576248][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.580571][ T6002] usb 7-1: Product: syz
[  130.582294][ T6002] usb 7-1: Manufacturer: syz
[  130.584466][ T6002] usb 7-1: SerialNumber: syz
[  130.587140][ T6002] usb 7-1: config 0 descriptor??
[  130.590742][ T6002] hub 7-1:0.0: bad descriptor, ignoring hub
[  130.593555][ T6002] hub 7-1:0.0: probe with driver hub failed with error -5
[  130.599723][ T6002] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input15
[  130.707581][ T5839] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  130.827892][   T40] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  130.858167][ T5839] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  130.863725][ T5839] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.867844][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.879627][ T5839] as10x_usb: device has been detected
[  130.882453][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  130.893027][ T5839] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  130.903772][ T5839] as10x_usb: error during firmware upload part1
[  130.906075][ T5839] Registered device Abilis Systems DVB-Titan
[  130.979779][   T40] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  130.985555][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.340045][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  132.342895][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  132.410128][ T7375] jffs2: notice: (7375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  132.677551][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'.
[  132.682373][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'.
[  132.711157][   T50] usb 8-1: USB disconnect, device number 12
[  132.725290][   T50] Unregistered device Abilis Systems DVB-Titan
[  132.726414][   T50] as10x_usb: device has been disconnected
[  133.057516][ T5089] Bluetooth: hci4: command 0xfc05 tx timeout
[  133.062015][   T64] Bluetooth: hci4: Reading Intel version command failed (-110)
[  133.062118][ T5089] Bluetooth: hci4: Resetting usb device.
[  133.070246][ T5839] usb 7-1: USB disconnect, device number 11
[  133.072248][    C2] Bluetooth: hci4: urb ffff88802ab97900 failed to resubmit (2)
[  133.217527][   T29] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[  133.297461][ T7364] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  133.347566][   T29] usb 6-1: device descriptor read/64, error -32
[  134.177916][ T7414] jffs2: notice: (7414) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  134.243136][ T2316] usb 6-1: USB disconnect, device number 12
[  134.442831][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'.
[  134.446831][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'.
[  134.759686][ T7427] fuse: Invalid rootmode
[  134.977823][   T29] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  135.007484][ T5839] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  135.148082][   T29] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  135.158256][ T5839] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  135.163195][ T5839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.167771][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.188576][ T5839] as10x_usb: device has been detected
[  135.192316][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  135.203221][ T5839] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  135.217009][ T5839] as10x_usb: error during firmware upload part1
[  135.220360][ T5839] Registered device Abilis Systems DVB-Titan
[  135.393844][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  135.399523][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  135.473430][   T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.476465][   T29] usb 8-1: Product: syz
[  135.477903][   T29] usb 8-1: Manufacturer: syz
[  135.479586][   T29] usb 8-1: SerialNumber: syz
[  135.483038][   T29] usb 8-1: config 0 descriptor??
[  135.537865][   T29] hub 8-1:0.0: bad descriptor, ignoring hub
[  135.540645][   T29] hub 8-1:0.0: probe with driver hub failed with error -5
[  135.544605][   T29] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input16
[  135.846986][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.850938][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.851338][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'.
[  136.911749][ T7457] jffs2: notice: (7457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  137.007232][   T29] usb 7-1: USB disconnect, device number 12
[  137.019611][   T29] Unregistered device Abilis Systems DVB-Titan
[  137.021873][   T29] as10x_usb: device has been disconnected
[  137.077246][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[  137.081683][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'.
[  137.618162][   T40] usb 8-1: USB disconnect, device number 13
[  137.947997][ T7444] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.581222][ T7485] jffs2: notice: (7485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  138.593217][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[  138.596992][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[  138.929904][ T7506] fuse: Bad value for 'rootmode'
[  138.959330][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.968927][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.063859][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'.
[  139.187486][ T5839] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  139.338053][ T5839] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  139.343249][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.346756][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.358750][ T5839] as10x_usb: device has been detected
[  139.361921][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  139.380628][ T5839] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  139.388535][ T5839] as10x_usb: error during firmware upload part1
[  139.394138][ T5839] Registered device Abilis Systems DVB-Titan
[  140.937515][ T5839] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  141.088329][ T5839] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  141.092667][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.176748][ T5839] usb 6-1: USB disconnect, device number 13
[  141.195485][ T5839] Unregistered device Abilis Systems DVB-Titan
[  141.198479][ T5839] as10x_usb: device has been disconnected
[  141.303463][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  141.309895][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'.
[  141.430821][ T7534] jffs2: notice: (7534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  142.955102][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'.
[  143.097686][ T7570] jffs2: notice: (7570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  143.137557][ T5739] Bluetooth: hci4: command 0xfc05 tx timeout
[  143.140575][   T64] Bluetooth: hci4: Reading Intel version command failed (-110)
[  143.143030][ T5739] Bluetooth: hci4: Resetting usb device.
[  143.287527][   T40] usb 8-1: reset high-speed USB device number 14 using dummy_hcd
[  143.377932][ T7531] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  143.428357][   T40] usb 8-1: device descriptor read/64, error -32
[  143.583890][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.584968][ T7585] fuse: Bad value for 'rootmode'
[  143.590621][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.649323][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  143.837460][ T5806] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  143.998263][ T5806] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  144.003102][ T5806] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.007447][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.025506][ T5806] as10x_usb: device has been detected
[  144.030862][ T5806] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  144.045867][ T5806] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  144.054312][ T5806] as10x_usb: error during firmware upload part1
[  144.056605][ T5806] Registered device Abilis Systems DVB-Titan
[  144.368640][  T851] usb 8-1: USB disconnect, device number 14
[  144.853534][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'.
[  144.945908][ T7607] jffs2: notice: (7607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  145.947869][ T5839] usb 7-1: USB disconnect, device number 13
[  145.960366][ T5839] Unregistered device Abilis Systems DVB-Titan
[  145.961206][ T5839] as10x_usb: device has been disconnected
[  146.177435][  T851] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  146.328070][  T851] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  146.332493][  T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.505722][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'.
[  146.618812][ T7642] jffs2: notice: (7642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  147.716965][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.723166][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.787023][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  147.981176][ T7671] fuse: Bad value for 'rootmode'
[  148.228348][ T5839] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  148.378335][ T5839] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  148.383617][ T5839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.386968][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.396626][ T5839] as10x_usb: device has been detected
[  148.399526][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  148.406191][ T5839] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  148.421034][ T5839] as10x_usb: error during firmware upload part1
[  148.423278][ T5839] Registered device Abilis Systems DVB-Titan
[  148.445227][ T5739] Bluetooth: hci4: command 0xfc05 tx timeout
[  148.448160][   T64] Bluetooth: hci4: Reading Intel version command failed (-110)
[  148.450522][ T5739] Bluetooth: hci4: Resetting usb device.
[  148.667775][ T7640] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  148.797459][ T2316] usb 8-1: reset high-speed USB device number 15 using dummy_hcd
[  149.129525][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[  149.412082][ T7687] jffs2: notice: (7687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  149.568578][   T29] usb 8-1: USB disconnect, device number 15
[  150.212083][   T29] usb 7-1: USB disconnect, device number 14
[  150.225087][   T29] Unregistered device Abilis Systems DVB-Titan
[  150.226469][   T29] as10x_usb: device has been disconnected
[  150.761767][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  151.087515][ T5839] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  151.238455][ T5839] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  151.244724][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.614683][ T7725] jffs2: notice: (7725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  152.018743][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.022991][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.088213][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[  152.442253][ T7753] fuse: Unknown parameter 'use00000000000000000000'
[  152.450474][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[  152.792781][   T29] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  152.958084][   T29] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  152.962526][   T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.965905][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.978057][   T29] as10x_usb: device has been detected
[  152.982061][   T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  152.992878][   T29] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  153.002743][   T29] as10x_usb: error during firmware upload part1
[  153.005419][   T29] Registered device Abilis Systems DVB-Titan
[  153.297498][ T5739] Bluetooth: hci4: Reading Intel version command failed (-110)
[  153.297568][ T5089] Bluetooth: hci4: command 0xfc05 tx timeout
[  153.299240][ T5089] Bluetooth: hci4: Resetting usb device.
[  153.447634][ T6002] usb 7-1: reset high-speed USB device number 15 using dummy_hcd
[  153.537466][ T7726] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  153.577467][ T6002] usb 7-1: device descriptor read/64, error -32
[  154.489227][ T5839] usb 7-1: USB disconnect, device number 15
[  154.527295][ T7783] jffs2: notice: (7783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  154.790923][   T40] usb 8-1: USB disconnect, device number 16
[  154.805443][   T40] Unregistered device Abilis Systems DVB-Titan
[  154.806399][   T40] as10x_usb: device has been disconnected
[  154.909370][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'.
[  155.717457][ T5823] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  155.878407][ T5823] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  155.882710][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.099673][ T7816] jffs2: notice: (7816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  156.251075][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.254499][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.330619][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[  156.407138][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'.
[  156.525931][ T7836] fuse: Unknown parameter 'use00000000000000000000'
[  156.767492][ T5815] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  156.918121][ T5815] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  156.921885][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.925186][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.936476][ T5815] as10x_usb: device has been detected
[  156.938914][ T5815] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  156.944321][ T5815] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  156.953425][ T5815] as10x_usb: error during firmware upload part1
[  156.955678][ T5815] Registered device Abilis Systems DVB-Titan
[  157.937676][ T5089] Bluetooth: hci4: command 0xfc05 tx timeout
[  157.939052][ T5739] Bluetooth: hci4: Reading Intel version command failed (-110)
[  157.942059][ T5089] Bluetooth: hci4: Resetting usb device.
[  158.077522][ T5839] usb 8-1: reset high-speed USB device number 17 using dummy_hcd
[  158.177467][ T7822] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  158.217436][ T5839] usb 8-1: device descriptor read/64, error -32
[  158.755939][   T29] usb 6-1: USB disconnect, device number 14
[  158.777860][   T29] Unregistered device Abilis Systems DVB-Titan
[  158.781402][   T29] as10x_usb: device has been disconnected
[  159.224988][ T6002] usb 8-1: USB disconnect, device number 17
[  159.347767][ T7862] jffs2: notice: (7862) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  159.421692][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'.
[  159.977547][   T40] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  160.127863][   T40] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  160.132250][   T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.463776][ T7896] fuse: Unknown parameter 'use00000000000000000000'
[  160.586096][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.589378][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.707461][ T5806] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  160.858144][ T5806] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  160.863300][ T5806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.867585][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.880046][ T5806] as10x_usb: device has been detected
[  160.882964][ T5806] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  160.894008][ T5806] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  160.901393][ T5806] as10x_usb: error during firmware upload part1
[  160.904939][ T5806] Registered device Abilis Systems DVB-Titan
[  161.551089][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  162.177497][ T5089] Bluetooth: hci4: command 0xfc05 tx timeout
[  162.177562][ T5739] Bluetooth: hci4: Reading Intel version command failed (-110)
[  162.180927][ T5089] Bluetooth: hci4: Resetting usb device.
[  162.186867][    C1] Bluetooth: hci4: urb ffff88805475b200 failed to resubmit (2)
[  162.327632][ T5839] usb 8-1: reset high-speed USB device number 18 using dummy_hcd
[  162.417458][ T7888] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  162.457495][ T5839] usb 8-1: device descriptor read/64, error -32
[  162.696979][ T5823] usb 6-1: USB disconnect, device number 15
[  162.716539][ T5823] Unregistered device Abilis Systems DVB-Titan
[  162.722760][ T5823] as10x_usb: device has been disconnected
[  163.337075][ T7929] jffs2: notice: (7929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  163.372365][ T6002] usb 8-1: USB disconnect, device number 18
[  163.945488][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[  164.341259][ T7957] fuse: Unknown parameter 'user_i00000000000000000000'
[  164.447490][ T6002] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  164.577664][  T851] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  164.617922][ T6002] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  164.622523][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.728086][  T851] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  164.732425][  T851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.735899][  T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.744071][  T851] as10x_usb: device has been detected
[  164.746196][  T851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  164.752458][  T851] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  164.757681][  T851] as10x_usb: error during firmware upload part1
[  164.759962][  T851] Registered device Abilis Systems DVB-Titan
[  164.982821][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.989366][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.325714][   T41] audit: type=1800 audit(1786321432.859:21): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.523" name="/newroot/117" dev="tmpfs" ino=654 res=0 errno=0
[  166.562560][ T5823] usb 7-1: USB disconnect, device number 16
[  166.575573][ T5823] Unregistered device Abilis Systems DVB-Titan
[  166.577528][ T5823] as10x_usb: device has been disconnected
[  166.657527][ T5739] Bluetooth: hci4: command 0xfc05 tx timeout
[  166.659072][   T64] Bluetooth: hci4: Reading Intel version command failed (-110)
[  166.660995][ T5739] Bluetooth: hci4: Resetting usb device.
[  166.817444][  T851] usb 6-1: reset high-speed USB device number 16 using dummy_hcd
[  166.897692][ T7967] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  166.957474][  T851] usb 6-1: device descriptor read/64, error -32
[  167.409635][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[  167.868627][   T40] usb 6-1: USB disconnect, device number 16
[  168.512109][ T8017] fuse: Unknown parameter 'user_i00000000000000000000'
[  168.747457][   T40] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  168.813819][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'.
[  168.907917][   T40] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  168.912106][   T40] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.915812][   T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.924547][   T40] as10x_usb: device has been detected
[  168.926841][   T40] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  168.932638][   T40] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  168.936985][   T40] as10x_usb: error during firmware upload part1
[  168.939308][   T40] Registered device Abilis Systems DVB-Titan
[  169.087536][ T5823] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  169.136098][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.140329][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.238199][ T5823] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  169.245467][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.812902][   T41] audit: type=1800 audit(1786321437.349:22): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.539" name="/newroot/137" dev="tmpfs" ino=782 res=0 errno=0
[  170.261499][ T5733] Bluetooth: hci2: command 0x0406 tx timeout
[  170.263438][ T5733] Bluetooth: hci3: command 0x0406 tx timeout
[  170.265291][ T5733] Bluetooth: hci1: command 0x0406 tx timeout
[  170.747098][   T34] usb 7-1: USB disconnect, device number 17
[  170.772362][   T34] Unregistered device Abilis Systems DVB-Titan
[  170.776541][   T34] as10x_usb: device has been disconnected
[  171.297491][ T5739] Bluetooth: hci4: command 0xfc05 tx timeout
[  171.302724][ T5739] Bluetooth: hci4: Resetting usb device.
[  171.304563][ T5735] Bluetooth: hci4: Reading Intel version command failed (-110)
[  171.437482][   T34] usb 8-1: reset high-speed USB device number 19 using dummy_hcd
[  171.537435][ T8037] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  171.567468][   T34] usb 8-1: device descriptor read/64, error -32
[  172.468201][   T40] usb 8-1: USB disconnect, device number 19
[  172.498395][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'.
[  173.204677][ T8084] fuse: Unknown parameter 'user_i00000000000000000000'
[  173.447498][ T5815] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  173.578790][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.582214][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.598278][ T5815] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  173.603363][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.606855][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.626427][ T5815] as10x_usb: device has been detected
[  173.633043][ T5815] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  173.644562][ T5815] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  173.656838][ T5815] as10x_usb: error during firmware upload part1
[  173.663459][ T5815] Registered device Abilis Systems DVB-Titan
[  173.717729][ T5806] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  173.887902][ T5806] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  173.891564][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.037398][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  174.427392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  175.548761][ T5815] usb 6-1: USB disconnect, device number 17
[  175.564844][ T5815] Unregistered device Abilis Systems DVB-Titan
[  175.566190][ T5815] as10x_usb: device has been disconnected
[  175.939392][ T5739] Bluetooth: hci4: command 0xfc05 tx timeout
[  175.939724][ T5735] Bluetooth: hci4: Reading Intel version command failed (-110)
[  175.942697][ T5739] Bluetooth: hci4: Resetting usb device.
[  175.949012][    C1] Bluetooth: hci4: urb ffff88802578ca00 failed to resubmit (2)
[  176.077451][   T34] usb 7-1: reset high-speed USB device number 18 using dummy_hcd
[  176.171266][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'.
[  176.217522][   T34] usb 7-1: device descriptor read/64, error -32
[  176.258497][ T8093] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  176.337405][   T41] audit: type=1804 audit(1786321443.869:23): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.555" name="/newroot/142/file0" dev="fuse" ino=1 res=1 errno=0
[  176.490736][   T41] audit: type=1800 audit(1786321444.029:24): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.557" name="/newroot/151" dev="tmpfs" ino=855 res=0 errno=0
[  176.880751][ T8138] fuse: Unknown parameter 'user_id00000000000000000000'
[  177.157713][   T34] usb 7-1: reset high-speed USB device number 18 using dummy_hcd
[  177.308122][   T34] usb 7-1: device firmware changed
[  177.312773][   T40] usb 7-1: USB disconnect, device number 18
[  177.458376][   T40] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  177.572001][ T8142] No source specified
[  177.642496][   T40] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  177.648929][   T40] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.655128][   T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.673256][   T40] as10x_usb: device has been detected
[  177.677900][   T40] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  177.691565][   T40] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  177.705916][   T40] as10x_usb: error during firmware upload part1
[  177.708604][   T40] Registered device Abilis Systems DVB-Titan
[  177.761441][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'.
[  178.707568][ T6002] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  178.868198][ T6002] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  178.873490][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  178.878269][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  178.884620][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.888215][ T6002] usb 6-1: Product: syz
[  178.890024][ T6002] usb 6-1: Manufacturer: syz
[  178.892053][ T6002] usb 6-1: SerialNumber: syz
[  178.897221][ T6002] usb 6-1: config 0 descriptor??
[  178.902002][ T6002] hub 6-1:0.0: bad descriptor, ignoring hub
[  178.905174][ T6002] hub 6-1:0.0: probe with driver hub failed with error -5
[  178.911421][ T6002] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17
[  179.495029][ T6002] usb 7-1: USB disconnect, device number 19
[  179.508805][ T6002] Unregistered device Abilis Systems DVB-Titan
[  179.510237][ T6002] as10x_usb: device has been disconnected
[  179.682240][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.686033][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.754112][ T8191] No source specified
[  180.931010][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  181.407723][ T5815] usb 6-1: USB disconnect, device number 18
[  181.451064][   T41] audit: type=1800 audit(1786321448.989:25): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.576" name="/newroot/147" dev="tmpfs" ino=838 res=0 errno=0
[  181.777483][ T8179] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  181.922030][ T8214] fuse: Unknown parameter 'user_id00000000000000000000'
[  182.157559][ T6002] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  182.308356][ T6002] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  182.313611][ T6002] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.319550][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.391545][ T6002] as10x_usb: device has been detected
[  182.394317][ T6002] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  182.410118][ T6002] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  182.430501][ T6002] as10x_usb: error during firmware upload part1
[  182.435758][ T6002] Registered device Abilis Systems DVB-Titan
[  183.072045][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'.
[  183.597504][ T6002] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  183.748868][ T6002] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  183.754368][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  183.759380][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  183.765834][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.769582][ T6002] usb 6-1: Product: syz
[  183.771476][ T6002] usb 6-1: Manufacturer: syz
[  183.773570][ T6002] usb 6-1: SerialNumber: syz
[  183.778737][ T6002] usb 6-1: config 0 descriptor??
[  183.786438][ T6002] hub 6-1:0.0: bad descriptor, ignoring hub
[  183.792229][ T6002] hub 6-1:0.0: probe with driver hub failed with error -5
[  183.796930][ T6002] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input18
[  184.153561][   T34] usb 7-1: USB disconnect, device number 20
[  184.167301][   T34] Unregistered device Abilis Systems DVB-Titan
[  184.169922][   T34] as10x_usb: device has been disconnected
[  185.167470][   T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  185.318273][   T34] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  185.322127][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.966091][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[  186.201386][ T8280] fuse: Unknown parameter 'user_id00000000000000000000'
[  186.410812][ T5815] usb 6-1: USB disconnect, device number 19
[  186.727636][ T5815] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  186.880683][ T5815] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  186.889366][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.896811][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.912449][ T5815] as10x_usb: device has been detected
[  186.915390][ T5815] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  186.929184][ T5815] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  186.939231][ T5815] as10x_usb: error during firmware upload part1
[  186.943523][ T5815] Registered device Abilis Systems DVB-Titan
[  187.377660][   T64] Bluetooth: hci4: command 0xfc05 tx timeout
[  187.388224][   T64] Bluetooth: hci4: Resetting usb device.
[  187.388272][ T5735] Bluetooth: hci4: Reading Intel version command failed (-110)
[  187.393843][    C3] Bluetooth: hci4: urb ffff88802700a200 failed to resubmit (2)
[  187.617494][ T8262] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  187.617817][   T29] usb 8-1: reset high-speed USB device number 20 using dummy_hcd
[  187.748568][   T29] usb 8-1: device descriptor read/64, error -32
[  188.857231][ T5823] usb 8-1: USB disconnect, device number 20
[  188.874280][ T6002] usb 6-1: USB disconnect, device number 20
[  188.900443][ T6002] Unregistered device Abilis Systems DVB-Titan
[  188.903561][ T6002] as10x_usb: device has been disconnected
[  189.150037][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'.
[  189.657523][   T50] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  189.808901][   T50] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  189.816619][   T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  189.821381][   T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  189.835515][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.839872][   T50] usb 8-1: Product: syz
[  189.842603][   T50] usb 8-1: Manufacturer: syz
[  189.846303][   T50] usb 8-1: SerialNumber: syz
[  189.852629][   T50] usb 8-1: config 0 descriptor??
[  189.864863][   T50] hub 8-1:0.0: bad descriptor, ignoring hub
[  189.869577][   T50] hub 8-1:0.0: probe with driver hub failed with error -5
[  189.879854][   T50] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19
[  190.049140][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.052897][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.476055][ T8338] No source specified
[  191.060005][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[  191.241283][   T41] audit: type=1804 audit(1786321458.779:26): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.615" name="/newroot/157/file0" dev="fuse" ino=1 res=1 errno=0
[  191.396430][   T41] audit: type=1800 audit(1786321458.929:27): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.617" name="/newroot/159" dev="tmpfs" ino=907 res=0 errno=0
[  192.187941][ T8332] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  192.337826][   T50] usb 8-1: USB disconnect, device number 21
[  192.848239][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  193.013070][   T41] audit: type=1804 audit(1786321460.549:28): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.624" name="/newroot/167/file0" dev="fuse" ino=1 res=1 errno=0
[  193.236224][   T41] audit: type=1800 audit(1786321460.769:29): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.626" name="/newroot/169" dev="tmpfs" ino=952 res=0 errno=0
[  193.780039][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  193.783904][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  193.799590][   T50] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  193.984062][   T50] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  193.997301][   T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  194.007109][   T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  194.019325][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.027243][   T50] usb 6-1: Product: syz
[  194.029251][   T50] usb 6-1: Manufacturer: syz
[  194.031306][   T50] usb 6-1: SerialNumber: syz
[  194.036634][   T50] usb 6-1: config 0 descriptor??
[  194.053856][   T50] hub 6-1:0.0: bad descriptor, ignoring hub
[  194.061652][   T50] hub 6-1:0.0: probe with driver hub failed with error -5
[  194.082318][   T50] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20
[  194.212473][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  194.352228][   T41] audit: type=1804 audit(1786321461.889:30): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.633" name="/newroot/172/file0" dev="fuse" ino=1 res=1 errno=0
[  194.428833][ T5823] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  194.579526][ T5823] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  194.583621][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.534063][   T41] audit: type=1800 audit(1786321463.069:31): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.638" name="/newroot/176" dev="tmpfs" ino=989 res=0 errno=0
[  196.154338][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'.
[  196.425280][   T41] audit: type=1804 audit(1786321463.959:32): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.643" name="/newroot/180/file0" dev="fuse" ino=1 res=1 errno=0
[  196.497779][ T5815] usb 6-1: USB disconnect, device number 21
[  196.657507][ T5735] Bluetooth: hci4: Reading Intel version command failed (-110)
[  196.657530][   T64] Bluetooth: hci4: command 0xfc05 tx timeout
[  196.657739][   T64] Bluetooth: hci4: Resetting usb device.
[  196.807525][   T29] usb 7-1: reset high-speed USB device number 21 using dummy_hcd
[  196.897499][ T8445] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  196.937525][   T29] usb 7-1: device descriptor read/64, error -32
[  197.558789][   T41] audit: type=1800 audit(1786321465.099:33): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.648" name="/newroot/183" dev="tmpfs" ino=1026 res=0 errno=0
[  197.803368][ T8491] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  197.818673][ T5823] usb 7-1: USB disconnect, device number 21
[  198.126820][ T8494] netlink: 'syz.1.651': attribute type 2 has an invalid length.
[  198.130917][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'.
[  198.311768][ T8494] : entered promiscuous mode
[  198.713260][ T8501] jffs2: notice: (8501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  198.768641][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.792862][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.903378][   T41] audit: type=1804 audit(1786321466.439:34): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.655" name="/newroot/147/file0" dev="fuse" ino=1 res=1 errno=0
[  199.038076][ T5823] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  199.076897][ T8521] vlan2: entered promiscuous mode
[  199.079475][ T8521] hsr0: entered promiscuous mode
[  199.081342][ T8521] vlan2: entered allmulticast mode
[  199.083048][ T8521] hsr0: entered allmulticast mode
[  199.085081][ T8521] hsr_slave_0: entered allmulticast mode
[  199.087136][ T8521] hsr_slave_1: entered allmulticast mode
[  199.101595][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'.
[  199.105341][ T8521] hsr_slave_0: left promiscuous mode
[  199.108754][ T8521] hsr_slave_1: left promiscuous mode
[  199.157505][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'.
[  199.217474][ T5823] usb 6-1: Using ep0 maxpacket: 32
[  199.221909][ T5823] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  199.231998][ T5823] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  199.237185][ T5823] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  199.247418][ T5823] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  199.253251][ T5823] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  199.269713][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.272328][ T5823] usb 6-1: Product: syz
[  199.273666][ T5823] usb 6-1: Manufacturer: syz
[  199.275702][ T5823] usb 6-1: SerialNumber: syz
[  199.286284][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  199.307497][ T5823] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input21
[  199.767605][ T5823] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  199.776867][ T5823]  (id 0x00)
[  199.867458][ T5823] rc_core: IR keymap rc-imon-pad not found
[  199.871982][ T5823] Registered IR keymap rc-empty
[  199.881224][ T5823] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  199.885233][ T5823] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  199.960405][ T5823] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  200.069286][ T5823] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input22
[  200.275305][ T5823] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:22> initialized
[  200.457267][   T10] usb 6-1: USB disconnect, device number 22
[  201.159836][ T8531] FAULT_INJECTION: forcing a failure.
[  201.159836][ T8531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.164567][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.1.660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.164586][ T8531] Tainted: [L]=SOFTLOCKUP
[  201.164590][ T8531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.164597][ T8531] Call Trace:
[  201.164601][ T8531]  <TASK>
[  201.164607][ T8531]  dump_stack_lvl+0x100/0x190
[  201.164627][ T8531]  should_fail_ex.cold+0x5/0xa
[  201.164640][ T8531]  _copy_from_user+0x2e/0xd0
[  201.164660][ T8531]  video_usercopy+0x9e0/0x14c0
[  201.164681][ T8531]  ? __pfx___video_do_ioctl+0x10/0x10
[  201.164697][ T8531]  ? __pfx_video_usercopy+0x10/0x10
[  201.164716][ T8531]  ? __fget_files+0x215/0x3d0
[  201.164727][ T8531]  ? hook_file_ioctl_common+0x140/0x440
[  201.164745][ T8531]  v4l2_ioctl+0x1bd/0x250
[  201.164762][ T8531]  v4l2_compat_ioctl32+0x20f/0x2d0
[  201.164777][ T8531]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[  201.164807][ T8531]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  201.164839][ T8531]  __do_fast_syscall_32+0xe7/0x970
[  201.164859][ T8531]  ? lockdep_hardirqs_on+0x78/0x100
[  201.164874][ T8531]  do_fast_syscall_32+0x32/0x70
[  201.164890][ T8531]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  201.164904][ T8531] RIP: 0023:0xf7f36fec
[  201.164919][ T8531] Code: Unable to access opcode bytes at 0xf7f36fc2.
[  201.164924][ T8531] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  201.164935][ T8531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0485619
[  201.164942][ T8531] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[  201.164948][ T8531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  201.164954][ T8531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  201.164960][ T8531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.164972][ T8531]  </TASK>
[  201.554218][ T5729] syz-executor invoked oom-killer: gfp_mask=0xc48(GFP_NOFS|__GFP_MOVABLE), order=0, oom_score_adj=0
[  201.559305][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.559324][ T5729] Tainted: [L]=SOFTLOCKUP
[  201.559328][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.559334][ T5729] Call Trace:
[  201.559339][ T5729]  <TASK>
[  201.559343][ T5729]  dump_stack_lvl+0x100/0x190
[  201.559362][ T5729]  dump_header+0xfb/0x606
[  201.559375][ T5729]  oom_kill_process.cold+0xd/0x330
[  201.559388][ T5729]  out_of_memory+0x340/0x14f0
[  201.559403][ T5729]  ? __pfx_out_of_memory+0x10/0x10
[  201.559417][ T5729]  mem_cgroup_out_of_memory+0xc6/0x130
[  201.559430][ T5729]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  201.559441][ T5729]  ? find_held_lock+0x2b/0x80
[  201.559459][ T5729]  ? do_raw_spin_unlock+0x145/0x1e0
[  201.559471][ T5729]  ? _raw_spin_unlock+0x28/0x50
[  201.559487][ T5729]  try_charge_memcg+0x6e5/0xdf0
[  201.559506][ T5729]  ? __pfx_try_charge_memcg+0x10/0x10
[  201.559521][ T5729]  ? find_held_lock+0x2b/0x80
[  201.559533][ T5729]  ? rcu_read_unlock+0x17/0x60
[  201.559550][ T5729]  ? rcu_read_unlock+0x17/0x60
[  201.559566][ T5729]  ? find_held_lock+0x2b/0x80
[  201.559579][ T5729]  ? rcu_read_unlock+0x17/0x60
[  201.559598][ T5729]  charge_memcg+0x187/0x1e0
[  201.559614][ T5729]  __mem_cgroup_charge+0x2b/0x1c0
[  201.559625][ T5729]  filemap_add_folio+0xe7/0x630
[  201.559638][ T5729]  ? __pfx_filemap_add_folio+0x10/0x10
[  201.559653][ T5729]  __filemap_get_folio_mpol+0x584/0x1320
[  201.559669][ T5729]  bdev_getblk+0x246/0x6a0
[  201.559689][ T5729]  __read_extent_tree_block+0x136/0x640
[  201.559728][ T5729]  ext4_find_extent+0x510/0xa30
[  201.559742][ T5729]  ext4_ext_map_blocks+0x215/0x59a0
[  201.559757][ T5729]  ? rcu_read_unlock+0x17/0x60
[  201.559785][ T5729]  ? rcu_read_unlock+0x17/0x60
[  201.559805][ T5729]  ? vmpressure+0x1f6/0x370
[  201.559816][ T5729]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[  201.559829][ T5729]  ? shrink_node+0xc6f/0x3e90
[  201.559841][ T5729]  ? __queue_work+0x8a1/0x12b0
[  201.559860][ T5729]  ? __lock_acquire+0x49f/0x1a40
[  201.559870][ T5729]  ? __lock_acquire+0x49f/0x1a40
[  201.559879][ T5729]  ? __lock_acquire+0x49f/0x1a40
[  201.559895][ T5729]  ext4_map_query_blocks+0x113/0x930
[  201.559913][ T5729]  ? __pfx_ext4_map_query_blocks+0x10/0x10
[  201.559927][ T5729]  ? __pfx_down_read+0x10/0x10
[  201.559943][ T5729]  ? ext4_es_lookup_extent+0xcc/0xce0
[  201.559960][ T5729]  ext4_map_blocks+0x3b4/0xd30
[  201.559976][ T5729]  ? __pfx_ext4_map_blocks+0x10/0x10
[  201.559991][ T5729]  ? __pfx_xa_load+0x10/0x10
[  201.560007][ T5729]  ext4_mpage_readpages.isra.0+0x1248/0x1cb0
[  201.560032][ T5729]  ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10
[  201.560052][ T5729]  ext4_readahead+0x174/0x2c0
[  201.560065][ T5729]  ? __pfx_ext4_readahead+0x10/0x10
[  201.560079][ T5729]  read_pages+0x1b1/0xdf0
[  201.560095][ T5729]  ? _raw_spin_unlock+0x28/0x50
[  201.560107][ T5729]  ? __free_frozen_pages+0x751/0x1090
[  201.560127][ T5729]  ? __mem_cgroup_charge+0xb3/0x1c0
[  201.560137][ T5729]  ? __pfx_read_pages+0x10/0x10
[  201.560159][ T5729]  page_cache_ra_unbounded+0x48a/0x990
[  201.560181][ T5729]  do_page_cache_ra+0x10f/0x160
[  201.560198][ T5729]  page_cache_ra_order+0xc05/0xed0
[  201.560221][ T5729]  filemap_fault+0x1943/0x3130
[  201.560235][ T5729]  ? __pfx_filemap_fault+0x10/0x10
[  201.560251][ T5729]  ? find_held_lock+0x2b/0x80
[  201.560265][ T5729]  __do_fault+0x10b/0x440
[  201.560285][ T5729]  do_fault+0xa99/0x1750
[  201.560303][ T5729]  __handle_mm_fault+0x187d/0x2a00
[  201.560317][ T5729]  ? reacquire_held_locks+0xce/0x1e0
[  201.560327][ T5729]  ? __pfx___handle_mm_fault+0x10/0x10
[  201.560341][ T5729]  ? lock_vma_under_rcu+0x17c/0x590
[  201.560360][ T5729]  handle_mm_fault+0x37b/0xa30
[  201.560374][ T5729]  do_user_addr_fault+0x5a3/0x12f0
[  201.560394][ T5729]  exc_page_fault+0x6f/0xd0
[  201.560410][ T5729]  asm_exc_page_fault+0x26/0x30
[  201.560421][ T5729] RIP: 0023:0xf7048c91
[  201.560430][ T5729] Code: 99 6a 00 68 40 42 0f 00 52 50 e8 3a 23 0c 00 83 c4 10 03 44 24 10 13 54 24 14 89 44 24 10 89 c7 8b 83 64 d6 b5 00 89 54 24 14 <8b> 40 08 89 44 24 34 39 44 24 08 74 08 89 7c 24 40 89 54 24 44 8b
[  201.560441][ T5729] RSP: 002b:00000000ffb550c0 EFLAGS: 00010246
[  201.560452][ T5729] RAX: 0000000032924000 RBX: 00000000f73d7ff4 RCX: 0000000000000000
[  201.560458][ T5729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000312c0
[  201.560464][ T5729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  201.560470][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.560476][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.560489][ T5729]  </TASK>
[  201.560873][ T5729] memory: usage 307200kB, limit 307200kB, failcnt 1696
[  201.703388][ T5729] memory+swap: usage 286608kB, limit 9007199254740988kB, failcnt 0
[  201.707683][ T5729] kmem: usage 283280kB, limit 9007199254740988kB, failcnt 0
[  201.714569][ T5729] Memory cgroup stats for /syz2:
[  201.721496][ T5729] cache 98304
[  201.724996][ T5729] rss 0
[  201.726799][ T5729] rss_huge 0
[  201.728905][ T5729] shmem 0
[  201.730596][ T5729] mapped_file 0
[  201.732116][ T5729] dirty 0
[  201.733299][ T5729] writeback 0
[  201.734973][ T5729] workingset_refault_anon 1281
[  201.736758][ T5729] workingset_refault_file 150669
[  201.738832][ T5729] swap 212992
[  201.740172][ T5729] swapcached 6381568
[  201.741512][ T5729] pgpgin 252971
[  201.742627][ T5729] pgpgout 256524
[  201.743824][ T5729] pgfault 119067
[  201.744958][ T5729] pgmajfault 864
[  201.746783][ T5729] inactive_anon 0
[  201.748195][ T5729] active_anon 0
[  201.749419][ T5729] inactive_file 61440
[  201.750777][ T5729] active_file 36864
[  201.752055][ T5729] unevictable 0
[  201.753865][ T5729] hierarchical_memory_limit 314572800
[  201.755668][ T5729] hierarchical_memsw_limit 9223372036854771712
[  201.757867][ T5729] total_cache 98304
[  201.759141][ T5729] total_rss 0
[  201.760545][ T5729] total_rss_huge 0
[  201.762091][ T5729] total_shmem 0
[  201.763374][ T5729] total_mapped_file 0
[  201.765073][ T5729] total_dirty 0
[  201.766313][ T5729] total_writeback 0
[  201.767811][ T5729] total_workingset_refault_anon 1281
[  201.769554][ T5729] total_workingset_refault_file 150669
[  201.771924][ T5729] total_swap 212992
[  201.773228][ T5729] total_swapcached 6381568
[  201.775602][ T5729] total_pgpgin 252971
[  201.778428][ T5729] total_pgpgout 256524
[  201.787564][ T5729] total_pgfault 119067
[  201.788903][ T5729] total_pgmajfault 864
[  201.790224][ T5729] total_inactive_anon 0
[  201.791578][ T5729] total_active_anon 0
[  201.792846][ T5729] total_inactive_file 61440
[  201.794296][ T5729] total_active_file 36864
[  201.795679][ T5729] total_unevictable 0
[  201.796943][ T5729] anon_cost 0
[  201.798131][ T5729] file_cost 0
[  201.799207][ T5729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.656,pid=8516,uid=0
[  201.804000][ T5729] Memory cgroup out of memory: Killed process 8517 (syz.2.656) total-vm:102156kB, anon-rss:4kB, file-rss:22648kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[  202.137406][   T41] audit: type=1804 audit(1786321469.669:35): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.665" name="/newroot/152/file0" dev="fuse" ino=1 res=1 errno=0
[  202.412394][ T8553] syzkaller0: entered promiscuous mode
[  202.414280][ T8553] syzkaller0: entered allmulticast mode
[  202.957501][   T50] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  203.108211][   T50] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  203.115374][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.331691][   T41] audit: type=1800 audit(1786321470.869:36): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.673" name="/newroot/154" dev="tmpfs" ino=857 res=0 errno=0
[  203.704217][   T41] audit: type=1804 audit(1786321471.239:37): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.674" name="/newroot/188/file0" dev="fuse" ino=1 res=1 errno=0
[  204.097046][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'.
[  204.817644][   T50] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  204.977552][   T50] usb 6-1: Using ep0 maxpacket: 32
[  204.981946][   T50] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  204.986118][   T50] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  204.989410][   T50] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  204.996798][   T50] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  205.000678][   T50] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  205.009274][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.012135][   T50] usb 6-1: Product: syz
[  205.013535][   T50] usb 6-1: Manufacturer: syz
[  205.016445][   T50] usb 6-1: SerialNumber: syz
[  205.023848][    C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  205.032080][   T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input23
[  205.192954][ T8611] syzkaller0: entered promiscuous mode
[  205.194770][ T8611] syzkaller0: entered allmulticast mode
[  205.217524][   T64] Bluetooth: hci4: command 0xfc05 tx timeout
[  205.217572][ T5735] Bluetooth: hci4: Reading Intel version command failed (-110)
[  205.219788][   T64] Bluetooth: hci4: Resetting usb device.
[  205.247425][   T50] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  205.250058][   T50]  (id 0x00)
[  205.297551][   T50] rc_core: IR keymap rc-imon-pad not found
[  205.302483][   T50] Registered IR keymap rc-empty
[  205.304099][   T50] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  205.308414][   T50] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  205.357458][ T5823] usb 7-1: reset high-speed USB device number 22 using dummy_hcd
[  205.448848][   T50] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  205.455048][   T50] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input24
[  205.463498][   T50] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:23> initialized
[  205.467490][ T8577] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  205.487444][ T5823] usb 7-1: device descriptor read/64, error -32
[  206.281810][ T8628] IPv6: A: Disabled Multicast RS
[  206.395081][   T29] usb 7-1: USB disconnect, device number 22
[  206.457615][ T8633] FAULT_INJECTION: forcing a failure.
[  206.457615][ T8633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.464427][ T8633] CPU: 2 UID: 0 PID: 8633 Comm: syz.0.689 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  206.464447][ T8633] Tainted: [L]=SOFTLOCKUP
[  206.464451][ T8633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  206.464458][ T8633] Call Trace:
[  206.464462][ T8633]  <TASK>
[  206.464468][ T8633]  dump_stack_lvl+0x100/0x190
[  206.464488][ T8633]  should_fail_ex.cold+0x5/0xa
[  206.464501][ T8633]  _copy_to_user+0x32/0xd0
[  206.464520][ T8633]  simple_read_from_buffer+0xcb/0x170
[  206.464540][ T8633]  proc_fail_nth_read+0x1af/0x230
[  206.464558][ T8633]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  206.464574][ T8633]  ? rw_verify_area+0xce/0x6d0
[  206.464591][ T8633]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  206.464606][ T8633]  vfs_read+0x1e4/0xb40
[  206.464618][ T8633]  ? __pfx_vfs_read+0x10/0x10
[  206.464639][ T8633]  ? find_held_lock+0x2b/0x80
[  206.464656][ T8633]  ? __fget_files+0x215/0x3d0
[  206.464670][ T8633]  ? __fget_files+0x21f/0x3d0
[  206.464683][ T8633]  ksys_read+0x12a/0x250
[  206.464693][ T8633]  ? __pfx_ksys_read+0x10/0x10
[  206.464707][ T8633]  do_int80_emulation+0x14b/0x720
[  206.464729][ T8633]  asm_int80_emulation+0x1a/0x20
[  206.464741][ T8633] RIP: 0023:0xf71d74eb
[  206.464751][ T8633] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  206.464761][ T8633] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  206.464778][ T8633] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0
[  206.464786][ T8633] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  206.464792][ T8633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  206.464798][ T8633] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  206.464805][ T8633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  206.464818][ T8633]  </TASK>
[  207.502817][ T8646] fuse: Unknown parameter '0x0000000000000003'
[  207.509756][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.516470][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.637860][ T8594] imon:send_packet: task interrupted
[  207.637947][ T8594] imon:send_packet: packet tx failed (-512)
[  207.639011][ T8594] imon:vfd_write: send packet #0 failed
[  207.747269][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.693'.
[  207.764681][ T8648] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  207.766999][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  207.770368][ T8648] vhci_hcd vhci_hcd.0: Device attached
[  207.896730][   T10] usb 6-1: USB disconnect, device number 23
[  207.962379][ T8651] vhci_hcd: connection closed
[  207.963375][ T8654] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  207.964978][ T5808] vhci_hcd vhci_hcd.2: stop threads
[  207.972830][ T5808] vhci_hcd vhci_hcd.2: release socket
[  207.975147][ T5808] vhci_hcd vhci_hcd.2: disconnect device
[  208.017566][   T50] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  208.020263][   T50] usb 41-1: enqueue for inactive port 0
[  208.064373][ T8657] FAULT_INJECTION: forcing a failure.
[  208.064373][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.068650][ T8657] CPU: 2 UID: 0 PID: 8657 Comm: syz.0.695 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.068669][ T8657] Tainted: [L]=SOFTLOCKUP
[  208.068673][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  208.068680][ T8657] Call Trace:
[  208.068684][ T8657]  <TASK>
[  208.068690][ T8657]  dump_stack_lvl+0x100/0x190
[  208.068709][ T8657]  should_fail_ex.cold+0x5/0xa
[  208.068722][ T8657]  _copy_from_iter+0x1f4/0x1690
[  208.068743][ T8657]  ? __asan_memset+0x23/0x50
[  208.068756][ T8657]  ? __pfx__copy_from_iter+0x10/0x10
[  208.068772][ T8657]  ? __pfx___alloc_skb+0x10/0x10
[  208.068811][ T8657]  netlink_sendmsg+0x808/0xda0
[  208.068828][ T8657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.068843][ T8657]  ? apparmor_socket_sendmsg+0x15b/0x270
[  208.068857][ T8657]  ____sys_sendmsg+0xa4d/0xbe0
[  208.068868][ T8657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.068881][ T8657]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.068899][ T8657]  ___sys_sendmsg+0x190/0x1e0
[  208.068911][ T8657]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.068929][ T8657]  ? find_held_lock+0x2b/0x80
[  208.068952][ T8657]  __sys_sendmsg+0x160/0x210
[  208.068968][ T8657]  ? __pfx___sys_sendmsg+0x10/0x10
[  208.068987][ T8657]  ? __pfx_ksys_write+0x10/0x10
[  208.069001][ T8657]  __do_fast_syscall_32+0xe7/0x970
[  208.069019][ T8657]  ? lockdep_hardirqs_on+0x78/0x100
[  208.069034][ T8657]  do_fast_syscall_32+0x32/0x70
[  208.069050][ T8657]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  208.069064][ T8657] RIP: 0023:0xf709efec
[  208.069079][ T8657] Code: Unable to access opcode bytes at 0xf709efc2.
[  208.069084][ T8657] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  208.069094][ T8657] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001200
[  208.069101][ T8657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  208.069107][ T8657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  208.069113][ T8657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  208.069119][ T8657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  208.069132][ T8657]  </TASK>
[  208.134584][   T50] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  208.262289][ T8660] FAULT_INJECTION: forcing a failure.
[  208.262289][ T8660] name failslab, interval 1, probability 0, space 0, times 0
[  208.268953][ T8660] CPU: 3 UID: 0 PID: 8660 Comm: syz.0.696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.268982][ T8660] Tainted: [L]=SOFTLOCKUP
[  208.268989][ T8660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  208.268999][ T8660] Call Trace:
[  208.269006][ T8660]  <TASK>
[  208.269013][ T8660]  dump_stack_lvl+0x100/0x190
[  208.269042][ T8660]  should_fail_ex.cold+0x5/0xa
[  208.269062][ T8660]  should_failslab+0xc2/0x120
[  208.269086][ T8660]  kmem_cache_alloc_noprof+0x91/0x6a0
[  208.269106][ T8660]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  208.269125][ T8660]  ? __lock_acquire+0x49f/0x1a40
[  208.269140][ T8660]  ? sctp_get_port_local+0x828/0x1630
[  208.269163][ T8660]  sctp_get_port_local+0x828/0x1630
[  208.269182][ T8660]  ? __pfx_sctp_get_port_local+0x10/0x10
[  208.269212][ T8660]  ? sctp_bind_addr_match+0x19d/0x300
[  208.269237][ T8660]  sctp_do_bind+0x2b9/0x760
[  208.269259][ T8660]  sctp_connect_new_asoc+0x5e7/0x770
[  208.269280][ T8660]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  208.269305][ T8660]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  208.269349][ T8660]  sctp_sendmsg+0x1743/0x22e0
[  208.269365][ T8660]  ? __pfx___might_resched+0x10/0x10
[  208.269387][ T8660]  ? __pfx_sctp_sendmsg+0x10/0x10
[  208.269407][ T8660]  ? aa_sk_perm+0x309/0xaa0
[  208.269467][ T8660]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  208.269487][ T8660]  ? __pfx_sctp_sendmsg+0x10/0x10
[  208.269508][ T8660]  inet_sendmsg+0x11c/0x140
[  208.269537][ T8660]  ____sys_sendmsg+0x9c9/0xbe0
[  208.269556][ T8660]  ? __pfx_inet_sendmsg+0x10/0x10
[  208.269584][ T8660]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.269606][ T8660]  ? _kstrtoull+0x13c/0x1f0
[  208.269630][ T8660]  ? __pfx__kstrtoull+0x10/0x10
[  208.269650][ T8660]  ___sys_sendmsg+0x190/0x1e0
[  208.269670][ T8660]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.269687][ T8660]  ? __lock_acquire+0x49f/0x1a40
[  208.269730][ T8660]  __sys_sendmmsg+0x309/0x440
[  208.269756][ T8660]  ? __pfx___sys_sendmmsg+0x10/0x10
[  208.269780][ T8660]  ? find_held_lock+0x2b/0x80
[  208.269806][ T8660]  ? __mutex_unlock_slowpath+0x35d/0x930
[  208.269847][ T8660]  ? fput+0x79/0x100
[  208.269871][ T8660]  ? ksys_write+0x1ac/0x250
[  208.269893][ T8660]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  208.269914][ T8660]  ? lockdep_hardirqs_on+0x78/0x100
[  208.269939][ T8660]  __do_fast_syscall_32+0xe7/0x970
[  208.269967][ T8660]  ? lockdep_hardirqs_on+0x78/0x100
[  208.269991][ T8660]  do_fast_syscall_32+0x32/0x70
[  208.270015][ T8660]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  208.270038][ T8660] RIP: 0023:0xf709efec
[  208.270060][ T8660] Code: Unable to access opcode bytes at 0xf709efc2.
[  208.270067][ T8660] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  208.270085][ T8660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880
[  208.270096][ T8660] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  208.270105][ T8660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  208.270115][ T8660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  208.270124][ T8660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  208.270148][ T8660]  </TASK>
[  208.419788][ T8662] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.430160][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.435019][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.461284][ T8662] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  208.640780][ T8676] sctp: [Deprecated]: syz.2.701 (pid 8676) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.640780][ T8676] Use struct sctp_sack_info instead
[  208.648177][ T8664] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  208.663590][ T8676] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  209.164717][   T41] audit: type=1800 audit(1786321476.699:38): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.703" name="memory_backed" dev="configfs" ino=17889 res=0 errno=0
[  209.174707][   T41] audit: type=1800 audit(1786321476.719:39): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.703" name="power" dev="configfs" ino=17890 res=0 errno=0
[  209.219992][ T8685] null_blk: disk nullb1 created
[  209.234236][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'.
[  209.293352][ T8686] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[  209.359389][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'.
[  209.535100][   T41] audit: type=1800 audit(1786321477.069:40): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.705" name="/newroot/175" dev="tmpfs" ino=997 res=0 errno=0
[  210.922602][ T8734] 
[  210.923706][ T8734] ======================================================
[  210.926585][ T8734] WARNING: possible circular locking dependency detected
[  210.929503][ T8734] syzkaller #0 Tainted: G             L     
[  210.932171][ T8734] ------------------------------------------------------
[  210.935062][ T8734] syz.2.716/8734 is trying to acquire lock:
[  210.937540][ T8734] ffff888013c2a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  210.941425][ T8734] 
[  210.941425][ T8734] but task is already holding lock:
[  210.944504][ T8734] ffff88802aec1860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[  210.947946][ T8734] 
[  210.947946][ T8734] which lock already depends on the new lock.
[  210.947946][ T8734] 
[  210.952090][ T8734] 
[  210.952090][ T8734] the existing dependency chain (in reverse order) is:
[  210.955788][ T8734] 
[  210.955788][ T8734] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[  210.958453][ T8734]        lock_acquire+0x1b9/0x370
[  210.960109][ T8734]        __mutex_lock+0x1a4/0x1bd0
[  210.961996][ T8734]        anon_pipe_write+0x25e/0x1d90
[  210.964143][ T8734]        __kernel_write_iter+0x6bb/0x930
[  210.966378][ T8734]        __kernel_write+0xf6/0x140
[  210.968471][ T8734]        autofs_notify_daemon+0x50d/0xd90
[  210.970801][ T8734]        autofs_wait+0x10fd/0x1b50
[  210.972882][ T8734]        autofs_mount_wait+0x132/0x3b0
[  210.975080][ T8734]        autofs_d_automount+0x490/0x950
[  210.977294][ T8734]        __traverse_mounts+0x1b9/0x8a0
[  210.979456][ T8734]        step_into_slowpath+0xb7e/0xf90
[  210.981668][ T8734]        path_lookupat+0x58b/0xc40
[  210.983720][ T8734]        filename_lookup+0x202/0x590
[  210.985807][ T8734]        do_fchownat+0xe6/0x1f0
[  210.987833][ T8734]        __ia32_sys_lchown16+0xe6/0x120
[  210.987859][ T8734]        __do_fast_syscall_32+0xe7/0x970
[  210.991918][ T8734]        do_fast_syscall_32+0x32/0x70
[  210.994113][ T8734]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  210.996810][ T8734] 
[  210.996810][ T8734] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  210.999865][ T8734]        lock_acquire+0x1b9/0x370
[  210.999888][ T8734]        __mutex_lock+0x1a4/0x1bd0
[  210.999916][ T8734]        autofs_notify_daemon+0x4f8/0xd90
[  210.999938][ T8734]        autofs_wait+0x10fd/0x1b50
[  210.999954][ T8734]        autofs_mount_wait+0x132/0x3b0
[  210.999969][ T8734]        autofs_d_automount+0x490/0x950
[  210.999985][ T8734]        __traverse_mounts+0x1b9/0x8a0
[  211.000005][ T8734]        step_into_slowpath+0xb7e/0xf90
[  211.000030][ T8734]        path_lookupat+0x58b/0xc40
[  211.000055][ T8734]        filename_lookup+0x202/0x590
[  211.000069][ T8734]        kern_path+0x37/0x50
[  211.000082][ T8734]        lookup_bdev+0xd8/0x280
[  211.000114][ T8734]        resume_store+0x1d6/0x460
[  211.000137][ T8734]        kobj_attr_store+0x58/0x80
[  211.000153][ T8734]        sysfs_kf_write+0xf2/0x150
[  211.000177][ T8734]        kernfs_fop_write_iter+0x3e0/0x5f0
[  211.000196][ T8734]        vfs_write+0x6ac/0x1050
[  211.000211][ T8734]        ksys_write+0x12a/0x250
[  211.000227][ T8734]        __do_fast_syscall_32+0xe7/0x970
[  211.000253][ T8734]        do_fast_syscall_32+0x32/0x70
[  211.000279][ T8734]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  211.000301][ T8734] 
[  211.000301][ T8734] -> #0 (&of->mutex){+.+.}-{4:4}:
[  211.000330][ T8734]        check_prev_add+0xeb/0xe60
[  211.000360][ T8734]        __lock_acquire+0x136c/0x1a40
[  211.000379][ T8734]        lock_acquire+0x1b9/0x370
[  211.000396][ T8734]        __mutex_lock+0x1a4/0x1bd0
[  211.000421][ T8734]        kernfs_fop_write_iter+0x2c2/0x5f0
[  211.000443][ T8734]        iter_file_splice_write+0x830/0x10b0
[  211.000463][ T8734]        do_splice+0x109c/0x1f90
[  211.000482][ T8734]        __do_splice+0x33b/0x370
[  211.000500][ T8734]        __ia32_sys_splice+0x189/0x250
[  211.000519][ T8734]        __do_fast_syscall_32+0xe7/0x970
[  211.000546][ T8734]        do_fast_syscall_32+0x32/0x70
[  211.000570][ T8734]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  211.000592][ T8734] 
[  211.000592][ T8734] other info that might help us debug this:
[  211.000592][ T8734] 
[  211.000598][ T8734] Chain exists of:
[  211.000598][ T8734]   &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex
[  211.000598][ T8734] 
[  211.000630][ T8734]  Possible unsafe locking scenario:
[  211.000630][ T8734] 
[  211.000635][ T8734]        CPU0                    CPU1
[  211.000640][ T8734]        ----                    ----
[  211.000646][ T8734]   lock(&pipe->mutex);
[  211.000659][ T8734]                                lock(&sbi->pipe_mutex);
[  211.000673][ T8734]                                lock(&pipe->mutex);
[  211.000687][ T8734]   lock(&of->mutex);
[  211.000699][ T8734] 
[  211.000699][ T8734]  *** DEADLOCK ***
[  211.000699][ T8734] 
[  211.000704][ T8734] 2 locks held by syz.2.716/8734:
[  211.000715][ T8734]  #0: ffff888024c32450 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[  211.000765][ T8734]  #1: ffff88802aec1860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[  211.000807][ T8734] 
[  211.000807][ T8734] stack backtrace:
[  211.000820][ T8734] CPU: 3 UID: 0 PID: 8734 Comm: syz.2.716 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  211.000845][ T8734] Tainted: [L]=SOFTLOCKUP
[  211.000852][ T8734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  211.000866][ T8734] Call Trace:
[  211.000873][ T8734]  <TASK>
[  211.000882][ T8734]  dump_stack_lvl+0x100/0x190
[  211.000903][ T8734]  print_circular_bug.cold+0x178/0x1c7
[  211.000937][ T8734]  check_noncircular+0x146/0x160
[  211.000970][ T8734]  check_prev_add+0xeb/0xe60
[  211.001000][ T8734]  __lock_acquire+0x136c/0x1a40
[  211.001018][ T8734]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  211.001043][ T8734]  lock_acquire+0x1b9/0x370
[  211.001059][ T8734]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  211.001082][ T8734]  ? __pfx___might_resched+0x10/0x10
[  211.001121][ T8734]  __mutex_lock+0x1a4/0x1bd0
[  211.001147][ T8734]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  211.001171][ T8734]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  211.001196][ T8734]  ? __asan_memcpy+0x3c/0x60
[  211.001219][ T8734]  ? __pfx___mutex_lock+0x10/0x10
[  211.001247][ T8734]  ? __pfx__copy_from_iter+0x10/0x10
[  211.001276][ T8734]  ? __kmalloc_noprof+0x343/0x820
[  211.001299][ T8734]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  211.001322][ T8734]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  211.001342][ T8734]  kernfs_fop_write_iter+0x2c2/0x5f0
[  211.001364][ T8734]  iter_file_splice_write+0x830/0x10b0
[  211.001389][ T8734]  ? __pfx_iter_file_splice_write+0x10/0x10
[  211.001439][ T8734]  ? __pfx___might_resched+0x10/0x10
[  211.001467][ T8734]  ? tomoyo_path_number_perm+0x28f/0x580
[  211.001500][ T8734]  ? __pfx_iter_file_splice_write+0x10/0x10
[  211.001521][ T8734]  do_splice+0x109c/0x1f90
[  211.001542][ T8734]  ? __lock_acquire+0x49f/0x1a40
[  211.001561][ T8734]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  211.001590][ T8734]  ? __pfx_do_splice+0x10/0x10
[  211.001608][ T8734]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  211.001627][ T8734]  ? find_held_lock+0x2b/0x80
[  211.001650][ T8734]  __do_splice+0x33b/0x370
[  211.001670][ T8734]  ? __pfx___do_splice+0x10/0x10
[  211.001693][ T8734]  __ia32_sys_splice+0x189/0x250
[  211.001714][ T8734]  __do_fast_syscall_32+0xe7/0x970
[  211.001743][ T8734]  do_fast_syscall_32+0x32/0x70
[  211.001770][ T8734]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  211.001793][ T8734] RIP: 0023:0xf700efec
[  211.001817][ T8734] Code: Unable to access opcode bytes at 0xf700efc2.
[  211.001825][ T8734] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000139
[  211.001842][ T8734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  211.001855][ T8734] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2
[  211.001867][ T8734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  211.001878][ T8734] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  211.001890][ T8734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  211.001908][ T8734]  </TASK>
[  211.067534][  T851] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  211.141532][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.716'.
[  211.478073][  T851] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  211.505902][  T851] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  211.509313][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.512154][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.515519][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.518345][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.521160][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.524507][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.527222][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.530075][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.533468][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.536189][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.539074][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.542473][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.545344][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.548265][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.551706][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.554663][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.557564][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.560947][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.563940][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.566786][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.570201][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.572978][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  211.575822][  T851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  211.579274][  T851] usb 8-1: config 0 interface 0 has no altsetting 0
[  211.582761][  T851] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  211.585429][  T851] usb 8-1: Product: syz
[  211.586736][  T851] usb 8-1: Manufacturer: syz
[  211.588280][  T851] usb 8-1: SerialNumber: syz
[  211.590829][  T851] usb 8-1: config 0 descriptor??
[  211.594548][  T851] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  211.799869][   T50] usb 8-1: USB disconnect, device number 22
[  211.804656][   T50] yurex 8-1:0.0: USB YUREX #0 now disconnected